Bettercap: how do I use proxy modules to replace images?

Created on 27 Mar 2019  ยท  5Comments  ยท  Source: bettercap/bettercap

I want to Replace all images in http-stream but it doesnt work, could you give me some advice ? am i using the right function to replace all img tags ?

function onResponse(req, res) {
  var body = res.ReadBody();
  res.Body = body.replace( '<img', '<img src=http://image.com/someimage.jpg />' );
}

no logs, no version, closing as incomplete report. sorry, thought i yust had to call another function to replace html-content. SORRY for that...

Bettercap Version: bettercap v2.19 (built for linux amd64 with go1.11.5)

caplet:
net.probe on sleep 5 net.probe off net.recon off set http.proxy.script replace-images.js http.proxy on #https.proxy on sleep 1

caplet js:
`
function onLoad() {
log( "BeefInject loaded." );
log("targets: " + env['arp.spoof.targets']);
}

function onResponse(req, res) {
var body = res.ReadBody();
res.Body = body.replace( '' );
}
`
usage:
bettercap -iface eth0 -debug -caplet replace-images.cap

output:

<
[14:15:32] [sys.log] [dbg] loading proxy script replace-images.js ...
[14:15:32] [sys.log] [inf] BeefInject loaded.
[14:15:32] [sys.log] [inf] targets:
[14:15:32] [sys.log] [dbg] http.proxy proxy script replace-images.js loaded.
[14:15:32] [sys.log] [dbg] http.proxy applied redirection [eth0] (TCP) :80 -> 172.16.0.180:8080
[14:15:32] [mod.started] http.proxy
[14:15:32] [sys.log] [inf] http.proxy started on 172.16.0.180:8080 (sslstrip disabled)
172.16.0.0/23 > 172.16.0.180 ยป [14:15:41] [sys.log] [dbg] http.proxy < 172.16.1.51:53119 GET detectportal.firefox.com/success.txt
172.16.0.0/23 > 172.16.0.180 ยป [14:15:41] [sys.log] [dbg] http.proxy > 172.16.1.51:53119 GET detectportal.firefox.com/success.txt
172.16.0.0/23 > 172.16.0.180 ยป [14:15:41] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:41.700780856 +0100 CET m=+13.939485618 {172.16.1.51 GET detectportal.firefox.com /success.txt 9}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:45] [sys.log] [dbg] http.proxy < 172.16.1.51:53131 GET spiegel.de/
172.16.0.0/23 > 172.16.0.180 ยป [14:15:45] [sys.log] [dbg] http.proxy < 172.16.1.51:53119 GET detectportal.firefox.com/success.txt
172.16.0.0/23 > 172.16.0.180 ยป [14:15:45] [sys.log] [dbg] http.proxy > 172.16.1.51:53119 GET detectportal.firefox.com/success.txt
172.16.0.0/23 > 172.16.0.180 ยป [14:15:45] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:45.257142335 +0100 CET m=+17.495847070 {172.16.1.51 GET detectportal.firefox.com /success.txt 9}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:45] [sys.log] [dbg] http.proxy > 172.16.1.51:53131 GET spiegel.de/
172.16.0.0/23 > 172.16.0.180 ยป [14:15:45] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:45.458850599 +0100 CET m=+17.697555343 {172.16.1.51 GET spiegel.de / 0}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:45] [sys.log] [dbg] http.proxy < 172.16.1.51:53131 GET www.spiegel.de/
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy > 172.16.1.51:53131 GET www.spiegel.de/
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:46.205469905 +0100 CET m=+18.444174690 {172.16.1.51 GET www.spiegel.de / 353192}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53131 GET www.spiegel.de/layout/css/style-V8-68.css
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy > 172.16.1.51:53131 GET www.spiegel.de/layout/css/style-V8-68.css
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:46.312876055 +0100 CET m=+18.551580821 {172.16.1.51 GET www.spiegel.de /layout/css/style-V8-68.css 375025}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53131 GET cdn2.spiegel.de/images/image-1410685-900_breitwand_180x67-qoms-1410685.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53134 GET cdn1.spiegel.de/images/image-1094330-210_poster_16x9-oqso-1094330.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53136 GET www.spiegel.de/images/image-1331751-custom-fket.png
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53137 GET www.spiegel.de/static/sys/v10/icons/ani-loader_small.gif
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53138 GET www.spiegel.de/static/_common/sys/V1/logo/spiegel-akademie/spiegel-akademie.png
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53139 GET cdn3.spiegel.de/images/image-1287596-520_poster_16x9-gqts-1287596.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53140 GET cdn3.spiegel.de/images/image-1410442-thumbflex-ipxq-1410442.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53141 GET cdn1.spiegel.de/images/image-1410138-thumbflex-oobi-1410138.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53142 GET cdn4.spiegel.de/images/image-868833-thumbflex-wowx-868833.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53143 GET cdn4.spiegel.de/images/image-1410643-thumbflex-klub-1410643.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy > 172.16.1.51:53136 GET www.spiegel.de/images/image-1331751-custom-fket.png
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:46.39023147 +0100 CET m=+18.628936216 {172.16.1.51 GET www.spiegel.de /images/image-1331751-custom-fket.png 1656}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53145 GET cdn4.spiegel.de/images/image-1410073-thumbflex-fqxq-1410073.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53144 GET www.spiegel.de/static/happ/netzwelt/games/slider/v0/pic_power-of-2_160.svg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53136 GET cdn1.spiegel.de/images/image-1101690-thumbflex-mqvg-1101690.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53146 GET cdn3.spiegel.de/images/image-1397456-thumbflex-wtki-1397456.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53147 GET cdn4.spiegel.de/images/image-839013-thumbflex-mwwt-839013.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53148 GET cdn1.spiegel.de/images/image-1410634-thumbflex-phbx-1410634.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53149 GET cdn2.spiegel.de/images/image-1409989-thumbflex-evux-1409989.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53150 GET cdn1.spiegel.de/images/image-616648-thumbflex-pgvi-616648.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy > 172.16.1.51:53137 GET www.spiegel.de/static/sys/v10/icons/ani-loader_small.gif
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:46.465324071 +0100 CET m=+18.704028905 {172.16.1.51 GET www.spiegel.de /static/sys/v10/icons/ani-loader_small.gif 2545}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy > 172.16.1.51:53138 GET www.spiegel.de/static/_common/sys/V1/logo/spiegel-akademie/spiegel-akademie.png
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:46.499492842 +0100 CET m=+18.738197599 {172.16.1.51 GET www.spiegel.de /static/_common/sys/V1/logo/spiegel-akademie/spiegel-akademie.png 3448}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53137 GET cdn3.spiegel.de/images/image-1406782-thumbflex-dttx-1406782.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy > 172.16.1.51:53131 GET cdn2.spiegel.de/images/image-1410685-900_breitwand_180x67-qoms-1410685.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53138 GET cdn4.spiegel.de/images/image-1245103-thumbflexhp-ikxj-1245103.png
