[Owasp-webscarab] WebScarab

Wed Mar 2 15:11:46 EST 2011

On Wed, Mar 2, 2011 at 2:15 PM, Rogan Dawes <rogan at dawes.za.net> wrote:
> On 2011/03/02 8:40 PM, Rich Rumble wrote:
> Please keep the list on Cc:, thanks.
>
Sorry about that
> The next thing to try, I guess, is to see the actual network traffic.
> Can you try installing e.g. WireShark to see where the connection
> attempt is going, and who is sending back the RST?

 I'm attaching two pcap's (if allowed?) one for WS and WS-NG. I don't
get any packets
(other than dns lookups) if I use WS locally, running it remotely I capture the
traffic, it looks like WS is having the error. The WS-NG proxy (on .1
also) works.

(10.10.251.1 = ws-proxy, .10=host using proxy)

>From Packet #6
HTTP/1.0 500 WebScarab error
Content-Type: text/html
Connection: Close

<HTML><HEAD><TITLE>WebScarab Error</TITLE></HEAD><BODY>WebScarab
encountered an error trying to retrieve <P><pre>GET
http://www.google.com:80/ HTTP/1.1
Accept: image/gif, image/jpeg, image/pjpeg, image/pjpeg,
application/x-shockwave-flash, application/x-ms-application,
application/x-ms-xbap, application/vnd.ms-xpsdocument,
application/xaml+xml, application/vnd.ms-excel, application/msword,
application/vnd.ms-powerpoint, */*
Accept-Language: en-us
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1;
Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR
3.0.4506.2152; .NET CLR 3.5.30729; MS-RTC LM 8)
Accept-Encoding: gzip, deflate
Proxy-Connection: Keep-Alive
Host: www.google.com
Cookie: PREF=ID=f62bdfb9ddfa6d95:U=f9fa8d5642020ddc:FF=0:TM=1298404608:LM=1298404612:S=r57tu3HXodFPbvD_;
NID=44=YBi0eS2GaFUy2OaFxeX7C-tl9gOF_cUgWtvFMBPqkrf-7iO_M3bx4UG1TUxJgiBq2iIsbbTjaNMmagGwD0PYDvgXldDIniCedHPzbW0gU1JxWOswb0ygdzNw6ZTP2svi
X-Forwarded-For: 10.10.251.10

</pre><P>The error was : <P><pre>Connection refused: connect
at java.net.PlainSocketImpl.socketConnect(Native Method)
at java.net.PlainSocketImpl.doConnect(Unknown Source)
at java.net.PlainSocket

-rich
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ws-ng-pcap-3-2-2010.pcap
Type: application/octet-stream
Size: 18220 bytes
Desc: not available
Url : https://lists.owasp.org/pipermail/owasp-webscarab/attachments/20110302/e780adfb/attachment-0002.obj 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ws-pcap-3-2-2010.pcap
Type: application/octet-stream
Size: 3941 bytes
Desc: not available
Url : https://lists.owasp.org/pipermail/owasp-webscarab/attachments/20110302/e780adfb/attachment-0003.obj 