http.log - Suricata - Open Information Security Foundation

Bug #254 » http.log

http.log from Suricata - Peter Manev, 01/06/2011 03:19 AM

 /06/2011-11:39:06.663851 www.cisco.com [**] /web/fw/c/homepage.mb.min.css [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34408 -> 72.163.4.161:80
 /06/2011-11:39:06.668301 www.cisco.com [**] /web/fw/j/home.mb.metrics.js [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34410 -> 72.163.4.161:80
 /06/2011-11:39:06.671077 www.cisco.com [**] /web/fw/j/homepage.mb.min.js [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34409 -> 72.163.4.161:80
 /06/2011-11:39:06.671805 www.cisco.com [**] / [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34407 -> 72.163.4.161:80
 /06/2011-11:39:06.815931 www.cisco.com [**] /web/fw/i/field-button-sprite.png [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34409 -> 72.163.4.161:80
 /06/2011-11:39:06.959519 www.cisco.com [**] /web/fw/w/cl/cl.js [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34409 -> 72.163.4.161:80
 /06/2011-11:39:06.998829 newsroom.cisco.com [**] /dlls/cdc_news_json_v1.js [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:57198 -> 198.133.219.119:80
 /06/2011-11:39:07.061207 www.cisco.com [**] /web/fw/i/mb-hotspot.jpg [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34408 -> 72.163.4.161:80
 /06/2011-11:39:07.094735 www.cisco.com [**] /web/fw/i/hp-sprites-mb.png [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34411 -> 72.163.4.161:80
 /06/2011-11:39:07.102999 www.cisco.com [**] /web/fw/j/home.metrics_ut.js?v=ut2.1.20100916.0000 [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34409 -> 72.163.4.161:80
 /06/2011-11:39:07.391091 www.cisco.com [**] /web/fw/i/mb-sprite.png [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34407 -> 72.163.4.161:80
 /06/2011-11:39:07.636827 www.cisco.com [**] /web/fw/j/home.s_code_ut.js?v=ut2.1.20100916.0000 [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34408 -> 72.163.4.161:80
 /06/2011-11:39:07.739990 www.cisco.com [**] /en/US/home/images/f_ISR-G2-upgrade.jpg [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34412 -> 72.163.4.161:80
 /06/2011-11:39:09.097771 www.cisco.com [**] /en/US/home/images/f_umi_oprah.jpg [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34409 -> 72.163.4.161:80
 /06/2011-11:39:09.196744 www.cisco.com [**] /en/US/home/images/sp_umi_960x320.jpg [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34410 -> 72.163.4.161:80
 /06/2011-11:39:09.388789 www.cisco.com [**] /en/US/home/images/f_jc_ces.jpg [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34407 -> 72.163.4.161:80
 /06/2011-11:39:09.639124 www.cisco.com [**] /web/fw/i/hp-fatfooter-menu.png [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34408 -> 72.163.4.161:80
 /06/2011-11:39:09.739712 www.cisco.com [**] /swa/j/zag2_vs_log1.asc?Log=1&title=Cisco%20Systems,%20Inc&basepage=http://www.cisco.com/&eventtype=pageview&cb=1294310346971 [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34412 -> 72.163.4.161:80
 /06/2011-11:39:09.987802 www.cisco.com [**] /assets/home/spotlight/sp_20101217/hub.swf [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34411 -> 72.163.4.161:80
 /06/2011-11:39:10.368700 www.cisco.com [**] /assets/home/spotlight/sp_20101217/hub.swf [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34415 -> 72.163.4.161:80
 /06/2011-11:39:10.893702 www.cisco.com [**] /favicon.ico [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34416 -> 72.163.4.161:80
 /06/2011-11:39:12.535347 www.cisco.com [**] /assets/home/spotlight/sp_20101217/xml/us_en/spotlight_us_en.xml [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34417 -> 72.163.4.161:80
 /06/2011-11:39:13.080731 www.cisco.com [**] /assets/home/spotlight/sp_20101217/xml/languages.xml [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34418 -> 72.163.4.161:80
 /06/2011-11:39:16.238566 www.cisco.com [**] /assets/home/spotlight/sp_20101217/swf/fonts_default.swf [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34419 -> 72.163.4.161:80
 /06/2011-11:39:16.636371 www.cisco.com [**] /assets/home/spotlight/sp_20101217/css/en.css [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34420 -> 72.163.4.161:80
 /06/2011-11:39:17.032014 www.cisco.com [**] /assets/home/spotlight/sp_20101217/css/fr.css [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34421 -> 72.163.4.161:80
 /06/2011-11:39:17.400387 www.cisco.com [**] /assets/home/spotlight/sp_20101217/css/ch.css [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34422 -> 72.163.4.161:80
 /06/2011-11:39:17.815717 www.cisco.com [**] /assets/home/spotlight/sp_20101217/css/en.css [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34423 -> 72.163.4.161:80
 /06/2011-11:39:18.230786 www.cisco.com [**] /assets/home/spotlight/sp_20101217/css/fr.css [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34424 -> 72.163.4.161:80
 /06/2011-11:39:18.604366 www.cisco.com [**] /assets/home/spotlight/sp_20101217/css/de.css [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34425 -> 72.163.4.161:80
 /06/2011-11:39:19.020809 www.cisco.com [**] /assets/home/spotlight/sp_20101217/css/en.css [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34426 -> 72.163.4.161:80
 /06/2011-11:39:19.405814 www.cisco.com [**] /assets/home/spotlight/sp_20101217/css/fr.css [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34427 -> 72.163.4.161:80
 /06/2011-11:39:19.803290 www.cisco.com [**] /assets/home/spotlight/sp_20101217/css/en.css [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34429 -> 72.163.4.161:80