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53151 GET cdn1.spiegel.de/images/image-1410454-thumbflex-opqz-1410454.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy > 172.16.1.51:53140 GET cdn3.spiegel.de/images/image-1410442-thumbflex-ipxq-1410442.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:46.510333029 +0100 CET m=+18.749037780 {172.16.1.51 GET cdn2.spiegel.de /images/image-1410685-900_breitwand_180x67-qoms-1410685.jpg 19129}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:46.512153484 +0100 CET m=+18.750858278 {172.16.1.51 GET cdn3.spiegel.de /images/image-1410442-thumbflex-ipxq-1410442.jpg 10428}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy > 172.16.1.51:53149 GET cdn2.spiegel.de/images/image-1409989-thumbflex-evux-1409989.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:46.523959287 +0100 CET m=+18.762664059 {172.16.1.51 GET cdn2.spiegel.de /images/image-1409989-thumbflex-evux-1409989.jpg 5949}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy > 172.16.1.51:53146 GET cdn3.spiegel.de/images/image-1397456-thumbflex-wtki-1397456.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:46.55097338 +0100 CET m=+18.789678127 {172.16.1.51 GET cdn3.spiegel.de /images/image-1397456-thumbflex-wtki-1397456.jpg 9745}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy > 172.16.1.51:53139 GET cdn3.spiegel.de/images/image-1287596-520_poster_16x9-gqts-1287596.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53140 GET cdn1.spiegel.de/images/image-1410698-230_poster_16x9-xusw-1410698.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53131 GET www.spiegel.de/static/sys/dimensionspixel.gif
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53152 GET cdn2.spiegel.de/images/image-1368059-thumbflex-ytkj-1368059.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy > 172.16.1.51:53144 GET www.spiegel.de/static/happ/netzwelt/games/slider/v0/pic_power-of-2_160.svg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:46.56002703 +0100 CET m=+18.798731774 {172.16.1.51 GET cdn3.spiegel.de /images/image-1287596-520_poster_16x9-gqts-1287596.jpg 33074}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53149 GET cdn1.spiegel.de/images/image-1410594-520_poster_16x9-gqqk-1410594.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:46.561607965 +0100 CET m=+18.800312701 {172.16.1.51 GET www.spiegel.de /static/happ/netzwelt/games/slider/v0/pic_power-of-2_160.svg 3424}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy > 172.16.1.51:53137 GET cdn3.spiegel.de/images/image-1406782-thumbflex-dttx-1406782.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:46.577803133 +0100 CET m=+18.816507967 {172.16.1.51 GET cdn3.spiegel.de /images/image-1406782-thumbflex-dttx-1406782.jpg 10331}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy > 172.16.1.51:53152 GET cdn2.spiegel.de/images/image-1368059-thumbflex-ytkj-1368059.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:46.580810233 +0100 CET m=+18.819514963 {172.16.1.51 GET cdn2.spiegel.de /images/image-1368059-thumbflex-ytkj-1368059.jpg 9795}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53144 GET cdn2.spiegel.de/images/image-1410699-230_poster_16x9-dqwy-1410699.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53146 GET cdn4.spiegel.de/images/image-1410617-230_poster_16x9-ipjt-1410617.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy > 172.16.1.51:53131 GET www.spiegel.de/static/sys/dimensionspixel.gif
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:46.595780189 +0100 CET m=+18.834484942 {172.16.1.51 GET www.spiegel.de /static/sys/dimensionspixel.gif 49}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53137 GET cdn3.spiegel.de/images/image-1410066-520_poster_16x9-hyha-1410066.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53139 GET cdn1.spiegel.de/images/image-1410570-520_poster_16x9-dufp-1410570.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53131 GET cdn2.spiegel.de/images/image-1137965-230_poster_16x9-kgkb-1137965.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy > 172.16.1.51:53144 GET cdn2.spiegel.de/images/image-1410699-230_poster_16x9-dqwy-1410699.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:46.631860285 +0100 CET m=+18.870565049 {172.16.1.51 GET cdn2.spiegel.de /images/image-1410699-230_poster_16x9-dqwy-1410699.jpg 8856}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy > 172.16.1.51:53137 GET cdn3.spiegel.de/images/image-1410066-520_poster_16x9-hyha-1410066.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53144 GET cdn3.spiegel.de/images/image-1398496-230_poster_16x9-cmch-1398496.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53152 GET cdn1.spiegel.de/images/image-1410694-230_poster_16x9-fnvg-1410694.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy > 172.16.1.51:53131 GET cdn2.spiegel.de/images/image-1137965-230_poster_16x9-kgkb-1137965.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53153 GET cdn4.spiegel.de/images/image-1401963-230_poster_16x9-ovpt-1401963.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:46.685257781 +0100 CET m=+18.923962570 {172.16.1.51 GET cdn3.spiegel.de /images/image-1410066-520_poster_16x9-hyha-1410066.jpg 64923}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:46.6940118 +0100 CET m=+18.932716527 {172.16.1.51 GET cdn2.spiegel.de /images/image-1137965-230_poster_16x9-kgkb-1137965.jpg 10148}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53154 GET cdn1.spiegel.de/images/image-1410628-230_poster_16x9-clnx-1410628.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy > 172.16.1.51:53144 GET cdn3.spiegel.de/images/image-1398496-230_poster_16x9-cmch-1398496.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:46.695463103 +0100 CET m=+18.934167837 {172.16.1.51 GET cdn3.spiegel.de /images/image-1398496-230_poster_16x9-cmch-1398496.jpg 12683}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53131 GET www.spiegel.de/static/happ/netzwelt/games/slider/v0/pic_sudoku_160.svg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53144 GET www.spiegel.de/static/happ/netzwelt/games/slider/v0/pic_bubbles_160.svg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53137 GET www.spiegel.de/static/happ/netzwelt/games/slider/v0/pic_mahjong_160.svg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53155 GET www.spiegel.de/static/happ/netzwelt/games/slider/v0/pic_solitaire_160.svg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53156 GET www.spiegel.de/static/happ/netzwelt/games/slider/v0/pic_wimmelbild_160.svg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53157 GET www.spiegel.de/static/happ/netzwelt/games/slider/v0/pic_street_160.svg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53158 GET www.spiegel.de/static/happ/netzwelt/games/slider/v0/pic_exchange-classic_160.svg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy > 172.16.1.51:53131 GET www.spiegel.de/static/happ/netzwelt/games/slider/v0/pic_sudoku_160.svg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:46.810997714 +0100 CET m=+19.049702505 {172.16.1.51 GET www.spiegel.de /static/happ/netzwelt/games/slider/v0/pic_sudoku_160.svg 2766}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy > 172.16.1.51:53147 GET cdn4.spiegel.de/images/image-839013-thumbflex-mwwt-839013.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:46.821473376 +0100 CET m=+19.060178124 {172.16.1.51 GET cdn4.spiegel.de /images/image-839013-thumbflex-mwwt-839013.jpg 5705}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy > 172.16.1.51:53142 GET cdn4.spiegel.de/images/image-868833-thumbflex-wowx-868833.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy > 172.16.1.51:53146 GET cdn4.spiegel.de/images/image-1410617-230_poster_16x9-ipjt-1410617.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy > 172.16.1.51:53145 GET cdn4.spiegel.de/images/image-1410073-thumbflex-fqxq-1410073.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53131 GET www.spiegel.de/static/happ/netzwelt/games/slider/v0/pic_exchange-challenge_160.svg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy > 172.16.1.51:53153 GET cdn4.spiegel.de/images/image-1401963-230_poster_16x9-ovpt-1401963.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy > 172.16.1.51:53138 GET cdn4.spiegel.de/images/image-1245103-thumbflexhp-ikxj-1245103.png
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy > 172.16.1.51:53143 GET cdn4.spiegel.de/images/image-1410643-thumbflex-klub-1410643.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:46.831559278 +0100 CET m=+19.070264012 {172.16.1.51 GET cdn4.spiegel.de /images/image-868833-thumbflex-wowx-868833.jpg 12549}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:46.83356187 +0100 CET m=+19.072266634 {172.16.1.51 GET cdn4.spiegel.de /images/image-1410617-230_poster_16x9-ipjt-1410617.jpg 15235}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:46.835416499 +0100 CET m=+19.074121261 {172.16.1.51 GET cdn4.spiegel.de /images/image-1410073-thumbflex-fqxq-1410073.jpg 16828}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:46.837803554 +0100 CET m=+19.076508305 {172.16.1.51 GET cdn4.spiegel.de /images/image-1401963-230_poster_16x9-ovpt-1401963.jpg 14937}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:46.841269903 +0100 CET m=+19.079974663 {172.16.1.51 GET cdn4.spiegel.de /images/image-1245103-thumbflexhp-ikxj-1245103.png 22469}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy > 172.16.1.51:53144 GET www.spiegel.de/static/happ/netzwelt/games/slider/v0/pic_bubbles_160.svg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53147 GET www.spiegel.de/static/happ/netzwelt/games/slider/v0/pic_rushtower_160.svg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:46.843233243 +0100 CET m=+19.081937973 {172.16.1.51 GET cdn4.spiegel.de /images/image-1410643-thumbflex-klub-1410643.jpg 9704}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:46.84420065 +0100 CET m=+19.082905404 {172.16.1.51 GET www.spiegel.de /static/happ/netzwelt/games/slider/v0/pic_bubbles_160.svg 1874}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53142 GET www.spiegel.de/static/happ/netzwelt/games/slider/v0/pic_wortblitz_160.svg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53138 GET www.spiegel.de/static/happ/netzwelt/games/slider/v0/pic_doppel_160.svg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy > 172.16.1.51:53137 GET www.spiegel.de/static/happ/netzwelt/games/slider/v0/pic_mahjong_160.svg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:46.873854004 +0100 CET m=+19.112558743 {172.16.1.51 GET www.spiegel.de /static/happ/netzwelt/games/slider/v0/pic_mahjong_160.svg 7946}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53145 GET www.spiegel.de/static/happ/netzwelt/games/slider/v0/pic_skiracer_160.svg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53137 GET www.spiegel.de/static/happ/netzwelt/games/slider/v0/pic_fibonacci_160.svg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53146 GET www.spiegel.de/static/happ/netzwelt/games/slider/v0/pic_gumblast_160.svg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy > 172.16.1.51:53155 GET www.spiegel.de/static/happ/netzwelt/games/slider/v0/pic_solitaire_160.svg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:46.904408526 +0100 CET m=+19.143113286 {172.16.1.51 GET www.spiegel.de /static/happ/netzwelt/games/slider/v0/pic_solitaire_160.svg 13741}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53153 GET www.spiegel.de/staticgen/data_imports/gutscheine/SpiegelHPWidget_Mobile_390x85px_Otto.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53155 GET www.spiegel.de/staticgen/data_imports/gutscheine/SpiegelHPWidget_Mobile_390x85px_Tchibo.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53144 GET www.spiegel.de/staticgen/data_imports/gutscheine/SpiegelHPWidget_Mobile_390x85px_lidl_10-09-18RR.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53143 GET www.spiegel.de/staticgen/data_imports/gutscheine/390x85_AboutYou_new.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy > 172.16.1.51:53156 GET www.spiegel.de/static/happ/netzwelt/games/slider/v0/pic_wimmelbild_160.svg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:46.961196973 +0100 CET m=+19.199901722 {172.16.1.51 GET www.spiegel.de /static/happ/netzwelt/games/slider/v0/pic_wimmelbild_160.svg 19349}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53156 GET www.spiegel.de/static/sys/pixel.gif
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53159 GET cdn1.spiegel.de/images/image-1410048-230_poster_16x9-lhhd-1410048.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy > 172.16.1.51:53157 GET www.spiegel.de/static/happ/netzwelt/games/slider/v0/pic_street_160.svg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:46.990767795 +0100 CET m=+19.229472553 {172.16.1.51 GET www.spiegel.de /static/happ/netzwelt/games/slider/v0/pic_street_160.svg 2437}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:46] [sys.log] [dbg] http.proxy < 172.16.1.51:53157 GET cdn4.spiegel.de/images/image-1407713-520_poster_16x9-qfrx-1407713.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53160 GET cdn4.spiegel.de/images/image-1410003-230_poster_16x9-sbnh-1410003.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53154 GET cdn1.spiegel.de/images/image-1410628-230_poster_16x9-clnx-1410628.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53158 GET www.spiegel.de/static/happ/netzwelt/games/slider/v0/pic_exchange-classic_160.svg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.026760359 +0100 CET m=+19.265465139 {172.16.1.51 GET cdn1.spiegel.de /images/image-1410628-230_poster_16x9-clnx-1410628.jpg 8943}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.027804868 +0100 CET m=+19.266509633 {172.16.1.51 GET www.spiegel.de /static/happ/netzwelt/games/slider/v0/pic_exchange-classic_160.svg 1256}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53136 GET cdn1.spiegel.de/images/image-1101690-thumbflex-mqvg-1101690.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.03104288 +0100 CET m=+19.269747619 {172.16.1.51 GET cdn1.spiegel.de /images/image-1101690-thumbflex-mqvg-1101690.jpg 11499}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53141 GET cdn1.spiegel.de/images/image-1410138-thumbflex-oobi-1410138.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53151 GET cdn1.spiegel.de/images/image-1410454-thumbflex-opqz-1410454.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53134 GET cdn1.spiegel.de/images/image-1094330-210_poster_16x9-oqso-1094330.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.037130155 +0100 CET m=+19.275834908 {172.16.1.51 GET cdn1.spiegel.de /images/image-1410138-thumbflex-oobi-1410138.jpg 14748}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.040552579 +0100 CET m=+19.279257324 {172.16.1.51 GET cdn1.spiegel.de /images/image-1410454-thumbflex-opqz-1410454.jpg 13565}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53161 GET cdn2.spiegel.de/images/image-1410481-230_poster_16x9-rtcs-1410481.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.052544204 +0100 CET m=+19.291248982 {172.16.1.51 GET cdn1.spiegel.de /images/image-1094330-210_poster_16x9-oqso-1094330.jpg 10941}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53157 GET cdn4.spiegel.de/images/image-1407713-520_poster_16x9-qfrx-1407713.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53150 GET cdn1.spiegel.de/images/image-616648-thumbflex-pgvi-616648.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53140 GET cdn1.spiegel.de/images/image-1410698-230_poster_16x9-xusw-1410698.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53152 GET cdn1.spiegel.de/images/image-1410694-230_poster_16x9-fnvg-1410694.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53136 GET cdn2.spiegel.de/images/image-1409501-230_poster_16x9-jpou-1409501.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53160 GET cdn4.spiegel.de/images/image-1410003-230_poster_16x9-sbnh-1410003.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53151 GET cdn3.spiegel.de/images/image-908382-thumbsmall-dtbp-908382.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53139 GET cdn1.spiegel.de/images/image-1410570-520_poster_16x9-dufp-1410570.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53141 GET cdn1.spiegel.de/images/image-1409994-230_poster_16x9-kxvi-1409994.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53131 GET www.spiegel.de/static/happ/netzwelt/games/slider/v0/pic_exchange-challenge_160.svg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53148 GET cdn1.spiegel.de/images/image-1410634-thumbflex-phbx-1410634.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53149 GET cdn1.spiegel.de/images/image-1410594-520_poster_16x9-gqqk-1410594.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53134 GET cdn2.spiegel.de/images/image-1410309-230_poster_16x9-hvkj-1410309.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.071747368 +0100 CET m=+19.310452356 {172.16.1.51 GET cdn4.spiegel.de /images/image-1407713-520_poster_16x9-qfrx-1407713.jpg 42199}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.074600625 +0100 CET m=+19.313305367 {172.16.1.51 GET cdn1.spiegel.de /images/image-616648-thumbflex-pgvi-616648.jpg 22135}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.076749812 +0100 CET m=+19.315454539 {172.16.1.51 GET cdn1.spiegel.de /images/image-1410698-230_poster_16x9-xusw-1410698.jpg 11308}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.077694856 +0100 CET m=+19.316399627 {172.16.1.51 GET cdn1.spiegel.de /images/image-1410694-230_poster_16x9-fnvg-1410694.jpg 16847}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.078942131 +0100 CET m=+19.317646867 {172.16.1.51 GET cdn4.spiegel.de /images/image-1410003-230_poster_16x9-sbnh-1410003.jpg 12102}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.086400852 +0100 CET m=+19.325105590 {172.16.1.51 GET cdn1.spiegel.de /images/image-1410570-520_poster_16x9-dufp-1410570.jpg 56466}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53161 GET cdn2.spiegel.de/images/image-1410481-230_poster_16x9-rtcs-1410481.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.102807554 +0100 CET m=+19.341512306 {172.16.1.51 GET www.spiegel.de /static/happ/netzwelt/games/slider/v0/pic_exchange-challenge_160.svg 1301}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.105782094 +0100 CET m=+19.344486841 {172.16.1.51 GET cdn1.spiegel.de /images/image-1410634-thumbflex-phbx-1410634.jpg 22781}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.115376466 +0100 CET m=+19.354081231 {172.16.1.51 GET cdn1.spiegel.de /images/image-1410594-520_poster_16x9-gqqk-1410594.jpg 44620}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.117082825 +0100 CET m=+19.355787560 {172.16.1.51 GET cdn2.spiegel.de /images/image-1410481-230_poster_16x9-rtcs-1410481.jpg 11355}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53151 GET cdn3.spiegel.de/images/image-908382-thumbsmall-dtbp-908382.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.118641415 +0100 CET m=+19.357346153 {172.16.1.51 GET cdn3.spiegel.de /images/image-908382-thumbsmall-dtbp-908382.jpg 3268}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53131 GET www.spiegel.de/static/sys/v10/icons/ic_search_magnifier.png
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53160 GET cdn2.spiegel.de/images/image-1409235-230_poster_16x9-gpht-1409235.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53147 GET www.spiegel.de/static/happ/netzwelt/games/slider/v0/pic_rushtower_160.svg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.120124513 +0100 CET m=+19.358829337 {172.16.1.51 GET www.spiegel.de /static/happ/netzwelt/games/slider/v0/pic_rushtower_160.svg 2797}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53136 GET cdn2.spiegel.de/images/image-1409501-230_poster_16x9-jpou-1409501.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.125012832 +0100 CET m=+19.363717585 {172.16.1.51 GET cdn2.spiegel.de /images/image-1409501-230_poster_16x9-jpou-1409501.jpg 24356}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53159 GET cdn1.spiegel.de/images/image-1410048-230_poster_16x9-lhhd-1410048.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.128192373 +0100 CET m=+19.366897121 {172.16.1.51 GET cdn1.spiegel.de /images/image-1410048-230_poster_16x9-lhhd-1410048.jpg 10900}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53141 GET cdn1.spiegel.de/images/image-1409994-230_poster_16x9-kxvi-1409994.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.140767837 +0100 CET m=+19.379472578 {172.16.1.51 GET cdn1.spiegel.de /images/image-1409994-230_poster_16x9-kxvi-1409994.jpg 12749}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53157 GET cdn2.spiegel.de/images/image-1410659-640_panofree-fstr-1410659.