which will encode and decode sections of text you provide.
Heath
On 06/09/2005, at 3:20 AM, Jan E. Schotsman wrote:
OK, I have downloaded the EtherPeek demo. The "Application Data"
for one interesting packet look like this (I have deleted the
actual addresses)
Line 1: GET /viewad/404346/houser_wisp_468x60.gif
HTTP/1.1..
Line 2: Host: ad. [.........] .net..
Line 3: Connection: keep-alive..
Line 4: Referer: http:// [........] %3Dfast%
26&seltype1=1&pc1=6953%20CA&seltype2=1&pc2=3056%20GG..
Line 5: User-Agent: Mozilla/5.0 (Macintosh; U; PPC
Mac OS X; en) AppleWebKit/125.5.7 (KHTML, like Gecko) Safari/125.12..
Line 6: If-Modified-Since: Thu, 25 Aug 2005
14:20:58 GMT..
Line 7: Accept: */*..
Line 8: Accept-Encoding: gzip, deflate;q=1.0,
identity;q=0.5, *;q=0..
Line 9: Accept-Language: en, ja;q=0.92, ja-
jp;q=0.96, fr;q=0.88, de-de;q=0.85, de;q=0.81, es;q=0.77, it-
it;q=0.73, it;q=0.69, nl-nl;q=0.65, nl;q=0.62, sv-se;q=0.58,
sv;q=0.54, no-no;q=0.50, no;q=0.46, da-dk;q=0.42, da;q=0.38, fi-
fi;q=0.35, fi;q=0.31....
Premature end of decode
Line 4 looks very much like a URL I could try to download directly!
The form data are in there and no inexplicable other data.
How do I handle all these % escapes like in %3D etc? Just copy the
URL to download like in line 4??
