Re: ICAP doesnt see POST data

[Luis Daniel Lucio Quiroz <luis.daniel.lucio@xxxxxxxxx>]

Le Mercredi 3 Mars 2010 16:12:33, Amos Jeffries a écrit :
> On Wed, 3 Mar 2010 07:37:34 -0600, Luis Daniel Lucio Quiroz
> 
> <luis.daniel.lucio@xxxxxxxxx> wrote:
> > Le Mardi 2 Mars 2010 13:42:31, Henrik Nordstrom a écrit :
> >> mån 2010-03-01 klockan 19:03 -0600 skrev Luis Daniel Lucio Quiroz:
> >> > as we have a squid with ICAP we have a requirement to save all data
> >> > sent.
> >> > We have a ICAP that does that, how ever when  logging we can see
> >> > 
> >> > POST url
> >> > headers
> >> > 
> >> > but we dont see data that is sent by post, are we missing something?
> >> 
> >> Should be there... and I think it is..
> >> 
> >> Have you tried inspecting the traffic with wireshark?
> >> 
> >> Regards
> >> Henrik
> > 
> > Yes I did
> > that's why i realize of that, i did  tcpdump -s0 -X so I'm pretty sure I
> > got
> > whole packet.
> > 
> > LD
> 
> Do the POST headers contain "Expect:" ?
> 
> Amos
No they dont
look

POST https://www.google.com/accounts/ServiceLoginAuth?service=mail Indicateurs 
chargement[LOAD_DOCUMENT_URI  LOAD_INITIAL_DOCUMENT_URI  ] Taille contenu[897] 
Type Mime[text/html]
   En-têtes requête:
      Host[www.google.com]
      User-Agent[Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2) 
Gecko/20100125 Mandriva Linux/1.9.2-2mdv2010.1 (2010.1) Firefox/3.6]
      Accept[text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8]
      Accept-Language[fr,fr-fr;q=0.8,en-us;q=0.5,en;q=0.3]
      Accept-Encoding[gzip,deflate]
      Accept-Charset[ISO-8859-1,utf-8;q=0.7,*;q=0.7]
      Keep-Alive[115]
      Connection[keep-alive]
      Referer[https://www.google.com/accounts/ServiceLogin?service=mail&passive=true&rm=false&continue=http%3A%2F%2Fmail.google.com%2Fmail%2F%3Fui%3Dhtml%26zy%3Dl&bsv=zpwhtygjntrz&scc=1&ltmpl=default&ltmplcache=2]
      Cookie[GoogleAccountsLocale_session=fr; 
__utma=173272373.232088431.1267316200.1267316200.1267316200.1; 
__utmb=173272373; __utmc=173272373; 
__utmz=173272373.1267316200.1.1.utmccn=(direct)|utmcsr=(direct)|utmcmd=(none); 
GALX=1lukNt41cgM; 
PREF=ID=cfdfa006ee8f6444:TM=1267313740:LM=1267313740:S=o0KF7YNRgGFHVUOy; 
TZ=360; GMAIL_RTT=191; GMAIL_LOGIN=T1267316206915/1267316206915/1267316237089]
   Données POST:
      ltmpl[default]
      ltmplcache[2]
      continue[http%3A%2F%2Fmail.google.com%2Fmail%2F%3F]
      service[mail]
      rm[false]
      dsh[-3440628357213899764]
      scc[1]
      GALX[1lukNt41cgM]
      Email[luis.daniel.lucio%40gmail.com]
      Passwd[XXXXXXXX]
      rmShown[1]
      signIn[Connexion]
      asts[]


These data was got using Tamper Data from FF.  But ICAP doest shoyw  Post data 
(Données)