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53139 GET cdn1.spiegel.de/images/image-1408498-640_panofree-uyvv-1408498.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53148 GET cdn1.spiegel.de/images/image-1286068-thumbsmall-bavp-1286068.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53136 GET cdn1.spiegel.de/images/image-1410388-280_poster_16x9-mzwt-1410388.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53142 GET www.spiegel.de/static/happ/netzwelt/games/slider/v0/pic_wortblitz_160.svg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.150407452 +0100 CET m=+19.389112227 {172.16.1.51 GET www.spiegel.de /static/happ/netzwelt/games/slider/v0/pic_wortblitz_160.svg 3472}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53134 GET cdn2.spiegel.de/images/image-1410309-230_poster_16x9-hvkj-1410309.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.151667008 +0100 CET m=+19.390371765 {172.16.1.51 GET cdn2.spiegel.de /images/image-1410309-230_poster_16x9-hvkj-1410309.jpg 10176}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53160 GET cdn2.spiegel.de/images/image-1409235-230_poster_16x9-gpht-1409235.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.174481902 +0100 CET m=+19.413186656 {172.16.1.51 GET cdn2.spiegel.de /images/image-1409235-230_poster_16x9-gpht-1409235.jpg 13814}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53139 GET cdn1.spiegel.de/images/image-1408498-640_panofree-uyvv-1408498.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53148 GET cdn1.spiegel.de/images/image-1286068-thumbsmall-bavp-1286068.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.181552078 +0100 CET m=+19.420256813 {172.16.1.51 GET cdn1.spiegel.de /images/image-1286068-thumbsmall-bavp-1286068.jpg 3074}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.182088689 +0100 CET m=+19.420793416 {172.16.1.51 GET cdn1.spiegel.de /images/image-1408498-640_panofree-uyvv-1408498.jpg 16723}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53149 GET www.spiegel.de/images/image-1371817-custom-ltxd.png
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53139 GET cdn1.spiegel.de/images/image-1278408-280_poster_16x9-wyag-1278408.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53148 GET cdn3.spiegel.de/images/image-1408356-280_poster_16x9-lnji-1408356.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53150 GET cdn4.spiegel.de/images/image-1284087-thumb-vrqh-1284087.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53138 GET www.spiegel.de/static/happ/netzwelt/games/slider/v0/pic_doppel_160.svg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.197812154 +0100 CET m=+19.436516890 {172.16.1.51 GET www.spiegel.de /static/happ/netzwelt/games/slider/v0/pic_doppel_160.svg 1601}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53156 GET www.spiegel.de/static/sys/pixel.gif
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.198738913 +0100 CET m=+19.437443648 {172.16.1.51 GET www.spiegel.de /static/sys/pixel.gif 43}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53131 GET www.spiegel.de/static/sys/v10/icons/ic_search_magnifier.png
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.199817843 +0100 CET m=+19.438522620 {172.16.1.51 GET www.spiegel.de /static/sys/v10/icons/ic_search_magnifier.png 287}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53144 GET www.spiegel.de/staticgen/data_imports/gutscheine/SpiegelHPWidget_Mobile_390x85px_lidl_10-09-18RR.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53145 GET www.spiegel.de/static/happ/netzwelt/games/slider/v0/pic_skiracer_160.svg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53143 GET www.spiegel.de/staticgen/data_imports/gutscheine/390x85_AboutYou_new.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53137 GET www.spiegel.de/static/happ/netzwelt/games/slider/v0/pic_fibonacci_160.svg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53136 GET cdn1.spiegel.de/images/image-1410388-280_poster_16x9-mzwt-1410388.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53152 GET cdn3.spiegel.de/images/image-1044072-thumbsmall-gdxx-1044072.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.219158042 +0100 CET m=+19.457862792 {172.16.1.51 GET www.spiegel.de /staticgen/data_imports/gutscheine/SpiegelHPWidget_Mobile_390x85px_lidl_10-09-18RR.jpg 13257}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.227520489 +0100 CET m=+19.466225244 {172.16.1.51 GET www.spiegel.de /static/happ/netzwelt/games/slider/v0/pic_skiracer_160.svg 2834}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53131 GET cdn1.spiegel.de/images/image-1410600-520_poster_16x9-gxuo-1410600.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53138 GET cdn2.spiegel.de/images/image-19951-280_poster_16x9-gtgh-19951.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.237953253 +0100 CET m=+19.476658008 {172.16.1.51 GET www.spiegel.de /staticgen/data_imports/gutscheine/390x85_AboutYou_new.jpg 9213}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.238340552 +0100 CET m=+19.477045280 {172.16.1.51 GET www.spiegel.de /static/happ/netzwelt/games/slider/v0/pic_fibonacci_160.svg 16976}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.239321353 +0100 CET m=+19.478026081 {172.16.1.51 GET cdn1.spiegel.de /images/image-1410388-280_poster_16x9-mzwt-1410388.jpg 20380}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53157 GET cdn2.spiegel.de/images/image-1410659-640_panofree-fstr-1410659.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53153 GET www.spiegel.de/staticgen/data_imports/gutscheine/SpiegelHPWidget_Mobile_390x85px_Otto.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53148 GET cdn3.spiegel.de/images/image-1408356-280_poster_16x9-lnji-1408356.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53155 GET www.spiegel.de/staticgen/data_imports/gutscheine/SpiegelHPWidget_Mobile_390x85px_Tchibo.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53139 GET cdn1.spiegel.de/images/image-1278408-280_poster_16x9-wyag-1278408.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53146 GET www.spiegel.de/static/happ/netzwelt/games/slider/v0/pic_gumblast_160.svg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53141 GET cdn2.spiegel.de/images/image-1286119-thumbsmall-ggop-1286119.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53156 GET www.spiegel.de/static/sys/v10/buttons/btn_refresh.png