 /06/2011-11:39:19.929148 s.ytimg.com [**] /yt/favicon-vflZlzSbU.ico [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:47283 -> 74.125.77.102:80
 /06/2011-11:39:19.974017 s.ytimg.com [**] /yt/img/pixel-vfl3z5WfW.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:47285 -> 74.125.77.102:80
 /06/2011-11:39:20.161420 ad-emea.doubleclick.net [**] /adj/com.ythome/_default;sz=399x299;klg=en;kt=K;kga=-1;kgg=-1;kcr=se;dc_dedup=1;kmyd=ad_creative_2;kap=0;tile=2;ord=4992426001817235? [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:33241 -> 66.102.13.149:80
 /06/2011-11:39:20.178799 i4.ytimg.com [**] /vi/oUFNM6qiB9o/hqdefault.jpg [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:35607 -> 66.102.13.139:80
 /06/2011-11:39:20.312677 www.cisco.com [**] /assets/home/spotlight/sp_20101217/css/de.css [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34436 -> 72.163.4.161:80
 /06/2011-11:39:20.783808 www.cisco.com [**] /assets/home/spotlight/sp_20101217/css/de.css [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34443 -> 72.163.4.161:80
 /06/2011-11:39:24.355735 www.cisco.com [**] /assets/home/spotlight/sp_20101217/swf/chiclet/chiclet_518_us_en.swf [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34445 -> 72.163.4.161:80
 /06/2011-11:39:26.593855 www.cisco.com [**] /assets/home/spotlight/sp_20101217/swf/chiclet/chiclet_515_us_en.swf [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34447 -> 72.163.4.161:80
 /06/2011-11:39:27.715106 www.cisco.com [**] /assets/home/spotlight/sp_20101217/swf/expansionmodule.swf [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34446 -> 72.163.4.161:80
 /06/2011-11:39:28.335496 www.cisco.com [**] /swa/j/zag2_vs_log1.asc?Log=1&title=Cisco%20Systems%2C%20Inc&eventtype=impression&basepage=http%3A//www.cisco.com/&bp=http%3A//www.cisco.com/&link=spotlight&linktext=cisco%20videoscape&lpos=SL&tag=ut2.1.20100524.1509&cb=0.4563601581773725 [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34450 -> 72.163.4.161:80
 /06/2011-11:39:28.574962 www.cisco.com [**] /assets/home/spotlight/sp_20101217/images/thumbnails/thumb_518.jpg [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34450 -> 72.163.4.161:80
 /06/2011-11:39:28.978097 www.cisco.com [**] /assets/home/spotlight/sp_20101217/images/thumbnails/thumb_515.jpg [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34451 -> 72.163.4.161:80
 /06/2011-11:39:29.912820 www.cisco.com [**] /assets/home/spotlight/sp_20101217/images/thumbnails/thumb_509.jpg [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34452 -> 72.163.4.161:80
 /06/2011-11:39:30.540961 www.cisco.com [**] /assets/home/spotlight/sp_20101217/images/thumbnails/thumb_506.jpg [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34453 -> 72.163.4.161:80
 /06/2011-11:39:30.883877 i.cdn.turner.com [**] /cnn/.element/css/3.0/common.css [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37956 -> 206.33.37.126:80
 /06/2011-11:39:30.908832 i.cdn.turner.com [**] /cnn/.element/js/3.0/omni.time.js [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37960 -> 206.33.37.126:80
 /06/2011-11:39:30.967470 i.cdn.turner.com [**] /cnn/.element/js/3.0/main.js [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37956 -> 206.33.37.126:80
 /06/2011-11:39:31.026746 i.cdn.turner.com [**] /cnn/.element/js/3.0/csiManager.js [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37956 -> 206.33.37.126:80
 /06/2011-11:39:31.026821 i.cdn.turner.com [**] /cnn/.element/css/3.0/connect/overlay.css?20100421 [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37958 -> 206.33.37.126:80
 /06/2011-11:39:31.041162 i.cdn.turner.com [**] /cnn/.element/js/3.0/swfobject-2.2.js [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37960 -> 206.33.37.126:80
 /06/2011-11:39:31.047968 i.cdn.turner.com [**] /cnn/.element/css/3.0/main.css [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37957 -> 206.33.37.126:80
 /06/2011-11:39:31.068546 i.cdn.turner.com [**] /cnn/.element/js/3.0/StorageManager.js?20100728 [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37956 -> 206.33.37.126:80
 /06/2011-11:39:31.072562 i.cdn.turner.com [**] /cnn/.element/css/3.0/personalization.css?20100421 [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37959 -> 206.33.37.126:80
 /06/2011-11:39:31.123225 i.cdn.turner.com [**] /xslo/cvp/ads/freewheel/js/fwjslib_1.1.js?version=1.1 [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37956 -> 206.33.37.126:80
 /06/2011-11:39:31.126686 i.cdn.turner.com [**] /cnn/.element/js/2.0/ad_head0.js [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37959 -> 206.33.37.126:80
 /06/2011-11:39:31.148168 i.cdn.turner.com [**] /cnn/.element/js/3.0/video/cvp.js [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37957 -> 206.33.37.126:80
 /06/2011-11:39:31.208646 www.cisco.com [**] /assets/home/spotlight/sp_20101217/swf/chiclet/chiclet_509_us_en.swf [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34448 -> 72.163.4.161:80
 /06/2011-11:39:31.243352 i.cdn.turner.com [**] /cnn/2011/HEALTH/01/06/autism.vaccines/t1main.andrewwakefield.gi.jpg [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37957 -> 206.33.37.126:80
 /06/2011-11:39:31.243927 i.cdn.turner.com [**] /cnn/.element/js/3.0/video/cvp_suppl.js [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37960 -> 206.33.37.126:80
 /06/2011-11:39:31.247860 i.cdn.turner.com [**] /cnn/cnn_adspaces/cnn_adspaces.js [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37956 -> 206.33.37.126:80
