LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Re: Reports of bad headers using TUN?

To: "LinuxVirtualServer.org users mailing list." <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Subject: Re: Reports of bad headers using TUN?
From: Matthew <matthew@xxxxxxxxxxxxxxxx>
Date: Wed, 03 Jan 2007 16:26:10 -0600
Nigel,
I don't have ethereal installed on any of the machines. I was able to use tcpdump and ngrep to get some info but I'm not sure how to read it.

I now have 3 more people that are getting either timeouts or internal server errors. 2 are behind big corporate firewalls. My office is behind a normal Linksys cable/dsl router and we are having no problems doing this on our end. The fact that more people are having this issue is starting to worry me.

I sent the sample POST php page from the HOWTO to a couple of the users to see if they get anything from it.

This was captured on nodeA (clusterA) when the user clicked on the submit button to submit the POST:

her.comp.23087 > clusterA.com.https: S 3498668704:3498668704(0) win 65535 <mss 1460,nop,nop,sackOK>
her.comp.23087 > clusterA.com.https: . ack 296918962 win 65535
her.comp.23087 > clusterA.com.https: P 0:120(120) ack 1 win 65535
her.comp.23087 > clusterA.com.https: . ack 1 win 65535 <nop,nop,sack sack 1 {1461:1594} >
her.comp.23087 > clusterA.com.https: . ack 1594 win 65535
her.comp.23087 > clusterA.com.https: P 120:318(198) ack 1594 win 65535
her.comp.23087 > clusterA.com.https: P 318:963(645) ack 1653 win 65476
her.comp.23087 > clusterA.com.https: P 3883:4546(663) ack 1653 win 65476
her.comp.23087 > clusterA.com.https: P 6006:6871(865) ack 1653 win 65476
her.comp.23087 > clusterA.com.https: . ack 1653 win 65476 <nop,nop,sack sack 1 {2175:212} >
her.comp.23087 > clusterA.com.https: P 963:1048(85) ack 2212 win 64917
her.comp.23087 > clusterA.com.https: P 6803:6908(105) ack 2212 win 64917
her.comp.23087 > clusterA.com.https: R 6908:6908(0) ack 2212 win 0
her.comp.23087 > clusterA.com.https: R 3498669753:3498669757(4) win 7740
her.comp.23087 > clusterA.com.https: R 3498669753:3498669757(4) win 7740

The client comp (her.comp) displays "Bad request" after submitting. It hangs for about 6 seconds then shows the error.

The tcpdump on the same server with the same POST but when accessed directly, is about 3 times longer and responds right away.

Using ngrep accessed via cluster right after POST:

T 24.225.236.13:24629 -> 74.52.166.35:80 [AP]
POST /members/eventmanager.php
HTTP/1.1
Host: www.omnovia.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.9) Gecko/20061206 Firefox/1.5.0.9 Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.omnovia.com/members/eventmanager.php?roomID=378
Cookie: membersArea_session=8d8a0934a861869ebe3778de47821256; userNo=10314; username=lsivulich; companyID=324..

that's it!

Now when accessed directly:

T 24.225.236.13:26871 -> 74.52.166.130:80 [AP]
POST /members/eventmanager.php
HTTP/1.1
Host: wwwdb2.omnovia.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.9) Gecko/20061206 Firefox/1.5.0.9 Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://wwwdb2.omnovia.com/members/eventmanager.php?roomID=378
Cookie: userNo=10314; username=lsivulich; companyID=324; membersArea_session=aefbca5d162e4e5d0aa734b99cc44411
Cache-Control: max-age=0..
##
T 24.225.236.13:26871 -> 74.52.166.130:80 [AP]
Content-Type: application/x-www-form-urlencoded
Content-Length: 5709
roomID=378&action=neweventstep2& <remaining data>

Does this help isolate where my problem lies?

-Matthew

Nigel Hamilton wrote:
Hi Nigel,

    How big is the size of his POST - does it exceed one packet?

    How can I find out?


You could use ethereal to watch the incoming packets and see if they fragment but it's probably easier for you and him if he can send to you what he is POSTing and then you try and replicate it.

This fragmenting may explain why when he goes "direct" to the real server there is no problem.

But wouldn't others have a similar experience? Namely myself and the other technicians here?


I think from the discussion on the HowTo this is linked to the "MSS" setting and the nuances of the client's network.

    Or could it be this in conjunction with his router/firewall setup?


    This is something to check too.

The first step to solving the problem is reliably replicating it - so finding out what he's POSTing is a good start - hopefully it will happen to you too. Then if the problem is indeed the TUN problem described in the HowTo[1] then the proposed solution is to execute this command on your RealServers:

iptables -A OUTPUT -s VIRTUAL-IP -p tcp -m tcp --tcp-flags SYN,RST,ACK SYN,ACK -j TCPMSS --set-mss 1440

    Please let us know how you get on?

Nige

[1] http://www.austintek.com/LVS/LVS-HOWTO/HOWTO/LVS-HOWTO.LVS-Tun.html






Thanks,
Matthew
_______________________________________________
LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
or go to http://www.in-addr.de/mailman/listinfo/lvs-users

_______________________________________________
LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
or go to http://www.in-addr.de/mailman/listinfo/lvs-users
--------------------------------------------------------------------------------------
tcpdump cluster:
--------------------------------------------------------------------------------------

20:11:42.816497 IP her.comp.23087 > clusterA.com.https: S 
3498668704:3498668704(0) win 65535 <mss 1460,nop,nop,sackOK>
20:11:42.864461 IP her.comp.23087 > clusterA.com.https: . ack 296918962 win 
65535
20:11:42.879930 IP her.comp.23087 > clusterA.com.https: P 0:120(120) ack 1 win 
65535
20:11:42.954470 IP her.comp.23087 > clusterA.com.https: . ack 1 win 65535 
<nop,nop,sack sack 1 {1461:1594} >
20:11:42.958431 IP her.comp.23087 > clusterA.com.https: . ack 1594 win 65535
20:11:42.964777 IP her.comp.23087 > clusterA.com.https: P 120:318(198) ack 1594 
win 65535
20:11:43.021418 IP her.comp.23087 > clusterA.com.https: P 318:963(645) ack 1653 
win 65476
20:11:43.037495 IP her.comp.23087 > clusterA.com.https: P 3883:4546(663) ack 
1653 win 65476
20:11:43.085829 IP her.comp.23087 > clusterA.com.https: P 6006:6871(865) ack 
1653 win 65476
20:11:58.072730 IP her.comp.23087 > clusterA.com.https: . ack 1653 win 65476 
<nop,nop,sack sack 1 {2175:212} >
20:11:58.076888 IP her.comp.23087 > clusterA.com.https: P 963:1048(85) ack 2212 
win 64917
20:11:58.099008 IP her.comp.23087 > clusterA.com.https: P 6803:6908(105) ack 
2212 win 64917
20:11:58.099010 IP her.comp.23087 > clusterA.com.https: R 6908:6908(0) ack 2212 
win 0
20:11:58.126629 IP her.comp.23087 > clusterA.com.https: R 
3498669753:3498669757(4) win 7740
20:11:58.144677 IP her.comp.23087 > clusterA.com.https: R 
3498669753:3498669757(4) win 7740

