search

sonertari / SSLproxy

Transparent SSL/TLS proxy for decrypting and diverting network traffic to other programs, such as UTM services, for deep SSL inspection
BSD 2-Clause "Simplified" License
377 stars 98 forks source link

own written LP doesnt work with ssl option #36

Closed Lo0815 closed 2 years ago

Lo0815 commented 2 years ago

Hi, i wrote my own lp in java with the lib (Netty), this works good as long as i specify https when starting the sslproxy, but when i specify ssl in the proxyspecs, my client browser website doesn't seem to load properly anymore. What could be the reason for this behavior?

when i specify sslproxy -D -k test.key -c test.crt https 10.42.0.1 8443 up:1212 it works correctly

but when i specify sslproxy -D -k test.key -c test.crt ssl 10.42.0.1 8443 up:1212 some sites doesnt load correctly anymore

Here are the debug output of SSLproxy for for one of these sites,

It seems that the website is never load completly

What are the differences in the packets sent to the LP when I specify https or ssl?

What am I missing?

Thanks in advance and Kind regards!

SSLproxy v0.9.2-dirty (built 2021-12-06)
Copyright (c) 2017-2021, Soner Tari <sonertari@gmail.com>
https://github.com/sonertari/SSLproxy
Copyright (c) 2009-2019, Daniel Roethlisberger <daniel@roe.ch>
https://www.roe.ch/SSLsplit
Build info: V:GIT
Features: -DHAVE_NETFILTER
NAT engines: netfilter* tproxy
netfilter: IP_TRANSPARENT IP6T_SO_ORIGINAL_DST
Local process info support: no
compiled against OpenSSL 1.1.1f  31 Mar 2020 (1010106f)
rtlinked against OpenSSL 1.1.1f  31 Mar 2020 (1010106f)
OpenSSL has support for TLS extensions
TLS Server Name Indication (SNI) supported
OpenSSL is thread-safe with THREADID
OpenSSL has engine support
Using SSL_MODE_RELEASE_BUFFERS
SSL/TLS protocol availability: tls10 tls11 tls12 tls13 
SSL/TLS algorithm availability: !SHA0 RSA DSA ECDSA DH ECDH EC
OpenSSL option availability: SSL_OP_NO_COMPRESSION SSL_OP_NO_TICKET SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION SSL_OP_TLS_ROLLBACK_BUG
compiled against libevent 2.1.11-stable
rtlinked against libevent 2.1.11-stable
compiled against libnet 1.1.6
rtlinked against libnet 1.1.6
compiled against libpcap n/a
rtlinked against libpcap 1.9.1 (with TPACKET_V3)
compiled against sqlite 3.31.1
rtlinked against sqlite 3.31.1
4 CPU cores detected
Generated 2048 bit RSA key for leaf certs.
Global conn opts: negotiate>=tls10<=tls13|ALL:-aNULL|TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256|no ecdhcurve|no leafcrlurl|remove_http_referer|verify_peer|no user_auth_url|300|8192
proxyspecs:
- listen=[10.42.0.1]:8443 ssl netfilter
divert addr= [127.0.0.1]:1212
return addr= [127.0.0.1]:0
opts= conn opts: negotiate>=tls10<=tls13|ALL:-aNULL|TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256|no ecdhcurve|no leafcrlurl|remove_http_referer|verify_peer|no user_auth_url|300|8192
divert||
Loaded Global CA: '/C=DE/ST=Germany/L=Munich/O=TUM/OU=cool/CN=Cool/emailAddress=cool@cool.de'
Loaded ProxySpec CA: '/C=DE/ST=Germany/L=Munich/O=TUM/OU=cool//CN=Cool/emailAddress=cool@cool.de'
SSL/TLS leaf certificates taken from:
- Global generated on the fly
Privsep fastpath disabled
Created self-pipe [r=3,w=4]
Created chld-pipe [r=5,w=6]
Created socketpair 0 [p=7,c=8]
Created socketpair 1 [p=9,c=10]
Created socketpair 2 [p=11,c=12]
Created socketpair 3 [p=13,c=14]
Created socketpair 4 [p=15,c=16]
Created socketpair 5 [p=17,c=18]
Privsep parent pid 15149
Privsep child pid 15150
Using libevent backend 'epoll'
Event base supports: edge yes, O(1) yes, anyfd no
Received privsep req type 03 sz 9 on srvsock 7
Dropped privs to user nobody group - chroot -
Received privsep req type 00 sz 1 on srvsock 9
Received privsep req type 00 sz 1 on srvsock 11
Received privsep req type 00 sz 1 on srvsock 13
Inserted events:
Received privsep req type 00 sz 1 on srvsock 15
Received privsep req type 00 sz 1 on srvsock 17
  0x55aea32afd78 [fd  4] Read Persist Internal
  0x55aea32aff50 [fd  6] Read Persist Internal
  0x55aea32b0368 [fd  7] Read Persist
  0x55aea32af1c0 [sig 1] Signal Persist
  0x55aea3281910 [sig 2] Signal Persist
  0x55aea32af810 [sig 3] Signal Persist
  0x55aea32af570 [sig 10] Signal Persist
  0x55aea32af780 [sig 13] Signal Persist
  0x55aea32ad660 [sig 15] Signal Persist
  0x55aea32b0710 [fd  -1] Persist Timeout=1638800186.794749
Active events:
Initialized 8 connection handling threads
Started 8 connection handling threads
Starting main event loop.
SNI peek: [login.live.com] [complete], fd=41
Connecting to [40.126.31.139]:443
===> Original server certificate:
Subject DN: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=graph.windows.net
Common Names: graph.windows.net/*.aadkds.ppe.reporting.msidentity.com/*.aadkds.prd.reporting.msidentity.com/*.accesscontrol.aadtst3.windows-int.net/*.accesscontrol.windows-ppe.net/*.accesscontrol.windows.net/*.adls.aadkds.ppe.reporting.msidentity.com/*.adls.aadkds.prd.reporting.msidentity.com/*.adti.aadkds.ppe.reporting.msidentity.com/*.adti.aadkds.prd.reporting.msidentity.com/*.authapp.net/*.authorization.azure-ppe.net/*.authorization.azure.net/*.b2clogin.com/*.cpim.windows.net/*.d2k.aadkds.ppe.reporting.msidentity.com/*.d2k.aadkds.prd.reporting.msidentity.com/*.fp.measure.office.com/*.Identity.azure-int.net/*.Identity.azure.net/*.login.live.com/*.login.microsoft.com/*.login.microsoftonline.com/*.login.windows-ppe.net/*.logincert.microsoft.com/*.logincert.windows-ppe.net/*.microsoftaik-int.azure-int.net/*.microsoftaik.azure.net/*.r.login.microsoft.com/*.r.login.microsoftonline.com/*.windows-ppe.net/aadg.windows.net/aadgv6.ppe.windows.net/aadgv6.windows.net/accesscontrol.aadtst3.windows-int.net/account.live-int.com/account.live.com/api.login.live-int.com/api.login.microsoftonline.com/api.password.ccsctp.com/api.passwordreset.microsoftonline.com/autologon.microsoftazuread-sso.com/becws.ccsctp.com/clientconfig.microsoftonline-p-int.net/clientconfig.microsoftonline-p.net/companymanager.ccsctp.com/companymanager.microsoftonline.com/cpim.windows.net/device.login.microsoftonline.com/device.login.windows-ppe.net/directoryproxy.ppe.windows.net/directoryproxy.windows.net/gatewayforking.windows.net/graph.ppe.windows.net/graph.windows.net/graphstore.windows.net/ipv6.login.live-int.com/login-us.microsoftonline.com/login.live-int.com/login.live.com/login.microsoft-ppe.com/login.microsoft.com/login.microsoftonline-int.com/login.microsoftonline-p.com/login.microsoftonline-pst.com/login.microsoftonline.com/login.passport-int.com/login.windows.net/logincert.microsoftonline-int.com/logincert.microsoftonline.com/loginnet.passport-int.com/microsoftaik-int.azure-int.net/microsoftaik.azure.net/msnia.login.live-int.com/msnialogin.passport-int.com/nexus.microsoftonline-p-int.com/nexus.microsoftonline-p.com/nexus.passport-int.com/pas.windows-ppe.net/pas.windows.net/password.ccsctp.com/passwordreset.activedirectory.windowsazure.us/passwordreset.microsoftonline.com/provisioning.microsoftonline.com/signup.live-int.com/signup.live.com/sts.windows.net/tools.login.live-int.com/xml.login.live-int.com/xml.login.live.com
Fingerprint: CC:AE:81:23:0D:77:3F:D5:B7:FE81:29:0D:3E:60:D6:EC:A3:20:D1
Certificate cache: MISS
===> Forged server certificate:
Subject DN: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=graph.windows.net
Common Names: graph.windows.net/*.aadkds.ppe.reporting.msidentity.com/*.aadkds.prd.reporting.msidentity.com/*.accesscontrol.aadtst3.windows-int.net/*.accesscontrol.windows-ppe.net/*.accesscontrol.windows.net/*.adls.aadkds.ppe.reporting.msidentity.com/*.adls.aadkds.prd.reporting.msidentity.com/*.adti.aadkds.ppe.reporting.msidentity.com/*.adti.aadkds.prd.reporting.msidentity.com/*.authapp.net/*.authorization.azure-ppe.net/*.authorization.azure.net/*.b2clogin.com/*.cpim.windows.net/*.d2k.aadkds.ppe.reporting.msidentity.com/*.d2k.aadkds.prd.reporting.msidentity.com/*.fp.measure.office.com/*.Identity.azure-int.net/*.Identity.azure.net/*.login.live.com/*.login.microsoft.com/*.login.microsoftonline.com/*.login.windows-ppe.net/*.logincert.microsoft.com/*.logincert.windows-ppe.net/*.microsoftaik-int.azure-int.net/*.microsoftaik.azure.net/*.r.login.microsoft.com/*.r.login.microsoftonline.com/*.windows-ppe.net/aadg.windows.net/aadgv6.ppe.windows.net/aadgv6.windows.net/accesscontrol.aadtst3.windows-int.net/account.live-int.com/account.live.com/api.login.live-int.com/api.login.microsoftonline.com/api.password.ccsctp.com/api.passwordreset.microsoftonline.com/autologon.microsoftazuread-sso.com/becws.ccsctp.com/clientconfig.microsoftonline-p-int.net/clientconfig.microsoftonline-p.net/companymanager.ccsctp.com/companymanager.microsoftonline.com/cpim.windows.net/device.login.microsoftonline.com/device.login.windows-ppe.net/directoryproxy.ppe.windows.net/directoryproxy.windows.net/gatewayforking.windows.net/graph.ppe.windows.net/graph.windows.net/graphstore.windows.net/ipv6.login.live-int.com/login-us.microsoftonline.com/login.live-int.com/login.live.com/login.microsoft-ppe.com/login.microsoft.com/login.microsoftonline-int.com/login.microsoftonline-p.com/login.microsoftonline-pst.com/login.microsoftonline.com/login.passport-int.com/login.windows.net/logincert.microsoftonline-int.com/logincert.microsoftonline.com/loginnet.passport-int.com/microsoftaik-int.azure-int.net/microsoftaik.azure.net/msnia.login.live-int.com/msnialogin.passport-int.com/nexus.microsoftonline-p-int.com/nexus.microsoftonline-p.com/nexus.passport-int.com/pas.windows-ppe.net/pas.windows.net/password.ccsctp.com/passwordreset.activedirectory.windowsazure.us/passwordreset.microsoftonline.com/provisioning.microsoftonline.com/signup.live-int.com/signup.live.com/sts.windows.net/tools.login.live-int.com/xml.login.live-int.com/xml.login.live.com
Fingerprint: DC:03:45:07:E0:49:4B:CF:5D:54EA:16:6C:F3:20:85:F2:88:5E:8C
SSL connected to [40.126.31.139]:443 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
CLIENT_RANDOM 7F35241244EAD2D9387FA007C2EF23ADE58E0A1A124F081C4E29F5398F9E6B53 8FE5EAD52032061BB380F128BABD5A24444EC3AA124F88E82420383668E3B88688FF27FC61B89C5C5C365FC29F28983B
Certificate cache: KEEP (SNI match or target mode)
SSL_free() in state 0000001a = 001a = TWSD (SSLv3/TLS write server done) [accept socket]
SSL disconnected to [40.126.31.139]:443, fd=41
SSL disconnected from [10.42.0.230]:64063, fd=41
SSL_free() in state 00000001 = 0001 = SSLOK  (SSL negotiation finished successfully) [connect socket]
SNI peek: [www.ebay.de] [complete], fd=41
Connecting to [84.53.189.188]:443
===> Original server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/www.ebay.com/aka-sandbox.ebay.com/cache.ebay.com/cache.vivanuncios.com.mx/careers.ebayinc.com/cdn.roma.ebay.com/cr.qa.ebaystatic.com/dsa.ebay.co.uk/dsa.ebay.com/dsa.ebay.de/ebay.com.au/ebay.us/ebaypartnernetwork.ebay.com/ecg-api.vivanuncios.com.mx/ecg-apis.vivanuncios.com.mx/feed.ebay.com.au/galleryplus.ebayimg.com/gh.ebaystatic.com/ir.ebaystatic.com/ir.sandbox.ebaystatic.com/m.ebay.at/m.ebay.ca/m.ebay.ie/m.ebay.ph/p.ebaystatic.com/pages.ebay.ca/pages.ebay.com.au/pages.ebay.in/partnernetwork.ebay.co.uk/partnernetwork.ebay.com/partnernetwork.ebay.com.au/partnernetwork.ebay.de/partnernetwork.ebay.es/partnernetwork.ebay.fr/partnernetwork.ebay.it/pics.ebaystatic.com/poc.ebay.com/protool.vivanuncios.com.mx/q.ebaystatic.com/reco.ebay.com/rest.ebay.com/rs.sandbox.ebaystatic.com/rs.xstage.ebaystatic.com/rtm.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/sslgalleryplus.ebayimg.com/static.ebayinc.com/tech.ebayinc.com/vivanuncios.com.mx/vmp.ebay.com/www.befr.ebay.be/www.benl.ebay.be/www.cafr.ebay.ca/www.ebay.at/www.ebay.be/www.ebay.ca/www.ebay.ch/www.ebay.co.uk/www.ebay.com.au/www.ebay.com.hk/www.ebay.com.my/www.ebay.com.sg/www.ebay.de/www.ebay.es/www.ebay.fr/www.ebay.ie/www.ebay.in/www.ebay.it/www.ebay.nl/www.ebay.ph/www.ebay.pl/www.ebay.us/www.ebayinc.com/www.vivanuncios.com.mx
Fingerprint: DD:AC:89:D2:F5:70:7C:BF:A4:6C4C:3B:42:0E:F1:7E:F4:56:FB:C5
Certificate cache: MISS
===> Forged server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/www.ebay.com/aka-sandbox.ebay.com/cache.ebay.com/cache.vivanuncios.com.mx/careers.ebayinc.com/cdn.roma.ebay.com/cr.qa.ebaystatic.com/dsa.ebay.co.uk/dsa.ebay.com/dsa.ebay.de/ebay.com.au/ebay.us/ebaypartnernetwork.ebay.com/ecg-api.vivanuncios.com.mx/ecg-apis.vivanuncios.com.mx/feed.ebay.com.au/galleryplus.ebayimg.com/gh.ebaystatic.com/ir.ebaystatic.com/ir.sandbox.ebaystatic.com/m.ebay.at/m.ebay.ca/m.ebay.ie/m.ebay.ph/p.ebaystatic.com/pages.ebay.ca/pages.ebay.com.au/pages.ebay.in/partnernetwork.ebay.co.uk/partnernetwork.ebay.com/partnernetwork.ebay.com.au/partnernetwork.ebay.de/partnernetwork.ebay.es/partnernetwork.ebay.fr/partnernetwork.ebay.it/pics.ebaystatic.com/poc.ebay.com/protool.vivanuncios.com.mx/q.ebaystatic.com/reco.ebay.com/rest.ebay.com/rs.sandbox.ebaystatic.com/rs.xstage.ebaystatic.com/rtm.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/sslgalleryplus.ebayimg.com/static.ebayinc.com/tech.ebayinc.com/vivanuncios.com.mx/vmp.ebay.com/www.befr.ebay.be/www.benl.ebay.be/www.cafr.ebay.ca/www.ebay.at/www.ebay.be/www.ebay.ca/www.ebay.ch/www.ebay.co.uk/www.ebay.com.au/www.ebay.com.hk/www.ebay.com.my/www.ebay.com.sg/www.ebay.de/www.ebay.es/www.ebay.fr/www.ebay.ie/www.ebay.in/www.ebay.it/www.ebay.nl/www.ebay.ph/www.ebay.pl/www.ebay.us/www.ebayinc.com/www.vivanuncios.com.mx
Fingerprint: 54:81:1C:9C:AE:9B:E4:10:F8:EB77:A1:AB:66:E7:FF:B7:86:52:FF
SSL connected to [84.53.189.188]:443 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
CLIENT_RANDOM FD98B69E7FA3AF7A3B7EC58BB32CC491C9F61C7AEBE08B07249FB5044C5A5F3A 75D5D6557B774F50D33680181F2BBC22CA7016000F41FAAC60976E500E429FBE1178FF1F75BE4B72B19E96CACA90FB39
SSL session cache: MISS
Certificate cache: KEEP (SNI match or target mode)
CONN: ssl 10.42.0.230 64066 84.53.189.188 443 sni:www.ebay.de names:www.ebay.com/www.ebay.com/aka-sandbox.ebay.com/cache.ebay.com/cache.vivanuncios.com.mx/careers.ebayinc.com/cdn.roma.ebay.com/cr.qa.ebaystatic.com/dsa.ebay.co.uk/dsa.ebay.com/dsa.ebay.de/ebay.com.au/ebay.us/ebaypartnernetwork.ebay.com/ecg-api.vivanuncios.com.mx/ecg-apis.vivanuncios.com.mx/feed.ebay.com.au/galleryplus.ebayimg.com/gh.ebaystatic.com/ir.ebaystatic.com/ir.sandbox.ebaystatic.com/m.ebay.at/m.ebay.ca/m.ebay.ie/m.ebay.ph/p.ebaystatic.com/pages.ebay.ca/pages.ebay.com.au/pages.ebay.in/partnernetwork.ebay.co.uk/partnernetwork.ebay.com/partnernetwork.ebay.com.au/partnernetwork.ebay.de/partnernetwork.ebay.es/partnernetwork.ebay.fr/partnernetwork.ebay.it/pics.ebaystatic.com/poc.ebay.com/protool.vivanuncios.com.mx/q.ebaystatic.com/reco.ebay.com/rest.ebay.com/rs.sandbox.ebaystatic.com/rs.xstage.ebaystatic.com/rtm.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/sslgalleryplus.ebayimg.com/static.ebayinc.com/tech.ebayinc.com/vivanuncios.com.mx/vmp.ebay.com/www.befr.ebay.be/www.benl.ebay.be/www.cafr.ebay.ca/www.ebay.at/www.ebay.be/www.ebay.ca/www.ebay.ch/www.ebay.co.uk/www.ebay.com.au/www.ebay.com.hk/www.ebay.com.my/www.ebay.com.sg/www.ebay.de/www.ebay.es/www.ebay.fr/www.ebay.ie/www.ebay.in/www.ebay.it/www.ebay.nl/www.ebay.ph/www.ebay.pl/www.ebay.us/www.ebayinc.com/www.vivanuncios.com.mx sproto:TLSv1.3:TLS_AES_128_GCM_SHA256 dproto:TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256 origcrt:DDAC89D2F5707CBFA46C4C3B420EF17EF456FBC5 usedcrt:54811C9CAE9BE410F8EB77A1AB66E7FFB78652FF user:-
SSL connected to [84.53.189.188]:443 TLSv1.3 TLS_AES_128_GCM_SHA256
CLIENT_RANDOM 8D4AE2AF715A8F913E85CF05CCB55CB15D99117AD55949EA34334634A99E94E0 3772185D58A80E211CFAEBE186EDF86177A6EE60CCD89E1367F6D28C1B8D095700000000000000000000000000000000
Child connecting to [84.53.189.188]:443
SNI peek: [ir.ebaystatic.com] [complete], fd=46
Connecting to [93.184.221.225]:443
SNI peek: [ir.ebaystatic.com] [complete], fd=47
Connecting to [93.184.221.225]:443
SNI peek: [ir.ebaystatic.com] [complete], fd=48
Connecting to [93.184.221.225]:443
SNI peek: [ir.ebaystatic.com] [complete], fd=49
Connecting to [93.184.221.225]:443
SNI peek: [ir.ebaystatic.com] [complete], fd=51
Connecting to [93.184.221.225]:443
SNI peek: [ir.ebaystatic.com] [complete], fd=56
Connecting to [93.184.221.225]:443
SNI peek: [www.ebay.com] [complete], fd=58
Connecting to [84.53.189.76]:443
===> Original server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
Fingerprint: 8D:4B:BB:CD:E0:E4:65:CC:56:15CF:00:B0:97:A2:57:B7:79:28:92
Certificate cache: MISS
===> Original server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
===> Original server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
Fingerprint: 8D:4B:BB:CD:E0:E4:65:CC:56:15CF:00:B0:97:A2:57:B7:79:28:92
Certificate cache: MISS
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
Fingerprint: 8D:4B:BB:CD:E0:E4:65:CC:56:15CF:00:B0:97:A2:57:B7:79:28:92
Certificate cache: MISS
===> Original server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
Fingerprint: 8D:4B:BB:CD:E0:E4:65:CC:56:15CF:00:B0:97:A2:57:B7:79:28:92
Certificate cache: MISS
===> Forged server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
Fingerprint: 71:3A:E9:CE:8D:DF:28:9E:FD:2B5A:C8:8E:76:FF:4B:7A:2E:C3:0B
SSL connected to [93.184.221.225]:443 TLSv1.3 TLS_AES_256_GCM_SHA384
CLIENT_RANDOM D8D50632B4792E937DC252FA3EE44362B0120DAE97E19531544A2E1A4A1CED30 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
SSL session cache: MISS
Certificate cache: KEEP (SNI match or target mode)
===> Forged server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
Fingerprint: E4:8A:65:4E:B6:9E:3F:C9:4F:FF89:0E:24:9F:0B:75:E1:6D:2F:AC
===> Forged server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
Fingerprint: 96:8F:83:CF:20:17:4E:21:A9:EEEB:A5:7F:16:D6:C5:69:FB:20:AB
===> Original server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/www.ebay.com/ucpstatic.ebay.com/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/sofe.ebay.at/shippingtool.ebay.cn/securepics.ebaystatic.com/secureir.sandbox.ebaystatic.com/secureir.ebaystatic.com/secureinclude.ebaystatic.com/rover.ebay.it/rover.ebay.in/rover.ebay.fr/rover.ebay.de/rover.ebay.com.au/rover.ebay.com/rover.ebay.co.uk/m.ebay.it/m.ebay.fr/m.ebay.de/m.ebay.com.au/identity-api.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/anywhere.ebay.in/anywhere.ebay.ie/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/akamai.ebaycdn.net/akamai-static.ebaycdn.net/include.ebaystatic.com
Fingerprint: A0:7C:07:E0:45:B7:94:45:A2:1E14:45:41:0D:2A:6A:48:05:80:A5
Certificate cache: MISS
===> Forged server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
Fingerprint: 56:42:2B:2A:6D:4D:F0:7B:59:C7CA:F4:31:15:B2:F3:0B:DB:80:4F
===> Forged server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/www.ebay.com/ucpstatic.ebay.com/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/sofe.ebay.at/shippingtool.ebay.cn/securepics.ebaystatic.com/secureir.sandbox.ebaystatic.com/secureir.ebaystatic.com/secureinclude.ebaystatic.com/rover.ebay.it/rover.ebay.in/rover.ebay.fr/rover.ebay.de/rover.ebay.com.au/rover.ebay.com/rover.ebay.co.uk/m.ebay.it/m.ebay.fr/m.ebay.de/m.ebay.com.au/identity-api.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/anywhere.ebay.in/anywhere.ebay.ie/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/akamai.ebaycdn.net/akamai-static.ebaycdn.net/include.ebaystatic.com
Fingerprint: 44:1A:8E:D8:81:BD:9E:E4:7C:261D:AB:09:2F:96:8F:CE:9C:83:A6
CONN: ssl 10.42.0.230 64071 93.184.221.225 443 sni:ir.ebaystatic.com names:www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com sproto:TLSv1.3:TLS_AES_128_GCM_SHA256 dproto:TLSv1.3:TLS_AES_256_GCM_SHA384 origcrt:8D4BBBCDE0E465CC5615CF00B097A257B7792892 usedcrt:713AE9CE8DDF289EFD2B5AC88E76FF4B7A2EC30B user:-
SSL connected to [93.184.221.225]:443 TLSv1.3 TLS_AES_128_GCM_SHA256
CLIENT_RANDOM B580CD74ED195B96008C9C72873738B555BC490055E500A2EC4C3966BE3F9B3D A4E258FB8A08138CE45C2E50CF72BE96288C201F812F6F1D42CD030402F089CA00000000000000000000000000000000
SSL connected to [93.184.221.225]:443 TLSv1.3 TLS_AES_256_GCM_SHA384
CLIENT_RANDOM 814D31C30162EE6E2A9B0834FB39851FF33AD0F543CB47C4BF35E56B823A5FC6 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
SSL session cache: MISS
Certificate cache: KEEP (SNI match or target mode)
===> Original server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
Fingerprint: 8D:4B:BB:CD:E0:E4:65:CC:56:15CF:00:B0:97:A2:57:B7:79:28:92
Certificate cache: HIT
===> Forged server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
Fingerprint: 56:42:2B:2A:6D:4D:F0:7B:59:C7CA:F4:31:15:B2:F3:0B:DB:80:4F
===> Original server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
Fingerprint: 8D:4B:BB:CD:E0:E4:65:CC:56:15CF:00:B0:97:A2:57:B7:79:28:92
Certificate cache: HIT
===> Forged server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
SSL connected to [93.184.221.225]:443 TLSv1.3 TLS_AES_256_GCM_SHA384
CLIENT_RANDOM CC819194361FC99E2BB42182821444079CBBDF70A8A6EEDDFFF15D25DCEDD2E2 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
SSL session cache: MISS
SSL connected to [84.53.189.76]:443 TLSv1.3 TLS_AES_256_GCM_SHA384
CLIENT_RANDOM 73527BA7374260CC0EE6261DBCF22DC59871989548B7931D697EC46AE6EBA466 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Certificate cache: KEEP (SNI match or target mode)
SSL session cache: MISS
Certificate cache: KEEP (SNI match or target mode)
Fingerprint: 56:42:2B:2A:6D:4D:F0:7B:59:C7CA:F4:31:15:B2:F3:0B:DB:80:4F
SSL connected to [93.184.221.225]:443 TLSv1.3 TLS_AES_256_GCM_SHA384
CLIENT_RANDOM B9997C48D6BD43D506DA2F588C3F9C7C7562C65E85C6DC61E8870942BFB9E352 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
SSL session cache: MISS
Certificate cache: KEEP (SNI match or target mode)
SSL connected to [93.184.221.225]:443 TLSv1.3 TLS_AES_256_GCM_SHA384
CLIENT_RANDOM D7BA2677A7A0B20361833D66ADB233B24705DB415734A3B00865E8BB80DB712D 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
SSL session cache: MISS
Certificate cache: KEEP (SNI match or target mode)
SSL connected to [93.184.221.225]:443 TLSv1.3 TLS_AES_256_GCM_SHA384
CLIENT_RANDOM BAC72BBB2D72A1EC1E7E6EB63158BB8F7FB9CD493FA4101F05D68AD0F341174C 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
SSL session cache: MISS
Certificate cache: KEEP (SNI match or target mode)
CONN: ssl 10.42.0.230 64068 93.184.221.225 443 sni:ir.ebaystatic.com names:www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com sproto:TLSv1.3:TLS_AES_128_GCM_SHA256 dproto:TLSv1.3:TLS_AES_256_GCM_SHA384 origcrt:8D4BBBCDE0E465CC5615CF00B097A257B7792892 usedcrt:968F83CF20174E21A9EEEBA57F16D6C569FB20AB user:-
SSL connected to [93.184.221.225]:443 TLSv1.3 TLS_AES_128_GCM_SHA256
CLIENT_RANDOM BD740B1B881187121722AB0C7B5555C1C4181337CA5E027B7C950EEB246C0CAB DBF43DFC8487BC27C2FA9EDD9516E63F48E6374A8C010030D62D19EB07A7674300000000000000000000000000000000
CONN: ssl 10.42.0.230 64073 84.53.189.76 443 sni:www.ebay.com names:www.ebay.com/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/www.ebay.com/ucpstatic.ebay.com/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/sofe.ebay.at/shippingtool.ebay.cn/securepics.ebaystatic.com/secureir.sandbox.ebaystatic.com/secureir.ebaystatic.com/secureinclude.ebaystatic.com/rover.ebay.it/rover.ebay.in/rover.ebay.fr/rover.ebay.de/rover.ebay.com.au/rover.ebay.com/rover.ebay.co.uk/m.ebay.it/m.ebay.fr/m.ebay.de/m.ebay.com.au/identity-api.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/anywhere.ebay.in/anywhere.ebay.ie/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/akamai.ebaycdn.net/akamai-static.ebaycdn.net/include.ebaystatic.com sproto:TLSv1.3:TLS_AES_128_GCM_SHA256 dproto:TLSv1.3:TLS_AES_256_GCM_SHA384 origcrt:A07C07E045B79445A21E1445410D2A6A480580A5 usedcrt:441A8ED881BD9EE47C261DAB092F968FCE9C83A6 user:-
SSL connected to [84.53.189.76]:443 TLSv1.3 TLS_AES_128_GCM_SHA256
CLIENT_RANDOM 60C8D6A431CB432AEAF94D061772F0AF3B87A213C0A531806A306E7B34FE58ED A382ACB7C4FEF6EED0A8A3A19CE5988BE4002E7FFF4F3026C6CB50C372119C0300000000000000000000000000000000
CONN: ssl 10.42.0.230 64067 93.184.221.225 443 sni:ir.ebaystatic.com names:www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com sproto:TLSv1.3:TLS_AES_128_GCM_SHA256 dproto:TLSv1.3:TLS_AES_256_GCM_SHA384 origcrt:8D4BBBCDE0E465CC5615CF00B097A257B7792892 usedcrt:56422B2A6D4DF07B59C7CAF43115B2F30BDB804F user:-
SSL connected to [93.184.221.225]:443 TLSv1.3 TLS_AES_128_GCM_SHA256
CLIENT_RANDOM 1C635755AD8BB99DC25F1E3D40032EB53F63652203BA55B7F524E30D551AAF3E 187E9BC1AC5F0D10E3ADE6D9660EBCB4E16AEEB57174373BBBB43546BEA8CACA00000000000000000000000000000000
CONN: ssl 10.42.0.230 64072 93.184.221.225 443 sni:ir.ebaystatic.com names:www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com sproto:TLSv1.3:TLS_AES_128_GCM_SHA256 dproto:TLSv1.3:TLS_AES_256_GCM_SHA384 origcrt:8D4BBBCDE0E465CC5615CF00B097A257B7792892 usedcrt:56422B2A6D4DF07B59C7CAF43115B2F30BDB804F user:-
SSL connected to [93.184.221.225]:443 TLSv1.3 TLS_AES_128_GCM_SHA256
CLIENT_RANDOM C7CA33BD6D5046241D425D0CC59E4A1D76A0DDD8378FFA17C624B7CF2FDA2732 17F2925C68C47166AEA64691E73ABAB468A9C051D5878DA5EEC866D53FBD4EF500000000000000000000000000000000
CONN: ssl 10.42.0.230 64069 93.184.221.225 443 sni:ir.ebaystatic.com names:www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com sproto:TLSv1.3:TLS_AES_128_GCM_SHA256 dproto:TLSv1.3:TLS_AES_256_GCM_SHA384 origcrt:8D4BBBCDE0E465CC5615CF00B097A257B7792892 usedcrt:56422B2A6D4DF07B59C7CAF43115B2F30BDB804F user:-
SSL connected to [93.184.221.225]:443 TLSv1.3 TLS_AES_128_GCM_SHA256
CLIENT_RANDOM FC557AAA6264BBA97E939A7594B6D1F5EA28BF6CEE989D6FBC1BD4B11F9C1882 899E0CA952D77821B6342903680AC3D35A0384B3B0327CB80C054E5F39D1985100000000000000000000000000000000
CONN: ssl 10.42.0.230 64070 93.184.221.225 443 sni:ir.ebaystatic.com names:www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com sproto:TLSv1.3:TLS_AES_128_GCM_SHA256 dproto:TLSv1.3:TLS_AES_256_GCM_SHA384 origcrt:8D4BBBCDE0E465CC5615CF00B097A257B7792892 usedcrt:E48A654EB69E3FC94FFF890E249F0B75E16D2FAC user:-
SSL connected to [93.184.221.225]:443 TLSv1.3 TLS_AES_128_GCM_SHA256
CLIENT_RANDOM 6F8A83597BA0A229D2C15C20425F6819DB86025D78D67CB2C7B7E39ED4078F5F E60FAFF9DCC345F2650BE006DE70DEB4A4661A6B57FEA7BB9A24BF861E2DA09300000000000000000000000000000000
Child connecting to [93.184.221.225]:443
Child connecting to [84.53.189.76]:443
Child connecting to [93.184.221.225]:443
Child connecting to [93.184.221.225]:443
Child connecting to [93.184.221.225]:443
Child connecting to [93.184.221.225]:443
SNI peek: [i.ebayimg.com] [complete], fd=80
Connecting to [199.232.190.206]:443
===> Original server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=i.ebayimg.com
Common Names: i.ebayimg.com/apisd.ebay.com/i.ebayimg.com/i1.ebayimg.com/i2.ebayimg.com/i3.ebayimg.com/ir.ebaystatic.com/secureir.ebaystatic.com/thumbs.ebaystatic.com/thumbs1.ebaystatic.com/thumbs2.ebaystatic.com/thumbs3.ebaystatic.com/thumbs4.ebaystatic.com/t3-apisd.ebay.com
Fingerprint: 46:10:68:D3:20:3D:18:AC:87:3517:83:E9:36:E5:69:4D:CE:17:1C
Certificate cache: MISS
===> Forged server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=i.ebayimg.com
Common Names: i.ebayimg.com/apisd.ebay.com/i.ebayimg.com/i1.ebayimg.com/i2.ebayimg.com/i3.ebayimg.com/ir.ebaystatic.com/secureir.ebaystatic.com/thumbs.ebaystatic.com/thumbs1.ebaystatic.com/thumbs2.ebaystatic.com/thumbs3.ebaystatic.com/thumbs4.ebaystatic.com/t3-apisd.ebay.com
Fingerprint: E5:D5:7F:85:E3:EB:DC:5A:36:76F7:F6:80:04:FF:6E:55:9C:3C:DF
SSL connected to [199.232.190.206]:443 TLSv1.3 TLS_AES_256_GCM_SHA384
CLIENT_RANDOM A32CF6C3634F043C1F715863C8BCCC8ECB472F98268A91DEAA82A2B1ED0B207A 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
SSL session cache: MISS
Certificate cache: KEEP (SNI match or target mode)
CONN: ssl 10.42.0.230 64074 199.232.190.206 443 sni:i.ebayimg.com names:i.ebayimg.com/apisd.ebay.com/i.ebayimg.com/i1.ebayimg.com/i2.ebayimg.com/i3.ebayimg.com/ir.ebaystatic.com/secureir.ebaystatic.com/thumbs.ebaystatic.com/thumbs1.ebaystatic.com/thumbs2.ebaystatic.com/thumbs3.ebaystatic.com/thumbs4.ebaystatic.com/t3-apisd.ebay.com sproto:TLSv1.3:TLS_AES_128_GCM_SHA256 dproto:TLSv1.3:TLS_AES_256_GCM_SHA384 origcrt:461068D3203D18AC87351783E936E5694DCE171C usedcrt:E5D57F85E3EBDC5A3676F7F68004FF6E559C3CDF user:-
SSL connected to [199.232.190.206]:443 TLSv1.3 TLS_AES_128_GCM_SHA256
CLIENT_RANDOM F1959D4AA845D61049A2D1E0C88EBF7E9C0A6C83BF69C76955198C219D5F6058 7D28C31B142E5D3C0C2F04AA489661E4742F445D37034A24CE84E717348860DB00000000000000000000000000000000
Child connecting to [199.232.190.206]:443
Child connecting to [93.184.221.225]:443
SNI peek: [ir.ebaystatic.com] [complete], fd=86
Connecting to [93.184.221.225]:443
Attempt reuse dst SSL session
SNI peek: [ir.ebaystatic.com] [complete], fd=87
Connecting to [93.184.221.225]:443
Attempt reuse dst SSL session
===> Original server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
Fingerprint: 8D:4B:BB:CD:E0:E4:65:CC:56:15CF:00:B0:97:A2:57:B7:79:28:92
Certificate cache: HIT
===> Forged server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
Fingerprint: 56:42:2B:2A:6D:4D:F0:7B:59:C7CA:F4:31:15:B2:F3:0B:DB:80:4F
===> Original server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
Fingerprint: 8D:4B:BB:CD:E0:E4:65:CC:56:15CF:00:B0:97:A2:57:B7:79:28:92
Certificate cache: HIT
===> Forged server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
Fingerprint: 56:42:2B:2A:6D:4D:F0:7B:59:C7CA:F4:31:15:B2:F3:0B:DB:80:4F
SSL connected to [93.184.221.225]:443 TLSv1.3 TLS_AES_256_GCM_SHA384
CLIENT_RANDOM DAD659EC602A603DA9CE5E16BD3BF7FAC03CE736C40BAE83383966EFADE2DC15 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
SSL session cache: MISS
Certificate cache: KEEP (SNI match or target mode)
SSL connected to [93.184.221.225]:443 TLSv1.3 TLS_AES_256_GCM_SHA384
CLIENT_RANDOM AB8ABF422084738C107B40CFEE9EE4E407BEDDBDD9B621905D5E9654E759E632 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
SSL session cache: MISS
Certificate cache: KEEP (SNI match or target mode)
CONN: ssl 10.42.0.230 64075 93.184.221.225 443 sni:ir.ebaystatic.com names:www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com sproto:TLSv1.3:TLS_AES_128_GCM_SHA256 dproto:TLSv1.3:TLS_AES_256_GCM_SHA384 origcrt:8D4BBBCDE0E465CC5615CF00B097A257B7792892 usedcrt:56422B2A6D4DF07B59C7CAF43115B2F30BDB804F user:-
SSL connected to [93.184.221.225]:443 TLSv1.3 TLS_AES_128_GCM_SHA256
CLIENT_RANDOM 071EF3C2879CB3915A5D22DD8B98F7534034A5283EF27C6787AD2C2A0B733BEB 7CF1F34F2B6B48B35779F2F45DC3F4ABFA0BDBD66ADB128945F6329EF6344DFA00000000000000000000000000000000
CONN: ssl 10.42.0.230 64076 93.184.221.225 443 sni:ir.ebaystatic.com names:www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com sproto:TLSv1.3:TLS_AES_128_GCM_SHA256 dproto:TLSv1.3:TLS_AES_256_GCM_SHA384 origcrt:8D4BBBCDE0E465CC5615CF00B097A257B7792892 usedcrt:56422B2A6D4DF07B59C7CAF43115B2F30BDB804F user:-
SSL connected to [93.184.221.225]:443 TLSv1.3 TLS_AES_128_GCM_SHA256
CLIENT_RANDOM 2E3A06A4D91D779663F35CEF192C2AA3E16B89A330A49939559B6D1DA55D1EC5 EB621D8EA31DE2E2B679B82D7FF5D1A1EAE7614B348FCA774855F5EB72195CA800000000000000000000000000000000
Child connecting to [93.184.221.225]:443
Child connecting to [93.184.221.225]:443
SNI peek: [i.ebayimg.com] [complete], fd=96
Connecting to [199.232.190.206]:443
Attempt reuse dst SSL session
SNI peek: [i.ebayimg.com] [complete], fd=97
Connecting to [199.232.190.206]:443
Attempt reuse dst SSL session
SNI peek: [i.ebayimg.com] [complete], fd=98
Connecting to [199.232.190.206]:443
Attempt reuse dst SSL session
SNI peek: [i.ebayimg.com] [complete], fd=99
Connecting to [199.232.190.206]:443
Attempt reuse dst SSL session
===> Original server certificate:
===> Original server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=i.ebayimg.com
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=i.ebayimg.com
Common Names: i.ebayimg.com/apisd.ebay.com/i.ebayimg.com/i1.ebayimg.com/i2.ebayimg.com/i3.ebayimg.com/ir.ebaystatic.com/secureir.ebaystatic.com/thumbs.ebaystatic.com/thumbs1.ebaystatic.com/thumbs2.ebaystatic.com/thumbs3.ebaystatic.com/thumbs4.ebaystatic.com/t3-apisd.ebay.com
Fingerprint: 46:10:68:D3:20:3D:18:AC:87:3517:83:E9:36:E5:69:4D:CE:17:1C
Certificate cache: HIT
===> Forged server certificate:
Common Names: i.ebayimg.com/apisd.ebay.com/i.ebayimg.com/i1.ebayimg.com/i2.ebayimg.com/i3.ebayimg.com/ir.ebaystatic.com/secureir.ebaystatic.com/thumbs.ebaystatic.com/thumbs1.ebaystatic.com/thumbs2.ebaystatic.com/thumbs3.ebaystatic.com/thumbs4.ebaystatic.com/t3-apisd.ebay.com
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=i.ebayimg.com
Fingerprint: 46:10:68:D3:20:3D:18:AC:87:3517:83:E9:36:E5:69:4D:CE:17:1C
Common Names: i.ebayimg.com/apisd.ebay.com/i.ebayimg.com/i1.ebayimg.com/i2.ebayimg.com/i3.ebayimg.com/ir.ebaystatic.com/secureir.ebaystatic.com/thumbs.ebaystatic.com/thumbs1.ebaystatic.com/thumbs2.ebaystatic.com/thumbs3.ebaystatic.com/thumbs4.ebaystatic.com/t3-apisd.ebay.com
Certificate cache: HIT
Fingerprint: E5:D5:7F:85:E3:EB:DC:5A:36:76F7:F6:80:04:FF:6E:55:9C:3C:DF
===> Forged server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=i.ebayimg.com
Common Names: i.ebayimg.com/apisd.ebay.com/i.ebayimg.com/i1.ebayimg.com/i2.ebayimg.com/i3.ebayimg.com/ir.ebaystatic.com/secureir.ebaystatic.com/thumbs.ebaystatic.com/thumbs1.ebaystatic.com/thumbs2.ebaystatic.com/thumbs3.ebaystatic.com/thumbs4.ebaystatic.com/t3-apisd.ebay.com
Fingerprint: E5:D5:7F:85:E3:EB:DC:5A:36:76F7:F6:80:04:FF:6E:55:9C:3C:DF
===> Original server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=i.ebayimg.com
Common Names: i.ebayimg.com/apisd.ebay.com/i.ebayimg.com/i1.ebayimg.com/i2.ebayimg.com/i3.ebayimg.com/ir.ebaystatic.com/secureir.ebaystatic.com/thumbs.ebaystatic.com/thumbs1.ebaystatic.com/thumbs2.ebaystatic.com/thumbs3.ebaystatic.com/thumbs4.ebaystatic.com/t3-apisd.ebay.com
Fingerprint: 46:10:68:D3:20:3D:18:AC:87:3517:83:E9:36:E5:69:4D:CE:17:1C
Certificate cache: HIT
===> Forged server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=i.ebayimg.com
Common Names: i.ebayimg.com/apisd.ebay.com/i.ebayimg.com/i1.ebayimg.com/i2.ebayimg.com/i3.ebayimg.com/ir.ebaystatic.com/secureir.ebaystatic.com/thumbs.ebaystatic.com/thumbs1.ebaystatic.com/thumbs2.ebaystatic.com/thumbs3.ebaystatic.com/thumbs4.ebaystatic.com/t3-apisd.ebay.com
Fingerprint: E5:D5:7F:85:E3:EB:DC:5A:36:76F7:F6:80:04:FF:6E:55:9C:3C:DF
===> Original server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=i.ebayimg.com
Common Names: i.ebayimg.com/apisd.ebay.com/i.ebayimg.com/i1.ebayimg.com/i2.ebayimg.com/i3.ebayimg.com/ir.ebaystatic.com/secureir.ebaystatic.com/thumbs.ebaystatic.com/thumbs1.ebaystatic.com/thumbs2.ebaystatic.com/thumbs3.ebaystatic.com/thumbs4.ebaystatic.com/t3-apisd.ebay.com
Fingerprint: 46:10:68:D3:20:3D:18:AC:87:3517:83:E9:36:E5:69:4D:CE:17:1C
Certificate cache: HIT
===> Forged server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=i.ebayimg.com
Common Names: i.ebayimg.com/apisd.ebay.com/i.ebayimg.com/i1.ebayimg.com/i2.ebayimg.com/i3.ebayimg.com/ir.ebaystatic.com/secureir.ebaystatic.com/thumbs.ebaystatic.com/thumbs1.ebaystatic.com/thumbs2.ebaystatic.com/thumbs3.ebaystatic.com/thumbs4.ebaystatic.com/t3-apisd.ebay.com
Fingerprint: E5:D5:7F:85:E3:EB:DC:5A:36:76F7:F6:80:04:FF:6E:55:9C:3C:DF
SSL connected to [199.232.190.206]:443 TLSv1.3 TLS_AES_256_GCM_SHA384
CLIENT_RANDOM 23CA0704A0D7C644E2F3E891C402001EBC0CE6957CA3E746CE98ED27518CD71C 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
SSL session cache: MISS
Certificate cache: KEEP (SNI match or target mode)
SSL connected to [199.232.190.206]:443 TLSv1.3 TLS_AES_256_GCM_SHA384
CLIENT_RANDOM 54660C68D34F488C6385D997966F79C50819637FAB330CD3DE4DE9896C3C1CE3 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
SSL session cache: MISS
Certificate cache: KEEP (SNI match or target mode)
SSL connected to [199.232.190.206]:443 TLSv1.3 TLS_AES_256_GCM_SHA384
CLIENT_RANDOM B13284BFF0B32FD4D6F8005669E8CC8E5AFE3088DCFAA024FDCBCB7DFFCDCF3F 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
SSL session cache: MISS
SSL connected to [199.232.190.206]:443 TLSv1.3 TLS_AES_256_GCM_SHA384
CLIENT_RANDOM C0D89446E71DEA5CCBAAEE4EAA58DC85757F633410A9CAF817E8485C910A3B21 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Certificate cache: KEEP (SNI match or target mode)
SSL session cache: MISS
Certificate cache: KEEP (SNI match or target mode)
CONN: ssl 10.42.0.230 64080 199.232.190.206 443 sni:i.ebayimg.com names:i.ebayimg.com/apisd.ebay.com/i.ebayimg.com/i1.ebayimg.com/i2.ebayimg.com/i3.ebayimg.com/ir.ebaystatic.com/secureir.ebaystatic.com/thumbs.ebaystatic.com/thumbs1.ebaystatic.com/thumbs2.ebaystatic.com/thumbs3.ebaystatic.com/thumbs4.ebaystatic.com/t3-apisd.ebay.com sproto:TLSv1.3:TLS_AES_128_GCM_SHA256 dproto:TLSv1.3:TLS_AES_256_GCM_SHA384 origcrt:461068D3203D18AC87351783E936E5694DCE171C usedcrt:E5D57F85E3EBDC5A3676F7F68004FF6E559C3CDF user:-
SSL connected to [199.232.190.206]:443 TLSv1.3 TLS_AES_128_GCM_SHA256
CLIENT_RANDOM 31C7E07A2F5AD2C7BAA8A50465FB558FD596663E72115D7D385400E9C9ECD164 5ACA864E721ADFE6CC8D4878F0143AF48140E04CFAC97AC6237F6FF8C02CF58A00000000000000000000000000000000
CONN: ssl 10.42.0.230 64078 199.232.190.206 443 sni:i.ebayimg.com names:i.ebayimg.com/apisd.ebay.com/i.ebayimg.com/i1.ebayimg.com/i2.ebayimg.com/i3.ebayimg.com/ir.ebaystatic.com/secureir.ebaystatic.com/thumbs.ebaystatic.com/thumbs1.ebaystatic.com/thumbs2.ebaystatic.com/thumbs3.ebaystatic.com/thumbs4.ebaystatic.com/t3-apisd.ebay.com sproto:TLSv1.3:TLS_AES_128_GCM_SHA256 dproto:TLSv1.3:TLS_AES_256_GCM_SHA384 origcrt:461068D3203D18AC87351783E936E5694DCE171C usedcrt:E5D57F85E3EBDC5A3676F7F68004FF6E559C3CDF user:-
SSL connected to [199.232.190.206]:443 TLSv1.3 TLS_AES_128_GCM_SHA256
CLIENT_RANDOM 41AB92768D9EC98B405B6224EA6E97AFD9ED7EA883A177D817671D59EEDF6739 30C2761AA0AB3C7C9D56D7F1618F6EBF7AA6D06B6BFBDFF8F4C94A2CA1A8541E00000000000000000000000000000000
CONN: ssl 10.42.0.230 64077 199.232.190.206 443 sni:i.ebayimg.com names:i.ebayimg.com/apisd.ebay.com/i.ebayimg.com/i1.ebayimg.com/i2.ebayimg.com/i3.ebayimg.com/ir.ebaystatic.com/secureir.ebaystatic.com/thumbs.ebaystatic.com/thumbs1.ebaystatic.com/thumbs2.ebaystatic.com/thumbs3.ebaystatic.com/thumbs4.ebaystatic.com/t3-apisd.ebay.com sproto:TLSv1.3:TLS_AES_128_GCM_SHA256 dproto:TLSv1.3:TLS_AES_256_GCM_SHA384 origcrt:461068D3203D18AC87351783E936E5694DCE171C usedcrt:E5D57F85E3EBDC5A3676F7F68004FF6E559C3CDF user:-
SSL connected to [199.232.190.206]:443 TLSv1.3 TLS_AES_128_GCM_SHA256
CLIENT_RANDOM 421E7722A0D5D58923445BF8C6B2E18A9BC6D8851C99743E959AB97792B2AD18 C6C89E30DF0211A6C49AAC29CE4EE4B0932F7CE36698F321EC9B8D284CE4C97B00000000000000000000000000000000
CONN: ssl 10.42.0.230 64079 199.232.190.206 443 sni:i.ebayimg.com names:i.ebayimg.com/apisd.ebay.com/i.ebayimg.com/i1.ebayimg.com/i2.ebayimg.com/i3.ebayimg.com/ir.ebaystatic.com/secureir.ebaystatic.com/thumbs.ebaystatic.com/thumbs1.ebaystatic.com/thumbs2.ebaystatic.com/thumbs3.ebaystatic.com/thumbs4.ebaystatic.com/t3-apisd.ebay.com sproto:TLSv1.3:TLS_AES_128_GCM_SHA256 dproto:TLSv1.3:TLS_AES_256_GCM_SHA384 origcrt:461068D3203D18AC87351783E936E5694DCE171C usedcrt:E5D57F85E3EBDC5A3676F7F68004FF6E559C3CDF user:-
SSL connected to [199.232.190.206]:443 TLSv1.3 TLS_AES_128_GCM_SHA256
CLIENT_RANDOM 6ADFA7DFB6CE6649D7632247E88A842DF02D7D3A6207C1F07D982C7D89E08BF6 FBCABB483289AB323E13FAD8334411CF00AC48FF0404315E5605C891442484B600000000000000000000000000000000
Child connecting to [199.232.190.206]:443
Child connecting to [199.232.190.206]:443
Child connecting to [199.232.190.206]:443
SNI peek: [client.wns.windows.com] [complete], fd=115
sonertari commented 2 years ago

Please see the HTTP related documentation in the protocols section of README. I think the difference in your case may be related with HTTP header mangling.

You can enable the DEBUG_PROXY switch in Mk/main.mk and then start sslproxy with the -D4 option to see in verbose debug logs what HTTP header lines are changed by sslproxy for the http proxyspec. If you copy-paste them here, I can try to comment too (the logs you provide above do not provide such info.)

Lo0815 commented 2 years ago

Here are a part of debug log (-D4) thanks for your support

SSLproxy v0.9.2-dirty (built 2021-12-06)
Copyright (c) 2017-2021, Soner Tari <sonertari@gmail.com>
https://github.com/sonertari/SSLproxy
Copyright (c) 2009-2019, Daniel Roethlisberger <daniel@roe.ch>
https://www.roe.ch/SSLsplit
Build info: V:GIT
Features: -DDEBUG_PROXY -DHAVE_NETFILTER
NAT engines: netfilter* tproxy
netfilter: IP_TRANSPARENT IP6T_SO_ORIGINAL_DST
Local process info support: no
compiled against OpenSSL 1.1.1f  31 Mar 2020 (1010106f)
rtlinked against OpenSSL 1.1.1f  31 Mar 2020 (1010106f)
OpenSSL has support for TLS extensions
TLS Server Name Indication (SNI) supported
OpenSSL is thread-safe with THREADID
OpenSSL has engine support
Using SSL_MODE_RELEASE_BUFFERS
SSL/TLS protocol availability: tls10 tls11 tls12 tls13 
SSL/TLS algorithm availability: !SHA0 RSA DSA ECDSA DH ECDH EC
OpenSSL option availability: SSL_OP_NO_COMPRESSION SSL_OP_NO_TICKET SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION SSL_OP_TLS_ROLLBACK_BUG
compiled against libevent 2.1.11-stable
rtlinked against libevent 2.1.11-stable
compiled against libnet 1.1.6
rtlinked against libnet 1.1.6
compiled against libpcap n/a
rtlinked against libpcap 1.9.1 (with TPACKET_V3)
compiled against sqlite 3.31.1
rtlinked against sqlite 3.31.1
4 CPU cores detected
Generated 2048 bit RSA key for leaf certs.
Global conn opts: negotiate>=tls10<=tls13|ALL:-aNULL|TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256|no ecdhcurve|no leafcrlurl|remove_http_referer|verify_peer|no user_auth_url|300|8192
proxyspecs:
- listen=[10.42.0.1]:8443 ssl netfilter
divert addr= [127.0.0.1]:1212
return addr= [127.0.0.1]:0
opts= conn opts: negotiate>=tls10<=tls13|ALL:-aNULL|TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256|no ecdhcurve|no leafcrlurl|remove_http_referer|verify_peer|no user_auth_url|300|8192
divert||
Loaded Global CA: '/C=DE/ST=Germany/L=Munich/O=TUM/OU=cool/CN=Cool/emailAddress=cool@cool.de'
Loaded ProxySpec CA: '/C=DE/ST=Germany/L=Munich/O=TUM/OU=cool//CN=Cool/emailAddress=cool@cool.de'
SSL/TLS leaf certificates taken from:
- Global generated on the fly
Privsep fastpath disabled
Created self-pipe [r=3,w=4]
Created chld-pipe [r=5,w=6]
Created socketpair 0 [p=7,c=8]
Created socketpair 1 [p=9,c=10]
Created socketpair 2 [p=11,c=12]
Created socketpair 3 [p=13,c=14]
Created socketpair 4 [p=15,c=16]
Created socketpair 5 [p=17,c=18]
Privsep parent pid 24091
Privsep child pid 24092
Using libevent backend 'epoll'
Event base supports: edge yes, O(1) yes, anyfd no
[FINEST] proxy_listener_setup: ENTER
Received privsep req type 03 sz 9 on srvsock 7
Dropped privs to user nobody group - chroot -
Received privsep req type 00 sz 1 on srvsock 9
Received privsep req type 00 sz 1 on srvsock 11
Received privsep req type 00 sz 1 on srvsock 13
Inserted events:
Received privsep req type 00 sz 1 on srvsock 15
Received privsep req type 00 sz 1 on srvsock 17
  0x563959b91ce8 [fd  4] Read Persist Internal
  0x563959b91ec0 [fd  6] Read Persist Internal
  0x563959b92338 [fd  7] Read Persist
  0x563959b911c0 [sig 1] Signal Persist
  0x563959b63910 [sig 2] Signal Persist
  0x563959b915d0 [sig 3] Signal Persist
  0x563959b91780 [sig 10] Signal Persist
  0x563959b8f150 [sig 13] Signal Persist
  0x563959b90ef0 [sig 15] Signal Persist
  0x563959b926e0 [fd  -1] Persist Timeout=1638829924.712804
Active events:
Initialized 8 connection handling threads
Started 8 connection handling threads
Starting main event loop.
[FINEST] proxy_listener_acceptcb: ENTER, fd=41
[FINEST] proxy_conn_ctx_new: ENTER, fd=41
[FINEST] [0.0 fd=41 cfd=0] proxy_conn_ctx_new: Created new conn
[FINEST] [0.0 fd=41 cfd=0] pxy_thrmgr_assign_thr: ENTER
[FINEST] [0.0 fd=41 cfd=0] protossl_init_conn: ENTER
[FINEST] [0.0 fd=41 cfd=0] pxy_conn_init: ENTER
[FINEST] [0.0 fd=41 cfd=0] pxy_thr_attach: Adding conn
[FINER] [0.0 fd=41 cfd=0] check_fd_usage: descriptor_table_size=1024, dtablecount=43, reserve=10
[FINEST] [0.0 fd=41 cfd=0] pxy_conn_init: srcaddr= [10.42.0.230]:65485
[FINEST] [0.0 fd=41 cfd=0] protossl_fd_readcb: ENTER
SNI peek: [contile-images.services.mozilla.com] [complete], fd=41
[FINEST] [0.0 fd=41 cfd=0] pxy_conn_connect: ENTER
Connecting to [34.120.115.102]:443
[FINEST] [0.0 fd=41 cfd=0] protossl_conn_connect: ENTER
[FINEST] [0.0 fd=41 cfd=0] protossl_bufferevent_setup: ENTER, fd=-1
[FINEST] [0.0 fd=41 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=-1
[FINEST] proxy_listener_acceptcb: ENTER, fd=43
[FINEST] proxy_conn_ctx_new: ENTER, fd=43
[FINEST] [0.1 fd=43 cfd=0] proxy_conn_ctx_new: Created new conn
[FINEST] [0.1 fd=43 cfd=0] pxy_thrmgr_assign_thr: ENTER
[FINEST] proxy_listener_acceptcb: ENTER, fd=44
[FINEST] proxy_conn_ctx_new: ENTER, fd=44
[FINEST] [0.2 fd=44 cfd=0] proxy_conn_ctx_new: Created new conn
[FINEST] [1.1 fd=43 cfd=0] protossl_init_conn: ENTER
[FINEST] [0.2 fd=44 cfd=0] pxy_thrmgr_assign_thr: ENTER
[FINEST] [1.1 fd=43 cfd=0] pxy_conn_init: ENTER
[FINEST] [1.1 fd=43 cfd=0] pxy_thr_attach: Adding conn
[FINER] [1.1 fd=43 cfd=0] check_fd_usage: descriptor_table_size=1024, dtablecount=46, reserve=10
[FINEST] [1.1 fd=43 cfd=0] pxy_conn_init: srcaddr= [10.42.0.230]:65486
[FINEST] [1.2 fd=44 cfd=0] protossl_init_conn: ENTER
[FINEST] [1.2 fd=44 cfd=0] pxy_conn_init: ENTER
[FINEST] [1.2 fd=44 cfd=0] pxy_thr_attach: Adding conn
[FINER] [1.2 fd=44 cfd=0] check_fd_usage: descriptor_table_size=1024, dtablecount=46, reserve=10
[FINEST] [1.2 fd=44 cfd=0] pxy_conn_init: srcaddr= [10.42.0.230]:65487
[FINEST] [1.1 fd=43 cfd=0] protossl_fd_readcb: ENTER
SNI peek: [contile-images.services.mozilla.com] [complete], fd=43
[FINEST] [1.1 fd=43 cfd=0] pxy_conn_connect: ENTER
Connecting to [34.120.115.102]:443
[FINEST] [1.1 fd=43 cfd=0] protossl_conn_connect: ENTER
[FINEST] [1.1 fd=43 cfd=0] protossl_bufferevent_setup: ENTER, fd=-1
[FINEST] [1.1 fd=43 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=-1
[FINEST] [1.2 fd=44 cfd=0] protossl_fd_readcb: ENTER
SNI peek: [incoming.telemetry.mozilla.org] [complete], fd=44
[FINEST] [1.2 fd=44 cfd=0] pxy_conn_connect: ENTER
Connecting to [34.120.208.123]:443
[FINEST] [1.2 fd=44 cfd=0] protossl_conn_connect: ENTER
[FINEST] [1.2 fd=44 cfd=0] protossl_bufferevent_setup: ENTER, fd=-1
[FINEST] [1.2 fd=44 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=-1
[FINEST] [0.0 fd=41 cfd=0] protossl_bev_eventcb_connected_srvdst: ENTER
===> Original server certificate:
Subject DN: /CN=contile-images.services.mozilla.com
Common Names: contile-images.services.mozilla.com/contile-images.services.mozilla.com
Fingerprint: 45:8A:80:D8:F4:94:D8:2D:8C:8093:7C:0C:B4:61:E2:07:5D:FE:5A
Certificate cache: MISS
===> Forged server certificate:
Subject DN: /CN=contile-images.services.mozilla.com
Common Names: contile-images.services.mozilla.com/contile-images.services.mozilla.com
Fingerprint: 00:E2:5C:34:05:5D:78:15:1C:CFCA:17:54:7B:7C:DA:6A:67:CA:A2
[FINEST] [0.0 fd=41 cfd=0] prototcp_bufferevent_setup: ENTER, fd=-1
[FINEST] [0.0 fd=41 cfd=0] protossl_bev_eventcb_connected_dst: ENTER
[FINEST] [0.0 fd=41 cfd=0] protossl_bufferevent_setup: ENTER, fd=41
[FINEST] [0.0 fd=41 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=41
[FINER] [0.0 fd=41 cfd=48] pxy_setup_child_listener: Finished setting up child listener, child_fd=48
[FINER] [0.0 fd=41 cfd=48] pxy_setup_child_listener: sslproxy_header= SSLproxy: [127.0.0.1]:42889,[10.42.0.230]:65485,[34.120.115.102]:443,s
[FINER] [0.0 fd=41 cfd=48] protossl_enable_src: Enabling src
SSL connected to [34.120.115.102]:443 TLSv1.3 TLS_AES_256_GCM_SHA384
CLIENT_RANDOM 5CEA615DD4BDFB9260BF90D15E3AF4F0608A9B422F93B6B28CDE8E2E3C857ACC 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
SSL session cache: MISS
Certificate cache: KEEP (SNI match or target mode)
[FINEST] [0.0 fd=41 cfd=48] prototcp_bev_writecb_dst: ENTER
[FINEST] [1.2 fd=44 cfd=0] protossl_bev_eventcb_connected_srvdst: ENTER
===> Original server certificate:
Subject DN: /C=US/ST=California/L=Mountain View/O=Mozilla Corporation/OU=Cloud Services/CN=*.telemetry.mozilla.org
Common Names: *.telemetry.mozilla.org/*.telemetry.mozilla.org/telemetry.mozilla.org
Fingerprint: 6D:3C:6A:A4:5F:46:EB:8B:B6:FB8F:08:44:02:01:61:A0:25:C3:C8
Certificate cache: MISS
[FINEST] proxy_listener_acceptcb: ENTER, fd=49
[FINEST] proxy_conn_ctx_new: ENTER, fd=49
[FINEST] [0.3 fd=49 cfd=0] proxy_conn_ctx_new: Created new conn
[FINEST] [0.3 fd=49 cfd=0] pxy_thrmgr_assign_thr: ENTER
[FINEST] [2.3 fd=49 cfd=0] protossl_init_conn: ENTER
[FINEST] [2.3 fd=49 cfd=0] pxy_conn_init: ENTER
[FINEST] [2.3 fd=49 cfd=0] pxy_thr_attach: Adding conn
[FINER] [2.3 fd=49 cfd=0] check_fd_usage: descriptor_table_size=1024, dtablecount=51, reserve=10
[FINEST] [2.3 fd=49 cfd=0] pxy_conn_init: srcaddr= [10.42.0.230]:65477
===> Forged server certificate:
Subject DN: /C=US/ST=California/L=Mountain View/O=Mozilla Corporation/OU=Cloud Services/CN=*.telemetry.mozilla.org
Common Names: *.telemetry.mozilla.org/*.telemetry.mozilla.org/telemetry.mozilla.org
Fingerprint: 71:B1:8C:A4:74:BF:B7:6A:36:5747:B0:C0:34:F3:89:51:1F:FE:4C
[FINEST] [1.2 fd=44 cfd=0] prototcp_bufferevent_setup: ENTER, fd=-1
[FINEST] [1.1 fd=43 cfd=0] protossl_bev_eventcb_connected_srvdst: ENTER
===> Original server certificate:
Subject DN: /CN=contile-images.services.mozilla.com
Common Names: contile-images.services.mozilla.com/contile-images.services.mozilla.com
Fingerprint: 45:8A:80:D8:F4:94:D8:2D:8C:8093:7C:0C:B4:61:E2:07:5D:FE:5A
Certificate cache: HIT
===> Forged server certificate:
Subject DN: /CN=contile-images.services.mozilla.com
Common Names: contile-images.services.mozilla.com/contile-images.services.mozilla.com
Fingerprint: 00:E2:5C:34:05:5D:78:15:1C:CFCA:17:54:7B:7C:DA:6A:67:CA:A2
[FINEST] [1.1 fd=43 cfd=0] prototcp_bufferevent_setup: ENTER, fd=-1
[FINEST] [1.2 fd=44 cfd=0] protossl_bev_eventcb_connected_dst: ENTER
[FINEST] [1.2 fd=44 cfd=0] protossl_bufferevent_setup: ENTER, fd=44
[FINEST] [1.2 fd=44 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=44
[FINER] [1.2 fd=44 cfd=52] pxy_setup_child_listener: Finished setting up child listener, child_fd=52
[FINER] [1.2 fd=44 cfd=52] pxy_setup_child_listener: sslproxy_header= SSLproxy: [127.0.0.1]:37183,[10.42.0.230]:65487,[34.120.208.123]:443,s
[FINER] [1.2 fd=44 cfd=52] protossl_enable_src: Enabling src
SSL connected to [34.120.208.123]:443 TLSv1.3 TLS_AES_256_GCM_SHA384
CLIENT_RANDOM 593B8D04A5903AF5121A05FBDFF0BFE228CD16FE591BEEA6F69771436FD276FF 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Certificate cache: KEEP (SNI match or target mode)
[FINEST] [1.1 fd=43 cfd=0] protossl_bev_eventcb_connected_dst: ENTER
[FINEST] [1.1 fd=43 cfd=0] protossl_bufferevent_setup: ENTER, fd=43
[FINEST] [1.1 fd=43 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=43
[FINER] [1.1 fd=43 cfd=53] pxy_setup_child_listener: Finished setting up child listener, child_fd=53
[FINER] [1.1 fd=43 cfd=53] pxy_setup_child_listener: sslproxy_header= SSLproxy: [127.0.0.1]:43607,[10.42.0.230]:65486,[34.120.115.102]:443,s
[FINER] [1.1 fd=43 cfd=53] protossl_enable_src: Enabling src
SSL connected to [34.120.115.102]:443 TLSv1.3 TLS_AES_256_GCM_SHA384
CLIENT_RANDOM 76867420AFDD8FBF57C80C3E5AF7F51DAC7376CA574109F950B3641379125EF7 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
[FINEST] [1.2 fd=44 cfd=52] prototcp_bev_writecb_dst: ENTER
SSL session cache: MISS
Certificate cache: KEEP (SNI match or target mode)
[FINEST] [1.1 fd=43 cfd=53] prototcp_bev_writecb_dst: ENTER
[FINEST] [2.3 fd=49 cfd=0] protossl_fd_readcb: ENTER
SNI peek: [img-getpocket.cdn.mozilla.net] [complete], fd=49
[FINEST] [2.3 fd=49 cfd=0] pxy_conn_connect: ENTER
Connecting to [34.120.237.76]:443
[FINEST] [2.3 fd=49 cfd=0] protossl_conn_connect: ENTER
[FINEST] [2.3 fd=49 cfd=0] protossl_bufferevent_setup: ENTER, fd=-1
[FINEST] [2.3 fd=49 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=-1
[FINEST] [1.2 fd=44 cfd=52] prototcp_bev_eventcb_connected_src: ENTER
CONN: ssl 10.42.0.230 65487 34.120.208.123 443 sni:incoming.telemetry.mozilla.org names:*.telemetry.mozilla.org/*.telemetry.mozilla.org/telemetry.mozilla.org sproto:TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256 dproto:TLSv1.3:TLS_AES_256_GCM_SHA384 origcrt:6D3C6AA45F46EB8BB6FB8F0844020161A025C3C8 usedcrt:71B18CA474BFB76A365747B0C034F389511FFE4C user:-
SSL connected to [34.120.208.123]:443 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
CLIENT_RANDOM 58EE25A2BE8CAE34A75294FF0D5B30B30F506761D0D3BA95409E7B353A053B3C EFA0126E7241B93B1D7D620E943470CA0CC7B7F65159A5691ACC94181D809B9B5A52053DEBF17FF3440C53740B0557B4
[FINEST] [0.0 fd=41 cfd=48] prototcp_bev_eventcb_connected_src: ENTER
CONN: ssl 10.42.0.230 65485 34.120.115.102 443 sni:contile-images.services.mozilla.com names:contile-images.services.mozilla.com/contile-images.services.mozilla.com sproto:TLSv1.3:TLS_AES_128_GCM_SHA256 dproto:TLSv1.3:TLS_AES_256_GCM_SHA384 origcrt:458A80D8F494D82D8C80937C0CB461E2075DFE5A usedcrt:00E25C34055D78151CCFCA17547B7CDA6A67CAA2 user:-
SSL connected to [34.120.115.102]:443 TLSv1.3 TLS_AES_128_GCM_SHA256
CLIENT_RANDOM A168B5C90CD339C91807D358FE1A703603C6D437EB749C76AC27C6B49466FD15 48ADF9203D0E24A0DCCA5AEA4BD469A38EC76F55732D13DA0F92CAB38285810800000000000000000000000000000000
[FINEST] [0.0 fd=41 cfd=48] prototcp_bev_readcb_src: ENTER, size=418
[FINER] [0.0 fd=41 cfd=48] pxy_try_prepend_sslproxy_header: ENTER
[FINEST] [0.0 fd=41 cfd=48] pxy_try_prepend_sslproxy_header: ORIG packet, size=418:
GET /ZKZXG9SskBgN3rF4jHA_ml11Y3JEwyywOTNrpu4WN8U.9378.jpg HTTP/1.1
Host: contile-images.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: image/avif,image/webp,*/*
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

[FINER] [0.0 fd=41 cfd=48] pxy_insert_sslproxy_header: ENTER
[FINEST] [0.0 fd=41 cfd=48] pxy_try_prepend_sslproxy_header: NEW packet, size=490:
SSLproxy: [127.0.0.1]:42889,[10.42.0.230]:65485,[34.120.115.102]:443,s
GET /ZKZXG9SskBgN3rF4jHA_ml11Y3JEwyywOTNrpu4WN8U.9378.jpg HTTP/1.1
Host: contile-images.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: image/avif,image/webp,*/*
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

[FINEST] [0.0 fd=41 cfd=48] prototcp_bev_writecb_dst: ENTER
[FINEST] [0.0 fd=41 cfd=48] pxy_listener_acceptcb_child: ENTER, fd=55, ctx->child_fd=48
[FINEST] [0.0 fd=41 cfd=48] pxy_listener_acceptcb_child: peer addr=[127.0.0.1]:57436, fd=55
[FINER] [0.0 fd=41 cfd=48] check_fd_usage: descriptor_table_size=1024, dtablecount=57, reserve=10
[FINEST] [0.0 fd=41 cfd=48] pxy_conn_ctx_new_child: ENTER, fd=55
[FINEST] [0.0 fd=41 cfd=48] pxy_conn_attach_child: Adding child conn
[FINEST] [0.0 fd=41 cfd=48] prototcp_bufferevent_setup_child: ENTER, fd=55
[FINEST] [0.0 fd=41 cfd=48] protossl_connect_child: ENTER
[FINEST] [0.0 fd=41 cfd=48] prototcp_bev_eventcb_connected_dst_child: ENTER
Child connecting to [34.120.115.102]:443
[FINEST] [0.0 fd=41 cfd=48] prototcp_bev_readcb_src_child: ENTER, size=490
[FINER] [0.0 fd=41 cfd=48] pxy_try_remove_sslproxy_header: REMOVE
[FINEST] [0.0 fd=41 cfd=48] prototcp_bev_readcb_src_child: NEW packet, size=418:
GET /ZKZXG9SskBgN3rF4jHA_ml11Y3JEwyywOTNrpu4WN8U.9378.jpg HTTP/1.1
Host: contile-images.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: image/avif,image/webp,*/*
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

[FINEST] [0.0 fd=41 cfd=48] prototcp_bev_writecb_src_child: ENTER
[FINEST] [0.0 fd=41 cfd=48] prototcp_bev_writecb_dst_child: ENTER
[FINEST] [1.2 fd=44 cfd=52] prototcp_bev_readcb_src: ENTER, size=1062
[FINER] [1.2 fd=44 cfd=52] pxy_try_prepend_sslproxy_header: ENTER
[FINEST] [1.2 fd=44 cfd=52] pxy_try_prepend_sslproxy_header: ORIG packet, size=1062:
POST /submit/contextual-services/topsites-impression/1/6c9c38d0-455d-4249-b8f2-61d509f61e2a HTTP/1.1
Host: incoming.telemetry.mozilla.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: */*
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Encoding: gzip
Date: Mon, 06 Dec 2021 22:31:06 GMT
Content-Length: 508
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

�
[FINER] [1.2 fd=44 cfd=52] pxy_insert_sslproxy_header: ENTER
[FINEST] [1.2 fd=44 cfd=52] pxy_try_prepend_sslproxy_header: NEW packet, size=1134:
SSLproxy: [127.0.0.1]:37183,[10.42.0.230]:65487,[34.120.208.123]:443,s
POST /submit/contextual-services/topsites-impression/1/6c9c38d0-455d-4249-b8f2-61d509f61e2a HTTP/1.1
Host: incoming.telemetry.mozilla.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: */*
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Encoding: gzip
Date: Mon, 06 Dec 2021 22:31:06 GMT
Content-Length: 508
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

�
[FINEST] [1.2 fd=44 cfd=52] prototcp_bev_writecb_dst: ENTER
[FINEST] [1.2 fd=44 cfd=52] pxy_listener_acceptcb_child: ENTER, fd=56, ctx->child_fd=52
[FINEST] [1.2 fd=44 cfd=52] pxy_listener_acceptcb_child: peer addr=[127.0.0.1]:59160, fd=56
[FINER] [1.2 fd=44 cfd=52] check_fd_usage: descriptor_table_size=1024, dtablecount=58, reserve=10
[FINEST] [1.2 fd=44 cfd=52] pxy_conn_ctx_new_child: ENTER, fd=56
[FINEST] [1.2 fd=44 cfd=52] pxy_conn_attach_child: Adding child conn
[FINEST] [1.2 fd=44 cfd=52] prototcp_bufferevent_setup_child: ENTER, fd=56
[FINEST] [1.2 fd=44 cfd=52] protossl_connect_child: ENTER
[FINEST] [1.2 fd=44 cfd=52] prototcp_bev_eventcb_connected_dst_child: ENTER
Child connecting to [34.120.208.123]:443
[FINEST] [1.2 fd=44 cfd=52] prototcp_bev_readcb_src_child: ENTER, size=1134
[FINER] [1.2 fd=44 cfd=52] pxy_try_remove_sslproxy_header: REMOVE
[FINEST] [1.2 fd=44 cfd=52] prototcp_bev_readcb_src_child: NEW packet, size=1062:
POST /submit/contextual-services/topsites-impression/1/6c9c38d0-455d-4249-b8f2-61d509f61e2a HTTP/1.1
Host: incoming.telemetry.mozilla.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: */*
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Encoding: gzip
Date: Mon, 06 Dec 2021 22:31:06 GMT
Content-Length: 508
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

�
[FINEST] [1.2 fd=44 cfd=52] prototcp_bev_writecb_src_child: ENTER
[FINEST] [1.2 fd=44 cfd=52] prototcp_bev_writecb_dst_child: ENTER
[FINEST] [1.1 fd=43 cfd=53] prototcp_bev_eventcb_connected_src: ENTER
CONN: ssl 10.42.0.230 65486 34.120.115.102 443 sni:contile-images.services.mozilla.com names:contile-images.services.mozilla.com/contile-images.services.mozilla.com sproto:TLSv1.3:TLS_AES_128_GCM_SHA256 dproto:TLSv1.3:TLS_AES_256_GCM_SHA384 origcrt:458A80D8F494D82D8C80937C0CB461E2075DFE5A usedcrt:00E25C34055D78151CCFCA17547B7CDA6A67CAA2 user:-
SSL connected to [34.120.115.102]:443 TLSv1.3 TLS_AES_128_GCM_SHA256
CLIENT_RANDOM 619E4BFF1BC1F382B28003D24F1A516182E377B165BF1FE8968CBA2D627B9999 143AEFF86DD242D34777D3A4950AD4A3BE231FFF904B951975ACB76D8D20279100000000000000000000000000000000
[FINEST] [1.1 fd=43 cfd=53] prototcp_bev_readcb_src: ENTER, size=418
[FINER] [1.1 fd=43 cfd=53] pxy_try_prepend_sslproxy_header: ENTER
[FINEST] [1.1 fd=43 cfd=53] pxy_try_prepend_sslproxy_header: ORIG packet, size=418:
GET /obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg HTTP/1.1
Host: contile-images.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: image/avif,image/webp,*/*
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

[FINER] [1.1 fd=43 cfd=53] pxy_insert_sslproxy_header: ENTER
[FINEST] [1.1 fd=43 cfd=53] pxy_try_prepend_sslproxy_header: NEW packet, size=490:
SSLproxy: [127.0.0.1]:43607,[10.42.0.230]:65486,[34.120.115.102]:443,s
GET /obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg HTTP/1.1
Host: contile-images.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: image/avif,image/webp,*/*
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

[FINEST] [1.1 fd=43 cfd=53] prototcp_bev_writecb_dst: ENTER
[FINEST] [1.1 fd=43 cfd=53] pxy_listener_acceptcb_child: ENTER, fd=57, ctx->child_fd=53
[FINEST] [1.1 fd=43 cfd=53] pxy_listener_acceptcb_child: peer addr=[127.0.0.1]:40370, fd=57
[FINER] [1.1 fd=43 cfd=53] check_fd_usage: descriptor_table_size=1024, dtablecount=59, reserve=10
[FINEST] [1.1 fd=43 cfd=53] pxy_conn_ctx_new_child: ENTER, fd=57
[FINEST] [1.1 fd=43 cfd=53] pxy_conn_attach_child: Adding child conn
[FINEST] [1.1 fd=43 cfd=53] prototcp_bufferevent_setup_child: ENTER, fd=57
[FINEST] [1.1 fd=43 cfd=53] protossl_connect_child: ENTER
[FINEST] [1.1 fd=43 cfd=53] prototcp_bev_eventcb_connected_dst_child: ENTER
Child connecting to [34.120.115.102]:443
[FINEST] [1.1 fd=43 cfd=53] prototcp_bev_readcb_src_child: ENTER, size=490
[FINER] [1.1 fd=43 cfd=53] pxy_try_remove_sslproxy_header: REMOVE
[FINEST] [1.1 fd=43 cfd=53] prototcp_bev_readcb_src_child: NEW packet, size=418:
GET /obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg HTTP/1.1
Host: contile-images.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: image/avif,image/webp,*/*
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

[FINEST] [1.1 fd=43 cfd=53] prototcp_bev_writecb_src_child: ENTER
[FINEST] [1.1 fd=43 cfd=53] prototcp_bev_writecb_dst_child: ENTER
[FINEST] [2.3 fd=49 cfd=0] protossl_bev_eventcb_connected_srvdst: ENTER
===> Original server certificate:
Subject DN: /CN=img-getpocket.cdn.mozilla.net
Common Names: img-getpocket.cdn.mozilla.net/img-getpocket.cdn.mozilla.net
Fingerprint: 03:88:9F:2D:DE:00:DE:60:E7:A1C6:25:17:C6:F0:E7:67:5A:46:5F
Certificate cache: MISS
===> Forged server certificate:
Subject DN: /CN=img-getpocket.cdn.mozilla.net
Common Names: img-getpocket.cdn.mozilla.net/img-getpocket.cdn.mozilla.net
Fingerprint: 36:5F:D8:15:3D:5C:DE:76:B3:5901:DA:3F:51:0B:FF:20:CA:0D:4A
[FINEST] [0.0 fd=41 cfd=48] prototcp_bev_readcb_dst_child: ENTER, size=1386
[FINEST] [0.0 fd=41 cfd=48] prototcp_bev_readcb_dst_child: ENTER, size=1386
[FINEST] [0.0 fd=41 cfd=48] prototcp_bev_writecb_src_child: ENTER
[FINEST] [0.0 fd=41 cfd=48] prototcp_bev_readcb_dst_child: ENTER, size=1386
[FINEST] [0.0 fd=41 cfd=48] prototcp_bev_writecb_src_child: ENTER
[FINEST] [0.0 fd=41 cfd=48] prototcp_bev_readcb_dst_child: ENTER, size=1386
[FINEST] [0.0 fd=41 cfd=48] prototcp_bev_writecb_src_child: ENTER
[FINEST] [2.3 fd=49 cfd=0] prototcp_bufferevent_setup: ENTER, fd=-1
[FINEST] [0.0 fd=41 cfd=48] prototcp_bev_readcb_dst_child: ENTER, size=1386
[FINEST] [0.0 fd=41 cfd=48] prototcp_bev_writecb_src_child: ENTER
[FINEST] [0.0 fd=41 cfd=48] prototcp_bev_writecb_src_child: ENTER
[FINEST] [0.0 fd=41 cfd=48] prototcp_bev_readcb_dst: ENTER, size=2048
[FINEST] [2.3 fd=49 cfd=0] protossl_bev_eventcb_connected_dst: ENTER
[FINEST] [2.3 fd=49 cfd=0] protossl_bufferevent_setup: ENTER, fd=49
[FINEST] [2.3 fd=49 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=49
[FINER] [2.3 fd=49 cfd=59] pxy_setup_child_listener: Finished setting up child listener, child_fd=59
[FINER] [2.3 fd=49 cfd=59] pxy_setup_child_listener: sslproxy_header= SSLproxy: [127.0.0.1]:37783,[10.42.0.230]:65477,[34.120.237.76]:443,s
[FINER] [2.3 fd=49 cfd=59] protossl_enable_src: Enabling src
SSL connected to [34.120.237.76]:443 TLSv1.3 TLS_AES_256_GCM_SHA384
CLIENT_RANDOM FB10447B9E16953FA25B7FB7B2FB034A185D9A4AA248151070DBE18BEEB97640 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
[FINEST] [0.0 fd=41 cfd=48] prototcp_bev_readcb_dst: ENTER, size=4096
SSL session cache: MISS
[FINEST] [0.0 fd=41 cfd=48] prototcp_bev_writecb_src: ENTER
Certificate cache: KEEP (SNI match or target mode)
[FINEST] [0.0 fd=41 cfd=48] prototcp_bev_readcb_dst: ENTER, size=786
[FINEST] [0.0 fd=41 cfd=48] prototcp_bev_writecb_src: ENTER
[FINEST] [0.0 fd=41 cfd=48] prototcp_bev_writecb_src: ENTER
[FINEST] [0.0 fd=41 cfd=48] prototcp_bev_readcb_dst_child: ENTER, size=1386
[FINEST] [0.0 fd=41 cfd=48] prototcp_bev_readcb_dst_child: ENTER, size=1386
[FINEST] [0.0 fd=41 cfd=48] prototcp_bev_writecb_src_child: ENTER
[FINEST] [0.0 fd=41 cfd=48] prototcp_bev_writecb_src_child: ENTER
[FINEST] [0.0 fd=41 cfd=48] prototcp_bev_readcb_dst: ENTER, size=2772
[FINEST] [0.0 fd=41 cfd=48] prototcp_bev_writecb_src: ENTER
[FINEST] [0.0 fd=41 cfd=48] prototcp_bev_readcb_dst_child: ENTER, size=366
[FINEST] [0.0 fd=41 cfd=48] prototcp_bev_writecb_src_child: ENTER
[FINEST] [0.0 fd=41 cfd=48] prototcp_bev_readcb_dst: ENTER, size=366
[FINEST] [0.0 fd=41 cfd=48] prototcp_bev_writecb_src: ENTER
[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_writecb_dst: ENTER
[FINEST] [1.1 fd=43 cfd=53] prototcp_bev_readcb_dst_child: ENTER, size=1386
[FINEST] [1.1 fd=43 cfd=53] prototcp_bev_readcb_dst_child: ENTER, size=1386
[FINEST] [1.1 fd=43 cfd=53] prototcp_bev_writecb_src_child: ENTER
[FINEST] [1.1 fd=43 cfd=53] prototcp_bev_readcb_dst_child: ENTER, size=1386
[FINEST] [1.1 fd=43 cfd=53] prototcp_bev_writecb_src_child: ENTER
[FINEST] [1.1 fd=43 cfd=53] prototcp_bev_readcb_dst_child: ENTER, size=1386
[FINEST] [1.1 fd=43 cfd=53] prototcp_bev_writecb_src_child: ENTER
[FINEST] [1.1 fd=43 cfd=53] prototcp_bev_readcb_dst_child: ENTER, size=1386
[FINEST] [1.1 fd=43 cfd=53] prototcp_bev_writecb_src_child: ENTER
[FINEST] [1.1 fd=43 cfd=53] prototcp_bev_writecb_src_child: ENTER
[FINEST] [1.1 fd=43 cfd=53] prototcp_bev_readcb_dst: ENTER, size=4096
[FINEST] [1.1 fd=43 cfd=53] prototcp_bev_readcb_dst_child: ENTER, size=1386
[FINEST] [1.1 fd=43 cfd=53] prototcp_bev_readcb_dst: ENTER, size=2834
[FINEST] [1.1 fd=43 cfd=53] prototcp_bev_readcb_dst_child: ENTER, size=1386
[FINEST] [1.1 fd=43 cfd=53] prototcp_bev_writecb_src: ENTER
[FINEST] [1.1 fd=43 cfd=53] prototcp_bev_writecb_src_child: ENTER
[FINEST] [1.1 fd=43 cfd=53] prototcp_bev_writecb_src: ENTER
[FINEST] [1.1 fd=43 cfd=53] prototcp_bev_writecb_src_child: ENTER
[FINEST] [1.1 fd=43 cfd=53] prototcp_bev_readcb_dst: ENTER, size=2772
[FINEST] [1.1 fd=43 cfd=53] prototcp_bev_writecb_src: ENTER
[FINEST] [1.1 fd=43 cfd=53] prototcp_bev_readcb_dst_child: ENTER, size=979
[FINEST] [1.1 fd=43 cfd=53] prototcp_bev_writecb_src_child: ENTER
[FINEST] [1.1 fd=43 cfd=53] prototcp_bev_readcb_dst: ENTER, size=979
[FINEST] [1.1 fd=43 cfd=53] prototcp_bev_writecb_src: ENTER
[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_eventcb_connected_src: ENTER
CONN: ssl 10.42.0.230 65477 34.120.237.76 443 sni:img-getpocket.cdn.mozilla.net names:img-getpocket.cdn.mozilla.net/img-getpocket.cdn.mozilla.net sproto:TLSv1.3:TLS_AES_128_GCM_SHA256 dproto:TLSv1.3:TLS_AES_256_GCM_SHA384 origcrt:03889F2DDE00DE60E7A1C62517C6F0E7675A465F usedcrt:365FD8153D5CDE76B35901DA3F510BFF20CA0D4A user:-
SSL connected to [34.120.237.76]:443 TLSv1.3 TLS_AES_128_GCM_SHA256
CLIENT_RANDOM E9D635A3E3F27205A15A0878A3AF12A5D76BB869E1695B5FA51BBF2701C8F277 93048EE3C68C84E323C414BC8A0ACD826D178E23D8D2650FE673D6CB8792B8E600000000000000000000000000000000
[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_readcb_src: ENTER, size=539
[FINER] [2.3 fd=49 cfd=59] pxy_try_prepend_sslproxy_header: ENTER
[FINEST] [2.3 fd=49 cfd=59] pxy_try_prepend_sslproxy_header: ORIG packet, size=539:
GET /592x296/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fimage.stern.de%2F30973248%2Ft%2F7o%2Fv2%2Fw1440%2Fr1.7778%2F-%2Ffoto-theresa-breuer.jpg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: image/avif,image/webp,*/*
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

[FINER] [2.3 fd=49 cfd=59] pxy_insert_sslproxy_header: ENTER
[FINEST] [2.3 fd=49 cfd=59] pxy_try_prepend_sslproxy_header: NEW packet, size=610:
SSLproxy: [127.0.0.1]:37783,[10.42.0.230]:65477,[34.120.237.76]:443,s
GET /592x296/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fimage.stern.de%2F30973248%2Ft%2F7o%2Fv2%2Fw1440%2Fr1.7778%2F-%2Ffoto-theresa-breuer.jpg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: image/avif,image/webp,*/*
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_writecb_dst: ENTER
[FINEST] [2.3 fd=49 cfd=59] pxy_listener_acceptcb_child: ENTER, fd=60, ctx->child_fd=59
[FINEST] [2.3 fd=49 cfd=59] pxy_listener_acceptcb_child: peer addr=[127.0.0.1]:60674, fd=60
[FINER] [2.3 fd=49 cfd=59] check_fd_usage: descriptor_table_size=1024, dtablecount=62, reserve=10
[FINEST] [2.3 fd=49 cfd=59] pxy_conn_ctx_new_child: ENTER, fd=60
[FINEST] [2.3 fd=49 cfd=59] pxy_conn_attach_child: Adding child conn
[FINEST] [2.3 fd=49 cfd=59] prototcp_bufferevent_setup_child: ENTER, fd=60
[FINEST] [2.3 fd=49 cfd=59] protossl_connect_child: ENTER
[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_eventcb_connected_dst_child: ENTER
Child connecting to [34.120.237.76]:443
[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_readcb_src_child: ENTER, size=610
[FINER] [2.3 fd=49 cfd=59] pxy_try_remove_sslproxy_header: REMOVE
[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_readcb_src_child: NEW packet, size=539:
GET /592x296/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fimage.stern.de%2F30973248%2Ft%2F7o%2Fv2%2Fw1440%2Fr1.7778%2F-%2Ffoto-theresa-breuer.jpg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: image/avif,image/webp,*/*
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_writecb_src_child: ENTER
[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_writecb_dst_child: ENTER
[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_readcb_dst_child: ENTER, size=1386
[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_readcb_dst_child: ENTER, size=1386
[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_writecb_src_child: ENTER
[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_readcb_dst_child: ENTER, size=1386
[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_writecb_src_child: ENTER
[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_readcb_dst_child: ENTER, size=1386
[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_writecb_src_child: ENTER
[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_readcb_dst_child: ENTER, size=1386
[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_writecb_src_child: ENTER
[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_readcb_dst_child: ENTER, size=1386
[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_writecb_src_child: ENTER
[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_readcb_dst_child: ENTER, size=1386
[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_writecb_src_child: ENTER
[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_writecb_src_child: ENTER
[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_readcb_dst: ENTER, size=4096
[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_readcb_dst: ENTER, size=4096
[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_writecb_src: ENTER
[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_readcb_dst: ENTER, size=1510
[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_writecb_src: ENTER
[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_writecb_src: ENTER
[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_readcb_dst_child: ENTER, size=1386
[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_readcb_dst_child: ENTER, size=1386
[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_writecb_src_child: ENTER
[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_writecb_src_child: ENTER
[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_readcb_dst: ENTER, size=2772
[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_writecb_src: ENTER
[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_readcb_dst_child: ENTER, size=1386
[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_readcb_dst_child: ENTER, size=251
[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_writecb_src_child: ENTER
[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_writecb_src_child: ENTER
[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_readcb_dst: ENTER, size=1637
[FINEST] [2.3 fd=49 cfd=59] prototcp_bev_writecb_src: ENTER
[FINEST] proxy_listener_acceptcb: ENTER, fd=61
[FINEST] proxy_conn_ctx_new: ENTER, fd=61
[FINEST] [0.4 fd=61 cfd=0] proxy_conn_ctx_new: Created new conn
[FINEST] [0.4 fd=61 cfd=0] pxy_thrmgr_assign_thr: ENTER
[FINEST] proxy_listener_acceptcb: ENTER, fd=62
[FINEST] [3.4 fd=61 cfd=0] protossl_init_conn: ENTER
[FINEST] [3.4 fd=61 cfd=0] pxy_conn_init: ENTER
[FINEST] [3.4 fd=61 cfd=0] pxy_thr_attach: Adding conn
[FINEST] proxy_conn_ctx_new: ENTER, fd=62
[FINEST] [0.5 fd=62 cfd=0] proxy_conn_ctx_new: Created new conn
[FINEST] [0.5 fd=62 cfd=0] pxy_thrmgr_assign_thr: ENTER
[FINEST] [4.5 fd=62 cfd=0] protossl_init_conn: ENTER
[FINEST] [4.5 fd=62 cfd=0] pxy_conn_init: ENTER
[FINEST] [4.5 fd=62 cfd=0] pxy_thr_attach: Adding conn
[FINER] [3.4 fd=61 cfd=0] check_fd_usage: descriptor_table_size=1024, dtablecount=64, reserve=10
[FINEST] [3.4 fd=61 cfd=0] pxy_conn_init: srcaddr= [10.42.0.230]:65482
[FINEST] [3.4 fd=61 cfd=0] protossl_fd_readcb: ENTER
SNI peek: [incoming.telemetry.mozilla.org] [complete], fd=61
[FINEST] [3.4 fd=61 cfd=0] pxy_conn_connect: ENTER
Connecting to [34.120.208.123]:443
[FINEST] [3.4 fd=61 cfd=0] protossl_conn_connect: ENTER
Attempt reuse dst SSL session
[FINEST] [3.4 fd=61 cfd=0] protossl_bufferevent_setup: ENTER, fd=-1
[FINEST] [3.4 fd=61 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=-1
[FINEST] proxy_listener_acceptcb: ENTER, fd=64
[FINEST] proxy_conn_ctx_new: ENTER, fd=64
[FINEST] [0.6 fd=64 cfd=0] proxy_conn_ctx_new: Created new conn
[FINEST] [0.6 fd=64 cfd=0] pxy_thrmgr_assign_thr: ENTER
[FINER] [4.5 fd=62 cfd=0] check_fd_usage: descriptor_table_size=1024, dtablecount=66, reserve=10
[FINEST] [5.6 fd=64 cfd=0] protossl_init_conn: ENTER
[FINEST] [4.5 fd=62 cfd=0] pxy_conn_init: srcaddr= [10.42.0.230]:65478
[FINEST] [5.6 fd=64 cfd=0] pxy_conn_init: ENTER
[FINEST] [5.6 fd=64 cfd=0] pxy_thr_attach: Adding conn
[FINEST] [4.5 fd=62 cfd=0] protossl_fd_readcb: ENTER
SNI peek: [sofe.ebay.de] [complete], fd=62
[FINEST] [4.5 fd=62 cfd=0] pxy_conn_connect: ENTER
Connecting to [216.113.181.241]:443
[FINEST] [4.5 fd=62 cfd=0] protossl_conn_connect: ENTER
[FINER] [5.6 fd=64 cfd=0] check_fd_usage: descriptor_table_size=1024, dtablecount=66, reserve=10
[FINEST] [5.6 fd=64 cfd=0] pxy_conn_init: srcaddr= [10.42.0.230]:65479
[FINEST] [4.5 fd=62 cfd=0] protossl_bufferevent_setup: ENTER, fd=-1
[FINEST] [4.5 fd=62 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=-1
[FINEST] [5.6 fd=64 cfd=0] protossl_fd_readcb: ENTER
SNI peek: [pulsar.ebay.de] [complete], fd=64
[FINEST] [5.6 fd=64 cfd=0] pxy_conn_connect: ENTER
Connecting to [209.140.129.83]:443
[FINEST] [5.6 fd=64 cfd=0] protossl_conn_connect: ENTER
[FINEST] [5.6 fd=64 cfd=0] protossl_bufferevent_setup: ENTER, fd=-1
[FINEST] [5.6 fd=64 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=-1
[FINEST] [3.4 fd=61 cfd=0] protossl_bev_eventcb_connected_srvdst: ENTER
===> Original server certificate:
Subject DN: /C=US/ST=California/L=Mountain View/O=Mozilla Corporation/OU=Cloud Services/CN=*.telemetry.mozilla.org
Common Names: *.telemetry.mozilla.org/*.telemetry.mozilla.org/telemetry.mozilla.org
Fingerprint: 6D:3C:6A:A4:5F:46:EB:8B:B6:FB8F:08:44:02:01:61:A0:25:C3:C8
Certificate cache: HIT
===> Forged server certificate:
Subject DN: /C=US/ST=California/L=Mountain View/O=Mozilla Corporation/OU=Cloud Services/CN=*.telemetry.mozilla.org
Common Names: *.telemetry.mozilla.org/*.telemetry.mozilla.org/telemetry.mozilla.org
Fingerprint: 71:B1:8C:A4:74:BF:B7:6A:36:5747:B0:C0:34:F3:89:51:1F:FE:4C
[FINEST] [3.4 fd=61 cfd=0] prototcp_bufferevent_setup: ENTER, fd=-1
[FINEST] [3.4 fd=61 cfd=0] protossl_bev_eventcb_connected_dst: ENTER
[FINEST] [3.4 fd=61 cfd=0] protossl_bufferevent_setup: ENTER, fd=61
[FINEST] [3.4 fd=61 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=61
[FINER] [3.4 fd=61 cfd=68] pxy_setup_child_listener: Finished setting up child listener, child_fd=68
[FINER] [3.4 fd=61 cfd=68] pxy_setup_child_listener: sslproxy_header= SSLproxy: [127.0.0.1]:34647,[10.42.0.230]:65482,[34.120.208.123]:443,s
[FINER] [3.4 fd=61 cfd=68] protossl_enable_src: Enabling src
SSL connected to [34.120.208.123]:443 TLSv1.3 TLS_AES_256_GCM_SHA384
CLIENT_RANDOM 710625212971C2957CAFAF02D1B7C7418DEA7271B53EE9B9BE2F2687E1A7E250 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Certificate cache: KEEP (SNI match or target mode)
[FINEST] [3.4 fd=61 cfd=68] prototcp_bev_writecb_dst: ENTER
[FINEST] [3.4 fd=61 cfd=68] prototcp_bev_eventcb_connected_src: ENTER
CONN: ssl 10.42.0.230 65482 34.120.208.123 443 sni:incoming.telemetry.mozilla.org names:*.telemetry.mozilla.org/*.telemetry.mozilla.org/telemetry.mozilla.org sproto:TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256 dproto:TLSv1.3:TLS_AES_256_GCM_SHA384 origcrt:6D3C6AA45F46EB8BB6FB8F0844020161A025C3C8 usedcrt:71B18CA474BFB76A365747B0C034F389511FFE4C user:-
SSL connected to [34.120.208.123]:443 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
CLIENT_RANDOM 436F3252DE16239B60F3BEC73DF8A5F8023D4F92FD8E88087EBC7DB0E7B617E1 96CC6DEC8D7691133104EFF1E5F422926D337C1EC7AC1D83EC768F7829C701891199E5A9705351B2F98DE1F738C040E2
[FINEST] [3.4 fd=61 cfd=68] prototcp_bev_readcb_src: ENTER, size=1064
[FINER] [3.4 fd=61 cfd=68] pxy_try_prepend_sslproxy_header: ENTER
[FINEST] [3.4 fd=61 cfd=68] pxy_try_prepend_sslproxy_header: ORIG packet, size=1064:
POST /submit/contextual-services/topsites-impression/1/9b4e8584-a274-4b92-ba08-d807acaf5285 HTTP/1.1
Host: incoming.telemetry.mozilla.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: */*
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Encoding: gzip
Date: Mon, 06 Dec 2021 22:31:06 GMT
Content-Length: 510
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

�
[FINER] [3.4 fd=61 cfd=68] pxy_insert_sslproxy_header: ENTER
[FINEST] [3.4 fd=61 cfd=68] pxy_try_prepend_sslproxy_header: NEW packet, size=1136:
SSLproxy: [127.0.0.1]:34647,[10.42.0.230]:65482,[34.120.208.123]:443,s
POST /submit/contextual-services/topsites-impression/1/9b4e8584-a274-4b92-ba08-d807acaf5285 HTTP/1.1
Host: incoming.telemetry.mozilla.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: */*
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Encoding: gzip
Date: Mon, 06 Dec 2021 22:31:06 GMT
Content-Length: 510
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

�
[FINEST] [3.4 fd=61 cfd=68] prototcp_bev_writecb_dst: ENTER
[FINEST] [3.4 fd=61 cfd=68] pxy_listener_acceptcb_child: ENTER, fd=69, ctx->child_fd=68
[FINEST] [3.4 fd=61 cfd=68] pxy_listener_acceptcb_child: peer addr=[127.0.0.1]:52898, fd=69
[FINER] [3.4 fd=61 cfd=68] check_fd_usage: descriptor_table_size=1024, dtablecount=71, reserve=10
[FINEST] [3.4 fd=61 cfd=68] pxy_conn_ctx_new_child: ENTER, fd=69
[FINEST] [3.4 fd=61 cfd=68] pxy_conn_attach_child: Adding child conn
[FINEST] [3.4 fd=61 cfd=68] prototcp_bufferevent_setup_child: ENTER, fd=69
[FINEST] [3.4 fd=61 cfd=68] protossl_connect_child: ENTER
[FINEST] [3.4 fd=61 cfd=68] prototcp_bev_eventcb_connected_dst_child: ENTER
Child connecting to [34.120.208.123]:443
[FINEST] [3.4 fd=61 cfd=68] prototcp_bev_writecb_src_child: ENTER
[FINEST] [3.4 fd=61 cfd=68] prototcp_bev_readcb_src_child: ENTER, size=1136
[FINER] [3.4 fd=61 cfd=68] pxy_try_remove_sslproxy_header: REMOVE
[FINEST] [3.4 fd=61 cfd=68] prototcp_bev_readcb_src_child: NEW packet, size=1064:
POST /submit/contextual-services/topsites-impression/1/9b4e8584-a274-4b92-ba08-d807acaf5285 HTTP/1.1
Host: incoming.telemetry.mozilla.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: */*
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Encoding: gzip
Date: Mon, 06 Dec 2021 22:31:06 GMT
Content-Length: 510
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

�
[FINEST] [3.4 fd=61 cfd=68] prototcp_bev_writecb_dst_child: ENTER
[FINEST] proxy_listener_acceptcb: ENTER, fd=70
[FINEST] proxy_conn_ctx_new: ENTER, fd=70
[FINEST] [0.7 fd=70 cfd=0] proxy_conn_ctx_new: Created new conn
[FINEST] [0.7 fd=70 cfd=0] pxy_thrmgr_assign_thr: ENTER
[FINEST] [6.7 fd=70 cfd=0] protossl_init_conn: ENTER
[FINEST] [6.7 fd=70 cfd=0] pxy_conn_init: ENTER
[FINEST] [6.7 fd=70 cfd=0] pxy_thr_attach: Adding conn
[FINER] [6.7 fd=70 cfd=0] check_fd_usage: descriptor_table_size=1024, dtablecount=72, reserve=10
[FINEST] [6.7 fd=70 cfd=0] pxy_conn_init: srcaddr= [10.42.0.230]:65483
[FINEST] [6.7 fd=70 cfd=0] protossl_fd_readcb: ENTER
SNI peek: [incoming.telemetry.mozilla.org] [complete], fd=70
[FINEST] [6.7 fd=70 cfd=0] pxy_conn_connect: ENTER
Connecting to [34.120.208.123]:443
[FINEST] [6.7 fd=70 cfd=0] protossl_conn_connect: ENTER
Attempt reuse dst SSL session
[FINEST] [6.7 fd=70 cfd=0] protossl_bufferevent_setup: ENTER, fd=-1
[FINEST] [6.7 fd=70 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=-1
[FINEST] [6.7 fd=70 cfd=0] protossl_bev_eventcb_connected_srvdst: ENTER
===> Original server certificate:
Subject DN: /C=US/ST=California/L=Mountain View/O=Mozilla Corporation/OU=Cloud Services/CN=*.telemetry.mozilla.org
Common Names: *.telemetry.mozilla.org/*.telemetry.mozilla.org/telemetry.mozilla.org
Fingerprint: 6D:3C:6A:A4:5F:46:EB:8B:B6:FB8F:08:44:02:01:61:A0:25:C3:C8
Certificate cache: HIT
===> Forged server certificate:
Subject DN: /C=US/ST=California/L=Mountain View/O=Mozilla Corporation/OU=Cloud Services/CN=*.telemetry.mozilla.org
Common Names: *.telemetry.mozilla.org/*.telemetry.mozilla.org/telemetry.mozilla.org
Fingerprint: 71:B1:8C:A4:74:BF:B7:6A:36:5747:B0:C0:34:F3:89:51:1F:FE:4C
[FINEST] [6.7 fd=70 cfd=0] prototcp_bufferevent_setup: ENTER, fd=-1
[FINEST] [6.7 fd=70 cfd=0] protossl_bev_eventcb_connected_dst: ENTER
[FINEST] [6.7 fd=70 cfd=0] protossl_bufferevent_setup: ENTER, fd=70
[FINEST] [6.7 fd=70 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=70
[FINER] [6.7 fd=70 cfd=73] pxy_setup_child_listener: Finished setting up child listener, child_fd=73
[FINER] [6.7 fd=70 cfd=73] pxy_setup_child_listener: sslproxy_header= SSLproxy: [127.0.0.1]:38009,[10.42.0.230]:65483,[34.120.208.123]:443,s
[FINER] [6.7 fd=70 cfd=73] protossl_enable_src: Enabling src
SSL connected to [34.120.208.123]:443 TLSv1.3 TLS_AES_256_GCM_SHA384
CLIENT_RANDOM EFF9860707B1AEE26D05467CB71CC60FB4B6D0580846ED029D3193BB150C42BA 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Certificate cache: KEEP (SNI match or target mode)
[FINEST] [6.7 fd=70 cfd=73] prototcp_bev_writecb_dst: ENTER
[FINEST] [1.2 fd=44 cfd=52] prototcp_bev_readcb_dst_child: ENTER, size=620
[FINEST] [1.2 fd=44 cfd=52] prototcp_bev_writecb_src_child: ENTER
[FINEST] [1.2 fd=44 cfd=52] prototcp_bev_readcb_dst: ENTER, size=620
[FINEST] [1.2 fd=44 cfd=52] prototcp_bev_writecb_src: ENTER
[FINEST] [6.7 fd=70 cfd=73] prototcp_bev_eventcb_connected_src: ENTER
CONN: ssl 10.42.0.230 65483 34.120.208.123 443 sni:incoming.telemetry.mozilla.org names:*.telemetry.mozilla.org/*.telemetry.mozilla.org/telemetry.mozilla.org sproto:TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256 dproto:TLSv1.3:TLS_AES_256_GCM_SHA384 origcrt:6D3C6AA45F46EB8BB6FB8F0844020161A025C3C8 usedcrt:71B18CA474BFB76A365747B0C034F389511FFE4C user:-
SSL connected to [34.120.208.123]:443 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
CLIENT_RANDOM F6671871233895EBBBD3ECDCFE25901FAFD0EA57ED88504A3D39E28776C0A5ED EDD3A5556FDE44A0CDCF0ECD875F04C555A966C8433ED0A2314C8969E77F630E5857AA5D1232525071C1CC89B9900536
[FINEST] proxy_listener_acceptcb: ENTER, fd=74
[FINEST] proxy_conn_ctx_new: ENTER, fd=74
[FINEST] [0.8 fd=74 cfd=0] proxy_conn_ctx_new: Created new conn
[FINEST] [0.8 fd=74 cfd=0] pxy_thrmgr_assign_thr: ENTER
[FINEST] proxy_listener_acceptcb: ENTER, fd=75
[FINEST] proxy_conn_ctx_new: ENTER, fd=75
[FINEST] [7.8 fd=74 cfd=0] protossl_init_conn: ENTER
[FINEST] [7.8 fd=74 cfd=0] pxy_conn_init: ENTER
[FINEST] [7.8 fd=74 cfd=0] pxy_thr_attach: Adding conn
[FINEST] [0.9 fd=75 cfd=0] proxy_conn_ctx_new: Created new conn
[FINEST] [0.9 fd=75 cfd=0] pxy_thrmgr_assign_thr: ENTER
[FINEST] [4.9 fd=75 cfd=0] protossl_init_conn: ENTER
[FINEST] [4.9 fd=75 cfd=0] pxy_conn_init: ENTER
[FINEST] [4.9 fd=75 cfd=0] pxy_thr_attach: Adding conn
[FINER] [7.8 fd=74 cfd=0] check_fd_usage: descriptor_table_size=1024, dtablecount=77, reserve=10
[FINEST] [7.8 fd=74 cfd=0] pxy_conn_init: srcaddr= [10.42.0.230]:65481
[FINER] [4.9 fd=75 cfd=0] check_fd_usage: descriptor_table_size=1024, dtablecount=77, reserve=10
[FINEST] [7.8 fd=74 cfd=0] protossl_fd_readcb: ENTER
[FINEST] [4.9 fd=75 cfd=0] pxy_conn_init: srcaddr= [10.42.0.230]:65480
SNI peek: [incoming.telemetry.mozilla.org] [complete], fd=74
[FINEST] [7.8 fd=74 cfd=0] pxy_conn_connect: ENTER
Connecting to [34.120.208.123]:443
[FINEST] [7.8 fd=74 cfd=0] protossl_conn_connect: ENTER
Attempt reuse dst SSL session
[FINEST] [7.8 fd=74 cfd=0] protossl_bufferevent_setup: ENTER, fd=-1
[FINEST] [7.8 fd=74 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=-1
[FINEST] [4.9 fd=75 cfd=0] protossl_fd_readcb: ENTER
SNI peek: [sofe.ebay.de] [complete], fd=75
[FINEST] [4.9 fd=75 cfd=0] pxy_conn_connect: ENTER
Connecting to [216.113.181.241]:443
[FINEST] [4.9 fd=75 cfd=0] protossl_conn_connect: ENTER
[FINEST] [4.9 fd=75 cfd=0] protossl_bufferevent_setup: ENTER, fd=-1
[FINEST] [4.9 fd=75 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=-1
[FINEST] [3.4 fd=61 cfd=68] prototcp_bev_readcb_dst_child: ENTER, size=620
[FINEST] [3.4 fd=61 cfd=68] prototcp_bev_writecb_src_child: ENTER
[FINEST] [3.4 fd=61 cfd=68] prototcp_bev_readcb_dst: ENTER, size=620
[FINEST] [3.4 fd=61 cfd=68] prototcp_bev_writecb_src: ENTER
[FINEST] [7.8 fd=74 cfd=0] protossl_bev_eventcb_connected_srvdst: ENTER
===> Original server certificate:
Subject DN: /C=US/ST=California/L=Mountain View/O=Mozilla Corporation/OU=Cloud Services/CN=*.telemetry.mozilla.org
Common Names: *.telemetry.mozilla.org/*.telemetry.mozilla.org/telemetry.mozilla.org
Fingerprint: 6D:3C:6A:A4:5F:46:EB:8B:B6:FB8F:08:44:02:01:61:A0:25:C3:C8
Certificate cache: HIT
===> Forged server certificate:
Subject DN: /C=US/ST=California/L=Mountain View/O=Mozilla Corporation/OU=Cloud Services/CN=*.telemetry.mozilla.org
Common Names: *.telemetry.mozilla.org/*.telemetry.mozilla.org/telemetry.mozilla.org
Fingerprint: 71:B1:8C:A4:74:BF:B7:6A:36:5747:B0:C0:34:F3:89:51:1F:FE:4C
[FINEST] [7.8 fd=74 cfd=0] prototcp_bufferevent_setup: ENTER, fd=-1
[FINEST] [7.8 fd=74 cfd=0] protossl_bev_eventcb_connected_dst: ENTER
[FINEST] [7.8 fd=74 cfd=0] protossl_bufferevent_setup: ENTER, fd=74
[FINEST] [7.8 fd=74 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=74
[FINER] [7.8 fd=74 cfd=79] pxy_setup_child_listener: Finished setting up child listener, child_fd=79
[FINER] [7.8 fd=74 cfd=79] pxy_setup_child_listener: sslproxy_header= SSLproxy: [127.0.0.1]:35779,[10.42.0.230]:65481,[34.120.208.123]:443,s
[FINER] [7.8 fd=74 cfd=79] protossl_enable_src: Enabling src
SSL connected to [34.120.208.123]:443 TLSv1.3 TLS_AES_256_GCM_SHA384
CLIENT_RANDOM 6176F1640E55A8C57F52178D7767EAD2AA904A96C14CD16B49B8CCD5DC6A1558 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Certificate cache: KEEP (SNI match or target mode)
[FINEST] [7.8 fd=74 cfd=79] prototcp_bev_writecb_dst: ENTER
[FINEST] proxy_listener_acceptcb: ENTER, fd=80
[FINEST] proxy_conn_ctx_new: ENTER, fd=80
[FINEST] [0.10 fd=80 cfd=0] proxy_conn_ctx_new: Created new conn
[FINEST] [0.10 fd=80 cfd=0] pxy_thrmgr_assign_thr: ENTER
[FINEST] [5.10 fd=80 cfd=0] protossl_init_conn: ENTER
[FINEST] [5.10 fd=80 cfd=0] pxy_conn_init: ENTER
[FINEST] [5.10 fd=80 cfd=0] pxy_thr_attach: Adding conn
[FINER] [5.10 fd=80 cfd=0] check_fd_usage: descriptor_table_size=1024, dtablecount=82, reserve=10
[FINEST] [5.10 fd=80 cfd=0] pxy_conn_init: srcaddr= [10.42.0.230]:65484
[FINEST] [7.8 fd=74 cfd=79] prototcp_bev_eventcb_connected_src: ENTER
CONN: ssl 10.42.0.230 65481 34.120.208.123 443 sni:incoming.telemetry.mozilla.org names:*.telemetry.mozilla.org/*.telemetry.mozilla.org/telemetry.mozilla.org sproto:TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256 dproto:TLSv1.3:TLS_AES_256_GCM_SHA384 origcrt:6D3C6AA45F46EB8BB6FB8F0844020161A025C3C8 usedcrt:71B18CA474BFB76A365747B0C034F389511FFE4C user:-
SSL connected to [34.120.208.123]:443 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
CLIENT_RANDOM D03C4E4DEDB6CD5CD54EE26111925147B86D367A2B7C198FB5A5A537824ED62D 60844C15C87769963E437041DF6DD11C5875FE4431BB5FD65FACA3CFA9F3E94B14D304835BB8A0873765070B87198D3C
[FINEST] [5.10 fd=80 cfd=0] protossl_fd_readcb: ENTER
SNI peek: [pulsar.ebay.de] [complete], fd=80
[FINEST] [5.10 fd=80 cfd=0] pxy_conn_connect: ENTER
Connecting to [209.140.129.67]:443
[FINEST] [5.10 fd=80 cfd=0] protossl_conn_connect: ENTER
[FINEST] [5.10 fd=80 cfd=0] protossl_bufferevent_setup: ENTER, fd=-1
[FINEST] [5.10 fd=80 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=-1
[FINEST] [5.6 fd=64 cfd=0] protossl_bev_eventcb_connected_srvdst: ENTER
===> Original server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=pulsar.ebay.com
Common Names: pulsar.ebay.com/pulsar.ebay.com/pulsar.befr.ebay.be/pulsar.benl.ebay.be/pulsar.cafr.ebay.ca/pulsar.ebay.at/pulsar.ebay.ca/pulsar.ebay.ch/pulsar.ebay.co.th/pulsar.ebay.co.uk/pulsar.ebay.com.au/pulsar.ebay.com.cn/pulsar.ebay.com.hk/pulsar.ebay.com.my/pulsar.ebay.com.sg/pulsar.ebay.de/pulsar.ebay.es/pulsar.ebay.fr/pulsar.ebay.ie/pulsar.ebay.in/pulsar.ebay.it/pulsar.ebay.nl/pulsar.ebay.ph/pulsar.ebay.pl/pulsar.ebay.vn/ufesnew-pulsar-public-rnoaz03-1-1.ebay.com
Fingerprint: EB:83:83:8E:8C:79:98:CC:40:C87B:49:FE:38:90:20:6C:21:E9:B9
Certificate cache: MISS
===> Forged server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=pulsar.ebay.com
Common Names: pulsar.ebay.com/pulsar.ebay.com/pulsar.befr.ebay.be/pulsar.benl.ebay.be/pulsar.cafr.ebay.ca/pulsar.ebay.at/pulsar.ebay.ca/pulsar.ebay.ch/pulsar.ebay.co.th/pulsar.ebay.co.uk/pulsar.ebay.com.au/pulsar.ebay.com.cn/pulsar.ebay.com.hk/pulsar.ebay.com.my/pulsar.ebay.com.sg/pulsar.ebay.de/pulsar.ebay.es/pulsar.ebay.fr/pulsar.ebay.ie/pulsar.ebay.in/pulsar.ebay.it/pulsar.ebay.nl/pulsar.ebay.ph/pulsar.ebay.pl/pulsar.ebay.vn/ufesnew-pulsar-public-rnoaz03-1-1.ebay.com
Fingerprint: 17:E5:26:7A:B6:1A:7A:C6:1C:7FD6:8E:E4:1D:27:E1:7C:A8:D6:CA
[FINEST] [5.6 fd=64 cfd=0] prototcp_bufferevent_setup: ENTER, fd=-1
[FINEST] [5.6 fd=64 cfd=0] protossl_bev_eventcb_connected_dst: ENTER
[FINEST] [5.6 fd=64 cfd=0] protossl_bufferevent_setup: ENTER, fd=64
[FINEST] [5.6 fd=64 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=64
[FINER] [5.6 fd=64 cfd=83] pxy_setup_child_listener: Finished setting up child listener, child_fd=83
[FINER] [5.6 fd=64 cfd=83] pxy_setup_child_listener: sslproxy_header= SSLproxy: [127.0.0.1]:38143,[10.42.0.230]:65479,[209.140.129.83]:443,s
[FINER] [5.6 fd=64 cfd=83] protossl_enable_src: Enabling src
SSL connected to [209.140.129.83]:443 TLSv1.3 TLS_AES_256_GCM_SHA384
CLIENT_RANDOM 02CC996926606CB0FCD842E15BA0594523161793B833DEF7539F5BC3B36F95FA 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Certificate cache: KEEP (SNI match or target mode)
[FINEST] [5.6 fd=64 cfd=83] prototcp_bev_writecb_dst: ENTER
[FINEST] [5.6 fd=64 cfd=83] prototcp_bev_eventcb_connected_src: ENTER
CONN: ssl 10.42.0.230 65479 209.140.129.83 443 sni:pulsar.ebay.de names:pulsar.ebay.com/pulsar.ebay.com/pulsar.befr.ebay.be/pulsar.benl.ebay.be/pulsar.cafr.ebay.ca/pulsar.ebay.at/pulsar.ebay.ca/pulsar.ebay.ch/pulsar.ebay.co.th/pulsar.ebay.co.uk/pulsar.ebay.com.au/pulsar.ebay.com.cn/pulsar.ebay.com.hk/pulsar.ebay.com.my/pulsar.ebay.com.sg/pulsar.ebay.de/pulsar.ebay.es/pulsar.ebay.fr/pulsar.ebay.ie/pulsar.ebay.in/pulsar.ebay.it/pulsar.ebay.nl/pulsar.ebay.ph/pulsar.ebay.pl/pulsar.ebay.vn/ufesnew-pulsar-public-rnoaz03-1-1.ebay.com sproto:TLSv1.3:TLS_AES_128_GCM_SHA256 dproto:TLSv1.3:TLS_AES_256_GCM_SHA384 origcrt:EB83838E8C7998CC40C87B49FE3890206C21E9B9 usedcrt:17E5267AB61A7AC61C7FD68EE41D27E17CA8D6CA user:-
SSL connected to [209.140.129.83]:443 TLSv1.3 TLS_AES_128_GCM_SHA256
CLIENT_RANDOM 16C3D80D1EEB22A6E489059D2990F9AD5C4194E7D5127036482A71DD2D7B022B 57CA7881D55AA6C2EBDE3220EA479A3BB43C9ABD3703B293EF91F41C3A7F1B8100000000000000000000000000000000
[FINEST] [5.6 fd=64 cfd=83] prototcp_bev_readcb_src: ENTER, size=2360
[FINER] [5.6 fd=64 cfd=83] pxy_try_prepend_sslproxy_header: ENTER
[FINEST] [5.6 fd=64 cfd=83] pxy_try_prepend_sslproxy_header: ORIG packet, size=2360:
POST /plsr/mpe/0/DFLT/9?pld=%5B%7B%22ef%22%3A%22HOMEPAGE%22%2C%22ea%22%3A%22VIEWDTLS%22%2C%22pge%22%3A2481888%2C%22plsUBT%22%3A1%2C%22app%22%3A%22Testapp%22%2C%22callingEF%22%3A%22DFLT%22%2C%22difTS%22%3A0%2C%22eventOrder%22%3A0%2C%22parentrq%22%3A%2291dd7ac517d0ab8e4e23da95fff90a6c%22%2C%22pageci%22%3A%22ef168cd8-56e3-11ec-8ca4-5ab96a58f4d2%22%2C%22interaction%22%3A%22NDAxRlA4WFRZUVlRSEs2UUZTUDhZME0zWFlXNDAxRlA4WFRZUVlRSEs2UUZTUDhZME0zWFlXAjQwMUZQOFhUWVFZUUhLNlFGU1A4WTBNM1hZVwIuLy9hY3Rpb24vdHJhY2tpbmdMaXN0LzECNDAxRlA4WFRZUVlRSEs2UUZTUDhZME0zWFlXAAIOMjQ4MTg4OAACAAAAAAACDjI0ODE4ODgA%22%2C%22moduledtl%22%3A%22mi%253A45444%257Ciid%253A1%257Cdur%253A0%252Cmi%253A4518%257Ciid%253A0%257Cdur%253A0%252Cmi%253A4816%257Ciid%253A1%257Cdur%253A0%22%7D%5D HTTP/1.1
Host: pulsar.ebay.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: */*
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Referer: https://www.ebay.de/?mkevt=1&mkcid=2&mkrid=7071608169806221&keyword=conducive&crlp=1638827929401500001&MT_ID=562786&geo_id=&device=Computers&cmpgn=217719
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://www.ebay.de
Connection: keep-alive
Cookie: dp1=bbl/DE6570f5b8^; nonsession=BAQAAAXw0ACieAAaAADMABWOPwjg5MzA0NwDKACBlcPW4OTFkNmY1YTgxN2QwYTRlODQyM2EyNDk4ZmZlYTVhNWEAywABYa6VwDRRxjS6J43Ut9jKI7m/RvKTUmAHyg**; s=CgAD4ACBhr96LOTFkNmY1YTgxN2QwYTRlODQyM2EyNDk4ZmZlYTVhNWENcPzD; ebay=%5Ejs%3D1%5Esbf%3D%23100000%5E; ak_bmsc=3BE1723A956054B228007D116EA84C31~000000000000000000000000000000~YAAQ3cTdWDEpdiR9AQAAMPbWkQ72mHtlsFvqA2UiGGcjDC3VDMSql/kSNsHQWhclPMlu84DATfVAujysn/c9zlUfV9By0jJB8c4pLbhXti1J3JCZdVLNVgmVDKGInB9K+ndVH2PUY58cP1+e9YlSXmmIjvIv5kKJ+iQGBUQbkBTISvRU3ad5StL4BhuXk/lvEjDicXyFjQYb+oFsii+SvoaCT8/zxsLrzWBM/2lFlBSGVzIVOylyjpYxEcdaOvOMs119QCzIz0fF7xeky2tr4C0cPn2tK6wxIVIsPqGUXOqAkENCSDRlpS6hCSS4WpYtCuTD/i6hRWKiDLELGvrAvXKyNbkxjagyTT2cYhg920hyFhlRleN9; npii=btguid/91d6f5a817d0a4e8423a2498ffea5a5a6570f5b8^cguid/91d6fa3517d0acf237f38df5ff576ee06570f5b8^; ds2=ssts/1638829746025^; bm_sv=8F25EB1F6B55A7B292AE72FD026C3278~9fPpa7Zuw9FCOn4UuLlPCqEgCx6TjslehYy5Y9aIPAdeuSJr0+JHs1f3kwbmXhwiU/mAB1vsd9kOrPr5VacbFpUzCdOFPb+eeMrm8TeCXfNL0JeI8N44n/ufIveSoCOR1NxWtYwKEO7bSnOYMic3AA==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

[FINER] [5.6 fd=64 cfd=83] pxy_insert_sslproxy_header: ENTER
[FINEST] [5.6 fd=64 cfd=83] pxy_try_prepend_sslproxy_header: NEW packet, size=2432:
SSLproxy: [127.0.0.1]:38143,[10.42.0.230]:65479,[209.140.129.83]:443,s
POST /plsr/mpe/0/DFLT/9?pld=%5B%7B%22ef%22%3A%22HOMEPAGE%22%2C%22ea%22%3A%22VIEWDTLS%22%2C%22pge%22%3A2481888%2C%22plsUBT%22%3A1%2C%22app%22%3A%22Testapp%22%2C%22callingEF%22%3A%22DFLT%22%2C%22difTS%22%3A0%2C%22eventOrder%22%3A0%2C%22parentrq%22%3A%2291dd7ac517d0ab8e4e23da95fff90a6c%22%2C%22pageci%22%3A%22ef168cd8-56e3-11ec-8ca4-5ab96a58f4d2%22%2C%22interaction%22%3A%22NDAxRlA4WFRZUVlRSEs2UUZTUDhZME0zWFlXNDAxRlA4WFRZUVlRSEs2UUZTUDhZME0zWFlXAjQwMUZQOFhUWVFZUUhLNlFGU1A4WTBNM1hZVwIuLy9hY3Rpb24vdHJhY2tpbmdMaXN0LzECNDAxRlA4WFRZUVlRSEs2UUZTUDhZME0zWFlXAAIOMjQ4MTg4OAACAAAAAAACDjI0ODE4ODgA%22%2C%22moduledtl%22%3A%22mi%253A45444%257Ciid%253A1%257Cdur%253A0%252Cmi%253A4518%257Ciid%253A0%257Cdur%253A0%252Cmi%253A4816%257Ciid%253A1%257Cdur%253A0%22%7D%5D HTTP/1.1
Host: pulsar.ebay.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: */*
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Referer: https://www.ebay.de/?mkevt=1&mkcid=2&mkrid=7071608169806221&keyword=conducive&crlp=1638827929401500001&MT_ID=562786&geo_id=&device=Computers&cmpgn=217719
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://www.ebay.de
Connection: keep-alive
Cookie: dp1=bbl/DE6570f5b8^; nonsession=BAQAAAXw0ACieAAaAADMABWOPwjg5MzA0NwDKACBlcPW4OTFkNmY1YTgxN2QwYTRlODQyM2EyNDk4ZmZlYTVhNWEAywABYa6VwDRRxjS6J43Ut9jKI7m/RvKTUmAHyg**; s=CgAD4ACBhr96LOTFkNmY1YTgxN2QwYTRlODQyM2EyNDk4ZmZlYTVhNWENcPzD; ebay=%5Ejs%3D1%5Esbf%3D%23100000%5E; ak_bmsc=3BE1723A956054B228007D116EA84C31~000000000000000000000000000000~YAAQ3cTdWDEpdiR9AQAAMPbWkQ72mHtlsFvqA2UiGGcjDC3VDMSql/kSNsHQWhclPMlu84DATfVAujysn/c9zlUfV9By0jJB8c4pLbhXti1J3JCZdVLNVgmVDKGInB9K+ndVH2PUY58cP1+e9YlSXmmIjvIv5kKJ+iQGBUQbkBTISvRU3ad5StL4BhuXk/lvEjDicXyFjQYb+oFsii+SvoaCT8/zxsLrzWBM/2lFlBSGVzIVOylyjpYxEcdaOvOMs119QCzIz0fF7xeky2tr4C0cPn2tK6wxIVIsPqGUXOqAkENCSDRlpS6hCSS4WpYtCuTD/i6hRWKiDLELGvrAvXKyNbkxjagyTT2cYhg920hyFhlRleN9; npii=btguid/91d6f5a817d0a4e8423a2498ffea5a5a6570f5b8^cguid/91d6fa3517d0acf237f38df5ff576ee06570f5b8^; ds2=ssts/1638829746025^; bm_sv=8F25EB1F6B55A7B292AE72FD026C3278~9fPpa7Zuw9FCOn4UuLlPCqEgCx6TjslehYy5Y9aIPAdeuSJr0+JHs1f3kwbmXhwiU/mAB1vsd9kOrPr5VacbFpUzCdOFPb+eeMrm8TeCXfNL0JeI8N44n/ufIveSoCOR1NxWtYwKEO7bSnOYMic3AA==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

[FINEST] [5.6 fd=64 cfd=83] prototcp_bev_writecb_dst: ENTER
[FINEST] [5.6 fd=64 cfd=83] pxy_listener_acceptcb_child: ENTER, fd=84, ctx->child_fd=83
[FINEST] [5.6 fd=64 cfd=83] pxy_listener_acceptcb_child: peer addr=[127.0.0.1]:53636, fd=84
[FINER] [5.6 fd=64 cfd=83] check_fd_usage: descriptor_table_size=1024, dtablecount=86, reserve=10
[FINEST] [5.6 fd=64 cfd=83] pxy_conn_ctx_new_child: ENTER, fd=84
[FINEST] [5.6 fd=64 cfd=83] pxy_conn_attach_child: Adding child conn
[FINEST] [5.6 fd=64 cfd=83] prototcp_bufferevent_setup_child: ENTER, fd=84
[FINEST] [5.6 fd=64 cfd=83] protossl_connect_child: ENTER
[FINEST] [5.6 fd=64 cfd=83] prototcp_bev_eventcb_connected_dst_child: ENTER
Child connecting to [209.140.129.83]:443
[FINEST] [5.6 fd=64 cfd=83] prototcp_bev_readcb_src_child: ENTER, size=2048
[FINER] [5.6 fd=64 cfd=83] pxy_try_remove_sslproxy_header: REMOVE
[FINEST] [5.6 fd=64 cfd=83] prototcp_bev_readcb_src_child: NEW packet, size=1976:
POST /plsr/mpe/0/DFLT/9?pld=%5B%7B%22ef%22%3A%22HOMEPAGE%22%2C%22ea%22%3A%22VIEWDTLS%22%2C%22pge%22%3A2481888%2C%22plsUBT%22%3A1%2C%22app%22%3A%22Testapp%22%2C%22callingEF%22%3A%22DFLT%22%2C%22difTS%22%3A0%2C%22eventOrder%22%3A0%2C%22parentrq%22%3A%2291dd7ac517d0ab8e4e23da95fff90a6c%22%2C%22pageci%22%3A%22ef168cd8-56e3-11ec-8ca4-5ab96a58f4d2%22%2C%22interaction%22%3A%22NDAxRlA4WFRZUVlRSEs2UUZTUDhZME0zWFlXNDAxRlA4WFRZUVlRSEs2UUZTUDhZME0zWFlXAjQwMUZQOFhUWVFZUUhLNlFGU1A4WTBNM1hZVwIuLy9hY3Rpb24vdHJhY2tpbmdMaXN0LzECNDAxRlA4WFRZUVlRSEs2UUZTUDhZME0zWFlXAAIOMjQ4MTg4OAACAAAAAAACDjI0ODE4ODgA%22%2C%22moduledtl%22%3A%22mi%253A45444%257Ciid%253A1%257Cdur%253A0%252Cmi%253A4518%257Ciid%253A0%257Cdur%253A0%252Cmi%253A4816%257Ciid%253A1%257Cdur%253A0%22%7D%5D HTTP/1.1
Host: pulsar.ebay.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: */*
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Referer: https://www.ebay.de/?mkevt=1&mkcid=2&mkrid=7071608169806221&keyword=conducive&crlp=1638827929401500001&MT_ID=562786&geo_id=&device=Computers&cmpgn=217719
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://www.ebay.de
Connection: keep-alive
Cookie: dp1=bbl/DE6570f5b8^; nonsession=BAQAAAXw0ACieAAaAADMABWOPwjg5MzA0NwDKACBlcPW4OTFkNmY1YTgxN2QwYTRlODQyM2EyNDk4ZmZlYTVhNWEAywABYa6VwDRRxjS6J43Ut9jKI7m/RvKTUmAHyg**; s=CgAD4ACBhr96LOTFkNmY1YTgxN2QwYTRlODQyM2EyNDk4ZmZlYTVhNWENcPzD; ebay=%5Ejs%3D1%5Esbf%3D%23100000%5E; ak_bmsc=3BE1723A956054B228007D116EA84C31~000000000000000000000000000000~YAAQ3cTdWDEpdiR9AQAAMPbWkQ72mHtlsFvqA2UiGGcjDC3VDMSql/kSNsHQWhclPMlu84DATfVAujysn/c9zlUfV9By0jJB8c4pLbhXti1J3JCZdVLNVgmVDKGInB9K+ndVH2PUY58cP1+e9YlSXmmIjvIv5kKJ+iQGBUQbkBTISvRU3ad5StL4BhuXk/lvEjDicXyFjQYb+oFsii+SvoaCT8/zxsLrzWBM/2lFlBSGVzIVOylyjpYxEcdaOvOMs119QCzIz0fF7xeky2tr4C0cPn2tK6wxIVIsPqGUXOqAkENCSDRlpS6hCSS4WpYtCuTD/i6hRWKiDLELGvrAvXKyNbkxjagyTT2cYhg920hyFhlRleN9; npii=btguid/9
[FINEST] [5.6 fd=64 cfd=83] prototcp_bev_writecb_src_child: ENTER
[FINEST] [5.6 fd=64 cfd=83] prototcp_bev_writecb_dst_child: ENTER
[FINEST] [4.5 fd=62 cfd=0] protossl_bev_eventcb_connected_srvdst: ENTER
===> Original server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=sofe.ebay.com
Common Names: sofe.ebay.com/sofe.ebay.com/sofe-ap.intl.ebay.com/sofe-eu.intl.ebay.com/sofe-intl.g.ebay.com/sofe.befr.ebay.be/sofe.benl.ebay.be/sofe.cafr.ebay.ca/sofe.ebay.at/sofe.ebay.ca/sofe.ebay.ch/sofe.ebay.co.in/sofe.ebay.co.uk/sofe.ebay.com.au/sofe.ebay.com.hk/sofe.ebay.com.my/sofe.ebay.com.sg/sofe.ebay.de/sofe.ebay.es/sofe.ebay.fr/sofe.ebay.ie/sofe.ebay.in/sofe.ebay.it/sofe.ebay.nl/sofe.ebay.ph/sofe.ebay.pl/sofe.es.ebay.com/sofe.g.ebay.com/sofe.intl.ebay.com/spdmetrics.ebay.com
Fingerprint: 78:8A:27:24:46:67:04:CE:F7:FAF4:7B:EB:78:80:16:9C:27:0D:78
Certificate cache: MISS
===> Forged server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=sofe.ebay.com
Common Names: sofe.ebay.com/sofe.ebay.com/sofe-ap.intl.ebay.com/sofe-eu.intl.ebay.com/sofe-intl.g.ebay.com/sofe.befr.ebay.be/sofe.benl.ebay.be/sofe.cafr.ebay.ca/sofe.ebay.at/sofe.ebay.ca/sofe.ebay.ch/sofe.ebay.co.in/sofe.ebay.co.uk/sofe.ebay.com.au/sofe.ebay.com.hk/sofe.ebay.com.my/sofe.ebay.com.sg/sofe.ebay.de/sofe.ebay.es/sofe.ebay.fr/sofe.ebay.ie/sofe.ebay.in/sofe.ebay.it/sofe.ebay.nl/sofe.ebay.ph/sofe.ebay.pl/sofe.es.ebay.com/sofe.g.ebay.com/sofe.intl.ebay.com/spdmetrics.ebay.com
Fingerprint: CF:87:2B:10:0B:F0:70:C5:B1:80DE:E3:B6:35:C4:4B:18:1C:A3:E7
[FINEST] [4.5 fd=62 cfd=0] prototcp_bufferevent_setup: ENTER, fd=-1
[FINEST] [4.5 fd=62 cfd=0] protossl_bev_eventcb_connected_dst: ENTER
[FINEST] [4.5 fd=62 cfd=0] protossl_bufferevent_setup: ENTER, fd=62
[FINEST] [4.5 fd=62 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=62
[FINER] [4.5 fd=62 cfd=86] pxy_setup_child_listener: Finished setting up child listener, child_fd=86
[FINER] [4.5 fd=62 cfd=86] pxy_setup_child_listener: sslproxy_header= SSLproxy: [127.0.0.1]:37939,[10.42.0.230]:65478,[216.113.181.241]:443,s
[FINER] [4.5 fd=62 cfd=86] protossl_enable_src: Enabling src
SSL connected to [216.113.181.241]:443 TLSv1.2 AES128-GCM-SHA256
CLIENT_RANDOM 8C889487F6360C085F812D1A7653CB3FD7CC7B0B787E7E8B20BB226B91322DB6 A5D4916858E349D811145ED5FC2EE2A62B946FDFCACF9AB198D1B0330ED8D84A47DAA2C021CB3EFE72BF72220C5C78A8
Certificate cache: KEEP (SNI match or target mode)
[FINEST] [4.5 fd=62 cfd=86] prototcp_bev_writecb_dst: ENTER
[FINEST] [4.5 fd=62 cfd=86] prototcp_bev_eventcb_connected_src: ENTER
CONN: ssl 10.42.0.230 65478 216.113.181.241 443 sni:sofe.ebay.de names:sofe.ebay.com/sofe.ebay.com/sofe-ap.intl.ebay.com/sofe-eu.intl.ebay.com/sofe-intl.g.ebay.com/sofe.befr.ebay.be/sofe.benl.ebay.be/sofe.cafr.ebay.ca/sofe.ebay.at/sofe.ebay.ca/sofe.ebay.ch/sofe.ebay.co.in/sofe.ebay.co.uk/sofe.ebay.com.au/sofe.ebay.com.hk/sofe.ebay.com.my/sofe.ebay.com.sg/sofe.ebay.de/sofe.ebay.es/sofe.ebay.fr/sofe.ebay.ie/sofe.ebay.in/sofe.ebay.it/sofe.ebay.nl/sofe.ebay.ph/sofe.ebay.pl/sofe.es.ebay.com/sofe.g.ebay.com/sofe.intl.ebay.com/spdmetrics.ebay.com sproto:TLSv1.3:TLS_AES_128_GCM_SHA256 dproto:TLSv1.2:AES128-GCM-SHA256 origcrt:788A2724466704CEF7FAF47BEB7880169C270D78 usedcrt:CF872B100BF070C5B180DEE3B635C44B181CA3E7 user:-
SSL connected to [216.113.181.241]:443 TLSv1.3 TLS_AES_128_GCM_SHA256
CLIENT_RANDOM BCC251E0C2D1C5C30B1A67BB436EB222D9D17831BE5B7652899EE9703E771569 137A43D8E2D627D6525C171D19522A055052B3F699E1EFC624F94C634C7FEA0500000000000000000000000000000000
[FINEST] [4.5 fd=62 cfd=86] prototcp_bev_readcb_src: ENTER, size=2066
[FINER] [4.5 fd=62 cfd=86] pxy_try_prepend_sslproxy_header: ENTER
[FINEST] [4.5 fd=62 cfd=86] pxy_try_prepend_sslproxy_header: ORIG packet, size=2066:
POST /ws/web/SojPagePerf?cmdname=highline_homepage_large&s_app_name=highlnfe&pagename=Highline_Homepage&cxy=lvshighlnfe38-j24d2-tess0057&s_host=lvshighlnfe38-j24d2-tess0057&s_10s=UFES2-FRA-dweb-2%2C%20UFES2-FRA-dweb-www2&st1=1638829750980&ex3=32220&jseaa=32076&jseap=144&ct1chnk=32019&jsljgr3&svo=103&jsljgr1=4&slo&i_ssl=89&dcon=1657&fsom=n&i_firstcontentfulpaint=819&nvt_dcl=83&nvt_di=1272&nvt_dc=32164&nvt_oe=63&nvt_rc=0&ct21=31749&ctb=642&st1a=235&sgwt=79742&i_nve2elc=32227&jsljgr2=905&i_29i=1232 HTTP/1.1
Host: sofe.ebay.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: */*
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Referer: https://www.ebay.de/?mkevt=1&mkcid=2&mkrid=7071608169806221&keyword=conducive&crlp=1638827929401500001&MT_ID=562786&geo_id=&device=Computers&cmpgn=217719
Origin: https://www.ebay.de
Connection: keep-alive
Cookie: dp1=bbl/DE6570f5b8^; nonsession=BAQAAAXw0ACieAAaAADMABWOPwjg5MzA0NwDKACBlcPW4OTFkNmY1YTgxN2QwYTRlODQyM2EyNDk4ZmZlYTVhNWEAywABYa6VwDRRxjS6J43Ut9jKI7m/RvKTUmAHyg**; s=CgAD4ACBhr96LOTFkNmY1YTgxN2QwYTRlODQyM2EyNDk4ZmZlYTVhNWENcPzD; ebay=%5Ejs%3D1%5Esbf%3D%23100000%5E; ak_bmsc=3BE1723A956054B228007D116EA84C31~000000000000000000000000000000~YAAQ3cTdWDEpdiR9AQAAMPbWkQ72mHtlsFvqA2UiGGcjDC3VDMSql/kSNsHQWhclPMlu84DATfVAujysn/c9zlUfV9By0jJB8c4pLbhXti1J3JCZdVLNVgmVDKGInB9K+ndVH2PUY58cP1+e9YlSXmmIjvIv5kKJ+iQGBUQbkBTISvRU3ad5StL4BhuXk/lvEjDicXyFjQYb+oFsii+SvoaCT8/zxsLrzWBM/2lFlBSGVzIVOylyjpYxEcdaOvOMs119QCzIz0fF7xeky2tr4C0cPn2tK6wxIVIsPqGUXOqAkENCSDRlpS6hCSS4WpYtCuTD/i6hRWKiDLELGvrAvXKyNbkxjagyTT2cYhg920hyFhlRleN9; npii=btguid/91d6f5a817d0a4e8423a2498ffea5a5a6570f5b8^cguid/91d6fa3517d0acf237f38df5ff576ee06570f5b8^; ds2=ssts/1638829867204^; bm_sv=8F25EB1F6B55A7B292AE72FD026C3278~9fPpa7Zuw9FCOn4UuLlPCqEgCx6TjslehYy5Y9aIPAdeuSJr0+JHs1f3kwbmXhwiU/mAB1vsd9kOrPr5VacbFpUzCdOFPb+eeMrm8TeCXfNL0JeI8N44n/ufIveSoCOR1NxWtYwKEO7bSnOYMic3AA==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Content-Length: 0

[FINER] [4.5 fd=62 cfd=86] pxy_insert_sslproxy_header: ENTER
[FINEST] [4.5 fd=62 cfd=86] pxy_try_prepend_sslproxy_header: NEW packet, size=2139:
SSLproxy: [127.0.0.1]:37939,[10.42.0.230]:65478,[216.113.181.241]:443,s
POST /ws/web/SojPagePerf?cmdname=highline_homepage_large&s_app_name=highlnfe&pagename=Highline_Homepage&cxy=lvshighlnfe38-j24d2-tess0057&s_host=lvshighlnfe38-j24d2-tess0057&s_10s=UFES2-FRA-dweb-2%2C%20UFES2-FRA-dweb-www2&st1=1638829750980&ex3=32220&jseaa=32076&jseap=144&ct1chnk=32019&jsljgr3&svo=103&jsljgr1=4&slo&i_ssl=89&dcon=1657&fsom=n&i_firstcontentfulpaint=819&nvt_dcl=83&nvt_di=1272&nvt_dc=32164&nvt_oe=63&nvt_rc=0&ct21=31749&ctb=642&st1a=235&sgwt=79742&i_nve2elc=32227&jsljgr2=905&i_29i=1232 HTTP/1.1
Host: sofe.ebay.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: */*
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Referer: https://www.ebay.de/?mkevt=1&mkcid=2&mkrid=7071608169806221&keyword=conducive&crlp=1638827929401500001&MT_ID=562786&geo_id=&device=Computers&cmpgn=217719
Origin: https://www.ebay.de
Connection: keep-alive
Cookie: dp1=bbl/DE6570f5b8^; nonsession=BAQAAAXw0ACieAAaAADMABWOPwjg5MzA0NwDKACBlcPW4OTFkNmY1YTgxN2QwYTRlODQyM2EyNDk4ZmZlYTVhNWEAywABYa6VwDRRxjS6J43Ut9jKI7m/RvKTUmAHyg**; s=CgAD4ACBhr96LOTFkNmY1YTgxN2QwYTRlODQyM2EyNDk4ZmZlYTVhNWENcPzD; ebay=%5Ejs%3D1%5Esbf%3D%23100000%5E; ak_bmsc=3BE1723A956054B228007D116EA84C31~000000000000000000000000000000~YAAQ3cTdWDEpdiR9AQAAMPbWkQ72mHtlsFvqA2UiGGcjDC3VDMSql/kSNsHQWhclPMlu84DATfVAujysn/c9zlUfV9By0jJB8c4pLbhXti1J3JCZdVLNVgmVDKGInB9K+ndVH2PUY58cP1+e9YlSXmmIjvIv5kKJ+iQGBUQbkBTISvRU3ad5StL4BhuXk/lvEjDicXyFjQYb+oFsii+SvoaCT8/zxsLrzWBM/2lFlBSGVzIVOylyjpYxEcdaOvOMs119QCzIz0fF7xeky2tr4C0cPn2tK6wxIVIsPqGUXOqAkENCSDRlpS6hCSS4WpYtCuTD/i6hRWKiDLELGvrAvXKyNbkxjagyTT2cYhg920hyFhlRleN9; npii=btguid/91d6f5a817d0a4e8423a2498ffea5a5a6570f5b8^cguid/91d6fa3517d0acf237f38df5ff576ee06570f5b8^; ds2=ssts/1638829867204^; bm_sv=8F25EB1F6B55A7B292AE72FD026C3278~9fPpa7Zuw9FCOn4UuLlPCqEgCx6TjslehYy5Y9aIPAdeuSJr0+JHs1f3kwbmXhwiU/mAB1vsd9kOrPr5VacbFpUzCdOFPb+eeMrm8TeCXfNL0JeI8N44n/ufIveSoCOR1NxWtYwKEO7bSnOYMic3AA==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Content-Length: 0

[FINEST] [4.5 fd=62 cfd=86] prototcp_bev_writecb_dst: ENTER
[FINEST] [4.5 fd=62 cfd=86] pxy_listener_acceptcb_child: ENTER, fd=87, ctx->child_fd=86
[FINEST] [4.5 fd=62 cfd=86] pxy_listener_acceptcb_child: peer addr=[127.0.0.1]:47264, fd=87
[FINER] [4.5 fd=62 cfd=86] check_fd_usage: descriptor_table_size=1024, dtablecount=89, reserve=10
[FINEST] [4.5 fd=62 cfd=86] pxy_conn_ctx_new_child: ENTER, fd=87
[FINEST] [4.5 fd=62 cfd=86] pxy_conn_attach_child: Adding child conn
[FINEST] [4.5 fd=62 cfd=86] prototcp_bufferevent_setup_child: ENTER, fd=87
[FINEST] [4.5 fd=62 cfd=86] protossl_connect_child: ENTER
[FINEST] [4.5 fd=62 cfd=86] prototcp_bev_eventcb_connected_dst_child: ENTER
Child connecting to [216.113.181.241]:443
[FINEST] [4.5 fd=62 cfd=86] prototcp_bev_readcb_src_child: ENTER, size=2048
[FINER] [4.5 fd=62 cfd=86] pxy_try_remove_sslproxy_header: REMOVE
[FINEST] [4.5 fd=62 cfd=86] prototcp_bev_readcb_src_child: NEW packet, size=1975:
POST /ws/web/SojPagePerf?cmdname=highline_homepage_large&s_app_name=highlnfe&pagename=Highline_Homepage&cxy=lvshighlnfe38-j24d2-tess0057&s_host=lvshighlnfe38-j24d2-tess0057&s_10s=UFES2-FRA-dweb-2%2C%20UFES2-FRA-dweb-www2&st1=1638829750980&ex3=32220&jseaa=32076&jseap=144&ct1chnk=32019&jsljgr3&svo=103&jsljgr1=4&slo&i_ssl=89&dcon=1657&fsom=n&i_firstcontentfulpaint=819&nvt_dcl=83&nvt_di=1272&nvt_dc=32164&nvt_oe=63&nvt_rc=0&ct21=31749&ctb=642&st1a=235&sgwt=79742&i_nve2elc=32227&jsljgr2=905&i_29i=1232 HTTP/1.1
Host: sofe.ebay.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: */*
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Referer: https://www.ebay.de/?mkevt=1&mkcid=2&mkrid=7071608169806221&keyword=conducive&crlp=1638827929401500001&MT_ID=562786&geo_id=&device=Computers&cmpgn=217719
Origin: https://www.ebay.de
Connection: keep-alive
Cookie: dp1=bbl/DE6570f5b8^; nonsession=BAQAAAXw0ACieAAaAADMABWOPwjg5MzA0NwDKACBlcPW4OTFkNmY1YTgxN2QwYTRlODQyM2EyNDk4ZmZlYTVhNWEAywABYa6VwDRRxjS6J43Ut9jKI7m/RvKTUmAHyg**; s=CgAD4ACBhr96LOTFkNmY1YTgxN2QwYTRlODQyM2EyNDk4ZmZlYTVhNWENcPzD; ebay=%5Ejs%3D1%5Esbf%3D%23100000%5E; ak_bmsc=3BE1723A956054B228007D116EA84C31~000000000000000000000000000000~YAAQ3cTdWDEpdiR9AQAAMPbWkQ72mHtlsFvqA2UiGGcjDC3VDMSql/kSNsHQWhclPMlu84DATfVAujysn/c9zlUfV9By0jJB8c4pLbhXti1J3JCZdVLNVgmVDKGInB9K+ndVH2PUY58cP1+e9YlSXmmIjvIv5kKJ+iQGBUQbkBTISvRU3ad5StL4BhuXk/lvEjDicXyFjQYb+oFsii+SvoaCT8/zxsLrzWBM/2lFlBSGVzIVOylyjpYxEcdaOvOMs119QCzIz0fF7xeky2tr4C0cPn2tK6wxIVIsPqGUXOqAkENCSDRlpS6hCSS4WpYtCuTD/i6hRWKiDLELGvrAvXKyNbkxjagyTT2cYhg920hyFhlRleN9; npii=btguid/91d6f5a817d0a4e8423a2498ffea5a5a6570f5b8^cguid/91d6fa3517d0acf237f38df5ff576ee06570f5b8^; ds2=ssts/1638829867204^; bm_sv=8F25EB1F6B55A7B292AE72FD026C3278~9fPpa7Zuw9FCOn4UuLlPCqEgCx6TjslehYy5Y9aIPAdeuSJr0+JHs1f3kwbmXhwiU/mAB1vsd9kOrPr5VacbFpUzCdOFPb+eeMrm8TeCXfNL0JeI8N44n/ufIveSoCOR1NxWtYwKEO7bSnOYMic3AA==
Sec-F
[FINEST] [4.5 fd=62 cfd=86] prototcp_bev_writecb_src_child: ENTER
[FINEST] [4.5 fd=62 cfd=86] prototcp_bev_writecb_dst_child: ENTER
[FINEST] [5.10 fd=80 cfd=0] protossl_bev_eventcb_connected_srvdst: ENTER
===> Original server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=pulsar.ebay.com
Common Names: pulsar.ebay.com/pulsar.ebay.com/pulsar.befr.ebay.be/pulsar.benl.ebay.be/pulsar.cafr.ebay.ca/pulsar.ebay.at/pulsar.ebay.ca/pulsar.ebay.ch/pulsar.ebay.co.th/pulsar.ebay.co.uk/pulsar.ebay.com.au/pulsar.ebay.com.cn/pulsar.ebay.com.hk/pulsar.ebay.com.my/pulsar.ebay.com.sg/pulsar.ebay.de/pulsar.ebay.es/pulsar.ebay.fr/pulsar.ebay.ie/pulsar.ebay.in/pulsar.ebay.it/pulsar.ebay.nl/pulsar.ebay.ph/pulsar.ebay.pl/pulsar.ebay.vn
Fingerprint: E9:C3:D3:CD:8E:67:38:E5:15:C2CF:2A:C0:E3:E1:8D:D8:62:AC:06
Certificate cache: MISS
===> Forged server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=pulsar.ebay.com
Common Names: pulsar.ebay.com/pulsar.ebay.com/pulsar.befr.ebay.be/pulsar.benl.ebay.be/pulsar.cafr.ebay.ca/pulsar.ebay.at/pulsar.ebay.ca/pulsar.ebay.ch/pulsar.ebay.co.th/pulsar.ebay.co.uk/pulsar.ebay.com.au/pulsar.ebay.com.cn/pulsar.ebay.com.hk/pulsar.ebay.com.my/pulsar.ebay.com.sg/pulsar.ebay.de/pulsar.ebay.es/pulsar.ebay.fr/pulsar.ebay.ie/pulsar.ebay.in/pulsar.ebay.it/pulsar.ebay.nl/pulsar.ebay.ph/pulsar.ebay.pl/pulsar.ebay.vn
Fingerprint: 1A:E9:99:85:D7:77:F6:AE:8A:989F:A9:DE:54:73:F0:79:73:7E:A5
[FINEST] [5.10 fd=80 cfd=0] prototcp_bufferevent_setup: ENTER, fd=-1
[FINEST] [5.10 fd=80 cfd=0] protossl_bev_eventcb_connected_dst: ENTER
[FINEST] [5.10 fd=80 cfd=0] protossl_bufferevent_setup: ENTER, fd=80
[FINEST] [5.10 fd=80 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=80
[FINER] [5.10 fd=80 cfd=89] pxy_setup_child_listener: Finished setting up child listener, child_fd=89
[FINER] [5.10 fd=80 cfd=89] pxy_setup_child_listener: sslproxy_header= SSLproxy: [127.0.0.1]:36091,[10.42.0.230]:65484,[209.140.129.67]:443,s
[FINER] [5.10 fd=80 cfd=89] protossl_enable_src: Enabling src
SSL connected to [209.140.129.67]:443 TLSv1.3 TLS_AES_256_GCM_SHA384
CLIENT_RANDOM C1A1F41A9CC1D5C9370AADB6F5184D7A33D40D75FBEA0ED6058C7105BD03C313 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Certificate cache: KEEP (SNI match or target mode)
[FINEST] [5.10 fd=80 cfd=89] prototcp_bev_writecb_dst: ENTER
[FINEST] [5.10 fd=80 cfd=89] prototcp_bev_eventcb_connected_src: ENTER
CONN: ssl 10.42.0.230 65484 209.140.129.67 443 sni:pulsar.ebay.de names:pulsar.ebay.com/pulsar.ebay.com/pulsar.befr.ebay.be/pulsar.benl.ebay.be/pulsar.cafr.ebay.ca/pulsar.ebay.at/pulsar.ebay.ca/pulsar.ebay.ch/pulsar.ebay.co.th/pulsar.ebay.co.uk/pulsar.ebay.com.au/pulsar.ebay.com.cn/pulsar.ebay.com.hk/pulsar.ebay.com.my/pulsar.ebay.com.sg/pulsar.ebay.de/pulsar.ebay.es/pulsar.ebay.fr/pulsar.ebay.ie/pulsar.ebay.in/pulsar.ebay.it/pulsar.ebay.nl/pulsar.ebay.ph/pulsar.ebay.pl/pulsar.ebay.vn sproto:TLSv1.3:TLS_AES_128_GCM_SHA256 dproto:TLSv1.3:TLS_AES_256_GCM_SHA384 origcrt:E9C3D3CD8E6738E515C2CF2AC0E3E18DD862AC06 usedcrt:1AE99985D777F6AE8A989FA9DE5473F079737EA5 user:-
SSL connected to [209.140.129.67]:443 TLSv1.3 TLS_AES_128_GCM_SHA256
CLIENT_RANDOM 13F508D7A5BBF0DDC201953F5BED274AAB3DCF005284006864B7F0B2F96F5366 E6A8829C997AC1D2B825B417A4C20D5B97B760684C83FB3F8A33C9F7BC44FC7000000000000000000000000000000000
[FINEST] [4.9 fd=75 cfd=0] protossl_bev_eventcb_connected_srvdst: ENTER
===> Original server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=sofe.ebay.com
Common Names: sofe.ebay.com/sofe.ebay.com/sofe-ap.intl.ebay.com/sofe-eu.intl.ebay.com/sofe-intl.g.ebay.com/sofe.befr.ebay.be/sofe.benl.ebay.be/sofe.cafr.ebay.ca/sofe.ebay.at/sofe.ebay.ca/sofe.ebay.ch/sofe.ebay.co.in/sofe.ebay.co.uk/sofe.ebay.com.au/sofe.ebay.com.hk/sofe.ebay.com.my/sofe.ebay.com.sg/sofe.ebay.de/sofe.ebay.es/sofe.ebay.fr/sofe.ebay.ie/sofe.ebay.in/sofe.ebay.it/sofe.ebay.nl/sofe.ebay.ph/sofe.ebay.pl/sofe.es.ebay.com/sofe.g.ebay.com/sofe.intl.ebay.com/spdmetrics.ebay.com
Fingerprint: 78:8A:27:24:46:67:04:CE:F7:FAF4:7B:EB:78:80:16:9C:27:0D:78
Certificate cache: HIT
===> Forged server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=sofe.ebay.com
Common Names: sofe.ebay.com/sofe.ebay.com/sofe-ap.intl.ebay.com/sofe-eu.intl.ebay.com/sofe-intl.g.ebay.com/sofe.befr.ebay.be/sofe.benl.ebay.be/sofe.cafr.ebay.ca/sofe.ebay.at/sofe.ebay.ca/sofe.ebay.ch/sofe.ebay.co.in/sofe.ebay.co.uk/sofe.ebay.com.au/sofe.ebay.com.hk/sofe.ebay.com.my/sofe.ebay.com.sg/sofe.ebay.de/sofe.ebay.es/sofe.ebay.fr/sofe.ebay.ie/sofe.ebay.in/sofe.ebay.it/sofe.ebay.nl/sofe.ebay.ph/sofe.ebay.pl/sofe.es.ebay.com/sofe.g.ebay.com/sofe.intl.ebay.com/spdmetrics.ebay.com
Fingerprint: CF:87:2B:10:0B:F0:70:C5:B1:80DE:E3:B6:35:C4:4B:18:1C:A3:E7
[FINEST] [4.9 fd=75 cfd=0] prototcp_bufferevent_setup: ENTER, fd=-1
[FINEST] [4.9 fd=75 cfd=0] protossl_bev_eventcb_connected_dst: ENTER
[FINEST] [4.9 fd=75 cfd=0] protossl_bufferevent_setup: ENTER, fd=75
[FINEST] [4.9 fd=75 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=75
[FINER] [4.9 fd=75 cfd=91] pxy_setup_child_listener: Finished setting up child listener, child_fd=91
[FINER] [4.9 fd=75 cfd=91] pxy_setup_child_listener: sslproxy_header= SSLproxy: [127.0.0.1]:36051,[10.42.0.230]:65480,[216.113.181.241]:443,s
[FINER] [4.9 fd=75 cfd=91] protossl_enable_src: Enabling src
SSL connected to [216.113.181.241]:443 TLSv1.2 AES128-GCM-SHA256
CLIENT_RANDOM 5C9E59BC659674C5115EA981988D35A720EFADA62E57B88C185CFE22B1FC6A17 5125BA166AD91A070B499710DDD4A8FB2D0463AD92B496EE60B111C53053991E3E03DDCD54663E94CD0430F5CA6668BB
Certificate cache: KEEP (SNI match or target mode)
[FINEST] [4.9 fd=75 cfd=91] prototcp_bev_writecb_dst: ENTER
[FINEST] [4.9 fd=75 cfd=91] prototcp_bev_eventcb_connected_src: ENTER
CONN: ssl 10.42.0.230 65480 216.113.181.241 443 sni:sofe.ebay.de names:sofe.ebay.com/sofe.ebay.com/sofe-ap.intl.ebay.com/sofe-eu.intl.ebay.com/sofe-intl.g.ebay.com/sofe.befr.ebay.be/sofe.benl.ebay.be/sofe.cafr.ebay.ca/sofe.ebay.at/sofe.ebay.ca/sofe.ebay.ch/sofe.ebay.co.in/sofe.ebay.co.uk/sofe.ebay.com.au/sofe.ebay.com.hk/sofe.ebay.com.my/sofe.ebay.com.sg/sofe.ebay.de/sofe.ebay.es/sofe.ebay.fr/sofe.ebay.ie/sofe.ebay.in/sofe.ebay.it/sofe.ebay.nl/sofe.ebay.ph/sofe.ebay.pl/sofe.es.ebay.com/sofe.g.ebay.com/sofe.intl.ebay.com/spdmetrics.ebay.com sproto:TLSv1.3:TLS_AES_128_GCM_SHA256 dproto:TLSv1.2:AES128-GCM-SHA256 origcrt:788A2724466704CEF7FAF47BEB7880169C270D78 usedcrt:CF872B100BF070C5B180DEE3B635C44B181CA3E7 user:-
SSL connected to [216.113.181.241]:443 TLSv1.3 TLS_AES_128_GCM_SHA256
CLIENT_RANDOM 312324943FCC47803B9E3360549BA3A57A137E0A2E299C971834AD91F1AC45E9 3A755C600000C82307BAD717CFA0821D73D39EBB07E023FFD9061AE5AB8189CC00000000000000000000000000000000
[FINEST] [1.2 fd=44 cfd=52] prototcp_bev_readcb_src: ENTER, size=1012
[FINER] [1.2 fd=44 cfd=52] pxy_try_prepend_sslproxy_header: ENTER
[FINEST] [1.2 fd=44 cfd=52] prototcp_bev_writecb_dst: ENTER
[FINEST] [6.7 fd=70 cfd=73] prototcp_bev_readcb_src: ENTER, size=959
[FINER] [6.7 fd=70 cfd=73] pxy_try_prepend_sslproxy_header: ENTER
[FINEST] [6.7 fd=70 cfd=73] pxy_try_prepend_sslproxy_header: ORIG packet, size=959:
POST /submit/contextual-services/topsites-click/1/c61e40fa-4911-418b-90bd-ad629c759e6f HTTP/1.1
Host: incoming.telemetry.mozilla.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: */*
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Encoding: gzip
Date: Mon, 06 Dec 2021 22:31:11 GMT
Content-Length: 410
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

�
[FINER] [6.7 fd=70 cfd=73] pxy_insert_sslproxy_header: ENTER
[FINEST] [6.7 fd=70 cfd=73] pxy_try_prepend_sslproxy_header: NEW packet, size=1031:
SSLproxy: [127.0.0.1]:38009,[10.42.0.230]:65483,[34.120.208.123]:443,s
POST /submit/contextual-services/topsites-click/1/c61e40fa-4911-418b-90bd-ad629c759e6f HTTP/1.1
Host: incoming.telemetry.mozilla.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: */*
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Encoding: gzip
Date: Mon, 06 Dec 2021 22:31:11 GMT
Content-Length: 410
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

�
[FINEST] [6.7 fd=70 cfd=73] prototcp_bev_writecb_dst: ENTER
[FINEST] proxy_listener_acceptcb: ENTER, fd=92
[FINEST] proxy_conn_ctx_new: ENTER, fd=92
[FINEST] [0.11 fd=92 cfd=0] proxy_conn_ctx_new: Created new conn
[FINEST] [0.11 fd=92 cfd=0] pxy_thrmgr_assign_thr: ENTER
[FINEST] [6.11 fd=92 cfd=0] protossl_init_conn: ENTER
[FINEST] [6.11 fd=92 cfd=0] pxy_conn_init: ENTER
[FINEST] [6.11 fd=92 cfd=0] pxy_thr_attach: Adding conn
[FINER] [6.11 fd=92 cfd=0] check_fd_usage: descriptor_table_size=1024, dtablecount=94, reserve=10
[FINEST] [6.11 fd=92 cfd=0] pxy_conn_init: srcaddr= [10.42.0.230]:65488
[FINEST] [6.7 fd=70 cfd=73] pxy_listener_acceptcb_child: ENTER, fd=93, ctx->child_fd=73
[FINEST] [6.7 fd=70 cfd=73] pxy_listener_acceptcb_child: peer addr=[127.0.0.1]:58664, fd=93
[FINER] [6.7 fd=70 cfd=73] check_fd_usage: descriptor_table_size=1024, dtablecount=95, reserve=10
[FINEST] [6.7 fd=70 cfd=73] pxy_conn_ctx_new_child: ENTER, fd=93
[FINEST] [6.7 fd=70 cfd=73] pxy_conn_attach_child: Adding child conn
[FINEST] [6.7 fd=70 cfd=73] prototcp_bufferevent_setup_child: ENTER, fd=93
[FINEST] [6.7 fd=70 cfd=73] protossl_connect_child: ENTER
[FINEST] [6.7 fd=70 cfd=73] prototcp_bev_eventcb_connected_dst_child: ENTER
Child connecting to [34.120.208.123]:443
[FINEST] [6.7 fd=70 cfd=73] prototcp_bev_readcb_src_child: ENTER, size=1031
[FINER] [6.7 fd=70 cfd=73] pxy_try_remove_sslproxy_header: REMOVE
[FINEST] [6.7 fd=70 cfd=73] prototcp_bev_readcb_src_child: NEW packet, size=959:
POST /submit/contextual-services/topsites-click/1/c61e40fa-4911-418b-90bd-ad629c759e6f HTTP/1.1
Host: incoming.telemetry.mozilla.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: */*
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Encoding: gzip
Date: Mon, 06 Dec 2021 22:31:11 GMT
Content-Length: 410
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

�
[FINEST] [6.7 fd=70 cfd=73] prototcp_bev_writecb_src_child: ENTER
[FINEST] [6.7 fd=70 cfd=73] prototcp_bev_writecb_dst_child: ENTER
[FINEST] [6.11 fd=92 cfd=0] protossl_fd_readcb: ENTER
SNI peek: [www.ebay.de] [complete], fd=92
[FINEST] [6.11 fd=92 cfd=0] pxy_conn_connect: ENTER
Connecting to [84.53.189.188]:443
[FINEST] [6.11 fd=92 cfd=0] protossl_conn_connect: ENTER
[FINEST] [6.11 fd=92 cfd=0] protossl_bufferevent_setup: ENTER, fd=-1
[FINEST] [6.11 fd=92 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=-1
[FINEST] [6.11 fd=92 cfd=0] protossl_bev_eventcb_connected_srvdst: ENTER
===> Original server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/www.ebay.com/aka-sandbox.ebay.com/cache.ebay.com/cache.vivanuncios.com.mx/careers.ebayinc.com/cdn.roma.ebay.com/cr.qa.ebaystatic.com/dsa.ebay.co.uk/dsa.ebay.com/dsa.ebay.de/ebay.com.au/ebay.us/ebaypartnernetwork.ebay.com/ecg-api.vivanuncios.com.mx/ecg-apis.vivanuncios.com.mx/feed.ebay.com.au/galleryplus.ebayimg.com/gh.ebaystatic.com/ir.ebaystatic.com/ir.sandbox.ebaystatic.com/m.ebay.at/m.ebay.ca/m.ebay.ie/m.ebay.ph/p.ebaystatic.com/pages.ebay.ca/pages.ebay.com.au/pages.ebay.in/partnernetwork.ebay.co.uk/partnernetwork.ebay.com/partnernetwork.ebay.com.au/partnernetwork.ebay.de/partnernetwork.ebay.es/partnernetwork.ebay.fr/partnernetwork.ebay.it/pics.ebaystatic.com/poc.ebay.com/protool.vivanuncios.com.mx/q.ebaystatic.com/reco.ebay.com/rest.ebay.com/rs.sandbox.ebaystatic.com/rs.xstage.ebaystatic.com/rtm.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/sslgalleryplus.ebayimg.com/static.ebayinc.com/tech.ebayinc.com/vivanuncios.com.mx/vmp.ebay.com/www.befr.ebay.be/www.benl.ebay.be/www.cafr.ebay.ca/www.ebay.at/www.ebay.be/www.ebay.ca/www.ebay.ch/www.ebay.co.uk/www.ebay.com.au/www.ebay.com.hk/www.ebay.com.my/www.ebay.com.sg/www.ebay.de/www.ebay.es/www.ebay.fr/www.ebay.ie/www.ebay.in/www.ebay.it/www.ebay.nl/www.ebay.ph/www.ebay.pl/www.ebay.us/www.ebayinc.com/www.vivanuncios.com.mx
Fingerprint: DD:AC:89:D2:F5:70:7C:BF:A4:6C4C:3B:42:0E:F1:7E:F4:56:FB:C5
Certificate cache: MISS
===> Forged server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/www.ebay.com/aka-sandbox.ebay.com/cache.ebay.com/cache.vivanuncios.com.mx/careers.ebayinc.com/cdn.roma.ebay.com/cr.qa.ebaystatic.com/dsa.ebay.co.uk/dsa.ebay.com/dsa.ebay.de/ebay.com.au/ebay.us/ebaypartnernetwork.ebay.com/ecg-api.vivanuncios.com.mx/ecg-apis.vivanuncios.com.mx/feed.ebay.com.au/galleryplus.ebayimg.com/gh.ebaystatic.com/ir.ebaystatic.com/ir.sandbox.ebaystatic.com/m.ebay.at/m.ebay.ca/m.ebay.ie/m.ebay.ph/p.ebaystatic.com/pages.ebay.ca/pages.ebay.com.au/pages.ebay.in/partnernetwork.ebay.co.uk/partnernetwork.ebay.com/partnernetwork.ebay.com.au/partnernetwork.ebay.de/partnernetwork.ebay.es/partnernetwork.ebay.fr/partnernetwork.ebay.it/pics.ebaystatic.com/poc.ebay.com/protool.vivanuncios.com.mx/q.ebaystatic.com/reco.ebay.com/rest.ebay.com/rs.sandbox.ebaystatic.com/rs.xstage.ebaystatic.com/rtm.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/sslgalleryplus.ebayimg.com/static.ebayinc.com/tech.ebayinc.com/vivanuncios.com.mx/vmp.ebay.com/www.befr.ebay.be/www.benl.ebay.be/www.cafr.ebay.ca/www.ebay.at/www.ebay.be/www.ebay.ca/www.ebay.ch/www.ebay.co.uk/www.ebay.com.au/www.ebay.com.hk/www.ebay.com.my/www.ebay.com.sg/www.ebay.de/www.ebay.es/www.ebay.fr/www.ebay.ie/www.ebay.in/www.ebay.it/www.ebay.nl/www.ebay.ph/www.ebay.pl/www.ebay.us/www.ebayinc.com/www.vivanuncios.com.mx
Fingerprint: 52:11:CE:A6:D6:E8:7B:9E:7D:063D:11:C6:E9:86:10:FA:ED:BF:83
[FINEST] [6.11 fd=92 cfd=0] prototcp_bufferevent_setup: ENTER, fd=-1
[FINEST] [6.11 fd=92 cfd=0] protossl_bev_eventcb_connected_dst: ENTER
[FINEST] [6.11 fd=92 cfd=0] protossl_bufferevent_setup: ENTER, fd=92
[FINEST] [6.11 fd=92 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=92
[FINER] [6.11 fd=92 cfd=96] pxy_setup_child_listener: Finished setting up child listener, child_fd=96
[FINER] [6.11 fd=92 cfd=96] pxy_setup_child_listener: sslproxy_header= SSLproxy: [127.0.0.1]:46327,[10.42.0.230]:65488,[84.53.189.188]:443,s
[FINER] [6.11 fd=92 cfd=96] protossl_enable_src: Enabling src
SSL connected to [84.53.189.188]:443 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
CLIENT_RANDOM 22D92C1AF7BC7BDE68E6050AEBD5A289D61643711309FA255A6E89D8D119759D F7223E9D3CBB17244CDE5B288F86565B712E01FD8CCFB79B7296C20EA14EA68DBEA4BA7B498FB7A1A532F36FD05AA64F
SSL session cache: MISS
Certificate cache: KEEP (SNI match or target mode)
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_dst: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_eventcb_connected_src: ENTER
CONN: ssl 10.42.0.230 65488 84.53.189.188 443 sni:www.ebay.de names:www.ebay.com/www.ebay.com/aka-sandbox.ebay.com/cache.ebay.com/cache.vivanuncios.com.mx/careers.ebayinc.com/cdn.roma.ebay.com/cr.qa.ebaystatic.com/dsa.ebay.co.uk/dsa.ebay.com/dsa.ebay.de/ebay.com.au/ebay.us/ebaypartnernetwork.ebay.com/ecg-api.vivanuncios.com.mx/ecg-apis.vivanuncios.com.mx/feed.ebay.com.au/galleryplus.ebayimg.com/gh.ebaystatic.com/ir.ebaystatic.com/ir.sandbox.ebaystatic.com/m.ebay.at/m.ebay.ca/m.ebay.ie/m.ebay.ph/p.ebaystatic.com/pages.ebay.ca/pages.ebay.com.au/pages.ebay.in/partnernetwork.ebay.co.uk/partnernetwork.ebay.com/partnernetwork.ebay.com.au/partnernetwork.ebay.de/partnernetwork.ebay.es/partnernetwork.ebay.fr/partnernetwork.ebay.it/pics.ebaystatic.com/poc.ebay.com/protool.vivanuncios.com.mx/q.ebaystatic.com/reco.ebay.com/rest.ebay.com/rs.sandbox.ebaystatic.com/rs.xstage.ebaystatic.com/rtm.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/sslgalleryplus.ebayimg.com/static.ebayinc.com/tech.ebayinc.com/vivanuncios.com.mx/vmp.ebay.com/www.befr.ebay.be/www.benl.ebay.be/www.cafr.ebay.ca/www.ebay.at/www.ebay.be/www.ebay.ca/www.ebay.ch/www.ebay.co.uk/www.ebay.com.au/www.ebay.com.hk/www.ebay.com.my/www.ebay.com.sg/www.ebay.de/www.ebay.es/www.ebay.fr/www.ebay.ie/www.ebay.in/www.ebay.it/www.ebay.nl/www.ebay.ph/www.ebay.pl/www.ebay.us/www.ebayinc.com/www.vivanuncios.com.mx sproto:TLSv1.3:TLS_AES_128_GCM_SHA256 dproto:TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256 origcrt:DDAC89D2F5707CBFA46C4C3B420EF17EF456FBC5 usedcrt:5211CEA6D6E87B9E7D063D11C6E98610FAEDBF83 user:-
SSL connected to [84.53.189.188]:443 TLSv1.3 TLS_AES_128_GCM_SHA256
CLIENT_RANDOM E0730296A4BE76D934B1C88B0560AE0C1DA0A50DE45FC3CBE510885FD74A917B 540D6A16C5EC336A0FAF7D61F303FD1B059173D5365DA45671FBA63D7EABAB4A00000000000000000000000000000000
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_src: ENTER, size=1622
[FINER] [6.11 fd=92 cfd=96] pxy_try_prepend_sslproxy_header: ENTER
[FINEST] [6.11 fd=92 cfd=96] pxy_try_prepend_sslproxy_header: ORIG packet, size=1622:
GET /?mkevt=1&mkcid=2&mkrid=7071608169806221&keyword=conducive&crlp=1638827929401500001&MT_ID=562786&geo_id=&device=Computers&cmpgn=217719 HTTP/1.1
Host: www.ebay.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: dp1=bbl/DE6570f5b8^; nonsession=BAQAAAXw0ACieAAaAADMABWOPwjg5MzA0NwDKACBlcPW4OTFkNmY1YTgxN2QwYTRlODQyM2EyNDk4ZmZlYTVhNWEAywABYa6VwDRRxjS6J43Ut9jKI7m/RvKTUmAHyg**; s=CgAD4ACBhr96LOTFkNmY1YTgxN2QwYTRlODQyM2EyNDk4ZmZlYTVhNWENcPzD; ebay=%5Ejs%3D1%5Esbf%3D%23100000%5E; ak_bmsc=3BE1723A956054B228007D116EA84C31~000000000000000000000000000000~YAAQ3cTdWDEpdiR9AQAAMPbWkQ72mHtlsFvqA2UiGGcjDC3VDMSql/kSNsHQWhclPMlu84DATfVAujysn/c9zlUfV9By0jJB8c4pLbhXti1J3JCZdVLNVgmVDKGInB9K+ndVH2PUY58cP1+e9YlSXmmIjvIv5kKJ+iQGBUQbkBTISvRU3ad5StL4BhuXk/lvEjDicXyFjQYb+oFsii+SvoaCT8/zxsLrzWBM/2lFlBSGVzIVOylyjpYxEcdaOvOMs119QCzIz0fF7xeky2tr4C0cPn2tK6wxIVIsPqGUXOqAkENCSDRlpS6hCSS4WpYtCuTD/i6hRWKiDLELGvrAvXKyNbkxjagyTT2cYhg920hyFhlRleN9; npii=btguid/91d6f5a817d0a4e8423a2498ffea5a5a6570f5b8^cguid/91d6fa3517d0acf237f38df5ff576ee06570f5b8^; ds2=ssts/1638829867204^; bm_sv=8F25EB1F6B55A7B292AE72FD026C3278~9fPpa7Zuw9FCOn4UuLlPCqEgCx6TjslehYy5Y9aIPAdeuSJr0+JHs1f3kwbmXhwiU/mAB1vsd9kOrPr5VacbFpUzCdOFPb+eeMrm8TeCXfNL0JeI8N44n/ufIveSoCOR1NxWtYwKEO7bSnOYMic3AA==
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

[FINER] [6.11 fd=92 cfd=96] pxy_insert_sslproxy_header: ENTER
[FINEST] [6.11 fd=92 cfd=96] pxy_try_prepend_sslproxy_header: NEW packet, size=1693:
SSLproxy: [127.0.0.1]:46327,[10.42.0.230]:65488,[84.53.189.188]:443,s
GET /?mkevt=1&mkcid=2&mkrid=7071608169806221&keyword=conducive&crlp=1638827929401500001&MT_ID=562786&geo_id=&device=Computers&cmpgn=217719 HTTP/1.1
Host: www.ebay.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: dp1=bbl/DE6570f5b8^; nonsession=BAQAAAXw0ACieAAaAADMABWOPwjg5MzA0NwDKACBlcPW4OTFkNmY1YTgxN2QwYTRlODQyM2EyNDk4ZmZlYTVhNWEAywABYa6VwDRRxjS6J43Ut9jKI7m/RvKTUmAHyg**; s=CgAD4ACBhr96LOTFkNmY1YTgxN2QwYTRlODQyM2EyNDk4ZmZlYTVhNWENcPzD; ebay=%5Ejs%3D1%5Esbf%3D%23100000%5E; ak_bmsc=3BE1723A956054B228007D116EA84C31~000000000000000000000000000000~YAAQ3cTdWDEpdiR9AQAAMPbWkQ72mHtlsFvqA2UiGGcjDC3VDMSql/kSNsHQWhclPMlu84DATfVAujysn/c9zlUfV9By0jJB8c4pLbhXti1J3JCZdVLNVgmVDKGInB9K+ndVH2PUY58cP1+e9YlSXmmIjvIv5kKJ+iQGBUQbkBTISvRU3ad5StL4BhuXk/lvEjDicXyFjQYb+oFsii+SvoaCT8/zxsLrzWBM/2lFlBSGVzIVOylyjpYxEcdaOvOMs119QCzIz0fF7xeky2tr4C0cPn2tK6wxIVIsPqGUXOqAkENCSDRlpS6hCSS4WpYtCuTD/i6hRWKiDLELGvrAvXKyNbkxjagyTT2cYhg920hyFhlRleN9; npii=btguid/91d6f5a817d0a4e8423a2498ffea5a5a6570f5b8^cguid/91d6fa3517d0acf237f38df5ff576ee06570f5b8^; ds2=ssts/1638829867204^; bm_sv=8F25EB1F6B55A7B292AE72FD026C3278~9fPpa7Zuw9FCOn4UuLlPCqEgCx6TjslehYy5Y9aIPAdeuSJr0+JHs1f3kwbmXhwiU/mAB1vsd9kOrPr5VacbFpUzCdOFPb+eeMrm8TeCXfNL0JeI8N44n/ufIveSoCOR1NxWtYwKEO7bSnOYMic3AA==
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_dst: ENTER
[FINEST] [6.11 fd=92 cfd=96] pxy_listener_acceptcb_child: ENTER, fd=97, ctx->child_fd=96
[FINEST] [6.11 fd=92 cfd=96] pxy_listener_acceptcb_child: peer addr=[127.0.0.1]:53006, fd=97
[FINER] [6.11 fd=92 cfd=96] check_fd_usage: descriptor_table_size=1024, dtablecount=99, reserve=10
[FINEST] [6.11 fd=92 cfd=96] pxy_conn_ctx_new_child: ENTER, fd=97
[FINEST] [6.11 fd=92 cfd=96] pxy_conn_attach_child: Adding child conn
[FINEST] [6.11 fd=92 cfd=96] prototcp_bufferevent_setup_child: ENTER, fd=97
[FINEST] [6.11 fd=92 cfd=96] protossl_connect_child: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_eventcb_connected_dst_child: ENTER
Child connecting to [84.53.189.188]:443
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src_child: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_src_child: ENTER, size=1693
[FINER] [6.11 fd=92 cfd=96] pxy_try_remove_sslproxy_header: REMOVE
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_src_child: NEW packet, size=1622:
GET /?mkevt=1&mkcid=2&mkrid=7071608169806221&keyword=conducive&crlp=1638827929401500001&MT_ID=562786&geo_id=&device=Computers&cmpgn=217719 HTTP/1.1
Host: www.ebay.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: dp1=bbl/DE6570f5b8^; nonsession=BAQAAAXw0ACieAAaAADMABWOPwjg5MzA0NwDKACBlcPW4OTFkNmY1YTgxN2QwYTRlODQyM2EyNDk4ZmZlYTVhNWEAywABYa6VwDRRxjS6J43Ut9jKI7m/RvKTUmAHyg**; s=CgAD4ACBhr96LOTFkNmY1YTgxN2QwYTRlODQyM2EyNDk4ZmZlYTVhNWENcPzD; ebay=%5Ejs%3D1%5Esbf%3D%23100000%5E; ak_bmsc=3BE1723A956054B228007D116EA84C31~000000000000000000000000000000~YAAQ3cTdWDEpdiR9AQAAMPbWkQ72mHtlsFvqA2UiGGcjDC3VDMSql/kSNsHQWhclPMlu84DATfVAujysn/c9zlUfV9By0jJB8c4pLbhXti1J3JCZdVLNVgmVDKGInB9K+ndVH2PUY58cP1+e9YlSXmmIjvIv5kKJ+iQGBUQbkBTISvRU3ad5StL4BhuXk/lvEjDicXyFjQYb+oFsii+SvoaCT8/zxsLrzWBM/2lFlBSGVzIVOylyjpYxEcdaOvOMs119QCzIz0fF7xeky2tr4C0cPn2tK6wxIVIsPqGUXOqAkENCSDRlpS6hCSS4WpYtCuTD/i6hRWKiDLELGvrAvXKyNbkxjagyTT2cYhg920hyFhlRleN9; npii=btguid/91d6f5a817d0a4e8423a2498ffea5a5a6570f5b8^cguid/91d6fa3517d0acf237f38df5ff576ee06570f5b8^; ds2=ssts/1638829867204^; bm_sv=8F25EB1F6B55A7B292AE72FD026C3278~9fPpa7Zuw9FCOn4UuLlPCqEgCx6TjslehYy5Y9aIPAdeuSJr0+JHs1f3kwbmXhwiU/mAB1vsd9kOrPr5VacbFpUzCdOFPb+eeMrm8TeCXfNL0JeI8N44n/ufIveSoCOR1NxWtYwKEO7bSnOYMic3AA==
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_dst_child: ENTER
[FINEST] [6.7 fd=70 cfd=73] prototcp_bev_readcb_dst_child: ENTER, size=620
[FINEST] [6.7 fd=70 cfd=73] prototcp_bev_writecb_src_child: ENTER
[FINEST] [6.7 fd=70 cfd=73] prototcp_bev_readcb_dst: ENTER, size=620
[FINEST] [6.7 fd=70 cfd=73] prototcp_bev_writecb_src: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst_child: ENTER, size=2364
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst_child: ENTER, size=8808
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src_child: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src_child: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst: ENTER, size=2048
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst: ENTER, size=4096
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst: ENTER, size=4096
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst: ENTER, size=932
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst_child: ENTER, size=106
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src_child: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst: ENTER, size=106
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst_child: ENTER, size=11478
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src_child: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst: ENTER, size=4096
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst: ENTER, size=4096
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst: ENTER, size=3286
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src: ENTER
[FINEST] [3.4 fd=61 cfd=68] prototcp_bev_readcb_src: ENTER, size=1032
[FINER] [3.4 fd=61 cfd=68] pxy_try_prepend_sslproxy_header: ENTER
[FINEST] [3.4 fd=61 cfd=68] prototcp_bev_writecb_dst: ENTER
[FINEST] [7.8 fd=74 cfd=79] prototcp_bev_readcb_src: ENTER, size=1084
[FINER] [7.8 fd=74 cfd=79] pxy_try_prepend_sslproxy_header: ENTER
[FINEST] [7.8 fd=74 cfd=79] pxy_try_prepend_sslproxy_header: ORIG packet, size=1084:
POST /submit/activity-stream/sessions/1/47a99fb1-f846-4c4e-8af3-c4e69c96fa21 HTTP/1.1
Host: incoming.telemetry.mozilla.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: */*
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Encoding: gzip
Date: Mon, 06 Dec 2021 22:31:11 GMT
Content-Length: 545
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

�
[FINER] [7.8 fd=74 cfd=79] pxy_insert_sslproxy_header: ENTER
[FINEST] [7.8 fd=74 cfd=79] pxy_try_prepend_sslproxy_header: NEW packet, size=1156:
SSLproxy: [127.0.0.1]:35779,[10.42.0.230]:65481,[34.120.208.123]:443,s
POST /submit/activity-stream/sessions/1/47a99fb1-f846-4c4e-8af3-c4e69c96fa21 HTTP/1.1
Host: incoming.telemetry.mozilla.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: */*
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Encoding: gzip
Date: Mon, 06 Dec 2021 22:31:11 GMT
Content-Length: 545
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

�
[FINEST] [7.8 fd=74 cfd=79] prototcp_bev_writecb_dst: ENTER
[FINEST] [7.8 fd=74 cfd=79] pxy_listener_acceptcb_child: ENTER, fd=98, ctx->child_fd=79
[FINEST] [7.8 fd=74 cfd=79] pxy_listener_acceptcb_child: peer addr=[127.0.0.1]:37728, fd=98
[FINER] [7.8 fd=74 cfd=79] check_fd_usage: descriptor_table_size=1024, dtablecount=100, reserve=10
[FINEST] [7.8 fd=74 cfd=79] pxy_conn_ctx_new_child: ENTER, fd=98
[FINEST] [7.8 fd=74 cfd=79] pxy_conn_attach_child: Adding child conn
[FINEST] [7.8 fd=74 cfd=79] prototcp_bufferevent_setup_child: ENTER, fd=98
[FINEST] [7.8 fd=74 cfd=79] protossl_connect_child: ENTER
[FINEST] [7.8 fd=74 cfd=79] prototcp_bev_eventcb_connected_dst_child: ENTER
Child connecting to [34.120.208.123]:443
[FINEST] [7.8 fd=74 cfd=79] prototcp_bev_readcb_src_child: ENTER, size=1156
[FINER] [7.8 fd=74 cfd=79] pxy_try_remove_sslproxy_header: REMOVE
[FINEST] [7.8 fd=74 cfd=79] prototcp_bev_readcb_src_child: NEW packet, size=1084:
POST /submit/activity-stream/sessions/1/47a99fb1-f846-4c4e-8af3-c4e69c96fa21 HTTP/1.1
Host: incoming.telemetry.mozilla.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: */*
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Encoding: gzip
Date: Mon, 06 Dec 2021 22:31:11 GMT
Content-Length: 545
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

