Wireshark-users: [Wireshark-users] HTTP GET /(none) ??
Hello all,
When accessing a website one of the http get commands send by the client is the get/none command of frame 1700 below. The http response is obviously a 404 not found. Has anyone else encountered something similar and why is the client trying to reset port 3612 repeatedly?
Similar to the above problem, I encounter cases for the same website where the client requests a resource that is available (I can confirm it is available by typing the URI myself) but the server replies again with a 404 not found. This does not appear for the same resource every time and the client has the same behaviour; tries to reset the port exactly the same way as with the above get none problem.
Any help you could provide to clarify this would be really appreciated!
Thanks Aris
1628 14:55:47.904156 10.35.97.131 212.58.253.72 TCP 3612 > http [ACK] Seq=769 Ack=45960 Win=128078 Len=0 1700 14:55:48.550640 10.35.97.131 212.58.253.72 HTTP GET /(none) HTTP/1.1 1704 14:55:48.682476 212.58.253.72 10.35.97.131 TCP http > 3612 [ACK] Seq=45960 Ack=1503 Win=67160 Len=0 1705 14:55:48.756695 212.58.253.72 10.35.97.131 TCP [TCP segment of a reassembled PDU] 1706 14:55:48.795757 212.58.253.72 10.35.97.131 TCP [TCP segment of a reassembled PDU] 1707 14:55:48.795757 10.35.97.131 212.58.253.72 TCP 3612 > http [ACK] Seq=1503 Ack=48880 Win=128480 Len=0 1708 14:55:48.795757 10.35.97.131 212.58.253.72 TCP 3612 > http [RST, ACK] Seq=1503 Ack=48880 Win=0 Len=0 1710 14:55:48.826031 212.58.253.72 10.35.97.131 TCP [TCP segment of a reassembled PDU] 1711 14:55:48.826031 10.35.97.131 212.58.253.72 TCP 3612 > http [RST] Seq=1503 Len=0 1712 14:55:48.856304 212.58.253.72 10.35.97.131 TCP [TCP segment of a reassembled PDU] 1713 14:55:48.856304 10.35.97.131 212.58.253.72 TCP 3612 > http [RST] Seq=1503 Len=0 1714 14:55:48.858257 212.58.253.72 10.35.97.131 TCP [TCP segment of a reassembled PDU] 1715 14:55:48.858257 10.35.97.131 212.58.253.72 TCP 3612 > http [RST] Seq=1503 Len=0 1716 14:55:48.862164 212.58.253.72 10.35.97.131 HTTP HTTP/1.0 404 Not Found (text/html) 1717 14:55:48.862164 10.35.97.131 212.58.253.72 TCP 3612 > http [RST] Seq=1503 Len=0 Company Registered Number: 02382161 Registered Office Address: Hatfield Business Park, Hatfield, Hertfordshire, AL10 9BW Registered in England and Wales NOTICE AND DISCLAIMER This email (including attachments) is confidential. If you are not the intended recipient, notify the sender immediately, delete this email from your system and do not disclose or use for any purpose. |
- Follow-Ups:
- Re: [Wireshark-users] HTTP GET /(none) ??
- From: Stephen Fisher
- Re: [Wireshark-users] HTTP GET /(none) ??
- From: Andrew Hood
- Re: [Wireshark-users] HTTP GET /(none) ??
- Prev by Date: [Wireshark-users] SYN Retransmissions
- Next by Date: Re: [Wireshark-users] SYN Retransmissions
- Previous by thread: Re: [Wireshark-users] TPKT-Wrapping of H.248 Messages
- Next by thread: Re: [Wireshark-users] HTTP GET /(none) ??
- Index(es):