Timeline for Firewalls and ACKs
Current License: CC BY-SA 3.0
5 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Mar 12, 2015 at 21:14 | vote | accept | Rafe | ||
| Mar 12, 2015 at 21:14 | vote | accept | Rafe | ||
| Mar 12, 2015 at 21:14 | |||||
| Mar 11, 2015 at 17:51 | comment | added | Rafe | After diving into it further, I think it is an XMPP request over port 443. There is no XMPP response from the server that I can tell. I believe SSL traffic is supposed be taking place at some point but is hard to say without a packet capture on the other side of the firewall. One of the things I forgot to add, the capture was taken using a tap on the cable coming out of the Windows 7 computer. It is very difficult for me to get approval for a packet capture outside of the firewall. So, I don't know if the response is getting blocked. | |
| Mar 10, 2015 at 4:20 | comment | added | James Shewey | To this end, perhaps he could provide more details about those two packets by expanding the Secure Socket Layer session. New handshakes have sizes of 268 bytes or less - probably because they do not have a session ID. I think the resumed sessions are larger. The traffic does get identified by Wireshark as SSL, which is interesting. | |
| Mar 9, 2015 at 7:22 | history | answered | Eddie | CC BY-SA 3.0 |