Wireshark · Wireshark-users: Re: [Wireshark-users] Duplicate HTTPS requests from iOS

[Samuel Vogel <samuel.vogel@xxxxxxxxxx>]

Hi Sake,

sure, I've uploaded it here: http://www.cloudshark.org/captures/3e090ddc98f7

I guess I can't upload the SSL session keys since I only used the free trial, so here they are:

RSA Session-ID:50806a95d1bea0c5a1b314fd8e4d640321e7b36e5d7688470a9acf38a3be4940 Master-Key:0798892ba66d7e8f871b29695376448f36d0cf62782d71ffeb5f00053d6bf40d748ee09a08a9f7cb2af126d8347be03a

RSA Session-ID:ee9b65af2853b7bf509626dad8870f0c7763ea8f58b5cf8abf93db94e26b4eaf Master-Key:76b6d85b44e63591be672ea4897acf6dba3ff62be808f0fb6efca0432dc067250fa3359da617dd4de9d785d3c7c92bc3

RSA Session-ID:0924fb3570189e7ec9e34180bd276eb06c2469035c260c1a149fdf16827ecdd9 Master-Key:4d0c67fef8afa63039877726369e08c53a21dbc5fdd3be46f8b513edb24674863c032539d7abd617f5c21e9c8d8deb3f

Thanks for your help!

Best Regards,

Samuel

--

Samuel Vogel
Technical Director

VIISON GmbH - Think Design Create
Poststraße 9
64293 Darmstadt
Office: +49 (0) 6151 / 629 30 0
Mobile: +49 (0) 6151 / 629 30 10
Fax: +49 (0) 6151 / 629 30 40
Mail: samuel.vogel@xxxxxxxxxx
Web: http://www.viison.com

Handelsregister: Amtsgericht Darmstadt, HRB 91274
Geschäftsführer: Samuel Vogel

2013/7/31 Sake Blok <sake@xxxxxxxxxx>

On 30 jul 2013, at 19:21, Samuel Vogel wrote:

> I'm debugging a situation where we see duplicate HTTPS requests from iOS 5 & 6 devices with nginx 1.4.1. The first request seems to be cancelled by the client, but the package gets lost and now the new, repeated and the original request are both executed. This way the article ends up in the shopping cart twice.
>
> Only one request is actually seen by iOS Safari / jQuery. This issue is reproducible most of the time (lets say 75 % of the cases) on two completely different servers with different hosting providers (Hetzner & Host Europe in Germany) but not with different browsers. It always follows the exact same pattern.
> I'm pretty sure this can't be coincidental anymore, but have now idea what could cause this. It would be great if anybody could have  a look at my capture:

Are you able to share your capture (here or on www.cloudshark.org) and an export of the SSL session keys (File -> Export -SSL session keys)? There is not enough information in the text output to really help you analyze this issue.

Cheers,
Sake


___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe