From 43799d3b565d2a3798b2d7d618fcb6616774c44d Mon Sep 17 00:00:00 2001 From: wenxianping <931128603@qq.com> Date: Thu, 3 Jan 2019 20:38:08 +0800 Subject: [PATCH 01/21] =?UTF-8?q?=E4=BC=98=E5=8C=96=E6=9F=A5=E8=AF=A2?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- agency/cdn_utils.py | 7 +++-- config/configCommon.py | 7 ++++- config/ticketConf.py | 2 +- config/ticket_config.yaml | 10 +++--- damatuCode/ruokuai.py | 2 +- init/login.py | 10 ------ init/select_ticket_info.py | 52 +++++++++++++++--------------- inter/CheckOrderInfo.py | 4 +-- inter/GetRandCode.py | 2 +- inter/Query.py | 4 +-- inter/QueryOrderWaitTime.py | 4 +-- myUrllib/myurllib2.py | 63 ------------------------------------- 12 files changed, 52 insertions(+), 115 deletions(-) delete mode 100755 myUrllib/myurllib2.py diff --git a/agency/cdn_utils.py b/agency/cdn_utils.py index 0b77ba1..dad4dbe 100755 --- a/agency/cdn_utils.py +++ b/agency/cdn_utils.py @@ -6,8 +6,9 @@ import sys import csv import requests from config import urlConf -reload(sys) -sys.setdefaultencoding('utf-8') +if sys.version_info.major == 2: + reload(sys) + sys.setdefaultencoding('utf-8') class CDNProxy: @@ -42,7 +43,7 @@ class CDNProxy: city_re = re.compile(r"
  • self.open_time: + break + time.sleep(0.0001) else: sleep_time_s = 0.5 sleep_time_t = 3 @@ -275,19 +277,19 @@ class select: random_time)) time.sleep(random_time) except PassengerUserException as e: - print e.message + print(e.message) break except ticketConfigException as e: - print e.message + print(e.message) break except ticketIsExitsException as e: - print e.message + print(e.message) break except ticketNumOutException as e: - print e.message + print(e.message) break except UserPasswordException as e: - print e.message + print(e.message) break except ValueError as e: if e.message == "No JSON object could be decoded": diff --git a/inter/CheckOrderInfo.py b/inter/CheckOrderInfo.py index 867ee2f..7dcb4ab 100644 --- a/inter/CheckOrderInfo.py +++ b/inter/CheckOrderInfo.py @@ -68,7 +68,7 @@ class checkOrderInfo: self.passengerTicketStrList, ) QueueCount.sendGetQueueCount() - elif "errMsg" in checkOrderInfoRep['data'] and checkOrderInfoRep['data']["errMsg"]: - print checkOrderInfoRep['data']["errMsg"] + elif "errMsg" in data and data["errMsg"]: + print(checkOrderInfoRep['data']["errMsg"]) elif 'messages' in checkOrderInfoRep and checkOrderInfoRep['messages']: print (checkOrderInfoRep['messages'][0]) \ No newline at end of file diff --git a/inter/GetRandCode.py b/inter/GetRandCode.py index 49008f5..054735d 100644 --- a/inter/GetRandCode.py +++ b/inter/GetRandCode.py @@ -23,7 +23,7 @@ def getRandCode(is_auto_code, auto_code_type, result): return codexy(Ofset=",".join(list(Result["Result"])), is_raw_input=False) else: if "Error" in Result and Result["Error"]: - print u"打码平台错误: {0}, 请登录打码平台查看-http://www.ruokuai.com/client/index?6726".format(Result["Error"]) + print(u"打码平台错误: {0}, 请登录打码平台查看-http://www.ruokuai.com/client/index?6726".format(Result["Error"])) return "" else: img = Image.open('./tkcode') diff --git a/inter/Query.py b/inter/Query.py index 81d5239..3721224 100644 --- a/inter/Query.py +++ b/inter/Query.py @@ -117,7 +117,7 @@ class query: start_time = ticket_info[8] arrival_time = ticket_info[9] distance_time = ticket_info[10] - print start_time, arrival_time, distance_time + print(start_time, arrival_time, distance_time) seat = j try: ticket_num = int(ticket_info[j]) @@ -160,7 +160,7 @@ class query: "status": True, } else: - print u"车次配置信息有误，或者返回数据异常，请检查 {}".format(station_ticket) + print(u"车次配置信息有误，或者返回数据异常，请检查 {}".format(station_ticket)) return {"code": ticket.FAIL_CODE, "status": False} diff --git a/inter/QueryOrderWaitTime.py b/inter/QueryOrderWaitTime.py index 6a77ce4..9dbc888 100644 --- a/inter/QueryOrderWaitTime.py +++ b/inter/QueryOrderWaitTime.py @@ -45,7 +45,7 @@ class queryOrderWaitTime: raise ticketIsExitsException(ticket.WAIT_ORDER_SUCCESS.format( data.get("orderId"))) elif data.get("msg", False): - print data.get("msg", "") + print(data.get("msg", "")) break elif data.get("waitTime", False): print(ticket.WAIT_ORDER_CONTINUE.format(0 - data.get("waitTime", False))) @@ -83,7 +83,7 @@ class queryOrderWaitTime: queryMyOrderNoCompleteResult["data"]["orderCacheDTO"]["message"]["message"]) else: if queryMyOrderNoCompleteResult.get("message", False): - print queryMyOrderNoCompleteResult.get("message", False) + print(queryMyOrderNoCompleteResult.get("message", False)) return False else: return False diff --git a/myUrllib/myurllib2.py b/myUrllib/myurllib2.py deleted file mode 100755 index 6b36cb3..0000000 --- a/myUrllib/myurllib2.py +++ /dev/null @@ -1,63 +0,0 @@ -# -*- coding=utf-8 -*- -import httplib -import ssl -import urllib -import urllib2 -import sys -from cookielib import LWPCookieJar - -reload(sys) -sys.setdefaultencoding('UTF8') -cookiejar = LWPCookieJar() -cookiesuppor = urllib2.HTTPCookieProcessor(cookiejar) -opener = urllib2.build_opener(cookiesuppor, urllib2.HTTPHandler) -urllib2.install_opener(opener) -ssl._create_default_https_context = ssl._create_unverified_context - - -def get(url): - try: - request = urllib2.Request(url=url) - request.add_header("Content-Type", "application/x-www-form-urlencoded; charset=utf-8") - request.add_header('X-Requested-With', 'xmlHttpRequest') - request.add_header('User-Agent', "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" - ) - request.add_header('Referer', 'https://kyfw.12306.cn/otn/confirmPassenger/initDc') - request.add_header('Accept', '*/*') - result = urllib2.urlopen(request).read() - assert isinstance(result, object) - return result - except httplib.error as e: - print e - pass - except urllib2.URLError as e: - print e - pass - except urllib2.HTTPBasicAuthHandler, urllib2.HTTPError: - pass - - -def Post(url, data): - try: - request = urllib2.Request(url=url, data=urllib.urlencode(data)) - # req.add_header('User-Agent', 'Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0') - # request = urllib2Post.Request(ajax_url, urllib.urlencode(dc)) - request.add_header("Content-Type", "application/x-www-form-urlencoded;application/json;charset=utf-8") - request.add_header('X-Requested-With', 'xmlHttpRequest') - request.add_header('User-Agent', "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" - ) - request.add_header('Referer', 'https://kyfw.12306.cn/otn/confirmPassenger/initDc') - request.add_header('Accept', '*/*') - # request.add_header('Accept-Encoding', 'gzip, deflate') - for i in range(3): - result = urllib2.urlopen(request).read() - if result: - return result - else: - print("返回结果为空，正在第{0}重试".format(i)) - except httplib.error as e: - return e - except urllib2.URLError as e: - return e - except urllib2.HTTPBasicAuthHandler, urllib2.HTTPError: - return ('error') \ No newline at end of file From fa85652febd8e7a58dfedee82aa6dc35aefbc238 Mon Sep 17 00:00:00 2001 From: wenxianping <931128603@qq.com> Date: Fri, 4 Jan 2019 09:38:40 +0800 Subject: [PATCH 02/21] =?UTF-8?q?=E4=BC=98=E5=8C=96=E7=99=BB=E5=BD=95?= =?UTF-8?q?=E6=8E=89=E7=BA=BF?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- agency/cdn_utils.py | 2 +- config/urlConf.py | 1 + init/select_ticket_info.py | 31 ++++++++++++++++--------------- inter/CheckUser.py | 31 ++++++++++++++++--------------- myUrllib/httpUtils.py | 9 ++++++--- 5 files changed, 40 insertions(+), 34 deletions(-) diff --git a/agency/cdn_utils.py b/agency/cdn_utils.py index dad4dbe..7626f6f 100755 --- a/agency/cdn_utils.py +++ b/agency/cdn_utils.py @@ -91,7 +91,7 @@ class CDNProxy: f.write(json.dumps(local_dict)+"\n") num += 1 except Exception as e: - print(e.message) + print(e) print(u"本次cdn获取完成，总个数{0}".format(num)) def all_cdn(self): diff --git a/config/urlConf.py b/config/urlConf.py index 9599c89..2963815 100755 --- a/config/urlConf.py +++ b/config/urlConf.py @@ -53,6 +53,7 @@ urls = { "s_time": 0.1, "is_logger": False, "is_json": False, + "not_decode": True, }, "codeCheck": { # 验证码校验 "req_url": "/passport/captcha/captcha-check", diff --git a/init/select_ticket_info.py b/init/select_ticket_info.py index e6ee5cf..054cc87 100755 --- a/init/select_ticket_info.py +++ b/init/select_ticket_info.py @@ -62,11 +62,11 @@ class select: :return: """ ticket_info_config = _get_yaml() - from_station = ticket_info_config["set"]["from_station"].encode("utf8") - to_station = ticket_info_config["set"]["to_station"].encode("utf8") + from_station = ticket_info_config["set"]["from_station"] + to_station = ticket_info_config["set"]["to_station"] station_dates = ticket_info_config["set"]["station_dates"] set_names = ticket_info_config["set"]["set_type"] - set_type = [seat_conf[x.encode("utf8")] for x in ticket_info_config["set"]["set_type"]] + set_type = [seat_conf[x.encode("utf-8")] for x in ticket_info_config["set"]["set_type"]] is_more_ticket = ticket_info_config["set"]["is_more_ticket"] ticke_peoples = ticket_info_config["set"]["ticke_peoples"] station_trains = ticket_info_config["set"]["station_trains"] @@ -179,13 +179,14 @@ class select: l.reqLiftTicketInit() self.call_login() check_user = checkUser(self) - check_user.sendCheckUser() + t = threading.Thread(target=check_user.sendCheckUser) + t.setDaemon(True) + t.start() from_station, to_station = self.station_table(self.from_station, self.to_station) num = 0 while 1: try: num += 1 - check_user.sendCheckUser() now = datetime.datetime.now() # 感谢群里大佬提供整点代码 if now.hour >= 23 or now.hour < 6: print(u"12306休息时间，本程序自动停止,明天早上七点将自动运行") @@ -277,31 +278,31 @@ class select: random_time)) time.sleep(random_time) except PassengerUserException as e: - print(e.message) + print(e) break except ticketConfigException as e: - print(e.message) + print(e) break except ticketIsExitsException as e: - print(e.message) + print(e) break except ticketNumOutException as e: - print(e.message) + print(e) break except UserPasswordException as e: - print(e.message) + print(e) break except ValueError as e: - if e.message == "No JSON object could be decoded": + if e == "No JSON object could be decoded": print(u"12306接口无响应，正在重试") else: - print(e.message) + print(e) except KeyError as e: - print(e.message) + print(e) except TypeError as e: - print(u"12306接口无响应，正在重试 {0}".format(e.message)) + print(u"12306接口无响应，正在重试 {0}".format(e)) except socket.error as e: - print(e.message) + print(e) if __name__ == '__main__': diff --git a/inter/CheckUser.py b/inter/CheckUser.py index 7ababa0..1cfd28e 100644 --- a/inter/CheckUser.py +++ b/inter/CheckUser.py @@ -15,20 +15,21 @@ class checkUser: :return: """ CHENK_TIME = 0.3 - if wrapcache.get("user_time") is None: - check_user_url = self.session.urls["check_user_url"] - data = {"_json_att": ""} - check_user = self.session.httpClint.send(check_user_url, data) - if check_user.get("data", False): - check_user_flag = check_user["data"]["flag"] - if check_user_flag is True: - wrapcache.set("user_time", datetime.datetime.now(), timeout=60 * CHENK_TIME) - else: - if check_user['messages']: - print (ticket.LOGIN_SESSION_FAIL.format(check_user['messages'])) - self.session.call_login() + while 1: + if wrapcache.get("user_time") is None: + check_user_url = self.session.urls["check_user_url"] + data = {"_json_att": ""} + check_user = self.session.httpClint.send(check_user_url, data) + if check_user.get("data", False): + check_user_flag = check_user["data"]["flag"] + if check_user_flag is True: wrapcache.set("user_time", datetime.datetime.now(), timeout=60 * CHENK_TIME) else: - print (ticket.LOGIN_SESSION_FAIL.format(check_user['messages'])) - self.session.call_login() - wrapcache.set("user_time", datetime.datetime.now(), timeout=60 * CHENK_TIME) \ No newline at end of file + if check_user['messages']: + print (ticket.LOGIN_SESSION_FAIL.format(check_user['messages'])) + self.session.call_login() + wrapcache.set("user_time", datetime.datetime.now(), timeout=60 * CHENK_TIME) + else: + print (ticket.LOGIN_SESSION_FAIL.format(check_user['messages'])) + self.session.call_login() + wrapcache.set("user_time", datetime.datetime.now(), timeout=60 * CHENK_TIME) \ No newline at end of file diff --git a/myUrllib/httpUtils.py b/myUrllib/httpUtils.py index c1e1ad8..5712981 100755 --- a/myUrllib/httpUtils.py +++ b/myUrllib/httpUtils.py @@ -5,8 +5,6 @@ from collections import OrderedDict from time import sleep import requests from config import logger -import wrapcache - def _set_header_default(): header_dict = OrderedDict() @@ -137,11 +135,16 @@ class HTTPClient(object): verify=False, **kwargs) if response.status_code == 200 or response.status_code == 302: + if urls.get("not_decode", False): + return response.content if response.content: if is_logger: logger.log( u"出参：{0}".format(response.content)) - return json.loads(response.content) if urls["is_json"] else response.content + if urls["is_json"]: + return json.loads(response.content.decode() if isinstance(response.content, bytes) else response.content) + else: + return response.content.decode("utf8", "ignore") if isinstance(response.content, bytes) else response.content else: logger.log( u"url: {} 返回参数为空".format(urls["req_url"])) From cf904073c46a6253d79b1bd4484ccaf2f8a4e57f Mon Sep 17 00:00:00 2001 From: ttdevs Date: Fri, 4 Jan 2019 11:00:10 +0800 Subject: [PATCH 03/21] change config file(cdn_list, station_name.txt) load manage --- agency/cdn_utils.py | 4 +++- init/select_ticket_info.py | 4 +++- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/agency/cdn_utils.py b/agency/cdn_utils.py index 7626f6f..f081a6e 100755 --- a/agency/cdn_utils.py +++ b/agency/cdn_utils.py @@ -1,6 +1,7 @@ # encoding=utf8 import collections import json +import os import re import sys import csv @@ -53,7 +54,8 @@ class CDNProxy: def open_cdn_file(self): cdn = [] cdn_re = re.compile("CONNECT (\S+) HTTP/1.1") - with open("./cdn_list", "r") as f: + path = os.path.join(os.path.dirname(__file__), '../cdn_list') + with open(path, "r") as f: for i in f.readlines(): # print(i.replace("\n", "")) cdn_list = re.findall(cdn_re, i) diff --git a/init/select_ticket_info.py b/init/select_ticket_info.py index 054cc87..abe14c5 100755 --- a/init/select_ticket_info.py +++ b/init/select_ticket_info.py @@ -1,6 +1,7 @@ # -*- coding=utf-8 -*- import datetime import random +import os import socket import sys import threading @@ -118,7 +119,8 @@ class select: :param station: :return: """ - result = open('station_name.txt') + path = os.path.join(os.path.dirname(__file__), '../station_name.txt') + result = open(path) info = result.read().split('=')[1].strip("'").split('@') del info[0] station_name = {} From 9b11f95715dea618efcab743e88742b9b508a154 Mon Sep 17 00:00:00 2001 From: xingzhilong Date: Fri, 4 Jan 2019 17:57:37 +0800 Subject: [PATCH 04/21] =?UTF-8?q?=E4=BF=AE=E6=94=B9Dockerfile=E5=90=AF?= =?UTF-8?q?=E5=8A=A8=E4=B8=8D=E8=83=BD=E7=9B=B4=E6=8E=A5=E5=90=AF=E5=8A=A8?= =?UTF-8?q?=EF=BC=8C=E8=80=8C=E6=98=AF=E9=9C=80=E8=A6=81docker=20run=20doc?= =?UTF-8?q?kerticket=20=20python=20run.py=20&,=20=E5=AE=9E=E7=8E=B0?= =?UTF-8?q?=E5=9C=A8container=E5=90=AF=E5=8A=A8=E6=97=B6=E5=80=99=E5=B0=B1?= =?UTF-8?q?=E8=BF=90=E8=A1=8C?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- Dockerfile | 3 ++- README.md | 5 +++-- 2 files changed, 5 insertions(+), 3 deletions(-) diff --git a/Dockerfile b/Dockerfile index 17fd237..c041944 100644 --- a/Dockerfile +++ b/Dockerfile @@ -10,4 +10,5 @@ RUN pip install --no-cache-dir -r requirements.txt #EXPOSE 5010 WORKDIR /usr/src/app/ -CMD [ "python", "run.py" ] +#CMD [ "python", "run.py" ] +ENTRYPOINT [ "python", "run.py" ] diff --git a/README.md b/README.md index 931ff36..2d5bab8 100755 --- a/README.md +++ b/README.md @@ -19,8 +19,9 @@ - 由于新增对时功能，请务必用sudo，sudo，sudo 执行，否则会报权限错误，windows打开ide或者cmd请用管理员身份执行python run.py，不需要加sudo - 如果你的服务器安装了docker，那么就可以docker启动 - 1、docker build -t dockerticket . - - 2、docker run dockerticket python run.py & - - 3、本来是可以直接Dockerfile启动的，不知道为毛启动不了，如果有大佬看到问题所在，欢迎提出 + - 2、~~docker run dockerticket python run.py &~~ + - 3、~~本来是可以直接Dockerfile启动的，不知道为毛启动不了，如果有大佬看到问题所在，欢迎提出~~ + - 4、docker run -d --name 12306-ticket dockerticket - 目录对应说明 - agency - cdn代理 From cfebf48646f9cd75eb447a0ce3ed87064d7ac30d Mon Sep 17 00:00:00 2001 From: wenxianping <931128603@qq.com> Date: Sun, 6 Jan 2019 12:16:45 +0800 Subject: [PATCH 05/21] =?UTF-8?q?=E4=BF=AE=E6=94=B9=E4=BC=91=E7=9C=A0bug?= =?UTF-8?q?=20=E5=A2=9E=E5=8A=A0=E8=BD=AF=E5=8D=A7=E5=8A=9F=E8=83=BD?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- config/configCommon.py | 14 +++++++++++++- config/ticket_config.yaml | 24 ++++++++++++++---------- init/select_ticket_info.py | 10 ++-------- inter/CheckUser.py | 2 ++ inter/GetPassengerDTOs.py | 1 + 5 files changed, 32 insertions(+), 19 deletions(-) diff --git a/config/configCommon.py b/config/configCommon.py index 3ec1fb0..0caf12d 100755 --- a/config/configCommon.py +++ b/config/configCommon.py @@ -1,5 +1,5 @@ # -*- coding: utf-8 -*- - +import datetime import os import sys import time @@ -23,6 +23,7 @@ seat_conf = {'商务座': 32, '特等座': 25, '软卧': 23, '硬卧': 28, + '软座': 24, '硬座': 29, '无座': 26, } @@ -95,3 +96,14 @@ def getVCodeImageFile(imageName): def getCacheFile(cacheType): return os.path.join(getCacheDir(), cacheType + ".cache") + + +def checkSleepTime(session): + now = datetime.datetime.now() + if now.hour >= 23 or now.hour < 6: + print(u"12306休息时间，本程序自动停止,明天早上七点将自动运行") + open_time = datetime.datetime(now.year, now.month, now.day, 6) + if open_time < now: + open_time += datetime.timedelta(1) + time.sleep((open_time - now).seconds) + session.call_login() diff --git a/config/ticket_config.yaml b/config/ticket_config.yaml index 5d85194..3b09c5e 100755 --- a/config/ticket_config.yaml +++ b/config/ticket_config.yaml @@ -5,7 +5,7 @@ set: # - 2018-01-06 # - 2018-01-07 station_dates: - - "2019-01-11" + - "2019-02-02" # 是否根据时间范围 和 乘车类型 购票 # 否则将需要手动填写车次 @@ -45,15 +45,18 @@ set: # - "G1021" # - "G99" # - "G6011" - - "D2972" - - "D1874" - - "D2834" +# - "D2972" +# - "D1874" +# - "D2834" + - "G6172" + - "G6186" + - "G6154" # 出发城市，比如深圳北，就填深圳就搜得到 from_station: "广州南" # 到达城市 比如深圳北，就填深圳就搜得到 - to_station: "三江南" + to_station: "邵阳" # 座位(list) 多个座位ex: # - "二等座" @@ -68,8 +71,9 @@ set: # - "张三" # - "李四" ticke_peoples: -# - "文贤平" - - "梁敏" + - "文贤平" + - "李梦云" +# - "梁敏" # 12306登录账号(list) 12306account: - user: "931128603@qq.com" @@ -79,7 +83,7 @@ set: ticket_black_list_time: 5 # 自动打码 -is_auto_code: True +is_auto_code: False # 打码平台， 2 为若快平台（目前只支持若快平台打码，打码兔已经关闭）, 若快注册地址：http://www.ruokuai.com/client/index?6726 auto_code_type: 2 @@ -114,14 +118,14 @@ email_conf: is_cdn: 1 # 下单接口分为两种，1 为快速下单，2 是普通下单 -order_type: 1 +order_type: 2 # 下单模式 1 为预售，整点刷新，刷新间隔0.1-0.5S, 然后会校验时间，比如12点的预售，那脚本就会在12.00整检票，刷新订单 # 2 是捡漏，捡漏的刷新间隔时间为0.5-3秒，时间间隔长，不容易封ip order_model: 2 # 预售放票时间, 如果是捡漏模式，可以忽略此操作 -open_time: '20:15:00' +open_time: '13:00:00' diff --git a/init/select_ticket_info.py b/init/select_ticket_info.py index abe14c5..f046168 100755 --- a/init/select_ticket_info.py +++ b/init/select_ticket_info.py @@ -10,7 +10,7 @@ import time import wrapcache from agency.cdn_utils import CDNProxy -from config import urlConf +from config import urlConf, configCommon from config.AutoSynchroTime import autoSynchroTime from config.TicketEnmu import ticket from config.configCommon import seat_conf @@ -190,13 +190,7 @@ class select: try: num += 1 now = datetime.datetime.now() # 感谢群里大佬提供整点代码 - if now.hour >= 23 or now.hour < 6: - print(u"12306休息时间，本程序自动停止,明天早上七点将自动运行") - open_time = datetime.datetime(now.year, now.month, now.day, 6) - if open_time < now: - open_time += datetime.timedelta(1) - time.sleep((open_time - now).seconds) - self.call_login() + configCommon.checkSleepTime(self) # 晚上到点休眠 if self.order_model is 1: sleep_time_s = 0.5 sleep_time_t = 0.6 diff --git a/inter/CheckUser.py b/inter/CheckUser.py index 1cfd28e..1505c5e 100644 --- a/inter/CheckUser.py +++ b/inter/CheckUser.py @@ -2,6 +2,7 @@ import datetime import wrapcache +from config import configCommon from config.TicketEnmu import ticket @@ -16,6 +17,7 @@ class checkUser: """ CHENK_TIME = 0.3 while 1: + configCommon.checkSleepTime(self.session) # 修复晚上查询线程休眠时，检查登录线程为休眠，造成快豆迅速消耗 if wrapcache.get("user_time") is None: check_user_url = self.session.urls["check_user_url"] data = {"_json_att": ""} diff --git a/inter/GetPassengerDTOs.py b/inter/GetPassengerDTOs.py index 925f0d9..0c7da1f 100644 --- a/inter/GetPassengerDTOs.py +++ b/inter/GetPassengerDTOs.py @@ -48,6 +48,7 @@ class getPassengerDTOs: '商务座': 9, '硬座': 1, '无座': 1, + '软座': 2, '软卧': 4, '硬卧': 3, } From 41a78209c80a44f5b52e5fd2903bac2261e151f0 Mon Sep 17 00:00:00 2001 From: housq Date: Sun, 6 Jan 2019 12:26:08 +0800 Subject: [PATCH 06/21] =?UTF-8?q?=E4=BC=98=E5=8C=96=E6=89=8B=E5=8A=A8?= =?UTF-8?q?=E8=AF=86=E5=88=AB=E6=97=B6=E7=9A=84=E5=9D=90=E6=A0=87?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- inter/GetRandCode.py | 55 +++++++++++++++++++++++++++++++++----------- 1 file changed, 41 insertions(+), 14 deletions(-) diff --git a/inter/GetRandCode.py b/inter/GetRandCode.py index 054735d..b7517b5 100644 --- a/inter/GetRandCode.py +++ b/inter/GetRandCode.py @@ -53,31 +53,58 @@ def codexy(Ofset=None, is_raw_input=True): post = [] offsetsX = 0 # 选择的答案的left值,通过浏览器点击8个小图的中点得到的,这样基本没问题 offsetsY = 0 # 选择的答案的top值 + # for ofset in select: + # if ofset == '1': + # offsetsY = 46 + # offsetsX = 42 + # elif ofset == '2': + # offsetsY = 46 + # offsetsX = 105 + # elif ofset == '3': + # offsetsY = 45 + # offsetsX = 184 + # elif ofset == '4': + # offsetsY = 48 + # offsetsX = 256 + # elif ofset == '5': + # offsetsY = 36 + # offsetsX = 117 + # elif ofset == '6': + # offsetsY = 112 + # offsetsX = 115 + # elif ofset == '7': + # offsetsY = 114 + # offsetsX = 181 + # elif ofset == '8': + # offsetsY = 111 + # offsetsX = 252 + # else: + # pass for ofset in select: if ofset == '1': - offsetsY = 46 - offsetsX = 42 + offsetsY = 77 + offsetsX = 40 elif ofset == '2': - offsetsY = 46 - offsetsX = 105 + offsetsY = 77 + offsetsX = 112 elif ofset == '3': - offsetsY = 45 + offsetsY = 77 offsetsX = 184 elif ofset == '4': - offsetsY = 48 + offsetsY = 77 offsetsX = 256 elif ofset == '5': - offsetsY = 36 - offsetsX = 117 + offsetsY = 149 + offsetsX = 40 elif ofset == '6': - offsetsY = 112 - offsetsX = 115 + offsetsY = 149 + offsetsX = 112 elif ofset == '7': - offsetsY = 114 - offsetsX = 181 + offsetsY = 149 + offsetsX = 184 elif ofset == '8': - offsetsY = 111 - offsetsX = 252 + offsetsY = 149 + offsetsX = 256 else: pass post.append(offsetsX) From a78683bad29e67af19b16cb497b627c31eea1ce2 Mon Sep 17 00:00:00 2001 From: wenxianping <931128603@qq.com> Date: Mon, 7 Jan 2019 11:44:06 +0800 Subject: [PATCH 07/21] =?UTF-8?q?=E4=BF=AE=E6=94=B9cpu=E5=8D=A0=E7=94=A8?= =?UTF-8?q?=E8=BF=87=E9=AB=98=E9=97=AE=E9=A2=98?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- README.md | 2 +- init/select_ticket_info.py | 2 +- inter/CheckUser.py | 3 ++- 3 files changed, 4 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index 2d5bab8..024d6fb 100755 --- a/README.md +++ b/README.md @@ -35,7 +35,7 @@ ![image](https://github.com/testerSunshine/12306/blob/master/uml/uml.png) - 项目声明： - - 本软件只供学习交流使用，务作为商业用途，交流群号：286271084(已满)， 请加2群：649992274 + - 本软件只供学习交流使用，务作为商业用途，交流群号：286271084(已满)， 2群：649992274(已满)，请加3群， 群号：632501142 - 能为你抢到一张回家的票，是我最大的心愿 - 成功log，如果是购票失败的，请带上失败的log给我，我尽力帮你调，也可加群一起交流，程序只是加速买票的过程，并不一定能买到票 diff --git a/init/select_ticket_info.py b/init/select_ticket_info.py index f046168..762b15a 100755 --- a/init/select_ticket_info.py +++ b/init/select_ticket_info.py @@ -86,7 +86,7 @@ class select: open_time = ticket_info_config["open_time"] print(u"*" * 50) - print(u"12306刷票小助手，最后更新于2019.01.02，请勿作为商业用途，交流群号：286271084(已满)， 请加2群：649992274") + print(u"12306刷票小助手，最后更新于2019.01.07，请勿作为商业用途，交流群号：286271084(已满)， 2群：649992274(已满)，请加3群，群号：632501142") if is_by_time: method_notie = u"购票方式：根据时间区间购票\n可接受最早出发时间：{0}\n可接受最晚抵达时间：{1}\n可接受最长旅途时间：{2}\n可接受列车类型：{3}\n" \ .format(minutes_to_time(departure_time), minutes_to_time(arrival_time), minutes_to_time(take_time), diff --git a/inter/CheckUser.py b/inter/CheckUser.py index 1505c5e..3b341df 100644 --- a/inter/CheckUser.py +++ b/inter/CheckUser.py @@ -1,7 +1,7 @@ # coding=utf-8 import datetime +import time import wrapcache - from config import configCommon from config.TicketEnmu import ticket @@ -17,6 +17,7 @@ class checkUser: """ CHENK_TIME = 0.3 while 1: + time.sleep(0.1) # 防止cpu占用过高 configCommon.checkSleepTime(self.session) # 修复晚上查询线程休眠时，检查登录线程为休眠，造成快豆迅速消耗 if wrapcache.get("user_time") is None: check_user_url = self.session.urls["check_user_url"] From 2df57447d3a809d9458c172529daa4f0c9d39296 Mon Sep 17 00:00:00 2001 From: wenxianping <931128603@qq.com> Date: Mon, 7 Jan 2019 11:54:47 +0800 Subject: [PATCH 08/21] =?UTF-8?q?=E4=BC=98=E5=8C=96cdn=E3=80=82?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- agency/cdn_utils.py | 17 +++++++++++++---- inter/GetRandCode.py | 27 --------------------------- 2 files changed, 13 insertions(+), 31 deletions(-) diff --git a/agency/cdn_utils.py b/agency/cdn_utils.py index f081a6e..6559259 100755 --- a/agency/cdn_utils.py +++ b/agency/cdn_utils.py @@ -53,14 +53,23 @@ class CDNProxy: def open_cdn_file(self): cdn = [] - cdn_re = re.compile("CONNECT (\S+) HTTP/1.1") + # cdn_re = re.compile("CONNECT (\S+) HTTP/1.1") + # path = os.path.join(os.path.dirname(__file__), '../cdn_list') + # with open(path, "r") as f: + # for i in f.readlines(): + # # print(i.replace("\n", "")) + # cdn_list = re.findall(cdn_re, i) + # if cdn_list and "kyfw.12306.cn:443" not in cdn_list: + # print(cdn_list[0].split(":")[0]) + # cdn.append(cdn_list[0].split(":")[0]) + # return cdn path = os.path.join(os.path.dirname(__file__), '../cdn_list') with open(path, "r") as f: for i in f.readlines(): # print(i.replace("\n", "")) - cdn_list = re.findall(cdn_re, i) - if cdn_list and "kyfw.12306.cn:443" not in cdn_list: - cdn.append(cdn_list[0].split(":")[0]) + if i and "kyfw.12306.cn:443" not in i: + cdn.append(i.replace("\n", "")) + print(cdn) return cdn def get_cdn_list(self): diff --git a/inter/GetRandCode.py b/inter/GetRandCode.py index b7517b5..8d496e4 100644 --- a/inter/GetRandCode.py +++ b/inter/GetRandCode.py @@ -53,33 +53,6 @@ def codexy(Ofset=None, is_raw_input=True): post = [] offsetsX = 0 # 选择的答案的left值,通过浏览器点击8个小图的中点得到的,这样基本没问题 offsetsY = 0 # 选择的答案的top值 - # for ofset in select: - # if ofset == '1': - # offsetsY = 46 - # offsetsX = 42 - # elif ofset == '2': - # offsetsY = 46 - # offsetsX = 105 - # elif ofset == '3': - # offsetsY = 45 - # offsetsX = 184 - # elif ofset == '4': - # offsetsY = 48 - # offsetsX = 256 - # elif ofset == '5': - # offsetsY = 36 - # offsetsX = 117 - # elif ofset == '6': - # offsetsY = 112 - # offsetsX = 115 - # elif ofset == '7': - # offsetsY = 114 - # offsetsX = 181 - # elif ofset == '8': - # offsetsY = 111 - # offsetsX = 252 - # else: - # pass for ofset in select: if ofset == '1': offsetsY = 77 From ec38172b3dcba2ae15ebc0a5b5528619e89824bf Mon Sep 17 00:00:00 2001 From: wenxianping <931128603@qq.com> Date: Mon, 7 Jan 2019 11:57:53 +0800 Subject: [PATCH 09/21] readme update --- README.md | 3 +- cdn_list | 29044 +---------------------------------- init/select_ticket_info.py | 2 +- 3 files changed, 511 insertions(+), 28538 deletions(-) diff --git a/README.md b/README.md index 024d6fb..d08958f 100755 --- a/README.md +++ b/README.md @@ -63,9 +63,10 @@ - 感谢一下小伙伴对本项目提供的帮助 - @ sun7127@126.com - @才 + - 以及所有为此项目提供pr的同学 - [更新日志](Update.md) -- 如果觉得项目还不错，可以考虑打赏一波，哈哈 +- 如果觉得项目还不错，可以考虑打赏一波 - ![image](https://github.com/testerSunshine/12306/blob/master/uml/wx.jpeg?imageMogr2/auto-orient/strip) ![image](https://github.com/testerSunshine/12306/blob/master/uml/zfb.jpeg?imageMogr2/auto-orient/strip) diff --git a/cdn_list b/cdn_list index 4ec5133..00b66a0 100644 --- a/cdn_list +++ b/cdn_list @@ -1,28536 +1,508 @@ -CONNECT 112.90.133.253:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.90.133.253 -Connection: Keep-Alive - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D3 FF B3 89 74 3D 0D F7 2A B2 E6 8A 68 3A 72 57 40 27 D2 FB 79 2E 7E C0 B7 BD 9E 39 C0 94 -"Time": 2106/1/4 13:42:52 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:06:07.674 -Connection: close -EndTime: 09:06:07.792 -ClientToServerBytes: 1396 -ServerToClientBytes: 672 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D3 FF 12 37 F1 7F 4E 72 4C 6C 88 83 CC F1 64 09 91 CC AD D2 78 AB 94 CA 94 A4 7D DD F1 84 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 112.90.133.253:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.90.133.253 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D3 FF 2C 17 59 61 C6 CC F8 33 00 59 E6 2B C3 33 D3 C5 2F F3 EF BD AE F3 19 7D 77 34 7B A1 -"Time": 2106/1/4 13:42:52 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:06:07.812 -Connection: close -EndTime: 09:06:07.851 -ClientToServerBytes: 922 -ServerToClientBytes: 3179 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D3 FF B4 D3 2D 9B 75 0D 11 64 C3 B3 5D 14 94 D8 49 07 F9 7F C7 32 85 7C 17 68 E8 FC 87 24 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT kyfw.12306.cn:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: kyfw.12306.cn - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D3 FF 12 1B 86 5C 16 E9 D6 DD 1E E9 CB 6D 3B 3A 87 1D D8 63 BD F9 BA 52 0B 76 ED 80 3E 72 -"Time": 2106/1/4 13:42:52 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:06:07.872 -Connection: close -EndTime: 09:06:07.954 -ClientToServerBytes: 970 -ServerToClientBytes: 1120 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D3 FF 03 E6 D4 42 C0 EA 14 11 F3 85 A6 E2 3C 56 A5 E2 FB 21 C6 9C 97 2C 48 F7 4F 5C 92 C5 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 112.90.133.253:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.90.133.253 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D3 FF 2E 0F 9F 43 5C 3C BD 44 B5 13 49 F9 31 43 C7 D0 C0 09 1B 28 5F A9 60 AB AC 9D 21 45 -"Time": 2106/1/4 13:42:52 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:06:07.970 -Connection: close -EndTime: 09:06:08.013 -ClientToServerBytes: 1050 -ServerToClientBytes: 7088 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D3 FF 75 18 9D 5D E3 B4 74 FD 59 69 4F 77 D5 89 90 78 A9 07 75 16 CA 9E 70 86 50 40 84 31 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 112.90.133.253:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.90.133.253 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 00 A4 08 64 72 CE 09 85 E8 F8 B7 45 28 08 66 4B D2 18 07 36 15 9F 22 A0 61 7D 6C A9 3B -"Time": 1970/6/11 5:47:08 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:06:08.046 -Connection: close -EndTime: 09:06:08.369 -ClientToServerBytes: 1066 -ServerToClientBytes: 14985 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 00 4C 12 1F AA 73 8D 9D EC 46 C2 6A 7E C8 42 63 55 91 A2 40 EC E9 E8 26 9F 8A BA EB 27 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 112.90.133.253:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.90.133.253 -Connection: Keep-Alive - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 04 C2 8A BC 47 40 4B 32 9D AF 68 B5 06 93 D7 51 AF D7 69 62 21 E1 FA B5 06 53 B4 C5 63 -"Time": 1972/7/26 23:08:12 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:06:12.636 -Connection: close -EndTime: 09:06:12.862 -ClientToServerBytes: 1412 -ServerToClientBytes: 672 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 04 52 3B 76 51 2E 0E EF 2F D5 96 84 7D 95 6E 97 C6 4A 40 33 24 C9 66 72 95 55 BA 99 32 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 112.90.133.253:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.90.133.253 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 04 1F 0F 0B C4 7C 6C 3D C2 CD A4 2B 36 E0 66 BD B2 F8 F1 28 E7 77 9E B8 32 86 56 E5 16 -"Time": 1972/7/26 23:08:12 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 73 B0 42 8C 17 E8 38 78 06 97 44 11 C5 BF B7 7D B6 04 3C 88 AB 1A 42 E6 F9 CD 2A ED F3 4F CE B0 85 4D BB 86 AB D3 15 62 D2 4E 1D C9 15 EF 56 46 CF EC 4E 90 AE 85 E8 21 24 93 A4 7C 48 59 C3 CA CA CE BC 21 5A 11 F0 11 25 95 C6 69 33 84 D2 8E B8 CA 44 1D A2 64 6B 94 81 7D 3C 23 4C E8 FE C4 C9 FD FF E8 98 CE 7B 15 7F E4 94 8F A0 7B 34 59 19 A9 81 AA CF 1F C4 00 A5 5D BA 9F 90 F9 F9 A9 9A 0D 1B 33 12 4C D4 66 7B 44 79 6F 03 E0 03 D2 CE DB 40 8C 74 2F F7 F6 9C B4 F2 65 65 D6 B1 EE - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:06:12.880 -Connection: close -EndTime: 09:06:13.119 -ClientToServerBytes: 1396 -ServerToClientBytes: 859 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 04 96 C9 9D 4B 43 3F 6C CF 6A 2F E1 16 C3 0C C4 FF 58 10 88 96 71 13 AB E9 51 DE A4 30 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -POST http://www.12306bypass.com/CloudCognition.ashx HTTP/1.1 -Accept: */* -Accept-Language: zh-CN,zh;q=0.9 -Accept-Encoding: gzip, deflate, br -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Referer: https://112.90.133.253/otn/resources/login.html -Content-Type: application/x-www-form-urlencoded -Host: www.12306bypass.com -Content-Length: 20445 -Connection: Close - -type=add&rand=WQfssmAAKtMdzjnCekKIQg%3d%3d&code=Ey5w%2bjRhMj1cuvcDbP1V%2fg%3d%3d&base=%2f9j%2f4AAQSkZJRgABAgAAAQABAAD%2f2wBDAAgGBgcGBQgHBwcJCQgKDBQNDAsLDBkSEw8UHRofHh0aHBwgJC4nICIsIxwcKDcpLDAxNDQ0Hyc5PTgyPC4zNDL%2f2wBDAQkJCQwLDBgNDRgyIRwhMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjL%2fwAARCAC%2bASUDASIAAhEBAxEB%2f8QAHwAAAQUBAQEBAQEAAAAAAAAAAAECAwQFBgcICQoL%2f8QAtRAAAgEDAwIEAwUFBAQAAAF9AQIDAAQRBRIhMUEGE1FhByJxFDKBkaEII0KxwRVS0fAkM2JyggkKFhcYGRolJicoKSo0NTY3ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1dnd4eXqDhIWGh4iJipKTlJWWl5iZmqKjpKWmp6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW19jZ2uHi4%2bTl5ufo6erx8vP09fb3%2bPn6%2f8QAHwEAAwEBAQEBAQEBAQAAAAAAAAECAwQFBgcICQoL%2f8QAtREAAgECBAQDBAcFBAQAAQJ3AAECAxEEBSExBhJBUQdhcRMiMoEIFEKRobHBCSMzUvAVYnLRChYkNOEl8RcYGRomJygpKjU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6goOEhYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0tba3uLm6wsPExcbHyMnK0tPU1dbX2Nna4uPk5ebn6Onq8vP09fb3%2bPn6%2f9oADAMBAAIRAxEAPwD3%2bivPNS1bUJdPlW2XWIJZ550EExgZ4mwMplZDkA5IIJwGA7Vd8P63d2Wi39zqC3k32C3VmR9gYkKSQPmJyeMZxQB21FcPqV14igvb%2fVfs2qWlklsh8qKS1fGzeWbDk9iOnpU%2br6tqVsohtdYij2W48w3GiT3DuxGdweJ0QcEcAcEHnsADsaK4Xwrq2p3un6fBd6zHIk1oqjydGuIpQxQYbzndkyPUrg0zXZdR0fxLpVqmq65c2k9rdTTpbpC8i%2bW0IDAbMkASNkAEnjAoA72iuH1C6iNlpk1tr11d2lxcPula7WDpE%2bFLoF24YDIIyCMYzxXKXOoapB4f1W4k1PUY5LfT7qaOctcxqZlVygjJkZWA25ywGRt4OTgA9jorh%2fEev3507xBFb3OnWwtN0S75mWU%2fu1bcMdPvcfSpdS8RahBZ6lEtxYNLHps1zHNZuWKMm0DIOR%2fF%2blKTsrl04OpNQW7djs6K8t%2fte%2bWGCAXOvLM9zsuws0MsxHkGUeWfuKMEE%2b2e9Ra%2f4hktvDVguma1qkEt%2bgWOC9MJdkZjmV5D90EHAO4AYHTBrneJik3Y9eOSVZTjBSXvPz89dL9vu7Hq9FeZaHrl5LqmnaWNcvCsjeWn76yuOFUthim5uQOp596ojxbq41DUzFqFrK90lwDAWZfsQh%2bVW64GRljgZJFH1mNr2BZHWcnFSW1%2bvd%2bWmz%2b63VHrdc74q8Tnw3bibyrJl2M5N1ei3zjso2sWPsBVbwje6kby80q%2bvYL1LG3tzFcxq2ZQ6sdzEscnCjn3rjvG13O3iqQRQR3UZlhjkZY%2fN8qOINMyBcjJJHzAHoFHU1vCXMrnmYig6FR0277fc1dfgzrvDfi6fUbe0bUo7BPtTbI5bK7E6mTBfyyAPlIUEnnHHXmui0vUodX02G%2ft1kWCYbo%2fMABZc8N16Ecj2Neb3tm0cUjQXH2gT24Ed2kZRZJr2bYzIMnGxBwMnANdNqU9zDqUGkQCGK0to0lVUZgSqjgNgfdzxgdfpVGB11FcLoWtXt74gkkvPOYl3RIIQZViXJADFSFTpnLLkg8Eiu6oAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooA5G48H3F7qPm3d5E1r9rluFiECNsDLgffVgxPc4GOMdyYdN8K6jFp2pWlxFp0SahOiyxLtlTyAMOMCKNSzDIwVwM5ycYrrvOk%2f59pfzX%2fwCKo86T%2fn2l%2fNf%2fAIqgDjR8NdFJKPpOiGJmuFJGlwBgj8xkEJ95PujsR1ya0zp%2bvxypOh0%2baV7CO2nDSPGokUsSygKeDu6e1b%2fnSf8APtL%2ba%2f8AxVHnSf8APtL%2ba%2f8AxVAHP6RpetW13pK3q2QtrCye3LQTOzO2IwCVKgfwHv3q9d6VPP4s0vVVaMQWlpdQOpJ3FpGhKkDGMfu2zz3HWtLzpP8An2l%2fNf8A4qjzpP8An2l%2fNf8A4qgDK1vS7y7ksX0428TQTSPJ5hZcho3UkFed2WBzXM33gzX5dO1i3t7%2byLajYzWjLMowS6kBi4Tfxk9SRz0ru%2fOk%2fwCfaX81%2fwDiqPOk%2fwCfaX81%2fwDiqAMrXPD9rqOk6jFBZ2v2q6jYeY8YyXIABJxnoBz7U3WfD0N7o99bWENra3VzbtAJvKAwrYyDjscVr%2bdJ%2fwA%2b0v5r%2fwDFUedJ%2fwA%2b0v5r%2fwDFUmrqzLpzdOanHdanOv4St4dRtpbCC2trW3gmxFGm0vM6hAxx227vzqvceEprnwxo2mloUubRrYTyqSCUjPzBTjrycZFdV50n%2fPtL%2ba%2f%2fABVHnSf8%2b0v5r%2f8AFVHsYanUswxC5Xzar%2fg%2f5s5KHwheQeKrK9S5DWFo7OvmzF5GJQrjbtAHJPOTUOm%2bEdXs9Vt7ie5sJraE3m2EI2R5xyAT%2fEPXpjtmuz86T%2fn2l%2fNf%2fiqPOk%2f59pfzX%2f4qp9hD%2bv68i3mmIas7bW29fx95mD4Y0K80u6v7q9Wyia5SGJILLd5caRggYLAHJ3GtGDw%2fp1tPaywwbGtfMMYB4y%2f3ifUn1NXfOk%2f59pfzX%2f4qjzpP%2bfaX81%2f%2bKrSMVFWRyV60q83Unvp%2bCsZl74btL%2fVYL%2bWe7BhdZFgWX90WXoSv%2bGKZf%2bHluPN8iWQNOx8wyyu4VT12qTj%2fAA7VredJ%2fwA%2b0v5r%2fwDFUedJ%2fwA%2b0v5r%2fwDFVRkYuhaVNp2qXmy2NrYqixxJ5gcSkfx%2bo9McfSugqHzpP%2bfaX81%2f%2bKo86T%2fn2l%2fNf%2fiqAJqKh86T%2fn2l%2fNf%2fAIqjzpP%2bfaX81%2f8AiqAJqKh86T%2fn2l%2fNf%2fiqPOk%2f59pfzX%2f4qgCaiofOk%2f59pfzX%2fwCKo86T%2fn2l%2fNf%2fAIqgCaiofOk%2f59pfzX%2f4qjzpP%2bfaX81%2f%2bKoAmoqHzpP%2bfaX81%2f8AiqPOk%2f59pfzX%2fwCKoAmoqHzpP%2bfaX81%2f%2bKo86T%2fn2l%2fNf%2fiqAJqKh86T%2fn2l%2fNf%2fAIqjzpP%2bfaX81%2f8AiqAJqKh86T%2fn2l%2fNf%2fiqPOk%2f59pfzX%2f4qgCaiofOk%2f59pfzX%2fwCKooAmorkPiLeXVl4ft5bS5mt5DdKpaKQoSNj8ZHbgV5mPEGt%2f9BjUP%2fAl%2fwDGuqlhXUjzJnLVxSpy5Wj3uivBv%2bEg1r%2foL3%2f%2fAIEv%2fjQNf1r%2fAKC9%2fwD%2bBL%2f41p9Rl3M%2fr0ex7zRXhH9v6z%2f0F7%2f%2fAMCX%2fwAaP7e1rtq%2bof8AgS%2f%2bNH1GXcPr0ex7vRXhX%2fCQ6yfvapfH3Fy4%2frR%2fb2rnprOoL7NcP%2fjR9Rl3D69Hse60V4S2t66Bn%2b1r8%2b63L%2f410nx61bUdH8DWVxpmoXVjO2pRo0lrM0TFfKlOCVIOMgHHsKwr0HStd7m9Cuq17LY9Sor4lHjnxd%2f0NWuf%2bDCX%2fwCKpf8AhOfF%2fwD0NWuf%2bDCX%2fwCKrnudfs2fbNFfE%2f8AwnHi%2fr%2fwlOuf%2bDCX%2fwCKpT438XgZ%2fwCEp1zn%2fqIS%2fwDxVHMP2TPteivib%2fhOfF3%2fAENWuf8Agwl%2f%2bKpD468XD%2fmatc%2f8GEv%2fAMVRcTptH21RXxGfHfi7%2foatc%2f8ABhL%2fAPFU0%2bO%2fF%2f8A0NWuf%2bDGX%2f4qmQ0fb1FZmuSvDZI0bshMgBKsRxg%2blYUd7dqci6mI92JqXKzsVGDkrnYUVyv267brcSfQcVg6v44ttJZ4ftU9xcKSGjik%2b6fck49al1EtzSOHlPSOp6RRXicvxQ1Vn3RW5ijPTe7Sf%2bgkH8hU9t8R9TmKvmKSMH51V2BHt16%2fy9Kxli6a3OqOV15LQ9lorznTPHEV6%2flTyXFrMDjDuWU%2bmDx%2fKuhFzORkXEhHqHJFawrRn8JzVMNOnpPQ6WiucFxcH%2flvL%2f32a0dalkis0aN2RjIBlTjsa0g%2bYz9m%2bZRNKiuOW7uxgfa5iB1JkNQDU7mSV4EvJjIgIceYcjPT%2bY%2fKtOQ3%2bqS7ncUV5zr%2brX1lpN3Kl5OvlwsVbzypLYxjOeOenvXjE3jLxHbafsbX9WadVYu%2f22Q4fdyMhuwUD%2fgVNU9L3Ilhmup9W0V5L4N1PWJdLuY7zUrq4aOcxRTNOzFgqRqTnP8Ae3fjn3qz4v16903wubqK%2bukmlkjVCkrAglwx79Nu78qFC7sV9VaV7nqNFfO%2bueIvEUUP2UaxqMU9qIVkdLtwXPlsMcHrkZP1Fel6Tdaj%2fZVmZ724kl8tfMYyHJOPr9aqVFxdrlfU3a9zvaKKKxOM4v4nDPhu2%2f6%2fF%2f8AQHryoLXq3xL%2fAORctv8Ar7X%2fANAevLAOMeletg%2f4R5WMX70TFGKdijFdRy2ExQBTsUoWi4WGEUYp%2b2l20XCxHiup%2faL%2fAOSfWH%2fYVj%2f9FS1zO2u4%2bOGnR6n4LsoZJ%2fJC6ij7tu7J8uQY6j1rzMxmoxUn5%2foepldOVSbhHd2%2fU%2bYrLSri9jeSGJnVASxCnioGt%2fKYCQ4OOnevXPCV6nhix1G2Ey3H2yAxbnhAKk9xyc%2fSuU1fw7aR2F1ew3TtJCA%2bzygN2WA%2fDrXgRxkJT5Uz6aWW4iKba2OWtbU3DrFjG84U1qaj4Zv7C3hkurZ4VZdxZwQOpGPfoa9F%2bH3gC11LTLDW5db8jzGZpLYW4JwrkY3FuMhf7td94z0W28SWtrbT6pFbCGPac2ofccdR8wK%2fTJ%2fTmp1JJ3TOaNKT0SPlyVVRiqnOO9Qn611njfQLfw3q0VnBe%2fbA8IlMnk%2bXgkkYxk%2bn61yp611wlzRTMqsHF2ZFj3pCKeaaa0uczifc3iH%2fAI8I%2fwDrqP5GudXB6DntW94mbbpsZ%2f6bD%2bRrjNQ1JdP06e6JGY0JUEZBbsD9TxWNRpM3oRckkupjeLvFhs92m6fIRcf8tpRxsB5AHv0%2fz04CPcXG4kknk4qCeee5uZGVd8hOZJpDlQSTnn%2bI%2fl3z04emlrK264LXB6hX%2b6f%2bA9P5n3rgqST1bPosNS9mrRWpYTULCEHzbiHCtgqrBiOfQZNMnvkhnhurdZw5KpKPJcLIp4z9zr0P6Vp20KxxokCCLZySigAD%2bX%2bcHrmrgYzLHEI03bx5hHJ2qQx%2bhzj8ehrlUoN6I3rKdld6lNruEX9tNHcR7JHMLBvlYAgkHHXqoHIx82K6zw%2f4jbT79tNuVJtgFbJ6xFiw%2fL5eR%2bVZ97aBxFG6bisyloyOMc84%2fP8AOqD6YsOpo1nm1EkTBiq5UspBAK%2f8CJ45%2fWojJQfPHRnLUj7T3JrQ9fC8A%2f5%2bv%2bfQ1o66M2Uf%2fXUfyNcn4VvnutKEMuBNBhGUNnA7fh1A74HPPTq9f%2f48E%2f66j%2bRr3sNNTSkup4M6bhWUOxx8rzHVI7eNzFG0ZJYEY3ccc9TjPArL2Sx6zI9vARIPmwZMqq7eOegyc%2fp14FWtbvDaLFtcork5AzubHOBx6A1xsfiS4h1FpZdigjymFtiKQgYzj1PQ%2b%2f5Cu6MHJ6Hr06btc3dQ1CK50bUotTjMkQtnkfauMKq549cdiM4PfNZPhjw%2fp1rplprWqypHcSRhtrbYUC5G0E8Fui9SRz07nfimjvNHSXR5I5WONzn7%2fPXODn0GOOnX14PW7y50zUo2CC4umySska7XIOA3A65ycdsZJpwXRmdSnGf7w9Li1zQxsih1OxG1dqIlxHxjoAM9Pp%2bVcxr3iDS5Hhuri4WaApmyssNtc%2f8APR9p78qA2V27ic9ucvPEmqTW0TGcW9rcuCViwgkHT5cHePmBB7%2bhOanvLnzNEuNUgiTzElcXSwnyzHhcBsgALlhnA4O8jryNFBI4pc10mZkTXPirWI7m3huFE12rZVSUVcYY7uTwAOvPPWvYpXNtZSOke9kX5VBOT%2bQJ%2fIE%2bx6V514Yu2XWomtWP2edFjAePO7ggk4xj2HI4Iye%2fpuQMYBH8Oe3uP8%2bvas6mrN7OK1O4ooorlPGOM%2bJukW2t%2bGIbW5mgixdK8fnrlWcK4Az0Xgnk8ce9eH39jqXh%2b6ETPcRIw43MXUeyg5AH04r3L4kDPh63%2fwCvtf8A0B685iuQbdbS8hS7s8%2f6qT%2bHnJ2sOVNdVOjJw54PU5alaKnyTWhykGr3UGBcBJo88twrY%2bo46e341s2t5b3oAikG%2fGSh4boOx6jntx9asT6JpM202d3cWbHLMlxGGVTgHbuU8%2b3yjH5mufvbK40y9aGa3aNlXd5i8KfQg98%2bx9ferhXqU9JoiVClU%2bBnQgUuKy9J1tba4mOoQ%2fbIhAywoxKgyY%2bUsVIbHr1PP4irf%2bKHj1eY2tvai1whRHDEZKDcB8%2bfvE9z6dq2%2btxvqYPCT6G9tPalCZxjv0z3rnLSTxHqoaK1SaQbt2I4VBH%2fAALGQPxrUHha5lSIaxqryRodyQLOZCOOeOdpH4dTzU%2fW7u0UV9UsryZK1%2fYq5jN1AZMgGNZAXJJxgAHP5V2X7QFy9p4EsZEOCdTjH%2fkKWuas4YtPVfsUKQMP%2bWijLnnruyTnpW3%2b0d%2fyTzT%2fAPsKx%2f8AoqWsMXzTiuc6cFJU5N0%2bh8%2fLrsyrt3de4Jq5Z6lNqEMlgjZM42qGboew%2fMCuWyQc5ORUsNxLBIrxOyOpyrKcEGvNlh4W93c9mnmFTm996HrHh3V5dE0mKwmfY8RbgMD1YnqPrU114oDFiZM%2fjXk7X9wzl5Jndz1YsSTSG9kYYLk%2fU1xSy9zleUj1aedQhFRhHY2vFOorqF7HKrZ2xhf1J%2frXPMxpHdnOSTTa9GlTVOCijw8TiHWqOfcXcaQk0lFaHPdn274yfy9HhP8A08D%2fANBavLvE9w0mk%2bSshQSSAMR6cn%2bgr0vx3%2fyA4f8Ar5X%2fANBavLdXjMliSDjYwY%2fTp%2fWuPEOzPSwCTaucxHEFOI1XaBxtXgCp40YZXnnsMf5%2fzjvQI8kgH6etLJNHENu0yO3ypGp%2b%2bf8APftXlv3mfT8ygrk73K2rIXRpLmRtkUCHDSN1H0AGM%2bnPXjN%2bzT7OVkl%2ba4YgOIwdoGfuAAH%2b936kgnk5Obb2zxyCWRt13LwZCBhBydoH90dff%2bWpayeXiQRgs5O1c8DHP5nn149NxzjOSirR%2bZnyym%2baZrlQV2vhSvI3Dk%2bn1OBz9RjvVbUBGYYZztJilWQ8Ywp%2bVjj2Bz%2bAqtBNG10I4lYlFLeoBJx6j0boT06dqtuiyo4Zco4KsSSD6cDp6%2f8A1zmonK1kZKOsmdN4UdhdTRFeHjDZPfBxx7c122vjOnqP%2bmg%2fka4zwWjSRS3Eg%2bYooyBwT3%2fpXaa8M2MfIH70dfoa9zLU1SSZ4WLaeJTOTu7C2vSnnReZ5ZBGMj%2bXUex49q8t1iy8jUr6BAUiDs27ajKf4gPmXOcEcZ6%2b3NesuPlPOQe3Y1yPjOytI4RqLTyQ3G5QpQgKfQnoegYZz3Fe3RlZnbh5Pm5GcPoOt3Wka8Z0Uy2suPMRU%2fg45xjOfU89DycV6ZNaafqa2t3cQ2l3bnCgzIr5LYwVyDzu2jHHXvgCvKi8DlonmlQyDJGwAMcYJ3HnB4wee%2fWtO18UahosUGmIxuPJkMsm3G7YAfl5HHPOcc84Oa0qU03oKdPlujsPEfhn%2b1pU8mHCQxq3ljKI3DAAEenGQQBgdeTVTwl4dmit76O8KyQzgrIu0%2fOxxuJUjBxyD25x2wM0%2fEa5WKZoNMWOKNW%2f10j79%2fIxkj5jwPzFWtC%2bIFky%2bXc20kQDEvISWxkn6%2fz71k4yRDinobEXhW30hvtNmZ5VSUOy7RIzL3wRgn5hv%2bueucHqIz5ig5OCoI38NjtkHGOvcVVs7621CBZ7adZowchlPT68DmrWdwyCCtZkTb2Z3FFFFcx4pyHxHGfD1v8A9fa%2f%2bgPXmJGR19ua9P8AiIM%2bH7f%2fAK%2bl%2fwDQHrzaJ3hlSWNtrowZSRnH4d69PC3VK6PLxSTq6j4NPuZtrRwsqMch3G1cfX8D71k%2bJ72EWiWUU1w%2f2dtwMp%2bUg9AqfwkZ6ZOefbPU3V9%2fam5zdG1nIxh9zREEjkADIwOcY7daxjHbWF5YTM0d5dvdHDPFhcCGRujdCHCt0z8p9a5qs61SXK1odNKnSgr31OLtIp7%2b7jtIQUZxl2ZThV459%2bMdO5613MEGmW1tBHb6NbGSMHdNLucuT3IPGfbp%2fIVbOFlvNQdgBmVQhIx8nlpj8M7v1q8FGOSK3p4aCXvamNSvO9ojpLy5mTynnbywABGmFQY%2f2RwKi2D0qQIDxvA%2btSeQMZ81P1%2fwroSiuhzu76kGK0%2f2jv8Aknmn%2fwDYVj%2f9FS1SMJHcH6Grv7R3%2fJPNP%2f7Csf8A6KlrjxbvynbhFa58wUUU5Mbhu6d64jsEopzgZ%2bXOO3NNxQNoKSnY4ptAgooooA%2b2PHX%2fACBIf%2bvlf%2fQWrzqSMSIyHowwa9J8apv0aIf9PC%2f%2bgtXnjoVNcta3NqehhW1G6OTuE%2bxyN5gxt4JHf0xUFtGVmeW4A8wggj%2b6vcfWujvrKO5AJGJF%2b4wrHlhlRsFefZa82pFxXunv0aqq25ugyMoJC%2b7AUhjgZ6d%2f5VOm1yoJkUMf4T94E9OOMcmq4ypA5%2bnepvnlRUQ8vxuzggHuPpXHy6nZKXuk2mFHeedchZvljw3RF4HTgZO5v%2bBVsQKS4KqSx%2fhAyew%2fP6VWs7VnCQwRFm4CqoJOB2x19fwrudD8Om1Zbm82tKMFU7KfU%2bp%2fzzVU6EqtS%2fQ4a1eFKna%2bpo6Hp%2f8AZ2lxQH%2fWAAvz%2fFgcfyH4Vs69%2fwAeKf8AXUfyNRLyvUkdql17%2fjxTr%2frB0B9DX0VCKjoj5zmcqqbOZeREIUsN5yQM9cVxvjYMqWsgLLGN43HKhSccn%2fPb1qHV764uNZnR4zmM%2fwCjSA4MbY6cY43Kc59R1%2fh2L921a0t7BYwLi5wS5XKxABSxHQnhgO3XqK9NR5Gm2exTXs5Kb2PLbDT5dT1eCOPCRMfnwDyd2DzjOMHv2DdPu1qXsKQW1%2bXVl8vUFtrXAwFRRjI444YEkdc5xmu70nw3ZaHIZWdZJeFjkZQu0deM5568%2fX3zy%2fj8yyXoB4hjRSGGCGBPU%2bnVufatFJuQW5p%2b50OaMUF%2bqSmNfOQ7g%2fque%2fvwfxHTmntYlH8xXOQevKseehOc%2fwBegOetaeg6PLc6lbxJBhFcbgnIVABkk9j8mAfavTYNG0%2b2uftMNrHHKw6qOPwHQHjqPWqnVUNzeVSNNXa1OR8HaRfRXyXwEaWj7t3ABfjHIHuM13wzwQo%2buaFwgwBj05pVH94D8K5ZT5nc46tV1JXO2ooorkPCOT%2bIXOgQf9fS%2fwDoL15qFzXsHiDRf7esI7X7QYNkok3BN2cAjGMj1rn2%2bH7OXLanHl8Z22YXH0w3FdtCtCELNnFXoynO6RwQXOfU%2btVrnS4rnUbK%2baWVZLMuYwhGG3DByMV6L%2fwrwf8AQU%2f8l%2f8A7Kl%2f4V7%2fANRP%2fwAl%2fwD7KtniKT3ZmqFRbI8s0i11CLxFrMt7taOURG3ZMlfLG%2fAzjqOM%2b5963dtdv%2fwr%2fwD6in%2fkv%2f8AZUf8K%2f8A%2bon%2fAOS%2f%2fwBlUqvTXUcqNRu9jidtOWIuwUAZPqcV2v8AwgH%2fAFE%2f%2fIH%2fANlQPAPOf7T%2fAPIH%2fwBlQ69PuJUKnY4z7NhwGdAOMkHOPyNT%2ftHf8k80%2fwD7Csf%2fAKKlrrR4Bx%2fzE%2f8AyB%2f9lVnx%2fwCC08daBDpclzHbiK5W4DyQtIOFZcYV0%2fvdc%2fh3HNXnGVuVnTQhKN%2bZHxVTlUk9O1fRs%2f7OtrLA0aaxaQOTkSx2EpZec4w1wRjt0qVf2e7VSx%2ftSxyXDD%2fQJsAAYK%2f8fPQ9T344IHB5jpSXU%2bfodNmngSRFJByP1pJNMmj%2b8hr6Xs%2fgnbWkPlrqqD52balodqgsSAN0jHABxySeOSade%2fBW1utuzVvKwAD%2fAKLuyfX79cbniOd2jp6o9SKwfIrz19H%2fAJHyzNC0TYYYNR19F6h%2bzml7MsieKPKAXGP7Pzn3%2fwBYKp%2f8Mzf9Td%2f5Tf8A7bXXG9lfc86ry8z5HofP9Fe%2f%2fwDDMv8A1N3%2fAJTf%2fttH%2fDMv%2fU3f%2bU3%2fAO21RmezeJ4vN0xF9JQf0Ncc9iT25r0K%2btPtsAjL7MNuzjPr%2fjWf%2fYC4%2fwCPj%2fxz%2fwCvWM4OTudNKqoqzOCfTSe1VzpYc4ZNwHqK9D%2f4R5f%2bfgf9%2b%2f8A69KPD4H%2fAC8D%2fv3%2fAPXrJ0GzojilHZnnq%2bF4ZSNysPXBrTs%2fCFij73WVxjkMeP0Fdmuibf8Al4%2f8c%2f8Ar1Kulbf%2bW3%2fjn%2f16Fh0ugSxsn1Mqy061sY9tvAkYxjKjqPc96uDNXRp%2fH%2bs%2f8d%2f%2bvS%2fYP%2bmn%2fjtaqFtkc0qvM7tlQDNQeLrtbLRllYr%2fAK0ABmwCcHvz%2fI%2fStMWWP%2bWn%2fjtU%2fEOhJ4gsIrV5RH5colBKbxkAjpkf3q3o2U05bBTlBVIuT0PEJo2Ek1ykbOksrSfMocNuJLDgA4I43cElsZwAa1bjX5rCwSPBkniBQSmJ8cADdkAgk5JxkcE5NdjD8MQl59ol1ffxtKLahQFwRgDccdaafhZb%2beJl1BUkHIdbb5s4A5%2bbkcYxXXKpTk7N6HsfW8Na3N%2bD%2fwAjzmeRnAnuIZ7sEkmQy8J0H%2fLPoMgnk%2fjXUajotncrpFpOp3uSg6sXjVSxBPJx6c966iL4b29vdrdQ32yTZsZPIzG3qSN2fXvWg%2fhS7MIMeqRJchjiUWmQV24wV3564PUVU68PsmMsbS0cHYw9N0e00xGS0gEQY7mbJYnHPJPPHYe5qW6vrWyj3XNzFAG5ALAZ5x%2bPP8qsX3gnWLuxlhi8SrazShVaSKyOABvztBk%2bUncvIOfl9%2bM%2b%2b%2bFcl4bcnXnzDF5QZ4XLHJLE5WRf4mY%2bmNo7ZOMKkZO8zH6xSbvKX5ktjqVrfxmazuY51xyUbP49sD8KuluhAB%2bnSjQPh6mhRTgarLcyzbd8kkSjpnGMH3PUmtr%2fAIR%2f5sm5z%2f2z%2fwDr0SnC%2bjFKvS6M26KKK5zzANJQ3SuU8R%2bLrTRrr7K8ymbyzIYg2DtAJJz69DjI%2btTKSirscU29Dqs89aM%2b9eYj4j6VO80EouS8S7hj5t2OOhwwOc8EdP0zV%2bIdnJK4tEuYtgbcGOxxgE%2fdPPYj8BU%2b1h3G00z2GivGYvil5F20CXc5IYiQyqWCYHfOSOw7cnnHNdfp3jxbhQ0sCvGQG3RkhgCMjg9%2bncdatSTdkKx29FULHVrLUR%2fo84LkZMbfKw6dj9R04q93piFrn%2fGNxPbaRE9vNJC5nALRuVJG1uOK6CsTxRam9s7SDnDXS7iD0AViacdxS2OGGq6mf%2bYjd%2f8Af9v8acNU1P8A6CF3%2fwB%2fm%2fxroT4WsyMJPMPc4P8AhUb%2bEnCkx3YLdg0WB%2bea2ujGzMT%2b1dS%2f5%2f7s%2fwDbZv8AGj%2b1dR%2f5%2fwC7%2fwC%2fzf41YvNGvLIZkjDIP40OR%2fjVArimrMWqJjqupf8AQQu%2f%2b%2fzf4006rqf%2fAEEbv%2fv83%2bNQkUxhwaLILkjatqn%2fAEEbz%2fv%2b3%2bNQnWNVz%2fyE7z%2fv%2b3%2bNRuDURWiwXPSfF9xPbaTE9vLJE5nAJjcqcbW9K4z%2b19RI%2fwCQhdZ%2f67N%2fjXX%2bNc%2f2NDg4%2fwBIX%2f0Fq4UZA9a5zctf2tqO3nULvP8A12b%2fABpp1bU8%2fwDIQu%2f%2b%2fwA3%2bNVTz1FT29lLcoWRkOHAKltp255I4OTjOB3PGR1ACHnV9S%2f6CF3%2fAN%2fm%2fwAaUatqXH%2fEwu%2f%2b%2fwA3%2bNT2nh%2b7ZJUmvbSSRlAidLZwEJ6E%2fvPnHPTg%2fwA6zmsNRt5VSe1%2b8SFkhcyITk8HgFeFySQFGcZJ4pFNFv8AtbUuf%2bJhd%2f8Af5v8aRdW1LP%2fACELv%2fv83%2bNUg2Rk5we%2f%2bf8AP0pchSKZJabV9S3%2fAPIQu%2f8Av83%2bNei6zM8NpGY3ZS0gXKnHY15ceWzXpuvf8ecP%2fXZf5GplsNbmW93cgkC4l6cYc5rOGvXEeoJazSzo0h%2bQByRtycEmnzhtxC9SvBrBlinhuy8sqPvTa373G4k%2fLkdsc46daKceZFSdjq2u7kHH2iXj%2fbNRG%2buQR%2fpM34yH1rPtLuDzI7RrpZbgRbz7gEAnI7DI%2fMVT1TU1jimgtS7Tp990xiIE4y2e%2fPAFKSaZV1Y0dSvbpgixalJAysWyZiNwxyOvuPxqrpGq6iJjaTXdw8inMrSOXO49gRwBx2%2fxrL1C2g%2fsmO6gImiFthA6cspHL%2fU5BzjJ9ecG3ps0xZLeYxSusasZI0KAE%2buSckncSf5ZrVfwzO95nSfbbg4xcS8f7dI13c5Y%2faZR%2fwADNUwQMgZ3AUvmHBGAeKwbNWjtaKKK1MivfXCWto80hwiAsT7AZr5m8Ua0Na8T6jcLIU8xtylXXOFABT15UDA7njvXtfxV1U6T4KlkVgpmlWLOcfwscfjtx%2bNfOjF4rWS%2fKvtkuAhLjOT1zhTnOd3AA4HUd8KzuuUpF29uDCgaNi33iZ0lZFkEj4O9Oq%2fKOdpxnjPq2K5SL5wzRwsQl3C%2bSWmOeRkZU%2fKM7eevNQLCZg87BbieMI4UgmTfkjBzyc5z8p6nJBwaswXf2a9SG2uFWOXbHubBSQ4JOScrt3bFbB5wemTXJbQq1yOKI2Esd3KI5cIsuN5UOGwAwLffwc546gjtVyKa5ia9ubVpYxJJKwmYhAnJcZwecqDwMdzmo3kyitMtuimEtvSMI2du8AqvyhWMhGMbeBxwcxAMJmSzuQjZ3ybow%2bVGHG3Iw%2bMKSxxkseMDki3fRjaO1tfFVx56wxtAs0eCWyTuJwcjkEdffjmvWvCWuPqtqUn3mRM8t169DwM9eD%2bfIr5tBmRciFVkjZRKobJICALsOORxnPPUV7Z8O5lEcEgkLCViPwxgD%2bX%2fANeuqlKbeopWtY9LqpqIBgQns%2bR%2bRq2OlU9T%2fwCPZf8AfH8jXStzJ7FNWqUNgZqqjZqUtgVTIRDdyZQrnqMVUstOtEBZoUk3Hd86ggZ9KfcuOangwAoHYU9kMfLplhJHta0hA%2f2U2n8xWZc%2bGrSTcYJHiz2%2b8MfzrZZqiZutCBo4vUtHn09BI7xvGW2gqf8APpWUa7DXplXT2DgMScjI6c4%2frXIcetaGbR6B42JGjQ4%2f5%2bF%2f9BauFJzgZFdp4%2bsrm%2b0KCO11FbCRblXMjhdpXa2QSwOOuenbHevI2j1OaaS3TVJb2WBi0kdsoXJABxuCg4%2b6eOOeSQRXObnRrLF54t%2fMUTshcJu%2bYj1AParttJNbSrLyUYHOCOmOcVyOiWGoXYXFstrb78BnXy1lIJzjnrz69umc1sX2lQQxC6a5eSdT8xZ9ygkFcjHAOCR64JpIdkjrND1m31G8dFLghio3j7%2fuOemMUarq8UJeCBg8nRj2X%2f69ctolwLNTgrnJGSc9R6Vc1C%2bWCS3Y28csR%2f1xDbCOwOecckU2PSxF945DjnrwOaCB6ZqtPe%2bSzkQtMi%2ff8pfnQ56bepGAeRz6LzU0cscqiSKWOSNhlWjbII9QRkfrQTaw45%2fhWvUdbz9jTAB%2feDv7GvL2YDqeK9Q1uTyrJG9ZAP0NKWw1ucrNNEk6JK2HccDqOoAHA9TXOeIdJe5czrJD5MxHnwuDucLggKQcg5GPo3cgCtjUy7GMh1UZIUkgEN2xn8axvtKyJLFMszLJmPZzkZx84z0Izx%2bmOtTSfKzpVHnjoXtKghi1O6nZm%2b0OsfmAuCATnkAcDp%2bOOgOatv8AZYoZwessmJDgsXz2P6genTvisVLK00y1iENqS9zteVpSXd3H94jqfmOBxye3YOzULD7MCHlff%2b7lTIYbTuAYZK9Rk8kjoM5qpSTYo0ZcupLdG5WBLOK1iRVMcaFpN0hQA4%2bXABIGDgEjqecHJfyahLbwSWlyI1yTOzqF%2bXgl1HUgcjB5OR7GqlpYyi4SJ4MeSu13csGYMM5RgQMqd2P7oY4I5JbO72scQltzAnlyBkb593KMxwo4BIbt3zjNVCpBu0SakLI0NH1e%2fvCtrewGKcp5u8DaNnBB6kHOQOOnoDxW6kh3EnjP44ritF1gG5ma4jVLnoZVQRgBs9C3U%2fLj5iAMDPGSens0ZISwiWFNxyG3Oxzg5LHjP0yOnPWitGz2MoS6HpVFFFIk83%2bNe4eDLTa8a%2f6en%2bs%2b6f3cnByRXgeYGjjDoiFGfLsDllwuCRkZwBjGOcn3Ne9%2fG448DQAswQ30e4KMlgEc4H5V4RbNsktViaSKcuW3hcqPlIBHGT0OfpxXNWtcqJdke3vbl8KXldlEcbAMFUgDcCX25YAZXOOuMcVWcKIJHeeOconlspj8zG5F2kDHGCu3ceh28cYDrBjdMwVo7eKT5mVZP3idG3bRgyDKjAPTp1INSKZFkkSRTBfRSvcRKY2Xy%2bdpwvRcY3nIONmK5jQdHJG09tbrN5RUFN%2flI7KyrlQcYXDM7HPXp3FWWt1sb2fyioa3cqsbOSXG5QAreh3KQecA4PTNVpVEVzBb2KxJvQltz5R0HykBywyDtLEEA4YdjViEkC0trOZnFw%2fkpMy%2bWUgVwU68ckOT7dCaWzBkdtC00cdvHMy3KyFcRKZPNYAbSuAQWBBU9fvADOa9O%2bF1y14IYhEI0ifI2kkHHJ%2fl6mvNbeXzt%2bfJ8wSsWeaMDCEH7u0%2fKCq88ZG1cEV6%2fwDDO3d7eKaQFZCGkZm%2b9JkYJ%2fNv89%2brD7mbPTKq6gu62A%2f2v6GrIqG8KiJQWALNgZPU4PFdK3IexiKSrYqR3%2bWkmTa5I6VBLJxWpBBIxaQD3q5E3vWerZmz6c1diagbLLNULtgUjNUTNnPNFhGL4jkAgQf3vl%2fXP9K5vdn862vEkmXjUn0I%2fWsHj1q0Qz0bxswXRoSen2hf%2fQWrg%2fm27cjA4wT2rsPiQZR4chMSux%2b1LkI5U42t6V5O%2bpXKxbmlubb5tn7xA35nriuc3OkSOMKTGPY54FQX0MlxY3EcaK8hjYRq3PzYOP1rATVbktFMZYJlXEfzb4y5J6A9CePSr1peup2yF0YsSxJ8xQMAYJ3E9QcEYHt1yAYelT3OoxJBC7oxILOBnaB3rqW099m2K5mRs%2feYhtw%2bmPYevSqOgxRJaDyPK2ITGCgAPDEZODwOB19M9SSdd2kQDyiuD%2feH9elJDuYsNrqFhqkcMCArPlFEaFgjHnO0cAdST%2bNX5dK1KCZ7nTLcgkLLcWEiDOWwM7gflbjByCMj1yauNG7LkkNxyrdKILh4ZYygeOWI5SRf4TjHH4DH0osNS0KVvqDyzJbzW7210RzBKDlsYzsbo3JI7H5TwO%2frXiNgunxZGczDHOOxrzu81e%2fvUMF3cK8Zzy1vGwOf95T09q9F8REjT48OF%2fejJIyMYNAlucfcXtuqZZlJVgrqP4cnHPHoRzXN6k1tpyM8E6A7SMeZyrH5hgAZJ4A69D9K1NZjjlkjZJo3mDBsOA%2bfXnoMKtYt7aMrfbLtpJ%2fKgHkqkZKO%2b3HUjGMgY7nIrOsuWGh14SpepZksv2mKyWW4mnku03YbOcMRyuckcYIOPTpgcaGmTW6q0QjVHCKpkVSwdQWxznj7oPbNY2UYy3MbtKVkMKecACmQcEc%2bx79unNK%2bovHCY0nl2F1KzsQynHXGM9%2fQVEYc9Jp%2fed1SlOVRJOwt3e6musLbhise8spICqwySeR6Ag8ccY6ir%2bqjMKNIwihRcSY%2b%2bGyMbSRjjPHrk1Xk1e42FkjJGfLeYPku%2fT5Vx1yc0t7D9uCM10GlBCrGvCk4%2fgPpn1x9a5KKSqJ6K34iq0nJqM1oV9OGlQ3azxoyyhd0kTNtQnkc5yT0J6ckjpmtW8uhc6eGt3ZDcF4ijSk7X5bt0OfcDBHHTFG20Oe4YYjmCK5AabjZk5Py8ZxwPXt1zXR2i%2fZrtbeJokIHEewthRnBznrn%2bnpXpOq003qcVelSjG0D0miiimcZ5x8a03%2bCbc7tm2%2bRt3p8knt%2bH414G0ciW8pc7JgwVEwcgYJDB%2bSAM9Mfl0P1L4w8PxeJdBewlIHzh1Y9iAef1rwfWvAGreH7GSSa2jNvKyqjFk3LyM85IBPY5784rmqqV9i0la5hPMqrDKTFBsSOVVmcNvZMrgoVxn5h%2bA46kCO5VI7tDa2727TKyxru3chAeGGSx3MxOSR0BwOKsTzyxwzoXmdCHedCDuQnMaxHOeOQAQMjJ6Y5rQT28N7mXyVhkC%2bcAuVROR5RYZB4wQcFiQBwQTXNYsus4YtKrt5MrF3aV3TKspLlQAThijbj7cZFS29tJdXxaaRJEkRPn3AFCGCnCY7kk8jkMTy3FUfLmktPNwu6SVGjVl2k8A8ADgkuQAR%2fFx0zVuWY3OFgfJ2yoRHhg4LEqCAADgKpz0%2b7gYHM2BF7QbCbUNRQwymORmM3mFNrQqGYBRjr9f8ACvdPB9iltaSFECqmI1G3GP4ic985H5V5v4J0W2gtxNFC32kt5a%2fN94dhngA4xz%2fKvZLC1WztI7dSCYxyR0JPJIGeOc16FJJRuZSvfUtVw3xVvjp3hqyuVn8iRL9Cj7tpB2SdK7mvMPjuu7wPZD%2fqJJ%2f6LlrVbiMKy%2bK8bRLFfG1lYceasvlnHvngn8q6Gw8Y6Pq3EF0gYnAywIz9QSK%2bcmj%2fAM4p0PmRyiSF3WQcgocH86u9hcqPqCFwzMQeOMH1Bq5G%2fvXg174y8R2mlWdssvlMY8mZR8zen9ePes2Dx74lhbLajLKPRyR%2bikfzp3FY%2bjWeoi1eOad8Vr1SFvVYY4%2b6GH8s%2fqa6%2fTfHtpeqCRHJjr5L8j%2fgJ5ouS0y34hl3XcYz90EfyrI3DFS6reJc3KyoCEdAw3dfTn8qoiUHuKtEs9T8bY%2fsaHP%2fAD8L%2fwCgtXAPEsmc9PTOK73xwwXRoM45uV7%2fAOy1cErqxCjhvQjmuc2KtxptlckGe3hlI%2fvKKPsCoCYt5H8Kg4C%2f4VbJAzwcj%2b6pOa57xPqhXTTBbxtIJsqz9kHuCDSuBqRWtu9tE6xFkceZggkjd8x69DknipY1lUj94QnQLyf50%2b0kWe0imVg25Adw75H1NPGBwMj6UwGI5BJyNuemKUfM4cAADrg8GlOW%2bXBApBgEhsH3oAcdokyOR%2fd7V6d4hiWawjVhkeaOM%2bxrzADnDYx2wK9R144sU%2f66jtnsaT2GtzkrqwQgCICI9iF6N0z154yPxrG1a2e91C1ghCrsBd3kAwq5GPxyM8fyro3bK%2fdUgdgMVSdgX3H5frWc0pLlZtCThK6MAW0dtNfAWjSLG4KlgCxI5VFHfClvU4C1UMGxYpbgL5UmCqLGQSTzjGPQ9z36VrajZXNzMStvDGijClmx5pJ%2bZT068diM7uajtbIPCjXEv2lslmKueOTjbz6Dp6%2btP2bjTtAuOJnze%2fsUrPTRcGW4U79qvmNm5yTw38%2bTU9xELe4VWmjZkkAMJBVRnG3ccHI6ZIrUtrW3tw5hTBY5fLNk4%2fUcH%2bdVr6EXwihdB87Allbp3bGOxweTjqKxjh43TluOWIltF6F%2b2mlRy1zLA0T4ZHjznPcdfUZ4A%2fqdBRG0gfAZl%2fjGKydLs54ZYWkiILxgSjgtG%2bdxG7OSATjp%2bNb2FRTnt6mt5WtYyvfc7CiiirMRCMjFU305QP3D%2bUP7hXcnTA%2bXsPZcVdooA5XV%2fh9oesx%2fvraOKUHd5kKBDn19%2fwAa5Of4JWpjuEtNbktxOV3k24ckDty2OuD07CvVqKlwi90O7PLx8GbXzYnbWZSsRDInk8A4AJHzZ52jv2HpV5%2fhXbiYyQ6iI89QbbP%2fALMK9CoqfZQtaw1JrVHP6D4Vh0Nwwn8%2faPlJjwQx6nqe3HbjPWt%2fFLRVpJCbvuGK53xn4UTxho8OnvdfZhHcCff5e%2fOFZcYyP736V0VFMR5EfgVbHrrf%2fkn%2fAPZ1LbfA%2b0t5A51ffj1tP%2fs69YoquZisjzW%2f%2bEUF%2fCI5NVxgYB%2bzZx%2f4%2fWC%2fwAjJO3xGVHp9hz%2f7Ur2iijmYJJHiw%2fZ%2fUf8AMy5%2f7cP%2fALZT1%2bASgg%2f8JH0%2f6cf%2fALZXs1FLmYzzy1%2bF729tHC%2buvKYxgM9uScen36m%2f4VqCedW%2f8lv%2fALKu9op8zJ5UZHiPRG1%2fTUs1uvs2JQ5fy9%2bQARjqPX9K5lPhswUK%2btSHHQJCVH4jfzXe0VJRw6fDiJBxqGCe4gx%2f7NWTqPwjbUpd8uuqFX7g%2bx%2fd%2fHfXp1FAHCWPw6ltbVIJNa80Iu0EWu3j%2fvo1J%2fwr5zMrnVzgDG0QEZ%2bvz4rt6KAON%2f4QIdf7S5%2f64f8A2VH%2fAAgX%2fUS%2f8gf%2fAGVdlRQBxbeASwx%2fahA%2f64f%2fAGVdVf2ZvYFiEnl4bdnGex%2fxq1RQBh%2f8I8f%2bfv8A8h%2f%2fAF6Y3hkMc%2fa8f9sv%2fr1v0VPKiuZnNt4TUxsqX0i7j83y7gR6YJxUc3g1JH3R3mwEcjys8%2bv3q6iiqSsJts5X%2fhC0KAG85GMHyiP%2fAGan2vhH7OSz3qu%2fRSsG3avoBurp6KHqF2YS%2bHNq4F0Mf9c%2f%2fr0reHiwIN31%2fwCmf%2f163KKVkHMwooopiABwKABxKB3hCQR%2fKAEYGR2xAP%2fZCgo%3d&remark=云识别结果回传 -HTTP/1.1 200 OK -Date: Wed, 26 Dec 2018 01:06:12 GMT -Content-Length: 0 -Connection: close -Cache-Control: private - - - ------------------------------------------------------------------- - -CONNECT 112.90.133.253:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.90.133.253 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 05 8D 13 69 4C 5D 32 DF 57 BC 6D 31 1C AC 89 AC D4 30 CE 4D 17 99 20 F2 4D B5 08 86 1A -"Time": 1973/2/6 3:28:28 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:06:13.137 -Connection: close -EndTime: 09:06:13.362 -ClientToServerBytes: 1210 -ServerToClientBytes: 475 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 05 B7 26 EC 52 56 32 5B 2D F3 93 D2 43 B7 14 5C 3B E2 B6 1D E1 8D 7D 9E CE 7D CC 55 28 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 112.90.133.253:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.90.133.253 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 05 28 52 B4 59 8A 2C 4D C7 D9 E4 B0 94 F0 33 0A 33 8D 73 49 1A 28 39 C8 5C 90 22 64 3D -"Time": 1973/2/6 3:28:28 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:06:13.379 -Connection: close -EndTime: 09:06:13.526 -ClientToServerBytes: 1114 -ServerToClientBytes: 15700 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 05 E7 02 45 BA 63 CF 4E 6B BB 04 0B A1 17 B3 78 15 81 FD 55 2C 05 37 60 F8 B2 17 AE 3D -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 112.90.133.253:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.90.133.253 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 05 9C C1 64 B7 18 B8 95 6F C3 5E 49 7F 52 E7 92 FF 93 E5 96 8A A4 F6 47 31 A7 95 2E 45 -"Time": 1973/2/6 3:28:28 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:06:13.545 -Connection: close -EndTime: 09:06:13.639 -ClientToServerBytes: 1364 -ServerToClientBytes: 816 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 05 3A 5A 82 0F 0D A5 47 20 37 AF 01 BB 02 87 51 7E 59 CA FB 06 5C 34 0B EE CA 94 E2 AF -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 112.90.133.253:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.90.133.253 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 05 94 77 7B E8 95 FE C4 D5 30 1E 45 A6 FE 75 27 03 D6 EE 40 37 87 02 87 47 45 4F 03 10 -"Time": 1973/2/6 3:28:28 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:06:13.664 -Connection: close -EndTime: 09:06:13.934 -ClientToServerBytes: 1332 -ServerToClientBytes: 720 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 05 F5 B2 85 89 64 C3 BF D0 DD 83 DE 7F F7 72 4D 53 18 8A 52 90 42 B1 98 9C 0E 61 EB B4 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 112.90.133.253:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.90.133.253 -Connection: Keep-Alive - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 05 86 88 B0 0F 0E 50 73 03 01 6E 64 35 F2 62 A5 88 97 9D 05 9F B3 A8 06 90 16 14 FE B3 -"Time": 1973/2/6 3:28:28 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:06:13.952 -Connection: close -EndTime: 09:06:14.183 -ClientToServerBytes: 1274 -ServerToClientBytes: 491 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 05 F0 7A C3 62 5E 45 92 5E B2 7D 19 88 5D 45 AB 50 DE A6 A1 DC 33 3B 6E 4A BE 53 75 97 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 112.90.133.253:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.90.133.253 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 06 1A 06 DC B9 7A 71 19 A1 FF 90 C8 B3 03 C3 64 68 6F 70 58 B0 93 6D 08 6E 35 DB 20 C5 -"Time": 1973/8/19 7:48:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:06:14.201 -Connection: close -EndTime: 09:06:14.259 -ClientToServerBytes: 1130 -ServerToClientBytes: 33715 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 06 0A 08 42 6D B9 DC EA 86 F4 D2 E6 42 54 6B 1D 99 70 B9 30 FD D4 24 00 35 40 D9 44 6A -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 112.90.133.253:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.90.133.253 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 06 AB E4 E9 01 EC 9C BA FE 14 82 48 0F 09 8C 58 DC 6B 1F FA E5 0A 0C 1A 7A 10 E9 16 A0 -"Time": 1973/8/19 7:48:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 73 B0 42 8C 17 E8 38 78 06 97 44 11 C5 BF B7 7D B6 04 3C 88 AB 1A 42 E6 F9 CD 2A ED F3 4F CE B0 85 4D BB 86 AB D3 15 62 D2 4E 1D C9 15 EF 56 46 CF EC 4E 90 AE 85 E8 21 24 93 A4 7C 48 59 C3 CA CA CE BC 21 5A 11 F0 11 25 95 C6 69 33 84 D2 8E B8 CA 44 1D A2 64 6B 94 81 7D 3C 23 4C E8 FE C4 C9 FD FF E8 98 CE 7B 15 7F E4 94 8F A0 7B 34 59 19 A9 81 AA CF 1F C4 00 A5 5D BA 9F 90 F9 F9 A9 9A 0D 1B 33 12 4C D4 66 7B 44 79 6F 03 E0 03 D2 CE DB 40 8C 74 2F F7 F6 9C B4 F2 65 65 D6 B1 EE - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:06:14.279 -Connection: close -EndTime: 09:06:14.376 -ClientToServerBytes: 1210 -ServerToClientBytes: 1056 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 06 89 D0 A0 7F 7B 93 81 19 EC 00 7E 07 D0 33 55 CF 37 AF BD 70 5C B7 75 1C 5E 5A 26 3E -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 112.90.133.253:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.90.133.253 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 06 58 F7 72 19 E3 FA 34 CF A1 99 3C BB DE 51 4B 7B 01 C3 BA BE 85 19 6A 57 74 31 58 75 -"Time": 1973/8/19 7:48:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:06:14.410 -Connection: close -EndTime: 09:06:14.701 -ClientToServerBytes: 1162 -ServerToClientBytes: 5317 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 06 7B 72 B3 3C 3A 2B 9B 81 82 62 A8 87 2E 8B F6 F2 A0 A8 8F D5 3C A1 7F 91 1B CA C3 8B -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 112.90.133.253:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.90.133.253 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 06 89 26 CC 4D E2 07 66 26 DA BF 01 A0 96 0B CE 5D 14 36 6D 6A 1A A6 ED DC 79 62 66 AF -"Time": 1973/8/19 7:48:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 73 B0 42 8C 17 E8 38 78 06 97 44 11 C5 BF B7 7D B6 04 3C 88 AB 1A 42 E6 F9 CD 2A ED F3 4F CE B0 85 4D BB 86 AB D3 15 62 D2 4E 1D C9 15 EF 56 46 CF EC 4E 90 AE 85 E8 21 24 93 A4 7C 48 59 C3 CA CA CE BC 21 5A 11 F0 11 25 95 C6 69 33 84 D2 8E B8 CA 44 1D A2 64 6B 94 81 7D 3C 23 4C E8 FE C4 C9 FD FF E8 98 CE 7B 15 7F E4 94 8F A0 7B 34 59 19 A9 81 AA CF 1F C4 00 A5 5D BA 9F 90 F9 F9 A9 9A 0D 1B 33 12 4C D4 66 7B 44 79 6F 03 E0 03 D2 CE DB 40 8C 74 2F F7 F6 9C B4 F2 65 65 D6 B1 EE - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:06:14.720 -Connection: close -EndTime: 09:06:14.947 -ClientToServerBytes: 1162 -ServerToClientBytes: 18969 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 06 F7 E9 FF 24 77 B9 71 CE 08 8F 18 ED 38 B8 F5 E1 8C 1A 38 7E B2 98 10 BE 7B 5A FD 3E -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 112.90.133.253:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.90.133.253 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 06 BA A4 4D 72 1A 43 8E DF 0A 50 EF 84 9E 0A 35 7D F3 70 AB 26 8A 72 16 6B F8 35 2F 83 -"Time": 1973/8/19 7:48:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 73 B0 42 8C 17 E8 38 78 06 97 44 11 C5 BF B7 7D B6 04 3C 88 AB 1A 42 E6 F9 CD 2A ED F3 4F CE B0 85 4D BB 86 AB D3 15 62 D2 4E 1D C9 15 EF 56 46 CF EC 4E 90 AE 85 E8 21 24 93 A4 7C 48 59 C3 CA CA CE BC 21 5A 11 F0 11 25 95 C6 69 33 84 D2 8E B8 CA 44 1D A2 64 6B 94 81 7D 3C 23 4C E8 FE C4 C9 FD FF E8 98 CE 7B 15 7F E4 94 8F A0 7B 34 59 19 A9 81 AA CF 1F C4 00 A5 5D BA 9F 90 F9 F9 A9 9A 0D 1B 33 12 4C D4 66 7B 44 79 6F 03 E0 03 D2 CE DB 40 8C 74 2F F7 F6 9C B4 F2 65 65 D6 B1 EE - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:06:14.966 -Connection: close -EndTime: 09:06:15.059 -ClientToServerBytes: 1210 -ServerToClientBytes: 523 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 06 12 00 B2 31 EA AA BE BF 4A 48 77 5B 41 2C 90 8B BE 29 77 C5 2B D9 84 5A F5 8A 85 21 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 112.90.133.253:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.90.133.253 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 07 FD 20 7F 88 D0 6C A1 FD CE 3E FC 40 64 66 22 EA 9C 20 C4 05 8B DF 5F 49 40 FD 92 5E -"Time": 1974/3/1 12:09:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 73 B0 42 8C 17 E8 38 78 06 97 44 11 C5 BF B7 7D B6 04 3C 88 AB 1A 42 E6 F9 CD 2A ED F3 4F CE B0 85 4D BB 86 AB D3 15 62 D2 4E 1D C9 15 EF 56 46 CF EC 4E 90 AE 85 E8 21 24 93 A4 7C 48 59 C3 CA CA CE BC 21 5A 11 F0 11 25 95 C6 69 33 84 D2 8E B8 CA 44 1D A2 64 6B 94 81 7D 3C 23 4C E8 FE C4 C9 FD FF E8 98 CE 7B 15 7F E4 94 8F A0 7B 34 59 19 A9 81 AA CF 1F C4 00 A5 5D BA 9F 90 F9 F9 A9 9A 0D 1B 33 12 4C D4 66 7B 44 79 6F 03 E0 03 D2 CE DB 40 8C 74 2F F7 F6 9C B4 F2 65 65 D6 B1 EE - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:06:15.148 -Connection: close -EndTime: 09:06:15.259 -ClientToServerBytes: 1290 -ServerToClientBytes: 1424 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 07 74 D5 DA 71 CD 1E AC 9C D7 89 50 F0 B3 DD 13 C8 09 3D 6A 25 AA 4E C3 22 BF 9D FD 04 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -POST http://www.12306bypass.com/Regist.ashx HTTP/1.1 -Accept: */* -Accept-Language: zh-CN,zh;q=0.9 -Accept-Encoding: gzip, deflate, br -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Content-Type: application/x-www-form-urlencoded -Host: www.12306bypass.com -Content-Length: 150 -Connection: Close - -CdKey=BF08CAA9695D249062DD6894EAFF7B98FB0C3249&TradeNumber=&NickName=&Status=Get&UserName=13163251726&RealUserName=vacancyee&Remark=注册信息认证 -HTTP/1.1 200 OK -Date: Wed, 26 Dec 2018 01:06:15 GMT -Content-Type: text/plain; charset=utf-8 -Content-Length: 148 -Connection: close -Cache-Control: private - -{ "CdKey":"", "NickName":"","TradeNumber":"","UserName":"","Status":"","Message":"","Grade":"0","ExpireTime":"0001-01-01","Check":"","RealUser":"" } - ------------------------------------------------------------------- - -POST http://www.12306bypass.com/Cdn.ashx HTTP/1.1 -Accept: */* -Accept-Language: zh-CN,zh;q=0.9 -Accept-Encoding: gzip, deflate, br -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Content-Type: application/x-www-form-urlencoded -Host: www.12306bypass.com -Content-Length: 140 -Connection: Close - -IP=z3LpOoI%2bU4Xq2PMlWFk8ivV0DroNe7OCWD0errvkN10MAeuKjlp%2ffNSURRXWmXxXOjcjkt1CUYcv5Y%2fu%2bhiw%2bw%3d%3d&Obtain=1&Remark=CDN反馈与获取 -HTTP/1.1 200 OK -Date: Wed, 26 Dec 2018 01:06:15 GMT -Content-Type: text/plain; charset=utf-8 -Transfer-Encoding: chunked -Connection: close -Vary: Accept-Encoding -Cache-Control: private -Content-Encoding: gzip - -1c52 -d{ҲL[;a dFFz 3|m~>YIUɓKJ'*퉅rZ;xX%jd X>Y%#-,|:1L,芭tCsF8R+B!>(jv;`9>V"[b!J=LF{)V?ZzmD5KF8%.HeɅY+(Oǹ_Y@ږ;7q? q"JA~g}_\a#;Bǹ3EGWC9`z4N -akBa/hyֆݥ.ɖtux\? -#lӓ^;j^lȯɥK]F3ϳV"Y"_X\?VɡLli-]X_ Bˋݻ񨦏ywwػho'f>ςn*9 x458w^Pw|{%SZ>PC1o:H쭲5ӯ? $c(d6Θ)ޠ+ZP{=qFV Y+{Wgf5WCsˮmڬ$71y429uPZsrXd8anlM{(Q;f{\}OSRht[r;ݷl}}">$vuzCˉ'rO}ޫשQ}n.tyGc8#j= iN"w1}HtrsT D%ˢ€2hsz(IR۞U<y zI!}FL4%M$:à o0]-꺓"x\1~C *6hMy`Gnyy0F~`Z9ESl|cO!OG=pg%XsyNes:c襗QinfN3eZc91},@L| x3:a$|=kT?q#AL܃`b$4 -&yZ5Z}tm#jU4<0\D1tEWUi^>; #Eh#:9Ga.}˝NJIW=R_1?V1,1(imA$ADt)k -~uDxJE3kͼ#Da {Lq)(|rztyve`U"f i - t1=jIa_fn˖L9D8 Be24ñ-V+vxpf֧`~,P5^JvRt?! vQ gO8\"/~}HV{% u_7^gכapLfJs jlBAy傅tƑBGFX]lI[IGpHl+EtBbro,IOe#e?:Y!ϥj%Wl#X$(.;:KgLAEiR~u`;<<'b;$o2Tt;=Saԛq/p֛8O޸füDY}.2 zD>t$|*ec1pSMcr6Vl ] sY,|^U -N@{RÍ,CZ{˸ե%N+1&6|F mX$z&!3=Yɇ p?E_3k-ز8Dkd aIeމk"?t/n:Z3@CZ;$2G[> 2Hti!ܗfGrv֙do6?f]"|Wn,9_PU/{̾>yZp?Yν"VD -;5Iz va.xRWv8%$܃q&5>voZLAޑnKiC;uϣ Y}yOHPԇԆ}p=lk>=.72Z482]q}B:Ӫ'O^nzKK&&%yzqި'^F!Fq}k58tMr߳]iR-~Y!7ϫʶR;M=r1$ -f=<;^! K -U+w}P7)H?PRdtP,m~ё -?Q^!%dm9]5luZ}(!qJKxgweXq/߈cpATRQZNM+/,MQ1F6"AӲwo. c~4Md1b[im(7i8$7s̪K 8}3k;W>VX Π6lz]Ҡ_7mG33R{ަ/Z.۰UQG,? ̒PoOѸl | Xpa;%1__47[bVA-/hUps_,@orm,Cp {MwBЗk#ח$@T}VzEuӠ7v3~LӞ/CP[/pJR%%#ػ X#܉5~1E8- -̡9QK Ri#WMEpQ>Rz|#JT#^PY=8 _ ֡uoAm`cr/rނ\$LJ>2\.]X nΏY D%FQ^7iy{J -k;LPeΨ#Hl˭CBxɻ{dWvsU2sjFWmҴ}=ԣׄGN?IR'#|Ho%h -#2?[i8.o"лO6$ KpWLt^z˂kU]i%j$>t(9ߺyZ*p Qdh0d䯯7&:g~!0&hf]}&bA*GD'6qlY0$}[-0V ^֙&gEa`lâ,Z4[Vwk')_Ƌ*!{䪓 )o'P-6Ωz۸gD*qYF4v̸{~m'齨C bzZ*R31Ø|_D85> -G%8'_f gsP`Qͻh"[VKv 42}|r qbe( [7߫Ax#Ye}l?\5nr׷֣>y\6'Ů&_X6ImfȊVm, :#)rl -RY/uqXz(uHW%<ԼZdT+]UMxо=C'1[G؃075M{f^'N^9%q)x.':fńr"(`G8ҾMP Ⱦc@OǮS;$-n+t/.gVfF$(\;:~Sd*휯 9 -zo~TH\ɪؔe:4ϔ몱$Q^fQc;01s8dkzSf ގiWCl뽙eڦ& 2m?֪F*1xÔa]A穚2R\&ʢoDӟZȴh_ o`~+Vi&=zl z5[()yYfmZ?1Jb0t3w:'NjLRo|*>w G>4`&6RzɾjN"C<9s=z -Mw -H,M9"_8bt 8"hG5kJS-{ ̾ -h2 -غ{H8H8!o=$f`VOMTxadl>8Э4^"7eruaOJNW߷_&_E<ϓJBzߋ@NXNԷ43tzD^E6؁QiokW$8d"OcHcxx`C1$+;,XtFc3RR<;΅tVw+k"qg?X!qi.t9^A8#sG15B/$lٮ8P/u̦ s҃:G2N9a&%YẃSqxREE>mhR~UڟQ(Td$ "\)MРio1sfw =Þې\18#8KQV[)ߨS 4͓Rt3(=~btcwY«!h.̗ʡ[De~tU̠XWsYSQ -U4$Ƈ Tߍ-H7OR^'Ӆo$T-7:Ќ4)$ Zċ-ʻVx-4ʋc\]'A⸻X?[2 i8\a LGtU ib얘Y:k 7Z1X ɸ0uFCLr ,0u+7z);V0=$$"l0wb -KT[m6xMI]Rv:aN0Z06NVpl[ˊ1^<)t+<ˀi It+OГz/|n4γyZ5JNjYYnQکK"YI7ڐHa}!0bAymCk{(cyHUԈULd__ǵ#cRjIj+<`+KdcRgP2" |('%}; ->GQO P,9dˮ?wQ:Э;9/w5v<*.I9D(zG\#H-7V\Hn!>\;="̿eE8᜞n4@1o϶y_z~G0Z[#x칒y|5B{̧Z/JH͝m ! foU=ѳUVeag˼г7>OvH@ -reT>Oh^t\0 k949<;Ωs@ ie@[BlT>hvghM"MU ߭  -&kUI|JMIx<]c"Zma?x*ћ1K,x}\C…v[$vZP.Ѓ?L ~'I,k1*_-SU&gsV$NqO@Nȹ'ܯ;(=cxT;́˔!.T\L(;{ms+(oƋ =DL\/cuSgШANOEU3bLc0z qqW}|螺5huvC O`;4b/ -1b68 -dֲLa( 0#((o‚M -:{>[qn6l*K$gLu^2ǡM\xwmdlwZ~}z6[%.y|Lvd Xjg12K -!4a•ʏN=) ]PyOHd3.\0-T+Bao(Rza -BhN-F:s'3Na!'sw - svszHa_fWmjd?&++ԟh"^4_1ۆ W>Dž -KF W:ދ5 $WH[^+6.;TE$Q=-<G*nU_+qJh&(`xJ5NM )nmW2IU: %]PqTc“ʊKdd/Rϥ='9nG//;oW8hs.XVⰾ` ]+?⾳Tgf@l$ wN! UXcY滽5!Ke)=̰+hBYPa+DB2w= ʟ_{[![7u^ /økR"9&)nQ%>T0co^Ceg\hWΈX<.ȯcywH?)cdz!{:MS2~1td)rsҋRS͏2=>jpO Q {bU_-MÇEt" c;"z5PP\X-8wt.3J{IRWD#Oư[)&Zn/B?wWz*e2z*7^~i/PNKlGBa]4AjމGۼ@ -yļJYB-;5fdtE6KR_BNYjmHJq o$jϻݮBybJ ]µ+ߪC2 "{.ptxpY`\(;*$8=![+; ~KId0JfҸp -FdnՂO5^nVz^4$\!Œj4zڢ@:J\ȳjnQt/& ]aϔ/d핿8-xly~[i )_g*)7wxkupH[+ 8d5jnwomikߴ3uU ]n5 -Oڐ3O^Y{g -G#fAs(CM _E6 ->(.z{#8d>\pu ƆB "YyD[dL?z -]ϒgCWcy?cwTuE[qq}=;Ac#*pw:l3\vsD?OYi45n@:4"嫹sHß۳X H!QKoDF; hl[Mq*Yĕ ͆,|) Euc]fxϟX;}- -=%whDh5#E3=薾QBrƛ>h\I.[+>9Ny0{jJc Re:݂^sgM!쯄C[9ȥ,o?H57XP-$BSoQfUZ6_-K[tUȀX5 Ih=IsyA.1r.UU1ǻ-rB=G6CWF&gf,,5폒L]#\бA~A4{ %zFͷVq{Vˣ(H/7 E2.y+sm1^k$öbԂC@}Ų> j?Dg۱=t]:CS;tVOI 86AuIj"V;E̳ &dc㐣O ͯl2Nќfh)i*õlJXZD E+ lNKe^W錄-⚨}羹kQ0[1ԩ XMA>;M![?mςʾk< JL@v:8\ì]Ysv{AǸEE[D}V\܎2H = Z5_P&MԂުs.nͪ oG 㫔Z[$1\<۔Nd؋ -@~$(qSɶޗ>gMAyz1NflrO?nUf Qu'bmynZVwLD0[[7[e7 -;;[?}}&s| MdTC>Jˀȴ=A@HIKyb(f9ݢw+q!>I90!4{ ӆ% [T12_{ ,ҙ}9E16\rhQ]ߗmΒNMMY$m],=#|UL"-/O ~^1+:RJ -'KX!z^[O$G._tr~F^0ۖ -} -"2x}&{v}L" 2š^*k̾j _!ѵC,_\2w<&4~|5ztr)\mDJw% oZJf[/.5J _>0i\آ@8M*YlIwִ[Dw6!*+u:v+/S -<!DVvkOs3}:xFr܈?o&p."_ \ -Y=L[W_r3VW \Xh;4Gn1SNm<nʯ~k^:z5̃_ )֭JPVE_ շV+:P_loFk7x% W6w(DH/&1Bw4,aatzk Z s92H5?=+ZvZvۭ[L >8\8m.ٹsT=uY)YP\Xij<ˆC̽L)@l5yuMZgO hkZY>|rZO PL's0i8-?Z%;d`$4 +J5ReT[ВB֍9~ɧvVT*(| wvW׳>Q1vHmHOZ!V)ZN?LPD^P - V43 jT &jmW%(\-xzI  =+T==LN|\R)U >P(sφMex՟GP_Pcg[ىNJcZ\-C<_0peIGJcVN({(wWWcIsX -8 -Q/pPݲ;$\< l6+C wg%71%Pҟ3•[TS5VTS@DӝmVST(E?j=2Au>^6i_ $лb|k'hDpJ85LuV g'µ{.&~t 3 9y,"\+u1lCQDcJTx1փS;D@td_>򂂯GpSW |5W Y҇7S_l[:_ԪzY jqІ\# ;$?W9w2m $V=Y2uz)r®x>/fE #\Z|\<U'sltVcm'+Z ܮK?S>TlS,6{/"xz CՄ>xy{YlO ^D6rТJ'ڎ^۬C|~fT.gK>6} 9*^lK흹=내Kis#m4gZ,c&wyyZ4>{y0ca2EoR@GBP|x\ḰoIB$)ȭƄRcj5^?yr2H/c -'p6W77O.}1yF=b =z?}٢ CVqe7ABqaNr _F#b5Adb8H/QB/6ye@Ō -GewV_I4" -,H2U Za\T>jRtb03Ԟվt~ATDmuUCx9d+S\T`.xNMGoU(?4{[ -2ʇh'P[oZQƃf%u ;ފayX~]@}yAzL#HR]$3yͦn uz`nqlʙy|/],XD2[$Dޥ-2L -ɆZaI3a߉ V ,AkCl؇z´ks(󝩺$:#XMcUo8atF*PH9{G)eN#=2KsP?w(j':<5$<'选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 07 AC FB BB 06 C7 DB 6A A4 10 E1 1A FB 41 EF 11 68 F9 AB DC 85 83 CF AD EB 88 9E A2 B8 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 183.47.216.87:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.47.216.87 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 07 72 39 0A DD 73 AE 6F 01 B4 EF E0 D7 A9 1F DD 4A C5 9F B2 86 18 25 C8 0D 4F 1B EE 1E -"Time": 1974/3/1 12:09:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:06:15.807 -Connection: close -EndTime: 09:06:16.025 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 07 C0 B4 6D 59 DC 9D 12 C4 E4 75 E2 3F 60 6B 03 46 4B 0E AE AB F6 DE D3 46 C3 37 57 AA -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 121.11.81.237:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 121.11.81.237 -Connection: Keep-Alive - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 08 3E D6 DE C5 D0 36 0D 10 98 8B DF A8 6A E5 08 63 F6 58 91 56 3E D7 B8 66 44 AD 3C A4 -"Time": 1974/9/11 16:29:16 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:06:16.044 -Connection: close -EndTime: 09:06:16.141 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 08 B4 89 EF 05 2B 10 FD 7C ED 42 BA 32 85 30 83 09 C9 76 85 9F 93 76 7D 0F 0C AA 77 E8 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 218.14.200.254:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 218.14.200.254 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 08 E9 C9 95 15 DD D9 42 66 11 AA A1 23 73 F1 9B 49 D8 D8 41 8B AA 37 42 0A 45 51 4E E4 -"Time": 1974/9/11 16:29:16 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:06:16.162 -Connection: close -EndTime: 09:06:16.286 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 08 3A A8 B7 92 EF D4 30 C2 6A 1D 75 08 83 CE 19 8B F8 EE A1 1F 76 F7 37 AD CD 6C 19 02 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 59.34.229.254:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 59.34.229.254 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 08 C0 89 BC F7 7F 60 68 3D 5D BC CE 97 76 81 03 C1 BC 5E 93 D9 87 E0 EB EB 72 D6 C2 73 -"Time": 1974/9/11 16:29:16 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 73 B0 42 8C 17 E8 38 78 06 97 44 11 C5 BF B7 7D B6 04 3C 88 AB 1A 42 E6 F9 CD 2A ED F3 4F CE B0 85 4D BB 86 AB D3 15 62 D2 4E 1D C9 15 EF 56 46 CF EC 4E 90 AE 85 E8 21 24 93 A4 7C 48 59 C3 CA CA CE BC 21 5A 11 F0 11 25 95 C6 69 33 84 D2 8E B8 CA 44 1D A2 64 6B 94 81 7D 3C 23 4C E8 FE C4 C9 FD FF E8 98 CE 7B 15 7F E4 94 8F A0 7B 34 59 19 A9 81 AA CF 1F C4 00 A5 5D BA 9F 90 F9 F9 A9 9A 0D 1B 33 12 4C D4 66 7B 44 79 6F 03 E0 03 D2 CE DB 40 8C 74 2F F7 F6 9C B4 F2 65 65 D6 B1 EE - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:06:16.307 -Connection: close -EndTime: 09:06:16.416 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 08 1A 83 FA 11 6F 12 9F 74 5F BA B8 7F 34 29 60 4C DC 3D FA 19 1D 96 06 C5 B7 DE 43 31 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 125.90.206.248:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 125.90.206.248 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 08 72 77 88 6B 59 4E DD D1 7C 92 F6 AE C5 7B 77 2A 37 85 84 33 01 86 34 E4 09 7F 86 B6 -"Time": 1974/9/11 16:29:16 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:06:16.434 -Connection: close -EndTime: 09:06:16.541 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 08 CA 7A F5 4E 37 0C DD BA 70 19 90 D8 EE A5 D3 51 91 DD 33 47 A1 AB A0 0D CD 2B F4 9C -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 114.112.160.201:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 114.112.160.201 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 08 B1 2B EA 23 71 C1 CB 7A 9D 1F 57 4B 52 22 2F AB 4D 51 B0 22 4E 32 3B 96 5B 98 37 44 -"Time": 1974/9/11 16:29:16 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 73 B0 42 8C 17 E8 38 78 06 97 44 11 C5 BF B7 7D B6 04 3C 88 AB 1A 42 E6 F9 CD 2A ED F3 4F CE B0 85 4D BB 86 AB D3 15 62 D2 4E 1D C9 15 EF 56 46 CF EC 4E 90 AE 85 E8 21 24 93 A4 7C 48 59 C3 CA CA CE BC 21 5A 11 F0 11 25 95 C6 69 33 84 D2 8E B8 CA 44 1D A2 64 6B 94 81 7D 3C 23 4C E8 FE C4 C9 FD FF E8 98 CE 7B 15 7F E4 94 8F A0 7B 34 59 19 A9 81 AA CF 1F C4 00 A5 5D BA 9F 90 F9 F9 A9 9A 0D 1B 33 12 4C D4 66 7B 44 79 6F 03 E0 03 D2 CE DB 40 8C 74 2F F7 F6 9C B4 F2 65 65 D6 B1 EE - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:06:16.582 -Connection: close -EndTime: 09:06:16.943 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 08 2A 40 30 FA 24 92 9D 87 CD A5 E5 9D FA A5 C5 3E BD EA AB 7F 48 75 BA FE 4A F5 01 E7 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 183.134.53.252:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.134.53.252 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 08 3C E3 AC F7 4D 7B 29 26 D4 60 63 5F 34 17 6D 60 FE AC 04 B8 D7 FD 09 4D B0 8C 36 5A -"Time": 1974/9/11 16:29:16 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:06:16.979 -Connection: close -EndTime: 09:06:17.107 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 08 92 2A 8E 41 28 2A 4F F7 55 50 99 CA 17 63 50 31 53 55 E8 30 ED 66 B4 C1 E0 28 98 91 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 115.223.24.254:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 115.223.24.254 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 09 5B 84 68 E5 21 E9 34 2C 8D 62 66 6D 38 02 1E C9 F0 3C 8A 39 DA 17 98 E0 25 BB 9C 9B -"Time": 1975/3/24 20:49:32 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:06:17.143 -Connection: close -EndTime: 09:06:17.405 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 09 B7 23 25 83 BD BA 1A 88 39 19 C5 C5 70 06 B7 23 89 88 4A B9 D7 BB F0 30 1C 2D 74 C6 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 122.225.28.251:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 122.225.28.251 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 09 B9 42 12 A3 D0 FF BF 65 E9 5B C8 EE 38 EF 39 C9 96 BE 17 07 75 5E 11 C9 61 BA BB EE -"Time": 1975/3/24 20:49:32 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:06:17.446 -Connection: close -EndTime: 09:06:17.579 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 09 27 99 9E 88 C7 AD 55 9D 56 1D 5F 45 EA 38 04 1A EA 37 A0 61 E2 53 46 D6 E6 BE F9 10 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 58.223.166.253:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 58.223.166.253 -Connection: Keep-Alive - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 09 C7 6A E7 7D 81 18 37 5F 35 87 80 06 2B 3E 75 5F 38 BD 81 4B 58 14 74 DF 3E 9C 6B F9 -"Time": 1975/3/24 20:49:32 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:06:17.618 -Connection: close -EndTime: 09:06:17.762 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 09 FA 0A 14 0C 46 8F 5E 09 28 E8 4E 05 D6 C4 31 98 A3 18 BB 35 AF D8 A8 99 7D 1C 24 75 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 120.241.57.252:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 120.241.57.252 - - -HTTP/1.1 502 Fiddler - Connection Failed -Date: Wed, 26 Dec 2018 01:06:38 GMT -Content-Type: text/html; charset=UTF-8 -Connection: close -Cache-Control: no-cache, must-revalidate -Timestamp: 09:06:38.769 - -[Fiddler] The connection to '120.241.57.252' failed.
    Error: TimedOut (0x274c).
    System.Net.Sockets.SocketException 由于连接方在一段时间后没有正确答复或连接的主机没有反应，连接尝试失败。 120.241.57.252:443 - ------------------------------------------------------------------- - -POST http://www.12306bypass.com/Cdn.ashx HTTP/1.1 -Accept: */* -Accept-Language: zh-CN,zh;q=0.9 -Accept-Encoding: gzip, deflate, br -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Content-Type: application/x-www-form-urlencoded -Host: www.12306bypass.com -Content-Length: 142 -Connection: Close - -IP=z3LpOoI%2bU4U9Cy92yHcNi1IDpj%2b4CQak1UYFEc%2bcEsZ4D3MR5I1iYpfvWAOtVSxHn78cAiT%2b6hGKQoU%2bb7o9%2bQ%3d%3d&Obtain=1&Remark=CDN反馈与获取 -HTTP/1.1 200 OK -Date: Wed, 26 Dec 2018 01:06:44 GMT -Content-Type: text/plain; charset=utf-8 -Transfer-Encoding: chunked -Connection: close -Vary: Accept-Encoding -Cache-Control: private -Content-Encoding: gzip - -1c52 -d{ҲL[;a dFFz 3|m~>YIUɓKJ'*퉅rZ;xX%jd X>Y%#-,|:1L,芭tCsF8R+B!>(jv;`9>V"[b!J=LF{)V?ZzmD5KF8%.HeɅY+(Oǹ_Y@ږ;7q? q"JA~g}_\a#;Bǹ3EGWC9`z4N -akBa/hyֆݥ.ɖtux\? -#lӓ^;j^lȯɥK]F3ϳV"Y"_X\?VɡLli-]X_ Bˋݻ񨦏ywwػho'f>ςn*9 x458w^Pw|{%SZ>PC1o:H쭲5ӯ? $c(d6Θ)ޠ+ZP{=qFV Y+{Wgf5WCsˮmڬ$71y429uPZsrXd8anlM{(Q;f{\}OSRht[r;ݷl}}">$vuzCˉ'rO}ޫשQ}n.tyGc8#j= iN"w1}HtrsT D%ˢ€2hsz(IR۞U<y zI!}FL4%M$:à o0]-꺓"x\1~C *6hMy`Gnyy0F~`Z9ESl|cO!OG=pg%XsyNes:c襗QinfN3eZc91},@L| x3:a$|=kT?q#AL܃`b$4 -&yZ5Z}tm#jU4<0\D1tEWUi^>; #Eh#:9Ga.}˝NJIW=R_1?V1,1(imA$ADt)k -~uDxJE3kͼ#Da {Lq)(|rztyve`U"f i - t1=jIa_fn˖L9D8 Be24ñ-V+vxpf֧`~,P5^JvRt?! vQ gO8\"/~}HV{% u_7^gכapLfJs jlBAy傅tƑBGFX]lI[IGpHl+EtBbro,IOe#e?:Y!ϥj%Wl#X$(.;:KgLAEiR~u`;<<'b;$o2Tt;=Saԛq/p֛8O޸füDY}.2 zD>t$|*ec1pSMcr6Vl ] sY,|^U -N@{RÍ,CZ{˸ե%N+1&6|F mX$z&!3=Yɇ p?E_3k-ز8Dkd aIeމk"?t/n:Z3@CZ;$2G[> 2Hti!ܗfGrv֙do6?f]"|Wn,9_PU/{̾>yZp?Yν"VD -;5Iz va.xRWv8%$܃q&5>voZLAޑnKiC;uϣ Y}yOHPԇԆ}p=lk>=.72Z482]q}B:Ӫ'O^nzKK&&%yzqި'^F!Fq}k58tMr߳]iR-~Y!7ϫʶR;M=r1$ -f=<;^! K -U+w}P7)H?PRdtP,m~ё -?Q^!%dm9]5luZ}(!qJKxgweXq/߈cpATRQZNM+/,MQ1F6"AӲwo. c~4Md1b[im(7i8$7s̪K 8}3k;W>VX Π6lz]Ҡ_7mG33R{ަ/Z.۰UQG,? ̒PoOѸl | Xpa;%1__47[bVA-/hUps_,@orm,Cp {MwBЗk#ח$@T}VzEuӠ7v3~LӞ/CP[/pJR%%#ػ X#܉5~1E8- -̡9QK Ri#WMEpQ>Rz|#JT#^PY=8 _ ֡uoAm`cr/rނ\$LJ>2\.]X nΏY D%FQ^7iy{J -k;LPeΨ#Hl˭CBxɻ{dWvsU2sjFWmҴ}=ԣׄGN?IR'#|Ho%h -#2?[i8.o"лO6$ KpWLt^z˂kU]i%j$>t(9ߺyZ*p Qdh0d䯯7&:g~!0&hf]}&bA*GD'6qlY0$}[-0V ^֙&gEa`lâ,Z4[Vwk')_Ƌ*!{䪓 )o'P-6Ωz۸gD*qYF4v̸{~m'齨C bzZ*R31Ø|_D85> -G%8'_f gsP`Qͻh"[VKv 42}|r qbe( [7߫Ax#Ye}l?\5nr׷֣>y\6'Ů&_X6ImfȊVm, :#)rl -RY/uqXz(uHW%<ԼZdT+]UMxо=C'1[G؃075M{f^'N^9%q)x.':fńr"(`G8ҾMP Ⱦc@OǮS;$-n+t/.gVfF$(\;:~Sd*휯 9 -zo~TH\ɪؔe:4ϔ몱$Q^fQc;01s8dkzSf ގiWCl뽙eڦ& 2m?֪F*1xÔa]A穚2R\&ʢoDӟZȴh_ o`~+Vi&=zl z5[()yYfmZ?1Jb0t3w:'NjLRo|*>w G>4`&6RzɾjN"C<9s=z -Mw -H,M9"_8bt 8"hG5kJS-{ ̾ -h2 -غ{H8H8!o=$f`VOMTxadl>8Э4^"7eruaOJNW߷_&_E<ϓJBzߋ@NXNԷ43tzD^E6؁QiokW$8d"OcHcxx`C1$+;,XtFc3RR<;΅tVw+k"qg?X!qi.t9^A8#sG15B/$lٮ8P/u̦ s҃:G2N9a&%YẃSqxREE>mhR~UڟQ(Td$ "\)MРio1sfw =Þې\18#8KQV[)ߨS 4͓Rt3(=~btcwY«!h.̗ʡ[De~tU̠XWsYSQ -U4$Ƈ Tߍ-H7OR^'Ӆo$T-7:Ќ4)$ Zċ-ʻVx-4ʋc\]'A⸻X?[2 i8\a LGtU ib얘Y:k 7Z1X ɸ0uFCLr ,0u+7z);V0=$$"l0wb -KT[m6xMI]Rv:aN0Z06NVpl[ˊ1^<)t+<ˀi It+OГz/|n4γyZ5JNjYYnQکK"YI7ڐHa}!0bAymCk{(cyHUԈULd__ǵ#cRjIj+<`+KdcRgP2" |('%}; ->GQO P,9dˮ?wQ:Э;9/w5v<*.I9D(zG\#H-7V\Hn!>\;="̿eE8᜞n4@1o϶y_z~G0Z[#x칒y|5B{̧Z/JH͝m ! foU=ѳUVeag˼г7>OvH@ -reT>Oh^t\0 k949<;Ωs@ ie@[BlT>hvghM"MU ߭  -&kUI|JMIx<]c"Zma?x*ћ1K,x}\C…v[$vZP.Ѓ?L ~'I,k1*_-SU&gsV$NqO@Nȹ'ܯ;(=cxT;́˔!.T\L(;{ms+(oƋ =DL\/cuSgШANOEU3bLc0z qqW}|螺5huvC O`;4b/ -1b68 -dֲLa( 0#((o‚M -:{>[qn6l*K$gLu^2ǡM\xwmdlwZ~}z6[%.y|Lvd Xjg12K -!4a•ʏN=) ]PyOHd3.\0-T+Bao(Rza -BhN-F:s'3Na!'sw - svszHa_fWmjd?&++ԟh"^4_1ۆ W>Dž -KF W:ދ5 $WH[^+6.;TE$Q=-<G*nU_+qJh&(`xJ5NM )nmW2IU: %]PqTc“ʊKdd/Rϥ='9nG//;oW8hs.XVⰾ` ]+?⾳Tgf@l$ wN! UXcY滽5!Ke)=̰+hBYPa+DB2w= ʟ_{[![7u^ /økR"9&)nQ%>T0co^Ceg\hWΈX<.ȯcywH?)cdz!{:MS2~1td)rsҋRS͏2=>jpO Q {bU_-MÇEt" c;"z5PP\X-8wt.3J{IRWD#Oư[)&Zn/B?wWz*e2z*7^~i/PNKlGBa]4AjމGۼ@ -yļJYB-;5fdtE6KR_BNYjmHJq o$jϻݮBybJ ]µ+ߪC2 "{.ptxpY`\(;*$8=![+; ~KId0JfҸp -FdnՂO5^nVz^4$\!Œj4zڢ@:J\ȳjnQt/& ]aϔ/d핿8-xly~[i )_g*)7wxkupH[+ 8d5jnwomikߴ3uU ]n5 -Oڐ3O^Y{g -G#fAs(CM _E6 ->(.z{#8d>\pu ƆB "YyD[dL?z -]ϒgCWcy?cwTuE[qq}=;Ac#*pw:l3\vsD?OYi45n@:4"嫹sHß۳X H!QKoDF; hl[Mq*Yĕ ͆,|) Euc]fxϟX;}- -=%whDh5#E3=薾QBrƛ>h\I.[+>9Ny0{jJc Re:݂^sgM!쯄C[9ȥ,o?H57XP-$BSoQfUZ6_-K[tUȀX5 Ih=IsyA.1r.UU1ǻ-rB=G6CWF&gf,,5폒L]#\бA~A4{ %zFͷVq{Vˣ(H/7 E2.y+sm1^k$öbԂC@}Ų> j?Dg۱=t]:CS;tVOI 86AuIj"V;E̳ &dc㐣O ͯl2Nќfh)i*õlJXZD E+ lNKe^W錄-⚨}羹kQ0[1ԩ XMA>;M![?mςʾk< JL@v:8\ì]Ysv{AǸEE[D}V\܎2H = Z5_P&MԂުs.nͪ oG 㫔Z[$1\<۔Nd؋ -@~$(qSɶޗ>gMAyz1NflrO?nUf Qu'bmynZVwLD0[[7[e7 -;;[?}}&s| MdTC>Jˀȴ=A@HIKyb(f9ݢw+q!>I90!4{ ӆ% [T12_{ ,ҙ}9E16\rhQ]ߗmΒNMMY$m],=#|UL"-/O ~^1+:RJ -'KX!z^[O$G._tr~F^0ۖ -} -"2x}&{v}L" 2š^*k̾j _!ѵC,_\2w<&4~|5ztr)\mDJw% oZJf[/.5J _>0i\آ@8M*YlIwִ[Dw6!*+u:v+/S -<!DVvkOs3}:xFr܈?o&p."_ \ -Y=L[W_r3VW \Xh;4Gn1SNm<nʯ~k^:z5̃_ )֭JPVE_ շV+:P_loFk7x% W6w(DH/&1Bw4,aatzk Z s92H5?=+ZvZvۭ[L >8\8m.ٹsT=uY)YP\Xij<ˆC̽L)@l5yuMZgO hkZY>|rZO PL's0i8-?Z%;d`$4 +J5ReT[ВB֍9~ɧvVT*(| wvW׳>Q1vHmHOZ!V)ZN?LPD^P - V43 jT &jmW%(\-xzI  =+T==LN|\R)U >P(sφMex՟GP_Pcg[ىNJcZ\-C<_0peIGJcVN({(wWWcIsX -8 -Q/pPݲ;$\< l6+C wg%71%Pҟ3•[TS5VTS@DӝmVST(E?j=2Au>^6i_ $лb|k'hDpJ85LuV g'µ{.&~t 3 9y,"\+u1lCQDcJTx1փS;D@td_>򂂯GpSW |5W Y҇7S_l[:_ԪzY jqІ\# ;$?W9w2m $V=Y2uz)r®x>/fE #\Z|\<U'sltVcm'+Z ܮK?S>TlS,6{/"xz CՄ>xy{YlO ^D6rТJ'ڎ^۬C|~fT.gK>6} 9*^lK흹=내Kis#m4gZ,c&wyyZ4>{y0ca2EoR@GBP|x\ḰoIB$)ȭƄRcj5^?yr2H/c -'p6W77O.}1yF=b =z?}٢ CVqe7ABqaNr _F#b5Adb8H/QB/6ye@Ō -GewV_I4" -,H2U Za\T>jRtb03Ԟվt~ATDmuUCx9d+S\T`.xNMGoU(?4{[ -2ʇh'P[oZQƃf%u ;ފayX~]@}yAzL#HR]$3yͦn uz`nqlʙy|/],XD2[$Dޥ-2L -ɆZaI3a߉ V ,AkCl؇z´ks(󝩺$:#XMcUo8atF*PH9{G)eN#=2KsP?w(j':<5$<'选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 24 65 D7 28 27 F4 9F F7 E2 87 E5 B4 8A 4D 55 3F 3A 81 EF 1D EA F0 DA FB 3D 6C 13 58 A4 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 183.47.216.87:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.47.216.87 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 24 A4 DC A6 C1 40 82 2E CB 2C 3B B8 1D 37 C9 87 87 4E CC 01 E0 16 18 CF 15 2A 25 5E DA -"Time": 1989/7/31 17:56:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:06:44.347 -Connection: close -EndTime: 09:06:44.429 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 24 9C A5 FC 4C 3C 13 29 A4 C0 94 84 94 19 D0 84 E4 4C 1F 31 9C 32 29 69 E7 89 B8 A6 B8 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 121.11.81.237:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 121.11.81.237 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 24 2F CA 98 AF DC D2 8C DF 66 AB 50 15 1E 84 27 5C 14 64 E2 05 11 A8 6B C8 E0 76 2F AF -"Time": 1989/7/31 17:56:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:06:44.447 -Connection: close -EndTime: 09:06:44.553 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 24 B4 DC A8 02 EE 30 95 5C 14 1D 01 19 08 73 7A 2F 02 C7 17 3F 74 28 92 D5 99 66 B5 8C -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 218.14.200.254:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 218.14.200.254 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 24 26 8C 75 68 C5 49 1C 98 FD 31 14 73 CC 11 CD C8 6F C8 8F C3 F1 2C 72 D8 72 5D 2D A3 -"Time": 1989/7/31 17:56:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:06:44.570 -Connection: close -EndTime: 09:06:44.674 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 24 6C 29 74 49 6B 22 99 FE 7A C5 0D 4B 6B 51 BF D2 76 61 8C A6 62 3D 7F 0D 4A 0F EF F4 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 59.34.229.254:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 59.34.229.254 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 24 73 6A A2 53 55 E4 69 80 B0 D8 6B 13 1F 11 A9 CA 8D C1 B1 B3 17 FB CB 14 33 6B BD 89 -"Time": 1989/7/31 17:56:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:06:44.694 -Connection: close -EndTime: 09:06:44.788 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 24 7A 81 07 F9 C2 6C FE 5F 1F 28 09 F5 00 92 13 51 1A 00 21 6D 66 16 09 10 F5 8F CB A6 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 125.90.206.248:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 125.90.206.248 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 24 2F 56 E7 DF 51 6B 7C C3 02 BD 19 49 FF 01 97 9E BD 49 FC 8B F5 6D 7D F0 2B C2 24 C1 -"Time": 1989/7/31 17:56:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:06:44.810 -Connection: close -EndTime: 09:06:44.920 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 24 07 1A F0 4F 6F 5E EC B9 7A FB E8 70 98 29 BB 7A 19 A5 49 5A 4C 69 B9 C9 FD 05 B5 18 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 114.112.160.201:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 114.112.160.201 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 24 AD A3 CE 44 38 5C 01 A6 06 A4 75 BA CA A6 F8 29 C4 AF 00 F9 9A 27 09 91 19 02 E9 A2 -"Time": 1989/7/31 17:56:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:06:44.962 -Connection: close -EndTime: 09:06:45.444 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 25 9A 94 95 23 A0 04 25 D3 AB A6 E1 65 12 C4 76 73 E7 80 1D D5 7B 20 47 7B AE 6B 08 3E -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 183.134.53.252:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.134.53.252 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 25 DC C6 AA 0E 14 30 84 39 9F 03 27 BA 49 C0 AF D7 1A 4C 81 9D A2 D6 62 81 21 ED 1F 8C -"Time": 1990/2/10 22:17:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:06:45.481 -Connection: close -EndTime: 09:06:45.599 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 25 0C 50 AB 29 7B FB CF D3 D5 51 85 A7 C3 52 D8 0C 76 98 46 A1 33 C9 15 79 C3 56 F5 8A -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 115.223.24.254:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 115.223.24.254 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 25 A5 0A C8 F7 A3 75 8F 51 7A 24 23 51 7C E2 BF AC 2E 14 76 3A 4E E1 84 0F 7C AB C7 BE -"Time": 1990/2/10 22:17:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:06:45.631 -Connection: close -EndTime: 09:06:45.743 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 25 65 66 39 62 3C 72 F1 49 B7 82 59 04 30 D8 05 E6 DD D8 8D 0E 9E 90 EE 6F 6D 7B FC F4 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 122.225.28.251:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 122.225.28.251 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 25 CC 9E 55 8E 2C 64 0D 87 15 35 DB A0 02 0D B5 F7 E8 E8 65 63 FC 6B B0 31 E9 E7 EC E5 -"Time": 1990/2/10 22:17:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:06:45.779 -Connection: close -EndTime: 09:06:45.895 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 25 DF 9C 5C 9E 39 77 C9 AA 85 A3 0E 7E 3D FC AF 57 7D 46 10 87 D0 5E 30 CE 16 C8 87 80 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 58.223.166.253:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 58.223.166.253 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 25 CB B2 0F 43 6F D4 D2 9F 80 E5 DE 93 52 4F 0B 92 D6 52 D9 81 4F 60 97 E3 F9 4A 66 E9 -"Time": 1990/2/10 22:17:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 73 B0 42 8C 17 E8 38 78 06 97 44 11 C5 BF B7 7D B6 04 3C 88 AB 1A 42 E6 F9 CD 2A ED F3 4F CE B0 85 4D BB 86 AB D3 15 62 D2 4E 1D C9 15 EF 56 46 CF EC 4E 90 AE 85 E8 21 24 93 A4 7C 48 59 C3 CA CA CE BC 21 5A 11 F0 11 25 95 C6 69 33 84 D2 8E B8 CA 44 1D A2 64 6B 94 81 7D 3C 23 4C E8 FE C4 C9 FD FF E8 98 CE 7B 15 7F E4 94 8F A0 7B 34 59 19 A9 81 AA CF 1F C4 00 A5 5D BA 9F 90 F9 F9 A9 9A 0D 1B 33 12 4C D4 66 7B 44 79 6F 03 E0 03 D2 CE DB 40 8C 74 2F F7 F6 9C B4 F2 65 65 D6 B1 EE - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:06:45.930 -Connection: close -EndTime: 09:06:46.087 -ClientToServerBytes: 778 -ServerToClientBytes: 6106 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 25 40 11 4C F3 F2 DC F3 E1 43 38 FC 8F A0 E6 11 9A 5A 9C 4B 2F 3D 56 90 76 F1 42 3D 4F -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 120.241.57.252:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 120.241.57.252 - - -HTTP/1.1 502 Fiddler - Connection Failed -Date: Wed, 26 Dec 2018 01:07:07 GMT -Content-Type: text/html; charset=UTF-8 -Connection: close -Cache-Control: no-cache, must-revalidate -Timestamp: 09:07:07.091 - -[Fiddler] The connection to '120.241.57.252' failed.
    Error: TimedOut (0x274c).
    System.Net.Sockets.SocketException 由于连接方在一段时间后没有正确答复或连接的主机没有反应，连接尝试失败。 120.241.57.252:443 - ------------------------------------------------------------------- - -CONNECT 183.236.28.146:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.236.28.146 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 3B 42 4C F4 5F F1 5A 87 38 91 1F 82 B7 55 DE FA 06 DA 3F A4 FE 90 93 6E 8C 06 62 41 13 -"Time": 2001/10/22 21:42:52 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:07.110 -Connection: close -EndTime: 09:07:07.341 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 3B FE DF 3D 97 62 C3 24 B8 33 5A CF D7 5F DC 30 78 4A 90 93 4B B1 19 24 F4 7B 8E DE 06 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 120.241.57.30:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 120.241.57.30 - - -HTTP/1.1 502 Fiddler - Connection Failed -Date: Wed, 26 Dec 2018 01:07:28 GMT -Content-Type: text/html; charset=UTF-8 -Connection: close -Cache-Control: no-cache, must-revalidate -Timestamp: 09:07:28.345 - -[Fiddler] The connection to '120.241.57.30' failed.
    Error: TimedOut (0x274c).