 /06/2011-11:39:31.266705 i.cdn.turner.com [**] /cnn/.element/img/3.0/1px.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37960 -> 206.33.37.126:80
 /06/2011-11:39:31.269044 i.cdn.turner.com [**] /cnn/.element/img/3.0/global/icons/video_icon.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37957 -> 206.33.37.126:80
 /06/2011-11:39:31.285763 i.cdn.turner.com [**] /cnn/.element/js/3.0/connect/connect-lite.js [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37958 -> 206.33.37.126:80
 /06/2011-11:39:31.297728 i.cdn.turner.com [**] /cnn/video/world/2011/01/05/pkg.aus.shark.attack.sevennet.120x68.jpg [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37957 -> 206.33.37.126:80
 /06/2011-11:39:31.309233 i.cdn.turner.com [**] /cnn/2011/OPINION/01/05/dabashi.iran.pahlavi.tragedy/tzvids.reza_pahlavi.jpg [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37958 -> 206.33.37.126:80
 /06/2011-11:39:31.312699 i.cdn.turner.com [**] /cnn/2011/images/01/05/tz.homeless-in-tokyo.jpg [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37960 -> 206.33.37.126:80
 /06/2011-11:39:31.325084 i.cdn.turner.com [**] /cnn/video/bestoftv/2011/01/05/exp.sbt.mega.millions.hln.120x68.jpg [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37957 -> 206.33.37.126:80
 /06/2011-11:39:31.329674 i.cdn.turner.com [**] /cnn/2011/WORLD/asiapcf/01/05/china.us.fighter.jets/tzvids.china.jet.top81.jpg [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37958 -> 206.33.37.126:80
 /06/2011-11:39:31.333170 i.cdn.turner.com [**] /cnn/2011/TECH/innovation/01/05/swype.kushler/tzvids.kushler.cnn.jpg [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37960 -> 206.33.37.126:80
 /06/2011-11:39:31.352079 i.cdn.turner.com [**] /cnn/.element/img/3.0/global/misc/advertisement.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37957 -> 206.33.37.126:80
 /06/2011-11:39:31.685465 i.cdn.turner.com [**] /cnn/.element/img/3.0/personalization/35x35_generic_avatar.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37958 -> 206.33.37.126:80
 /06/2011-11:39:31.688965 i.cdn.turner.com [**] /cnn/.element/img/3.0/personalization/close_bt.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37960 -> 206.33.37.126:80
 /06/2011-11:39:31.691677 i.cdn.turner.com [**] /cnn/2011/WORLD/asiapcf/01/05/pakistan.governor.killed/c1main.taseer.gi.afp.jpg [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37956 -> 206.33.37.126:80
 /06/2011-11:39:31.694416 i.cdn.turner.com [**] /cnn/2010/TRAVEL/05/23/daily.snapshot/tzbins.eco.race.afp.gi.jpg [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37957 -> 206.33.37.126:80
 /06/2011-11:39:31.699183 i.cdn.turner.com [**] /cnn/.element/img/3.0/global/header/intl/hdr-globe-central.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37959 -> 206.33.37.126:80
 /06/2011-11:39:31.700102 i.cdn.turner.com [**] /cnn/.element/js/3.0/protoaculous.1.8.2.min.js [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37961 -> 206.33.37.126:80
 /06/2011-11:39:31.709589 i.cdn.turner.com [**] /cnn/.element/img/3.0/global/footer/pngs/footer_google.png [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37958 -> 206.33.37.126:80
 /06/2011-11:39:31.712606 i.cdn.turner.com [**] /cnn/.element/img/3.0/global/footer/pngs/footer_cnn_logo.png [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37960 -> 206.33.37.126:80
 /06/2011-11:39:31.716068 i.cdn.turner.com [**] /cnn/.element/js/3.0/edition.vars.js [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37956 -> 206.33.37.126:80
 /06/2011-11:39:31.796286 edition.cnn.com [**] / [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:55571 -> 157.166.255.31:80
 /06/2011-11:39:31.915856 www.cisco.com [**] /assets/home/spotlight/sp_20101217/videoplayer/videoplayer.swf [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34449 -> 72.163.4.161:80
 /06/2011-11:39:32.410652 www.cnn.com [**] / [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:47270 -> 157.166.226.25:80
 /06/2011-11:39:33.024891 i.cdn.turner.com [**] /cnn/.element/js/3.0/weather.footer.js?20100802 [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37957 -> 206.33.37.126:80
 /06/2011-11:39:33.025030 i.cdn.turner.com [**] /cnn/.element/js/3.0/hpsectiontracking.js [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37958 -> 206.33.37.126:80
 /06/2011-11:39:33.027970 i.cdn.turner.com [**] /cnn/1.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37960 -> 206.33.37.126:80
 /06/2011-11:39:33.043918 i.cdn.turner.com [**] /cnn/images/1.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37956 -> 206.33.37.126:80
 /06/2011-11:39:33.046546 edition.cnn.com [**] /.element/js/3.0/intl/edition_footer.js [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:55571 -> 157.166.255.31:80
 /06/2011-11:39:33.072868 i.cdn.turner.com [**] /cnn/.element/js/3.0/jsmd.min.js [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37961 -> 206.33.37.126:80
 /06/2011-11:39:33.073830 i.cdn.turner.com [**] /cnn/.element/js/3.0/s_code.intl.js [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37959 -> 206.33.37.126:80
 /06/2011-11:39:33.077326 i.cdn.turner.com [**] /cnn/.element/img/3.0/search/btn_search_hp_text.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37957 -> 206.33.37.126:80
 /06/2011-11:39:33.078837 i.cdn.turner.com [**] /cnn/.element/img/3.0/global/header/hdr-search-google.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37958 -> 206.33.37.126:80
 /06/2011-11:39:33.088814 i.cdn.turner.com [**] /cnn/.element/img/3.0/search/bg_ftrsearchfield.lrg.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37960 -> 206.33.37.126:80