�
[FINEST] [7.8 fd=74 cfd=79] prototcp_bev_writecb_src_child: ENTER
[FINEST] [7.8 fd=74 cfd=79] prototcp_bev_writecb_dst_child: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst_child: ENTER, size=106
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src_child: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst: ENTER, size=106
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst_child: ENTER, size=11809
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src_child: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst: ENTER, size=4096
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst: ENTER, size=4096
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst: ENTER, size=3617
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst_child: ENTER, size=106
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src_child: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst_child: ENTER, size=16296
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst: ENTER, size=106
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src_child: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst: ENTER, size=4096
[FINEST] proxy_listener_acceptcb: ENTER, fd=99
[FINEST] proxy_conn_ctx_new: ENTER, fd=99
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst: ENTER, size=4096
[FINEST] [0.12 fd=99 cfd=0] proxy_conn_ctx_new: Created new conn
[FINEST] [0.12 fd=99 cfd=0] pxy_thrmgr_assign_thr: ENTER
[FINEST] [0.12 fd=99 cfd=0] protossl_init_conn: ENTER
[FINEST] [0.12 fd=99 cfd=0] pxy_conn_init: ENTER
[FINEST] [0.12 fd=99 cfd=0] pxy_thr_attach: Adding conn
[FINER] [0.12 fd=99 cfd=0] check_fd_usage: descriptor_table_size=1024, dtablecount=101, reserve=10
[FINEST] [0.12 fd=99 cfd=0] pxy_conn_init: srcaddr= [10.42.0.230]:65489
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst: ENTER, size=4096
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst: ENTER, size=4008
[FINEST] proxy_listener_acceptcb: ENTER, fd=100
[FINEST] proxy_conn_ctx_new: ENTER, fd=100
[FINEST] [0.13 fd=100 cfd=0] proxy_conn_ctx_new: Created new conn
[FINEST] [0.13 fd=100 cfd=0] pxy_thrmgr_assign_thr: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src: ENTER
[FINEST] [2.13 fd=100 cfd=0] protossl_init_conn: ENTER
[FINEST] [2.13 fd=100 cfd=0] pxy_conn_init: ENTER
[FINEST] [2.13 fd=100 cfd=0] pxy_thr_attach: Adding conn
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src: ENTER
[FINER] [2.13 fd=100 cfd=0] check_fd_usage: descriptor_table_size=1024, dtablecount=102, reserve=10
[FINEST] [2.13 fd=100 cfd=0] pxy_conn_init: srcaddr= [10.42.0.230]:65490
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst_child: ENTER, size=18
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src_child: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst: ENTER, size=18
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst_child: ENTER, size=16384
[FINEST] proxy_listener_acceptcb: ENTER, fd=101
[FINEST] proxy_conn_ctx_new: ENTER, fd=101
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst_child: ENTER, size=12
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src_child: ENTER
[FINEST] [0.14 fd=101 cfd=0] proxy_conn_ctx_new: Created new conn
[FINEST] [0.14 fd=101 cfd=0] pxy_thrmgr_assign_thr: ENTER
[FINEST] [3.14 fd=101 cfd=0] protossl_init_conn: ENTER
[FINEST] [3.14 fd=101 cfd=0] pxy_conn_init: ENTER
[FINEST] [3.14 fd=101 cfd=0] pxy_thr_attach: Adding conn
[FINER] [3.14 fd=101 cfd=0] check_fd_usage: descriptor_table_size=1024, dtablecount=103, reserve=10
[FINEST] [3.14 fd=101 cfd=0] pxy_conn_init: srcaddr= [10.42.0.230]:65491
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src_child: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst: ENTER, size=4096
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst: ENTER, size=4096
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst: ENTER, size=4096
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst: ENTER, size=4096
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst: ENTER, size=12
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst_child: ENTER, size=106
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src_child: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst: ENTER, size=106
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst_child: ENTER, size=16384
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src_child: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst: ENTER, size=4096
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst: ENTER, size=4096
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst: ENTER, size=4096
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst: ENTER, size=4096
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst_child: ENTER, size=7379
[FINEST] [0.12 fd=99 cfd=0] protossl_fd_readcb: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst_child: ENTER, size=12
SNI peek: [ir.ebaystatic.com] [complete], fd=99
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src_child: ENTER
[FINEST] [0.12 fd=99 cfd=0] pxy_conn_connect: ENTER
Connecting to [93.184.221.225]:443
[FINEST] [0.12 fd=99 cfd=0] protossl_conn_connect: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src_child: ENTER
[FINEST] [0.12 fd=99 cfd=0] protossl_bufferevent_setup: ENTER, fd=-1
[FINEST] [0.12 fd=99 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=-1
[FINEST] [2.13 fd=100 cfd=0] protossl_fd_readcb: ENTER
Socket got closed while waiting
[FINE] [2.13 fd=100 cfd=0] protossl_fd_readcb: Socket got closed while waiting
[FINEST] [2.13 fd=100 cfd=0] pxy_conn_ctx_free: ENTER
[FINEST] [2.13 fd=100 cfd=0] pxy_thr_detach: Removing conn
[FINEST] [2.13 fd=100 cfd=0] pxy_thr_detach: Cannot find conn in thr conns
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst: ENTER, size=4096
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_readcb_dst: ENTER, size=3295
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src: ENTER
[FINEST] [6.11 fd=92 cfd=96] prototcp_bev_writecb_src: ENTER
[FINEST] [3.14 fd=101 cfd=0] protossl_fd_readcb: ENTER
Socket got closed while waiting
[FINE] [3.14 fd=101 cfd=0] protossl_fd_readcb: Socket got closed while waiting
[FINEST] [3.14 fd=101 cfd=0] pxy_conn_ctx_free: ENTER
[FINEST] [3.14 fd=101 cfd=0] pxy_thr_detach: Removing conn
[FINEST] [3.14 fd=101 cfd=0] pxy_thr_detach: Cannot find conn in thr conns
[FINEST] proxy_listener_acceptcb: ENTER, fd=100
[FINEST] proxy_conn_ctx_new: ENTER, fd=100
[FINEST] [0.15 fd=100 cfd=0] proxy_conn_ctx_new: Created new conn
[FINEST] [0.15 fd=100 cfd=0] pxy_thrmgr_assign_thr: ENTER
[FINEST] proxy_listener_acceptcb: ENTER, fd=101
[FINEST] proxy_conn_ctx_new: ENTER, fd=101
[FINEST] [0.16 fd=101 cfd=0] proxy_conn_ctx_new: Created new conn
[FINEST] [2.15 fd=100 cfd=0] protossl_init_conn: ENTER
[FINEST] [2.15 fd=100 cfd=0] pxy_conn_init: ENTER
[FINEST] [2.15 fd=100 cfd=0] pxy_thr_attach: Adding conn
[FINEST] [0.16 fd=101 cfd=0] pxy_thrmgr_assign_thr: ENTER
[FINEST] [3.16 fd=101 cfd=0] protossl_init_conn: ENTER
[FINEST] [3.16 fd=101 cfd=0] pxy_conn_init: ENTER
[FINEST] [3.16 fd=101 cfd=0] pxy_thr_attach: Adding conn
[FINER] [2.15 fd=100 cfd=0] check_fd_usage: descriptor_table_size=1024, dtablecount=105, reserve=10
[FINEST] [2.15 fd=100 cfd=0] pxy_conn_init: srcaddr= [10.42.0.230]:65492
[FINER] [3.16 fd=101 cfd=0] check_fd_usage: descriptor_table_size=1024, dtablecount=105, reserve=10
[FINEST] [3.16 fd=101 cfd=0] pxy_conn_init: srcaddr= [10.42.0.230]:65493
[FINEST] proxy_listener_acceptcb: ENTER, fd=103
[FINEST] proxy_conn_ctx_new: ENTER, fd=103
[FINEST] [0.17 fd=103 cfd=0] proxy_conn_ctx_new: Created new conn
[FINEST] [0.17 fd=103 cfd=0] pxy_thrmgr_assign_thr: ENTER
[FINEST] [7.17 fd=103 cfd=0] protossl_init_conn: ENTER
[FINEST] [7.17 fd=103 cfd=0] pxy_conn_init: ENTER
[FINEST] [7.17 fd=103 cfd=0] pxy_thr_attach: Adding conn
[FINER] [7.17 fd=103 cfd=0] check_fd_usage: descriptor_table_size=1024, dtablecount=105, reserve=10
[FINEST] [7.17 fd=103 cfd=0] pxy_conn_init: srcaddr= [10.42.0.230]:65494
[FINEST] [3.16 fd=101 cfd=0] protossl_fd_readcb: ENTER
SNI peek: [ir.ebaystatic.com] [complete], fd=101
[FINEST] [3.16 fd=101 cfd=0] pxy_conn_connect: ENTER
Connecting to [93.184.221.225]:443
[FINEST] [3.16 fd=101 cfd=0] protossl_conn_connect: ENTER
[FINEST] [3.16 fd=101 cfd=0] protossl_bufferevent_setup: ENTER, fd=-1
[FINEST] [3.16 fd=101 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=-1
[FINEST] [2.15 fd=100 cfd=0] protossl_fd_readcb: ENTER
SNI peek: [ir.ebaystatic.com] [complete], fd=100
[FINEST] [2.15 fd=100 cfd=0] pxy_conn_connect: ENTER
Connecting to [93.184.221.225]:443
[FINEST] [2.15 fd=100 cfd=0] protossl_conn_connect: ENTER
[FINEST] [2.15 fd=100 cfd=0] protossl_bufferevent_setup: ENTER, fd=-1
[FINEST] [2.15 fd=100 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=-1
[FINEST] [7.17 fd=103 cfd=0] protossl_fd_readcb: ENTER
Socket got closed while waiting
[FINE] [7.17 fd=103 cfd=0] protossl_fd_readcb: Socket got closed while waiting
[FINEST] [7.17 fd=103 cfd=0] pxy_conn_ctx_free: ENTER
[FINEST] [7.17 fd=103 cfd=0] pxy_thr_detach: Removing conn
[FINEST] [7.17 fd=103 cfd=0] pxy_thr_detach: Cannot find conn in thr conns
[FINEST] [0.12 fd=99 cfd=0] protossl_bev_eventcb_connected_srvdst: ENTER
===> Original server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
Fingerprint: 8D:4B:BB:CD:E0:E4:65:CC:56:15CF:00:B0:97:A2:57:B7:79:28:92
Certificate cache: MISS
[FINEST] proxy_listener_acceptcb: ENTER, fd=103
[FINEST] proxy_conn_ctx_new: ENTER, fd=103
[FINEST] [0.18 fd=103 cfd=0] proxy_conn_ctx_new: Created new conn
[FINEST] [0.18 fd=103 cfd=0] pxy_thrmgr_assign_thr: ENTER
[FINEST] [7.18 fd=103 cfd=0] protossl_init_conn: ENTER
[FINEST] [7.18 fd=103 cfd=0] pxy_conn_init: ENTER
[FINEST] [7.18 fd=103 cfd=0] pxy_thr_attach: Adding conn
[FINER] [7.18 fd=103 cfd=0] check_fd_usage: descriptor_table_size=1024, dtablecount=107, reserve=10
[FINEST] [7.18 fd=103 cfd=0] pxy_conn_init: srcaddr= [10.42.0.230]:65495
===> Forged server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
Fingerprint: C4:15:8B:4B:34:8B:11:78:91:CB7E:E7:4B:E6:61:81:D3:CD:C1:93
[FINEST] proxy_listener_acceptcb: ENTER, fd=106
[FINEST] proxy_conn_ctx_new: ENTER, fd=106
[FINEST] [0.19 fd=106 cfd=0] proxy_conn_ctx_new: Created new conn
[FINEST] [0.19 fd=106 cfd=0] pxy_thrmgr_assign_thr: ENTER
[FINEST] [0.12 fd=99 cfd=0] prototcp_bufferevent_setup: ENTER, fd=-1
[FINEST] [0.19 fd=106 cfd=0] protossl_init_conn: ENTER
[FINEST] [0.19 fd=106 cfd=0] pxy_conn_init: ENTER
[FINEST] [0.19 fd=106 cfd=0] pxy_thr_attach: Adding conn
[FINER] [0.19 fd=106 cfd=0] check_fd_usage: descriptor_table_size=1024, dtablecount=109, reserve=10
[FINEST] [0.19 fd=106 cfd=0] pxy_conn_init: srcaddr= [10.42.0.230]:65496
[FINEST] [0.12 fd=99 cfd=0] protossl_bev_eventcb_connected_dst: ENTER
[FINEST] [0.12 fd=99 cfd=0] protossl_bufferevent_setup: ENTER, fd=99
[FINEST] [0.12 fd=99 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=99
[FINER] [0.12 fd=99 cfd=108] pxy_setup_child_listener: Finished setting up child listener, child_fd=108
[FINER] [0.12 fd=99 cfd=108] pxy_setup_child_listener: sslproxy_header= SSLproxy: [127.0.0.1]:42039,[10.42.0.230]:65489,[93.184.221.225]:443,s
[FINER] [0.12 fd=99 cfd=108] protossl_enable_src: Enabling src
SSL connected to [93.184.221.225]:443 TLSv1.3 TLS_AES_256_GCM_SHA384
CLIENT_RANDOM 8CD3D7AF7215FC2A5E02616F27852A558D3FFCE1A6B610A977AE85E086DA2DBD 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
SSL session cache: MISS
Certificate cache: KEEP (SNI match or target mode)
[FINEST] [7.8 fd=74 cfd=79] prototcp_bev_readcb_dst_child: ENTER, size=620
[FINEST] [7.18 fd=103 cfd=0] protossl_fd_readcb: ENTER
SNI peek: [ir.ebaystatic.com] [complete], fd=103
[FINEST] [7.18 fd=103 cfd=0] pxy_conn_connect: ENTER
Connecting to [93.184.221.225]:443
[FINEST] [7.18 fd=103 cfd=0] protossl_conn_connect: ENTER
Attempt reuse dst SSL session
[FINEST] [7.18 fd=103 cfd=0] protossl_bufferevent_setup: ENTER, fd=-1
[FINEST] [7.18 fd=103 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=-1
[FINEST] [7.8 fd=74 cfd=79] prototcp_bev_writecb_src_child: ENTER
[FINEST] [0.12 fd=99 cfd=108] prototcp_bev_writecb_dst: ENTER
[FINEST] [0.12 fd=99 cfd=108] prototcp_bev_eventcb_eof_src: ENTER
evbuffer size at EOF: i:0 o:0 i:0 o:0
[FINEST] [0.12 fd=99 cfd=108] prototcp_bev_eventcb_eof_src: !dst.closed, terminate conn
[FINEST] [0.12 fd=99 cfd=108] pxy_try_close_conn_end: evbuffer_get_length(outbuf) == 0, terminate conn
[FINER] [0.12 fd=99 cfd=108] prototcp_bufferevent_free_and_close_fd: in=0, out=0, fd=107
[FINER] [0.12 fd=99 cfd=108] protossl_bufferevent_free_and_close_fd: in=0, out=0, fd=99
SSL_free() in state 0000002e = 002e = TED (TLSv1.3 early data) [accept socket]
[FINER] [0.12 fd=99 cfd=108] protossl_bufferevent_free_and_close_fd: fd=99, SSL_free() in state 0000002e = 002e = TED (TLSv1.3 early data) [accept socket]
[FINEST] [0.12 fd=99 cfd=108] pxy_try_disconnect: other->closed, terminate conn
SSL disconnected to [93.184.221.225]:443, fd=99
SSL disconnected from [10.42.0.230]:65489, fd=99
[FINEST] [0.12 fd=99 cfd=108] pxy_conn_term: ENTER
[FINEST] [0.12 fd=99 cfd=108] pxy_conn_free: ENTER
[FINER] [0.12 fd=99 cfd=108] protossl_bufferevent_free_and_close_fd: in=0, out=0, fd=102
SSL_free() in state 00000001 = 0001 = SSLOK  (SSL negotiation finished successfully) [connect socket]
[FINER] [0.12 fd=99 cfd=108] protossl_bufferevent_free_and_close_fd: fd=102, SSL_free() in state 00000001 = 0001 = SSLOK  (SSL negotiation finished successfully) [connect socket]
[FINEST] [0.12 fd=99 cfd=108] pxy_conn_free_children: ENTER
[FINER] [0.12 fd=99 cfd=108] pxy_conn_free_children: Freeing child_evcl, children fd=-1
[FINEST] [0.12 fd=99 cfd=108] pxy_conn_ctx_free: ENTER
[FINEST] [0.12 fd=99 cfd=108] pxy_thr_detach: Removing conn
[FINEST] [0.12 fd=99 cfd=108] pxy_thr_detach: Cannot find conn in thr conns
[FINEST] [7.8 fd=74 cfd=79] prototcp_bev_readcb_dst: ENTER, size=620
[FINEST] [7.8 fd=74 cfd=79] prototcp_bev_writecb_src: ENTER
[FINEST] proxy_listener_acceptcb: ENTER, fd=99
[FINEST] proxy_conn_ctx_new: ENTER, fd=99
[FINEST] [0.20 fd=99 cfd=0] proxy_conn_ctx_new: Created new conn
[FINEST] [0.20 fd=99 cfd=0] pxy_thrmgr_assign_thr: ENTER
[FINEST] [0.20 fd=99 cfd=0] protossl_init_conn: ENTER
[FINEST] [0.20 fd=99 cfd=0] pxy_conn_init: ENTER
[FINEST] [0.20 fd=99 cfd=0] pxy_thr_attach: Adding conn
[FINER] [0.20 fd=99 cfd=0] check_fd_usage: descriptor_table_size=1024, dtablecount=108, reserve=10
[FINEST] [0.20 fd=99 cfd=0] pxy_conn_init: srcaddr= [10.42.0.230]:65497
[FINEST] proxy_listener_acceptcb: ENTER, fd=102
[FINEST] proxy_conn_ctx_new: ENTER, fd=102
[FINEST] [0.21 fd=102 cfd=0] proxy_conn_ctx_new: Created new conn
[FINEST] [0.21 fd=102 cfd=0] pxy_thrmgr_assign_thr: ENTER
[FINEST] [2.21 fd=102 cfd=0] protossl_init_conn: ENTER
[FINEST] [2.21 fd=102 cfd=0] pxy_conn_init: ENTER
[FINEST] [2.21 fd=102 cfd=0] pxy_thr_attach: Adding conn
[FINER] [2.21 fd=102 cfd=0] check_fd_usage: descriptor_table_size=1024, dtablecount=109, reserve=10
[FINEST] [2.21 fd=102 cfd=0] pxy_conn_init: srcaddr= [10.42.0.230]:65498
[FINEST] [3.16 fd=101 cfd=0] protossl_bev_eventcb_connected_srvdst: ENTER
===> Original server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
Fingerprint: 8D:4B:BB:CD:E0:E4:65:CC:56:15CF:00:B0:97:A2:57:B7:79:28:92
Certificate cache: HIT
===> Forged server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
Fingerprint: C4:15:8B:4B:34:8B:11:78:91:CB7E:E7:4B:E6:61:81:D3:CD:C1:93
[FINEST] [3.16 fd=101 cfd=0] prototcp_bufferevent_setup: ENTER, fd=-1
[FINEST] [3.16 fd=101 cfd=0] protossl_bev_eventcb_connected_dst: ENTER
[FINEST] [3.16 fd=101 cfd=0] protossl_bufferevent_setup: ENTER, fd=101
[FINEST] [3.16 fd=101 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=101
[FINER] [3.16 fd=101 cfd=108] pxy_setup_child_listener: Finished setting up child listener, child_fd=108
[FINER] [3.16 fd=101 cfd=108] pxy_setup_child_listener: sslproxy_header= SSLproxy: [127.0.0.1]:41083,[10.42.0.230]:65493,[93.184.221.225]:443,s
[FINER] [3.16 fd=101 cfd=108] protossl_enable_src: Enabling src
SSL connected to [93.184.221.225]:443 TLSv1.3 TLS_AES_256_GCM_SHA384
CLIENT_RANDOM D9E6B9F12924814C9D8F2B19AD98AD3371581E8312E47DEED2C10547D5AE3E24 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
SSL session cache: MISS
Certificate cache: KEEP (SNI match or target mode)
[FINEST] [3.16 fd=101 cfd=108] prototcp_bev_writecb_dst: ENTER
[FINEST] [3.16 fd=101 cfd=108] prototcp_bev_eventcb_eof_src: ENTER
evbuffer size at EOF: i:0 o:0 i:0 o:0
[FINEST] [3.16 fd=101 cfd=108] prototcp_bev_eventcb_eof_src: !dst.closed, terminate conn
[FINEST] [3.16 fd=101 cfd=108] pxy_try_close_conn_end: evbuffer_get_length(outbuf) == 0, terminate conn
[FINER] [3.16 fd=101 cfd=108] prototcp_bufferevent_free_and_close_fd: in=0, out=0, fd=107
[FINER] [3.16 fd=101 cfd=108] protossl_bufferevent_free_and_close_fd: in=0, out=0, fd=101
SSL_free() in state 0000002e = 002e = TED (TLSv1.3 early data) [accept socket]
[FINER] [3.16 fd=101 cfd=108] protossl_bufferevent_free_and_close_fd: fd=101, SSL_free() in state 0000002e = 002e = TED (TLSv1.3 early data) [accept socket]
[FINEST] [3.16 fd=101 cfd=108] pxy_try_disconnect: other->closed, terminate conn
SSL disconnected to [93.184.221.225]:443, fd=101
SSL disconnected from [10.42.0.230]:65493, fd=101
[FINEST] [3.16 fd=101 cfd=108] pxy_conn_term: ENTER
[FINEST] [3.16 fd=101 cfd=108] pxy_conn_free: ENTER
[FINER] [3.16 fd=101 cfd=108] protossl_bufferevent_free_and_close_fd: in=0, out=0, fd=104
SSL_free() in state 00000001 = 0001 = SSLOK  (SSL negotiation finished successfully) [connect socket]
[FINER] [3.16 fd=101 cfd=108] protossl_bufferevent_free_and_close_fd: fd=104, SSL_free() in state 00000001 = 0001 = SSLOK  (SSL negotiation finished successfully) [connect socket]
[FINEST] [3.16 fd=101 cfd=108] pxy_conn_free_children: ENTER
[FINER] [3.16 fd=101 cfd=108] pxy_conn_free_children: Freeing child_evcl, children fd=-1
[FINEST] [3.16 fd=101 cfd=108] pxy_conn_ctx_free: ENTER
[FINEST] [3.16 fd=101 cfd=108] pxy_thr_detach: Removing conn
[FINEST] [3.16 fd=101 cfd=108] pxy_thr_detach: Cannot find conn in thr conns
[FINEST] [0.19 fd=106 cfd=0] protossl_fd_readcb: ENTER
SNI peek: [www.ebay.com] [complete], fd=106
[FINEST] [0.19 fd=106 cfd=0] pxy_conn_connect: ENTER
Connecting to [84.53.189.76]:443
[FINEST] [0.19 fd=106 cfd=0] protossl_conn_connect: ENTER
[FINEST] [0.19 fd=106 cfd=0] protossl_bufferevent_setup: ENTER, fd=-1
[FINEST] [0.19 fd=106 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=-1
[FINEST] [0.20 fd=99 cfd=0] protossl_fd_readcb: ENTER
SNI peek: [ir.ebaystatic.com] [complete], fd=99
[FINEST] [0.20 fd=99 cfd=0] pxy_conn_connect: ENTER
Connecting to [93.184.221.225]:443
[FINEST] [0.20 fd=99 cfd=0] protossl_conn_connect: ENTER
Attempt reuse dst SSL session
[FINEST] [0.20 fd=99 cfd=0] protossl_bufferevent_setup: ENTER, fd=-1
[FINEST] [0.20 fd=99 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=-1
[FINEST] [2.15 fd=100 cfd=0] protossl_bev_eventcb_connected_srvdst: ENTER
===> Original server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
Fingerprint: 8D:4B:BB:CD:E0:E4:65:CC:56:15CF:00:B0:97:A2:57:B7:79:28:92
Certificate cache: HIT
===> Forged server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
Fingerprint: C4:15:8B:4B:34:8B:11:78:91:CB7E:E7:4B:E6:61:81:D3:CD:C1:93
[FINEST] [2.15 fd=100 cfd=0] prototcp_bufferevent_setup: ENTER, fd=-1
[FINEST] [2.15 fd=100 cfd=0] protossl_bev_eventcb_connected_dst: ENTER
[FINEST] [2.15 fd=100 cfd=0] protossl_bufferevent_setup: ENTER, fd=100
[FINEST] [2.15 fd=100 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=100
[FINER] [2.15 fd=100 cfd=108] pxy_setup_child_listener: Finished setting up child listener, child_fd=108
[FINER] [2.15 fd=100 cfd=108] pxy_setup_child_listener: sslproxy_header= SSLproxy: [127.0.0.1]:33759,[10.42.0.230]:65492,[93.184.221.225]:443,s
[FINER] [2.15 fd=100 cfd=108] protossl_enable_src: Enabling src
SSL connected to [93.184.221.225]:443 TLSv1.3 TLS_AES_256_GCM_SHA384
CLIENT_RANDOM B6D4DCDC626C8D36C4D657F8B4E41E13F6832801C11EB7774F242F98E4646452 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
SSL session cache: MISS
Certificate cache: KEEP (SNI match or target mode)
[FINEST] [2.15 fd=100 cfd=108] prototcp_bev_writecb_dst: ENTER
[FINEST] [2.15 fd=100 cfd=108] prototcp_bev_eventcb_eof_src: ENTER
evbuffer size at EOF: i:0 o:0 i:0 o:0
[FINEST] [2.15 fd=100 cfd=108] prototcp_bev_eventcb_eof_src: !dst.closed, terminate conn
[FINEST] [2.15 fd=100 cfd=108] pxy_try_close_conn_end: evbuffer_get_length(outbuf) == 0, terminate conn
[FINER] [2.15 fd=100 cfd=108] prototcp_bufferevent_free_and_close_fd: in=0, out=0, fd=107
[FINER] [2.15 fd=100 cfd=108] protossl_bufferevent_free_and_close_fd: in=0, out=0, fd=100
SSL_free() in state 0000002e = 002e = TED (TLSv1.3 early data) [accept socket]
[FINER] [2.15 fd=100 cfd=108] protossl_bufferevent_free_and_close_fd: fd=100, SSL_free() in state 0000002e = 002e = TED (TLSv1.3 early data) [accept socket]
[FINEST] [2.15 fd=100 cfd=108] pxy_try_disconnect: other->closed, terminate conn
SSL disconnected to [93.184.221.225]:443, fd=100
SSL disconnected from [10.42.0.230]:65492, fd=100
[FINEST] [2.15 fd=100 cfd=108] pxy_conn_term: ENTER
[FINEST] [2.15 fd=100 cfd=108] pxy_conn_free: ENTER
[FINER] [2.15 fd=100 cfd=108] protossl_bufferevent_free_and_close_fd: in=0, out=0, fd=105
SSL_free() in state 00000001 = 0001 = SSLOK  (SSL negotiation finished successfully) [connect socket]
[FINER] [2.15 fd=100 cfd=108] protossl_bufferevent_free_and_close_fd: fd=105, SSL_free() in state 00000001 = 0001 = SSLOK  (SSL negotiation finished successfully) [connect socket]
[FINEST] [2.15 fd=100 cfd=108] pxy_conn_free_children: ENTER
[FINER] [2.15 fd=100 cfd=108] pxy_conn_free_children: Freeing child_evcl, children fd=-1
[FINEST] [2.15 fd=100 cfd=108] pxy_conn_ctx_free: ENTER
[FINEST] [2.15 fd=100 cfd=108] pxy_thr_detach: Removing conn
[FINEST] [2.15 fd=100 cfd=108] pxy_thr_detach: Cannot find conn in thr conns
[FINEST] [2.21 fd=102 cfd=0] protossl_fd_readcb: ENTER
SNI peek: [ir.ebaystatic.com] [complete], fd=102
[FINEST] [2.21 fd=102 cfd=0] pxy_conn_connect: ENTER
Connecting to [93.184.221.225]:443
[FINEST] [2.21 fd=102 cfd=0] protossl_conn_connect: ENTER
Attempt reuse dst SSL session
[FINEST] [2.21 fd=102 cfd=0] protossl_bufferevent_setup: ENTER, fd=-1
[FINEST] [2.21 fd=102 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=-1
[FINEST] proxy_listener_acceptcb: ENTER, fd=105
[FINEST] proxy_conn_ctx_new: ENTER, fd=105
[FINEST] [0.22 fd=105 cfd=0] proxy_conn_ctx_new: Created new conn
[FINEST] [0.22 fd=105 cfd=0] pxy_thrmgr_assign_thr: ENTER
[FINEST] proxy_listener_acceptcb: ENTER, fd=107
[FINEST] proxy_conn_ctx_new: ENTER, fd=107
[FINEST] [3.22 fd=105 cfd=0] protossl_init_conn: ENTER
[FINEST] [0.23 fd=107 cfd=0] proxy_conn_ctx_new: Created new conn
[FINEST] [3.22 fd=105 cfd=0] pxy_conn_init: ENTER
[FINEST] [3.22 fd=105 cfd=0] pxy_thr_attach: Adding conn
[FINEST] [0.23 fd=107 cfd=0] pxy_thrmgr_assign_thr: ENTER
[FINEST] proxy_listener_acceptcb: ENTER, fd=110
[FINEST] proxy_conn_ctx_new: ENTER, fd=110
[FINEST] [0.24 fd=110 cfd=0] proxy_conn_ctx_new: Created new conn
[FINEST] [0.24 fd=110 cfd=0] pxy_thrmgr_assign_thr: ENTER
[FINEST] [2.23 fd=107 cfd=0] protossl_init_conn: ENTER
[FINEST] [2.23 fd=107 cfd=0] pxy_conn_init: ENTER
[FINEST] [2.23 fd=107 cfd=0] pxy_thr_attach: Adding conn
[FINER] [3.22 fd=105 cfd=0] check_fd_usage: descriptor_table_size=1024, dtablecount=112, reserve=10
[FINER] [2.23 fd=107 cfd=0] check_fd_usage: descriptor_table_size=1024, dtablecount=112, reserve=10
[FINEST] [3.22 fd=105 cfd=0] pxy_conn_init: srcaddr= [10.42.0.230]:65499
[FINEST] [2.23 fd=107 cfd=0] pxy_conn_init: srcaddr= [10.42.0.230]:65500
[FINEST] [2.24 fd=110 cfd=0] protossl_init_conn: ENTER
[FINEST] [2.24 fd=110 cfd=0] pxy_conn_init: ENTER
[FINEST] [2.24 fd=110 cfd=0] pxy_thr_attach: Adding conn
[FINER] [2.24 fd=110 cfd=0] check_fd_usage: descriptor_table_size=1024, dtablecount=111, reserve=10
[FINEST] [2.24 fd=110 cfd=0] pxy_conn_init: srcaddr= [10.42.0.230]:65501
[FINEST] proxy_listener_acceptcb: ENTER, fd=108
[FINEST] proxy_conn_ctx_new: ENTER, fd=108
[FINEST] [0.25 fd=108 cfd=0] proxy_conn_ctx_new: Created new conn
[FINEST] [0.25 fd=108 cfd=0] pxy_thrmgr_assign_thr: ENTER
[FINEST] [3.25 fd=108 cfd=0] protossl_init_conn: ENTER
[FINEST] [3.25 fd=108 cfd=0] pxy_conn_init: ENTER
[FINEST] [3.25 fd=108 cfd=0] pxy_thr_attach: Adding conn
[FINER] [3.25 fd=108 cfd=0] check_fd_usage: descriptor_table_size=1024, dtablecount=112, reserve=10
[FINEST] [3.25 fd=108 cfd=0] pxy_conn_init: srcaddr= [10.42.0.230]:65502
[FINEST] [7.18 fd=103 cfd=0] protossl_bev_eventcb_connected_srvdst: ENTER
===> Original server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
Fingerprint: 8D:4B:BB:CD:E0:E4:65:CC:56:15CF:00:B0:97:A2:57:B7:79:28:92
Certificate cache: HIT
===> Forged server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
Fingerprint: C4:15:8B:4B:34:8B:11:78:91:CB7E:E7:4B:E6:61:81:D3:CD:C1:93
[FINEST] [7.18 fd=103 cfd=0] prototcp_bufferevent_setup: ENTER, fd=-1
[FINEST] [7.18 fd=103 cfd=0] protossl_bev_eventcb_connected_dst: ENTER
[FINEST] [7.18 fd=103 cfd=0] protossl_bufferevent_setup: ENTER, fd=103
[FINEST] [7.18 fd=103 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=103
[FINER] [7.18 fd=103 cfd=112] pxy_setup_child_listener: Finished setting up child listener, child_fd=112
[FINER] [7.18 fd=103 cfd=112] pxy_setup_child_listener: sslproxy_header= SSLproxy: [127.0.0.1]:44705,[10.42.0.230]:65495,[93.184.221.225]:443,s
[FINER] [7.18 fd=103 cfd=112] protossl_enable_src: Enabling src
SSL connected to [93.184.221.225]:443 TLSv1.3 TLS_AES_256_GCM_SHA384
CLIENT_RANDOM 47CC118A46F4B87C23228B76AE4E21E89A6042639235FAB1DC69169D8E3ADE7C 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
SSL session cache: MISS
[FINEST] [2.24 fd=110 cfd=0] protossl_fd_readcb: ENTER
SNI peek: [ir.ebaystatic.com] [complete], fd=110
[FINEST] [2.24 fd=110 cfd=0] pxy_conn_connect: ENTER
Connecting to [93.184.221.225]:443
[FINEST] [2.24 fd=110 cfd=0] protossl_conn_connect: ENTER
Certificate cache: KEEP (SNI match or target mode)
Attempt reuse dst SSL session
[FINEST] [2.24 fd=110 cfd=0] protossl_bufferevent_setup: ENTER, fd=-1
[FINEST] [2.24 fd=110 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=-1
[FINEST] [7.18 fd=103 cfd=112] prototcp_bev_writecb_dst: ENTER
[FINEST] [2.23 fd=107 cfd=0] protossl_fd_readcb: ENTER
SNI peek: [ir.ebaystatic.com] [complete], fd=107
[FINEST] [2.23 fd=107 cfd=0] pxy_conn_connect: ENTER
Connecting to [93.184.221.225]:443
[FINEST] [2.23 fd=107 cfd=0] protossl_conn_connect: ENTER
Attempt reuse dst SSL session
[FINEST] [2.23 fd=107 cfd=0] protossl_bufferevent_setup: ENTER, fd=-1
[FINEST] [2.23 fd=107 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=-1
[FINEST] [3.22 fd=105 cfd=0] protossl_fd_readcb: ENTER
SNI peek: [ir.ebaystatic.com] [complete], fd=105
[FINEST] [3.22 fd=105 cfd=0] pxy_conn_connect: ENTER
Connecting to [93.184.221.225]:443
[FINEST] [3.22 fd=105 cfd=0] protossl_conn_connect: ENTER
Attempt reuse dst SSL session
[FINEST] [3.22 fd=105 cfd=0] protossl_bufferevent_setup: ENTER, fd=-1
[FINEST] [3.22 fd=105 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=-1
[FINEST] [0.19 fd=106 cfd=0] protossl_bev_eventcb_connected_srvdst: ENTER
===> Original server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/www.ebay.com/ucpstatic.ebay.com/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/sofe.ebay.at/shippingtool.ebay.cn/securepics.ebaystatic.com/secureir.sandbox.ebaystatic.com/secureir.ebaystatic.com/secureinclude.ebaystatic.com/rover.ebay.it/rover.ebay.in/rover.ebay.fr/rover.ebay.de/rover.ebay.com.au/rover.ebay.com/rover.ebay.co.uk/m.ebay.it/m.ebay.fr/m.ebay.de/m.ebay.com.au/identity-api.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/anywhere.ebay.in/anywhere.ebay.ie/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/akamai.ebaycdn.net/akamai-static.ebaycdn.net/include.ebaystatic.com
Fingerprint: A0:7C:07:E0:45:B7:94:45:A2:1E14:45:41:0D:2A:6A:48:05:80:A5
Certificate cache: MISS
[FINEST] [3.25 fd=108 cfd=0] protossl_fd_readcb: ENTER
SNI peek: [ir.ebaystatic.com] [complete], fd=108
[FINEST] [3.25 fd=108 cfd=0] pxy_conn_connect: ENTER
Connecting to [93.184.221.225]:443
[FINEST] [3.25 fd=108 cfd=0] protossl_conn_connect: ENTER
Attempt reuse dst SSL session
[FINEST] [3.25 fd=108 cfd=0] protossl_bufferevent_setup: ENTER, fd=-1
[FINEST] [3.25 fd=108 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=-1
[FINEST] [7.18 fd=103 cfd=112] prototcp_bev_eventcb_connected_src: ENTER
CONN: ssl 10.42.0.230 65495 93.184.221.225 443 sni:ir.ebaystatic.com names:www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com sproto:TLSv1.3:TLS_AES_128_GCM_SHA256 dproto:TLSv1.3:TLS_AES_256_GCM_SHA384 origcrt:8D4BBBCDE0E465CC5615CF00B097A257B7792892 usedcrt:C4158B4B348B117891CB7EE74BE66181D3CDC193 user:-
SSL connected to [93.184.221.225]:443 TLSv1.3 TLS_AES_128_GCM_SHA256
CLIENT_RANDOM BBCBE687815A000BC5A48952B8E4EA0B0FAA20B382896D67706056676BA75E3B CC96C0A09A4F45DB69D3EC3AF5CF7D28209F880CF33224AED5A1564943E34A1400000000000000000000000000000000
[FINEST] [7.18 fd=103 cfd=112] prototcp_bev_readcb_src: ENTER, size=353
[FINER] [7.18 fd=103 cfd=112] pxy_try_prepend_sslproxy_header: ENTER
[FINEST] [7.18 fd=103 cfd=112] pxy_try_prepend_sslproxy_header: ORIG packet, size=353:
GET /cr/v/c1/highlnfe-perf-2.js HTTP/1.1
Host: ir.ebaystatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: */*
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

[FINER] [7.18 fd=103 cfd=112] pxy_insert_sslproxy_header: ENTER
[FINEST] [7.18 fd=103 cfd=112] pxy_try_prepend_sslproxy_header: NEW packet, size=425:
SSLproxy: [127.0.0.1]:44705,[10.42.0.230]:65495,[93.184.221.225]:443,s
GET /cr/v/c1/highlnfe-perf-2.js HTTP/1.1
Host: ir.ebaystatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: */*
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

[FINEST] [7.18 fd=103 cfd=112] prototcp_bev_writecb_dst: ENTER
[FINEST] proxy_listener_acceptcb: ENTER, fd=117
[FINEST] proxy_conn_ctx_new: ENTER, fd=117
[FINEST] [0.26 fd=117 cfd=0] proxy_conn_ctx_new: Created new conn
[FINEST] [0.26 fd=117 cfd=0] pxy_thrmgr_assign_thr: ENTER
[FINEST] proxy_listener_acceptcb: ENTER, fd=118
[FINEST] proxy_conn_ctx_new: ENTER, fd=118
[FINEST] [0.27 fd=118 cfd=0] proxy_conn_ctx_new: Created new conn
[FINEST] [0.27 fd=118 cfd=0] pxy_thrmgr_assign_thr: ENTER
[FINEST] [4.26 fd=117 cfd=0] protossl_init_conn: ENTER
[FINEST] [4.26 fd=117 cfd=0] pxy_conn_init: ENTER
[FINEST] [4.26 fd=117 cfd=0] pxy_thr_attach: Adding conn
[FINER] [4.26 fd=117 cfd=0] check_fd_usage: descriptor_table_size=1024, dtablecount=120, reserve=10
[FINEST] [4.26 fd=117 cfd=0] pxy_conn_init: srcaddr= [10.42.0.230]:65504
[FINEST] [4.27 fd=118 cfd=0] protossl_init_conn: ENTER
[FINEST] [4.27 fd=118 cfd=0] pxy_conn_init: ENTER
[FINEST] [4.27 fd=118 cfd=0] pxy_thr_attach: Adding conn
[FINER] [4.27 fd=118 cfd=0] check_fd_usage: descriptor_table_size=1024, dtablecount=120, reserve=10
[FINEST] [4.27 fd=118 cfd=0] pxy_conn_init: srcaddr= [10.42.0.230]:65505
[FINEST] [7.18 fd=103 cfd=112] pxy_listener_acceptcb_child: ENTER, fd=119, ctx->child_fd=112
[FINEST] [7.18 fd=103 cfd=112] pxy_listener_acceptcb_child: peer addr=[127.0.0.1]:52264, fd=119
[FINER] [7.18 fd=103 cfd=112] check_fd_usage: descriptor_table_size=1024, dtablecount=121, reserve=10
[FINEST] [7.18 fd=103 cfd=112] pxy_conn_ctx_new_child: ENTER, fd=119
[FINEST] [7.18 fd=103 cfd=112] pxy_conn_attach_child: Adding child conn
[FINEST] [7.18 fd=103 cfd=112] prototcp_bufferevent_setup_child: ENTER, fd=119
[FINEST] [7.18 fd=103 cfd=112] protossl_connect_child: ENTER
[FINEST] [7.18 fd=103 cfd=112] prototcp_bev_eventcb_connected_dst_child: ENTER
Child connecting to [93.184.221.225]:443
[FINEST] [7.18 fd=103 cfd=112] prototcp_bev_readcb_src_child: ENTER, size=425
[FINER] [7.18 fd=103 cfd=112] pxy_try_remove_sslproxy_header: REMOVE
[FINEST] [7.18 fd=103 cfd=112] prototcp_bev_readcb_src_child: NEW packet, size=353:
GET /cr/v/c1/highlnfe-perf-2.js HTTP/1.1
Host: ir.ebaystatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: */*
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