    System.Net.Sockets.SocketException 由于连接方在一段时间后没有正确答复或连接的主机没有反应，连接尝试失败。 120.241.57.30:443 - ------------------------------------------------------------------- - -CONNECT 120.198.197.251:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 120.198.197.251 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 50 9E 95 43 43 8E 66 DF DA 47 E7 32 8B E3 83 9A 09 68 D0 2E 7D 26 A9 0D B9 80 3D 84 93 -"Time": 2012/12/21 16:48:28 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:28.379 -Connection: close -EndTime: 09:07:28.833 -ClientToServerBytes: 778 -ServerToClientBytes: 6138 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 50 AC 2C 64 16 BC 21 A7 8B 3F 2B AE 63 4B 38 9C 75 E5 FD 56 2E 08 82 F6 79 C3 05 BF 19 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 222.138.255.252:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 222.138.255.252 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 50 CC DE 5A 42 D4 9E 8B D2 27 6B 08 52 FA 6D C6 F8 FA A9 75 F6 B2 2B 5A 07 03 F9 D1 93 -"Time": 2012/12/21 16:48:28 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:28.880 -Connection: close -EndTime: 09:07:29.029 -ClientToServerBytes: 778 -ServerToClientBytes: 6106 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 50 64 52 95 0E C2 6C 60 A3 E5 C1 8D CA 08 BF 42 94 C5 A7 3D FC 6B BB 86 7A 78 49 6F 1B -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 112.90.135.238:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.90.135.238 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 51 EB 72 9D 0E 8A 87 E1 84 C3 8A 39 C3 B0 3E EE 0B C7 40 11 23 94 21 01 1D 36 52 53 FA -"Time": 2013/7/3 21:08:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:29.050 -Connection: close -EndTime: 09:07:29.146 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 51 AE 30 14 01 06 C4 2D 8E 4F E6 BB B7 BE 31 90 7A 36 62 CB 0B B7 7E C2 8A B2 DD E5 E3 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 112.84.104.52:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.84.104.52 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 51 AD 5E FB 21 F5 BD E0 C1 26 82 CD EB DD 50 20 69 E9 D8 70 99 FD 8A 91 05 78 01 D3 57 -"Time": 2013/7/3 21:08:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 73 B0 42 8C 17 E8 38 78 06 97 44 11 C5 BF B7 7D B6 04 3C 88 AB 1A 42 E6 F9 CD 2A ED F3 4F CE B0 85 4D BB 86 AB D3 15 62 D2 4E 1D C9 15 EF 56 46 CF EC 4E 90 AE 85 E8 21 24 93 A4 7C 48 59 C3 CA CA CE BC 21 5A 11 F0 11 25 95 C6 69 33 84 D2 8E B8 CA 44 1D A2 64 6B 94 81 7D 3C 23 4C E8 FE C4 C9 FD FF E8 98 CE 7B 15 7F E4 94 8F A0 7B 34 59 19 A9 81 AA CF 1F C4 00 A5 5D BA 9F 90 F9 F9 A9 9A 0D 1B 33 12 4C D4 66 7B 44 79 6F 03 E0 03 D2 CE DB 40 8C 74 2F F7 F6 9C B4 F2 65 65 D6 B1 EE - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:29.195 -Connection: close -EndTime: 09:07:29.344 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 51 79 C9 28 82 08 75 B1 84 B8 54 65 67 0E 5A 12 D6 23 8C 62 72 84 26 6A 03 F4 FC 7C AB -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 114.112.172.123:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 114.112.172.123 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 51 A8 97 B8 6E 14 21 7D C9 5A D8 5B 9B 3F 27 93 CC 93 20 79 63 9E B2 1E F9 BC 42 01 4D -"Time": 2013/7/3 21:08:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:29.381 -Connection: close -EndTime: 09:07:29.486 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 51 86 D4 B8 65 F0 3C C2 50 6D DE 6C 30 0F 1C CC 7F 17 D5 7B C1 82 D5 2C 0B 7D CF AF 5A -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 61.149.9.239:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 61.149.9.239 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 51 17 3B 50 49 21 A0 07 59 BC DE E5 16 00 25 C6 06 ED B1 11 2C 0C A8 3E AC 17 1D 57 C1 -"Time": 2013/7/3 21:08:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 73 B0 42 8C 17 E8 38 78 06 97 44 11 C5 BF B7 7D B6 04 3C 88 AB 1A 42 E6 F9 CD 2A ED F3 4F CE B0 85 4D BB 86 AB D3 15 62 D2 4E 1D C9 15 EF 56 46 CF EC 4E 90 AE 85 E8 21 24 93 A4 7C 48 59 C3 CA CA CE BC 21 5A 11 F0 11 25 95 C6 69 33 84 D2 8E B8 CA 44 1D A2 64 6B 94 81 7D 3C 23 4C E8 FE C4 C9 FD FF E8 98 CE 7B 15 7F E4 94 8F A0 7B 34 59 19 A9 81 AA CF 1F C4 00 A5 5D BA 9F 90 F9 F9 A9 9A 0D 1B 33 12 4C D4 66 7B 44 79 6F 03 E0 03 D2 CE DB 40 8C 74 2F F7 F6 9C B4 F2 65 65 D6 B1 EE - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:29.530 -Connection: close -EndTime: 09:07:29.641 -ClientToServerBytes: 778 -ServerToClientBytes: 6138 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 51 0F F0 27 8C 37 27 CD 3C E8 87 A6 EA 05 65 EA B1 A9 E4 C0 EA 66 A0 0E B5 E4 09 D7 A2 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 180.163.150.251:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 180.163.150.251 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 51 61 ED FE AA EA 33 74 91 D7 C7 F8 B7 59 AF B7 C7 8A E9 29 A8 A6 E1 32 43 A6 71 BB 6C -"Time": 2013/7/3 21:08:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:29.677 -Connection: close -EndTime: 09:07:29.818 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 51 67 39 43 DE FA 53 B2 33 44 92 3F B6 E5 A6 19 92 DD 2A 87 94 4A 3C D0 4A 70 56 39 B5 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 101.226.18.72:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 101.226.18.72 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 51 A6 0B 2F 28 F2 47 EB 4A 4E E2 05 2B 95 13 2D 22 FE C9 92 3F 36 AD 2A 83 70 E7 5E 65 -"Time": 2013/7/3 21:08:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:29.857 -Connection: close -EndTime: 09:07:30.096 -ClientToServerBytes: 778 -ServerToClientBytes: 6138 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 51 A8 74 89 DB 53 2B 44 06 66 EA 55 C8 AF B1 36 3F CA D2 58 F4 1D 74 E2 7D 94 C0 FF E7 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 106.120.178.253:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 106.120.178.253 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 52 4A 77 CB FE A0 69 CE EE 96 E2 6C C7 9F 27 74 53 30 0F 2F 92 A9 82 31 93 A5 24 68 80 -"Time": 2014/1/14 1:29:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:30.140 -Connection: close -EndTime: 09:07:30.278 -ClientToServerBytes: 778 -ServerToClientBytes: 6064 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 52 C2 1A 7C 5C 8E 6D C6 1B 4B 2D F1 DF 17 C9 A4 09 5B A6 E8 0E BB F0 BF AB 73 76 F4 B1 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 124.236.28.247:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 124.236.28.247 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 52 60 76 11 82 03 01 8D 54 D6 A5 DC C5 93 C1 F1 6D EA B8 84 06 21 EF 97 F4 37 92 ED AB -"Time": 2014/1/14 1:29:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:30.323 -Connection: close -EndTime: 09:07:30.511 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 52 22 DF 97 86 C9 40 40 88 CF DD AB 3D AB 1D 91 4F 4F D4 C0 CD 01 88 3E 07 48 53 1C 16 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 218.76.129.252:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 218.76.129.252 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 52 BC 73 D5 BD 66 F8 E8 6C C6 D5 CB 13 E6 86 0C C2 A7 B3 3B A7 03 3F BB 0D 5A CB 0B 95 -"Time": 2014/1/14 1:29:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 73 B0 42 8C 17 E8 38 78 06 97 44 11 C5 BF B7 7D B6 04 3C 88 AB 1A 42 E6 F9 CD 2A ED F3 4F CE B0 85 4D BB 86 AB D3 15 62 D2 4E 1D C9 15 EF 56 46 CF EC 4E 90 AE 85 E8 21 24 93 A4 7C 48 59 C3 CA CA CE BC 21 5A 11 F0 11 25 95 C6 69 33 84 D2 8E B8 CA 44 1D A2 64 6B 94 81 7D 3C 23 4C E8 FE C4 C9 FD FF E8 98 CE 7B 15 7F E4 94 8F A0 7B 34 59 19 A9 81 AA CF 1F C4 00 A5 5D BA 9F 90 F9 F9 A9 9A 0D 1B 33 12 4C D4 66 7B 44 79 6F 03 E0 03 D2 CE DB 40 8C 74 2F F7 F6 9C B4 F2 65 65 D6 B1 EE - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:30.541 -Connection: close -EndTime: 09:07:30.664 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 52 D8 A9 AE 3A 6D 68 1A 6B 01 EB 50 33 82 AD D4 6E A2 EA 9F 75 46 DD BB DB 1A 2B 8D 83 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 222.20.147.189:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 222.20.147.189 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 52 59 FC 86 13 72 6E 14 51 AA 09 8D AB 8D A3 D9 C8 3C 1D 09 DB 4E 7A 6C C1 C9 A3 F6 27 -"Time": 2014/1/14 1:29:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:30.722 -Connection: close -EndTime: 09:07:31.538 -ClientToServerBytes: 293 -ServerToClientBytes: 0 - - - ------------------------------------------------------------------- - -CONNECT 112.90.135.244:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.90.135.244 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 53 C7 E2 9C 1E F6 02 2B 0F 1E 1C 12 45 3C 90 75 D6 2A BE BF A4 AD 79 4D EB EA 14 51 9B -"Time": 2014/7/27 5:49:16 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket empty - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:31.555 -Connection: close -EndTime: 09:07:31.732 -ClientToServerBytes: 677 -ServerToClientBytes: 9520 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 53 D3 5D CB 84 22 37 6D E2 11 48 AC F3 7C 8E C7 E6 FE 98 18 E8 1E BF 3A 91 96 60 BA 89 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 118.123.237.254:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 118.123.237.254 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 53 18 A2 B4 5D B2 B9 65 6D C1 05 1C F6 ED F8 30 BF 9E 0B A5 13 81 C0 D9 D7 F6 41 B3 44 -"Time": 2014/7/27 5:49:16 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 15 D3 E1 39 34 C0 09 38 27 61 F5 9C 4C B9 31 D7 DF 38 71 56 E7 F9 B9 81 E6 68 51 1C E3 A3 C0 F3 53 5E 85 9D 93 A0 6E 33 07 70 9B F3 51 C8 32 31 82 FA 2E 9F 07 D2 28 CD B4 F6 96 BC 97 44 AC FD 6E 2D A0 C6 72 15 42 87 2A D7 24 AD 8A 13 84 8F 41 74 D5 47 9E 8B 14 39 F5 E0 90 0D 1C EF 5B AF D1 EA 11 EA C5 F4 96 EC 42 39 52 C9 70 AD 57 F5 5F E4 96 14 78 B9 DB FA 7C 15 FB 9D DB 53 56 A0 80 3D 60 5F BD A0 27 A6 30 50 0C D1 20 E2 29 84 2B 5A 94 0A 6B 2F CD 45 6B 5C 13 6B 1A 15 63 AA - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:31.775 -Connection: close -EndTime: 09:07:31.986 -ClientToServerBytes: 778 -ServerToClientBytes: 6138 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 53 CD A9 05 6A A2 F2 1E 06 D2 F2 5C C8 6F D2 84 EC 3B 8D 71 DA BB E0 D2 5C 19 5A BE A8 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 112.90.135.240:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.90.135.240 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 54 A7 A6 09 BA 4E 25 C1 E0 86 6C B0 7C E2 63 FA 55 CF 87 07 AC F9 08 E4 23 71 2E 59 78 -"Time": 2015/2/6 10:09:32 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:32.003 -Connection: close -EndTime: 09:07:32.163 -ClientToServerBytes: 778 -ServerToClientBytes: 6138 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 54 06 D1 BE 9E 3A 2F 1D 89 AD A9 8F 0B 5C 7A 61 E6 91 12 8E BF E7 E1 C6 36 83 22 B8 EB -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 112.90.133.253:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.90.133.253 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 54 0B D0 32 5A BF CB 11 70 C0 D8 27 31 ED BA 30 59 03 B1 C0 A7 16 F8 1F 44 2F 80 35 FA -"Time": 2015/2/6 10:09:32 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:32.181 -Connection: close -EndTime: 09:07:32.471 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 54 0C 68 C5 63 96 E6 0F 03 DF D7 78 53 68 89 A0 5B F7 21 FB 00 7D F5 8B 24 2F E7 60 D4 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 221.194.180.54:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 221.194.180.54 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 54 E7 04 17 F7 94 D3 6A 16 B4 76 E0 42 51 4E 6B 3E A7 37 BE D8 DE 56 83 C2 7A 9A 62 44 -"Time": 2015/2/6 10:09:32 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:32.513 -Connection: close -EndTime: 09:07:32.671 -ClientToServerBytes: 778 -ServerToClientBytes: 6048 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 54 03 72 F1 4F C0 87 F6 A7 E8 25 5D 36 98 06 EA 5B A6 50 B5 37 BE 79 11 F0 83 DE 98 D5 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 58.220.71.253:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 58.220.71.253 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 54 0B D8 6F 0A 10 81 92 A6 43 1D 08 B1 F6 DA 9D B2 4C A4 10 16 A8 34 19 86 1F 25 15 8F -"Time": 2015/2/6 10:09:32 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:32.709 -Connection: close -EndTime: 09:07:32.849 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 54 9A CB 94 22 E4 47 D3 5B ED 50 8B 5D 45 7F BE 4A B1 03 6E 0B 91 B3 CA 17 88 55 78 92 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 58.216.109.187:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 58.216.109.187 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 54 35 35 CB 3C 26 FA EC 5F 31 DC FD 6B 8B 0B 1F FF D3 34 F2 D1 00 DB DE 33 55 4D E8 64 -"Time": 2015/2/6 10:09:32 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 15 D3 E1 39 34 C0 09 38 27 61 F5 9C 4C B9 31 D7 DF 38 71 56 E7 F9 B9 81 E6 68 51 1C E3 A3 C0 F3 53 5E 85 9D 93 A0 6E 33 07 70 9B F3 51 C8 32 31 82 FA 2E 9F 07 D2 28 CD B4 F6 96 BC 97 44 AC FD 6E 2D A0 C6 72 15 42 87 2A D7 24 AD 8A 13 84 8F 41 74 D5 47 9E 8B 14 39 F5 E0 90 0D 1C EF 5B AF D1 EA 11 EA C5 F4 96 EC 42 39 52 C9 70 AD 57 F5 5F E4 96 14 78 B9 DB FA 7C 15 FB 9D DB 53 56 A0 80 3D 60 5F BD A0 27 A6 30 50 0C D1 20 E2 29 84 2B 5A 94 0A 6B 2F CD 45 6B 5C 13 6B 1A 15 63 AA - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:32.884 -Connection: close -EndTime: 09:07:33.188 -ClientToServerBytes: 778 -ServerToClientBytes: 6064 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 54 BB 37 CC E9 9E 29 11 30 AE 00 7D 93 43 93 B0 1F BA 59 B0 BD 64 AC F0 44 5D 12 53 D7 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 58.51.168.202:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 58.51.168.202 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 55 E5 1A E1 13 7F 90 49 71 CF 46 CB D1 69 54 FC BF 14 DC 2D A2 61 56 F3 B4 AD DB 6D FD -"Time": 2015/8/19 14:29:48 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:33.217 -Connection: close -EndTime: 09:07:33.423 -ClientToServerBytes: 778 -ServerToClientBytes: 6048 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 55 99 01 6A F7 93 5C 46 6B C6 9D C7 2F 87 41 9C 0C CF 62 A3 64 F2 D4 28 91 CA FA C9 A6 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 117.149.154.251:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 117.149.154.251 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 55 2E 14 23 61 8E 0F 7F 07 56 8C 6E F6 60 B4 EA 0A E7 6B 9E DB 27 60 F0 DA 7E F5 0E 64 -"Time": 2015/8/19 14:29:48 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:33.463 -Connection: close -EndTime: 09:07:33.709 -ClientToServerBytes: 778 -ServerToClientBytes: 6064 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 55 7C 3A 5F A0 58 07 23 3C 8F AD D7 5A 6F 80 4D 61 BB 4A 2F 6F 42 FA 09 2C A2 8A 16 6D -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 117.149.154.237:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 117.149.154.237 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 55 6A DD 1C CC 19 38 AE 75 2C 91 56 C2 00 BC AD DB B1 05 EB F8 5E CC 77 52 C7 F2 88 71 -"Time": 2015/8/19 14:29:48 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 15 D3 E1 39 34 C0 09 38 27 61 F5 9C 4C B9 31 D7 DF 38 71 56 E7 F9 B9 81 E6 68 51 1C E3 A3 C0 F3 53 5E 85 9D 93 A0 6E 33 07 70 9B F3 51 C8 32 31 82 FA 2E 9F 07 D2 28 CD B4 F6 96 BC 97 44 AC FD 6E 2D A0 C6 72 15 42 87 2A D7 24 AD 8A 13 84 8F 41 74 D5 47 9E 8B 14 39 F5 E0 90 0D 1C EF 5B AF D1 EA 11 EA C5 F4 96 EC 42 39 52 C9 70 AD 57 F5 5F E4 96 14 78 B9 DB FA 7C 15 FB 9D DB 53 56 A0 80 3D 60 5F BD A0 27 A6 30 50 0C D1 20 E2 29 84 2B 5A 94 0A 6B 2F CD 45 6B 5C 13 6B 1A 15 63 AA - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:33.749 -Connection: close -EndTime: 09:07:33.890 -ClientToServerBytes: 778 -ServerToClientBytes: 6064 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 55 37 3C 9D D2 E0 70 59 BA CC 3E A3 AE A6 9F 4E 0E C3 47 E7 49 7A 9F EA 43 E5 C7 43 8A -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 125.77.147.254:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 125.77.147.254 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 55 A1 31 85 4D 33 24 B5 AE 4E DB 83 5F FB AC BA 65 25 80 84 E1 33 0F C3 E9 F8 13 E3 EE -"Time": 2015/8/19 14:29:48 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 15 D3 E1 39 34 C0 09 38 27 61 F5 9C 4C B9 31 D7 DF 38 71 56 E7 F9 B9 81 E6 68 51 1C E3 A3 C0 F3 53 5E 85 9D 93 A0 6E 33 07 70 9B F3 51 C8 32 31 82 FA 2E 9F 07 D2 28 CD B4 F6 96 BC 97 44 AC FD 6E 2D A0 C6 72 15 42 87 2A D7 24 AD 8A 13 84 8F 41 74 D5 47 9E 8B 14 39 F5 E0 90 0D 1C EF 5B AF D1 EA 11 EA C5 F4 96 EC 42 39 52 C9 70 AD 57 F5 5F E4 96 14 78 B9 DB FA 7C 15 FB 9D DB 53 56 A0 80 3D 60 5F BD A0 27 A6 30 50 0C D1 20 E2 29 84 2B 5A 94 0A 6B 2F CD 45 6B 5C 13 6B 1A 15 63 AA - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:33.931 -Connection: close -EndTime: 09:07:34.201 -ClientToServerBytes: 778 -ServerToClientBytes: 6064 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 55 DC C7 F8 D7 07 7F 90 F0 E0 1D 98 2C F2 A2 9B 34 39 42 49 FC 84 C8 15 0D A9 72 3D 68 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 223.111.203.126:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 223.111.203.126 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 56 C1 A0 7B EE 5E AB 3B 95 63 E9 95 46 67 8E 61 E7 B0 F4 B7 32 82 7D 93 BB DD 94 BF 83 -"Time": 2016/2/29 18:50:04 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 15 D3 E1 39 34 C0 09 38 27 61 F5 9C 4C B9 31 D7 DF 38 71 56 E7 F9 B9 81 E6 68 51 1C E3 A3 C0 F3 53 5E 85 9D 93 A0 6E 33 07 70 9B F3 51 C8 32 31 82 FA 2E 9F 07 D2 28 CD B4 F6 96 BC 97 44 AC FD 6E 2D A0 C6 72 15 42 87 2A D7 24 AD 8A 13 84 8F 41 74 D5 47 9E 8B 14 39 F5 E0 90 0D 1C EF 5B AF D1 EA 11 EA C5 F4 96 EC 42 39 52 C9 70 AD 57 F5 5F E4 96 14 78 B9 DB FA 7C 15 FB 9D DB 53 56 A0 80 3D 60 5F BD A0 27 A6 30 50 0C D1 20 E2 29 84 2B 5A 94 0A 6B 2F CD 45 6B 5C 13 6B 1A 15 63 AA - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:34.239 -Connection: close -EndTime: 09:07:34.399 -ClientToServerBytes: 778 -ServerToClientBytes: 6064 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 56 0E E4 61 A8 95 A0 B5 73 2D 48 C6 C8 D6 50 18 F4 29 42 30 D3 3D 6F 2B E6 6D 55 19 96 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 111.62.89.38:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 111.62.89.38 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 56 8F F6 5E 0C 68 03 12 24 CA FE 12 2C 63 46 D3 FF E2 59 91 A9 DB 11 D5 1B 7F D4 44 BA -"Time": 2016/2/29 18:50:04 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:34.451 -Connection: close -EndTime: 09:07:34.629 -ClientToServerBytes: 778 -ServerToClientBytes: 6064 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 56 0D 3A 4B 16 C8 CA 07 C7 69 9F 0D C1 07 6F C7 8D 63 A0 06 05 06 C1 98 3F 66 E1 E0 D3 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 124.116.133.63:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 124.116.133.63 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 56 B1 30 D8 8B 0D A8 C6 70 45 14 5C 18 6D A0 B2 D4 CA A5 55 4D 16 8F 95 58 3B A8 DA 77 -"Time": 2016/2/29 18:50:04 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:34.678 -Connection: close -EndTime: 09:07:34.847 -ClientToServerBytes: 778 -ServerToClientBytes: 6048 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 56 D8 03 A1 BA 23 4C 65 80 28 EF E6 EB 73 DD BC 60 13 D1 EF FB 9B 02 F6 72 B5 B0 AC 40 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 221.194.180.26:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 221.194.180.26 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 56 9D B1 5E 4A 5D 47 E3 2F 02 0B 1B 8A 27 54 D9 C7 E0 9D 99 C0 63 31 2F 70 40 69 F6 79 -"Time": 2016/2/29 18:50:04 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 15 D3 E1 39 34 C0 09 38 27 61 F5 9C 4C B9 31 D7 DF 38 71 56 E7 F9 B9 81 E6 68 51 1C E3 A3 C0 F3 53 5E 85 9D 93 A0 6E 33 07 70 9B F3 51 C8 32 31 82 FA 2E 9F 07 D2 28 CD B4 F6 96 BC 97 44 AC FD 6E 2D A0 C6 72 15 42 87 2A D7 24 AD 8A 13 84 8F 41 74 D5 47 9E 8B 14 39 F5 E0 90 0D 1C EF 5B AF D1 EA 11 EA C5 F4 96 EC 42 39 52 C9 70 AD 57 F5 5F E4 96 14 78 B9 DB FA 7C 15 FB 9D DB 53 56 A0 80 3D 60 5F BD A0 27 A6 30 50 0C D1 20 E2 29 84 2B 5A 94 0A 6B 2F CD 45 6B 5C 13 6B 1A 15 63 AA - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:34.888 -Connection: close -EndTime: 09:07:35.017 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 56 2B 58 CF F0 8E B4 04 38 20 8C 9E EA 9F 29 3A 36 7F 93 0B 3F E0 1B 27 4B 8B B2 70 AA -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 218.60.185.215:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 218.60.185.215 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 57 11 16 1C 77 5C 3B 6A 33 54 0C B2 FC F5 D3 C7 86 02 1D E5 EE AE 01 F1 E1 4D 2F 4C 06 -"Time": 2016/9/10 23:10:20 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:35.083 -Connection: close -EndTime: 09:07:35.272 -ClientToServerBytes: 778 -ServerToClientBytes: 6138 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 28 06 5A 1D E4 B1 A1 09 52 7D DC 41 22 E9 7C B2 93 09 E8 47 87 D7 C3 84 0C 72 3F 61 B6 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 42.176.192.171:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 42.176.192.171 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 57 CC 7D B2 E6 83 E1 52 4C 0A 36 A6 2E B4 3C 60 91 86 00 D5 EA 68 52 98 15 27 C9 B3 05 -"Time": 2016/9/10 23:10:20 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:35.338 -Connection: close -EndTime: 09:07:35.763 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 57 B8 B8 13 71 E5 0A 68 5E 43 94 89 42 21 9E F8 49 38 27 80 63 E8 5F 42 C2 B9 B7 A6 D4 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 121.11.81.101:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 121.11.81.101 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 57 B7 7D CD 2B D7 C6 64 57 99 FB F9 ED BC 5E 5B 4D 7C 91 01 02 38 53 17 4C A7 7C D9 74 -"Time": 2016/9/10 23:10:20 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:35.780 -Connection: close -EndTime: 09:07:35.896 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 57 51 06 26 30 D4 C1 18 4B 5A 03 AC 56 89 37 2E 83 8A B3 D3 8F 73 E9 6C 8F BE 18 DF 2D -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 183.47.216.19:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.47.216.19 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 57 95 C0 0C 51 6A 39 EC 98 95 95 63 02 87 00 D7 73 4A C8 B2 AE 6C 77 48 C0 9D 5A 02 59 -"Time": 2016/9/10 23:10:20 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 15 D3 E1 39 34 C0 09 38 27 61 F5 9C 4C B9 31 D7 DF 38 71 56 E7 F9 B9 81 E6 68 51 1C E3 A3 C0 F3 53 5E 85 9D 93 A0 6E 33 07 70 9B F3 51 C8 32 31 82 FA 2E 9F 07 D2 28 CD B4 F6 96 BC 97 44 AC FD 6E 2D A0 C6 72 15 42 87 2A D7 24 AD 8A 13 84 8F 41 74 D5 47 9E 8B 14 39 F5 E0 90 0D 1C EF 5B AF D1 EA 11 EA C5 F4 96 EC 42 39 52 C9 70 AD 57 F5 5F E4 96 14 78 B9 DB FA 7C 15 FB 9D DB 53 56 A0 80 3D 60 5F BD A0 27 A6 30 50 0C D1 20 E2 29 84 2B 5A 94 0A 6B 2F CD 45 6B 5C 13 6B 1A 15 63 AA - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:35.907 -Connection: close -EndTime: 09:07:35.997 -ClientToServerBytes: 778 -ServerToClientBytes: 6064 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 57 41 28 84 C5 30 51 2E B7 88 5F 3D 48 C6 DB 61 67 44 BA 36 D0 32 C8 24 A0 81 F9 BC BA -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 218.14.200.57:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 218.14.200.57 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 58 07 96 27 CD AA 73 15 47 F8 89 A7 AF B5 BC 30 68 E8 41 A3 C9 97 07 25 C4 D5 63 EC BC -"Time": 2017/3/24 3:30:36 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:36.020 -Connection: close -EndTime: 09:07:36.147 -ClientToServerBytes: 778 -ServerToClientBytes: 6048 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 58 F3 A2 91 7C A5 E7 5E 6F 29 DD 59 83 04 53 B0 F4 F4 89 72 AC D6 BB B4 01 70 9D 42 EA -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 183.47.216.35:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.47.216.35 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 58 9C 87 AD BF 62 F9 D9 4E 3E 00 4D B5 4C C6 EF C3 65 A9 49 B6 AC 4A A1 81 AB CC A9 D2 -"Time": 2017/3/24 3:30:36 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:36.156 -Connection: close -EndTime: 09:07:36.245 -ClientToServerBytes: 778 -ServerToClientBytes: 6064 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 58 06 4F C2 0D 25 F4 3F EF D2 CA A3 3B CC 52 5D B5 F1 6F C3 7F 07 B2 E7 03 6B DE D6 83 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 14.17.80.77:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 14.17.80.77 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 58 B5 36 AE 1C 9C B0 97 CD 42 D4 88 CD 6C 96 35 5E F2 B5 B2 D9 4E BF D9 D0 CE 26 C0 46 -"Time": 2017/3/24 3:30:36 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:36.255 -Connection: close -EndTime: 09:07:36.344 -ClientToServerBytes: 778 -ServerToClientBytes: 6064 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 58 95 EE 7C 6A C7 1A E5 4D B6 4A BD 52 70 81 B3 84 11 7C A6 50 17 D0 4B D1 EC 63 3C 6E -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 115.223.7.173:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 115.223.7.173 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 58 67 CE F2 C4 46 0A 49 38 15 77 06 2C B6 3A 51 E6 C0 14 9D 16 13 82 B5 A6 FA E7 49 0F -"Time": 2017/3/24 3:30:36 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:36.383 -Connection: close -EndTime: 09:07:36.522 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 58 7B B9 65 45 10 D7 96 A1 07 F2 F1 00 D4 78 C0 5B 3D 76 A3 FE 14 D1 D0 0A F5 22 6C D4 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 183.47.216.18:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.47.216.18 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 58 E2 71 28 F7 E9 AA B0 CF CD 7C 02 B5 58 E2 F2 62 D6 D0 1E D3 44 43 25 C5 97 F9 59 35 -"Time": 2017/3/24 3:30:36 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:36.533 -Connection: close -EndTime: 09:07:36.634 -ClientToServerBytes: 778 -ServerToClientBytes: 6064 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 58 A1 B2 B4 6A 31 C7 5D B6 06 DA 5E 69 78 17 C9 E3 ED 27 81 4B 05 0A 5D 1F 78 A9 69 1D -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 183.47.216.36:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.47.216.36 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 58 C0 CE DF DA 98 20 B6 9E E7 66 8E 14 FC EA C1 6C FB C9 79 70 73 38 90 D6 9C 66 B5 8E -"Time": 2017/3/24 3:30:36 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:36.644 -Connection: close -EndTime: 09:07:36.959 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 58 CA 17 86 64 11 FF 55 86 E2 65 5C E4 20 8C BA 8D 3F F4 DD BD D8 AB DF 5F 6E 96 0B AA -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 122.224.186.252:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 122.224.186.252 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 59 2D AB A3 0F 1C 70 5C 6E F7 8F E5 66 A4 88 31 B1 EF CD 5C C1 FF 43 E5 90 55 30 FE 6E -"Time": 2017/10/4 7:50:52 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:37.006 -Connection: close -EndTime: 09:07:37.447 -ClientToServerBytes: 778 -ServerToClientBytes: 6064 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 58 1E 26 0E D3 21 52 B6 77 E1 30 0A 62 C2 B0 39 20 91 18 43 F0 59 87 CE 4D 7C 29 E6 07 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 120.226.48.144:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 120.226.48.144 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 59 D1 C2 AB BB 56 72 B7 7F E4 2F 7D DA 76 05 CC 1C 75 AC A6 37 6E FC BD 2B 43 6E 6B F7 -"Time": 2017/10/4 7:50:52 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:37.475 -Connection: close -EndTime: 09:07:37.723 -ClientToServerBytes: 778 -ServerToClientBytes: 6064 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 59 2A DB C7 60 AA 39 2E 43 67 5D 3B E2 6D 64 CA 0B C5 4D E6 4B 7E 85 90 11 62 DF 7B 11 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 59.83.228.160:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 59.83.228.160 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 59 40 9B B8 8B F7 72 68 4F 16 D3 DF F2 0C A7 1B 45 84 52 63 6B 4F 8F 23 9E DF 7F 30 23 -"Time": 2017/10/4 7:50:52 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:37.764 -Connection: close -EndTime: 09:07:37.920 -ClientToServerBytes: 778 -ServerToClientBytes: 6064 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 59 2D 88 E5 A4 FC 18 F6 71 D3 58 89 E4 27 A7 9E 3C 5A C4 42 45 1F D7 BC E7 38 4E FD 81 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 114.236.88.254:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 114.236.88.254 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 59 F5 CA E3 3A EE 8A DF 98 18 6A F3 2F 1E D5 C7 99 02 E2 11 74 E8 C7 29 2F 6D 9F 98 14 -"Time": 2017/10/4 7:50:52 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 15 D3 E1 39 34 C0 09 38 27 61 F5 9C 4C B9 31 D7 DF 38 71 56 E7 F9 B9 81 E6 68 51 1C E3 A3 C0 F3 53 5E 85 9D 93 A0 6E 33 07 70 9B F3 51 C8 32 31 82 FA 2E 9F 07 D2 28 CD B4 F6 96 BC 97 44 AC FD 6E 2D A0 C6 72 15 42 87 2A D7 24 AD 8A 13 84 8F 41 74 D5 47 9E 8B 14 39 F5 E0 90 0D 1C EF 5B AF D1 EA 11 EA C5 F4 96 EC 42 39 52 C9 70 AD 57 F5 5F E4 96 14 78 B9 DB FA 7C 15 FB 9D DB 53 56 A0 80 3D 60 5F BD A0 27 A6 30 50 0C D1 20 E2 29 84 2B 5A 94 0A 6B 2F CD 45 6B 5C 13 6B 1A 15 63 AA - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:37.955 -Connection: close -EndTime: 09:07:38.092 -ClientToServerBytes: 778 -ServerToClientBytes: 6064 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 59 67 DF 5B E0 FF 8B 4D 97 C5 7B 4D 23 98 01 CB 54 F9 F3 A4 E9 84 3D 46 66 51 85 AD B6 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 150.138.214.122:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 150.138.214.122 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 5A AE FE 2C E5 0B 7A 0C 53 FA 79 CB 29 5A C3 59 F9 AF B4 C3 40 CB C4 27 E0 20 64 EA DE -"Time": 2018/4/16 12:11:08 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:38.138 -Connection: close -EndTime: 09:07:38.302 -ClientToServerBytes: 778 -ServerToClientBytes: 6048 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 5A 8B AB AF 84 14 52 29 66 58 08 9A 56 FE 24 57 BC 81 F2 07 E7 9E 92 D0 DC B6 5C 7C F9 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 117.21.217.98:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 117.21.217.98 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 5A A0 CB B9 30 07 F4 94 11 FD 5A 80 7D 31 53 D9 9B AE 1A 86 57 5B 39 9C 8A 6F 9F BC AD -"Time": 2018/4/16 12:11:08 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:38.366 -Connection: close -EndTime: 09:07:38.583 -ClientToServerBytes: 778 -ServerToClientBytes: 6064 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 5A D9 80 2D CF 0A 3F C8 8F 69 65 A8 E7 A2 36 9C D5 DF 7E 8A 2B 9C F0 D8 38 79 83 35 B8 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 60.174.241.120:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 60.174.241.120 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 5A E2 98 0E 73 27 5B F1 5B 5E 78 49 81 E1 06 0E 4E C9 5C F7 8C 7F AD 97 AB 79 FE 13 7A -"Time": 2018/4/16 12:11:08 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:38.629 -Connection: close -EndTime: 09:07:38.906 -ClientToServerBytes: 778 -ServerToClientBytes: 6048 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 5A D4 06 6D 46 37 4B B5 93 BE 9D 2F 47 30 FF 23 70 18 64 A5 6B D0 84 80 8A EF C7 6F 8F -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 124.236.28.252:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 124.236.28.252 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 5A D3 D4 8C D4 FF E9 75 24 CA D8 5F 3B 11 9F 64 94 54 45 22 91 D9 0B 92 16 BC ED DB 1E -"Time": 2018/4/16 12:11:08 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 15 D3 E1 39 34 C0 09 38 27 61 F5 9C 4C B9 31 D7 DF 38 71 56 E7 F9 B9 81 E6 68 51 1C E3 A3 C0 F3 53 5E 85 9D 93 A0 6E 33 07 70 9B F3 51 C8 32 31 82 FA 2E 9F 07 D2 28 CD B4 F6 96 BC 97 44 AC FD 6E 2D A0 C6 72 15 42 87 2A D7 24 AD 8A 13 84 8F 41 74 D5 47 9E 8B 14 39 F5 E0 90 0D 1C EF 5B AF D1 EA 11 EA C5 F4 96 EC 42 39 52 C9 70 AD 57 F5 5F E4 96 14 78 B9 DB FA 7C 15 FB 9D DB 53 56 A0 80 3D 60 5F BD A0 27 A6 30 50 0C D1 20 E2 29 84 2B 5A 94 0A 6B 2F CD 45 6B 5C 13 6B 1A 15 63 AA - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:38.944 -Connection: close -EndTime: 09:07:39.061 -ClientToServerBytes: 778 -ServerToClientBytes: 6064 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 5A D4 BB 7B 6E 4F 15 FA 41 64 4D 77 20 2D 21 02 67 49 B6 FE EB EC 50 7A D5 36 F5 44 76 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 27.148.151.251:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 27.148.151.251 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 5B EB C7 BD AD D4 AE 39 32 04 11 FC 2D 92 79 1E B2 18 5A 62 B4 F5 B0 2D A6 06 D8 B8 2B -"Time": 2018/10/27 16:31:24 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:39.107 -Connection: close -EndTime: 09:07:39.431 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 5B 2A 51 F4 B0 40 74 FC 70 90 99 03 53 14 97 F5 21 4C B8 58 09 68 79 B8 12 78 21 7B 2E -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 123.183.164.249:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 123.183.164.249 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 5B 8B B4 0E 24 AC A8 5C 39 AC 5F BE 9E C7 55 80 11 98 47 6C 68 CA 35 C8 69 2B EC B1 EB -"Time": 2018/10/27 16:31:24 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:39.486 -Connection: close -EndTime: 09:07:39.766 -ClientToServerBytes: 778 -ServerToClientBytes: 6064 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 5B 43 F7 AF 5B 5D D9 04 A4 FC F4 29 43 1B 4F BA E2 5C 05 08 36 37 5E 60 31 3A 1E DA 62 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 61.136.167.254:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 61.136.167.254 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 5B 74 36 2D E9 16 2B 77 DF CE 92 3D DA 6A C0 79 64 B0 FF EB F6 C4 10 AC C7 CD 31 90 04 -"Time": 2018/10/27 16:31:24 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 15 D3 E1 39 34 C0 09 38 27 61 F5 9C 4C B9 31 D7 DF 38 71 56 E7 F9 B9 81 E6 68 51 1C E3 A3 C0 F3 53 5E 85 9D 93 A0 6E 33 07 70 9B F3 51 C8 32 31 82 FA 2E 9F 07 D2 28 CD B4 F6 96 BC 97 44 AC FD 6E 2D A0 C6 72 15 42 87 2A D7 24 AD 8A 13 84 8F 41 74 D5 47 9E 8B 14 39 F5 E0 90 0D 1C EF 5B AF D1 EA 11 EA C5 F4 96 EC 42 39 52 C9 70 AD 57 F5 5F E4 96 14 78 B9 DB FA 7C 15 FB 9D DB 53 56 A0 80 3D 60 5F BD A0 27 A6 30 50 0C D1 20 E2 29 84 2B 5A 94 0A 6B 2F CD 45 6B 5C 13 6B 1A 15 63 AA - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:39.801 -Connection: close -EndTime: 09:07:40.029 -ClientToServerBytes: 778 -ServerToClientBytes: 6106 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 5B E4 B0 EA 29 1F 0B C3 2D CA 37 D2 48 14 36 18 9A 57 0B 98 15 0A E3 23 D6 14 9D 99 88 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 222.221.102.254:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 222.221.102.254 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 5C 85 02 A0 0F 77 B9 9E 5B 24 F1 E3 CF BB 00 76 93 1A 37 BE 17 90 16 25 D2 30 05 01 FC -"Time": 2019/5/9 20:51:40 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:40.078 -Connection: close -EndTime: 09:07:40.271 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 5C F0 96 1C DE B0 00 B4 9E F3 B4 AE F6 EE 2F D6 74 ED 85 A0 74 60 8F 86 48 8A 6A BB 8B -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 61.188.191.254:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 61.188.191.254 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 5C AB 10 C2 94 C3 67 78 AF B0 58 DD 6E CE B7 47 93 6F 1B 81 C1 07 20 57 E5 2C 7A 8F 48 -"Time": 2019/5/9 20:51:40 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:40.319 -Connection: close -EndTime: 09:07:40.520 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 5C 24 E6 A5 22 9D 22 5E 7B 11 A6 6A 39 1E 7B 93 4D FD 53 80 35 9D BD 9D 7A 6C 76 3A EC -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 61.147.228.248:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 61.147.228.248 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 5C E7 93 3A B3 31 F2 C2 A3 AD BD 7F E7 1D 23 B1 01 85 11 2C 81 AA DE C2 9F D3 FE 13 26 -"Time": 2019/5/9 20:51:40 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:40.747 -Connection: close -EndTime: 09:07:40.881 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 5C 2B F1 78 23 77 45 48 19 BA C0 E8 92 DA 6E 52 79 F6 EC E7 A5 47 C7 F0 A5 F1 FB C3 35 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 115.223.7.248:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 115.223.7.248 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 5C 24 C6 D4 79 B8 81 65 15 7B 5C 0D 67 D2 C4 AB 0D E8 44 5C F2 08 C9 6A F7 E7 2C 52 A5 -"Time": 2019/5/9 20:51:40 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:40.927 -Connection: close -EndTime: 09:07:41.074 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 5C 79 26 24 95 29 F7 11 5C 45 A7 AF 69 AF 3B 7F F5 E3 F2 D5 20 27 AD F6 36 24 98 CD F4 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 