--------------------------------------------------------------------------------------
tcpdump direct:
--------------------------------------------------------------------------------------

20:23:59.695043 IP her.comp.28043 > wwwdb2.omnovia.com.http: S 
321934458:321934458(0) win 65535 <mss 1460,nop,nop,sackOK>
20:23:59.696544 IP wwwdb2.omnovia.com.http > her.comp.28043: S 
1090324352:1090324352(0) ack 321934459 win 5840 <mss 1460,nop,nop,sackOK>
20:23:59.747159 IP her.comp.28043 > wwwdb2.omnovia.com.http: . ack 1 win 65535
20:23:59.888391 IP her.comp.28043 > wwwdb2.omnovia.com.http: P 1:643(642) ack 1 
win 65535
20:23:59.888402 IP wwwdb2.omnovia.com.http > her.comp.28043: . ack 643 win 7062
20:23:59.893021 IP her.comp.28043 > wwwdb2.omnovia.com.http: P 643:2103(1460) 
ack 1 win 65535
20:23:59.893026 IP wwwdb2.omnovia.com.http > her.comp.28043: . ack 2103 win 8760
20:23:59.936754 IP her.comp.28043 > wwwdb2.omnovia.com.http: . 2103:3563(1460) 
ack 1 win 65535
20:23:59.936760 IP wwwdb2.omnovia.com.http > her.comp.28043: . ack 3563 win 
11680
20:23:59.943214 IP her.comp.28043 > wwwdb2.omnovia.com.http: P 3563:5023(1460) 
ack 1 win 65535
20:23:59.943219 IP wwwdb2.omnovia.com.http > her.comp.28043: . ack 5023 win 
14600
20:23:59.948781 IP her.comp.28043 > wwwdb2.omnovia.com.http: P 5023:6425(1402) 
ack 1 win 65535
20:23:59.948786 IP wwwdb2.omnovia.com.http > her.comp.28043: . ack 6425 win 
17520
20:23:59.993957 IP wwwdb2.omnovia.com.http > her.comp.28043: . 1:1461(1460) ack 
6425 win 17520
20:23:59.993965 IP wwwdb2.omnovia.com.http > her.comp.28043: . 1461:2921(1460) 
ack 6425 win 17520
20:24:00.049076 IP her.comp.28043 > wwwdb2.omnovia.com.http: . ack 2921 win 
65535
20:24:00.049082 IP wwwdb2.omnovia.com.http > her.comp.28043: . 2921:4381(1460) 
ack 6425 win 17520
20:24:00.049085 IP wwwdb2.omnovia.com.http > her.comp.28043: . 4381:5841(1460) 
ack 6425 win 17520
20:24:00.049088 IP wwwdb2.omnovia.com.http > her.comp.28043: . 5841:7301(1460) 
ack 6425 win 17520
20:24:00.070939 IP her.comp.28047 > wwwdb2.omnovia.com.http: S 
1373879419:1373879419(0) win 65535 <mss 1460,nop,nop,sackOK>
20:24:00.070949 IP wwwdb2.omnovia.com.http > her.comp.28047: S 
1084442542:1084442542(0) ack 1373879420 win 5840 <mss 1460,nop,nop,sackOK>
20:24:00.099079 IP her.comp.28043 > wwwdb2.omnovia.com.http: . ack 5841 win 
65535
20:24:00.099085 IP wwwdb2.omnovia.com.http > her.comp.28043: . 7301:8761(1460) 
ack 6425 win 17520
20:24:00.099087 IP wwwdb2.omnovia.com.http > her.comp.28043: . 8761:10221(1460) 
ack 6425 win 17520
20:24:00.099090 IP wwwdb2.omnovia.com.http > her.comp.28043: P 10221:10739(518) 
ack 6425 win 17520
20:24:00.117090 IP her.comp.28047 > wwwdb2.omnovia.com.http: . ack 1 win 65535
20:24:00.150435 IP her.comp.28043 > wwwdb2.omnovia.com.http: . ack 10739 win 
65535
20:24:00.154933 IP her.comp.28043 > wwwdb2.omnovia.com.http: . ack 8761 win 
65535 <nop,nop,sack sack 1 {10221:10739} >
20:24:00.196225 IP her.comp.28047 > wwwdb2.omnovia.com.http: P 1:621(620) ack 1 
win 65535
20:24:00.196236 IP wwwdb2.omnovia.com.http > her.comp.28047: . ack 621 win 6820
20:24:00.196596 IP wwwdb2.omnovia.com.http > her.comp.28047: P 1:175(174) ack 
621 win 6820
20:24:00.259784 IP her.comp.28043 > wwwdb2.omnovia.com.http: P 6425:7049(624) 
ack 10739 win 65535
20:24:00.259790 IP wwwdb2.omnovia.com.http > her.comp.28043: . ack 7049 win 
17520
20:24:00.259967 IP wwwdb2.omnovia.com.http > her.comp.28043: P 10739:10912(173) 
ack 7049 win 17520
20:24:00.323879 IP her.comp.28047 > wwwdb2.omnovia.com.http: P 621:1246(625) 
ack 175 win 65361
20:24:00.324091 IP wwwdb2.omnovia.com.http > her.comp.28047: P 175:348(173) ack 
1246 win 8125
20:24:00.385948 IP her.comp.28043 > wwwdb2.omnovia.com.http: P 7049:7679(630) 
ack 10912 win 65362
20:24:00.386096 IP wwwdb2.omnovia.com.http > her.comp.28043: P 10912:11085(173) 
ack 7679 win 17520
20:24:00.459850 IP her.comp.28047 > wwwdb2.omnovia.com.http: P 1246:1885(639) 
ack 348 win 65188
20:24:00.460194 IP wwwdb2.omnovia.com.http > her.comp.28047: P 348:521(173) ack 
1885 win 9585
20:24:00.463960 IP her.comp.28043 > wwwdb2.omnovia.com.http: P 7679:8317(638) 
ack 11085 win 65189
20:24:00.464145 IP wwwdb2.omnovia.com.http > her.comp.28043: P 11085:11257(172) 
ack 8317 win 17520
20:24:00.511408 IP her.comp.28047 > wwwdb2.omnovia.com.http: P 1885:2523(638) 
ack 521 win 65015
20:24:00.511566 IP wwwdb2.omnovia.com.http > her.comp.28047: P 521:693(172) ack 
2523 win 10863
20:24:00.515825 IP her.comp.28043 > wwwdb2.omnovia.com.http: P 8317:8955(638) 
ack 11257 win 65017
20:24:00.515960 IP wwwdb2.omnovia.com.http > her.comp.28043: P 11257:11429(172) 
ack 8955 win 18502
20:24:00.564445 IP her.comp.28047 > wwwdb2.omnovia.com.http: P 2523:3162(639) 
ack 693 win 64843
20:24:00.564610 IP wwwdb2.omnovia.com.http > her.comp.28047: P 693:866(173) ack 
3162 win 12141
20:24:00.710960 IP her.comp.28043 > wwwdb2.omnovia.com.http: . ack 11429 win 
64845
20:24:00.815560 IP her.comp.28047 > wwwdb2.omnovia.com.http: . ack 866 win 64670

--------------------------------------------------------------------------------------
ngrep cluster
--------------------------------------------------------------------------------------

T 24.225.236.13:24629 -> 74.52.166.35:80 [AP]
  POST /members/eventmanager.php HTTP/1.1..Host: www.omnovia.com..User-Agent: 
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.9) Gecko/2006120
  6 Firefox/1.5.0.9..Accept: 
text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5..Accept-Language:
 en-u
  s,en;q=0.5..Accept-Encoding: gzip,deflate..Accept-Charset: 
ISO-8859-1,utf-8;q=0.7,*;q=0.7..Keep-Alive: 300..Connection: 
keep-alive..Referer: http://w
  ww.omnovia.com/members/eventmanager.php?roomID=378..Cookie: 
membersArea_session=8d8a0934a861869ebe3778de47821256; userNo=10314; 
username=lsivulich; c
  ompanyID=324..

--------------------------------------------------------------------------------------
ngrep direct
--------------------------------------------------------------------------------------

####
T 24.225.236.13:26871 -> 74.52.166.130:80 [AP]
  POST /members/eventmanager.php HTTP/1.1..Host: 
wwwdb2.omnovia.com..User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; 
rv:1.8.0.9) Gecko/2006
  1206 Firefox/1.5.0.9..Accept: 
text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5..Accept-Language:
 e
  n-us,en;q=0.5..Accept-Encoding: gzip,deflate..Accept-Charset: 
ISO-8859-1,utf-8;q=0.7,*;q=0.7..Keep-Alive: 300..Connection: 
keep-alive..Referer: http:
  //wwwdb2.omnovia.com/members/eventmanager.php?roomID=378..Cookie: 
userNo=10314; username=lsivulich; companyID=324; 
membersArea_session=aefbca5d162e4e
  5d0aa734b99cc44411..Cache-Control: max-age=0..
##
T 24.225.236.13:26871 -> 74.52.166.130:80 [AP]
  Content-Type: application/x-www-form-urlencoded..Content-Length: 
5709....roomID=378&action=neweventstep2&event_name=test&event_description=test&event
  
_date=2007-01-17&event_time_hour=1&event_time_minute=00&event_time_ampm=PM&event_password=test&event_allowedtoenter=30&event_untiltoenter=30&want_reg
  
istration=2&event_access_mandatory_menu=1&event_access_no_menu=0&recurring=N&want_reminder1=1&reminder1_int=2&reminder2_int=0&charEncoding=ISO-8859-1
  
&reg_subject=Thanks+for+registering+for+our+event%21&reg_text_text=Hello+%5BFIRSTNAME%5D%2C%0D%0A++Thank+you+for+choosing+to+attend+our+event.+Just+a
  
+quick+recap+of+the+event+information%3A%0D%0A%0D%0AName%3A+%5BEVENTNAME%5D%0D%0ADate%3A+%5BDATE%5D%0D%0ATime%3A+%5BTIME%5D%0D%0ADescription%3A+%5BDE
  
SC%5D%0D%0A%0D%0AHere+is+the+URL+that+you+will+use+to+enter+the+event%3A%0D%0A%0D%0A%5BEVENTURL%5D%0D%0A%0D%0AYou+will+also+need+to+know+the+event+pa
  
ssword%3A%0D%0A%0D%0A%5BEVENTPASSWORD%5D%0D%0A%0D%0AYou+may+enter+the+event+up+to+%5BBEFOREMINUTES%5D+minutes+before+the+start+of+the+event+but+you+c
  
annot+enter+%5BAFTERMINUTES%5D+minutes+after+the+event+has+started.%0D%0A%0D%0ACheers%2C%0D%0AomNovia+Demo%0D%0A+++++++++++++++++++++++++++++++++++++
  
+++++++++&want_reg_html=1&reg_html_text=%3Chtml%3E%3Cb%3EHello+%5BFIRSTNAME%5D%2C%3C%2Fb%3E%3Cbr%2F%3E%0D%0A%3Ccenter%3EThank+you+for+choosing+to+att
  
end+our+event.+Just+a+quick+recap+of+the+event+information%3A%3C%2Fcenter%3E%3Cbr%2F%3E%0D%0A%3Cul%3E%0D%0A%3Cli%3EName
##
T 24.225.236.13:26871 -> 74.52.166.130:80 [A]
  
%3A+%5BEVENTNAME%5D%3C%2Fli%3E%0D%0A%3Cli%3EDate%3A+%5BDATE%5D%3C%2Fli%3E%0D%0A%3Cli%3ETime%3A+%5BTIME%5D%3C%2Fli%3E%0D%0A%3Cli%3EDescription%3A+%5BD
  
