THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question
0

Read Header packet

Hi I very pleased join wireshark site I need to read this packet and what does mean 

HEAD /edgedl/release2/chrome_component/WLXuT3C8qMRAzKMzkDxKcg_1622/AL833BXt5P2O9cahlh2YCHI?cms_redirect=yes&mh=1C&mip=37.8.11.217&mm=28&mn=sn-25auxa-b15l&ms=nvh&mt=1593896651&mv=m&mvi=1&pl=20&shardbypass=yes HTTP/1.1\r\n
    [ [truncated]Expert Info (Chat/Sequence): HEAD /edgedl/release2/chrome_component/WLXuT3C8qMRAzKMzkDxKcg_1622/AL833BXt5P2O9cahlh2YCHI?cms_redirect=yes&mh=1C&mip=37.8.11.217&mm=28&mn=sn-25auxa-b15l&ms=nvh&mt=1593896651&mv=m&mvi=1&pl=20&shard]
        [HEAD /edgedl/release2/chrome_component/WLXuT3C8qMRAzKMzkDxKcg_1622/AL833BXt5P2O9cahlh2YCHI?cms_redirect=yes&mh=1C&mip=37.8.11.217&mm=28&mn=sn-25auxa-b15l&ms=nvh&mt=1593896651&mv=m&mvi=1&pl=20&shardbypass=yes HTTP/1.1\r\n]
        [Severity level: Chat]
        [Group: Sequence]
    Request Method: HEAD
    Request URI: /edgedl/release2/chrome_component/WLXuT3C8qMRAzKMzkDxKcg_1622/AL833BXt5P2O9cahlh2YCHI?cms_redirect=yes&mh=1C&mip=37.8.11.217&mm=28&mn=sn-25auxa-b15l&ms=nvh&mt=1593896651&mv=m&mvi=1&pl=20&shardbypass=yes
        Request URI Path: /edgedl/release2/chrome_component/WLXuT3C8qMRAzKMzkDxKcg_1622/AL833BXt5P2O9cahlh2YCHI
        Request URI Query: cms_redirect=yes&mh=1C&mip=37.8.11.217&mm=28&mn=sn-25auxa-b15l&ms=nvh&mt=1593896651&mv=m&mvi=1&pl=20&shardbypass=yes
            Request URI Query Parameter: cms_redirect=yes
            Request URI Query Parameter: mh=1C
            Request URI Query Parameter: mip=37.8.11.217
            Request URI Query Parameter: mm=28
            Request URI Query Parameter: mn=sn-25auxa-b15l
            Request URI Query Parameter: ms=nvh
            Request URI Query Parameter: mt=1593896651
            Request URI Query Parameter: mv=m
            Request URI Query Parameter: mvi=1
            Request URI Query Parameter: pl=20
            Request URI Query Parameter: shardbypass=yes
    Request Version: HTTP/1.1
The Admiral's avatar
1
The Admiral
asked 2020-07-04 23:14:15 +0000
grahamb's avatar
23.8k
grahamb
updated 2020-07-05 15:12:44 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

0

That's an HTTP HEAD request with a bunch of additional query parameters. Here's a description of a HEAD request from MDN.

grahamb's avatar
23.8k
grahamb
answered 2020-07-05 15:15:59 +0000
edit flag offensive 0 remove flag delete link
more

Comments

Thanks . but what about _cms_redirect=yes&mh=1C&mip=37.8.11.217&mm=28&mn=sn-25auxa-b15l&ms=nvh&mt=1593896651&mv=m&mvi=1&pl=20&shardbypass=yes

The Admiral's avatar The Admiral (2020-07-06 20:29:43 +0000) edit
more
  • delete

Those are the query parameters as shown in the list of "Request URI Query Parameter" elements. Query parameters follow the URI after a ? and are separated by a & and Wireshark conveniently breaks them out for you.

Those parameters (name and value) only mean something in the context of the original application, nothing more can be said about them here.

grahamb's avatar grahamb (2020-07-06 20:46:29 +0000) edit
more
  • delete
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer