Ситуация следующая.
Идет обмен по HTTPS между клиентом и сервером.После дешифрации HTTPS через прокси появилась такая картина. Клиент посылает запросы на сервер:
POST /servlet/pdas?rnd=1e7e1a3
PDAS_HEADER_DEFLATE: eJylkUtvgkAUhf8KufuWeThUExhjO8FaITWoaXcNRaGkDLQDKvrrO9gHROOq i7u435xz5iTXHtYyM7ZrVaZF7gC+RjDkdlzLMjG2DnyswhK4LY3KgSXrgfHp ANIgNrR4PhHAlxghwV5mwfsoyF69vVqpnAm1G23cfu5F7ngeT4sH/54WyVu6 eGLTQMxIvlf17jD2olraZvwTR5lOY70OoBZw9/nOb5FF2O+XLcSY/L/HFSFt 4gCRPnB0BNk3wLqLnfy94xvgtyoKy2oiuj6sfcfdTE7lfpmcay1EBxgzeskT ptm5CV1QL1K5ftxUJ/LmdmnXZGZ6ZFOzOTP/AjwnkJc=
POST /servlet/pdas?rnd=1e7ee1e
PDAS_HEADER_DEFLATE: eJylkV9vgjAUxb8Kue8bLbVME6hxa3BOyAxqtreFoXRkFLaCin76FfcHovFp D/fh/nrO6UmuM6xlZmzXqkyL3AV8jWDInKSWpTC2LnysohKYI43KhSXtgfHp AtIgMbR4PuHAlhghTl9m4fsozF79vVqpnHK1G228fu7H3nieTIuH4J4U4i1d PNFpyGdWvlf17jD241o6ZvITR6hOo70OIDYw7/kuaJFt0d8vW4ix9f8eVxZp EwfI6gNDR5B9A6y7OOLvHd8Au1VxVFYT3vVh7TvupjiVB6U419qIDDCm5JIn SrNzE7qgXqRy/bipTuTN7dKuycz0yKZmc2b2BT0fkJg=
POST /servlet/pdas?rnd=1e7faa3
PDAS_HEADER_DEFLATE: eJylkUFvgkAQhf/KZu4tu+BSTWCNLcFaITWoaW8NRdluykK7oKK/vovaSjSe epjDfPPezEvG6dcyQ+ulKkWRu0BuMfSZk9ay5GjtwtciLoE5ElUuzGkH0LcL WIMUafF05AGbE4w9+jaJPgdR9h5s1ULl1FObwcrv5kHiD6fpuHgKH62Cf4jZ Cx1H3sTMt6re7IZBUkvHSI/rLKq30U4LWDYw//UhPCHbpL8nT5AQ8/85bszW 5R42u8DwHmQHQHQWh//NyR2we5XEZTXy2j6iffve4OfysOSXWhtbPUKodc0T i+zShK+oZ0Iun1fVmbz5nWibjEyXbGI2b2Y/PheQmQ==
POST /servlet/pdas?rnd=1e80759
PDAS_HEADER_DEFLATE: eJylkVFvgjAUhf9Kc983WrBME6hxIzgnZAY129vCULpmFLaCiv76FXWTaHza w324X885Pcl1+rXM0HqpSlHkLpBbDH3mpLUsOVq78LWIS2CORJULc9oB9O0C 1iBFWjwdecDmBGOPvk2iz0GUvQdbtVA59dRmsPK7eZD4w2k6Lp7CR6vgH2L2 QseRNzHzrao3u2GQ1NIx0mOcRXUa7bSAZQPzXx/CE7JN+vvlCRJi/r/HjdlK 7GGzCwzvQXYARHdx+N87uQN2r5K4rEZe20e0b78b/FwelvxSa2OrRwi1rnli kV2a8BX1TMjl86o6kze3E22TkemRTc3mzOwHPw+Qmg==
POST /servlet/pdas?rnd=1e8142e
PDAS_HEADER_DEFLATE: eJylkV9vgjAUxb9Kc983WmqZJlDjRnBOyAxqtreFoXRkFLaCin76FfcHovFp D/fh/nrO6UmuPaxlhrZrVaZF7gC5xjDkdlLLUqCtAx+rqARuS1Q5sGQ9QJ8O YA0SpMXziQt8STB22cssfB+F2au/VyuVM1ftRhuvn/uxN54n0+IhuKeFeEsX T2waujMz36t6dxj7cS1tI/mJo0ynsV4HUAu493wXtMgy2e+XLSTE/H+PK9Nq EwfY7APHR5B9A6K72OLvndwAv1VxVFYTt+sj2nfcDXEqD0pxrrUwHRDC6CVP lGbnJnxBvUjl+nFTncib26Vdk5HpkU3N5sz8C0AHkJs=
POST /servlet/pdas?rnd=1e820c7
PDAS_HEADER_DEFLATE: eJylkV9vgjAUxb8Kue8bLbWoCdS4NTgnZAY129vCUDoyCltBxX36FfcHovFp D/fh/nrO6UmuM6plZuw2qkyL3AV8jWDEnKSWpTB2LryvoxKYI43KhRXtgfHh AtIgMbR4MeXAVhghTp/n4ds4zF78g1qrnHK1H2+9Qe7H3mSRzIr74I4U4jVd PtJZyOdWflD1/nPix7V0zOQnjlCdRnsdQGxg3tNt0CLbor9fthBj6/89rqx+ mzhE1gAYOoLsG2DdxRF/77gP7EbFUVlNedeHte+4m+JUHpTiXGsjMsSYkkue KM3OTeiCepnKzcO2OpE3t0u7JjPTI5uazZnZF0D/kJw=
POST /servlet/pdas?rnd=1e82d37
PDAS_HEADER_DEFLATE: eJylkVFvgjAUhf8Kue8bbbEME6hxIzgnZAY129vCUBgZha1FRX/9irpBND7t 4T7cr+ecnuTag5rn2mYlZFYWDuBbBANmJzWXqbZx4GsZSWA21yoHFrQH2rcD SIFEU+LZ2AW2wAi59G0afg7D/N3fiaUoqCu2w7VnFX7sjWbJpHwKHo0y/cjm L3QSulNS7ES93Y/8uOa2npziDKrSaK8DDBOY9/oQtMgk9PfLFmJM/t/jhlht Yh8RCxg6gPwIsOpip3/v+A7YvYgjWY3drg8r32HX03N5INNLrYmMPsbUuOaJ svzShK6o5xlfPa+rM3lzu6xr0nM1vKnZnJn9AEH3kJ0=
POST /servlet/pdas?rnd=1e839a8
PDAS_HEADER_DEFLATE: eJylkVFvgjAUhf8Kue8bLVgmSalxIzgnZAY129vCUBgZha1FRX/9irpBND7t 4T7cr+ecnuTSQc1zbbMSMisLB/AtggGjSc1lqm0c+FpGEhjlWuXAgvRA+3YA KZBoSjwbu8AWGCGXvE3Dz2GYv/s7sRQFccV2uPb6hR97o1kyKZ+CR7NMP7L5 C5mE7tQodqLe7kd+XHOqJ6c4k6g00usA0wLmvT4ELbIM8vtlCzE2/t/jxrDb RBsZfWDoAPIjwKoLTf/e8R2wexFHshq7XR9WvsOup+fyQKaXWguZNsbEvOaJ svzShK6o5xlfPa+rM3lzu6xr0nM1vKnZnJn9AELvkJ4=
POST /servlet/pdas?rnd=1e845dc
PDAS_HEADER_DEFLATE: eJylkVFvgjAUhf8Kue8bLbVME6hxIzgnZAY129vCUDoyCluLiv76lbkNovFp D/fhfj3n9CTXGdYiN7ZrqbKycAFfIxgyJ62F4sbWhY9VrIA5wqhcWNIeGJ8u IA1SQ4vnEw/YEiPk0ZdZ9D6K8tdgL1eyoJ7cjTZ+vwgSfzxPp+VDeE9K/pYt nug08mZWsZf17jAOklo4ZvoTR6hOo70OIDYw//kubJFt0d8vW4ix9f8eVwS1 iQNk9YEdQX4EWHdx+N87vgF2K5NYVROv68Pa972b/FQeKn6utREZYEzJJU+c 5ecmdEG9yMT6cVOdyJvbZV2TmesRTc3mzOwLOzCQlg==
POST /servlet/pdas?rnd=1e852a7
PDAS_HEADER_DEFLATE: eJylkV9vgjAUxb8Kue8bLbVME6hxa3BOyAxqtreFoXRkFLaCin76FfcHovFp D/fh/nrO6UmuM6xlZmzXqkyL3AV8jWDInKSWpTC2LnysohKYI43KhSXtgfHp AtIgMbR4PuHAlhghTl9m4fsozF79vVqpnHK1G228fu7H3nieTIuH4J4U4i1d PNFpyGdWvlf17jD241o6ZvITR6hOo70OIDYw7/kuaJFt0d8vW4ix9f8eVwS3 iQNk9YGhI8i+AdZdHPH3jm+A3ao4KqsJ7/qw9h13U5zKg1Kca21EBhhTcskT pdm5CV1QL1K5ftxUJ/LmdmnXZGZ6ZFOzOTP7AjwokJc=
POST /servlet/pdas?rnd=1e85efa
PDAS_HEADER_DEFLATE: eJylkV9vgjAUxb8Kue8bLbVME6hxa3BOyAxqtreFoXRkFLaCin76FfcHovFp D/fh/nrO6UmuM6xlZmzXqkyL3AV8jWDInKSWpTC2LnysohKYI43KhSXtgfHp AtIgMbR4PuHAlhghTl9m4fsozF79vVqpnHK1G228fu7H3nieTIuH4J4U4i1d PNFpyGdWvlf17jD241o6ZvITR6hOo70OIDYw7/kuaJFt0d8vW4ix9f8eV8Rq EwfI6gNDR5B9A6y7OOLvHd8Au1VxVFYT3vVh7TvupjiVB6U419qIDDCm5JIn SrNzE7qgXqRy/bipTuTN7dKuycz0yKZmc2b2BT0gkJg=
