Donchano wrote:
> On Mon, 04 Jan 2010 01:23:54 +1300, Richard <> shouted
> from the highest rooftop:
>
>> Donchano wrote:
>>> On Sun, 03 Jan 2010 14:26:13 +1300, Enkidu <>
>>> shouted from the highest rooftop:
>>>
>>> In retrrospect I'm inclined to believe that the reason the explanation
>>> worked had little to do with me finding that the cached pages had
>>> finally stopped loading this morning and that the new, updated pages
>>> had taken their place.
>>>
>>> But the problem persists. I've just updated another page (just to test
>>> things out) and all I can load in FF and IE is the page as it looked
>>> before I updated.
>> You still havent answerd what expiration directives the server is
>> issuing to the ISPs cache along with the page. If it is giving is
>> several days before expiry what you are seeing is the expected behaviour.
>
> That's because I don't know how. But since I haven't changed anything
> other than a few words of text on each the pages I can think why the
> expiration directives would have suddenly changed. As I said earlier,
> up until Boxing Day, the changes/updates I made and uploaded used to
> visible online within seconds of me publishing them - and have so for
> years.
>
>> Trying to troubleshoot ISP caching issues without looking at what your
>> server is instructing the cache to do is like trying to diagnose a
>> faulty car without seeing it.
>
> Is there somewhere you can point me to that has a tutorial on this?
> Because I don't know how to figure out why expiration directives the
> server is issuing to Xtra's cache along with the pages.
>
If you know how to use a command prompt you may be able to get a bit
more information. See below, pulled from
http://forums.remote-exploit.org/tut...-grabbing.html
It shows how to connect to the server from the command line and get info
back. Note that you might not *see* the 'HEAD / HTTP/1.0' bit and you'll
have to type it blind, follow by a couple of 'enters'.
Cheers,
Cliff
To fingerprint a web server, you should connect to it with a number of
different tools and take make a decision based on the results. On easy
method of fingerprinting a web server is to use netcat or Telnet.
telnet
www.victim.com 80
Note that there is a space and the target port number after the DNS name
of the victim server, whatever that may be. This will get Telnet to
connect to the web server service on port 80. Great, now you can type
directly into the Telnet session certain commands that are recognised by
the web server and will illicit a response.
HEAD / HTTP/1.0
This should suffice for most fingerprinting needs. The HEAD command will
return to the Telnet screen the header of the victim server. In the
header will most likely be a line starting with Server:. After that
should be the type of server it is:
Server: Microsoft IIS/5.0
Server: Microsoft IIS/6.0
Server: Apache (Win32) 2.0.32
Server: Apache (Redhat) 1.3.39
And so on.
--
The Internet is interesting in that although the nicknames may change,
the same old personalities show through.