It will be good if your guys could upload the Pcaps. I believe it's can be dissected in more clearance. Also, don't forget, in order to look in to more rigorous, it is requires to have one pcap from client and another one pcap from exact OCS.
This post has been edited by Asali: May 2 2013, 09:36 AM
YouTube Deep Packet Inspection, All HTTP connections being MITMed
May 2 2013, 09:35 AM
Quote
0.0147sec
0.41
6 queries
GZIP Disabled