16:50:39.011472 IP 192.168.1.157.34636 > 192.168.1.103.8888: Flags [.], seq 1:1441, ack 1, win 229, options [nop,nop,TS val 7309905 ecr 3527749847], length 1440E...OW@.@.V$.....9.*.L.cZ............o......o.Q.E0.GET /operation/function/set/acct_transfer/ajax?csrfmiddlewaretoken=oPyytDp39wkwSK4SWqQV8AReVn3VLXqbADz1j1uufjXlAn9amApBMaevIeBuPQwV&draw=1&columns%5B0%5D%5Bdata%5D=016:50:39.011496 IP 192.168.1.157.34636 > 192.168.1.103.8888: Flags [P.], seq 1441:2711, ack 1, win 229, options [nop,nop,TS val 7309905 ecr 3527749847], length 1270E..*OX@.@.V......9.*.L.cZ...................o.Q.E0.s%5B6%5D%5Bsearchable%5D=true&columns%5B6%5D%5Borderable%5D=true&columns%5B6%5D%5Bsearch%5D%5Bvalue%5D=&columns%5B6%5D%5Bsearch%5D%5Bregex%5D=false&columns%5B7%5D%Host: mail.domain.comConnection: keep-aliveAccept: application/json, text/javascript, */*; q=0.01X-Requested-With: XMLHttpRequestUser-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/55.0.2883.87 Chrome/55.0.2883.87 Safari/537.36Referer: http://mail.domain.com/operation/function/set/acct_transferAccept-Encoding: gzip, deflate, sdchAccept-Language: en-US,en;q=0.8Cookie: csrftoken=02Ku0O3nPfLVjZG6lDcMIIoZkgtVDgaPaazJuyAgV0Ra9NEuayBfT1Sh9wY4UpRR; sessionid=0oet31onaanng45kadkp3l5pg4lfq2km16:50:39.024500 IP 192.168.1.103.8888 > 192.168.1.157.34636: Flags [.], ack 1441, win 249, options [nop,nop,TS val 3527750509 ecr 7309905], length 0E..4..@.5.)..9.*.....c.L....Z.......,2......E3m.o.Q16:50:39.234870 IP 192.168.1.157.34636 > 192.168.1.103.8888: Flags [P.], seq 1441:2711, ack 1, win 229, options [nop,nop,TS val 7309961 ecr 3527750509], length 1270E..*OY@.@.V......9.*.L.cZ...................o...E3ms%5B6%5D%5Bsearchable%5D=true&columns%5B6%5D%5Borderable%5D=true&columns%5B6%5D%5Bsearch%5D%5Bvalue%5D=&columns%5B6%5D%5Bsearch%5D%5Bregex%5D=false&columns%5B7%5D%5Bdata%5D=7&columns%5B7%5D%5Bname%5D=&columns%5B7%5D%5Bsearchable%5D=true&columns%5B7%5D%5Borderable%5D=true&columns%5B7%5D%5Bsearch%5D%5Bvalue%5D=&columns%5B7Host: mail.domain.comConnection: keep-aliveAccept: application/json, text/javascript, */*; q=0.01X-Requested-With: XMLHttpRequestUser-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/55.0.2883.87 Chrome/55.0.2883.87 Safari/537.36Referer: http://mail.domain.com/operation/function/set/acct_transferAccept-Encoding: gzip, deflate, sdchAccept-Language: en-US,en;q=0.8Cookie: csrftoken=02Ku0O3nPfLVjZG6lDcMIIoZkgtVDgaPaazJuyAgV0Ra9NEuayBfT1Sh9wY4UpRR; sessionid=0oet31onaanng45kadkp3l5pg4lfq2km
http请求被防火墙截取了
原文地址：http://blog.51cto.com/net881004/2156229