PATH

Welcome to PATH 2018!


A PATH script, is, in essence, an ASCII representation of a binary network capture, interspersed with directives that are meaningful to the PATH driver.

The directives in the PATH script file are all of the form

\X ... \

on lines by themselves, where X is one of the following (combinations of) letters.

DirectiveDescription
A:BStart of a response
A:EEnd of response
BBreak into Single Stepping
CComment
D:BStart of message to send
D:EEnd of message to send
D:RResynchronisation point
EEnd Point Re-mapping
G(Conditional) Goto Label or RESYNC point
HSSL specification details
IInclude
LGoto Target Label
MOpen socket connection
SStart of event
TTime event
WWait (and set think time)
XClose socket connection

After the initial letter there may be further sub-field values. These are delimited with ':' or ';', depending on which directives they are. ':' can be embedded if necessary by escaping it with '\'.

In between the directives will be an ASCII representation of binary data, in which printable characters represent themselves, and everything else is represented as a sequence of Hexadecimal characters in single quotes up to a backslash-escaped line feed.

The representation can be unambiguously turned back to binary data. Our command line utility 'ascbin' (which also strips data out of IBM VSAM and ADABAS data files) demonstrates this.

If you feed binary data into 'ascbin -d' you get its ASCII representation.

If you feed valid ASCII representation into 'ascbin -e', you get back the binary representation.

Thus

ascbin -d < e2tiny.gif | ascbin -e >duplicate.gif

should give you a bit-perfect copy of e2tiny.gif.

The default behaviour of the driver is to:

  • Read and act on the directives.
  • When it encounters a D:B/D:E pair, convert the data between them into binary, send it as directed, and wait for the response before proceeding.

The behaviour during send/receive processing may be further altered by a substitution engine that is controlled by sub-directives entered on the same line as a \D:B directive, before the trailing '\'.

These consist of one of the following letters, followed by a name and 0, 1 or 2 pattern specs.

LetterDescriptionPattern spec count
OOrdinary2
CCookie edit2
EError response identification1
FFreeze substitution0
GGood response idenfication1
HHexadecimal substitution2
OOrdinary substitutionO
PPreserved cookie1
RRemove substitution0
SSuspend substitution0
TThaw substitution0
UURL-escaped substitution2
YRestore a suspended substitution0

A pattern spec consists, at a minimum, of a count of strings (up to 5) followed by that number of ':' delimited strings.

The engine searches for each string in turn to find a match. It matches if it finds all the patterns in order.

When there are two patterns, there will also be substitution directives. These are two numbers:

  • An offset to the value of interest.
  • Its length.

A length of '0' is an instruction to the driver to work it out for itself. Values are either wrapped in quotes, or run from the offset to one of a collection of delimiter characters. There are sensible defaults, but they can be augmented or over-ridden by setting them in the E2_DEFAULT_SEP_EXP environment variable.

The difference between O, C, U and H directives are as follows.

O takes a value found by the first pattern acting on a response, and substitutes it when the second pattern is seen in the outgoing.

C is the same, but only acts on Cookies (which are ignored by the O directive).

U is the same, but with the distinction that the value substituted is the URL-encoded version of the value seen. This is often applicable for values found in Javascript fragments.

H is the same, but the pattern sought is specified with hexadecimal strings. It is used when the value being substituted is binary (as it may well be with Java or .NET serialized data).

Anything more complicated requires the use of the language used to establish conditions for GOTOS. This can create arbitrary values by string concatenation and arithmetic operations, and can read and write the values searched for or substituted. Uses include substituting the time of day, as a date or seconds or milliseconds or whatever since epoch.

This model turns out to be very powerful in practice. The __VIEWSTATE typically found in applications developed with .NET, and which may change on every page, can frequently be accurately tracked by a single judicious directive placed at the top of the script.

Cookies are processed by default as follows.

Cookies captured with the script are ignored.

Cookies are captured when the application issues a 'Set-Cookie:', and then returned.

