RE: Capture http post request

Hi there,

I know try develop application like SQUID on linux that work for packet
filter. I have read an article at www.codeproject.com about Packet Filter
API, sound interesting. But then i want to modify it so that the filter work
not from packet source and destination IP, but for packet request.

For example i want to block my client computer can not download or request
*.exe file from any website. So i only need to put filter of request that
contains .exe on the tail, then anyone who want to request .exe file will
droped.

For how to see any packet that walk on adapter i can use Sniff method, the
article also provide by www.codeproject.com.

PS: The first one maybe only for http request, the rest i will develop my
self and will published at www.codeproject.com (i don't know where to publish
a project at MSDN).

Thanks for your help and attention.

"Steven Cheng[MSFT]" wrote:

Hi Clif,

Welcome to MSDN newsgroup.
From your description, you're wantting to capture the HTTP request/respons
's content sent between client webbrowser and the webserver.... , yes?

Generally, for diagnostics or tracing purpose, we can consider using some
protocol tracing tools. And the Trace Utility (in SOAP Toolkit 3.0) or the
TcpTrace (.net version...) are good and simple for general tracing of HTTP/
TCP message....

You can get them through the following link:

#SOAP Toolkit 3.0(just use the Trace Utility in it....)
http://www.microsoft.com/downloads/details.aspx?familyid=c943c0dd-ceec-4088-
9753-86f052ec8450&displaylang=en

#Tcp Trace
http://www.pocketsoap.com/tcptrace/
http://jarok.cs.ohiou.edu/software/tcptrace/download.html

Hope helps. Thanks,

Steven Cheng
Microsoft Online Support

Get Secure! www.microsoft.com/security
(This posting is provided "AS IS", with no warranties, and confers no
rights.)







--------------------
| Reply-To: "Clif" <MicroPutz@xxxxxxxxxxxxxxxx>
| From: "Clif" <MicroPutz@xxxxxxxxxxxxxxxx>
| Subject: Capture http post request
| Date: Sun, 27 Nov 2005 10:12:49 -0500
| Lines: 10
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
| X-RFC2646: Format=Flowed; Original
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
| Message-ID: <eeKMJU28FHA.1276@xxxxxxxxxxxxxxxxxxxx>
| Newsgroups: microsoft.public.dotnet.languages.vb
| NNTP-Posting-Host: adsl-065-012-165-118.sip.asm.bellsouth.net
65.12.165.118
| Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP09.phx.gbl
| Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.dotnet.languages.vb:305927
| X-Tomcat-NG: microsoft.public.dotnet.languages.vb
|
| Hi,
| I would like to find out exactly what is being sent when a web page uses
the
| post request method. My thought was to use the webbrowser control
together
| with the HTTPWebRequest class, but am having trouble tying the two
together.
| Any ideas?
|
| Thanks,
| Clif
|
|
|


.

Relevant Pages

  • Re: 2000 server exploit, webDAV
    ... > I would like to adjust our network to filter for the new ... > 2000 server exploit. ... > Has Microsoft or anyone else released a request ... > example of the HTTP Request headers from a packet ...
    (microsoft.public.win2000.security)
  • Re: IIS Extensions in URL causes filter to break.
    ... If your filter operates the way you say, ... IIS can only say that one or more of the events contain ... every request, and maybe more than once, depending on whether the URL causes ... As for the order of handling between ISAPI Extensions and Filters - Filters ...
    (microsoft.public.inetserver.iis.security)
  • Re: MV-database independence & PHP
    ... packet file into the request queue, ... File polling means that load balancing can be achieved by multiple DBs, ... A FIFO tree is established in the local FHS: ...
    (comp.databases.pick)
  • Re: remote port unlocker - does such a thing exist??
    ... authentication processes are performed on an arbitrary packet. ... UDP or any other protocol can be used to deliver the request. ... HolePunch should prevent flaws that cannot be easily audited in many ...
    (comp.security.firewalls)
  • Re: NadaNet for the //c - just an idea
    ... chip/etc before/after each packet to be sent/received? ... control over write protect with the drive still running, ... properly *throughout* a whole request. ... able to write to the net to assert its lock). ...
    (comp.sys.apple2)