[FINEST] [7.18 fd=103 cfd=112] prototcp_bev_writecb_src_child: ENTER
[FINEST] [7.18 fd=103 cfd=112] prototcp_bev_writecb_dst_child: ENTER
[FINEST] [4.26 fd=117 cfd=0] protossl_fd_readcb: ENTER
SNI peek: [ir.ebaystatic.com] [complete], fd=117
[FINEST] [4.26 fd=117 cfd=0] pxy_conn_connect: ENTER
Connecting to [93.184.221.225]:443
[FINEST] [4.26 fd=117 cfd=0] protossl_conn_connect: ENTER
Attempt reuse dst SSL session
[FINEST] [4.26 fd=117 cfd=0] protossl_bufferevent_setup: ENTER, fd=-1
[FINEST] [4.26 fd=117 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=-1
[FINEST] [4.27 fd=118 cfd=0] protossl_fd_readcb: ENTER
SNI peek: [ir.ebaystatic.com] [complete], fd=118
[FINEST] [4.27 fd=118 cfd=0] pxy_conn_connect: ENTER
Connecting to [93.184.221.225]:443
[FINEST] [4.27 fd=118 cfd=0] protossl_conn_connect: ENTER
Attempt reuse dst SSL session
[FINEST] [4.27 fd=118 cfd=0] protossl_bufferevent_setup: ENTER, fd=-1
[FINEST] [4.27 fd=118 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=-1
===> Forged server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/www.ebay.com/ucpstatic.ebay.com/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/sofe.ebay.at/shippingtool.ebay.cn/securepics.ebaystatic.com/secureir.sandbox.ebaystatic.com/secureir.ebaystatic.com/secureinclude.ebaystatic.com/rover.ebay.it/rover.ebay.in/rover.ebay.fr/rover.ebay.de/rover.ebay.com.au/rover.ebay.com/rover.ebay.co.uk/m.ebay.it/m.ebay.fr/m.ebay.de/m.ebay.com.au/identity-api.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/anywhere.ebay.in/anywhere.ebay.ie/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/akamai.ebaycdn.net/akamai-static.ebaycdn.net/include.ebaystatic.com
Fingerprint: 29:EB:3F:A4:BE:F3:C9:28:C2:1799:C5:1D:A2:C8:E2:FF:1C:22:1F
[FINEST] [0.19 fd=106 cfd=0] prototcp_bufferevent_setup: ENTER, fd=-1
[FINEST] [0.19 fd=106 cfd=0] protossl_bev_eventcb_connected_dst: ENTER
[FINEST] [0.19 fd=106 cfd=0] protossl_bufferevent_setup: ENTER, fd=106
[FINEST] [0.19 fd=106 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=106
[FINER] [0.19 fd=106 cfd=123] pxy_setup_child_listener: Finished setting up child listener, child_fd=123
[FINER] [0.19 fd=106 cfd=123] pxy_setup_child_listener: sslproxy_header= SSLproxy: [127.0.0.1]:39279,[10.42.0.230]:65496,[84.53.189.76]:443,s
[FINER] [0.19 fd=106 cfd=123] protossl_enable_src: Enabling src
SSL connected to [84.53.189.76]:443 TLSv1.3 TLS_AES_256_GCM_SHA384
CLIENT_RANDOM B2C231DACEC1C614936EABFB50FBF1D5ECD4403F3514E91906BD6EF343775DE8 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
SSL session cache: MISS
Certificate cache: KEEP (SNI match or target mode)
[FINEST] [0.19 fd=106 cfd=123] prototcp_bev_writecb_dst: ENTER
[FINEST] [7.18 fd=103 cfd=112] prototcp_bev_readcb_dst_child: ENTER, size=735
[FINEST] [7.18 fd=103 cfd=112] prototcp_bev_writecb_src_child: ENTER
[FINEST] [7.18 fd=103 cfd=112] prototcp_bev_readcb_dst_child: ENTER, size=10668
[FINEST] [7.18 fd=103 cfd=112] prototcp_bev_readcb_dst: ENTER, size=735
[FINEST] [7.18 fd=103 cfd=112] prototcp_bev_writecb_src_child: ENTER
[FINEST] [7.18 fd=103 cfd=112] prototcp_bev_writecb_src: ENTER
[FINEST] [7.18 fd=103 cfd=112] prototcp_bev_readcb_dst: ENTER, size=2048
[FINEST] [7.18 fd=103 cfd=112] prototcp_bev_writecb_src: ENTER
[FINEST] [7.18 fd=103 cfd=112] prototcp_bev_readcb_dst: ENTER, size=4096
[FINEST] [2.21 fd=102 cfd=0] protossl_bev_eventcb_connected_srvdst: ENTER
[FINEST] [7.18 fd=103 cfd=112] prototcp_bev_readcb_dst: ENTER, size=4096
[FINEST] [7.18 fd=103 cfd=112] prototcp_bev_writecb_src: ENTER
===> Original server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
[FINEST] [7.18 fd=103 cfd=112] prototcp_bev_readcb_dst: ENTER, size=428
[FINEST] [7.18 fd=103 cfd=112] prototcp_bev_writecb_src: ENTER
[FINEST] [7.18 fd=103 cfd=112] prototcp_bev_writecb_src: ENTER
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
Fingerprint: 8D:4B:BB:CD:E0:E4:65:CC:56:15CF:00:B0:97:A2:57:B7:79:28:92
Certificate cache: HIT
===> Forged server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
Fingerprint: C4:15:8B:4B:34:8B:11:78:91:CB7E:E7:4B:E6:61:81:D3:CD:C1:93
[FINEST] [2.21 fd=102 cfd=0] prototcp_bufferevent_setup: ENTER, fd=-1
[FINEST] [2.21 fd=102 cfd=0] protossl_bev_eventcb_connected_dst: ENTER
[FINEST] [2.21 fd=102 cfd=0] protossl_bufferevent_setup: ENTER, fd=102
[FINEST] [2.21 fd=102 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=102
[FINER] [2.21 fd=102 cfd=125] pxy_setup_child_listener: Finished setting up child listener, child_fd=125
[FINER] [2.21 fd=102 cfd=125] pxy_setup_child_listener: sslproxy_header= SSLproxy: [127.0.0.1]:39157,[10.42.0.230]:65498,[93.184.221.225]:443,s
[FINER] [2.21 fd=102 cfd=125] protossl_enable_src: Enabling src
SSL connected to [93.184.221.225]:443 TLSv1.3 TLS_AES_256_GCM_SHA384
CLIENT_RANDOM 3499D125C3B92887CB9CBE3B131E19065D4A14ABD98966C35C046BE21D5C56A7 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
SSL session cache: MISS
Certificate cache: KEEP (SNI match or target mode)
[FINEST] [3.22 fd=105 cfd=0] protossl_bev_eventcb_connected_srvdst: ENTER
===> Original server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
Fingerprint: 8D:4B:BB:CD:E0:E4:65:CC:56:15CF:00:B0:97:A2:57:B7:79:28:92
Certificate cache: HIT
===> Forged server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
Fingerprint: C4:15:8B:4B:34:8B:11:78:91:CB7E:E7:4B:E6:61:81:D3:CD:C1:93
[FINEST] [3.22 fd=105 cfd=0] prototcp_bufferevent_setup: ENTER, fd=-1
[FINEST] [3.22 fd=105 cfd=0] protossl_bev_eventcb_connected_dst: ENTER
[FINEST] [3.22 fd=105 cfd=0] protossl_bufferevent_setup: ENTER, fd=105
[FINEST] [3.22 fd=105 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=105
[FINER] [3.22 fd=105 cfd=127] pxy_setup_child_listener: Finished setting up child listener, child_fd=127
[FINER] [3.22 fd=105 cfd=127] pxy_setup_child_listener: sslproxy_header= SSLproxy: [127.0.0.1]:41059,[10.42.0.230]:65499,[93.184.221.225]:443,s
[FINER] [3.22 fd=105 cfd=127] protossl_enable_src: Enabling src
SSL connected to [93.184.221.225]:443 TLSv1.3 TLS_AES_256_GCM_SHA384
CLIENT_RANDOM 8774E781C7952F038A40CAF56D2CA201A9691D6743646108B5E2F58B39C67D3B 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
SSL session cache: MISS
Certificate cache: KEEP (SNI match or target mode)
[FINEST] [2.21 fd=102 cfd=125] prototcp_bev_writecb_dst: ENTER
[FINEST] [3.22 fd=105 cfd=127] prototcp_bev_writecb_dst: ENTER
[FINEST] [3.22 fd=105 cfd=127] prototcp_bev_eventcb_connected_src: ENTER
CONN: ssl 10.42.0.230 65499 93.184.221.225 443 sni:ir.ebaystatic.com names:www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com sproto:TLSv1.3:TLS_AES_128_GCM_SHA256 dproto:TLSv1.3:TLS_AES_256_GCM_SHA384 origcrt:8D4BBBCDE0E465CC5615CF00B097A257B7792892 usedcrt:C4158B4B348B117891CB7EE74BE66181D3CDC193 user:-
SSL connected to [93.184.221.225]:443 TLSv1.3 TLS_AES_128_GCM_SHA256
CLIENT_RANDOM E83B0D907E8DCC6D1E0B0F257FE6A45906BD433B0D1E384462A3FB6C630B9B8A BD6625441EA6EC6DCF7FFC038995EA4B87CA9EDA64C7A506991EF427346E5BAC00000000000000000000000000000000
[FINEST] [4.26 fd=117 cfd=0] protossl_bev_eventcb_connected_srvdst: ENTER
===> Original server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
[FINEST] [2.24 fd=110 cfd=0] protossl_bev_eventcb_connected_srvdst: ENTER
===> Original server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
Fingerprint: 8D:4B:BB:CD:E0:E4:65:CC:56:15CF:00:B0:97:A2:57:B7:79:28:92
Certificate cache: HIT
===> Forged server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
Fingerprint: 8D:4B:BB:CD:E0:E4:65:CC:56:15CF:00:B0:97:A2:57:B7:79:28:92
Certificate cache: HIT
===> Forged server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
Fingerprint: C4:15:8B:4B:34:8B:11:78:91:CB7E:E7:4B:E6:61:81:D3:CD:C1:93
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
Fingerprint: C4:15:8B:4B:34:8B:11:78:91:CB7E:E7:4B:E6:61:81:D3:CD:C1:93
[FINEST] [3.25 fd=108 cfd=0] protossl_bev_eventcb_connected_srvdst: ENTER
===> Original server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
[FINEST] [4.26 fd=117 cfd=0] prototcp_bufferevent_setup: ENTER, fd=-1
[FINEST] [2.24 fd=110 cfd=0] prototcp_bufferevent_setup: ENTER, fd=-1
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
Fingerprint: 8D:4B:BB:CD:E0:E4:65:CC:56:15CF:00:B0:97:A2:57:B7:79:28:92
Certificate cache: HIT
===> Forged server certificate:
[FINEST] [0.20 fd=99 cfd=0] protossl_bev_eventcb_connected_srvdst: ENTER
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
[FINEST] [4.26 fd=117 cfd=0] protossl_bev_eventcb_connected_dst: ENTER
[FINEST] [4.26 fd=117 cfd=0] protossl_bufferevent_setup: ENTER, fd=117
[FINEST] [4.26 fd=117 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=117
[FINER] [4.26 fd=117 cfd=130] pxy_setup_child_listener: Finished setting up child listener, child_fd=130
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
Fingerprint: C4:15:8B:4B:34:8B:11:78:91:CB7E:E7:4B:E6:61:81:D3:CD:C1:93
===> Original server certificate:
[FINER] [4.26 fd=117 cfd=130] pxy_setup_child_listener: sslproxy_header= SSLproxy: [127.0.0.1]:46249,[10.42.0.230]:65504,[93.184.221.225]:443,s
[FINER] [4.26 fd=117 cfd=130] protossl_enable_src: Enabling src
SSL connected to [93.184.221.225]:443 TLSv1.3 TLS_AES_256_GCM_SHA384
CLIENT_RANDOM 9F21A60FF56CD42676CF8CDE43FC21642FCB2EE2751F6CCBC05F9A8810B384D9 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
SSL session cache: MISS
Certificate cache: KEEP (SNI match or target mode)
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
[FINEST] [2.23 fd=107 cfd=0] protossl_bev_eventcb_connected_srvdst: ENTER
===> Original server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
Fingerprint: 8D:4B:BB:CD:E0:E4:65:CC:56:15CF:00:B0:97:A2:57:B7:79:28:92
Certificate cache: HIT
===> Forged server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
Fingerprint: 8D:4B:BB:CD:E0:E4:65:CC:56:15CF:00:B0:97:A2:57:B7:79:28:92
Certificate cache: HIT
===> Forged server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
Fingerprint: C4:15:8B:4B:34:8B:11:78:91:CB7E:E7:4B:E6:61:81:D3:CD:C1:93
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
Fingerprint: C4:15:8B:4B:34:8B:11:78:91:CB7E:E7:4B:E6:61:81:D3:CD:C1:93
[FINEST] [3.25 fd=108 cfd=0] prototcp_bufferevent_setup: ENTER, fd=-1
[FINEST] [3.25 fd=108 cfd=0] protossl_bev_eventcb_connected_dst: ENTER
[FINEST] [3.25 fd=108 cfd=0] protossl_bufferevent_setup: ENTER, fd=108
[FINEST] [3.25 fd=108 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=108
[FINER] [3.25 fd=108 cfd=132] pxy_setup_child_listener: Finished setting up child listener, child_fd=132
[FINER] [3.25 fd=108 cfd=132] pxy_setup_child_listener: sslproxy_header= SSLproxy: [127.0.0.1]:33109,[10.42.0.230]:65502,[93.184.221.225]:443,s
[FINER] [3.25 fd=108 cfd=132] protossl_enable_src: Enabling src
SSL connected to [93.184.221.225]:443 TLSv1.3 TLS_AES_256_GCM_SHA384
CLIENT_RANDOM 2321ECC99A9BDA20662F1A6EF312A0B08200E87CFDF7D58494DD4A49EB3313D1 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
SSL session cache: MISS
[FINEST] [4.26 fd=117 cfd=130] prototcp_bev_writecb_dst: ENTER
[FINEST] [0.20 fd=99 cfd=0] prototcp_bufferevent_setup: ENTER, fd=-1
Certificate cache: KEEP (SNI match or target mode)
[FINEST] [2.23 fd=107 cfd=0] prototcp_bufferevent_setup: ENTER, fd=-1
[FINEST] [2.21 fd=102 cfd=125] prototcp_bev_eventcb_connected_src: ENTER
CONN: ssl 10.42.0.230 65498 93.184.221.225 443 sni:ir.ebaystatic.com names:www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com sproto:TLSv1.3:TLS_AES_128_GCM_SHA256 dproto:TLSv1.3:TLS_AES_256_GCM_SHA384 origcrt:8D4BBBCDE0E465CC5615CF00B097A257B7792892 usedcrt:C4158B4B348B117891CB7EE74BE66181D3CDC193 user:-
SSL connected to [93.184.221.225]:443 TLSv1.3 TLS_AES_128_GCM_SHA256
CLIENT_RANDOM 841487F3EAFA63DD25E085CCD32598457CFEB1FDD2A7BB6430C7189D58DBF3E7 A87F500B6B46EB0C3654713005898A0CB909EBD771143FE3FB05B3A65DF0ECA900000000000000000000000000000000
[FINEST] [2.24 fd=110 cfd=0] protossl_bev_eventcb_connected_dst: ENTER
[FINEST] [2.24 fd=110 cfd=0] protossl_bufferevent_setup: ENTER, fd=110
[FINEST] [2.24 fd=110 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=110
[FINER] [2.24 fd=110 cfd=135] pxy_setup_child_listener: Finished setting up child listener, child_fd=135
[FINER] [2.24 fd=110 cfd=135] pxy_setup_child_listener: sslproxy_header= SSLproxy: [127.0.0.1]:38905,[10.42.0.230]:65501,[93.184.221.225]:443,s
[FINER] [2.24 fd=110 cfd=135] protossl_enable_src: Enabling src
SSL connected to [93.184.221.225]:443 TLSv1.3 TLS_AES_256_GCM_SHA384
CLIENT_RANDOM 76B7C14CDD68F4A9CC1C3FEC7AAB193DB258E004A4650BA0E208300031879F5C 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
SSL session cache: MISS
Certificate cache: KEEP (SNI match or target mode)
[FINEST] [0.19 fd=106 cfd=123] prototcp_bev_eventcb_connected_src: ENTER
CONN: ssl 10.42.0.230 65496 84.53.189.76 443 sni:www.ebay.com names:www.ebay.com/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/www.ebay.com/ucpstatic.ebay.com/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/sofe.ebay.at/shippingtool.ebay.cn/securepics.ebaystatic.com/secureir.sandbox.ebaystatic.com/secureir.ebaystatic.com/secureinclude.ebaystatic.com/rover.ebay.it/rover.ebay.in/rover.ebay.fr/rover.ebay.de/rover.ebay.com.au/rover.ebay.com/rover.ebay.co.uk/m.ebay.it/m.ebay.fr/m.ebay.de/m.ebay.com.au/identity-api.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/anywhere.ebay.in/anywhere.ebay.ie/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/akamai.ebaycdn.net/akamai-static.ebaycdn.net/include.ebaystatic.com sproto:TLSv1.3:TLS_AES_128_GCM_SHA256 dproto:TLSv1.3:TLS_AES_256_GCM_SHA384 origcrt:A07C07E045B79445A21E1445410D2A6A480580A5 usedcrt:29EB3FA4BEF3C928C21799C51DA2C8E2FF1C221F user:-
SSL connected to [84.53.189.76]:443 TLSv1.3 TLS_AES_128_GCM_SHA256
CLIENT_RANDOM 28BF0A017C49C28181456DA992F2D39A3E96F7DF50BD30A99B93B4B277AC238D 648BAC7E533C4EB341E354FB163CC0C5619191EDB77FD662EA2B9056FB5C6AC400000000000000000000000000000000
[FINEST] [0.20 fd=99 cfd=0] protossl_bev_eventcb_connected_dst: ENTER
[FINEST] [0.20 fd=99 cfd=0] protossl_bufferevent_setup: ENTER, fd=99
[FINEST] [0.20 fd=99 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=99
[FINER] [0.20 fd=99 cfd=136] pxy_setup_child_listener: Finished setting up child listener, child_fd=136
[FINER] [0.20 fd=99 cfd=136] pxy_setup_child_listener: sslproxy_header= SSLproxy: [127.0.0.1]:33713,[10.42.0.230]:65497,[93.184.221.225]:443,s
[FINER] [0.20 fd=99 cfd=136] protossl_enable_src: Enabling src
SSL connected to [93.184.221.225]:443 TLSv1.3 TLS_AES_256_GCM_SHA384
CLIENT_RANDOM 373ED6363B4C99BED5DC3888285AF40B55BE79A79431D9A4242EE42E7FD6075C 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
SSL session cache: MISS
Certificate cache: KEEP (SNI match or target mode)
[FINEST] [4.27 fd=118 cfd=0] protossl_bev_eventcb_connected_srvdst: ENTER
===> Original server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
Fingerprint: 8D:4B:BB:CD:E0:E4:65:CC:56:15CF:00:B0:97:A2:57:B7:79:28:92
Certificate cache: HIT
===> Forged server certificate:
Subject DN: /C=US/ST=California/L=San Jose/O=eBay, Inc./CN=www.ebay.com
Common Names: www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com
Fingerprint: C4:15:8B:4B:34:8B:11:78:91:CB7E:E7:4B:E6:61:81:D3:CD:C1:93
[FINEST] [4.27 fd=118 cfd=0] prototcp_bufferevent_setup: ENTER, fd=-1
[FINEST] [4.27 fd=118 cfd=0] protossl_bev_eventcb_connected_dst: ENTER
[FINEST] [4.27 fd=118 cfd=0] protossl_bufferevent_setup: ENTER, fd=118
[FINEST] [4.27 fd=118 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=118
[FINER] [4.27 fd=118 cfd=138] pxy_setup_child_listener: Finished setting up child listener, child_fd=138
[FINER] [4.27 fd=118 cfd=138] pxy_setup_child_listener: sslproxy_header= SSLproxy: [127.0.0.1]:38811,[10.42.0.230]:65505,[93.184.221.225]:443,s
[FINER] [4.27 fd=118 cfd=138] protossl_enable_src: Enabling src
SSL connected to [93.184.221.225]:443 TLSv1.3 TLS_AES_256_GCM_SHA384
CLIENT_RANDOM A104ADEB4E8F8F5D41EB0B2303F1A9270244B13BB663B2B152B66489576C07AE 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
SSL session cache: MISS
Certificate cache: KEEP (SNI match or target mode)
[FINEST] [3.25 fd=108 cfd=132] prototcp_bev_writecb_dst: ENTER
[FINEST] [3.25 fd=108 cfd=132] prototcp_bev_eventcb_eof_src: ENTER
evbuffer size at EOF: i:0 o:0 i:0 o:0
[FINEST] [3.25 fd=108 cfd=132] prototcp_bev_eventcb_eof_src: !dst.closed, terminate conn
[FINEST] [3.25 fd=108 cfd=132] pxy_try_close_conn_end: evbuffer_get_length(outbuf) == 0, terminate conn
[FINER] [3.25 fd=108 cfd=132] prototcp_bufferevent_free_and_close_fd: in=0, out=0, fd=131
[FINER] [3.25 fd=108 cfd=132] protossl_bufferevent_free_and_close_fd: in=0, out=0, fd=108
SSL_free() in state 0000002e = 002e = TED (TLSv1.3 early data) [accept socket]
[FINER] [3.25 fd=108 cfd=132] protossl_bufferevent_free_and_close_fd: fd=108, SSL_free() in state 0000002e = 002e = TED (TLSv1.3 early data) [accept socket]
[FINEST] [3.25 fd=108 cfd=132] pxy_try_disconnect: other->closed, terminate conn
SSL disconnected to [93.184.221.225]:443, fd=108
SSL disconnected from [10.42.0.230]:65502, fd=108
[FINEST] [3.25 fd=108 cfd=132] pxy_conn_term: ENTER
[FINEST] [3.25 fd=108 cfd=132] pxy_conn_free: ENTER
[FINER] [3.25 fd=108 cfd=132] protossl_bufferevent_free_and_close_fd: in=0, out=0, fd=116
SSL_free() in state 00000001 = 0001 = SSLOK  (SSL negotiation finished successfully) [connect socket]
[FINER] [3.25 fd=108 cfd=132] protossl_bufferevent_free_and_close_fd: fd=116, SSL_free() in state 00000001 = 0001 = SSLOK  (SSL negotiation finished successfully) [connect socket]
[FINEST] [3.25 fd=108 cfd=132] pxy_conn_free_children: ENTER
[FINER] [3.25 fd=108 cfd=132] pxy_conn_free_children: Freeing child_evcl, children fd=-1
[FINEST] [3.25 fd=108 cfd=132] pxy_conn_ctx_free: ENTER
[FINEST] [3.25 fd=108 cfd=132] pxy_thr_detach: Removing conn
[FINEST] [3.25 fd=108 cfd=132] pxy_thr_detach: Cannot find conn in thr conns
[FINEST] [2.23 fd=107 cfd=0] protossl_bev_eventcb_connected_dst: ENTER
[FINEST] [2.23 fd=107 cfd=0] protossl_bufferevent_setup: ENTER, fd=107
[FINEST] [2.23 fd=107 cfd=0] protossl_bufferevent_setup: bufferevent_openssl_set_allow_dirty_shutdown, fd=107
[FINER] [2.23 fd=107 cfd=108] pxy_setup_child_listener: Finished setting up child listener, child_fd=108
[FINER] [2.23 fd=107 cfd=108] pxy_setup_child_listener: sslproxy_header= SSLproxy: [127.0.0.1]:34423,[10.42.0.230]:65500,[93.184.221.225]:443,s
[FINER] [2.23 fd=107 cfd=108] protossl_enable_src: Enabling src
SSL connected to [93.184.221.225]:443 TLSv1.3 TLS_AES_256_GCM_SHA384
CLIENT_RANDOM BA268D05A1C5805382845F005F5A07FA54C6C88ABB1F444526F92513992426B6 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
[FINEST] [2.24 fd=110 cfd=135] prototcp_bev_writecb_dst: ENTER
SSL session cache: MISS
Certificate cache: KEEP (SNI match or target mode)
[FINEST] [0.20 fd=99 cfd=136] prototcp_bev_writecb_dst: ENTER
[FINEST] [4.27 fd=118 cfd=138] prototcp_bev_writecb_dst: ENTER
[FINEST] [2.23 fd=107 cfd=108] prototcp_bev_writecb_dst: ENTER
[FINEST] [4.26 fd=117 cfd=130] prototcp_bev_eventcb_connected_src: ENTER
CONN: ssl 10.42.0.230 65504 93.184.221.225 443 sni:ir.ebaystatic.com names:www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com sproto:TLSv1.3:TLS_AES_128_GCM_SHA256 dproto:TLSv1.3:TLS_AES_256_GCM_SHA384 origcrt:8D4BBBCDE0E465CC5615CF00B097A257B7792892 usedcrt:C4158B4B348B117891CB7EE74BE66181D3CDC193 user:-
SSL connected to [93.184.221.225]:443 TLSv1.3 TLS_AES_128_GCM_SHA256
CLIENT_RANDOM EEEFC6207C7B1835106379A3330781EBA5FF080F3061E730CED2934BD38F15E1 D177C23942D5F476A7A52CA3426A1F7BD12A2BB8602BBDCEA9267376B1DD090800000000000000000000000000000000
[FINEST] [4.27 fd=118 cfd=138] prototcp_bev_eventcb_connected_src: ENTER
CONN: ssl 10.42.0.230 65505 93.184.221.225 443 sni:ir.ebaystatic.com names:www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com sproto:TLSv1.3:TLS_AES_128_GCM_SHA256 dproto:TLSv1.3:TLS_AES_256_GCM_SHA384 origcrt:8D4BBBCDE0E465CC5615CF00B097A257B7792892 usedcrt:C4158B4B348B117891CB7EE74BE66181D3CDC193 user:-
SSL connected to [93.184.221.225]:443 TLSv1.3 TLS_AES_128_GCM_SHA256
CLIENT_RANDOM C78C07E181A181270A3870BF9A6B023D65CF7D30A77EBE59696E8CC94628EAE1 DDA32C0CBC88C44BA404EC499D67A5CF5E2C8FD8FC362048CAE028C976C77E9C00000000000000000000000000000000
[FINEST] [0.20 fd=99 cfd=136] prototcp_bev_eventcb_connected_src: ENTER
CONN: ssl 10.42.0.230 65497 93.184.221.225 443 sni:ir.ebaystatic.com names:www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com sproto:TLSv1.3:TLS_AES_128_GCM_SHA256 dproto:TLSv1.3:TLS_AES_256_GCM_SHA384 origcrt:8D4BBBCDE0E465CC5615CF00B097A257B7792892 usedcrt:C4158B4B348B117891CB7EE74BE66181D3CDC193 user:-
SSL connected to [93.184.221.225]:443 TLSv1.3 TLS_AES_128_GCM_SHA256
CLIENT_RANDOM C9E23FE4C21B08C5168A89EC6110CFA885879B25CBAF862F85464250AC27C0D7 B8A5CA75A46BE8C9B8A07D1ADED4CFBD6D2848CEA49235455C02CB76BA04CE2100000000000000000000000000000000
[FINEST] [2.24 fd=110 cfd=135] prototcp_bev_eventcb_connected_src: ENTER
CONN: ssl 10.42.0.230 65501 93.184.221.225 443 sni:ir.ebaystatic.com names:www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com sproto:TLSv1.3:TLS_AES_128_GCM_SHA256 dproto:TLSv1.3:TLS_AES_256_GCM_SHA384 origcrt:8D4BBBCDE0E465CC5615CF00B097A257B7792892 usedcrt:C4158B4B348B117891CB7EE74BE66181D3CDC193 user:-
SSL connected to [93.184.221.225]:443 TLSv1.3 TLS_AES_128_GCM_SHA256
CLIENT_RANDOM FFC44A8393C4436F991989A28F8EA4E7C4B34CB4AB454E8DF065F569143D4653 858C228513C62529D1CE2C023508F7E4793B41397CA9196E0DF287D42E88D72800000000000000000000000000000000
[FINEST] [2.23 fd=107 cfd=108] prototcp_bev_eventcb_connected_src: ENTER
CONN: ssl 10.42.0.230 65500 93.184.221.225 443 sni:ir.ebaystatic.com names:www.ebay.com/www.ebay.com/m.ebay.com.au/m.ebay.com/m.ebay.co.uk/info.ebayinc.com/image.edpn.ebay.com/i.ebayimg.com/gh.ebaystatic.com/fundinginstrument.ebay.de/cdn.ebaymainstreet.com/apacshippingtool.ebay.com/apacshipping.ebay.com.hk/anywhere.ebay.pl/anywhere.ebay.nl/anywhere.ebay.it/m.ebay.de/anywhere.ebay.in/anywhere.ebay.es/anywhere.ebay.com.sg/anywhere.ebay.com.hk/anywhere.ebay.com/anywhere.ebay.ch/anywhere.ebay.ca/anywhere.ebay.be/anywhere.ebay.at/identity-api.ebay.com/akamai-static.ebaycdn.net/verizon-static.ebaycdn.net/fastly-static.ebaycdn.net/level3-static.ebaycdn.net/video.ebaycdn.net/anywhere.ebay.ie/m.ebay.fr/m.ebay.it/rover.ebay.co.uk/svcs.ebay.com/srwsvcs.ebay.com/srv.uk.ebayrtm.com/srv.main.ebayrtm.com/srv.it.ebayrtm.com/srv.in.ebayrtm.com/srv.fr.ebayrtm.com/srv.de.ebayrtm.com/srv.au.ebayrtm.com/sofe.express.ebay.com/sofe.ebay.it/sofe.ebay.in/sofe.ebay.fr/sofe.ebay.de/sofe.ebay.com.au/sofe.ebay.com/sofe.ebay.co.uk/rover.ebay.com/rover.ebay.com.au/rover.ebay.de/rover.ebay.fr/rover.ebay.in/rover.ebay.it/secureinclude.ebaystatic.com/secureir.ebaystatic.com/secureir.sandbox.ebaystatic.com/securepics.ebaystatic.com/securertm.ebaystatic.com/shippingtool.ebay.cn/sofe.ebay.at/ir.ebaystatic.com/thumbs.ebaystatic.com/thumbs3.ebaystatic.com/thumbs2.ebaystatic.com/thumbs1.ebaystatic.com/thumbs4.ebaystatic.com/ucpstatic.ebay.com sproto:TLSv1.3:TLS_AES_128_GCM_SHA256 dproto:TLSv1.3:TLS_AES_256_GCM_SHA384 origcrt:8D4BBBCDE0E465CC5615CF00B097A257B7792892 usedcrt:C4158B4B348B117891CB7EE74BE66181D3CDC193 user:-
SSL connected to [93.184.221.225]:443 TLSv1.3 TLS_AES_128_GCM_SHA256
CLIENT_RANDOM 4AC2DBACDE6388D14129F78399AB846B38A6BC3EBF080372394B6C28E284CA45 09709DDF9103D805C7DD55A5ACD32F2B0AA519D7CA3414304DDF57FA970BDCE200000000000000000000000000000000
[FINEST] [7.18 fd=103 cfd=112] prototcp_bev_readcb_src: ENTER, size=470
[FINER] [7.18 fd=103 cfd=112] pxy_try_prepend_sslproxy_header: ENTER
[FINEST] [7.18 fd=103 cfd=112] prototcp_bev_writecb_dst: ENTER
[FINEST] [2.21 fd=102 cfd=125] prototcp_bev_readcb_src: ENTER, size=468
[FINER] [2.21 fd=102 cfd=125] pxy_try_prepend_sslproxy_header: ENTER
[FINEST] [2.21 fd=102 cfd=125] pxy_try_prepend_sslproxy_header: ORIG packet, size=468:
GET /rs/v/acxp0mbuba3zva1qr31idsmitmi.png HTTP/1.1
Host: ir.ebaystatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: image/avif,image/webp,*/*
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ir.ebaystatic.com/rs/v/pddm5nqegm5n5f521paddmyfcy1.css?proc=DU:N
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
sonertari commented 2 years ago

Actually, I was talking about verbose debug logs for the http proxyspec, so that you could see some of the HTTP header mangling for HTTP requests, because HTTP logs show such changes clearly. Btw, sslproxy does not log HTTP header mangling for HTTP responses, but I think those are the ones relevant in your case, because sslproxy removes Public-Key-Pins, Strict-Transport-Security, and Upgrade header lines, as mentioned in README.

But, the logs you provide for ssl proxyspec may help you understand, because they show some HTTP headers while the SSLproxy line is being removed. For example. see the HTTP headers with Connection, Accept-Encoding, and Referer lines. Connection line should be always close, never keep-alive. And the others should be removed. But sslproxy does not mangle any HTTP headers with ssl proxyspec. The logs you provide above clearly show that.

In summary, I think the difference you are observing is expected. I recommend you use HTTP proxyspec for HTTP connections (and look into verbose logs for the HTTP proxyspec to see header mangling for request packets). Also, please see protohttp_filter_request_header_line() and protohttp_filter_response_header_line() functions in protohttp.c.

Lo0815 commented 2 years ago

Thanks for your fast support and for your detailed explanation. I got your piont but I have one last question. Why does this behavior not occur with the lp you provided (/tests/testproxy/lp)? When I use this lp it also works with ssl proxyspec, what is different with this lp?

Kind regards !

sonertari commented 2 years ago

If you don't see any issues with the lp using ssl proxyspec, then my comments above cannot explain the issues you are seeing. Are you sure? If you are, I would start suspecting your Java listening program.

Lo0815 commented 2 years ago

I am sure, and yes I suspect my Java, I will try to use another NIO lib for this purpose. Thanks for your help