58.223.164.247:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 58.223.164.247 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 5D D5 45 80 87 32 F2 D2 D9 ED F2 58 62 8E FD 42 2F 05 E4 5B 6B BE AC E8 23 0D 5B 9A BF -"Time": 2019/11/20 1:11:56 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:41.119 -Connection: close -EndTime: 09:07:41.581 -ClientToServerBytes: 778 -ServerToClientBytes: 6138 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 5D 12 8F 52 13 38 5E A2 3D 81 EC 93 78 E8 22 8A 2F 53 EC 0A D7 B6 EC F3 78 B3 E9 AD A6 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 58.221.28.245:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 58.221.28.245 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 5D 56 BB AB E7 BA C9 88 57 1B DE 6A F2 C2 2D CF 41 75 5B 00 AC 8C 8A 2D 7D 36 E9 5C 13 -"Time": 2019/11/20 1:11:56 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:41.624 -Connection: close -EndTime: 09:07:41.964 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 5D 99 7E D0 D8 23 5A B8 2D 71 AB EA 5D 81 F5 83 13 09 7E 4D 20 8F 69 69 89 79 11 C0 B9 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 103.254.188.39:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 103.254.188.39 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 5E 22 98 21 46 D6 6A E6 5A C6 C5 D5 D3 5C 9E 70 C6 CE 25 0F ED 17 26 AF 1C C2 08 7A 0C -"Time": 2020/6/1 5:32:12 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:42.006 -Connection: close -EndTime: 09:07:42.138 -ClientToServerBytes: 853 -ServerToClientBytes: 5983 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 5D 7E 9D 85 EE 03 C3 24 EF 3A 49 8B 14 BF B5 F7 70 4C 40 21 87 0E 10 A5 D4 71 7F 66 EC -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 103.254.188.39:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 103.254.188.39 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 5E 9E 2E A2 B7 7E 40 60 2A 91 C2 09 7C 1D 5A B2 19 98 06 89 CD 45 D7 C3 5D CA BD D4 1D -"Time": 2020/6/1 5:32:12 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:42.179 -Connection: close -EndTime: 09:07:42.261 -ClientToServerBytes: 778 -ServerToClientBytes: 150 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 5E 75 2A 8B 4E 6A 1F 0F C5 73 CC 9C A1 38 AB B0 56 31 C9 CA 87 A8 85 0D BE 30 BF 52 43 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 219.138.186.254:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 219.138.186.254 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 5E 7F 24 59 B3 95 FC 5E 37 5B 31 BC 42 2F 34 9E 8E 15 9C 3D 0B C2 64 EF 28 42 59 68 66 -"Time": 2020/6/1 5:32:12 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:42.288 -Connection: close -EndTime: 09:07:42.501 -ClientToServerBytes: 853 -ServerToClientBytes: 9520 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 5E 51 81 9A C8 13 75 C0 9E 95 91 9F 8C EB 53 B9 AF 42 BB 88 0E B9 C3 FC 8A 6A BF 95 63 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 219.138.27.249:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 219.138.27.249 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 5E 88 0D 76 C5 95 5A F0 43 15 88 31 EC B0 66 87 9F 99 47 BF 38 F8 47 D9 B4 1D C9 E4 25 -"Time": 2020/6/1 5:32:12 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:42.534 -Connection: close -EndTime: 09:07:42.641 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 5E 68 D5 41 21 BE 94 E2 32 BD 96 60 3B 3F 2A 2F 03 9D E4 E6 05 E1 D9 37 9D 36 FB 77 30 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 182.140.218.254:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 182.140.218.254 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 5E 48 55 54 D7 6B 14 F9 51 ED 6D D8 46 4A FE FE A2 C1 89 06 9F 37 3D 88 1F 86 DB A7 DA -"Time": 2020/6/1 5:32:12 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:42.681 -Connection: close -EndTime: 09:07:42.845 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 5E 5C 80 C1 FE 19 FB E8 BB 94 9E 43 2E A6 51 DC C5 D4 F5 C9 12 8D B2 A3 CD 24 F4 52 45 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 118.118.216.252:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 118.118.216.252 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 5E 32 C4 C5 61 97 81 84 2D E9 39 FE 39 F3 54 A3 15 AF 1E 29 FF 8F 9D A0 FB 54 23 8E 03 -"Time": 2020/6/1 5:32:12 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:42.891 -Connection: close -EndTime: 09:07:43.272 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 5E 99 5D 48 6B 6E AC 37 C5 F5 C1 5B C5 00 A5 DD 23 5B 92 A0 C6 72 6B 0A 3A 02 46 E7 D5 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 59.34.229.252:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 59.34.229.252 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 5F 1B 9B 21 EE 0E 31 CE 4E 1F 78 38 CC CA DF 63 97 82 CE 6F 26 B9 42 2B 1E E1 0B 32 C2 -"Time": 2020/12/12 9:52:28 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:43.293 -Connection: close -EndTime: 09:07:43.403 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 5F 4B EE 88 2D A3 45 07 57 85 D6 75 27 2F D4 7C 61 96 78 F2 C5 4B C8 A7 8E 08 3C C2 8D -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 124.236.97.49:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 124.236.97.49 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 5F C6 B1 93 8B 1A E9 1E DC A3 AC E4 09 85 3A E4 2B 11 64 E4 B6 71 44 4F 6B A9 C9 53 A3 -"Time": 2020/12/12 9:52:28 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:43.455 -Connection: close -EndTime: 09:07:43.623 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 5F 4D 84 42 F1 63 EA 04 F2 D0 11 37 20 2C 79 F8 B6 5F 93 C4 CF 35 16 CE D4 EE 22 8E F7 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 117.174.21.238:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 117.174.21.238 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 5F 66 71 B0 EE 1E 22 FE 50 C5 00 97 06 D2 7F 43 27 07 D8 CF 71 D3 F9 6A 7C 07 66 2E 8F -"Time": 2020/12/12 9:52:28 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:43.668 -Connection: close -EndTime: 09:07:43.825 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 5F 4F 30 B1 39 0B 7A 50 EE AA 23 32 CF FD BA CE 71 18 E6 41 35 0E 39 17 BC 83 CC AC D8 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 111.161.22.62:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 111.161.22.62 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 5F 1F D5 F3 50 C7 F2 7F C5 13 7F 33 FE 4A 1C E6 25 93 30 21 86 44 23 61 70 A5 70 3F 30 -"Time": 2020/12/12 9:52:28 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:43.866 -Connection: close -EndTime: 09:07:43.973 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 5F 78 F3 00 11 33 2F 20 75 07 59 D5 9A 5F 00 B9 0D EC D0 CC 2D A6 D7 54 D0 A5 48 43 05 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 112.16.227.125:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.16.227.125 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 60 62 56 22 9E 7B 76 2C 99 22 8B 84 2A 1C 69 25 57 36 03 56 D5 54 CE 14 BA 47 47 66 BE -"Time": 2021/6/24 14:12:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:44.014 -Connection: close -EndTime: 09:07:44.150 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 60 A5 D0 21 24 3A E4 23 57 76 7A 7E AC A5 BD 65 07 37 9C AB DB 63 33 85 FB 51 00 BE 6D -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 150.138.169.238:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 150.138.169.238 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 60 F7 15 BA 5F CC 6E 4D 65 BC E7 47 83 F0 CD F4 B4 99 30 E2 F0 2D 6E 45 95 63 4B BF EC -"Time": 2021/6/24 14:12:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:44.198 -Connection: close -EndTime: 09:07:44.386 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 60 5F 09 8E 24 7D 24 65 90 99 47 1E 98 4C 42 08 4E 07 82 E1 80 EC B7 73 A4 B2 EA F4 BC -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 111.62.92.6:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 111.62.92.6 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 60 DD 23 A3 11 CB 12 22 65 69 B2 96 6C 21 C9 41 4D 0A 51 B5 E5 1B 71 0E 94 33 CB 36 B9 -"Time": 2021/6/24 14:12:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:44.449 -Connection: close -EndTime: 09:07:44.604 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 60 51 F3 6C EE 33 8E A4 60 69 73 C5 FB 00 34 13 2F 7E C6 2A CC BD 2C 91 8F E7 F7 3A 97 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 113.207.81.126:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 113.207.81.126 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 60 8F 98 81 14 44 21 A1 46 5C 0E BA B8 BD C7 4B 52 A0 E1 57 D0 69 09 7C 58 CB B2 6D DD -"Time": 2021/6/24 14:12:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:44.644 -Connection: close -EndTime: 09:07:44.818 -ClientToServerBytes: 778 -ServerToClientBytes: 6138 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 60 8C BF 4A D2 F1 3B 4E A1 1E F4 AB CE 38 C2 DE E0 EB 0B CE 4A B5 E9 A5 7F 0E F6 DB DA -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 223.113.14.230:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 223.113.14.230 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 60 EF 55 3E 2F 3C FF 82 A6 4B 65 08 FB CC 7C 54 AE B9 47 11 3C DF CA 26 55 36 90 64 96 -"Time": 2021/6/24 14:12:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 3E E8 CD D7 90 CB AD F9 A7 4C 52 32 50 8E 14 14 D4 A3 12 39 AC 8C 73 0E 78 49 75 3D D2 4D 44 66 EE 6B B6 47 95 BB DA 4C BB 2F 01 B8 EB D7 BD 06 62 B1 EB 79 79 14 90 92 0C F4 FE 69 D3 89 90 CC 36 B3 9F EB EC 41 DA 5D 76 E5 8B A1 96 75 B0 58 11 68 DF 94 26 95 8A C6 06 08 A2 26 77 D1 1B 33 13 2F F6 C0 8A 84 D3 77 10 91 3C E0 18 FD B7 D7 74 5C DC 25 79 6E F4 F5 0B 28 13 06 33 72 B6 7D EE 06 B8 11 47 2E 7A B9 F0 74 AE 45 4A A9 56 55 FE 36 10 E3 B8 A9 17 F8 6A 2F AB CB 26 F6 CC AB - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:44.864 -Connection: close -EndTime: 09:07:45.008 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 60 71 76 22 92 2A 81 FD 9E 4B 18 2B A6 B0 25 A6 0D A0 8A 15 2B F9 1E F0 64 FA F0 F3 D5 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 223.111.196.125:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 223.111.196.125 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 61 3B 30 56 5D BF 21 6B 24 1A 78 48 D8 BD 91 56 57 D5 D2 74 84 2D 7F 91 64 C3 07 76 38 -"Time": 2022/1/4 18:33:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 3E E8 CD D7 90 CB AD F9 A7 4C 52 32 50 8E 14 14 D4 A3 12 39 AC 8C 73 0E 78 49 75 3D D2 4D 44 66 EE 6B B6 47 95 BB DA 4C BB 2F 01 B8 EB D7 BD 06 62 B1 EB 79 79 14 90 92 0C F4 FE 69 D3 89 90 CC 36 B3 9F EB EC 41 DA 5D 76 E5 8B A1 96 75 B0 58 11 68 DF 94 26 95 8A C6 06 08 A2 26 77 D1 1B 33 13 2F F6 C0 8A 84 D3 77 10 91 3C E0 18 FD B7 D7 74 5C DC 25 79 6E F4 F5 0B 28 13 06 33 72 B6 7D EE 06 B8 11 47 2E 7A B9 F0 74 AE 45 4A A9 56 55 FE 36 10 E3 B8 A9 17 F8 6A 2F AB CB 26 F6 CC AB - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:45.055 -Connection: close -EndTime: 09:07:45.211 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 61 19 18 4C B1 E4 0B 19 B7 65 F3 BE 0B 01 67 E6 CC 23 5F 22 FF 49 92 08 E8 CF 5E E6 D2 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 183.201.225.249:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.201.225.249 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 61 06 44 A7 90 E2 3E C7 26 6C 4E 1D 32 59 64 68 3A AF A5 CC F8 AA C5 6A 37 DA 80 A5 F4 -"Time": 2022/1/4 18:33:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:45.281 -Connection: close -EndTime: 09:07:45.451 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 61 CC 1B CF 90 6E 9E 2A 25 25 EB BE C0 8A 1A B2 28 5D 31 40 5A 89 48 F4 D4 D2 54 B9 51 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 222.141.84.253:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 222.141.84.253 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 61 F5 39 FC 78 87 1D EE F0 5F E8 C6 88 C2 3C 8F 7B 65 22 6F 1D A8 A5 DB BD B0 24 C6 10 -"Time": 2022/1/4 18:33:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:45.492 -Connection: close -EndTime: 09:07:45.627 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 61 BD 66 41 3F CC F1 F1 1F 2D 39 45 F0 2F 7C 99 B5 95 B1 85 7D 42 54 1A CA 67 8A A3 BC -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 118.180.15.252:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 118.180.15.252 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 61 89 EE E9 9B 21 A7 FE F0 B0 D9 54 61 E3 BA 3E 77 1F DB 2B 86 36 72 6B 15 0F C5 56 5F -"Time": 2022/1/4 18:33:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:45.676 -Connection: close -EndTime: 09:07:45.841 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 61 A0 0E 70 0E DE 97 2E 06 97 16 DF AE 85 EE D1 74 6C 4C 36 33 A7 15 CE C0 01 CB B6 56 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 27.195.145.124:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 27.195.145.124 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 61 19 5A 6A 2F 31 F9 09 BE D5 72 D1 1B 39 15 11 55 54 C4 72 BA 6D 8B E4 F9 6D D2 BF DE -"Time": 2022/1/4 18:33:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:45.889 -Connection: close -EndTime: 09:07:46.058 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 61 67 43 A5 12 08 99 29 09 5A 13 B6 13 4D F6 7F C5 07 EE 77 75 8A D9 05 F0 4E BE 73 A2 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 218.58.206.78:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 218.58.206.78 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 62 97 6F F5 20 E4 46 DA EC 98 EF 44 C7 9D 9A C7 54 20 90 E1 91 60 AD 0A EA CD E1 72 1D -"Time": 2022/7/17 22:53:16 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:46.113 -Connection: close -EndTime: 09:07:46.327 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 62 77 DC 9F 5A 6E BA 3C 18 93 F3 CD A8 35 DD 38 5E 61 36 FA 94 D0 96 34 F1 13 A1 00 0F -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 112.240.60.88:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.240.60.88 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 62 95 7C 4B 0A 6B E7 E9 B8 CA 7C DA DA 60 44 32 35 C6 0F 33 13 6B FD 32 B5 BC 37 EB 2D -"Time": 2022/7/17 22:53:16 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 3E E8 CD D7 90 CB AD F9 A7 4C 52 32 50 8E 14 14 D4 A3 12 39 AC 8C 73 0E 78 49 75 3D D2 4D 44 66 EE 6B B6 47 95 BB DA 4C BB 2F 01 B8 EB D7 BD 06 62 B1 EB 79 79 14 90 92 0C F4 FE 69 D3 89 90 CC 36 B3 9F EB EC 41 DA 5D 76 E5 8B A1 96 75 B0 58 11 68 DF 94 26 95 8A C6 06 08 A2 26 77 D1 1B 33 13 2F F6 C0 8A 84 D3 77 10 91 3C E0 18 FD B7 D7 74 5C DC 25 79 6E F4 F5 0B 28 13 06 33 72 B6 7D EE 06 B8 11 47 2E 7A B9 F0 74 AE 45 4A A9 56 55 FE 36 10 E3 B8 A9 17 F8 6A 2F AB CB 26 F6 CC AB - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:46.369 -Connection: close -EndTime: 09:07:46.491 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 62 6F ED 81 F9 E9 E0 95 C5 87 09 10 B0 06 F4 0A C7 D5 3C 50 0F 04 65 A1 71 5A 3A 41 66 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 117.27.241.254:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 117.27.241.254 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 62 4E A4 60 97 F5 24 6E BD F0 4F 56 B6 CC 31 87 6A D9 85 6C 2A 4E 0D 20 13 6E 27 8D 0C -"Time": 2022/7/17 22:53:16 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:46.531 -Connection: close -EndTime: 09:07:46.830 -ClientToServerBytes: 778 -ServerToClientBytes: 6138 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 62 C3 F2 DC B2 D5 47 0E F1 7C 08 2A 78 10 0C 8F A6 82 79 BB FF E2 56 74 4C 28 82 D2 99 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 114.112.160.30:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 114.112.160.30 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 62 2B 77 CD E9 9F 05 00 27 13 63 69 1A 34 98 20 6D E0 9B 5C 7D 91 75 2D 2A 9D AB 21 8F -"Time": 2022/7/17 22:53:16 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:46.871 -Connection: close -EndTime: 09:07:47.704 -ClientToServerBytes: 778 -ServerToClientBytes: 113 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 63 71 48 71 17 A8 CB 8D 43 6D 81 29 00 07 9D 17 CC 0C 28 15 39 DF E2 15 82 D0 5F B4 8E -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 183.62.114.154:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.62.114.154 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 63 F1 B8 BE 6E 38 33 8D 37 22 D0 47 12 F3 71 2A B7 F0 C0 4C 00 2E E3 EE 48 A9 D5 F5 E6 -"Time": 2023/1/28 3:13:32 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:47.715 -Connection: close -EndTime: 09:07:48.199 -ClientToServerBytes: 853 -ServerToClientBytes: 9525 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 63 38 B9 24 B7 BB EE 1B E4 9C 25 7F 57 36 32 DD 64 A6 6A 9F 2B A6 C0 37 31 CE 87 FD F1 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 183.56.172.30:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.56.172.30 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 64 0F 29 0A 6F 63 3E 77 6D 3F 74 56 9E 30 4D D3 39 6B FE E3 DB 6B 6B DD BC BD A2 3D 1D -"Time": 2023/8/10 7:33:48 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:48.212 -Connection: close -EndTime: 09:07:48.514 -ClientToServerBytes: 853 -ServerToClientBytes: 9430 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 64 AB A0 21 F9 8B 1A E0 DA 7E 63 1F C4 A7 7C 3A 85 49 FE 20 63 F9 F4 32 7F 02 51 06 18 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 157.255.76.48:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 157.255.76.48 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 64 1F 68 2C 81 DE C9 B7 8B 8E 77 36 EC 65 C5 9A C9 8C 32 4A C6 BE 56 BF 35 34 D5 94 8C -"Time": 2023/8/10 7:33:48 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:48.525 -Connection: close -EndTime: 09:07:48.626 -ClientToServerBytes: 853 -ServerToClientBytes: 9409 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 64 78 8D 53 8D 92 FF 6C C9 98 85 0F 43 FA F5 49 F9 B4 8C 53 59 D0 B2 7C F8 58 7B 18 23 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 183.240.52.108:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.240.52.108 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 64 F1 65 AC 56 60 4A 7F DD 43 AF 2F 65 CF E5 43 45 F2 09 69 7D 2E 58 B0 62 B7 BA 62 73 -"Time": 2023/8/10 7:33:48 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:07:48.641 -Connection: close -EndTime: 09:07:48.747 -ClientToServerBytes: 853 -ServerToClientBytes: 9520 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 64 CC 3F 24 6C 09 B6 64 B0 72 9D A1 A2 35 C0 3D BA 78 08 95 1C 56 00 A7 5D 12 75 CE A8 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 183.222.97.135:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.222.97.135 - - -HTTP/1.1 502 Fiddler - Connection Failed -Date: Wed, 26 Dec 2018 01:08:09 GMT -Content-Type: text/html; charset=UTF-8 -Connection: close -Cache-Control: no-cache, must-revalidate -Timestamp: 09:08:09.752 - -[Fiddler] The connection to '183.222.97.135' failed.
    Error: TimedOut (0x274c).
    System.Net.Sockets.SocketException 由于连接方在一段时间后没有正确答复或连接的主机没有反应，连接尝试失败。 183.222.97.135:443 - ------------------------------------------------------------------- - -CONNECT 36.25.241.77:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 36.25.241.77 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 79 31 18 0F A8 CD 4C A7 50 08 DC BD 35 4E 5D 9E B5 84 67 BC 29 FF 8A 84 3E 83 C5 A6 27 -"Time": 2034/10/9 2:39:24 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:09.790 -Connection: close -EndTime: 09:08:10.626 -ClientToServerBytes: 293 -ServerToClientBytes: 0 - - - ------------------------------------------------------------------- - -CONNECT 58.220.71.62:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 58.220.71.62 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 7A 76 78 CE 38 11 A1 65 32 76 3C 77 DE 11 5C AD A3 D8 EE 66 75 61 E7 07 58 32 E6 63 15 -"Time": 2035/4/21 6:59:40 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket empty - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:10.660 -Connection: close -EndTime: 09:08:10.825 -ClientToServerBytes: 677 -ServerToClientBytes: 9467 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 7A 80 4A F5 EA BE 8F A1 3A 7B 49 AA 34 84 90 B0 B0 69 EF 94 A5 F7 D7 08 BC 73 A0 BA 6E -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 103.254.188.40:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 103.254.188.40 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 7A D4 A9 01 2E 0B 42 26 1B 95 7B 6C C6 E1 59 67 FE 50 24 1F 5F B2 43 EC 0C 0A 7D BE F0 -"Time": 2035/4/21 6:59:40 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:10.865 -Connection: close -EndTime: 09:08:10.990 -ClientToServerBytes: 853 -ServerToClientBytes: 5983 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 7A 21 8B B2 12 BA 07 5E 8D 1C 25 E1 D4 09 2E BE E6 FD 42 FB BA 74 46 92 3C 66 9A 6E 69 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 103.254.188.40:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 103.254.188.40 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 7B 62 E7 ED C8 2E 15 9C 66 97 CD E7 2F 13 C9 14 20 50 39 DC 2C 79 8C E5 57 9A F6 F0 32 -"Time": 2035/11/1 11:19:56 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:11.033 -Connection: close -EndTime: 09:08:11.124 -ClientToServerBytes: 778 -ServerToClientBytes: 150 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 7B 30 A3 5F DE 6D 8C 15 C3 15 55 9B 26 39 2A DE C3 31 BA 10 58 19 20 A4 3F D0 8C BB 10 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 114.112.160.29:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 114.112.160.29 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 7B 18 ED BD 72 70 6D D5 1D 6D 32 C0 42 E0 50 22 C2 B3 56 16 54 30 18 EC C0 F5 D8 06 8A -"Time": 2035/11/1 11:19:56 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:11.163 -Connection: close -EndTime: 09:08:11.316 -ClientToServerBytes: 853 -ServerToClientBytes: 9520 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 7B 34 11 EC E9 E1 94 8E 07 21 8E 6B 38 66 93 88 C4 1E 69 7C E9 B9 41 B9 B7 14 2B FF 7A -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 183.56.172.31:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.56.172.31 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 7B 0C DE C9 A3 B8 59 36 72 30 38 8C CE B7 A8 4B F8 6A 1B 17 11 29 84 56 51 B7 FB 58 51 -"Time": 2035/11/1 11:19:56 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:11.326 -Connection: close -EndTime: 09:08:11.533 -ClientToServerBytes: 853 -ServerToClientBytes: 9446 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 7B CD 85 10 58 64 1D 76 3F 35 0E 2B 7D 87 F3 10 64 EE 42 37 D7 14 8C 30 79 DF 38 92 00 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 36.25.241.76:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 36.25.241.76 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 7B AB 32 25 2A D3 56 25 D9 80 0D 9C B8 90 DF D4 75 1E 42 F4 30 DD 8A FA 9B CB BA 01 DB -"Time": 2035/11/1 11:19:56 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:11.565 -Connection: close -EndTime: 09:08:12.406 -ClientToServerBytes: 293 -ServerToClientBytes: 0 - - - ------------------------------------------------------------------- - -CONNECT 122.70.142.147:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 122.70.142.147 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 7C 97 E7 E2 45 49 88 56 A2 95 A4 D7 C1 0D 09 ED FC BE 47 8F EA D7 52 6B FD 77 10 93 6A -"Time": 2036/5/13 15:40:12 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket empty - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:12.471 -Connection: close -EndTime: 09:08:13.279 -ClientToServerBytes: 677 -ServerToClientBytes: 3532 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 7C 40 75 7B F8 7B 56 53 CF 83 7F 29 3A 66 BB AC 0E 32 EF 9E B7 C7 C1 48 A4 60 AD 34 D3 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 122.70.142.148:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 122.70.142.148 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 7D 77 A4 C0 A9 ED C2 38 9E 66 11 3D 69 99 3E 9D 6D AB 55 6C 91 2F 35 22 33 52 3A D7 8C -"Time": 2036/11/23 20:00:28 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:13.346 -Connection: close -EndTime: 09:08:14.686 -ClientToServerBytes: 778 -ServerToClientBytes: 4683 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 7D 75 83 60 3E 2C CE 6F 19 0D 7D 02 78 82 EA CA 3F 9C DA 3D 8A 97 BB 0C D0 86 29 7C 2B -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 116.77.75.185:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 116.77.75.185 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 7E 0C C6 B7 08 35 1A 6B E8 7E A7 D1 57 6F 16 10 42 3D 11 31 47 6E 73 68 71 C7 E9 C5 C8 -"Time": 2037/6/6 0:20:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:14.694 -Connection: close -EndTime: 09:08:15.559 -ClientToServerBytes: 293 -ServerToClientBytes: 0 - - - ------------------------------------------------------------------- - -CONNECT 114.112.160.31:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 114.112.160.31 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 7F 62 D6 9C E1 A9 D8 D1 44 20 CC 7D 14 6E 8D 56 38 8D DA B5 D6 28 47 27 DD DB 5B 91 4A -"Time": 2037/12/17 4:41:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket empty - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:15.596 -Connection: close -EndTime: 09:08:15.743 -ClientToServerBytes: 677 -ServerToClientBytes: 9520 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 7F C7 51 2B FC 6B 9C D8 3C 0C 61 11 B3 DC 7F 02 E3 A1 A7 85 68 BE 52 3D BB 81 09 3F 51 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 183.240.52.131:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.240.52.131 - - -HTTP/1.1 502 Fiddler - Connection Failed -Date: Wed, 26 Dec 2018 01:08:36 GMT -Content-Type: text/html; charset=UTF-8 -Connection: close -Cache-Control: no-cache, must-revalidate -Timestamp: 09:08:36.748 - -[Fiddler] The connection to '183.240.52.131' failed.
    Error: TimedOut (0x274c).
    System.Net.Sockets.SocketException 由于连接方在一段时间后没有正确答复或连接的主机没有反应，连接尝试失败。 183.240.52.131:443 - ------------------------------------------------------------------- - -POST http://www.12306bypass.com/General.ashx HTTP/1.1 -Accept: */* -Accept-Language: zh-CN,zh;q=0.9 -Accept-Encoding: gzip, deflate, br -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Content-Type: application/x-www-form-urlencoded -Host: www.12306bypass.com -Content-Length: 87 -Connection: Close - -type=checkupdate&version=2018-12-25 14:50:40&programVersion=1.13.16&remark=获取更新 -HTTP/1.1 200 OK -Date: Wed, 26 Dec 2018 01:08:19 GMT -Content-Type: text/plain; charset=utf-8 -Content-Length: 47 -Connection: close -Cache-Control: private - -{"code":0,"Msg":"","Time":"2018/12/26 9:08:19"} - ------------------------------------------------------------------- - -CONNECT 183.62.114.155:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.62.114.155 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 94 CD F8 B7 BD DB 4D 73 D6 22 A9 11 24 48 AC 3B 81 9B 2D F3 69 16 91 25 9F 0C 58 19 4A -"Time": 2049/2/14 23:46:36 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:36.759 -Connection: close -EndTime: 09:08:37.621 -ClientToServerBytes: 853 -ServerToClientBytes: 3532 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 95 79 7B 7B 8D 6E BB B6 19 DF 77 B4 8F 9C E4 54 6D CD C5 38 4A A5 DB EB 90 9F 9E 45 E4 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 116.77.73.165:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 116.77.73.165 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 95 91 9C 91 90 40 4D D2 F8 B1 7E AA 39 15 69 71 46 C8 B4 34 FC BD 5E CE 6A 46 26 35 8F -"Time": 2049/8/28 4:06:52 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:37.628 -Connection: close -EndTime: 09:08:38.220 -ClientToServerBytes: 853 -ServerToClientBytes: 9472 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 95 58 86 AE 75 D6 BF A7 5C 7B 91 8C E5 60 2F 1F C5 EC 92 3F EF CB 96 1A 84 AF 31 05 1B -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 122.228.237.248:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 122.228.237.248 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 96 A1 32 33 62 8F 46 5B DE 44 56 A1 9F 12 55 24 DB 74 20 8E 65 C7 00 9D 91 19 8A 93 D8 -"Time": 2050/3/10 8:27:08 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:38.261 -Connection: close -EndTime: 09:08:38.548 -ClientToServerBytes: 853 -ServerToClientBytes: 9520 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 96 C8 AF 17 D1 C0 6A 90 E3 07 EF 9C 1B 9C 05 54 B6 1D EE FD A7 DF 20 7C BA B5 94 77 9B -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 36.250.248.252:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 36.250.248.252 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 96 17 19 37 22 2C 0F 74 59 61 21 C5 7C E4 6C 12 98 61 09 5E D2 7A 2F 63 E2 F0 93 55 8A -"Time": 2050/3/10 8:27:08 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:38.567 -Connection: close -EndTime: 09:08:38.831 -ClientToServerBytes: 778 -ServerToClientBytes: 6138 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 96 BE D6 60 9E 04 F4 01 37 7B 0A 7A D6 1C 26 7C 8F 9F D2 D5 B6 1C 1C C8 6B 4D 92 FC A9 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 36.250.248.223:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 36.250.248.223 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 96 07 0B 58 56 48 7A 92 B2 05 52 C5 42 7D 09 AB 1D FD AA FD 5E 7C A1 7E 23 7C 2F 5A 78 -"Time": 2050/3/10 8:27:08 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:38.855 -Connection: close -EndTime: 09:08:38.970 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 96 0A 02 9F 68 58 B6 BB 1C 64 D8 DF EC 98 10 52 A8 7C A4 5B 3F 36 18 E6 14 CD B2 34 30 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 59.44.30.54:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 59.44.30.54 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 97 0F 41 6E 31 41 07 30 FE 84 AF C1 28 F8 B0 A1 F5 59 F5 67 22 F5 C5 86 E9 55 E5 08 F2 -"Time": 2050/9/20 12:47:24 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:39.036 -Connection: close -EndTime: 09:08:39.220 -ClientToServerBytes: 778 -ServerToClientBytes: 6106 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 97 A7 67 97 E8 0B 7B CA 10 86 9D D8 C2 E7 7A 9F C7 A7 8C A1 80 E5 0B 53 0C 38 A4 EA FB -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 36.104.132.103:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 36.104.132.103 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 97 27 8D CE 73 DF B6 16 80 46 DC D2 B7 81 47 10 D4 30 F9 BE 71 D4 67 52 A3 28 5C 8F 13 -"Time": 2050/9/20 12:47:24 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:39.294 -Connection: close -EndTime: 09:08:39.597 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 97 EA D8 45 31 F2 52 20 7B 39 6B 02 B2 1D B0 AB D5 53 1D D5 84 12 9C 93 B3 4E AA 20 95 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 219.147.93.62:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 219.147.93.62 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 97 5D F5 70 8A AD 99 AA 56 80 93 49 82 0D 17 11 7B 70 F4 FC 1A B6 D9 F6 AC 30 1B 91 17 -"Time": 2050/9/20 12:47:24 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:39.662 -Connection: close -EndTime: 09:08:39.838 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 97 E0 44 88 41 3B 57 BF 2F 04 A1 56 C2 5A 0C 85 07 08 D0 D7 AB FF D2 E5 D0 78 9A B2 98 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 120.226.49.252:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 120.226.49.252 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 97 DF 13 04 5E 15 1B 30 32 38 52 49 E1 4D AB 5F F3 F7 9A 08 09 1C FC 97 0D FA 30 45 76 -"Time": 2050/9/20 12:47:24 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:39.878 -Connection: close -EndTime: 09:08:40.103 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 97 37 31 A1 FC 3B F5 51 F0 EC EE AE 85 FF CB 38 5C 8C 20 AF F2 C4 DD 5C E0 BE EE 86 58 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 183.214.1.253:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.214.1.253 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 98 89 EB C8 3E A9 83 C0 0E 65 07 BD 69 F2 3A 02 98 E9 77 93 6D 8E 33 C7 E6 96 C3 33 86 -"Time": 2051/4/2 17:07:40 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:40.132 -Connection: close -EndTime: 09:08:40.478 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 98 C3 8A 4B 1D B7 5E 85 5C F4 D2 FD 48 8A 31 5F C3 F2 C2 AB 4F C7 6C 88 6C 23 D3 B2 33 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 39.130.253.253:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 39.130.253.253 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 98 49 B5 08 D0 E0 8D C2 8C 29 8F 48 11 B5 39 70 67 EA 61 D9 FD D5 60 C9 C8 06 EE A1 CB -"Time": 2051/4/2 17:07:40 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F D4 84 8B EB 4A B7 10 85 88 38 AF 27 A0 40 B9 CE 67 84 DD B0 C0 F0 68 78 D7 45 C5 7C 56 65 33 AE BC 5C C3 4C 21 26 80 09 E5 E2 C7 C0 8A 2D 84 E3 39 5D 93 1B DA 42 2F F9 F7 8B D2 FE 38 2A 47 FF 10 96 12 65 9E 01 D3 7F 26 52 7F 4D 38 61 E3 92 B4 E1 D0 C5 6F E3 51 D0 32 9F 60 8B D3 90 DD EA 00 6A 97 9E 8F 96 3B 79 CC 70 E7 66 E9 DC 61 40 41 13 3B FF 8E FE 01 8F 81 8F 6C 42 3C E6 1C AD D9 26 00 1D 65 6F 5E 3A 62 62 A4 44 8D 9D 23 B4 60 15 F8 42 0C 39 CD 42 55 8A E3 FE 6C E2 96 A3 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:40.527 -Connection: close -EndTime: 09:08:40.962 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 98 7E 41 91 57 94 F9 97 EE FC 04 6D 55 E6 AD DE 01 8D 46 55 16 F8 A8 F9 95 61 6B 4E 93 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 153.99.235.112:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 153.99.235.112 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 99 78 2B 49 76 7A 93 67 CF 97 5F BD 0D 35 1F 51 5C 17 A2 E9 0D DC 3D A3 2B 97 C8 AC 47 -"Time": 2051/10/13 21:27:56 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:41.000 -Connection: close -EndTime: 09:08:41.318 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 8E 5C 9E 13 F5 50 0B 60 BF B7 26 53 14 9D 2E 77 2C 68 F0 B8 A8 6D 56 9F A1 86 3E 64 73 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 153.101.208.254:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 153.101.208.254 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 99 0B 01 8C 55 58 98 B2 01 E3 C1 2C E0 55 41 EC 1C 0C AE 38 FB F7 C8 50 42 F1 21 DF 0E -"Time": 2051/10/13 21:27:56 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:41.356 -Connection: close -EndTime: 09:08:41.524 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 99 D1 83 69 63 6A CD C4 F0 13 C8 28 EA 64 1B EA CB 09 EB AB C2 26 D9 F8 FB F6 F4 16 FC -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 112.28.196.100:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.28.196.100 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 99 07 ED 26 9D EC B6 91 54 6D 82 CE 82 25 82 DF 96 0A 36 82 1D 0E F5 10 A3 DB 16 19 97 -"Time": 2051/10/13 21:27:56 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:41.561 -Connection: close -EndTime: 09:08:41.702 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 99 EE B7 75 EF F8 CC 78 B6 44 D8 30 50 DA F2 FA 53 1B 4E 1B 7C 6A 0B D0 23 7E B1 05 D8 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 183.62.114.189:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.62.114.189 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 99 32 75 37 2F F2 E0 59 F7 7B 6F 44 4D 64 1F 85 C1 A2 95 35 FA FB A7 77 19 B6 9C CC 84 -"Time": 2051/10/13 21:27:56 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F D4 84 8B EB 4A B7 10 85 88 38 AF 27 A0 40 B9 CE 67 84 DD B0 C0 F0 68 78 D7 45 C5 7C 56 65 33 AE BC 5C C3 4C 21 26 80 09 E5 E2 C7 C0 8A 2D 84 E3 39 5D 93 1B DA 42 2F F9 F7 8B D2 FE 38 2A 47 FF 10 96 12 65 9E 01 D3 7F 26 52 7F 4D 38 61 E3 92 B4 E1 D0 C5 6F E3 51 D0 32 9F 60 8B D3 90 DD EA 00 6A 97 9E 8F 96 3B 79 CC 70 E7 66 E9 DC 61 40 41 13 3B FF 8E FE 01 8F 81 8F 6C 42 3C E6 1C AD D9 26 00 1D 65 6F 5E 3A 62 62 A4 44 8D 9D 23 B4 60 15 F8 42 0C 39 CD 42 55 8A E3 FE 6C E2 96 A3 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:41.714 -Connection: close -EndTime: 09:08:42.182 -ClientToServerBytes: 853 -ServerToClientBytes: 9467 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 99 90 59 9E B8 A6 57 4F E3 32 2E 6F 12 B2 2E 7B A2 7B 6F 26 3E ED 27 46 38 32 6A FC 51 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 59.63.221.41:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 59.63.221.41 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 9A 0E 31 47 D1 BF A4 28 69 C6 E6 0F AC 76 EE 1A A9 D6 FB D7 B3 6C 0D C5 DC BA 08 A3 CF -"Time": 2052/4/25 1:48:12 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket A3 78 53 B6 D7 63 C8 59 D1 BE 0F 89 E3 9C 6B A6 9C 05 18 BF 5C 16 BF F8 46 D9 E7 75 81 02 AD 80 B6 BB 3F 6D 4E D9 68 90 B1 EC 75 4F 54 F5 09 15 67 C9 17 CC CF 6B 19 13 7D A1 8F 6F C7 0F 6A 2D 67 C4 8A 5E 74 58 0C D8 4E F9 A7 5D 77 8A C4 CA DE AB E1 25 56 DC FE EC 78 62 00 1D 4F D6 36 E5 A6 09 3B C4 0D 6B 7B 9A 67 E3 9E 8E CC 02 53 15 B4 3D AE E5 0C 9D 07 06 4E F7 48 6A 00 52 13 3A CD 38 04 5C 89 5E C2 6F 3B F1 B5 B4 5A DA 11 A5 F9 BB 91 F9 39 D5 37 EC AF 7B 31 38 AE 0E 96 AE 51 B8 28 B5 A0 E5 C7 A6 C3 4A B2 80 E4 E5 2F 38 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:42.241 -Connection: close -EndTime: 09:08:42.485 -ClientToServerBytes: 853 -ServerToClientBytes: 9520 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 9A 7A BC BB 99 C5 4D BE 55 98 38 9E 49 E9 99 45 00 62 64 26 66 62 87 B3 26 0A DB 32 36 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 59.63.221.45:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 59.63.221.45 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 9A 81 CC 7C 8A D3 97 12 EF 5F 6D 71 27 D7 25 E4 A5 D9 F1 59 8E F3 D1 5F 32 32 98 48 B3 -"Time": 2052/4/25 1:48:12 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:42.541 -Connection: close -EndTime: 09:08:42.720 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 9A ED E5 F4 4E B0 43 29 D4 A8 8B AC 75 8F D2 C4 A6 A6 24 4D 61 DE 2A B4 E5 6A AA A6 F3 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 59.63.221.44:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 59.63.221.44 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 9A F8 31 D3 A6 43 12 00 EC 26 84 A8 CD 01 C1 F9 D5 FD EB 88 A5 D9 2F 96 DA 6A E2 49 13 -"Time": 2052/4/25 1:48:12 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 5D ED A8 7B 5C 2B C3 43 F0 C7 DD 04 3F 3B 43 BB CD BE 6F 0A D2 D9 BB 4B 14 B8 AF A2 C8 3E 1B 81 99 AA FF 93 D5 28 3C 64 79 9D C6 43 0A 76 DC 03 73 D1 C3 97 EF 8F E8 3A 36 36 5E 30 1A F2 87 E9 6C 24 98 BC AB 9B C5 DA 99 4F 2E 86 3F 58 C4 63 63 60 0E 74 9C 9E 9B 5B D4 8F EE 4C 95 B8 6E 64 57 68 74 A5 A1 37 59 B4 E6 67 D2 90 37 56 C5 9E 43 F9 82 50 10 77 C8 8D 04 CE DC 00 6E FE 10 2B 15 FA 20 A4 32 DE 59 F1 41 F8 4F 3C 4B B4 2D 43 B0 49 3A 8C D7 58 1F 5F B5 FB B7 A9 CA 64 32 D6 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:42.788 -Connection: close -EndTime: 09:08:42.985 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 9A 84 59 04 9C 25 61 15 00 C3 18 81 80 0E 86 C0 98 DB 47 D1 C2 03 42 2D E7 1E 23 F8 0E -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 59.63.221.47:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 59.63.221.47 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 9B 3D 8B E0 E1 CA FC 48 45 0D 34 4B 15 89 F2 10 B9 97 AC 8B 4B 18 4E 3A 87 B6 A8 AD 91 -"Time": 2052/11/5 6:08:28 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:43.031 -Connection: close -EndTime: 09:08:43.187 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 9B 12 BE 20 6F 13 18 2D 71 F2 F3 B1 B8 38 51 AD 4A D9 2E D0 64 65 2F 30 FD 7F CC 9D C6 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 221.180.218.248:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 221.180.218.248 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 9B 73 22 D7 67 6D 22 0A 1B 9E FE 19 54 DC 4D 74 13 AB A1 2E B7 0E D7 9B BF 47 A0 A6 6B -"Time": 2052/11/5 6:08:28 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:43.245 -Connection: close -EndTime: 09:08:43.405 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 9B 08 29 06 F7 E8 76 70 C3 A1 47 07 20 F4 42 9E 1B 90 E4 15 64 C5 3B 9B 95 B8 7B 2B EA -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 111.26.157.7:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 111.26.157.7 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 9B 85 28 59 6A 23 D4 E9 DC 3F 3E 32 47 DB CC 04 2E 5C E9 AF AB 60 75 42 30 AE 74 40 FB -"Time": 2052/11/5 6:08:28 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:43.475 -Connection: close -EndTime: 09:08:43.642 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 9B 53 8E DB EE 4C C8 DD 22 A1 48 BD 19 DB 22 F7 16 DD 62 F9 8C EF 17 A4 F4 A5 85 2E 70 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 223.111.156.210:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 223.111.156.210 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 9B E0 38 3D AC EF 82 0B E4 69 83 B1 86 69 E3 32 62 82 10 8A 95 03 0B A4 1A 01 8C 49 BD -"Time": 2052/11/5 6:08:28 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:43.689 -Connection: close -EndTime: 09:08:43.938 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 9B 91 DA F3 D1 88 BD 35 FA 7A 19 64 8E E3 07 B7 8D 28 D4 E6 BC 3F 57 EF 06 F9 84 98 46 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 117.148.128.68:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 117.148.128.68 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 9B 4D 1C 8A DF A7 5C EE B3 52 1E CC F5 CD 7E 8C 53 65 39 54 EA 33 74 65 73 D6 D5 B6 75 -"Time": 2052/11/5 6:08:28 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 5D ED A8 7B 5C 2B C3 43 F0 C7 DD 04 3F 3B 43 BB CD BE 6F 0A D2 D9 BB 4B 14 B8 AF A2 C8 3E 1B 81 99 AA FF 93 D5 28 3C 64 79 9D C6 43 0A 76 DC 03 73 D1 C3 97 EF 8F E8 3A 36 36 5E 30 1A F2 87 E9 6C 24 98 BC AB 9B C5 DA 99 4F 2E 86 3F 58 C4 63 63 60 0E 74 9C 9E 9B 5B D4 8F EE 4C 95 B8 6E 64 57 68 74 A5 A1 37 59 B4 E6 67 D2 90 37 56 C5 9E 43 F9 82 50 10 77 C8 8D 04 CE DC 00 6E FE 10 2B 15 FA 20 A4 32 DE 59 F1 41 F8 4F 3C 4B B4 2D 43 B0 49 3A 8C D7 58 1F 5F B5 FB B7 A9 CA 64 32 D6 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:43.974 -Connection: close -EndTime: 09:08:44.216 -ClientToServerBytes: 778 -ServerToClientBytes: 6069 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 9B 15 8E F7 F2 C6 86 8F A7 6B 22 D9 54 80 D9 C9 E3 15 31 15 FB 59 9A 92 57 D4 AA D2 F6 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 58.20.179.31:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 58.20.179.31 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 9C 0F 89 B7 00 99 BC 03 59 E6 8B 73 A1 7B 34 D2 F9 53 B7 DD AD 8D 5D AF 1F CD 33 18 AE -"Time": 2053/5/18 10:28:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 5D ED A8 7B 5C 2B C3 43 F0 C7 DD 04 3F 3B 43 BB CD BE 6F 0A D2 D9 BB 4B 14 B8 AF A2 C8 3E 1B 81 99 AA FF 93 D5 28 3C 64 79 9D C6 43 0A 76 DC 03 73 D1 C3 97 EF 8F E8 3A 36 36 5E 30 1A F2 87 E9 6C 24 98 BC AB 9B C5 DA 99 4F 2E 86 3F 58 C4 63 63 60 0E 74 9C 9E 9B 5B D4 8F EE 4C 95 B8 6E 64 57 68 74 A5 A1 37 59 B4 E6 67 D2 90 37 56 C5 9E 43 F9 82 50 10 77 C8 8D 04 CE DC 00 6E FE 10 2B 15 FA 20 A4 32 DE 59 F1 41 F8 4F 3C 4B B4 2D 43 B0 49 3A 8C D7 58 1F 5F B5 FB B7 A9 CA 64 32 D6 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:44.238 -Connection: close -EndTime: 09:08:44.340 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 9C EB 0F E1 03 95 38 23 29 CD D5 D1 ED E4 40 F0 28 A1 9A 50 36 F4 96 62 F2 E7 B6 CA 04 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 59.80.29.40:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 59.80.29.40 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 9C 17 23 86 DB 3F 62 AE A4 9B AE 06 C8 54 4F FE 53 09 1A AE 61 92 CC 82 78 FE 32 F2 3F -"Time": 2053/5/18 10:28:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:44.370 -Connection: close -EndTime: 09:08:44.519 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 9C CC 84 18 6C C4 52 8A 6F 8A 52 DB C9 5F 2F 35 73 D5 36 30 60 72 FA CE 8F C7 28 0F FB -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 218.92.209.249:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 218.92.209.249 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 9C F3 EF BC 1C 2D B5 80 93 42 5D 73 3E D3 74 EC B1 06 8C F1 3D 36 13 34 1D AA 36 2E 17 -"Time": 2053/5/18 10:28:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:44.562 -Connection: close -EndTime: 09:08:44.710 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 9C E4 78 EE 9A E5 E9 8E 54 6F 35 85 E7 37 2B 01 9E 33 A2 8A F9 FC A3 3B 5D 20 51 21 47 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 60.174.241.125:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 60.174.241.125 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 9C 33 B4 7B 2D D3 E9 30 14 0F 5B E3 51 D6 F8 18 36 2A 7E A8 60 36 7B 7D 85 51 F5 3C DD -"Time": 2053/5/18 10:28:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:44.758 -Connection: close -EndTime: 09:08:44.911 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 9C 0E 93 87 C5 1A 71 A4 E9 37 70 16 19 D6 26 66 90 09 1B E2 E5 E0 E4 8E 1D F8 9B BB 4A -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 111.161.122.181:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 111.161.122.181 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 9C 02 52 35 C8 F2 A5 9C 31 A1 1C 2E 59 BA 90 11 3D 49 3F 72 7D E0 83 C7 D4 E2 A4 4E E3 -"Time": 2053/5/18 10:28:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:44.951 -Connection: close -EndTime: 09:08:45.066 -ClientToServerBytes: 778 -ServerToClientBytes: 6069 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 9C BF 3D 53 F5 F6 5B 24 33 21 08 C0 EE 93 A2 9A 5A D0 07 80 7F 63 B5 76 55 64 F6 CD 17 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 111.41.54.254:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 111.41.54.254 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 9D F3 93 61 7B 8B 02 C6 14 78 A4 E6 45 30 BC 22 38 10 55 46 AE DC 80 6C C6 DD D3 30 3B -"Time": 2053/11/28 14:49:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:45.137 -Connection: close -EndTime: 09:08:45.327 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 9D D1 80 87 6C 14 B5 11 33 44 20 DB 5C 8B 72 6F DF 7F 77 9A F5 4D 86 FF EC B8 85 C1 79 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 123.53.139.253:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 123.53.139.253 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 9D FD 8A 32 D6 53 70 0D 4E 88 08 ED DC 1B D4 D5 50 3D DB B4 30 29 B1 0D 9C 37 91 B9 14 -"Time": 2053/11/28 14:49:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:45.369 -Connection: close -EndTime: 09:08:45.587 -ClientToServerBytes: 778 -ServerToClientBytes: 6138 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 9D D0 52 FB 83 E7 5A 75 84 FC 55 72 84 4C 00 16 A8 69 CF 6E C9 56 74 7F 1F AF 11 B8 27 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 183.216.176.251:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.216.176.251 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 9D A4 75 F2 5B 23 5A 56 05 DE E1 56 B2 48 5A 27 BE 9C F9 6A 8A D3 1A A8 67 80 B0 09 4A -"Time": 2053/11/28 14:49:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:45.619 -Connection: close -EndTime: 09:08:45.745 -ClientToServerBytes: 778 -ServerToClientBytes: 6064 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 9D 7F 2E 6A DF 51 D1 FB 6F 66 1E 16 CD 94 EC 69 9B 31 F7 5A B3 A0 D1 41 B2 B0 A0 76 D9 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 223.111.19.126:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 223.111.19.126 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 9D AA DD 1C 9C 64 FA 97 1A 9B 0D 82 78 9A 25 7E CD 52 13 43 87 6D A3 7C 95 26 D4 EF D2 -"Time": 2053/11/28 14:49:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 5D ED A8 7B 5C 2B C3 43 F0 C7 DD 04 3F 3B 43 BB CD BE 6F 0A D2 D9 BB 4B 14 B8 AF A2 C8 3E 1B 81 99 AA FF 93 D5 28 3C 64 79 9D C6 43 0A 76 DC 03 73 D1 C3 97 EF 8F E8 3A 36 36 5E 30 1A F2 87 E9 6C 24 98 BC AB 9B C5 DA 99 4F 2E 86 3F 58 C4 63 63 60 0E 74 9C 9E 9B 5B D4 8F EE 4C 95 B8 6E 64 57 68 74 A5 A1 37 59 B4 E6 67 D2 90 37 56 C5 9E 43 F9 82 50 10 77 C8 8D 04 CE DC 00 6E FE 10 2B 15 FA 20 A4 32 DE 59 F1 41 F8 4F 3C 4B B4 2D 43 B0 49 3A 8C D7 58 1F 5F B5 FB B7 A9 CA 64 32 D6 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:45.788 -Connection: close -EndTime: 09:08:45.933 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 9D 35 12 B7 6A B0 A6 1C 15 11 FB 42 77 C9 66 4C DD F7 5A 06 9E 0C CA 4F DF 42 AC A8 B8 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 123.128.14.254:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 123.128.14.254 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 9D 35 D2 E0 82 65 7D A8 21 0D 8F 8F 52 20 E1 3D B4 95 26 37 82 CE 93 C2 1C CB B8 C4 CC -"Time": 2053/11/28 14:49:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:45.974 -Connection: close -EndTime: 09:08:46.099 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 91 E6 E4 DF 86 4A A3 C9 DD 62 3C E5 24 8D F5 4D 44 56 81 69 AC D0 6F F8 50 E4 CA 21 5B -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 61.162.100.252:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 61.162.100.252 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 9E 9A A3 A2 97 3B 13 DB 09 C9 7A 07 36 D8 3B 05 16 DF 55 AE 43 C2 B3 1C 04 EA 2B 63 D4 -"Time": 2054/6/10 19:09:16 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:46.147 -Connection: close -EndTime: 09:08:46.973 -ClientToServerBytes: 778 -ServerToClientBytes: 113 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 9E DB AE 4F 84 17 98 76 A3 C7 16 8F B6 10 32 B3 0C 05 0F AD 39 8E E4 69 AA B1 42 B9 FB -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 60.210.23.175:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 60.210.23.175 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 9F D0 CD 45 C5 D4 50 27 E7 BB 5D 97 D1 9A E2 0C AB 48 F8 61 27 C1 25 F0 F6 BB 06 74 1B -"Time": 2054/12/21 23:29:32 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:47.015 -Connection: close -EndTime: 09:08:47.154 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 9E AB 2C 7C BA 31 17 C7 EA CC 4C 4B BE 94 33 2E 62 A4 B8 F0 CE 63 7E 7A D4 0C C7 0A 3D -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 60.210.23.116:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 60.210.23.116 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 9F 5C E9 D9 00 53 D1 5F 1C 7F 94 06 C4 DB A2 4D B7 43 2F D5 71 6E EA F0 9D 9E 93 CD 3B -"Time": 2054/12/21 23:29:32 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:47.202 -Connection: close -EndTime: 09:08:47.333 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 9F C8 32 7B 26 66 CE F7 FD DC 61 AF 77 67 B9 72 A1 D5 E2 26 E4 95 D6 98 F9 01 F6 85 91 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 60.213.22.57:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 60.213.22.57 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 9F 6A C3 5A 76 15 32 38 FF C8 0B 67 6C 3E 9F AA 09 2C 96 40 70 FB AA FB FB 71 28 20 7E -"Time": 2054/12/21 23:29:32 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:47.383 -Connection: close -EndTime: 09:08:47.523 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 9F F6 21 11 5B E5 C4 4F 8B 00 DA B4 06 EA E4 D1 62 0D 86 B3 72 D7 68 10 B8 7D 21 54 23 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 60.213.21.252:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 60.213.21.252 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 9F 74 E9 37 D9 EE 2F A6 F1 79 C0 F2 F1 70 3A AE D6 94 A6 4D 33 B5 58 FF 56 C8 C3 BA 02 -"Time": 2054/12/21 23:29:32 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:47.575 -Connection: close -EndTime: 09:08:47.711 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 9F A9 74 0D FE DE 67 CB F5 80 57 80 2E 8A B5 A6 11 EC 0E F4 14 EF FC A7 85 D6 61 1F F1 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 119.176.61.99:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 119.176.61.99 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 9F 2A 17 83 A4 4C 5B C4 CA B3 5A E1 B5 87 11 A2 8B AC D9 4E D6 D6 F7 2A 5A 37 D0 63 45 -"Time": 2054/12/21 23:29:32 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 5D ED A8 7B 5C 2B C3 43 F0 C7 DD 04 3F 3B 43 BB CD BE 6F 0A D2 D9 BB 4B 14 B8 AF A2 C8 3E 1B 81 99 AA FF 93 D5 28 3C 64 79 9D C6 43 0A 76 DC 03 73 D1 C3 97 EF 8F E8 3A 36 36 5E 30 1A F2 87 E9 6C 24 98 BC AB 9B C5 DA 99 4F 2E 86 3F 58 C4 63 63 60 0E 74 9C 9E 9B 5B D4 8F EE 4C 95 B8 6E 64 57 68 74 A5 A1 37 59 B4 E6 67 D2 90 37 56 C5 9E 43 F9 82 50 10 77 C8 8D 04 CE DC 00 6E FE 10 2B 15 FA 20 A4 32 DE 59 F1 41 F8 4F 3C 4B B4 2D 43 B0 49 3A 8C D7 58 1F 5F B5 FB B7 A9 CA 64 32 D6 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:47.757 -Connection: close -EndTime: 09:08:47.889 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 9F 8D EE A1 E5 37 43 FB F7 E5 77 AE E2 29 A8 95 17 F1 73 C8 F4 D2 5E 93 C5 03 9F B0 00 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 123.138.157.93:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 123.138.157.93 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 9F 42 61 BB 4A 4C BD 6D EC E1 29 61 A4 C4 E6 71 F6 FD 31 27 18 B6 70 E7 1A 77 07 FE D3 -"Time": 2054/12/21 23:29:32 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:47.938 -Connection: close -EndTime: 09:08:48.658 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 A0 4C A7 2D DE 08 EB 8B 3C 09 27 4A 93 86 C6 2C FE 3D F5 10 9C B6 13 A2 39 98 2D BF 20 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 123.138.203.56:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 123.138.203.56 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 A0 D9 B0 95 98 F0 E6 8E 08 BC 9C 11 60 4C 42 68 E7 2E D1 EF 6E B2 DA 75 A0 7E 58 B3 DE -"Time": 2055/7/4 3:49:48 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 5D ED A8 7B 5C 2B C3 43 F0 C7 DD 04 3F 3B 43 BB CD BE 6F 0A D2 D9 BB 4B 14 B8 AF A2 C8 3E 1B 81 99 AA FF 93 D5 28 3C 64 79 9D C6 43 0A 76 DC 03 73 D1 C3 97 EF 8F E8 3A 36 36 5E 30 1A F2 87 E9 6C 24 98 BC AB 9B C5 DA 99 4F 2E 86 3F 58 C4 63 63 60 0E 74 9C 9E 9B 5B D4 8F EE 4C 95 B8 6E 64 57 68 74 A5 A1 37 59 B4 E6 67 D2 90 37 56 C5 9E 43 F9 82 50 10 77 C8 8D 04 CE DC 00 6E FE 10 2B 15 FA 20 A4 32 DE 59 F1 41 F8 4F 3C 4B B4 2D 43 B0 49 3A 8C D7 58 1F 5F B5 FB B7 A9 CA 64 32 D6 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:48.710 -Connection: close -EndTime: 09:08:48.877 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 A0 5E 36 B7 6B 47 48 AD CC 7C 4D C5 39 47 88 69 4F 5A 30 68 47 E1 71 B3 A6 58 49 28 66 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 111.19.233.253:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 111.19.233.253 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 A0 01 6B A9 B4 67 01 47 43 9A 8B 8B E7 2D 51 B4 62 B0 06 60 AD 28 D3 F4 F0 22 FF 18 1D -"Time": 2055/7/4 3:49:48 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:48.921 -Connection: close -EndTime: 09:08:49.081 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 A0 1B 2B E6 0E 43 86 67 6C E0 8F 05 43 AE D6 2E B5 2D B2 AC C7 AA F9 24 EA 3D D5 49 F1 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 117.145.179.248:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 117.145.179.248 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 A1 99 23 4A F1 67 DE 46 A5 D4 2A 8B 23 53 1C 34 AF 3A 66 14 59 D8 10 D1 48 64 43 08 28 -"Time": 2056/1/14 8:10:04 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:08:49.172 -Connection: close -EndTime: 09:08:49.430 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 A1 A2 14 C2 C4 1D 28 10 AA 20 97 1C F7 39 02 1A CB 87 48 C9 94 70 26 E2 FD 81 0F C8 25 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 110.96.40.225:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 110.96.40.225 - - -HTTP/1.1 502 Fiddler - Connection Failed -Date: Wed, 26 Dec 2018 01:09:10 GMT -Content-Type: text/html; charset=UTF-8 -Connection: close -Cache-Control: no-cache, must-revalidate -Timestamp: 09:09:10.434 - -[Fiddler] The connection to '110.96.40.225' failed.
    Error: TimedOut (0x274c).
    System.Net.Sockets.SocketException 由于连接方在一段时间后没有正确答复或连接的主机没有反应，连接尝试失败。 110.96.40.225:443 - ------------------------------------------------------------------- - -CONNECT 101.69.146.234:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 101.69.146.234 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 B6 5C CD 12 FE 7E 16 BC 56 6E 3B 80 77 E6 10 C7 64 E5 96 4A 6D 79 30 93 5E F6 EB 4F 22 -"Time": 2067/3/15 3:15:40 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:09:10.475 -Connection: close -EndTime: 09:09:10.622 -ClientToServerBytes: 778 -ServerToClientBytes: 6138 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 B6 08 8D BE 4C 8F AA F2 D9 54 C0 2C 9E 0E 70 34 74 41 AD AA 2B 2D F9 3D 2D 81 79 12 E6 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 61.243.144.244:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 61.243.144.244 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 B6 ED 7F 7B 08 BD B4 99 EB E6 44 53 55 28 EA F7 A4 C6 CE 9D 7A 7E 14 04 69 DF 77 33 7B -"Time": 2067/3/15 3:15:40 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:09:10.683 -Connection: close -EndTime: 09:09:10.857 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 B6 DC BC EF 51 A2 77 44 14 87 45 D3 C8 CE 3C 87 82 6A AB 1F 5E FD DD 92 FB 1D 5E D1 21 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 61.167.54.31:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 61.167.54.31 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 B6 56 13 E5 E9 66 E1 61 4D 38 71 C5 C1 B1 9A 9B B0 10 BB 50 7D 3E EA 31 FB 70 D1 C0 1B -"Time": 2067/3/15 3:15:40 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:09:10.919 -Connection: close -EndTime: 09:09:11.181 -ClientToServerBytes: 778 -ServerToClientBytes: 6064 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 B6 B6 43 D4 E3 63 1F F5 40 94 C2 9A 90 38 18 86 76 E2 E3 4D 2F F9 44 7E DE 56 88 3D 54 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 221.180.208.214:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 221.180.208.214 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 B7 72 F7 FF 7C 11 60 18 46 AB 03 61 0B 62 2E DC F0 77 F6 32 CD E3 95 89 63 63 64 0B E9 -"Time": 2067/9/25 7:35:56 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:09:11.253 -Connection: close -EndTime: 09:09:11.482 -ClientToServerBytes: 778 -ServerToClientBytes: 6064 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 B7 76 EB A2 F7 B0 72 46 A0 26 D2 9C B8 41 DD DB 87 DA 91 53 92 63 14 CA EA 18 26 03 F7 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 111.6.177.254:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 111.6.177.254 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 B7 42 1F F3 31 DD 04 00 F0 88 7C 22 3C 91 02 6C 82 C7 38 22 DA 72 63 B8 BE 0F 20 67 DF -"Time": 2067/9/25 7:35:56 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:09:11.521 -Connection: close -EndTime: 09:09:11.644 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 B7 47 26 DB 2E 9F D9 EC 96 29 A0 0C 50 8D EC DC F4 2B 67 DB 85 CD A4 CB 88 C1 B6 DC 36 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 218.29.50.27:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 218.29.50.27 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 B7 39 36 6E FC 87 99 2B 82 10 39 BF 59 6E D4 60 74 6C C8 24 06 51 21 A4 4C 93 5A 18 A2 -"Time": 2067/9/25 7:35:56 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:09:11.685 -Connection: close -EndTime: 09:09:11.822 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 B7 17 75 92 B9 75 CE A4 18 D6 BF 46 1A 94 96 2A A3 B7 E0 E5 9E 26 19 D4 C4 2D CD DB 9E -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 117.27.245.254:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 117.27.245.254 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 B7 52 42 A4 F0 2C F6 1D 5C 3D 30 37 43 1C DE 5B 63 D4 AA 95 EF F9 A8 74 C7 28 EB C8 6C -"Time": 2067/9/25 7:35:56 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:09:11.863 -Connection: close -EndTime: 09:09:12.145 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 B7 7C 00 33 6E 11 9F 87 B8 FF 79 CD FE EA 64 C3 31 B6 CF 44 B0 32 06 67 46 4C 04 56 2E -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 120.221.64.77:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 120.221.64.77 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 B8 10 7E C2 05 87 C1 00 FC BD B3 C9 C7 3D 9C 1D 62 43 F3 00 12 12 09 B9 87 C0 6F FD A5 -"Time": 2068/4/6 11:56:12 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:09:12.205 -Connection: close -EndTime: 09:09:12.368 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 96 74 49 A8 01 D5 A0 2E 94 B5 FE E0 9E 09 5C 39 E5 DC C9 6D 1B 9C 0D C0 BC A2 C5 7D CB -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 120.221.64.251:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 120.221.64.251 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 B8 DD C1 36 85 A3 F3 B0 24 D7 11 0D 4F 13 5C 80 8F 65 40 FF AF A9 AC F5 FE 87 E2 CC 27 -"Time": 2068/4/6 11:56:12 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:09:12.419 -Connection: close -EndTime: 09:09:12.640 -ClientToServerBytes: 778 -ServerToClientBytes: 6159 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 A9 29 24 55 A6 B4 D2 85 2D 80 4A E7 9C F5 DF 6D 22 23 75 AC 53 5F 7D 11 A0 0B C5 C3 1B -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 120.221.23.39:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 120.221.23.39 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 B8 3D 8A 57 4B 60 12 C3 DB 03 ED 41 CE EE D8 49 26 4E 10 50 D1 4B 01 4F 14 0E E1 0B 91 -"Time": 2068/4/6 11:56:12 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:09:12.687 -Connection: close -EndTime: 09:09:12.903 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 B0 F3 69 0B F3 8F 60 58 4A 83 0E 16 D5 DE 3C 04 F8 71 04 D2 27 77 A1 8F 7E AF 9E 92 4C -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 111.19.215.69:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 111.19.215.69 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 B8 ED 50 0B 44 8B FF C8 FC C5 DD C8 AA 10 E1 4F 5F 51 DD 94 94 B8 A9 31 B8 66 86 8C 3A -"Time": 2068/4/6 11:56:12 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:09:12.948 -Connection: close -EndTime: 09:09:13.289 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 B8 75 A2 98 AF D3 56 C3 94 E6 E1 28 07 76 C1 88 F8 2D 1C C3 32 51 FD 6B EB F1 66 59 62 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 116.207.132.253:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 116.207.132.253 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 B9 60 AD 4C 4F CF F3 BD 50 C7 F2 EB 29 21 46 17 BA E7 13 C2 38 BE 1C EA C4 10 51 1F 68 -"Time": 2068/10/17 16:16:28 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 5D ED A8 7B 5C 2B C3 43 F0 C7 DD 04 3F 3B 43 BB CD BE 6F 0A D2 D9 BB 4B 14 B8 AF A2 C8 3E 1B 81 99 AA FF 93 D5 28 3C 64 79 9D C6 43 0A 76 DC 03 73 D1 C3 97 EF 8F E8 3A 36 36 5E 30 1A F2 87 E9 6C 24 98 BC AB 9B C5 DA 99 4F 2E 86 3F 58 C4 63 63 60 0E 74 9C 9E 9B 5B D4 8F EE 4C 95 B8 6E 64 57 68 74 A5 A1 37 59 B4 E6 67 D2 90 37 56 C5 9E 43 F9 82 50 10 77 C8 8D 04 CE DC 00 6E FE 10 2B 15 FA 20 A4 32 DE 59 F1 41 F8 4F 3C 4B B4 2D 43 B0 49 3A 8C D7 58 1F 5F B5 FB B7 A9 CA 64 32 D6 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:09:13.322 -Connection: close -EndTime: 09:09:14.162 -ClientToServerBytes: 778 -ServerToClientBytes: 113 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 B9 2F 09 E7 EF 3E 32 1B 64 6F 3D C0 FC 82 12 DA 2D 81 8B 05 2C 05 78 90 53 79 22 02 73 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 59.63.221.56:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 59.63.221.56 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 BA 2D 25 E3 54 41 84 0F C6 79 2E 13 97 A6 3B 6D B4 8D CD 4B 0F 38 D6 AE DC E9 3C 53 45 -"Time": 2069/4/29 20:36:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:09:14.218 -Connection: close -EndTime: 09:09:14.409 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 BA 50 1F 23 9E A1 15 34 EB EA F0 D4 3C D0 7B FD 0A A8 93 59 89 18 9D 56 1E 42 47 98 D0 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 59.63.221.46:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 59.63.221.46 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 BA 16 D7 D8 CA CC 63 B7 35 7B 0C FD BB 58 D4 0F C4 63 B5 44 5F 99 FF 90 F3 8B 4C F3 ED -"Time": 2069/4/29 20:36:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:09:14.469 -Connection: close -EndTime: 09:09:14.791 -ClientToServerBytes: 778 -ServerToClientBytes: 6138 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 BA 8B AC A6 64 71 0A DE A4 55 E9 91 47 D8 C5 9D AC 34 68 1C C7 A2 7B 78 EF A5 3E 49 E7 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 111.206.186.42:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 111.206.186.42 - - -HTTP/1.1 502 Fiddler - Connection Failed -Date: Wed, 26 Dec 2018 01:09:35 GMT -Content-Type: text/html; charset=UTF-8 -Connection: close -Cache-Control: no-cache, must-revalidate -Timestamp: 09:09:35.795 - -[Fiddler] The connection to '111.206.186.42' failed.
    Error: TimedOut (0x274c).
    System.Net.Sockets.SocketException 由于连接方在一段时间后没有正确答复或连接的主机没有反应，连接尝试失败。 111.206.186.42:443 - ------------------------------------------------------------------- - -CONNECT 125.90.206.82:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 125.90.206.82 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 CF 7A E8 93 96 60 19 40 52 B4 62 5A 3E 92 29 5A 3E 34 CC 6E A8 CB 90 52 94 28 EA E1 30 -"Time": 2080/6/28 15:42:20 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 5D ED A8 7B 5C 2B C3 43 F0 C7 DD 04 3F 3B 43 BB CD BE 6F 0A D2 D9 BB 4B 14 B8 AF A2 C8 3E 1B 81 99 AA FF 93 D5 28 3C 64 79 9D C6 43 0A 76 DC 03 73 D1 C3 97 EF 8F E8 3A 36 36 5E 30 1A F2 87 E9 6C 24 98 BC AB 9B C5 DA 99 4F 2E 86 3F 58 C4 63 63 60 0E 74 9C 9E 9B 5B D4 8F EE 4C 95 B8 6E 64 57 68 74 A5 A1 37 59 B4 E6 67 D2 90 37 56 C5 9E 43 F9 82 50 10 77 C8 8D 04 CE DC 00 6E FE 10 2B 15 FA 20 A4 32 DE 59 F1 41 F8 4F 3C 4B B4 2D 43 B0 49 3A 8C D7 58 1F 5F B5 FB B7 A9 CA 64 32 D6 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:09:35.811 -Connection: close -EndTime: 09:09:35.924 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 CF 77 AC AE E6 E7 00 41 0D F2 5A 7A DF 75 9B 99 D8 D3 E2 FF 60 80 45 48 70 EC 50 48 1C -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 36.102.230.254:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 36.102.230.254 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 CF 1F 6A 69 C9 BA F1 7D CD C5 29 42 B7 25 D5 D0 42 0B 60 C9 13 58 D9 DA AF CF 68 92 F4 -"Time": 2080/6/28 15:42:20 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:09:35.974 -Connection: close -EndTime: 09:09:36.115 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 CF 7F F7 A4 4D 14 FF 33 9D 1F 27 97 29 85 24 C2 C3 8E 97 C6 96 2F 3A 1A 07 AD 9E AD DA -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 124.116.133.126:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 124.116.133.126 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 D0 DE 63 FC 8D 38 8D 25 B9 35 05 1E 05 9A 72 34 40 FC 12 EF A4 71 CC 9A 69 07 72 32 51 -"Time": 2081/1/8 20:02:36 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:09:36.162 -Connection: close -EndTime: 09:09:36.425 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 D0 B4 6D 16 78 D9 C7 BA C6 12 07 92 A5 81 BC D5 BB 16 BD 81 5F D4 37 9C 10 C6 EF 48 7A -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 183.222.97.246:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.222.97.246 - - -HTTP/1.1 502 Fiddler - Connection Failed -Date: Wed, 26 Dec 2018 01:09:57 GMT -Content-Type: text/html; charset=UTF-8 -Connection: close -Cache-Control: no-cache, must-revalidate -Timestamp: 09:09:57.434 - -[Fiddler] The connection to '183.222.97.246' failed.
    Error: TimedOut (0x274c).
    System.Net.Sockets.SocketException 由于连接方在一段时间后没有正确答复或连接的主机没有反应，连接尝试失败。 183.222.97.246:443 - ------------------------------------------------------------------- - -CONNECT 60.220.196.240:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 60.220.196.240 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 E5 08 C1 8F A2 27 08 A9 32 D3 91 36 0A 9D 18 A6 B4 83 1B 69 84 09 8D 06 57 DB 36 EE 09 -"Time": 2092/3/9 15:08:12 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:09:57.489 -Connection: close -EndTime: 09:09:57.645 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 E5 60 0D D5 AF 04 6E B7 AE C7 1B D1 85 2F B1 24 E1 1A 89 A8 78 2B B7 38 2E 74 26 E7 D6 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 120.226.49.87:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 120.226.49.87 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 E5 1F DE 0A 58 EF 96 72 BE 68 99 43 24 40 66 8C D7 C1 C1 CF 4F 65 4B FE 21 DD CA 64 A2 -"Time": 2092/3/9 15:08:12 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:09:57.678 -Connection: close -EndTime: 09:09:57.802 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 E5 F9 EE B5 07 7A 16 78 7E A3 FC 5B 68 19 D4 88 4A 20 9E B1 A1 B9 64 3A 79 25 F2 CD C1 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 183.240.52.132:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.240.52.132 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 E5 7B 97 68 FB 16 E1 31 73 3C E6 49 A1 5C 81 77 90 35 95 D0 68 D4 59 66 E6 2E D8 BC F7 -"Time": 2092/3/9 15:08:12 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 5D ED A8 7B 5C 2B C3 43 F0 C7 DD 04 3F 3B 43 BB CD BE 6F 0A D2 D9 BB 4B 14 B8 AF A2 C8 3E 1B 81 99 AA FF 93 D5 28 3C 64 79 9D C6 43 0A 76 DC 03 73 D1 C3 97 EF 8F E8 3A 36 36 5E 30 1A F2 87 E9 6C 24 98 BC AB 9B C5 DA 99 4F 2E 86 3F 58 C4 63 63 60 0E 74 9C 9E 9B 5B D4 8F EE 4C 95 B8 6E 64 57 68 74 A5 A1 37 59 B4 E6 67 D2 90 37 56 C5 9E 43 F9 82 50 10 77 C8 8D 04 CE DC 00 6E FE 10 2B 15 FA 20 A4 32 DE 59 F1 41 F8 4F 3C 4B B4 2D 43 B0 49 3A 8C D7 58 1F 5F B5 FB B7 A9 CA 64 32 D6 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:09:57.819 -Connection: close -EndTime: 09:09:58.176 -ClientToServerBytes: 778 -ServerToClientBytes: 6138 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 E5 98 86 B3 04 13 9C 23 6C 37 0B 8C 49 60 B3 BA D4 AA DC 2F 4F 23 FC DC 03 A9 C9 98 E5 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 36.250.233.254:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 36.250.233.254 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 E6 DE AC 16 D6 5F 0A 9A E9 73 7D 91 91 59 C2 52 B8 ED 76 17 B2 91 8A 3D 66 74 1B 8B 2F -"Time": 2092/9/19 19:28:28 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:09:58.205 -Connection: close -EndTime: 09:09:58.430 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 E6 BF 7E 66 57 28 EA 8D 54 0C FE CE AF B4 1E A9 F2 93 4C 11 37 E0 30 94 5A 47 C1 17 86 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 183.253.58.137:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.253.58.137 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 E6 E7 30 F0 1A 79 01 CD 0C 70 D4 45 AA 4E CC 0C 12 D6 63 8B B9 6D 2A 52 FB C3 EF 81 7E -"Time": 2092/9/19 19:28:28 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:09:58.463 -Connection: close -EndTime: 09:09:58.620 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 E6 6B B4 02 F8 CC 94 FD 0E 27 06 8E A3 3A A8 16 00 EA CF A3 33 04 4B 19 05 79 B4 6A F2 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 112.51.121.251:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.51.121.251 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 E6 1C 09 51 C3 F6 77 C4 6B F9 31 41 35 9F 50 79 9B 0C C0 D2 54 8E A7 FC 06 39 4E E4 3F -"Time": 2092/9/19 19:28:28 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:09:58.652 -Connection: close -EndTime: 09:09:58.786 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 E6 44 39 B1 6B D1 8D 0E ED 9D B4 0B A2 67 5E D2 DF D3 A3 B0 41 50 A5 4C 51 9B 76 3F 7E -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 112.30.197.137:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.30.197.137 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 E6 48 43 6A 8E 6A C4 38 A6 38 CA E5 27 EE 81 8B 24 C6 16 6F 39 9F 37 E4 50 74 99 40 0A -"Time": 2092/9/19 19:28:28 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:09:58.825 -Connection: close -EndTime: 09:09:58.969 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 E6 3A 51 3E EF 1F 7A 0E 90 8C D6 F9 2F D6 4A A2 70 D3 2B A7 51 D8 3C 98 F4 18 27 07 D5 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 112.28.196.101:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.28.196.101 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 E7 FE 82 17 C3 31 D0 70 29 8C F9 43 5B 2C B5 80 AC B8 06 B5 5D 21 C2 E1 48 72 9F 08 06 -"Time": 2093/4/1 23:48:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:09:59.012 -Connection: close -EndTime: 09:09:59.164 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 E7 08 8D C8 88 9E 92 66 A2 97 D7 92 A0 E4 3D EC BD 96 6A E1 5E DA AD 06 22 83 72 EA 4B -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 114.112.160.32:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 114.112.160.32 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 E7 C0 DF 19 4E EF 83 A7 8F AC E0 07 17 83 49 85 28 B6 40 E3 34 C9 01 94 9D E1 07 3B 63 -"Time": 2093/4/1 23:48:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:09:59.209 -Connection: close -EndTime: 09:09:59.323 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 E7 80 42 F5 F6 FC 77 46 DC 0C 18 D8 3E D0 91 A8 CB A4 92 89 17 87 E3 EE 9F 0E B1 B6 EC -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 182.34.127.23:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 182.34.127.23 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 E7 F8 89 0B 67 41 A6 F2 76 D3 12 69 38 BB BC E8 5D A5 44 BA 93 0C 2A BD 29 30 C3 5A 4E -"Time": 2093/4/1 23:48:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:09:59.371 -Connection: close -EndTime: 09:10:00.197 -ClientToServerBytes: 778 -ServerToClientBytes: 113 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 E7 F2 88 DA 76 EF D8 C1 5B 2B 71 69 87 9F 7C 2A E0 BE 06 5B B5 9F 6A B6 47 E9 07 B7 A2 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 27.36.62.28:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 27.36.62.28 - - -HTTP/1.1 502 Fiddler - Connection Failed -Date: Wed, 26 Dec 2018 01:10:21 GMT -Content-Type: text/html; charset=UTF-8 -Connection: close -Cache-Control: no-cache, must-revalidate -Timestamp: 09:10:21.199 - -[Fiddler] The connection to '27.36.62.28' failed.
