Skill Name: HTTP Request and Response
Categorize Tag: HTTP
Skill Content: HTTP client sends a method to HTTP server and the server will reply a response to client.
Skill Description: Skill Description: Only in a few situations, the HTTP service will send packets to clients first without getting any command(method) from the HTTP client. In most cases, the HTTP client sends an HTTP command(method) called 'HTTP request' to an HTTP service. After the HTTP host processes the request, the HTTP service will send back the HTTP result called 'HTTP response' to the original HTTP client.
These HTTP response contains processed result information of the HTTP client command(method). The short result code of HTTP response can be summarized as the following parts:
- (A) 1xx is general information. For example, the '100' represents Host information to an HTTP client without success or failure.
- (B) 2xx is a successful request. The '200' represents HTTP command(method) processed and sends the content which contains HTML context or picture. The '200' represents the HTTP command(method) processed and sends the content which contains HTML context or picture. The '206' also means HTTP command(method) succeeds but the result content is too large to send in fews packets which might send partial content with many continued session parts.
- (C) 3xx is a redirection response which might send back a new location to send the HTTP method again.
- (D) 4xx means client command(method) error which may have some error from user.
- (E) 5xx means a negative response from HTTP server.
Only a few case that HTTP result code is '100' which represents HTTP server got the HTTP session from client but did not process any HTTP request or ask client to hold the HTTP session to wait HTTP result code later. It is an unusual phenomenon for HTTP protocol so we should keep cautious attention for '1xx' result code which might lead us to figure out it is a network traffic from malware(Trojan/RAT), DDoS attack or a reaction of arouters like Cisco Hardware.
NSPA suggested display filter of Wireshark:
http.response.code>=400 or (http.response.code>=100 and http.response.code<200)
Online Course: https://youtu.be/Vy3p3V0Q2A4
Analytical Example: https://www.hugediamond.net/shop
------------------------------------------------------------------------
Extent Information:
Español: El cliente HTTP envía un comando HTTP al servidor HTTP y el servidor responderá con el valor de respuesta HTTP al cliente.
Franch: Le client HTTP envoie une commande HTTP au serveur HTTP, et le serveur répondra avec la valeur de réponse HTTP au client.
German: Der HTTP-Client sendet einen HTTP-Befehl an den HTTP-Server, und der Server antwortet mit dem HTTP-Antwortwert an den Client.
Chinese: HTTP 客戶端向 HTTP 服務器發送HTTP命令，服務器將回覆HTTP回應值給客戶端。
Japanese: HTTPクライアントはHTTPコマンドをHTTPサーバーに送信し、サーバーはHTTP応答値でクライアントに応答します。
Vietnamese: Máy khách HTTP gửi một phương thức đến máy chủ HTTP và máy chủ sẽ trả lời phản hồi cho máy khách.
Thai(Siamese): ไคลเอนต์ HTTP ส่งคำสั่ง HTTP ไปยังเซิร์ฟเวอร์ HTTP และเซิร์ฟเวอร์จะตอบกลับด้วยค่าตอบกลับ HTTP ไปยังไคลเอนต์
Indonesian: Klien HTTP mengirimkan perintah HTTP ke server HTTP, dan server akan membalas dengan nilai respons HTTP ke klien.permintaan HTTP/HTTPS datang.
Malay: Klien HTTP mengirimkan perintah HTTP ke pelayan HTTP, dan pelayan akan membalas dengan nilai respons HTTP kepada klien.
Myanmar: HTTP client သည် HTTP command တစ်ခုအား HTTP server သို့ပို့ပေးပြီး server သည် HTTP တုံ့ပြန်မှုတန်ဖိုးဖြင့် client ကိုပြန်ပြောလိမ့်မည်။