ESC%5D%3C%2Fli%3E%0D%0A%3C%2Ful%3E%3Cbr%2F%3E%0D%0AHere+is+the+URL+that+you+will+use+to+enter+the+event%3A%3Cp%2F%3E%0D%0A%3Ca+href%3D%22%5BEVENTURL%
  
5D%22%3E%5BEVENTURL%5D%3C%2Fa%3E%3Cp%2F%3E%0D%0AYou+will+also+need+to+know+the+event+password%3A%3Cp%2F%3E%0D%0A%5BEVENTPASSWORD%5D%3Cp%2F%3E%0D%0AYo
  
u+may+enter+the+event+up+to+%5BBEFOREMINUTES%5D+minutes+before+the+start+of+the+event+but+you+cannot+enter+%5BAFTERMINUTES%5D+minutes+after+the+event
  
+has+started.%0D%0ACheers%2C%3Cbr%2F%3E%0D%0AomNovia+Demo%3C%2Fhtml%3E%0D%0A++++++++++++++++++++++++++++++++++++++++++++++&reminder1_subject=Don%27t+
  
forget+about+our+event%21&reminder1_text_text=Hello+%5BFIRSTNAME%5D%2C%0D%0A++The+time+for+our+event+is+fast+approaching.+This+is+a+friendly+reminder
  
+to+you+about+the+details+of+the+event.%0D%0A%0D%0AName%3A+%5BEVENTNAME%5D%0D%0ADate%3A+%5BDATE%5D%0D%0ATime%3A+%5BTIME%5D%0D%0ADescription%3A+%5BDES
  
C%5D%0D%0A%0D%0AHere+is+the+URL+that+you+will+use+to+enter+the+event%3A%0D%0A%0D%0A%5BEVENTURL%5D%0D%0A%0D%0AYou+will+also+need+to+know+the+event+pas
  
sword%3A%0D%0A%0D%0A%5BEVENTPASSWORD%5D%0D%0A%0D%0AYou+may+enter+the+event+up+to+%5BBEFOREMINUTES%5D+minutes+before+the+start+of+the+event+but+you+ca
  
nnot+enter+%5BAFTERMINUTES%5D+minutes+after+the+event+has+started.%0D%0A%0D%0ACheers%2C%0D%0AomNovia+Demo%0D%0A%0D%0A++
##
T 24.225.236.13:26871 -> 74.52.166.130:80 [AP]
  
++++++++++++++++++++++++++++++++++++++++++++&reminder1_html_text=%3Chtml%3E%3Cb%3EHello+%5BFIRSTNAME%5D%2C%3C%2Fb%3E%3Cbr%2F%3E%0D%0A%3Ccenter%3EThe+
  
time+for+our+event+is+fast+approaching.+This+is+a+friendly+reminder+to+you+about+the+details+of+the+event.%3C%2Fcenter%3E%3Cbr%2F%3E%0D%0A%3Cul%3E%0D
  
%0A%3Cli%3EName%3A+%5BEVENTNAME%5D%3C%2Fli%3E%0D%0A%3Cli%3EDate%3A+%5BDATE%5D%3C%2Fli%3E%0D%0A%3Cli%3ETime%3A+%5BTIME%5D%3C%2Fli%3E%0D%0A%3Cli%3EDesc
  
ription%3A+%5BDESC%5D%3C%2Fli%3E%0D%0A%3C%2Ful%3E%3Cbr%2F%3E%0D%0AHere+is+the+link+that+you+will+use+to+enter+the+event%3A%3Cp%2F%3E%0D%0A%3Ca+href%3
  
D%22%5BEVENTURL%5D%22%3E%5BEVENTURL%5D%3C%2Fa%3E%3Cp%2F%3E%0D%0AYou+will+also+need+to+know+the+event+password%3A%3Cp%2F%3E%0D%0A%5BEVENTPASSWORD%5D%3
  
Cp%2F%3E%0D%0AYou+may+enter+the+event+up+to+%5BBEFOREMINUTES%5D+minutes+before+the+start+of+the+event+but+you+cannot+enter+%5BAFTERMINUTES%5D+minutes
  
+after+the+event+has+started.%0D%0ACheers%2C%3Cbr%2F%3E%0D%0AomNovia+Demo%3C%2Fhtml%3E%0D%0A++++++++++++++++++++++++++++++++++++++++++++++&reminder2_
  
subject=Don%27t+forget+about+our+event%21&reminder2_text_text=Hello+%5BFIRSTNAME%5D%2C%0D%0A++The+time+for+our+event+is+fast+approaching.+This+is+a+f
  
riendly+reminder+to+you+about+the+details+of+the+event.%0D%0A%0D%0AName%3A+%5BEVENTNAME%5D%0D%0ADate%3A+%5BDATE%5D%0D%0ATime%3A+%5BTIME%5D%0D%0ADescr
  
iption%3A+%5BDESC%5D%0D%0A%0D%0AHere+is+the+URL+that+you+will+use+to+enter+the+event%3A%0D%0A%0D%0A%5BEVENTURL%5D%0D%0A
##
T 24.225.236.13:26871 -> 74.52.166.130:80 [AP]
  
%0D%0AYou+will+also+need+to+know+the+event+password%3A%0D%0A%0D%0A%5BEVENTPASSWORD%5D%0D%0A%0D%0AYou+may+enter+the+event+up+to+%5BBEFOREMINUTES%5D+mi
  
nutes+before+the+start+of+the+event+but+you+cannot+enter+%5BAFTERMINUTES%5D+minutes+after+the+event+has+started.%0D%0A%0D%0ACheers%2C%0D%0AomNovia+De
  
mo%0D%0A++++++++++++++++++++++++++++++++++++++++++++++&reminder2_html_text=%3Chtml%3E%3Cb%3EHello+%5BFIRSTNAME%5D%2C%3C%2Fb%3E%3Cbr%2F%3E%0D%0A%3Ccen
  
ter%3EThe+time+for+our+event+is+fast+approaching.+This+is+a+friendly+reminder+to+you+about+the+details+of+the+event.%3C%2Fcenter%3E%3Cbr%2F%3E%0D%0A%
  