 /06/2011-11:39:33.092227 i.cdn.turner.com [**] /cnn/.element/img/3.0/global/header/bg-nav.c.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37956 -> 206.33.37.126:80
 /06/2011-11:39:33.163089 i.cdn.turner.com [**] /cnn/.element/img/3.0/global/shade/cnn_shdcamtt1.990px.bg.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37961 -> 206.33.37.126:80
 /06/2011-11:39:33.166175 edition.cnn.com [**] /.element/js/3.0/local.js?20101109 [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:55578 -> 157.166.255.31:80
 /06/2011-11:39:33.170102 i.cdn.turner.com [**] /cnn/.element/img/3.0/global/shade/cnn_shdcamtt1.990px.header.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37959 -> 206.33.37.126:80
 /06/2011-11:39:33.235677 i.cdn.turner.com [**] /cnn/.element/img/3.0/global/red_bull.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37957 -> 206.33.37.126:80
 /06/2011-11:39:33.238496 i.cdn.turner.com [**] /cnn/.element/img/3.0/video/thumbnail_play.png [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37956 -> 206.33.37.126:80
 /06/2011-11:39:33.238642 i.cdn.turner.com [**] /cnn/.element/img/3.0/video/416_player_Click_to_play_off.png [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37960 -> 206.33.37.126:80
 /06/2011-11:39:33.239488 i.cdn.turner.com [**] /cnn/.element/img/3.0/personalization/Module_gradient.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37961 -> 206.33.37.126:80
 /06/2011-11:39:33.241779 i.cdn.turner.com [**] /cnn/.element/img/3.0/global/buttons/Sprite_BT_master.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37958 -> 206.33.37.126:80
 /06/2011-11:39:33.243337 i.cdn.turner.com [**] /cnn/.element/img/3.0/personalization/arrow_up.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37959 -> 206.33.37.126:80
 /06/2011-11:39:33.259110 i.cdn.turner.com [**] /cnn/.element/img/3.0/global/shade/Left_shadow.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37956 -> 206.33.37.126:80
 /06/2011-11:39:33.262079 i.cdn.turner.com [**] /cnn/.element/img/3.0/global/shade/Right_shadow.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37960 -> 206.33.37.126:80
 /06/2011-11:39:33.264264 i.cdn.turner.com [**] /cnn/.element/img/3.0/global/shade/TR_shadow_1000x6.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37961 -> 206.33.37.126:80
 /06/2011-11:39:33.401182 i.cdn.turner.com [**] /cnn/.element/img/3.0/global/shade/TL_shadow_7x6.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37958 -> 206.33.37.126:80
 /06/2011-11:39:33.405920 i.cdn.turner.com [**] /cnn/.element/img/3.0/global/shade/BR_shadow_1000x6.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37959 -> 206.33.37.126:80
 /06/2011-11:39:33.488741 edition.cnn.com [**] /.element/ssi/intl/breaking_news/3.0/banner.html?csiID=csi1 [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:55578 -> 157.166.255.31:80
 /06/2011-11:39:33.506372 i.cdn.turner.com [**] /cnn/.element/img/3.0/global/shade/BL_shadow_7x6.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37956 -> 206.33.37.126:80
 /06/2011-11:39:33.507398 i.cdn.turner.com [**] /cnn/.element/img/3.0/global/shade/sprite_shades.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37957 -> 206.33.37.126:80
 /06/2011-11:39:33.523667 ads.cnn.com [**] /html.ng/site=cnn_international&cnn_intl_pagetype=main&cnn_intl_position=970x66_top&cnn_intl_rollup=homepage&page.allowcompete=yes&params.styles=fs&unqID=1508464470613258&tile=5992730134921&domId=391129 [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:47717 -> 157.166.226.207:80
 /06/2011-11:39:33.534612 i.cdn.turner.com [**] /cnn/.element/img/3.0/global/buttons/sprite_tabbed.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37960 -> 206.33.37.126:80
 /06/2011-11:39:33.535815 i.cdn.turner.com [**] /cnn/.element/img/3.0/global/misc/filter.line.100px.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37961 -> 206.33.37.126:80
 /06/2011-11:39:33.538162 i.cdn.turner.com [**] /cnn/.element/img/3.0/global/shade/cnn_shdsectbin.990px.bg.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37958 -> 206.33.37.126:80
 /06/2011-11:39:33.540604 i.cdn.turner.com [**] /cnn/.element/img/3.0/global/icons/red.carrot.jpg [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37959 -> 206.33.37.126:80
 /06/2011-11:39:33.548350 i.cdn.turner.com [**] /cnn/.element/img/3.0/search/search_btn_footer.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37956 -> 206.33.37.126:80
 /06/2011-11:39:33.552828 i.cdn.turner.com [**] /cnn/.element/img/3.0/global/misc/Numbers_Sprite.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37957 -> 206.33.37.126:80
 /06/2011-11:39:33.556602 i.cdn.turner.com [**] /cnn/.element/img/3.0/global/footer/pngs/arabic.png [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37960 -> 206.33.37.126:80
 /06/2011-11:39:33.559117 i.cdn.turner.com [**] /cnn/.element/img/3.0/global/footer/pngs/korean.png [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37961 -> 206.33.37.126:80
 /06/2011-11:39:33.561955 i.cdn.turner.com [**] /cnn/.element/img/3.0/global/footer/pngs/japanese.png [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37958 -> 206.33.37.126:80
 /06/2011-11:39:33.563976 i.cdn.turner.com [**] /cnn/.element/img/3.0/global/footer/pngs/turkish.png [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37959 -> 206.33.37.126:80
 /06/2011-11:39:33.739107 edition.cnn.com [**] /cnn_adspaces/3.0/homepage/main/bot1.120x90.ad [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:55578 -> 157.166.255.31:80
