root@coreduo:~# ngrep -d ath0 port 80
interface: ath0 (192.168.0.0/255.255.255.0)
filter: (ip or ip6) and ( port 80 )
####
T 192.168.0.12:38947 -> 65.216.77.179:80 [AP]
GET /favicon.ico HTTP/1.1..Host: www.neurosaudio.com..User-Agent: Mozilla/5.0 (X11; U; Linux i686; es-ES; rv:1.8.1.3) Gecko/2007
0321 Firefox/2.0.0.3 (Swiftfox)..Accept: image/png,*/*;q=0.5..Accept-Language: es..Accept-Encoding: gzip,deflate..Accept-Charset
: UTF-8,*..Keep-Alive: 300..Connection: keep-alive..Cookie: rememberme=True; username=garbage%40openfutura%2Ecom....
##
T 65.216.77.179:80 -> 192.168.0.12:38947 [A]
HTTP/1.1 404 Object Not Found..Server: Microsoft-IIS/5.0..Date: Fri, 04 May 2007 10:34:31 GMT..Connection: close..Content-Length
: 4040..Content-Type: text/html....<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">..<html dir=ltr>....<head>..<style>..a
:link...{font:8pt/11pt verdana; color:FF0000}..a:visited..{font:8pt/11pt verdana; color:#4e4e4e}..</style>....<META NAME="ROBOTS
" CONTENT="NOINDEX">....<title>The page cannot be found</title>....<META HTTP-EQUIV="Content-Type" Content="text-html; charset=W
indows-1252"
##
T 65.216.77.179:80 -> 192.168.0.12:38947 [A]
.indexOf("/",protocolInd
###
T 65.216.77.179:80 -> 192.168.0.12:38947 [A]
>..</head>....<script> ..function Homepage(){..<!--..// in real bits, urls get returned to our script like this:..// res://shdoc
vw.dll/http_404.htm#http://www.DocURL.com/bar.htm .....//For testing use DocURL = "res://shdocvw.dll/http_404.htm#https://www.mi
crosoft.com/bar.htm"...DocURL = document.URL;.......//this is where the http or https will be, as found by searching for :// but
skipping the res://...protocolIndex=DocURL.indexOf("://",4);......//this finds the ending slash for the domain server ...server
Index=DocURL
##
T 65.216.77.179:80 -> 192.168.0.12:38947 [A]
ex + 3);......//for the href, we need a valid URL to the domain. We search for the # symbol to find the begining ...//of the tru
e URL, and add 1 to skip it - this is the BeginURL value. We use serverIndex as the end marker....//urlresult=DocURL.substring(p
rotocolIndex - 4,serverIndex);...BeginURL=DocURL.indexOf("#",1) + 1;......urlresult=DocURL.substring(BeginURL,serverIndex);.....
....//for display, we need to skip after http://, and go to the next slash...displayresult=DocURL.substring(protocolIndex + 3 ,s
erverIndex);
##
T 65.216.77.179:80 -> 192.168.0.12:38947 [A]
window.navig
##
T 65.216.77.179:80 -> 192.168.0.12:38947 [A]
.....InsertElementAnchor(urlresult, displayresult);..}....function HtmlEncode(text)..{.. return text.replace(/&/g, '&').re
place(/'/g, '"').replace(/</g, '<').replace(/>/g, '>');..}....function TagAttrib(name, value)..{.. return ' '+name
+'="'+HtmlEncode(value)+'"';..}....function PrintTag(tagName, needCloseTag, attrib, inner){.. document.write( '<' + tagName +
attrib + '>' + HtmlEncode(inner) );.. if (needCloseTag) document.write( '</' + tagName +'>' );..}....function URI(href)..{..
IEVer =
#######
T 192.168.0.12:38949 -> 65.216.77.179:80 [AP]
GET /store/services/customer/orders.asp HTTP/1.1..Host: www.neurosaudio.com..User-Agent: Mozilla/5.0 (X11; U; Linux i686; es-ES;
rv:1.8.1.3) Gecko/20070321 Firefox/2.0.0.3 (Swiftfox)..Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,t
ext/plain;q=0.8,image/png,*/*;q=0.5..Accept-Language: es..Accept-Encoding: gzip,deflate..Accept-Charset: UTF-8,*..Keep-Alive: 30
0..Connection: keep-alive..Cookie: rememberme=True; username=garbage%40openfutura%2Ecom....
##
T 65.216.77.179:80 -> 192.168.0.12:38949 [A]
HTTP/1.1 500 Internal Server Error..Server: Microsoft-IIS/5.0..Date: Fri, 04 May 2007 10:34:39 GMT..COMMERCE-SERVER-SOFTWARE: Mi
crosoft Commerce Server 2002, Standard Edition..Pragma: no-cache..Pragma: no-cache..Content-Length: 909..Content-Type: text/html
; Charset=windows-1252..Expires: Fri, 04 May 2007 10:33:40 GMT..Cache-control: no-cache......<!DOCTYPE HTML PUBLIC "-//W3C//DTD
HTML 3.2 Final//EN">....<html dir=ltr>..<head>..<style>..a:link...{font:8pt/11pt verdana; color:FF0000}..a:visited..{font:8pt/11
pt verdana;
##
T 65.216.77.179:80 -> 192.168.0.12:38949 [A]
color:#4e4e4e}..</style>..<META NAME="ROBOTS" CONTENT="NOINDEX">..<title>The page cannot be displayed</title>..</head>......<!--
- FRIENDLY GENERIC ERROR MESSAGE GOES HERE -->....<body bgcolor="FFFFFF">..<h1>NeurosAudio</h1>..<table width="410" cellpadding=
"3" cellspacing="5">.. <tr> .. <td align="left" valign="middle" width="360">...<h1 style="COLOR:000000; FONT: 13pt/15pt v
erdana">The page cannot be displayed</h1>.. </td>.. </tr>.. .. <tr>.. <td width="400" colspan="2">...<font style="COLOR
:000000; FON
##
T 65.216.77.179:80 -> 192.168.0.12:38949 [AP]
T: 8pt/11pt verdana">We apologize for the inconvenience. Please try again later. If the problem persists, please contact our w
ebmaster.</font></td>.. </tr>..</table>.. ..<hr>........</body>..</html>......
#exit
31 received, 0 dropped
root@coreduo:~#