However, sometimes Cookies are not set by 'Set-Cookie:' from the server; they are set by Javascript in the browser. These cookies must be 'preserved'. This is the use of the P sub-directive.

They may then, of course, need further adjusting with the C sub-directive; see above.

Sometimes, once we have a value, we don't want to search for it any more.

This is the purpose of the F (Freeze) sub-directive.

T (Thaw) undoes this.

If we want to temporarily suspend both the search and the substitution, we use S (Suspend). We would do this if we encountered essentially a menu page with a list of URL's incorporating variable elements, which were then invoked in turn by the transaction.

Y (Yank) undoes this operation.

R (Remove) gets rid of the thing entirely, saving a miniscule quantity of memory.

All cookies and substitutions are cleared when a '\D:R\' is encountered.

In response to certain error conditions, the driver will give up, and search forward to the next \D:R\, and then attempt to start again.

The special Goto label RESYNC allows the script to decide to do this. We might do this to get users of a web-site to abandon at various points without scripting all the different abandon possibilities individually.

The visualisation below expands on the above description for a real script, which can be seen in its raw state here.

Feel free to explore!

Wait 5 seconds (and set the think time to this value)

SSL Connection Details

Cross ReferenceKey FilePassword
1client.pempassword

End Point Mapping capture connect from (192.168.0.101,35736) mapped to (192.168.0.101,35736)

End Point Mapping capture listen on (213.198.100.21,443) mapped to (213.198.100.21,443)

SSL Connection Details Reference: 1

Goto nothing IF nothing exists AND

LIMIT=sysdate + 500
evaluates TRUE

Label top (a potential target for a GOTO)

Start Timer

IDDescription
A11. Load URL

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

Operation/TypeNameIncoming MatchUpdate Match
Preserved cookierva_cookie
Patterns
rva
Preserved cookieurl_cookie
Patterns
URL_History
Preserved cookieactive_cookie
Patterns
ActiveSection
Error response identificationstacktrace
Patterns
Good response idenficationloaded
Patterns
E2 Systems
Ordinary substitutionmodalroot
Patterns
SC.mainScreenID =
OffsetLength
180
Patterns
modalRoot=
OffsetLength
100
URL-escaped substitutionviewstate
Patterns
OffsetLength
460
Patterns
__VIEWSTATE=
OffsetLength
120

Data

GET /site/index.html HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

Operation/TypeNameIncoming MatchUpdate Match
Suspend substitutionviewstate

Data

GET /site/Javascript/URLHistory.js HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: */*'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/index.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/Images/clear.gif HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: image/png,image/*;q=0.8,*/*;q=0.5'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/index.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/Images/thought.gif HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: image/png,image/*;q=0.8,*/*;q=0.5'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/index.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/Images/nav_home.gif HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: image/png,image/*;q=0.8,*/*;q=0.5'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/index.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/Images/nav_services.gif HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: image/png,image/*;q=0.8,*/*;q=0.5'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/index.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/Images/nav_prod.gif HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: image/png,image/*;q=0.8,*/*;q=0.5'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/index.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/Images/nav_research.gif HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: image/png,image/*;q=0.8,*/*;q=0.5'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/index.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/Images/nav_about.gif HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: image/png,image/*;q=0.8,*/*;q=0.5'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/index.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/Images/nav_home_on.gif HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: image/png,image/*;q=0.8,*/*;q=0.5'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/index.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/Images/linkArrow_yellow.gif HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: image/png,image/*;q=0.8,*/*;q=0.5'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/index.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/Images/nav_volume.gif HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: image/png,image/*;q=0.8,*/*;q=0.5'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/index.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/Images/nav_hlthchk.gif HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: image/png,image/*;q=0.8,*/*;q=0.5'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/index.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/Images/nav_ta.gif HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: image/png,image/*;q=0.8,*/*;q=0.5'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/index.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/Images/backgd1.jpg HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: image/png,image/*;q=0.8,*/*;q=0.5'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/index.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/Images/nav_services_on.gif HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: image/png,image/*;q=0.8,*/*;q=0.5'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/index.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Record Timing A1