 /06/2011-11:39:33.748826 i.cdn.turner.com [**] /cnn/2011/OPINION/01/05/eltis.richardson.slave.trade/tzvids.slave.ship.gi.jpg [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37956 -> 206.33.37.126:80
 /06/2011-11:39:33.759901 i.cdn.turner.com [**] /cnn/2011/TRAVEL/01/05/europe.rail.travel.tips/tzvids.train.france.afp.gi.jpg [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37960 -> 206.33.37.126:80
 /06/2011-11:39:33.763496 www.youtube.com [**] / [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:57515 -> 66.102.13.91:80
 /06/2011-11:39:33.857151 ads.cnn.com [**] /html.ng/site=cnn_international&cnn_intl_pagetype=main&cnn_intl_position=300x250_rgt&cnn_intl_rollup=homepage&page.allowcompete=yes&params.styles=fs&unqID=1508464470613258&tile=5992730134921&domId=696644 [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:47718 -> 157.166.226.207:80
 /06/2011-11:39:33.859649 ads.cnn.com [**] /html.ng/site=cnn_international&cnn_intl_position=88x31_spon_dailysnap&cnn_intl_rollup=homepage&page.allowcompete=yes&params.styles=fs&unqID=1508464470613258&tile=5992730134921&domId=939149 [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:47717 -> 157.166.226.207:80
 /06/2011-11:39:33.904527 i.cdn.turner.com [**] /cnn/2011/TRAVEL/01/05/american.airlines.sabre/tzvids.american.airlines.gi.jpg [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37958 -> 206.33.37.126:80
 /06/2011-11:39:33.999873 ads.cnn.com [**] /html.ng/site=cnn_international&cnn_intl_position=88x31_spon_ilist&cnn_intl_rollup=homepage&page.allowcompete=no&params.styles=fs&unqID=1508464470613258&tile=5992730134921&domId=950032 [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:47719 -> 157.166.226.207:80
 /06/2011-11:39:34.020198 ads.cnn.com [**] /event.ng/Type=count&ClientType=2&ASeg=&AMod=&AOpt=0&AdID=483990&FlightID=352253&TargetID=104578&SiteID=1590&EntityDefResetFlag=0&C=0&Segments=690,2248,2743,3285,14108,17251,20139,23491,30220,31554,31690,33448,33449,33852,37430,37580,38676,39390,39668,40253,42274,42808,43109,43752,43761,43908,44046,44047,45046,45217,45308,45351,45353,45354,45388,45497&Targets=108436,111020,111026,111051,111455,111478,111493,111540,112105,112580,112588,1515,104578,112247,111430&Values=62,84,100,1266,1590,2757,2774,4434,52900,56058,58702,59359,59988,61089,61478,61884,63477,63672&RawValues=TIL%2C5992730134921%2CUNQ%2C1508464470613258&random=cuudmzw,bgslhovlzpKp&Params.tag.transactionid= [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:47718 -> 157.166.226.207:80
 /06/2011-11:39:34.049531 i.cdn.turner.com [**] /cnn/2011/WORLD/americas/01/05/cuba.skateboarding/tzvids.cuba.skateboard.ctsy.jpg [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37959 -> 206.33.37.126:80
 /06/2011-11:39:34.052220 ads.cnn.com [**] /event.ng/Type=count&ClientType=2&ASeg=&AMod=&AOpt=0&AdID=481713&FlightID=264311&TargetID=96022&SiteID=1590&EntityDefResetFlag=0&C=0&Segments=690,2248,2743,3285,14108,17251,20139,23491,29705,30220,30546,31554,33448,33852,35086,37430,37580,37854,38371,38676,39390,39668,40253,42274,43109,43752,43760,43761,43908,44046,44047,44824,45046,45217,45351,45353,45354,45388,45497&Targets=104239,90071,74127,1515,79999,95304,111464,83376,93785,95127,96022,111490,110796&Values=62,84,100,1266,1590,2757,2774,4434,52900,56058,58702,59884,59988,61089,61478,61884,63477,63672&RawValues=TIL%2C5992730134921%2CUNQ%2C1508464470613258&random=KRfwgs,bgslhovlywcb&Params.tag.transactionid= [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:47717 -> 157.166.226.207:80
 /06/2011-11:39:34.065667 i.cdn.turner.com [**] /cnn/2011/WORLD/africa/01/05/sudan.vote/rivers.image.getty.120x68.jpg [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37957 -> 206.33.37.126:80
 /06/2011-11:39:34.135429 metrics.cnn.com [**] /b/ss/cnn2intl/1/H.20.3/s33677103778099?AQB=1&ndh=1&t=6/0/2011%2011%3A39%3A33%204%20-60&ns=cnn&pageName=CNN%20International%20Home%20Page&g=http%3A//edition.cnn.com/&ch=CNN%20International%20Home%20Page&v1=CNN%20International%20Home%20Page&v2=CNN%20International%20Home%20Page&c5=Homepage&v5=Homepage&c9=05%3A00&c10=Thu&c18=10&c20=05&s=1366x768&c=24&j=1.7&v=Y&k=Y&bw=1366&bh=542&p=VLC%20Multimedia%20Plugin%20%28compatible%20Totem%202.32.0%29%3BWindows%20Media%20Player%20Plug-in%2010%20%28compatible%3B%20Totem%29%3BDivX%AE%20Web%20Player%3BQuickTime%20Plug-in%207.6.6%3BiTunes%20Application%20Detector%3BIcedTea%20NPR%20Web%20Browser%20Plugin%20%28using%20IcedTea6%201.9.2%20%286b20-1.9.2-0ubuntu1%29%29%3BShockwave%20Flash%3B&AQE=1 [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:54336 -> 66.235.142.24:80
 /06/2011-11:39:34.144590 ad-emea.doubleclick.net [**] /adi/com.ythome/promo1;sz=300x100;klg=en;kt=K;kga=-1;kgg=-1;kcr=se;dc_dedup=1;kmyd=ad_creative_3;tile=3;ord=320512147368090? [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:33241 -> 66.102.13.149:80
 /06/2011-11:39:34.215769 b.scorecardresearch.com [**] /r?c2=6035748&d.c=gif&d.o=cnn2intl&d.x=127242829&d.t=page&d.u=http%3A%2F%2Fedition.cnn.com%2F [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:58109 -> 213.155.158.64:80
 /06/2011-11:39:34.273237 ads.cnn.com [**] /html.ng/site=cnn_international&cnn_intl_pagetype=main&cnn_intl_position=728x90_bot&cnn_intl_rollup=homepage&page.allowcompete=yes&params.styles=fs&unqID=1508464470613258&tile=5992730134921&domId=223409 [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:47720 -> 157.166.226.207:80
 /06/2011-11:39:34.287057 i2.ytimg.com [**] /vi/uTysXITBCmk/default.jpg [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:55143 -> 66.102.13.113:80