POST /servlet/pdas?rnd=1e86b7e
PDAS_HEADER_DEFLATE: eJylkV9vgjAUxb8Kue8bLbVME6hxa3BOyAxqtreFoXRkFLaCin76FfcHovFp D/fh/nrO6UmuM6xlZmzXqkyL3AV8jWDInKSWpTC2LnysohKYI43KhSXtgfHp AtIgMbR4PuHAlhghTl9m4fsozF79vVqpnHK1G228fu7H3nieTIuH4J4U4i1d PNFpyGdWvlf17jD241o6ZvITR6hOo70OIDYw7/kuaJFt0d8vW4ix9f8eV4S0 iQNk9YGhI8i+AdZdHPH3jm+A3ao4KqsJ7/qw9h13U5zKg1Kca21EBhhTcskT pdm5CV1QL1K5ftxUJ/LmdmnXZGZ6ZFOzOTP7Aj4YkJk=
Отличия в оригинальных(дешифрованных) запросах должно быть в 2 байтах - счетчик запросов.
У кого какие мысли, как шифруется этот PDAS_HEADER_DEFLATE?
Идет обмен по HTTPS между клиентом и сервером.После дешифрации HTTPS через прокси появилась такая картина. Клиент посылает запросы на сервер:
POST /servlet/pdas?rnd=1e7e1a3
PDAS_HEADER_DEFLATE: eJylkUtvgkAUhf8KufuWeThUExhjO8FaITWoaXcNRaGkDLQDKvrrO9gHROOq
POST /servlet/pdas?rnd=1e7ee1e
PDAS_HEADER_DEFLATE: eJylkV9vgjAUxb8Kue8bLbVME6hxa3BOyAxqtreFoXRkFLaCin76FfcHovFp
POST /servlet/pdas?rnd=1e7faa3
PDAS_HEADER_DEFLATE: eJylkUFvgkAQhf/KZu4tu+BSTWCNLcFaITWoaW8NRdluykK7oKK/vovaSjSe
POST /servlet/pdas?rnd=1e80759
PDAS_HEADER_DEFLATE: eJylkVFvgjAUhf9Kc983WrBME6hxIzgnZAY129vCULpmFLaCiv76FXWTaHza
POST /servlet/pdas?rnd=1e8142e
PDAS_HEADER_DEFLATE: eJylkV9vgjAUxb9Kc983WmqZJlDjRnBOyAxqtreFoXRkFLaCin76FfcHovFp
POST /servlet/pdas?rnd=1e820c7
PDAS_HEADER_DEFLATE: eJylkV9vgjAUxb8Kue8bLbWoCdS4NTgnZAY129vCUDoyCltBxX36FfcHovFp
POST /servlet/pdas?rnd=1e82d37
PDAS_HEADER_DEFLATE: eJylkVFvgjAUhf8Kue8bbbEME6hxIzgnZAY129vCUBgZha1FRX/9irpBND7t
POST /servlet/pdas?rnd=1e839a8
PDAS_HEADER_DEFLATE: eJylkVFvgjAUhf8Kue8bLVgmSalxIzgnZAY129vCUBgZha1FRX/9irpBND7t
POST /servlet/pdas?rnd=1e845dc
PDAS_HEADER_DEFLATE: eJylkVFvgjAUhf8Kue8bLbVME6hxIzgnZAY129vCUDoyCluLiv76lbkNovFp
POST /servlet/pdas?rnd=1e852a7
PDAS_HEADER_DEFLATE: eJylkV9vgjAUxb8Kue8bLbVME6hxa3BOyAxqtreFoXRkFLaCin76FfcHovFp
POST /servlet/pdas?rnd=1e85efa
PDAS_HEADER_DEFLATE: eJylkV9vgjAUxb8Kue8bLbVME6hxa3BOyAxqtreFoXRkFLaCin76FfcHovFp
POST /servlet/pdas?rnd=1e86b7e
PDAS_HEADER_DEFLATE: eJylkV9vgjAUxb8Kue8bLbVME6hxa3BOyAxqtreFoXRkFLaCin76FfcHovFp
Отличия в оригинальных(дешифрованных) запросах должно быть в 2 байтах - счетчик запросов.
У кого какие мысли, как шифруется этот PDAS_HEADER_DEFLATE?