3Cul%3E%0D%0A%3Cli%3EName%3A+%5BEVENTNAME%5D%3C%2Fli%3E%0D%0A%3Cli%3EDate%3A+%5BDATE%5D%3C%2Fli%3E%0D%0A%3Cli%3ETime%3A+%5BTIME%5D%3C%2Fli%3E%0D%0A%3
  
Cli%3EDescription%3A+%5BDESC%5D%3C%2Fli%3E%0D%0A%3C%2Ful%3E%3Cbr%2F%3E%0D%0AHere+is+the+URL+that+you+will+use+to+enter+the+event%3A%3Cp%2F%3E%0D%0A%3
  
Ca+href%3D%22%5BEVENTURL%5D%22%3E%5BEVENTURL%5D%3C%2Fa%3E%3Cp%2F%3E%0D%0AYou+will+also+need+to+know+the+event+password%3A%3Cp%2F%3E%0D%0A%5BEVENTPASS
  
WORD%5D%3Cp%2F%3E%0D%0AYou+may+enter+the+event+up+to+%5BBEFOREMINUTES%5D+minutes+before+the+start+of+the+event+but+you+cannot+enter+%5BAFTERMINUTES%5
  
D+minutes+after+the+event+has+started.%0D%0ACheers%2C%3Cbr%2F%3E%0D%0AomNovia+Demo%3C%2Fhtml%3E%0D%0A++++++++++++++++++++++++++++++++++++++++++++++&g
  oto_step3=Skip+step+2%2C+I+don%27t+want+any+custom+questions.
##
T 74.52.166.130:80 -> 24.225.236.13:26871 [A]
  HTTP/1.1 200 OK..Date: Wed, 03 Jan 2007 20:21:28 GMT..Server: 
Apache/2.2..X-Powered-By: PHP/4.4.4..Set-Cookie: 
membersArea_session=aefbca5d162e4e5d0a
  a734b99cc44411; path=/..Expires: Thu, 19 Nov 1981 08:52:00 
GMT..Cache-Control: no-store, no-cache, must-revalidate, post-check=0, 
pre-check=0..Pragma
  : no-cache..Keep-Alive: timeout=10, max=100..Connection: 
Keep-Alive..Transfer-Encoding: chunked..Content-Type: 
text/html....2481..<!DOCTYPE html PUBL
  IC "-//W3C//DTD XHTML 1.0 Transitional//EN" 
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd";>.<html 
xmlns="http://www.w3.org/1999/xhtml"; cla
  ss="centrage">.<head>.<meta http-equiv="Content-Type" 
content="text/html;"/>.<title>omNovia Members Area</title>.<script 
language="JavaScript" type="
  text/JavaScript" src="/scripts/omnovia.js"></script>.<script 
language="JavaScript" type="text/JavaScript" 
src="/scripts/AjaxRequest.js"></script>.<sc
  ript language="JavaScript" type="text/JavaScript" 
src="/members/eventmanager.js"></script>.<link href="/css/style.css" 
rel="stylesheet" type="text/cs
  s" />.<style type="text/css">.<!--..Style1 { font-family:Verdana, Arial, 
Helvetica, sans-serif; font-size: 14px; color:black; margin-left:50px; }..St
  yle2 { font-family:Verdana, Arial, Helvetica, sans-serif; font-size: 12px; 
color:black; margin-left:50px; }..Style3 { font-family:Verdana, Arial, Hel
  vetica, sans-serif; font-size: 10px; color:black; margin-left:50px; }..Style4 
{ font-family:Verdana, Arial, Helvetica,
#
T 74.52.166.130:80 -> 24.225.236.13:26871 [A]
  sans-serif; font-size: 14px; color:#333366; margin-left:50px; }..Style5 { 
font-family:Verdana, Arial, Helvetica, sans-serif; font-size: 14px; color:#
  663300; margin-left:50px; }..Style6 { font-family:Verdana, Arial, Helvetica, 
sans-serif; font-size: 14px; color:#FF6600; margin-left:50px; }..Style7
  { font-family:Verdana, Arial, Helvetica, sans-serif; font-size: 12px; 
color:white; }..Style8 { font-family:Verdana, Arial, Helvetica, sans-serif; fon
  t-size: 12px; font-weight:bold; color:#FFCC99; }..comments { 
font-family:Verdana, Arial, Helvetica, sans-serif; font-size: 10px; 
color:#600099; }..li
  nk1 { color:#003366; text-decoration:underline; font-family:Verdana, Arial, 
Helvetica, sans-serif; font-size: 14px; margin-left:50px; }..link1:hover
  { color:#CC6600; text-decoration:none; font-family:Verdana, Arial, Helvetica, 
sans-serif; font-size: 14px; margin-left:50px;}..link1:visited { color:
  #0099CC; text-decoration:none; font-family:Verdana, Arial, Helvetica, 
sans-serif; font-size: 14px; margin-left:50px;}..#loginpass label { text-align:
  right; display:inline; float:left; width:90px;}.#loginpass input { margin:1px 
0px 1px 10px; padding:0px; width:140px;}.#term { height:35px; backgroun
  d:#003366; text-align:center; padding:7px 0px 0px 0px;}.#term p, #term a { 
color:#D9E0E7; font-size:1em; }.#term a { text-decoration:underline; }.#te
  rm a:hover { text-decoration:none; }...td-bb {border-bottom: 1px solid 
black;}..td-bl {border-left: 1px solid black;}..
##
T 74.52.166.130:80 -> 24.225.236.13:26871 [A]
  td-bt {border-top: 1px solid black;}..td-br {border-right: 1px solid 
black;}...td-lighter {background-image: url('/images/lighter_blue.gif');}..td-li
  ght {background-image: url('/images/light_blue.gif');}..td-dark 
{background-image: url('/images/dark_blue.gif');}..black10 {font-size: 12px; 
color: #
  000000; font-weight: bold;}..white10 {font-size: 10px; color: 
#FFFFFF;}..white12 {font-size: 12px; color: #FFFFFF;}..green12 {font-size: 
12pt; color:
   #008800;}..red12 {font-size: 12pt; color: #880000;}..darkblue12 {font-size: 
12px; color: #2b2d7a;}..lightblue12 {font-size: 12px; color: #1770ac;}..
  style16 {color: #FF0000; font-weight: bold;}...td-grey-odd { 
background-color: #666666; }..td-grey-even { background-color: #666666; 
}...pgroup { mar
  gin-left: 0px; width: 650px; }..pgrouptable { margin-left: 0px; width: 640px; 
}.-->.</style>.</head>..<body class="centrage">.<table class="centrage"
  >.  <tr>.    <td>..      <div id="container" style="width: 850px;">..        
<table width="850px" border="0" cellpadding="0" cellspacing="0" bgcolor=
  "#FFFFFF">.          <tr>.            <td colspan="2" 
style="background-color: #FFFFFF;"><img src="/img/en/member__01.jpg" 
width="790" height="61" />
  </td>.          </tr>.          <tr>.            <td valign="top" 
style="background: url(/img/en/member__07.jpg) repeat-y; width: 146px;">..
       <table border="0" cellpadding="0" cellspacing="0" width="146px">.        
        <tr>.                  <td><a hre
#
T 74.52.166.130:80 -> 24.225.236.13:26871 [A]
  f="/index.php"><img src="/img/en/member__02.jpg" width="146" height="46" 
border="0" /></a></td>.                </tr>.                <tr>.
          <td><a href="/members/memberspage.cgi"><img 
src="/img/en/member__04.jpg" width="146" height="29" border="0" /></a></td>.    
            </tr>
  .                <tr>.                  <td><a href="/contactus.php"><img 
src="/img/en/member__06.jpg" width="146" height="25" border="0" /></a></td>
  .                </tr>.               </table>..             </td>.           
  <td valign="top" width="704px">..                  <div id="middleAre
  a" style="background-color: #FFFFFF; width: 704px; font-size: 9pt;">..        
                <table style="width: 690px; margin: auto auto; border:
  none;" cellpadding="0" cellspacing="0">.                          <tr>.       
                     <td><br/>..                    <!-- begin body //-
  ->.....                          <form name="form1" method="post" 
action="eventmanager.php">.                          <input type="hidden" 
name="roo
  mID" value="378">.                          <input type="hidden" 
name="eventID" value="1391">.                          <input type="hidden" 
name="gr
  oupID" value="1358">.                          <input type="hidden" 
name="action" value="neweventfinish">.                          <table 
width="100
  %" border="0" cellpadding="2" cellspacing="2">.                            
<tr>.                              <th colsp
#
T 74.52.166.130:80 -> 24.225.236.13:26871 [A]
  an="5">Emails for Event </th>.                            </tr>.              
                                          <tr>.
        <td width="5%">&nbsp;</td>.                              <td 
class="td-bb" style="font-weight: bold;" colspan="3">Sample Event Invitation 
Email
  </td>.                              <td width="5%">&nbsp;</td>.               
             </tr>.                            <tr>.
             <td width="5%">&nbsp;</td>.                              <td 
colspan="3"><p>Below, we have suggested a sample email for you to use in your
   email program to send out event invitations.</p></td>.                       
       <td width="5%">&nbsp;</td>.                            </tr>.
                           <tr>.                              <td 
width="5%">&nbsp;</td>.                              <td colspan="3"><p 
style="font-w
  eight: bold; color: red;">Please note that omNovia does not send out the 
initial invitation email.  It is the responsibility of the event creator to
  do so.</p></td>.                              <td width="5%">&nbsp;</td>.     
                       </tr>.                            <tr>.
                       <td width="5%">&nbsp;</td>.                              
<td width="5%">&nbsp;</td>.                              <td style="tex
  t-align: left; font-family: Courier; color: #0000A0;"><br />.Hello,<br 
/>.&nbsp;&nbsp;&nbsp;You are invited to the foll
####
T 74.52.166.130:80 -> 24.225.236.13:26871 [A]
  owing online web conference event:<br /><br />.Name: test<br />.Date: 
Wednesday, Jan 17th, 2007<br />.Time: 1:00PM North America/Eastern (GMT-5)<br /
  >.Description: test<br /><br />..Registration is mandatory for this event. 
Please use the following URL to register for this event:<br /><br />.Regis
  tration URL: http://www.omnovia.com/register/48151167855689<br /><br 
/>....You may enter the event up to 30 minutes before the start of the event but
   you cannot enter 30 minutes after the event has started.<br /><br 
/>..Cheers,<br />.&lt;your company name&gt;<br /><br />.
        </td>.                              <td width="5%">&nbsp;</td>.         
                     <td width="5%">&nbsp;</td>.
       </tr>...                                                        <tr>.    
                          <td width="5%">&nbsp;</td>.
              <td class="td-bb" style="font-weight: bold;" colspan="3">Event 
Registration and Access</td>.                              <td width="5%">
  &nbsp;</td>.                            </tr>.                            
<tr>.                              <td width="5%">&nbsp;</td>.
                   <td colspan="3"><p>This event will have <span 
style="font-weight: bold;">mandatory</span> registration. Anyone who registers 
will be
   allowed access to the event. Please distribute the registration URL below to 
anyone whom you would like to attend the
#
T 74.52.166.130:80 -> 24.225.236.13:26871 [A]
  event.</p>.                                <p>Event Registration URL: <a 
style="font-family: Courier;" href='http://www.omnovia.com/register/48151167
  855689' 
target="_blank">http://www.omnovia.com/register/48151167855689</a></p>.         
