21.01.2014/21:14:36 local/127.0.0.1 http://e.mail.ru/cgi-bin/getattach?file=test.doc&id=13902990150000000298;0;1&mode=attachment&channel=&bs=1710&bl=19970&ct=application/msword&cn=test.doc&cte=base64¬ype 0 784/1123 0 1041 "302 Found" З.1З.1 (Запись в кэш): .*21.01.2014/21:14:36 local/127.0.0.1 http://af.attachmail.ru/cgi-bin/readmsg/test.doc?rid=364109816792415836042304349873140136381&file=test.doc&id=13902990150000000298;0;1&mode=attachment&channel=&bs=1710&bl=19970&ct=application/msword&cn=test.doc&cte=base64¬ype 19968 19968/332 100% 653 "200 OK" З.1З.1 (Запись в кэш): .*21.01.2014/21:14:37 local/127.0.0.1 http://af.attachmail.ru/cgi-bin/readmsg/test.doc?rid=364109816792415836042304349873140136381&file=test.doc&id=13902990150000000298;0;1&mode=attachment&channel=&bs=1710&bl=19970&ct=application/msword&cn=test.doc&cte=base64¬ype?73512446167615963510399978986243 0 0/332 0 687 "200 OK HEAD" 21.01.2014/21:14:37 local/127.0.0.1 http://af.attachmail.ru/cgi-bin/readmsg/test.doc?rid=364109816792415836042304349873140136381&file=test.doc&id=13902990150000000298;0;1&mode=attachment&channel=&bs=1710&bl=19970&ct=application/msword&cn=test.doc&cte=base64¬ype?21851144424695298776736273380549 0 0/332 0 687 "200 OK HEAD"
21.01.14 21:14:36,404 # 14: Start connection from client21.01.14 21:14:36,406 # 14: Connection from 127.0.0.1:3255 to HC Version 1.00 RC3 (1.0.0.470)21.01.14 21:14:36,408 # 14: User name: local21.01.14 21:14:36,412 # 14: DNS resolve e.mail.ru --> 217.69.139.215 (From cache)21.01.14 21:14:36,414 # 14/31 >>> URL: http://e.mail.ru/cgi-bin/getattach?file=test.doc&id=13902990150000000298;0;1&mode=attachment&channel=&bs=1710&bl=19970&ct=application/msword&cn=test.doc&cte=base64¬ypeGET /cgi-bin/getattach?file=test.doc&id=13902990150000000298;0;1&mode=attachment&channel=&bs=1710&bl=19970&ct=application/msword&cn=test.doc&cte=base64¬ype HTTP/1.1Host: e.mail.ruUser-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.2.27) Gecko/20120216 Firefox/3.6.27Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8Accept-Language: ru-ru,ru;q=0.8,en-us;q=0.5,en;q=0.3Accept-Encoding: gzip,deflateAccept-Charset: windows-1251,utf-8;q=0.7,*;q=0.7Keep-Alive: 115Connection: keep-aliveReferer: http://e.mail.ru/message/13902990150000000298/Cookie: xxx21.01.14 21:14:36,418 # 14 <<< URL: http://e.mail.ru/cgi-bin/getattach?file=test.doc&id=13902990150000000298;0;1&mode=attachment&channel=&bs=1710&bl=19970&ct=application/msword&cn=test.doc&cte=base64¬ypeConnection to 217.69.139.215:8021.01.14 21:14:36,421 # 14: Outbound Connection, Local port: 325621.01.14 21:14:36,638 # 14 <<< URL: http://e.mail.ru/cgi-bin/getattach?file=test.doc&id=13902990150000000298;0;1&mode=attachment&channel=&bs=1710&bl=19970&ct=application/msword&cn=test.doc&cte=base64¬ypeHTTP/1.1 302 FoundServer: nginxDate: Tue, 21 Jan 2014 18:14:38 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-alivePragma: no-cacheCache-Control: privateLocation: http://af.attachmail.ru/cgi-bin/readmsg/test.doc?rid=364109816792415836042304349873140136381&file=test.doc&id=13902990150000000298;0;1&mode=attachment&channel=&bs=1710&bl=19970&ct=application/msword&cn=test.doc&cte=base64¬ypeX-Frame-Options: SAMEORIGINX-Host: f388.i.mail.ruX-XSS-Protection: 0Content-Security-Policy-Report-Only: default-src *.mail.ru *.imgsmail.ru *.attachmail.ru *.live.com *.youtube.com *.youtube.ru *.youtu.be *.rutube.ru *.vimeo.com *.smotri.com *.dailymotion.com *.rambler.ru *.ivi.ru *.videomore.ru *.scorecardresearch.com *.weborama.fr chromeinvoke://* chromeinvokeimmediate://* chromenull://*;script-src 'unsafe-inline' 'unsafe-eval' *.mail.ru *.imgsmail.ru *.yandex.ru * *.odnoklassniki.ru *.youtube.com *.dailymotion.com *.vimeo.com; img-src *; style-src 'unsafe-inline' *.mail.ru *.imgsmail.ru; font-src data: *.imgsmail.ru; report-uri https://cspreport.mail.ru/;Transfer-Encoding: chunked21.01.14 21:14:36,644 # 14: DNS resolve af.attachmail.ru --> 217.69.138.103 (From cache)21.01.14 21:14:36,647 # 14 <<< URL: http://af.attachmail.ru/cgi-bin/readmsg/test.doc?rid=364109816792415836042304349873140136381&file=test.doc&id=13902990150000000298;0;1&mode=attachment&channel=&bs=1710&bl=19970&ct=application/msword&cn=test.doc&cte=base64¬ypeConnection to 217.69.138.103:8021.01.14 21:14:37,451 # 14: Outbound Connection, Local port: 325721.01.14 21:14:37,454 # 14/32 >>> URL: http://af.attachmail.ru/cgi-bin/readmsg/test.doc?rid=364109816792415836042304349873140136381&file=test.doc&id=13902990150000000298;0;1&mode=attachment&channel=&bs=1710&bl=19970&ct=application/msword&cn=test.doc&cte=base64¬ypeGET /cgi-bin/readmsg/test.doc?rid=364109816792415836042304349873140136381&file=test.doc&id=13902990150000000298;0;1&mode=attachment&channel=&bs=1710&bl=19970&ct=application/msword&cn=test.doc&cte=base64¬ype HTTP/1.1Host: af.attachmail.ruUser-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.2.27) Gecko/20120216 Firefox/3.6.27Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8Accept-Language: ru-ru,ru;q=0.8,en-us;q=0.5,en;q=0.3Accept-Encoding: gzip,deflateAccept-Charset: windows-1251,utf-8;q=0.7,*;q=0.7Keep-Alive: 115Connection: keep-aliveReferer: http://e.mail.ru/message/13902990150000000298/21.01.14 21:14:37,458 # 14 <<< URL: http://af.attachmail.ru/cgi-bin/readmsg/test.doc?rid=364109816792415836042304349873140136381&file=test.doc&id=13902990150000000298;0;1&mode=attachment&channel=&bs=1710&bl=19970&ct=application/msword&cn=test.doc&cte=base64¬ypeHTTP/1.1 200 OKServer: nginx/1.2.3Date: Tue, 21 Jan 2014 18:14:39 GMTContent-Type: application/msword; name="test.doc"Content-Length: 19968Connection: keep-aliveP3P: CP="NON CUR OUR IND UNI INT"Content-Disposition: inline; filename*=UTF-8''test.docCache-Control: max-age=604800, must-revalidate, private, no-transformLast-Modified: Tue, 21 Jan 2014 18:14:39 GMT21.01.14 21:14:37,461 # 14: IdMappedPortTCP1OutboundDisconnect: StateReady, exit21.01.14 21:14:37,651 # 15: Start connection from client21.01.14 21:14:37,652 # 15: Connection from 127.0.0.1:3258 to HC Version 1.00 RC3 (1.0.0.470)21.01.14 21:14:37,653 # 15: User name: local21.01.14 21:14:37,654 # 15: DNS resolve af.attachmail.ru --> 217.69.138.103 (From cache)21.01.14 21:14:37,654 # 15/33 >>> URL: http://af.attachmail.ru/cgi-bin/readmsg/test.doc?rid=364109816792415836042304349873140136381&file=test.doc&id=13902990150000000298;0;1&mode=attachment&channel=&bs=1710&bl=19970&ct=application/msword&cn=test.doc&cte=base64¬ype?73512446167615963510399978986243HEAD /cgi-bin/readmsg/test.doc?rid=364109816792415836042304349873140136381&file=test.doc&id=13902990150000000298;0;1&mode=attachment&channel=&bs=1710&bl=19970&ct=application/msword&cn=test.doc&cte=base64¬ype?73512446167615963510399978986243 HTTP/1.1Host: af.attachmail.ruUser-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.2.27) Gecko/20120216 Firefox/3.6.27Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8Accept-Language: ru-ru,ru;q=0.8,en-us;q=0.5,en;q=0.3Accept-Encoding: gzip,deflateAccept-Charset: windows-1251,utf-8;q=0.7,*;q=0.7Keep-Alive: 115Connection: keep-aliveReferer: http://e.mail.ru/message/13902990150000000298/21.01.14 21:14:37,656 # 15 <<< URL: http://af.attachmail.ru/cgi-bin/readmsg/test.doc?rid=364109816792415836042304349873140136381&file=test.doc&id=13902990150000000298;0;1&mode=attachment&channel=&bs=1710&bl=19970&ct=application/msword&cn=test.doc&cte=base64¬ype?73512446167615963510399978986243Connection