 /06/2011-11:39:34.312592 s.ytimg.com [**] /yt/cssbin/www-core-vfl2KX0IE.css [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:47282 -> 74.125.77.102:80
 /06/2011-11:39:34.313919 i.cdn.turner.com [**] /cnn/2011/WORLD/europe/01/05/uk.royal.wedding/tzvids.royal.wedding.gi.jpg [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37961 -> 206.33.37.126:80
 /06/2011-11:39:34.318989 s.ytimg.com [**] /yt/jsbin/www-core-vflj1mvc0.js [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:47284 -> 74.125.77.102:80
 /06/2011-11:39:34.320459 s.ytimg.com [**] /yt/img/close-vflxnTNTT.png [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:47285 -> 74.125.77.102:80
 /06/2011-11:39:34.323836 i.cdn.turner.com [**] /cnn/cnnintl_adspaces/2.0/creatives/2009/10/23/20435Nikon175x31grey.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37960 -> 206.33.37.126:80
 /06/2011-11:39:34.326315 i.cdn.turner.com [**] /cnn/cnnintl_adspaces/2.0/creatives/2010/12/21/0415Shanghai_Banner_300.jpg [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37956 -> 206.33.37.126:80
 /06/2011-11:39:34.361805 i.cdn.turner.com [**] /cnn/cnn_adspaces/2.0/creatives/2008/9/17/2855151x1.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37958 -> 206.33.37.126:80
 /06/2011-11:39:34.533781 www.cisco.com [**] /assets/home/spotlight/sp_20101217/swf/chiclet/chiclet_516_us_en.swf [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34465 -> 72.163.4.161:80
 /06/2011-11:39:34.607070 secure-us.imrworldwide.com [**] /cgi-bin/m?ci=us-204044h&cg=0&cc=1&si=http%3A//edition.cnn.com/&rp=&ts=compact&rnd=1294310374318 [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:54013 -> 138.108.29.10:80
 /06/2011-11:39:34.626362 s.ytimg.com [**] /yt/img/master-vflYrvczw.png [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:47283 -> 74.125.77.102:80
 /06/2011-11:39:34.707180 i.cdn.turner.com [**] /cnn/cnnintl_adspaces/2.0/creatives/2010/12/16/224315hong-kong-WS.jpg [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37959 -> 206.33.37.126:80
 /06/2011-11:39:34.712455 i.cdn.turner.com [**] /cnn/cnnintl_adspaces/2.0/creatives/2010/9/7/92110728x90_NEWSVIEW.swf [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37957 -> 206.33.37.126:80
 /06/2011-11:39:34.714781 i.cdn.turner.com [**] /cnn/.element/img/3.0/personalization/newspulse_personalize_sprite.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37961 -> 206.33.37.126:80
 /06/2011-11:39:34.818339 edition.cnn.com [**] /.element/ssi/misc/3.0/editionvars.html?csiID=csi2 [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:55591 -> 157.166.255.31:80
 /06/2011-11:39:34.866870 edition.cnn.com [**] /favicon.ico [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:55592 -> 157.166.255.31:80
 /06/2011-11:39:34.898282 secure-us.imrworldwide.com [**] /cgi-bin/m1?ci=us-204044h&cg=0&cc=1&si=http%3A//edition.cnn.com/&rp=&ts=compact&rnd=1294310374318&ja=1 [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:54016 -> 138.108.29.10:80
 /06/2011-11:39:35.128152 i.cdn.turner.com [**] /cnn/.element/img/3.0/personalization/Green_market_status.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37956 -> 206.33.37.126:80
 /06/2011-11:39:35.771482 i.cdn.turner.com [**] /cnn/.element/img/3.0/personalization/hp_market_sprite.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37960 -> 206.33.37.126:80
 /06/2011-11:39:35.812741 svcs.cnn.com [**] /weather/getForecast?time=16&mode=json_html&zipCode=336736767676&locCode=EGLL&celcius=true&csiID=csi3 [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:53615 -> 157.166.224.32:80
 /06/2011-11:39:36.192217 www.cisco.com [**] /assets/home/spotlight/sp_20101217/videoplayer/togethervideoplayer.swf [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34464 -> 72.163.4.161:80
 /06/2011-11:39:37.193597 edition.cnn.com [**] /.element/ssi/auto/3.0/sect/MAIN/facebook_rec.wrapper.html?&csiID=csi4 [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:55599 -> 157.166.255.31:80
 /06/2011-11:39:38.101063 www.cisco.com [**] /swa/j/zag2_vs_log1.asc?Log=1&title=Cisco%20Systems%2C%20Inc&eventtype=impression&basepage=http%3A//www.cisco.com/&bp=http%3A//www.cisco.com/&link=spotlight&linktext=do%20you%20flip%3F&lpos=SL&tag=ut2.1.20100524.1509&cb=0.5904013463235103 [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34484 -> 72.163.4.161:80
 /06/2011-11:39:38.985153 ads.cnn.com [**] /html.ng/site=cnn_international&cnn_intl_pagetype=main&cnn_intl_position=120x90_bot1&cnn_intl_rollup=homepage&page.allowcompete=yes&params.styles=fs&unqID=1508464470613258&tile=5992730134921&domId=505012 [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:47719 -> 157.166.226.207:80
 /06/2011-11:39:38.993287 ads.cnn.com [**] /event.ng/Type=count&ClientType=2&ASeg=&AMod=&AOpt=0&AdID=482801&FlightID=350957&TargetID=15224&SiteID=1590&EntityDefResetFlag=0&C=0&Segments=690,2248,2743,3285,9345,14108,17251,20139,23491,30220,30375,31554,33448,33852,37430,37580,38676,39390,39668,40253,42274,43109,43752,43761,43908,44046,44047,45046,45217,45351,45353,45354,45388,45497&Targets=1515,15224&Values=62,84,100,1266,1590,2757,4434,52612,52900,56058,58702,59988,61089,61478,61884,63477,63672&RawValues=TIL%2C5992730134921%2CUNQ%2C1508464470613258&random=bnsvlwh,bgslhovlzkAp&Params.tag.transactionid= [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:47722 -> 157.166.226.207:80
 /06/2011-11:39:39.006262 ads.cnn.com [**] /DartRichMedia_1_03.js [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:47718 -> 157.166.226.207:80