                     </td>.                              <td
  width="5%">&nbsp;</td>.                            </tr>....                  
          <tr>.                              <td width="5%">&nbsp;</td>
  .                              <td align="center" colspan="3">&nbsp;</td>.    
                          <td width="5%">&nbsp;</td>.
            </tr>.                            <tr>.                             
 <td width="5%">&nbsp;</td>.                              <td align="ce
  nter" colspan="3"><input name="goto_finish" type="submit" id="goto_finish" 
value="Save & View Event"></td>.                              <td width="5
  %">&nbsp;</td>.                            </tr>.                          
</table>.                        </form>......3b7....                    <
  !-- end body //-->.                    <br/><br/>..                           
 </td>.                          </tr>.                        </table>
  ...                  </div>.                </td>.              </tr>.        
    </table>..            <div id="termsofservice" style="width: 850px;
  ">.              <p>.                &copy; Copyright 2003-2006. omNovia - 
All Rights Reserved&nbsp;&nbsp;&nbsp;&nbsp;&
#
T 74.52.166.130:80 -> 24.225.236.13:26871 [AP]
  nbsp;&nbsp;&nbsp;.                <a href="/terms_of_service.php">Terms of 
Service</a>.                 -.                <a href="/privacy.php">Priv
  acy Notice</a>.              </p>..            </div>..          </div><!-- 
/container -->.        </td>.      </tr>.    </table>.    <map name="Map"
   id="Map"><area shape="rect" coords="1,26,188,42" href="#" />.    <area 
shape="rect" coords="191,26,378,41" href="espace_membre.html" />.    </map>..
    </body>.</html>....<!-- aefbca5d162e4e5d0aa734b99cc44411 //-->..0....
####
T 24.225.236.13:26873 -> 74.52.166.130:80 [AP]
  GET /scripts/omnovia.js HTTP/1.1..Host: wwwdb2.omnovia.com..User-Agent: 
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.9) Gecko/20061206 Fi
  refox/1.5.0.9..Accept: */*..Accept-Language: en-us,en;q=0.5..Accept-Encoding: 
gzip,deflate..Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7..Keep-Aliv
  e: 300..Connection: keep-alive..Referer: 
http://wwwdb2.omnovia.com/members/eventmanager.php..Cookie: userNo=10314; 
username=lsivulich; companyID=324;
   membersArea_session=aefbca5d162e4e5d0aa734b99cc44411..If-Modified-Since: 
Tue, 14 Nov 2006 23:15:54 GMT..If-None-Match: "18f9ee6-1c67-33305e80"..Cach
  e-Control: max-age=0....
##
T 74.52.166.130:80 -> 24.225.236.13:26873 [AP]
  HTTP/1.1 304 Not Modified..Date: Wed, 03 Jan 2007 20:21:29 GMT..Server: 
Apache/2.2..Connection: Keep-Alive..Keep-Alive: timeout=10, max=100..ETag: "1
  8f9ee6-1c67-33305e80"....
#
T 24.225.236.13:26871 -> 74.52.166.130:80 [AP]
  GET /scripts/AjaxRequest.js HTTP/1.1..Host: wwwdb2.omnovia.com..User-Agent: 
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.9) Gecko/2006120
  6 Firefox/1.5.0.9..Accept: */*..Accept-Language: 
en-us,en;q=0.5..Accept-Encoding: gzip,deflate..Accept-Charset: 
ISO-8859-1,utf-8;q=0.7,*;q=0.7..Keep-
  Alive: 300..Connection: keep-alive..Referer: 
http://wwwdb2.omnovia.com/members/eventmanager.php..Cookie: userNo=10314; 
username=lsivulich; companyID=
  324; membersArea_session=aefbca5d162e4e5d0aa734b99cc44411..If-Modified-Since: 
Sat, 07 Oct 2006 03:49:43 GMT..If-None-Match: "18f9ede-42af-7a9f63c0"..
  Cache-Control: max-age=0....
##
T 74.52.166.130:80 -> 24.225.236.13:26871 [AP]
  HTTP/1.1 304 Not Modified..Date: Wed, 03 Jan 2007 20:21:29 GMT..Server: 
Apache/2.2..Connection: Keep-Alive..Keep-Alive: timeout=10, max=99..ETag: "18
  f9ede-42af-7a9f63c0"....
##
T 24.225.236.13:26873 -> 74.52.166.130:80 [AP]
  GET /members/eventmanager.js HTTP/1.1..Host: wwwdb2.omnovia.com..User-Agent: 
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.9) Gecko/200612
  06 Firefox/1.5.0.9..Accept: */*..Accept-Language: 
en-us,en;q=0.5..Accept-Encoding: gzip,deflate..Accept-Charset: 
ISO-8859-1,utf-8;q=0.7,*;q=0.7..Keep
  -Alive: 300..Connection: keep-alive..Referer: 
http://wwwdb2.omnovia.com/members/eventmanager.php..Cookie: userNo=10314; 
username=lsivulich; companyID
  =324; 
membersArea_session=aefbca5d162e4e5d0aa734b99cc44411..If-Modified-Since: Thu, 
28 Dec 2006 23:11:25 GMT..If-None-Match: "18f98f4-98e1-442c4140".
  .Cache-Control: max-age=0....
#
T 74.52.166.130:80 -> 24.225.236.13:26873 [AP]
  HTTP/1.1 304 Not Modified..Date: Wed, 03 Jan 2007 20:21:29 GMT..Server: 
Apache/2.2..Connection: Keep-Alive..Keep-Alive: timeout=10, max=99..ETag: "18
  f98f4-98e1-442c4140"....
#
T 24.225.236.13:26871 -> 74.52.166.130:80 [AP]
  GET /css/style.css HTTP/1.1..Host: wwwdb2.omnovia.com..User-Agent: 
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.9) Gecko/20061206 
Firefox
  /1.5.0.9..Accept: text/css,*/*;q=0.1..Accept-Language: 
en-us,en;q=0.5..Accept-Encoding: gzip,deflate..Accept-Charset: 
ISO-8859-1,utf-8;q=0.7,*;q=0.7.
  .Keep-Alive: 300..Connection: keep-alive..Referer: 
http://wwwdb2.omnovia.com/members/eventmanager.php..Cookie: userNo=10314; 
username=lsivulich; comp
  anyID=324; 