to 217.69.138.103:8021.01.14 21:14:37,657 # 16: Start connection from client21.01.14 21:14:37,658 # 16: Connection from 127.0.0.1:3259 to HC Version 1.00 RC3 (1.0.0.470)21.01.14 21:14:37,659 # 16: User name: local21.01.14 21:14:37,661 # 16: DNS resolve af.attachmail.ru --> 217.69.138.103 (From cache)21.01.14 21:14:37,662 # 16/34 >>> URL: http://af.attachmail.ru/cgi-bin/readmsg/test.doc?rid=364109816792415836042304349873140136381&file=test.doc&id=13902990150000000298;0;1&mode=attachment&channel=&bs=1710&bl=19970&ct=application/msword&cn=test.doc&cte=base64¬ype?21851144424695298776736273380549HEAD /cgi-bin/readmsg/test.doc?rid=364109816792415836042304349873140136381&file=test.doc&id=13902990150000000298;0;1&mode=attachment&channel=&bs=1710&bl=19970&ct=application/msword&cn=test.doc&cte=base64¬ype?21851144424695298776736273380549 HTTP/1.1Host: af.attachmail.ruUser-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.2.27) Gecko/20120216 Firefox/3.6.27Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8Accept-Language: ru-ru,ru;q=0.8,en-us;q=0.5,en;q=0.3Accept-Encoding: gzip,deflateAccept-Charset: windows-1251,utf-8;q=0.7,*;q=0.7Keep-Alive: 115Connection: keep-aliveReferer: http://e.mail.ru/message/13902990150000000298/21.01.14 21:14:37,664 # 16 <<< URL: http://af.attachmail.ru/cgi-bin/readmsg/test.doc?rid=364109816792415836042304349873140136381&file=test.doc&id=13902990150000000298;0;1&mode=attachment&channel=&bs=1710&bl=19970&ct=application/msword&cn=test.doc&cte=base64¬ype?21851144424695298776736273380549Connection to 217.69.138.103:8021.01.14 21:14:38,512 # 15: Outbound Connection, Local port: 326021.01.14 21:14:38,515 # 16: Outbound Connection, Local port: 326121.01.14 21:14:38,517 # 16 <<< URL: http://af.attachmail.ru/cgi-bin/readmsg/test.doc?rid=364109816792415836042304349873140136381&file=test.doc&id=13902990150000000298;0;1&mode=attachment&channel=&bs=1710&bl=19970&ct=application/msword&cn=test.doc&cte=base64¬ype?21851144424695298776736273380549HTTP/1.1 200 OKServer: nginx/1.2.3Date: Tue, 21 Jan 2014 18:14:40 GMTContent-Type: application/msword; name="test.doc"Content-Length: 19968Connection: keep-aliveP3P: CP="NON CUR OUR IND UNI INT"Content-Disposition: inline; filename*=UTF-8''test.docCache-Control: max-age=604800, must-revalidate, private, no-transformLast-Modified: Tue, 21 Jan 2014 18:14:40 GMT21.01.14 21:14:38,519 # 16: IdMappedPortTCP1OutboundDisconnect: StateReady, exit21.01.14 21:14:38,521 # 15 <<< URL: http://af.attachmail.ru/cgi-bin/readmsg/test.doc?rid=364109816792415836042304349873140136381&file=test.doc&id=13902990150000000298;0;1&mode=attachment&channel=&bs=1710&bl=19970&ct=application/msword&cn=test.doc&cte=base64¬ype?73512446167615963510399978986243HTTP/1.1 200 OKServer: nginx/1.2.3Date: Tue, 21 Jan 2014 18:14:40 GMTContent-Type: application/msword; name="test.doc"Content-Length: 19968Connection: keep-aliveP3P: CP="NON CUR OUR IND UNI INT"Content-Disposition: inline; filename*=UTF-8''test.docCache-Control: max-age=604800, must-revalidate, private, no-transformLast-Modified: Tue, 21 Jan 2014 18:14:40 GMT21.01.14 21:14:38,522 # 15: IdMappedPortTCP1OutboundDisconnect: StateReady, exit21.01.14 21:15:07,838 # 14: Client Disconnection21.01.14 21:15:08,853 # 16: Client Disconnection21.01.14 21:15:08,880 # 15: Client Disconnection