Start Timer

IDDescription
A2View Services

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/services.html HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/index.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/Javascript/URLHistory.js HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: */*'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/services.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/Javascript/TopNavigation.js HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: */*'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/clients.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/Javascript/NavCategories.js HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: */*'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/clients.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/css/english.css HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: text/css,*/*;q=0.1'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/clients.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/Images/topnav_pipe_on.gif HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: image/png,image/*;q=0.8,*/*;q=0.5'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/clients.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/Images/topnav_pipe_off.gif HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: image/png,image/*;q=0.8,*/*;q=0.5'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/clients.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/Images/e2tiny.gif HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: image/png,image/*;q=0.8,*/*;q=0.5'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/clients.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/Images/clear.gif HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: image/png,image/*;q=0.8,*/*;q=0.5'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/clients.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/Images/thought.gif HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: image/png,image/*;q=0.8,*/*;q=0.5'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/clients.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/Images/nav_home.gif HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: image/png,image/*;q=0.8,*/*;q=0.5'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/clients.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/Images/nav_services.gif HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: image/png,image/*;q=0.8,*/*;q=0.5'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/clients.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/Images/nav_prod.gif HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: image/png,image/*;q=0.8,*/*;q=0.5'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/clients.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/Images/nav_research.gif HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: image/png,image/*;q=0.8,*/*;q=0.5'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/clients.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/Images/nav_about.gif HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: image/png,image/*;q=0.8,*/*;q=0.5'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/clients.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/Images/nav_services_on.gif HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: image/png,image/*;q=0.8,*/*;q=0.5'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/clients.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/Images/arrow_breadcrumb.gif HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: image/png,image/*;q=0.8,*/*;q=0.5'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/clients.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/Images/show_en.gif HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: image/png,image/*;q=0.8,*/*;q=0.5'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/clients.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/Images/arrow_up.gif HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: image/png,image/*;q=0.8,*/*;q=0.5'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/clients.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/Images/hide_en.gif HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: image/png,image/*;q=0.8,*/*;q=0.5'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/clients.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/Images/arrow_down.gif HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: image/png,image/*;q=0.8,*/*;q=0.5'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/clients.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/Images/pretty0.jpg HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: image/png,image/*;q=0.8,*/*;q=0.5'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/clients.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/Images/quality.gif HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: image/png,image/*;q=0.8,*/*;q=0.5'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/clients.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/Images/grey_arrow.gif HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: image/png,image/*;q=0.8,*/*;q=0.5'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/clients.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/images/clear.gif HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: image/png,image/*;q=0.8,*/*;q=0.5'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/clients.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/Images/right_dots.gif HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: image/png,image/*;q=0.8,*/*;q=0.5'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/clients.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/Images/pretty1.jpg HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: image/png,image/*;q=0.8,*/*;q=0.5'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/clients.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Open channel from (192.168.0.101,35736) to (213.198.100.21,443)

Message from (192.168.0.101,35736) to (213.198.100.21,443)

(No scan specifications or directives)

Data

GET /site/Images/nav_about_on.gif HTTP/1.1'0D'\

Host: 213.198.100.21:7000'0D'\

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1pre) Gecko/20100531 SeaMonkey/2.0b1pre'0D'\

Accept: image/png,image/*;q=0.8,*/*;q=0.5'0D'\

Accept-Language: en-gb,en-us;q=0.7,en;q=0.3'0D'\

Accept-Encoding: gzip,deflate'0D'\

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7'0D'\

Keep-Alive: 300'0D'\

Connection: keep-alive'0D'\

Referer: http://213.198.100.21:7000/site/clients.html'0D'\

Cookie: '0D0A0D0A'\

Answer from (213.198.100.21,443) to (192.168.0.101,35736)

Data

Close connection from (192.168.0.101,35736) to (213.198.100.21,443)

Record Timing A3

Goto top IF top exists AND

LIMIT>sysdate
evaluates TRUE

Reset cookie cache etc.; script re-start point