ATTENTION: You are viewing a page formatted for mobile devices; to view the full web page, click HERE.

DonationCoder.com Software > UrlSnooper

Source IP not matching URL hostname

(1/1)

alpha-dog:
anyone seen this on pages that are largely flex-based?

Seems that the hostname doesn't match the source-IP.  Actually, the source IP address seems to be unaddressable on the public internet.   I'd think that the hostname would match the source, unless it's the case that the SWF is trying to broker messages from my machine back to the origin server.

thoughts?

alpha-dog:
i'm going to attempt to answer my own question based on a theory.
I think that the SWF is attempting to communicate "back" to the infrastructure, and as a result, the reason i'm seeing my own IP as the SOURCE IP is that it's coming from the x-header.
Just a theory, though - hoping perhaps someone else has some insight.

thanks

mouser:
that might make some sense -- sometimes urlsnooper has to guess about the source ip or hostname i think.. if you go to advanced mode and actually click on the url found, it will show you on bottom the complete url in context -- from there you will see if the ip is actually part of the url, or if urlsnooper basically added the ip based on a guess from something scanned earlier.

Navigation

[0] Message Index

Go to full version