 /06/2011-11:39:39.039451 ads.cnn.com [**] /event.ng/Type=count&ClientType=2&ASeg=&AMod=&AOpt=0&AdID=483294&FlightID=351493&TargetID=104238&SiteID=1590&EntityDefResetFlag=0&C=0&Segments=690,2248,2411,2535,2743,3285,14108,17251,20139,23491,30220,31554,33448,33852,37430,37580,38676,39390,39668,40253,42274,42808,43109,43692,43752,43761,43908,44046,44047,45046,45128,45217,45351,45353,45354,45388,45497&Targets=108436,111020,111026,111051,111455,111478,111493,111540,112105,112580,112588,104102,90520,90825,90962,91060,91362,93975,96053,98231,100640,103099,103439,73473,103137,104238,1515,112247,111430,108523,112019&Values=62,84,100,1266,1590,2757,2774,2867,4434,52900,56058,58702,59988,61089,61478,61884,63477,63672&RawValues=TIL%2C5992730134921%2CUNQ%2C1508464470613258&random=leKnyk,bgslhovlyzsl&Params.tag.transactionid= [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:47717 -> 157.166.226.207:80
 /06/2011-11:39:39.043252 gdyn.cnn.com [**] /1.1/1.gif?1294310373762 [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:50036 -> 157.166.224.167:80
 /06/2011-11:39:39.260801 ads.cnn.com [**] /event.ng/Type=count&ClientType=2&ASeg=&AMod=&AOpt=0&AdID=483986&FlightID=352252&TargetID=111238&SiteID=1590&EntityDefResetFlag=0&C=0&Segments=690,2248,2457,2598,2743,3285,6040,14108,17251,20139,23491,30220,30996,31554,33448,33852,37430,37580,38676,39390,39668,40253,42274,43109,43752,43761,43908,44046,44047,44829,45046,45217,45351,45353,45354,45388,45497&Targets=94909,84771,110298,111022,111238,102562,75676,1515,10370,95120,111295,111437&Values=62,84,100,150,1266,1590,2757,2774,2848,4434,52263,52900,56058,58702,59988,61089,61478,61884,63477,63672&RawValues=NGUSERID%2Caa55a36-3471-1591994405-2%2CTIL%2C5992730134921%2CUNQ%2C1508464470613258&random=bqxuxNp,bgslhovlyzss&Params.tag.transactionid= [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:47720 -> 157.166.226.207:80
 /06/2011-11:39:40.284748 i2.cdn.turner.com [**] /cnn/2010/images/12/22/pm_all.jpg [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37963 -> 206.33.37.126:80
 /06/2011-11:39:42.790647 i.cdn.turner.com [**] /cnn/.element/img/3.0/global/header/hdr-close.jpg [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37957 -> 206.33.37.126:80
 /06/2011-11:39:42.800354 i.cdn.turner.com [**] /cnn/.element/img/3.0/global/header/hat/bg_hat_black_lg.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37959 -> 206.33.37.126:80
 /06/2011-11:39:42.822393 i.cdn.turner.com [**] /cnn/.element/img/3.0/personalization/arrow_down.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37958 -> 206.33.37.126:80
 /06/2011-11:39:42.963089 i.cdn.turner.com [**] /cnn/.element/img/3.0/global/header/hat/arrow_black.png [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37961 -> 206.33.37.126:80
 /06/2011-11:39:43.008009 www.cisco.com [**] /swa/j/zag2_vs_log1.asc?Log=1&title=Cisco%20Systems%2C%20Inc&eventtype=impression&basepage=http%3A//www.cisco.com/&bp=http%3A//www.cisco.com/&link=spotlight&linktext=meet%20umi&lpos=SL&tag=ut2.1.20100524.1509&cb=0.9356840674918857 [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34485 -> 72.163.4.161:80
 /06/2011-11:39:43.613723 i.cdn.turner.com [**] /cnn/.element/js/3.0/csi_include.js [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37956 -> 206.33.37.126:80
 /06/2011-11:39:44.432455 i.cdn.turner.com [**] /cnn/.element/img/3.0/weather/03/12.png [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37960 -> 206.33.37.126:80
 /06/2011-11:39:47.263333 www.cisco.com [**] /swa/j/zag2_vs_log1.asc?Log=1&title=Cisco%20Systems%2C%20Inc&eventtype=impression&basepage=http%3A//www.cisco.com/&bp=http%3A//www.cisco.com/&link=spotlight&linktext=together&lpos=SL&tag=ut2.1.20100524.1509&cb=0.2697040265357481 [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34486 -> 72.163.4.161:80
 /06/2011-11:39:47.579867 www.cisco.com [**] /web/fw/i/mm-spinner.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34487 -> 72.163.4.161:80
 /06/2011-11:39:47.579884 www.cisco.com [**] /web/fw/co/menu-content.html [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34486 -> 72.163.4.161:80
 /06/2011-11:39:47.599190 www.cisco.com [**] /web/fw/i/mm-corners.png [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34489 -> 72.163.4.161:80
 /06/2011-11:39:47.725320 www.cisco.com [**] /web/fw/i/mm-header-arrow.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34487 -> 72.163.4.161:80
 /06/2011-11:39:47.810069 www.cisco.com [**] /web/fw/i/mm-box-shadow.png [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34488 -> 72.163.4.161:80
 /06/2011-11:39:47.849068 www.cisco.com [**] /web/fw/i/mm-sprite.png [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34486 -> 72.163.4.161:80
 /06/2011-11:39:48.327508 www.cisco.com [**] /en/US/home/images/mm_smb_connect.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34487 -> 72.163.4.161:80
 /06/2011-11:39:48.365220 www.cisco.com [**] /en/US/home/images/mm_ent_borderless.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34489 -> 72.163.4.161:80
 /06/2011-11:39:48.393828 www.cisco.com [**] /en/US/home/images/mm_smb_commu.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34486 -> 72.163.4.161:80
 /06/2011-11:39:49.731372 www.cisco.com [**] /en/US/home/images/mm_ent_datacenterb.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34491 -> 72.163.4.161:80
 /06/2011-11:39:49.731390 www.cisco.com [**] /en/US/home/images/mm_ent_collab.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34490 -> 72.163.4.161:80