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53150 GET cdn4.spiegel.de/images/image-1284087-thumb-vrqh-1284087.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53145 GET cdn2.spiegel.de/images/image-1410531-520_poster_16x9-ucgp-1410531.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53137 GET cdn4.spiegel.de/images/image-1365483-thumbsmall-jxuj-1365483.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53152 GET cdn3.spiegel.de/images/image-1044072-thumbsmall-gdxx-1044072.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53160 GET cdn4.spiegel.de/images/image-1410643-210_poster_16x9-klub-1410643.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.259021768 +0100 CET m=+19.497726508 {172.16.1.51 GET cdn2.spiegel.de /images/image-1410659-640_panofree-fstr-1410659.jpg 54477}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.269415205 +0100 CET m=+19.508119985 {172.16.1.51 GET www.spiegel.de /staticgen/data_imports/gutscheine/SpiegelHPWidget_Mobile_390x85px_Otto.jpg 10168}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.289425503 +0100 CET m=+19.528130230 {172.16.1.51 GET cdn3.spiegel.de /images/image-1408356-280_poster_16x9-lnji-1408356.jpg 11134}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.290727165 +0100 CET m=+19.529431921 {172.16.1.51 GET www.spiegel.de /staticgen/data_imports/gutscheine/SpiegelHPWidget_Mobile_390x85px_Tchibo.jpg 9726}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53156 GET www.spiegel.de/static/sys/v10/buttons/btn_refresh.png
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53157 GET cdn4.spiegel.de/images/image-1284087-thumbsmall-vrqh-1284087.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53131 GET cdn1.spiegel.de/images/image-1410600-520_poster_16x9-gxuo-1410600.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.308706682 +0100 CET m=+19.547411435 {172.16.1.51 GET cdn1.spiegel.de /images/image-1410600-520_poster_16x9-gxuo-1410600.jpg 21695}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53138 GET cdn2.spiegel.de/images/image-19951-280_poster_16x9-gtgh-19951.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53149 GET www.spiegel.de/images/image-1371817-custom-ltxd.png
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53137 GET cdn4.spiegel.de/images/image-1365483-thumbsmall-jxuj-1365483.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.310996963 +0100 CET m=+19.549701697 {172.16.1.51 GET cdn1.spiegel.de /images/image-1278408-280_poster_16x9-wyag-1278408.jpg 12794}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.311498727 +0100 CET m=+19.550203466 {172.16.1.51 GET www.spiegel.de /static/happ/netzwelt/games/slider/v0/pic_gumblast_160.svg 4589}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.315002846 +0100 CET m=+19.553707572 {172.16.1.51 GET cdn4.spiegel.de /images/image-1284087-thumb-vrqh-1284087.jpg 10313}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.31564765 +0100 CET m=+19.554352406 {172.16.1.51 GET www.spiegel.de /static/sys/v10/buttons/btn_refresh.png 436}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.317697024 +0100 CET m=+19.556401751 {172.16.1.51 GET cdn3.spiegel.de /images/image-1044072-thumbsmall-gdxx-1044072.jpg 3171}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53141 GET cdn2.spiegel.de/images/image-1286119-thumbsmall-ggop-1286119.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.318793023 +0100 CET m=+19.557497779 {172.16.1.51 GET cdn2.spiegel.de /images/image-19951-280_poster_16x9-gtgh-19951.jpg 31985}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.319818704 +0100 CET m=+19.558523461 {172.16.1.51 GET www.spiegel.de /images/image-1371817-custom-ltxd.png 3478}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.320618188 +0100 CET m=+19.559322927 {172.16.1.51 GET cdn4.spiegel.de /images/image-1365483-thumbsmall-jxuj-1365483.jpg 3297}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.323307185 +0100 CET m=+19.562011945 {172.16.1.51 GET cdn2.spiegel.de /images/image-1286119-thumbsmall-ggop-1286119.jpg 3410}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53138 GET www.spiegel.de/static/_common/sys/V1/logo/spplus/splus_icon_small.png
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53149 GET www.spiegel.de/static/sys/v12/logo/bento/bento-158x38.png
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53148 GET www.spiegel.de/static/sys/v12/logo/bento/bento-inline-134x28.png
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53136 GET www.spiegel.de/static/sys/v12/logo/planestream-207x45.png
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53139 GET www.spiegel.de/static/sys/v12/logo/sptv-sw-112x24.png
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53131 GET www.spiegel.de/static/sys/v12/logo/logos_sprite_1786.min.svg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53137 GET cdn2.spiegel.de/images/image-1286029-thumbsmall-wrnq-1286029.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53150 GET cdn1.spiegel.de/images/image-1370448-thumbsmall-zdrl-1370448.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53160 GET cdn4.spiegel.de/images/image-1410643-210_poster_16x9-klub-1410643.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53157 GET cdn4.spiegel.de/images/image-1284087-thumbsmall-vrqh-1284087.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.367847114 +0100 CET m=+19.606551874 {172.16.1.51 GET cdn4.spiegel.de /images/image-1410643-210_poster_16x9-klub-1410643.jpg 7623}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53145 GET cdn2.spiegel.de/images/image-1410531-520_poster_16x9-ucgp-1410531.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.370997414 +0100 CET m=+19.609702179 {172.16.1.51 GET cdn2.spiegel.de /images/image-1410531-520_poster_16x9-ucgp-1410531.jpg 22778}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.372556568 +0100 CET m=+19.611261326 {172.16.1.51 GET cdn4.spiegel.de /images/image-1284087-thumbsmall-vrqh-1284087.jpg 3826}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53156 GET cdn1.spiegel.de/images/image-1286060-thumbsmall-hett-1286060.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53149 GET www.spiegel.de/static/sys/v12/logo/bento/bento-158x38.png
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.374272828 +0100 CET m=+19.612977564 {172.16.1.51 GET www.spiegel.de /static/sys/v12/logo/bento/bento-158x38.png 2509}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53150 GET cdn1.spiegel.de/images/image-1370448-thumbsmall-zdrl-1370448.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.37610002 +0100 CET m=+19.614804791 {172.16.1.51 GET cdn1.spiegel.de /images/image-1370448-thumbsmall-zdrl-1370448.jpg 3415}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53152 GET cdn4.spiegel.de/images/image-1020843-thumbsmall-ofin-1020843.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53137 GET cdn2.spiegel.de/images/image-1286029-thumbsmall-wrnq-1286029.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.381410139 +0100 CET m=+19.620114879 {172.16.1.51 GET cdn2.spiegel.de /images/image-1286029-thumbsmall-wrnq-1286029.jpg 3786}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53138 GET www.spiegel.de/static/_common/sys/V1/logo/spplus/splus_icon_small.png
