ScreenScape net statistics or reverse engineer ajax

[LewisPringle]

For example, on one router: http://192.168.244.1/Main_TrafficMonitor_realtime.asp

does ajax call curl "http://192.168.244.1/ajax_status.xml?hash=0.3233910547797467" -H "DNT: 1" -H "Accept-Encoding: gzip, deflate" -H "Accept-Language: en-US,en;q=0.9" -H "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.80 Safari/537.36" -H "Accept: /" -H "Referer: http://192.168.244.1/Main_TrafficMonitor_realtime.asp" -H "Cookie: traffic_warning_0=2019.5:1; asus_token=1447965834171154779828648246616; bw_24tab=INTERNET; bw_24refresh=1; bw_rtab=INTERNET" -H "Connection: keep-alive"

which works, but then

curl "http://192.168.244.1/update.cgi" -H "Origin: http://192.168.244.1" -H "Accept-Encoding: gzip, deflate" -H "Accept-Language: en-US,en;q=0.9" -H "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.80 Safari/537.36" -H "Content-Type: text/plain;charset=UTF-8" -H "Accept: /" -H "Referer: http://192.168.244.1/Main_TrafficMonitor_realtime.asp" -H "Cookie: traffic_warning_0=2019.5:1; asus_token=1447965834171154779828648246616; bw_24tab=INTERNET; bw_24refresh=1; bw_rtab=INTERNET" -H "Connection: keep-alive" -H "DNT: 1" --data-binary "output=netdev^&_http_id=TIDe855a6487043d70a" --compressed --insecure

• which has the most interesting data - doesn't work.