nahoR
Well-Known Member
Its not entirely like wireshark. It is a proxy for web traffic. How ever you are able to decrypt SSL traffic.
-
Join the MyBroadband community
South Africa’s biggest forum. Discuss, discover, and connect with thousands of members.
-
Question of the Day: What is your preferred Chinese car brand?
Afrihost Uncapped ADSL Feedback (Pt3)
- Thread starter bwana
- Start date
- Status
wingnut771
Honorary Master
What is the point in using SSL then?
nahoR
Well-Known Member
I wanted to write a windows sidebar gadget which shows data usage and shaping policies of my afrihost account. So I used this to see what the web request packets look like, see whats sent and received when you login to clientzone and what cookies are created.
It is able to decrypt it by doing a man in the middle. It creates its own certificates I am assuming thats how it is able to decrypt the traffic
POST https://clientzone.afrihost.com/en/login_check HTTP/1.1
Host: clientzone.afrihost.com
Connection: keep-alive
Content-Length: 55
Cache-Control: max-age=0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Origin: https://clientzone.afrihost.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.137 Safari/537.36
Content-Type: application/x-www-form-urlencoded
Referer: https://clientzone.afrihost.com/en/login
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8,de;q=0.6
Cookie: __unam=***; exp_last_visit=***; exp_last_activity=***; myCZ=CZ2; clientzone=q**; __utma=**; __utmb=***; __utmc=**; __utmz=195313532.1400578023.32.4.utmcsr=google|utmccn=(organic)|utmcmd=organic|utmctr=(not%20provided)
_username=*******%40gmail.com&_password=********
I replaced everything that might be private
But yes, everything is exposed
It is able to decrypt it by doing a man in the middle. It creates its own certificates I am assuming thats how it is able to decrypt the traffic
POST https://clientzone.afrihost.com/en/login_check HTTP/1.1
Host: clientzone.afrihost.com
Connection: keep-alive
Content-Length: 55
Cache-Control: max-age=0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Origin: https://clientzone.afrihost.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.137 Safari/537.36
Content-Type: application/x-www-form-urlencoded
Referer: https://clientzone.afrihost.com/en/login
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8,de;q=0.6
Cookie: __unam=***; exp_last_visit=***; exp_last_activity=***; myCZ=CZ2; clientzone=q**; __utma=**; __utmb=***; __utmc=**; __utmz=195313532.1400578023.32.4.utmcsr=google|utmccn=(organic)|utmcmd=organic|utmctr=(not%20provided)
_username=*******%40gmail.com&_password=********
I replaced everything that might be private
But yes, everything is exposed
Last edited:
Vorastra
Honorary Master
Hell yeah, gotta love that shaping at 9:30PM. On the FULLY upgraded East IPC.
nahoR
Well-Known Member
Nope
Can you post the full trace - sounds like this may be related to congestion in your area if it's time based. No additional latency on the network in general last night
There's something going on with your local network. Ping to the router is 20-30ms which is pretty crazy. Either your network is congested with connections, or there is something wrong with the WiFi or LAN connection
As I mentioned before, there will always be shaping to some extent, and that will depend on demand. As long as we're able to unshape or shape a lot less for reasonable periods, and the demand is not consistent.
We'll continue tweaking, but in general we feel that the East is offering good value and a good experience for a semi-shaped Uncapped product.
Orihalcon
Expert Member
AFriman...tell AFriguy to check his messages 
AFriman...tell AFriguy to check his messages
LOL - I think he's still dealing with last night's Xbox hangover. Maybe forward to me
Dialup line?
Sinbad
Honorary Master
- Joined
- Jun 5, 2006
- Messages
- 88,887
- Reaction score
- 41,529
Kilobytes, but not far off
I am likewise finding that shaping is too heavy.
My German streaming is working again.
@Afriman: I too use tagging to shape my data. I am familiar with the routing, though likely don't use heuristics, DPI and such fancy methods to tag my packets. It is however clear that "real-time service"s aren't adequately profiled yet because when I relay them over VPS instances in different locations I get differing throughput.
Work related data now goes over 3G for the last months. CellC far outperforms Afrihost's deemed 12%/6% shaping for a low utilization 10 meg uncapped user.
Do you allow multiple DSL accounts over one line? Perhaps go down to a 2 meg uncapped business line and have a capped account for work use and browsing (cannot download updates and the like at 12% and 6% of line speed)? Mikrotik doesn't care if the modem is a bridge device.
We haven't changed anything in our policies or how we shape, so it means it could not have been related to shaping.
I'd be happy to pass on your feedback to the team the designs our systems. They implement systems in the US, EU, etc, and I do believe they know what they are talking about.
Hi AfriMan,
Forgive me if this has already been answered but could you please clear up the following for me;
I'm running a 10mb line at home with your 10Mb uncapped product. During the ongoing shaping fun we are having, if the shaping policy states 6,25% surely any nntp traffic should run at 62,5kbps and not the average of 27kbps I get now?
Thanks
Forgive me if this has already been answered but could you please clear up the following for me;
I'm running a 10mb line at home with your 10Mb uncapped product. During the ongoing shaping fun we are having, if the shaping policy states 6,25% surely any nntp traffic should run at 62,5kbps and not the average of 27kbps I get now?
Thanks
- Status