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.383655079 +0100 CET m=+19.622359825 {172.16.1.51 GET www.spiegel.de /static/_common/sys/V1/logo/spplus/splus_icon_small.png 684}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53157 GET cdn1.spiegel.de/images/image-1363858-thumbsmall-nhoy-1363858.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53137 GET cdn4.spiegel.de/images/image-1286073-thumbsmall-ymjw-1286073.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53156 GET cdn1.spiegel.de/images/image-1286060-thumbsmall-hett-1286060.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.399324597 +0100 CET m=+19.638029337 {172.16.1.51 GET cdn1.spiegel.de /images/image-1286060-thumbsmall-hett-1286060.jpg 3501}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53149 GET cdn2.spiegel.de/images/image-1410359-280_poster_16x9-rkan-1410359.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53152 GET cdn4.spiegel.de/images/image-1020843-thumbsmall-ofin-1020843.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.414498957 +0100 CET m=+19.653203692 {172.16.1.51 GET cdn4.spiegel.de /images/image-1020843-thumbsmall-ofin-1020843.jpg 3833}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53148 GET www.spiegel.de/static/sys/v12/logo/bento/bento-inline-134x28.png
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.416020692 +0100 CET m=+19.654725446 {172.16.1.51 GET www.spiegel.de /static/sys/v12/logo/bento/bento-inline-134x28.png 1742}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53157 GET cdn1.spiegel.de/images/image-1363858-thumbsmall-nhoy-1363858.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.419991343 +0100 CET m=+19.658696094 {172.16.1.51 GET cdn1.spiegel.de /images/image-1363858-thumbsmall-nhoy-1363858.jpg 3538}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53137 GET cdn4.spiegel.de/images/image-1286073-thumbsmall-ymjw-1286073.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53138 GET cdn4.spiegel.de/images/image-1410263-280_poster_16x9-tggc-1410263.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.424772372 +0100 CET m=+19.663477143 {172.16.1.51 GET cdn4.spiegel.de /images/image-1286073-thumbsmall-ymjw-1286073.jpg 3113}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53137 GET www.spiegel.de/staticgen/boerse/spv10dax470x120.png
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53136 GET www.spiegel.de/static/sys/v12/logo/planestream-207x45.png
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.427998294 +0100 CET m=+19.666703064 {172.16.1.51 GET www.spiegel.de /static/sys/v12/logo/planestream-207x45.png 5411}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53157 GET www.spiegel.de/static/sys/v12/logo/bento/bento_172x44.png
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53149 GET cdn2.spiegel.de/images/image-1410359-280_poster_16x9-rkan-1410359.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53136 GET cdn1.spiegel.de/images/image-1410658-210_poster_16x9-dpuj-1410658.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53139 GET www.spiegel.de/static/sys/v12/logo/sptv-sw-112x24.png
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.449712674 +0100 CET m=+19.688417448 {172.16.1.51 GET cdn2.spiegel.de /images/image-1410359-280_poster_16x9-rkan-1410359.jpg 15500}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.450328111 +0100 CET m=+19.689032855 {172.16.1.51 GET www.spiegel.de /static/sys/v12/logo/sptv-sw-112x24.png 501}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53138 GET cdn4.spiegel.de/images/image-1410263-280_poster_16x9-tggc-1410263.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53149 GET cdn4.spiegel.de/images/image-1410363-210_poster_16x9-sxby-1410363.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53139 GET cdn1.spiegel.de/images/image-1409960-210_poster_16x9-cifx-1409960.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.483090209 +0100 CET m=+19.721794955 {172.16.1.51 GET cdn4.spiegel.de /images/image-1410263-280_poster_16x9-tggc-1410263.jpg 18009}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53137 GET www.spiegel.de/staticgen/boerse/spv10dax470x120.png
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.484230944 +0100 CET m=+19.722935677 {172.16.1.51 GET www.spiegel.de /staticgen/boerse/spv10dax470x120.png 6911}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53136 GET cdn1.spiegel.de/images/image-1410658-210_poster_16x9-dpuj-1410658.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53148 GET www.spiegel.de/images/image-1027436-custom-emaa.png
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.485941244 +0100 CET m=+19.724645982 {172.16.1.51 GET cdn1.spiegel.de /images/image-1410658-210_poster_16x9-dpuj-1410658.jpg 7785}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53145 GET www.spiegel.de/static/_common/sys/V1/logo/spplus/spiegel-plus_logo_rot.svg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53131 GET www.spiegel.de/static/sys/v12/logo/logos_sprite_1786.min.svg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.488450228 +0100 CET m=+19.727154975 {172.16.1.51 GET www.spiegel.de /static/sys/v12/logo/logos_sprite_1786.min.svg 27349}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53131 GET www.spiegel.de/static/sys/v12/logo/daily/logo_sp-daily.svg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53137 GET cdn4.spiegel.de/images/image-1408997-520_poster_16x9-mehn-1408997.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53149 GET cdn4.spiegel.de/images/image-1410363-210_poster_16x9-sxby-1410363.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.518017781 +0100 CET m=+19.756722538 {172.16.1.51 GET cdn4.spiegel.de /images/image-1410363-210_poster_16x9-sxby-1410363.jpg 6673}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53148 GET www.spiegel.de/images/image-1027436-custom-emaa.png
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53138 GET cdn2.spiegel.de/images/image-1366241-210_poster_16x9-ldyx-1366241.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.528109525 +0100 CET m=+19.766814274 {172.16.1.51 GET www.spiegel.de /images/image-1027436-custom-emaa.png 1802}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53157 GET www.spiegel.de/static/sys/v12/logo/bento/bento_172x44.png
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.528945117 +0100 CET m=+19.767649857 {172.16.1.51 GET www.spiegel.de /static/sys/v12/logo/bento/bento_172x44.png 5374}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53139 GET cdn1.spiegel.de/images/image-1409960-210_poster_16x9-cifx-1409960.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.531768648 +0100 CET m=+19.770473429 {172.16.1.51 GET cdn1.spiegel.de /images/image-1409960-210_poster_16x9-cifx-1409960.jpg 10654}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53137 GET cdn4.spiegel.de/images/image-1408997-520_poster_16x9-mehn-1408997.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.542698705 +0100 CET m=+19.781403454 {172.16.1.51 GET cdn4.spiegel.de /images/image-1408997-520_poster_16x9-mehn-1408997.jpg 18595}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53145 GET www.spiegel.de/static/_common/sys/V1/logo/spplus/spiegel-plus_logo_rot.svg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.556799797 +0100 CET m=+19.795504531 {172.16.1.51 GET www.spiegel.de /static/_common/sys/V1/logo/spplus/spiegel-plus_logo_rot.svg 3156}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53138 GET cdn2.spiegel.de/images/image-1366241-210_poster_16x9-ldyx-1366241.jpg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.566509103 +0100 CET m=+19.805213854 {172.16.1.51 GET cdn2.spiegel.de /images/image-1366241-210_poster_16x9-ldyx-1366241.jpg 7834}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53131 GET www.spiegel.de/static/sys/v12/logo/daily/logo_sp-daily.svg
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.567926951 +0100 CET m=+19.806631696 {172.16.1.51 GET www.spiegel.de /static/sys/v12/logo/daily/logo_sp-daily.svg 2400}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53137 GET www.spiegel.de/favicon.ico
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy < 172.16.1.51:53131 GET www.spiegel.de/static/sys/v12/logo/favicon/touch-icon152.png
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53137 GET www.spiegel.de/favicon.ico
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.657271351 +0100 CET m=+19.895976125 {172.16.1.51 GET www.spiegel.de /favicon.ico 1406}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [sys.log] [dbg] http.proxy > 172.16.1.51:53131 GET www.spiegel.de/static/sys/v12/logo/favicon/touch-icon152.png
172.16.0.0/23 > 172.16.0.180 ยป [14:15:47] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:47.67239603 +0100 CET m=+19.911100770 {172.16.1.51 GET www.spiegel.de /static/sys/v12/logo/favicon/touch-icon152.png 1914}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:48] [sys.log] [dbg] http.proxy < 172.16.1.51:53119 GET detectportal.firefox.com/success.txt
172.16.0.0/23 > 172.16.0.180 ยป [14:15:48] [sys.log] [dbg] http.proxy > 172.16.1.51:53119 GET detectportal.firefox.com/success.txt
172.16.0.0/23 > 172.16.0.180 ยป [14:15:48] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:48.279179093 +0100 CET m=+20.517883827 {172.16.1.51 GET detectportal.firefox.com /success.txt 9}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:51] [sys.log] [dbg] http.proxy < 172.16.1.51:53119 GET detectportal.firefox.com/success.txt
172.16.0.0/23 > 172.16.0.180 ยป [14:15:51] [sys.log] [dbg] http.proxy > 172.16.1.51:53119 GET detectportal.firefox.com/success.txt
172.16.0.0/23 > 172.16.0.180 ยป [14:15:51] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:51.300041655 +0100 CET m=+23.538746398 {172.16.1.51 GET detectportal.firefox.com /success.txt 9}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:54] [sys.log] [dbg] http.proxy < 172.16.1.51:53119 GET detectportal.firefox.com/success.txt
172.16.0.0/23 > 172.16.0.180 ยป [14:15:54] [sys.log] [dbg] http.proxy > 172.16.1.51:53119 GET detectportal.firefox.com/success.txt
172.16.0.0/23 > 172.16.0.180 ยป [14:15:54] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:54.320857326 +0100 CET m=+26.559562104 {172.16.1.51 GET detectportal.firefox.com /success.txt 9}}
172.16.0.0/23 > 172.16.0.180 ยป [14:15:57] [sys.log] [dbg] http.proxy < 172.16.1.51:53119 GET detectportal.firefox.com/success.txt
172.16.0.0/23 > 172.16.0.180 ยป [14:15:57] [sys.log] [dbg] http.proxy > 172.16.1.51:53119 GET detectportal.firefox.com/success.txt
172.16.0.0/23 > 172.16.0.180 ยป [14:15:57] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:15:57.34137885 +0100 CET m=+29.580083631 {172.16.1.51 GET detectportal.firefox.com /success.txt 9}}
172.16.0.0/23 > 172.16.0.180 ยป [14:16:00] [sys.log] [dbg] http.proxy < 172.16.1.51:53119 GET detectportal.firefox.com/success.txt
172.16.0.0/23 > 172.16.0.180 ยป [14:16:00] [sys.log] [dbg] http.proxy > 172.16.1.51:53119 GET detectportal.firefox.com/success.txt
172.16.0.0/23 > 172.16.0.180 ยป [14:16:00] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:16:00.36150515 +0100 CET m=+32.600209882 {172.16.1.51 GET detectportal.firefox.com /success.txt 9}}
172.16.0.0/23 > 172.16.0.180 ยป [14:16:03] [sys.log] [dbg] http.proxy < 172.16.1.51:53119 GET detectportal.firefox.com/success.txt
172.16.0.0/23 > 172.16.0.180 ยป [14:16:03] [sys.log] [dbg] http.proxy > 172.16.1.51:53119 GET detectportal.firefox.com/success.txt
172.16.0.0/23 > 172.16.0.180 ยป [14:16:03] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:16:03.382775209 +0100 CET m=+35.621479945 {172.16.1.51 GET detectportal.firefox.com /success.txt 9}}
172.16.0.0/23 > 172.16.0.180 ยป [14:16:06] [sys.log] [dbg] http.proxy < 172.16.1.51:53119 GET detectportal.firefox.com/success.txt
172.16.0.0/23 > 172.16.0.180 ยป [14:16:06] [sys.log] [dbg] http.proxy > 172.16.1.51:53119 GET detectportal.firefox.com/success.txt
172.16.0.0/23 > 172.16.0.180 ยป [14:16:06] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:16:06.404698463 +0100 CET m=+38.643403203 {172.16.1.51 GET detectportal.firefox.com /success.txt 9}}
172.16.0.0/23 > 172.16.0.180 ยป [14:16:09] [sys.log] [dbg] http.proxy < 172.16.1.51:53119 GET detectportal.firefox.com/success.txt
172.16.0.0/23 > 172.16.0.180 ยป [14:16:09] [sys.log] [dbg] http.proxy > 172.16.1.51:53119 GET detectportal.firefox.com/success.txt
172.16.0.0/23 > 172.16.0.180 ยป [14:16:09] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:16:09.426895738 +0100 CET m=+41.665600473 {172.16.1.51 GET detectportal.firefox.com /success.txt 9}}
172.16.0.0/23 > 172.16.0.180 ยป [14:16:12] [sys.log] [dbg] http.proxy < 172.16.1.51:53119 GET detectportal.firefox.com/success.txt
172.16.0.0/23 > 172.16.0.180 ยป [14:16:12] [sys.log] [dbg] http.proxy > 172.16.1.51:53119 GET detectportal.firefox.com/success.txt
172.16.0.0/23 > 172.16.0.180 ยป [14:16:12] [http.proxy.spoofed-response] {http.proxy.spoofed-response 2019-03-27 14:16:12.450313049 +0100 CET m=+44.689017788 {172.16.1.51 GET detectportal.firefox.com /success.txt 9}}

it seems like pictures were spoofed: but nothing happend to the html-code....

question

All 5 comments

as far as i see the module is working correctly (the responses are spoofed), you probably are just using the wrong expression for doing that, as that replace will cause img tags with multiple src attributes, and i have no idea how the browser renders that.

@fugitivus also note that your image replacement breaks the img element, because you are selecting an unclosed <img element which you then replace with a closed img element: <img .../>

You should, like evilsocket pointed out, replace the entire <img ...> with your image.

Regexp example:

res.Body = res.Body.replace(/<img .*?>/ig, "<img src='http://image.com/someimage.jpg'>")

@yungtravla, @evilsocket
The Image Tag will be replaced succesfull, but only on the first line in html-source. I have testet that behavior with following line, but it replaces the

code:
res.Body = body.replace( '

do i need a loop or something ?!? didn't find any option to replace all img - tags

ok... worked with your solution @yungtravla.

i didn't understand that --> //ig <-- statement, can you explain it to me ?!? Please?

ok, seems to me that i have to learn regexp... thanks for your advice!

Was this page helpful?
0 / 5 - 0 ratings