[ale] Ethereal

[Jerry Yu]

I believe this question was answered in a previous thread. basically, if you
browse to https://terry.com/protectedDir, then the basic AUTH info
(username/password) is encrypted by SSL, just like other HTTP data and
headers.

On Tue, Apr 1, 2008 at 8:34 PM, Terry Bailey <terry at bitlinx.com> wrote:

>
> Thanks, that was the problem.  I am still not sure of the following,
> however.  If SSL is used does the SSL kick in before the username and
> password are asked for.  That is, is it the case that username and
> password encrypted over The Net?  The yellow does not appear in
> Firefox until after the username and password are entered.
>
>
> At 05:48 PM 4/1/2008, you wrote:
> >You may need to increase the amount of data that
> >Ethereal (which is now called wireshark) grabs per packet.  I know
> >that tcpdump by default only grabs something like the first 80 bytes
> >of each packet  I'm not sure what ethereal does in this regard, but
> >i suspect that it is similar.
> >
> >HTH
> >-Tim
> >-----Original Message-----
> >From: "Terry Bailey" <terry at bitlinx.com>
> >To: ale at ale.org
> >Sent: 4/1/2008 4:51 PM
> >Subject: [ale] Ethereal
> >
> >
> >Hi,
> >
> >I am using Ethereal to sniff the network card on my PC.  When I
> >access a page on a server that requires authorization (i.e.,
> >username/password that is triggered by </Directory/> in httpd.conf)
> >the username nor password shows up in the Ethereal output.  I even
> >tried using the encrypted form of the password.
> >
> >Why is this true?
> >
> >Thanks,
> >
> >Terry Bailey
> >
> >_______________________________________________
> >Ale mailing list
> >Ale at ale.org
> >http://mail.ale.org/mailman/listinfo/ale
> >
> >
> >_______________________________________________
> >Ale mailing list
> >Ale at ale.org
> >http://mail.ale.org/mailman/listinfo/ale
>
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://mail.ale.org/mailman/listinfo/ale
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.ale.org/pipermail/ale/attachments/20080401/b450d6be/attachment.html