membersArea_session=aefbca5d162e4e5d0aa734b99cc44411..If-Modified-Since: Wed, 
20 Dec 2006 21:49:19 GMT..If-None-Match: "18f968c-66ad-2fd47
  5c0"..Cache-Control: max-age=0....
#
T 74.52.166.130:80 -> 24.225.236.13:26871 [AP]
  HTTP/1.1 304 Not Modified..Date: Wed, 03 Jan 2007 20:21:29 GMT..Server: 
Apache/2.2..Connection: Keep-Alive..Keep-Alive: timeout=10, max=98..ETag: "18
  f968c-66ad-2fd475c0"....
#
T 24.225.236.13:26873 -> 74.52.166.130:80 [AP]
  GET /img/en/member__01.jpg HTTP/1.1..Host: wwwdb2.omnovia.com..User-Agent: 
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.9) Gecko/20061206
   Firefox/1.5.0.9..Accept: image/png,*/*;q=0.5..Accept-Language: 
en-us,en;q=0.5..Accept-Encoding: gzip,deflate..Accept-Charset: 
ISO-8859-1,utf-8;q=0.7
  ,*;q=0.7..Keep-Alive: 300..Connection: keep-alive..Referer: 
http://wwwdb2.omnovia.com/members/eventmanager.php..Cookie: userNo=10314; 
username=lsivul
  ich; companyID=324; 
membersArea_session=aefbca5d162e4e5d0aa734b99cc44411..If-Modified-Since: Sat, 
07 Oct 2006 03:48:59 GMT..If-None-Match: "18f9815-3
  71a-780000c0"..Cache-Control: max-age=0....
#
T 74.52.166.130:80 -> 24.225.236.13:26873 [AP]
  HTTP/1.1 304 Not Modified..Date: Wed, 03 Jan 2007 20:21:29 GMT..Server: 
Apache/2.2..Connection: Keep-Alive..Keep-Alive: timeout=10, max=98..ETag: "18
  f9815-371a-780000c0"....
#
T 24.225.236.13:26871 -> 74.52.166.130:80 [AP]
  GET /img/en/member__02.jpg HTTP/1.1..Host: wwwdb2.omnovia.com..User-Agent: 
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.9) Gecko/20061206
   Firefox/1.5.0.9..Accept: image/png,*/*;q=0.5..Accept-Language: 
en-us,en;q=0.5..Accept-Encoding: gzip,deflate..Accept-Charset: 
ISO-8859-1,utf-8;q=0.7
  ,*;q=0.7..Keep-Alive: 300..Connection: keep-alive..Referer: 
http://wwwdb2.omnovia.com/members/eventmanager.php..Cookie: userNo=10314; 
username=lsivul
  ich; companyID=324; 
membersArea_session=aefbca5d162e4e5d0aa734b99cc44411..If-Modified-Since: Sat, 
07 Oct 2006 03:48:59 GMT..If-None-Match: "18f9816-a
  22-780000c0"..Cache-Control: max-age=0....
#
T 74.52.166.130:80 -> 24.225.236.13:26871 [AP]
  HTTP/1.1 304 Not Modified..Date: Wed, 03 Jan 2007 20:21:29 GMT..Server: 
Apache/2.2..Connection: Keep-Alive..Keep-Alive: timeout=10, max=97..ETag: "18
  f9816-a22-780000c0"....
#
T 24.225.236.13:26873 -> 74.52.166.130:80 [AP]
  GET /img/en/member__04.jpg HTTP/1.1..Host: wwwdb2.omnovia.com..User-Agent: 
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.9) Gecko/20061206
   Firefox/1.5.0.9..Accept: image/png,*/*;q=0.5..Accept-Language: 
en-us,en;q=0.5..Accept-Encoding: gzip,deflate..Accept-Charset: 
ISO-8859-1,utf-8;q=0.7
  ,*;q=0.7..Keep-Alive: 300..Connection: keep-alive..Referer: 
http://wwwdb2.omnovia.com/members/eventmanager.php..Cookie: userNo=10314; 
username=lsivul
  ich; companyID=324; 
membersArea_session=aefbca5d162e4e5d0aa734b99cc44411..If-Modified-Since: Sat, 
07 Oct 2006 03:48:59 GMT..If-None-Match: "18f9817-a
  09-780000c0"..Cache-Control: max-age=0....
#
T 74.52.166.130:80 -> 24.225.236.13:26873 [AP]
  HTTP/1.1 304 Not Modified..Date: Wed, 03 Jan 2007 20:21:29 GMT..Server: 
Apache/2.2..Connection: Keep-Alive..Keep-Alive: timeout=10, max=97..ETag: "18
  f9817-a09-780000c0"....
#
T 24.225.236.13:26871 -> 74.52.166.130:80 [AP]
  GET /img/en/member__06.jpg HTTP/1.1..Host: wwwdb2.omnovia.com..User-Agent: 
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.9) Gecko/20061206
   Firefox/1.5.0.9..Accept: image/png,*/*;q=0.5..Accept-Language: 
en-us,en;q=0.5..Accept-Encoding: gzip,deflate..Accept-Charset: 
ISO-8859-1,utf-8;q=0.7
  ,*;q=0.7..Keep-Alive: 300..Connection: keep-alive..Referer: 
http://wwwdb2.omnovia.com/members/eventmanager.php..Cookie: userNo=10314; 
username=lsivul
  ich; companyID=324; 
membersArea_session=aefbca5d162e4e5d0aa734b99cc44411..If-Modified-Since: Sat, 
07 Oct 2006 03:48:59 GMT..If-None-Match: "18f9818-7
  04-780000c0"..Cache-Control: max-age=0....
#
T 74.52.166.130:80 -> 24.225.236.13:26871 [AP]
  HTTP/1.1 304 Not Modified..Date: Wed, 03 Jan 2007 20:21:29 GMT..Server: 
Apache/2.2..Connection: Keep-Alive..Keep-Alive: timeout=10, max=96..ETag: "18
  f9818-704-780000c0"....
#
T 24.225.236.13:26873 -> 74.52.166.130:80 [AP]
  GET /img/en/member__07.jpg HTTP/1.1..Host: wwwdb2.omnovia.com..User-Agent: 
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.9) Gecko/20061206
   Firefox/1.5.0.9..Accept: image/png,*/*;q=0.5..Accept-Language: 
en-us,en;q=0.5..Accept-Encoding: gzip,deflate..Accept-Charset: 
ISO-8859-1,utf-8;q=0.7
  ,*;q=0.7..Keep-Alive: 300..Connection: keep-alive..Referer: 
http://wwwdb2.omnovia.com/members/eventmanager.php..Cookie: userNo=10314; 
username=lsivul
  ich; companyID=324; 
membersArea_session=aefbca5d162e4e5d0aa734b99cc44411..If-Modified-Since: Sat, 
07 Oct 2006 03:48:59 GMT..If-None-Match: "18f9819-a
  a87-780000c0"..Cache-Control: max-age=0....
#
T 74.52.166.130:80 -> 24.225.236.13:26873 [AP]
  HTTP/1.1 304 Not Modified..Date: Wed, 03 Jan 2007 20:21:29 GMT..Server: 
Apache/2.2..Connection: Keep-Alive..Keep-Alive: timeout=10, max=96..ETag: "18
  f9819-aa87-780000c0"....




<Prev in Thread] Current Thread [Next in Thread>