GET http://e.mail.ru/cgi-bin/getattach?file=test.doc&id=13902990150000000298;0;1&mode=attachment&channel=&bs=1710&bl=19970&ct=application/msword&cn=test.doc&cte=base64¬ype HTTP/1.1Host: e.mail.ruUser-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.2.27) Gecko/20120216 Firefox/3.6.27Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8Accept-Language: ru-ru,ru;q=0.8,en-us;q=0.5,en;q=0.3Accept-Encoding: gzip,deflateAccept-Charset: windows-1251,utf-8;q=0.7,*;q=0.7Keep-Alive: 115Proxy-Connection: keep-aliveReferer: http://e.mail.ru/message/13902990150000000298/Cookie: xxxHTTP/1.1 302 FoundServer: nginxDate: Tue, 21 Jan 2014 18:14:38 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-alivePragma: no-cacheCache-Control: privateLocation: http://af.attachmail.ru/cgi-bin/readmsg/test.doc?rid=364109816792415836042304349873140136381&file=test.doc&id=13902990150000000298;0;1&mode=attachment&channel=&bs=1710&bl=19970&ct=application/msword&cn=test.doc&cte=base64¬ypeX-Frame-Options: SAMEORIGINX-Host: f388.i.mail.ruX-XSS-Protection: 0Content-Security-Policy-Report-Only: default-src *.mail.ru *.imgsmail.ru *.attachmail.ru *.live.com *.youtube.com *.youtube.ru *.youtu.be *.rutube.ru *.vimeo.com *.smotri.com *.dailymotion.com *.rambler.ru *.ivi.ru *.videomore.ru *.scorecardresearch.com *.weborama.fr chromeinvoke://* chromeinvokeimmediate://* chromenull://*;script-src 'unsafe-inline' 'unsafe-eval' *.mail.ru *.imgsmail.ru *.yandex.ru * *.odnoklassniki.ru *.youtube.com *.dailymotion.com *.vimeo.com; img-src *; style-src 'unsafe-inline' *.mail.ru *.imgsmail.ru; font-src data: *.imgsmail.ru; report-uri https://cspreport.mail.ru/;Transfer-Encoding: chunked30B304<html><head><title>Redirect to http://af.attachmail.ru/cgi-bin/readmsg/test.doc?rid=364109816792415836042304349873140136381&file=test.doc&id=13902990150000000298;0;1&mode=attachment&channel=&bs=1710&bl=19970&ct=application/msword&cn=test.doc&cte=base64¬ype</title></head><body><a href="http://af.attachmail.ru/cgi-bin/readmsg/test.doc?rid=364109816792415836042304349873140136381&file=test.doc&id=13902990150000000298;0;1&mode=attachment&channel=&bs=1710&bl=19970&ct=application/msword&cn=test.doc&cte=base64¬ype">http://af.attachmail.ru/cgi-bin/readmsg/test.doc?rid=364109816792415836042304349873140136381&file=test.doc&id=13902990150000000298;0;1&mode=attachment&channel=&bs=1710&bl=19970&ct=application/msword&cn=test.doc&cte=base64¬ype</a></body></html>0500GET http://af.attachmail.ru/cgi-bin/readmsg/test.doc?rid=364109816792415836042304349873140136381&file=test.doc&id=13902990150000000298;0;1&mode=attachment&channel=&bs=1710&bl=19970&ct=application/msword&cn=test.doc&cte=base64¬ype HTTP/1.1Host: af.attachmail.ruUser-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.2.27) Gecko/20120216 Firefox/3.6.27Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8Accept-Language: ru-ru,ru;q=0.8,en-us;q=0.5,en;q=0.3Accept-Encoding: gzip,deflateAccept-Charset: windows-1251,utf-8;q=0.7,*;q=0.7Keep-Alive: 115Proxy-Connection: keep-aliveReferer: http://e.mail.ru/message/13902990150000000298/HTTP/1.1 200 OKServer: nginx/1.2.3Date: Tue, 21 Jan 2014 18:14:39 GMTContent-Type: application/msword; name="test.doc"Content-Length: 19968Connection: keep-aliveP3P: CP="NON CUR OUR IND UNI INT"Content-Disposition: inline; filename*=UTF-8''test.docCache-Control: max-age=604800, must-revalidate, private, no-transformLast-Modified: Tue, 21 Jan 2014 18:14:39 GMT{бинарнис test.doc}
500HTTP/1.1 200 OKServer: nginx/1.2.3Date: Tue, 21 Jan 2014 18:14:39 GMTContent-Type: application/msword; name="test.doc"Content-Length: 19968Connection: keep-aliveP3P: CP="NON CUR OUR IND UNI INT"Content-Disposition: inline; filename*=UTF-8''test.docCache-Control: max-age=604800, must-revalidate, private, no-transformLast-Modified: Tue, 21 Jan 2014 18:14:39 GMT{бинарнис test.doc}