 /06/2011-11:39:49.808358 www.cisco.com [**] /en/US/home/images/mm_smb_secure.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34488 -> 72.163.4.161:80
 /06/2011-11:39:50.319664 www.cisco.com [**] /en/US/home/images/mm_home_router.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34487 -> 72.163.4.161:80
 /06/2011-11:39:50.360370 www.cisco.com [**] /en/US/home/images/mm_umi_telepresence.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34489 -> 72.163.4.161:80
 /06/2011-11:39:50.392189 www.cisco.com [**] /en/US/home/images/mm_home_flipb.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34486 -> 72.163.4.161:80
 /06/2011-11:39:52.327289 metrics.cnn.com [**] /b/ss/cnn2intl/1/H.20.3/s33677103778099?AQB=1&pccr=true&vidn=2692CEEB851D3F6C-40000137E0191A5E&&ndh=1&t=6/0/2011%2011%3A39%3A33%204%20-60&ns=cnn&pageName=CNN%20International%20Home%20Page&g=http%3A//edition.cnn.com/&ch=CNN%20International%20Home%20Page&v1=CNN%20International%20Home%20Page&v2=CNN%20International%20Home%20Page&c5=Homepage&v5=Homepage&c9=05%3A00&c10=Thu&c18=10&c20=05&s=1366x768&c=24&j=1.7&v=Y&k=Y&bw=1366&bh=542&p=VLC%20Multimedia%20Plugin%20%28compatible%20Totem%202.32.0%29%3BWindows%20Media%20Player%20Plug-in%2010%20%28compatible%3B%20Totem%29%3BDivX%AE%20Web%20Player%3BQuickTime%20Plug-in%207.6.6%3BiTunes%20Application%20Detector%3BIcedTea%20NPR%20Web%20Browser%20Plugin%20%28using%20IcedTea6%201.9.2%20%286b20-1.9.2-0ubuntu1%29%29%3BShockwave%20Flash%3B&AQE=1 [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:54336 -> 66.235.142.24:80
 /06/2011-11:39:53.031389 safebrowsing-cache.google.com [**] /safebrowsing/rd/ChNnb29nLW1hbHdhcmUtc2hhdmFyEAEYo9ICIKTSAjIFI6kAAAM [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:47346 -> 74.125.77.102:80
 /06/2011-11:39:53.032145 www.cisco.com [**] /swa/j/zag2_vs_log1.asc?Log=1&title=Cisco%20Systems%2C%20Inc&eventtype=impression&basepage=http%3A//www.cisco.com/&bp=http%3A//www.cisco.com/&link=spotlight&linktext=cisco%20videoscape&lpos=SL&tag=ut2.1.20100524.1509&cb=0.2661962594110032 [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34492 -> 72.163.4.161:80
 /06/2011-11:40:01.139837 www.cisco.com [**] /web/fw/i/mm-partner-login-bg.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34495 -> 72.163.4.161:80
 /06/2011-11:40:01.382061 www.cisco.com [**] /web/fw/i/mm-icon-lock.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:34496 -> 72.163.4.161:80
 /06/2011-11:40:29.036663 i.cdn.turner.com [**] /cnn/.element/img/3.0/video/416_player_click_to_play_on.png [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:37997 -> 206.33.37.126:80
 /06/2011-11:40:30.627893 www.facebook.com [**] /extern/login_status.php?api_key=64b385429f05b2492d713f343d05ba02&app_id=64b385429f05b2492d713f343d05ba02&display=hidden&extern=2&locale=en_US&method=auth.status&next=http%3A%2F%2Fstatic.ak.fbcdn.net%2Fconnect%2Fxd_proxy.php%23cb%3Df14c6c9cc234d4c%26origin%3Dhttp%253A%252F%252Fedition.cnn.com%252Ff2ba6fcb4ced0f8%26relation%3Dopener%26transport%3Dpostmessage%26frame%3Df154b8dd5314864%26result%3D%2522xxRESULTTOKENxx%2522&no_session=http%3A%2F%2Fstatic.ak.fbcdn.net%2Fconnect%2Fxd_proxy.php%23cb%3Df3779c82eaf53a%26origin%3Dhttp%253A%252F%252Fedition.cnn.com%252Ff2ba6fcb4ced0f8%26relation%3Dparent%26transport%3Dpostmessage%26frame%3Df154b8dd5314864&no_user=http%3A%2F%2Fstatic.ak.fbcdn.net%2Fconnect%2Fxd_proxy.php%23cb%3Df4cad99b015f3c%26origin%3Dhttp%253A%252F%252Fedition.cnn.com%252Ff2ba6fcb4ced0f8%26relation%3Dparent%26transport%3Dpostmessage%26frame%3Df154b8dd5314864&ok_session=http%3A%2F%2Fstatic.ak.fbcdn.net%2Fconnect%2Fxd_proxy.php%23cb%3Df141eb88cf388e8%26origin%3Dhttp%253A%252F%252Fedition.cnn.com%252Ff2ba6fcb4ced0f8%26relation%3Dparent%26transport%3Dpostmessage%26frame%3Df154b8dd5314864&sdk=joey&session_version=3 [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:51499 -> 66.220.153.11:80
 /06/2011-11:40:30.666122 static.ak.fbcdn.net [**] /connect/xd_proxy.php [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:48818 -> 193.45.3.161:80
 /06/2011-11:40:30.775821 static.ak.fbcdn.net [**] /rsrc.php/yA/r/YkksFpjZL3E.css [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:48818 -> 193.45.3.161:80
 /06/2011-11:40:30.780011 static.ak.fbcdn.net [**] /rsrc.php/y8/r/BWq7vkBrqSf.css [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:48836 -> 193.45.3.161:80
 /06/2011-11:40:30.781535 static.ak.fbcdn.net [**] /rsrc.php/y5/r/3tmIvTDIcbS.css [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:48835 -> 193.45.3.161:80
 /06/2011-11:40:30.827235 static.ak.fbcdn.net [**] /rsrc.php/yp/r/kk8dc2UJYJ4.png [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:48838 -> 193.45.3.161:80
 /06/2011-11:40:30.827551 static.ak.fbcdn.net [**] /rsrc.php/yK/r/NK-XVT6bZ0B.js [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:48837 -> 193.45.3.161:80
 /06/2011-11:40:31.203649 static.ak.fbcdn.net [**] /rsrc.php/ys/r/_hXNQO8vduw.css [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:48834 -> 193.45.3.161:80
 /06/2011-11:40:31.311726 static.ak.fbcdn.net [**] /rsrc.php/yb/r/GsNJNwuI-UM.gif [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:48818 -> 193.45.3.161:80
 /06/2011-11:40:31.315753 static.ak.fbcdn.net [**] /rsrc.php/zX/r/4PIot2bO7ET.jpg [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:48836 -> 193.45.3.161:80
 /06/2011-11:40:31.317282 static.ak.fbcdn.net [**] /rsrc.php/zs/r/1HX6ENG455b.jpg [**] Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12 [**] 192.168.1.91:48838 -> 193.45.3.161:80

(2-2/6)

Project

General

Profile

Suricata

Bug #254 » http.log