    Error: TimedOut (0x274c).
    System.Net.Sockets.SocketException 由于连接方在一段时间后没有正确答复或连接的主机没有反应，连接尝试失败。 27.36.62.28:443 - ------------------------------------------------------------------- - -CONNECT 183.131.124.39:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.131.124.39 - - -HTTP/1.1 502 Fiddler - Connection Failed -Date: Wed, 26 Dec 2018 01:10:22 GMT -Content-Type: text/html; charset=UTF-8 -Connection: close -Cache-Control: no-cache, must-revalidate -Timestamp: 09:10:22.307 - -[Fiddler] The connection to '183.131.124.39' failed.
    Error: ConnectionRefused (0x274d).
    System.Net.Sockets.SocketException 由于目标计算机积极拒绝，无法连接。 183.131.124.39:443 - ------------------------------------------------------------------- - -CONNECT 183.216.176.116:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.216.176.116 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 FE DA F7 45 39 58 C8 19 48 87 03 A9 C1 92 DA FB 4E 28 5D BC 94 34 25 87 80 B6 33 0E 98 -"Time": 2105/6/25 3:34:52 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:10:22.338 -Connection: close -EndTime: 09:10:22.460 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 FE FA 44 AB 27 22 25 03 37 D5 D3 78 4A 5C 93 4F 52 85 04 97 99 58 FA B0 55 A6 D6 CB 3F -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 36.250.248.254:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 36.250.248.254 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D4 FE 9F 2B 4A 93 EF B5 73 3B FF F0 AC F4 7B 60 DB FF 10 B0 2B 66 B9 27 8C 74 71 2B 60 BA -"Time": 2105/6/25 3:34:52 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:10:22.483 -Connection: close -EndTime: 09:10:22.581 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D4 FE A9 EB ED 47 4B 09 4C D6 8A 3D 8B 86 DF 67 5C EB E4 1F 97 1B DE BF EE 96 1E 11 D1 6D -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 123.183.164.40:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 123.183.164.40 - - -HTTP/1.1 502 Fiddler - Connection Failed -Date: Wed, 26 Dec 2018 01:10:43 GMT -Content-Type: text/html; charset=UTF-8 -Connection: close -Cache-Control: no-cache, must-revalidate -Timestamp: 09:10:43.585 - -[Fiddler] The connection to '123.183.164.40' failed.
    Error: TimedOut (0x274c).
    System.Net.Sockets.SocketException 由于连接方在一段时间后没有正确答复或连接的主机没有反应，连接尝试失败。 123.183.164.40:443 - ------------------------------------------------------------------- - -CONNECT 117.148.128.254:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 117.148.128.254 - - -HTTP/1.1 502 Fiddler - Connection Failed -Date: Wed, 26 Dec 2018 01:11:04 GMT -Content-Type: text/html; charset=UTF-8 -Connection: close -Cache-Control: no-cache, must-revalidate -Timestamp: 09:11:04.597 - -[Fiddler] The connection to '117.148.128.254' failed.
    Error: TimedOut (0x274c).
    System.Net.Sockets.SocketException 由于连接方在一段时间后没有正确答复或连接的主机没有反应，连接尝试失败。 117.148.128.254:443 - ------------------------------------------------------------------- - -CONNECT 111.178.233.87:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 111.178.233.87 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D5 28 87 D6 38 EC B9 5A 1C FD 32 43 8B 35 80 D0 B4 B6 B0 4D 82 DB 11 6A A4 82 07 C9 16 CE -"Time": 1991/9/17 5:30:04 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:11:04.627 -Connection: close -EndTime: 09:11:04.716 -ClientToServerBytes: 853 -ServerToClientBytes: 5983 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D5 28 6C 48 58 B3 29 8C B5 95 1C C6 16 5D 6E DF D0 2E 99 DA 11 C3 15 5E 0A 91 D0 FE 6D 91 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 111.178.233.87:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 111.178.233.87 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D5 28 45 FA 01 0D 7E D9 1F AD 98 2D CE C1 B9 8D D2 66 3F 60 E5 14 09 49 F9 22 6A A6 8D EF -"Time": 1991/9/17 5:30:04 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:11:04.742 -Connection: close -EndTime: 09:11:04.803 -ClientToServerBytes: 778 -ServerToClientBytes: 150 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D5 28 AD F5 24 9B D2 51 7D 8D 28 CB 0A E8 50 94 04 AF 19 3B C2 E4 8D BB CE 59 01 7E C6 60 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 150.138.167.52:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 150.138.167.52 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D5 28 3E 5B 6F DC BA 70 85 23 57 1E C3 B7 BD 72 AA 33 D4 A1 45 E1 4E 85 DE 9B 81 37 7A 65 -"Time": 1991/9/17 5:30:04 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket 29 F6 31 30 9E 26 AE 84 B8 22 AD 38 DB 59 1B 96 DB 33 31 86 BD 88 40 1F 89 27 2F 3A 13 8A 2D 20 36 DD 69 9A 1C 2B BF 44 86 25 90 43 CE 66 66 EC 8B 0C 3D 08 A5 93 DC E0 C5 39 E5 43 A0 8F B8 E1 3F D6 A8 C6 96 89 05 E6 D9 39 BB ED 21 5E 73 A4 79 2D B5 9D 6E 9A 89 09 94 0A 24 FF 68 7D 07 54 85 8A 32 CA 0B 16 D0 B2 7A 49 EB 28 30 1C 0F C6 5D 2F BE FD 23 6D C6 F3 E8 DF 13 A9 5B 76 B0 89 6B 45 06 B7 03 55 F4 62 5E 3B 63 DD 1A 58 89 58 10 4A 98 C4 42 47 F2 D1 29 C3 98 19 41 C4 72 88 A1 76 39 E8 31 38 60 2E 9A A7 20 02 AA 4C 0A 81 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:11:04.855 -Connection: close -EndTime: 09:11:05.212 -ClientToServerBytes: 853 -ServerToClientBytes: 9446 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D5 28 01 22 47 B2 5A 1B 51 56 EC 60 8B F6 1B BB 52 0E 53 60 54 AD 44 CA B8 F7 C8 09 55 2C -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 103.254.188.216:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 103.254.188.216 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D5 29 A2 DC 9D DD C0 4B E4 31 22 F5 AB 03 4D 5E 27 4B 1B 96 A5 59 05 A3 1D 8D B8 7D CB 05 -"Time": 1992/3/29 9:50:20 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket C5 66 CD 42 D7 91 90 AE B3 69 E8 5A 93 D4 85 80 5D 85 CD 2F 6D 91 93 26 01 24 BA BD 84 CF 7D 5B 60 23 A9 12 92 75 C3 15 E9 EB 91 E1 E8 36 C5 AB 5F BF A0 6F F8 D1 56 9C 3D 00 3D B7 C9 DF 3E 08 08 B8 12 9F DA E1 5F E2 EF 3F B0 F4 E8 75 8B 40 99 FF 14 49 82 5C F0 B1 FB D7 54 D1 0F 5E 09 91 41 37 B6 2F 45 76 62 5A C6 B3 6F 41 03 FD 5D 4C 28 17 59 BE 0E C6 32 27 F5 C1 04 4D BB 66 B9 29 E8 88 E5 8E 16 D9 53 8B 7D 48 31 C3 7D E6 3A 10 FA F9 03 92 86 5E E7 66 B1 18 08 83 CA 12 26 29 C1 55 E1 0A A0 96 95 81 95 D7 D9 35 82 7D 24 46 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:11:05.261 -Connection: close -EndTime: 09:11:05.567 -ClientToServerBytes: 820 -ServerToClientBytes: 7626 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 12 91 91 F2 46 6D 43 1E 3B AB 1A E5 FB 81 29 9B 8D A6 85 8E E5 01 2C CA 42 CF B5 3E 2E D8 0B A1 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA [0xC013] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - extended_master_secret empty - - - ------------------------------------------------------------------- - -CONNECT 122.70.142.252:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 122.70.142.252 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D5 29 10 1B 8F A3 A1 8E D2 BB 35 AF D5 C8 AB 1C 55 FD 8E E4 89 2E 69 2D 38 8B 7C A7 FB E2 -"Time": 1992/3/29 9:50:20 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket B3 3B 0F CF 45 B3 0B 04 58 77 88 C1 7F 14 42 92 B7 B4 6B B0 22 2C 9C 4A D6 99 AF 06 06 59 84 FC 71 5F 6D 73 66 D6 D8 1E F9 DF 18 D6 09 B2 53 52 3A 28 05 EE E5 68 16 66 16 2C F7 CE 02 EA D4 49 C1 CB 3F 9D 0A 20 CF 70 51 13 12 60 39 9B D0 1E 0E 96 D1 2D 1C AF E7 F8 B1 7F A1 2D F4 66 B2 F5 2F 74 5B 62 DE 4C 62 56 F6 ED D9 FC 88 00 DF 44 9E 87 80 96 97 CF A4 7F A3 23 BB 2E 03 C7 D5 7C 48 DD A7 BC F2 D7 01 17 68 A0 6C A6 D1 9A AF 3C DF 1F B0 EE E0 D0 65 03 51 D2 77 6D 49 CE 14 4A E7 64 8E E0 FD 12 7D BC 04 B4 51 D0 5D D1 82 1C 0C 60 66 6D 93 16 5D F5 5F 7C 15 DA 9A 46 C7 C4 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:11:05.637 -Connection: close -EndTime: 09:11:06.441 -ClientToServerBytes: 443 -ServerToClientBytes: 3282 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D5 29 A2 66 F1 55 08 1D E9 8E 33 36 CC 2F C2 5F 28 D3 22 B8 21 2A E0 17 3E DA E5 30 C6 33 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 58.221.28.53:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 58.221.28.53 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D5 2A 47 F6 CA 7C 8D 61 C1 75 B2 48 26 B5 B8 1F 5F 1B 4D 14 44 00 AF 75 F5 46 D8 41 20 2E -"Time": 1992/10/9 14:10:36 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket empty - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:11:06.486 -Connection: close -EndTime: 09:11:06.775 -ClientToServerBytes: 677 -ServerToClientBytes: 9504 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D5 2A 3B 09 3F 50 B1 0B 05 F1 15 F7 90 2B 3D 68 08 AA 97 4D BA 2F CC 72 23 A0 EB 63 98 4B -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 42.81.144.78:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 42.81.144.78 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D5 2A 28 5D 14 4A 4B 61 CE 35 0F 8C 13 2D 26 36 E3 E2 03 B0 32 A9 AF 49 43 E8 94 36 2D BD -"Time": 1992/10/9 14:10:36 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:11:06.821 -Connection: close -EndTime: 09:11:07.000 -ClientToServerBytes: 853 -ServerToClientBytes: 9520 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D5 2A AF B8 F1 1D A2 F9 F6 F3 B9 2C 70 F5 23 C8 F9 3F 34 D9 0B 95 4C 3D 6B E8 D7 D6 7C DA -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 183.56.168.252:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.56.168.252 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D5 2B 41 9E 61 B8 A7 19 10 08 8D 1C 95 A2 71 80 DB C6 BC 0A F2 01 A4 76 E6 DE D6 12 E6 78 -"Time": 1993/4/21 18:30:52 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:11:07.023 -Connection: close -EndTime: 09:11:07.084 -ClientToServerBytes: 853 -ServerToClientBytes: 3614 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D5 2A 96 7F B9 B7 88 80 EE EE AF 6B 70 EA EE FD 95 AA 29 38 44 2E 19 9C E3 C7 9C 09 44 33 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 183.56.168.252:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.56.168.252 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D5 2B 53 43 55 07 52 F5 68 3E 24 86 08 99 E5 EF A0 A3 10 70 EA 9B 4C AA 32 15 06 92 7B 82 -"Time": 1993/4/21 18:30:52 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:11:07.107 -Connection: close -EndTime: 09:11:07.144 -ClientToServerBytes: 778 -ServerToClientBytes: 150 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D5 2B 83 46 16 90 DA 28 0F 58 D9 B8 73 0F 15 96 8B DF A3 EA 39 23 83 A2 56 E0 77 14 DD 2F -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 106.120.178.19:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 106.120.178.19 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D5 2B BB 26 FE 84 FF 71 B3 18 19 83 69 1B 1B AF D4 48 1B 27 37 16 81 81 9E C8 8F 4D 83 6E -"Time": 1993/4/21 18:30:52 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:11:07.193 -Connection: close -EndTime: 09:11:07.569 -ClientToServerBytes: 853 -ServerToClientBytes: 9520 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D5 2B E6 7D 0C 5D 27 BE AC 83 57 4E 3E FF C8 FC 77 38 54 FC DC A7 01 D5 D7 74 4B A0 A4 14 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 111.161.22.16:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 111.161.22.16 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D5 2B CF AD 6C 77 BA E6 C8 EE C6 6B 2B A7 CF EF C9 D0 62 2A E6 E0 FF D8 81 4D 4A F5 F9 43 -"Time": 1993/4/21 18:30:52 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:11:07.609 -Connection: close -EndTime: 09:11:07.733 -ClientToServerBytes: 778 -ServerToClientBytes: 6032 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D5 2B 16 C0 3A F5 DB 69 4A 05 DD F6 7B E8 8E 0C 3A 36 11 DF 99 4F 70 04 01 6E 83 6F 66 14 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 112.240.60.252:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.240.60.252 - - -HTTP/1.1 502 Fiddler - Connection Failed -Date: Wed, 26 Dec 2018 01:11:28 GMT -Content-Type: text/html; charset=UTF-8 -Connection: close -Cache-Control: no-cache, must-revalidate -Timestamp: 09:11:28.737 - -[Fiddler] The connection to '112.240.60.252' failed.
    Error: TimedOut (0x274c).
    System.Net.Sockets.SocketException 由于连接方在一段时间后没有正确答复或连接的主机没有反应，连接尝试失败。 112.240.60.252:443 - ------------------------------------------------------------------- - -CONNECT 183.236.28.251:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.236.28.251 - - -HTTP/1.1 502 Fiddler - Connection Failed -Date: Wed, 26 Dec 2018 01:11:49 GMT -Content-Type: text/html; charset=UTF-8 -Connection: close -Cache-Control: no-cache, must-revalidate -Timestamp: 09:11:49.743 - -[Fiddler] The connection to '183.236.28.251' failed.
    Error: TimedOut (0x274c).
    System.Net.Sockets.SocketException 由于连接方在一段时间后没有正确答复或连接的主机没有反应，连接尝试失败。 183.236.28.251:443 - ------------------------------------------------------------------- - -CONNECT 183.56.172.35:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.56.172.35 - - -HTTP/1.1 502 Fiddler - Connection Failed -Date: Wed, 26 Dec 2018 01:12:10 GMT -Content-Type: text/html; charset=UTF-8 -Connection: close -Cache-Control: no-cache, must-revalidate -Timestamp: 09:12:10.748 - -[Fiddler] The connection to '183.56.172.35' failed.
    Error: TimedOut (0x274c).
    System.Net.Sockets.SocketException 由于连接方在一段时间后没有正确答复或连接的主机没有反应，连接尝试失败。 183.56.172.35:443 - ------------------------------------------------------------------- - -CONNECT 58.221.28.51:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 58.221.28.51 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D5 6A 26 E7 12 97 3F 23 23 BF C1 E3 C0 4F 46 48 CC C7 3D 19 AA 53 45 6D CC 93 00 42 B8 36 -"Time": 2026/10/19 3:47:40 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:12:10.785 -Connection: close -EndTime: 09:12:10.917 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D5 6A 9F 9C 18 2D D8 E3 DC 3B 2C CF 8E 61 2A C8 4F 7B 43 C0 C7 69 46 A5 60 C8 CE 1E 02 8A -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 101.66.224.248:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 101.66.224.248 - - -HTTP/1.1 502 Fiddler - Connection Failed -Date: Wed, 26 Dec 2018 01:12:31 GMT -Content-Type: text/html; charset=UTF-8 -Connection: close -Cache-Control: no-cache, must-revalidate -Timestamp: 09:12:31.921 - -[Fiddler] The connection to '101.66.224.248' failed.
    Error: TimedOut (0x274c).
    System.Net.Sockets.SocketException 由于连接方在一段时间后没有正确答复或连接的主机没有反应，连接尝试失败。 101.66.224.248:443 - ------------------------------------------------------------------- - -CONNECT 61.149.22.254:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 61.149.22.254 - - -HTTP/1.1 502 Fiddler - Connection Failed -Date: Wed, 26 Dec 2018 01:12:52 GMT -Content-Type: text/html; charset=UTF-8 -Connection: close -Cache-Control: no-cache, must-revalidate -Timestamp: 09:12:52.924 - -[Fiddler] The connection to '61.149.22.254' failed.
    Error: TimedOut (0x274c).
    System.Net.Sockets.SocketException 由于连接方在一段时间后没有正确答复或连接的主机没有反应，连接尝试失败。 61.149.22.254:443 - ------------------------------------------------------------------- - -CONNECT 183.62.114.157:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.62.114.157 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D5 94 33 77 F6 A6 49 96 57 69 5D DA A3 A5 6C 45 7F 6A EB 80 D5 C2 9A 96 D4 C8 0A 8A 5A 58 -"Time": 2049/2/15 17:58:52 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:12:52.941 -Connection: close -EndTime: 09:12:53.004 -ClientToServerBytes: 853 -ServerToClientBytes: 1869 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D5 94 A3 62 FB A7 19 14 6D 88 62 AE 7E 2E 18 CB 8F 88 FA 17 CE 05 34 53 7B 79 40 C4 A3 2B -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 183.62.114.157:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.62.114.157 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D5 95 9F C3 CA 41 EC D9 DA 78 59 BA 6E 73 A5 8E 56 D1 41 DD D9 55 BA E0 F7 96 24 46 00 C4 -"Time": 2049/8/28 22:19:08 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket 13 DA 96 2D 81 B7 51 DB 58 D4 17 B0 0E EE 94 D0 82 2E 09 11 21 2E F5 97 2E CF C9 D7 B8 09 43 33 09 05 83 D1 03 CD 2F 0A 04 26 9C D5 F0 8B DB 5E 30 8F FD 18 84 AE 41 DB A8 71 E9 EA 59 CD 14 E1 D3 C6 4B B6 BC 37 77 EA A4 AD 04 0A C7 4E 9B ED 2C 4A 17 E3 BB EB 1D 01 27 A6 8F 89 0A 5B A9 7E AA E3 B8 A9 4A 1B E6 16 82 8D 8F B6 60 ED 41 9C D6 82 D2 14 D2 B4 30 16 D5 C0 B5 BB D5 AB D2 73 F5 01 FD FC 29 1E C1 33 83 10 9C 61 A4 81 68 A5 47 46 E6 A0 DC 68 8A 6D B3 A2 61 82 82 40 E7 7D E2 20 FF 71 F3 16 4A 20 BE 28 99 91 93 8B D2 05 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:12:53.014 -Connection: close -EndTime: 09:12:53.063 -ClientToServerBytes: 853 -ServerToClientBytes: 1869 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D5 94 5C 5A 4A 80 62 1B 12 5A 3B F4 6A 7C 21 43 1A 49 DE 6F 56 09 5E D8 AB B9 00 06 3E 27 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 111.161.122.67:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 111.161.122.67 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D5 95 90 E4 5E E8 A8 BC 2B BB 83 09 C7 94 C1 B6 15 88 0D 47 D6 1A 44 A2 B4 DA 4F CF C2 6E -"Time": 2049/8/28 22:19:08 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:12:53.104 -Connection: close -EndTime: 09:12:53.285 -ClientToServerBytes: 853 -ServerToClientBytes: 9541 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D5 95 72 3B 73 47 AA 46 CE D1 65 E6 7A 4E CA D3 D8 3B DF 31 FE 4F 5B 31 FB E9 31 CF CB 1D -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 111.161.22.17:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 111.161.22.17 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D5 95 B4 87 18 25 07 9D 44 74 91 6F 2F BF BC B1 D2 F5 44 68 8D A1 C1 70 1C 85 7B B8 08 9E -"Time": 2049/8/28 22:19:08 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:12:53.324 -Connection: close -EndTime: 09:12:53.463 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D5 95 A7 6F E4 9F 74 C5 B5 A0 95 BC 0E 60 29 46 80 DA 31 65 74 A6 E8 FE 3E B3 A1 0B 50 BF -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 58.223.164.231:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 58.223.164.231 - - -HTTP/1.1 502 Fiddler - Connection Failed -Date: Wed, 26 Dec 2018 01:12:54 GMT -Content-Type: text/html; charset=UTF-8 -Connection: close -Cache-Control: no-cache, must-revalidate -Timestamp: 09:12:54.558 - -[Fiddler] The connection to '58.223.164.231' failed.
    Error: ConnectionRefused (0x274d).
    System.Net.Sockets.SocketException 由于目标计算机积极拒绝，无法连接。 58.223.164.231:443 - ------------------------------------------------------------------- - -CONNECT 183.56.172.124:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.56.172.124 - - -HTTP/1.1 502 Fiddler - Connection Failed -Date: Wed, 26 Dec 2018 01:13:15 GMT -Content-Type: text/html; charset=UTF-8 -Connection: close -Cache-Control: no-cache, must-revalidate -Timestamp: 09:13:15.562 - -[Fiddler] The connection to '183.56.172.124' failed.
    Error: TimedOut (0x274c).
    System.Net.Sockets.SocketException 由于连接方在一段时间后没有正确答复或连接的主机没有反应，连接尝试失败。 183.56.172.124:443 - ------------------------------------------------------------------- - -CONNECT 111.161.22.18:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 111.161.22.18 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D5 AB CF 79 CC B4 6F D0 21 3B 2E 81 3C FE E0 9C 93 8A B1 E6 7D 1D FC 1C 9F 5D 38 CB 70 44 -"Time": 2061/5/9 21:45:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:13:15.604 -Connection: close -EndTime: 09:13:15.739 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D5 AB 9B 65 9F 1C EA 40 39 C5 D5 31 1A 25 BF 5B 9F A2 8D F5 39 06 7D B3 B6 E6 E0 61 3E D3 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 183.222.101.236:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.222.101.236 - - -HTTP/1.1 502 Fiddler - Connection Failed -Date: Wed, 26 Dec 2018 01:13:36 GMT -Content-Type: text/html; charset=UTF-8 -Connection: close -Cache-Control: no-cache, must-revalidate -Timestamp: 09:13:36.744 - -[Fiddler] The connection to '183.222.101.236' failed.
    Error: TimedOut (0x274c).
    System.Net.Sockets.SocketException 由于连接方在一段时间后没有正确答复或连接的主机没有反应，连接尝试失败。 183.222.101.236:443 - ------------------------------------------------------------------- - -CONNECT 183.56.172.34:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.56.172.34 - - -HTTP/1.1 502 Fiddler - Connection Failed -Date: Wed, 26 Dec 2018 01:13:37 GMT -Content-Type: text/html; charset=UTF-8 -Connection: close -Cache-Control: no-cache, must-revalidate -Timestamp: 09:13:37.777 - -[Fiddler] The connection to '183.56.172.34' failed.
    Error: ConnectionRefused (0x274d).
    System.Net.Sockets.SocketException 由于目标计算机积极拒绝，无法连接。 183.56.172.34:443 - ------------------------------------------------------------------- - -CONNECT 36.25.241.156:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 36.25.241.156 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D5 C1 81 29 DF EC A2 59 80 F1 D3 04 F3 94 EA 6D C2 47 A2 79 EE 0D CD 14 97 4B 97 F6 51 6C -"Time": 2073/1/18 21:10:52 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:13:37.814 -Connection: close -EndTime: 09:13:37.937 -ClientToServerBytes: 853 -ServerToClientBytes: 5983 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D5 C1 CB 06 46 DC 63 88 48 3A 99 92 83 A9 2F D8 4B 72 C4 0F 9C EF A5 4D 0A 4E D1 AF 91 C8 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 36.25.241.156:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 36.25.241.156 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D5 C1 4E 24 F0 98 15 56 EC B5 A7 34 5E E1 36 16 78 86 E4 80 77 AD 1F C9 AF 3F 95 86 9E BB -"Time": 2073/1/18 21:10:52 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:13:37.973 -Connection: close -EndTime: 09:13:38.099 -ClientToServerBytes: 853 -ServerToClientBytes: 5983 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D5 C1 36 F6 85 C5 6D BE 81 25 80 9C 54 0A FF EC 69 EE 6B 39 3D CF A7 23 CE 45 EE 3F 27 52 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 112.240.60.172:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.240.60.172 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D5 C2 93 A7 BC 53 DE AC 38 69 B7 53 66 08 33 CB 2E 52 2A 00 BF BE A0 47 08 78 25 15 BE 12 -"Time": 2073/8/1 1:31:08 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket 63 84 CD 25 4D 4D 66 6D 20 30 4E 90 AF 24 88 23 1E F9 D6 F8 B1 9E 7A 2C 60 FF 47 46 E1 54 E8 EA 13 CB FA 46 18 F1 E6 60 9F 4C F5 B1 57 AF 62 F4 84 FC C8 26 A9 EA 2A DD 99 1F DD EA 29 9D 70 F2 C4 33 20 04 56 BC C5 F9 96 DF 4C BB 6D F7 1F 8A 79 62 DD 52 B3 51 A5 70 B1 3C D1 92 88 61 24 11 CC A9 24 95 E5 DB C0 D1 BB 20 C5 CC EF B7 0D 1D C6 B1 F6 F0 EB 4B 2D FA F0 D7 60 6E F4 22 2D 77 0E 47 43 02 52 D8 AC 68 E4 3C 06 B8 E0 5B 30 D3 37 07 90 89 D2 EA DC 4B 8E B1 3B D7 51 74 89 3F B9 4C F7 0B 7D 4E 05 D8 2B 51 D5 AC F8 50 0A 39 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:13:38.142 -Connection: close -EndTime: 09:13:38.313 -ClientToServerBytes: 853 -ServerToClientBytes: 9520 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D5 C2 AB EA A0 95 15 57 E9 E7 04 50 58 97 04 02 80 7F 13 84 4C 85 B8 98 14 B8 B4 C0 C9 21 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 14.18.17.241:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 14.18.17.241 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D5 C2 67 BD 34 93 1A 4B F5 12 20 31 D4 4A FC BE 7F 07 93 D5 87 FB 27 47 4A 9F BF CE DE 43 -"Time": 2073/8/1 1:31:08 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:13:38.325 -Connection: close -EndTime: 09:13:38.363 -ClientToServerBytes: 853 -ServerToClientBytes: 5983 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D5 C2 C0 E9 09 4F 55 4D 5D 96 A5 62 E1 86 C2 1B 10 67 92 FC EA 73 F0 63 12 51 C6 46 E6 2C -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 14.18.17.241:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 14.18.17.241 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D5 C2 6B E6 88 B5 04 68 7D B5 63 50 92 E0 B0 9A 0D 7C F3 84 AC 15 CB 6A DA 12 CA 0E 23 83 -"Time": 2073/8/1 1:31:08 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket 07 55 31 E9 CC 6A E0 C3 F8 E4 BA 07 6F DF CE 39 BB 51 53 A5 D5 76 3C 7F 62 A5 E0 1D 23 AA 66 D2 2F 3F E0 FB AE B4 43 58 E4 F0 ED 87 70 5E 21 D3 78 D1 F4 8A 62 29 5D 8E E9 95 9D 68 1C FC F9 01 BA FE 56 72 28 81 8D FA 6A 97 05 4A 5D 40 87 1D A5 EF F7 4C 8E 34 FD 2A FB D4 B1 EF E7 14 34 16 11 68 34 DB 87 DA 50 19 7C 16 5F 6C EA 86 FB E9 64 DD 83 6C AA E1 19 82 18 94 B2 98 11 E3 5E 1E 7E D6 73 52 D3 5E E5 3D 09 C6 F7 65 D6 84 0F CD CB 30 C0 19 21 1B F5 ED A7 5B A5 E4 4C FF 8B 48 DA 41 D6 C5 13 0B ED 9E 93 FE 86 D5 CF A4 B7 A9 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:13:38.371 -Connection: close -EndTime: 09:13:38.396 -ClientToServerBytes: 778 -ServerToClientBytes: 150 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D5 C2 31 95 7F 5F 8D 5B 60 6E D7 7D B1 A9 29 F1 B5 BE B8 1A 7C 64 92 00 58 B9 65 EE D0 DD -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 222.186.145.101:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 222.186.145.101 - - -HTTP/1.1 502 Fiddler - Connection Failed -Date: Wed, 26 Dec 2018 01:13:59 GMT -Content-Type: text/html; charset=UTF-8 -Connection: close -Cache-Control: no-cache, must-revalidate -Timestamp: 09:13:59.401 - -[Fiddler] The connection to '222.186.145.101' failed.
    Error: TimedOut (0x274c).
    System.Net.Sockets.SocketException 由于连接方在一段时间后没有正确答复或连接的主机没有反应，连接尝试失败。 222.186.145.101:443 - ------------------------------------------------------------------- - -CONNECT 60.18.86.100:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 60.18.86.100 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D5 D7 75 A9 C2 9A 1D 30 94 E4 A7 34 48 35 03 FE 53 C9 A4 EF 1A FC 6B 95 E1 BE CD 83 64 9C -"Time": 2084/9/29 20:36:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:13:59.470 -Connection: close -EndTime: 09:13:59.810 -ClientToServerBytes: 853 -ServerToClientBytes: 9409 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D5 D7 85 7A 3C 69 14 63 BF 47 9B 48 C3 0E 9B 6A 9F CE AA E5 59 98 A9 4A FF 62 A4 2A 5E B4 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 117.161.66.125:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 117.161.66.125 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D5 D7 EB 30 5E DC F6 5D 21 26 A6 F8 1D AE 3D E4 15 62 6F 2A 77 82 1C E1 DC B2 C6 0E 37 91 -"Time": 2084/9/29 20:36:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:13:59.868 -Connection: close -EndTime: 09:14:00.154 -ClientToServerBytes: 853 -ServerToClientBytes: 9541 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D5 D7 50 1C 68 57 DE F5 93 84 A7 81 4B 6B 8A C6 DD 86 1B 07 C6 F9 85 96 3E 34 B5 9C DB 56 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 111.161.22.19:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 111.161.22.19 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D5 D8 6E 2A 41 DF D8 E4 23 BD 6B 32 35 B1 48 B0 22 A6 2A F7 2E FD 02 13 5C F0 A4 65 C5 F7 -"Time": 2085/4/12 0:57:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:14:00.193 -Connection: close -EndTime: 09:14:00.318 -ClientToServerBytes: 778 -ServerToClientBytes: 6069 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D5 D8 02 AE 94 75 FA EC 0D DB C7 AA E7 85 B1 64 04 AC 99 55 D7 1A 76 1A 8B A8 9F E5 21 9B -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 113.142.88.31:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 113.142.88.31 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D5 D8 18 4D 8D 79 82 85 CA 18 19 23 EC A9 00 AD E8 26 DC FB 57 B0 6A 8E 60 B3 E9 14 EC DD -"Time": 2085/4/12 0:57:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 13 C1 14 13 09 F5 6A 39 10 05 A4 9E 0B 20 97 23 D4 0B FB 0E A7 4F 16 5B 1F 23 CB DB DE F7 60 B6 71 A4 67 5D D0 D1 3A 15 87 2C 78 89 34 A1 88 D9 27 C8 66 5D 08 01 5C D4 7E 1E 0A 46 88 E9 E4 0A 98 D3 82 33 60 7B 09 D6 AB 2A 3C CC C7 69 9E 3A 80 30 43 5C 13 5D EF FD F4 C2 8A 63 72 BE AC 00 19 97 95 40 2F C2 B9 EA 89 53 92 2D A0 2E 8B 47 BF F8 9D 57 75 EC 3A BF 11 29 36 30 85 6C D7 09 E1 E5 0A F9 EF 41 84 A5 E0 4F 55 AF 70 F5 77 11 65 27 C1 CC AF 77 19 F3 90 B6 B6 03 13 F8 4D 49 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:14:00.361 -Connection: close -EndTime: 09:14:00.601 -ClientToServerBytes: 853 -ServerToClientBytes: 9446 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D5 D8 03 6C F3 ED DC 13 B8 24 C0 C8 29 F6 F8 FF F5 DD 7F 48 FE A1 6D 5A 61 F7 41 CC CB EF -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 60.174.241.96:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 60.174.241.96 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D5 D8 02 1D 72 F0 CC FD 7C 12 FE 8B E2 24 D8 B0 31 F8 1D E8 F8 93 DD 12 6A 74 37 8F 57 4A -"Time": 2085/4/12 0:57:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:14:00.648 -Connection: close -EndTime: 09:14:00.943 -ClientToServerBytes: 853 -ServerToClientBytes: 9504 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D5 D8 FF 9B 72 A3 47 4C 92 F1 C8 4E A9 AE 1A 74 07 B9 0C 16 5C 3A 37 8C 7D 98 2B 22 52 44 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 112.51.125.251:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.51.125.251 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D5 D8 3D 16 F8 9C 9D FC C0 3B B2 F7 A7 2F B6 AA 55 C8 5D BA 10 46 F3 41 FC 9D EE E4 7E 44 -"Time": 2085/4/12 0:57:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:14:00.969 -Connection: close -EndTime: 09:14:01.108 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D5 D8 14 C9 0B A9 EB 9E 4D D6 A2 D0 A2 BC 5B 3B 03 1C 04 54 65 6B E0 D0 F4 57 26 3B A4 13 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 112.47.20.209:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.47.20.209 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D5 D9 26 71 70 F9 4E 66 8B A0 BF A4 25 D5 03 A3 79 FC 25 87 C6 D5 CC E0 DB B3 3C C8 CA 51 -"Time": 2085/10/23 5:17:16 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:14:01.136 -Connection: close -EndTime: 09:14:01.316 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D5 D9 85 5F 29 76 AF E7 80 E8 00 E6 BB 08 1E 04 33 41 CE 58 A2 89 55 34 D4 40 AF 5A 6F 94 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 61.149.9.136:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 61.149.9.136 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D5 D9 01 4C FB DF 33 68 FF 6E A7 E6 79 E8 FB 96 05 E3 FB AA D5 65 A9 41 B9 F4 50 C0 44 3E -"Time": 2085/10/23 5:17:16 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:14:01.364 -Connection: close -EndTime: 09:14:01.496 -ClientToServerBytes: 853 -ServerToClientBytes: 5983 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D5 D9 B1 14 B5 64 28 0D 29 49 0A 0A 7A 60 70 FB CC 2B E6 69 73 A3 75 88 B1 ED 15 F4 21 C4 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 61.149.9.136:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 61.149.9.136 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D5 D9 17 E1 4A 56 8E D0 61 EA 0A E8 A8 36 83 95 F9 ED B4 1B BD D4 25 DD 30 62 67 A8 59 9A -"Time": 2085/10/23 5:17:16 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:14:01.539 -Connection: close -EndTime: 09:14:01.675 -ClientToServerBytes: 853 -ServerToClientBytes: 5983 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D5 D9 49 53 9B B6 A0 1E A8 C7 1A A3 31 76 3E F0 64 6A 3B 5D AE A8 F9 91 51 37 2B FF 6C C9 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 112.5.62.12:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.5.62.12 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D5 D9 F1 6F 0F 00 BA 79 6B 35 29 AF D5 C9 42 2D 93 BB 69 68 2C 3A A1 5D 24 D1 40 09 29 C0 -"Time": 2085/10/23 5:17:16 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:14:01.719 -Connection: close -EndTime: 09:14:02.006 -ClientToServerBytes: 853 -ServerToClientBytes: 9541 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D5 D9 B5 84 F7 0D 09 C3 82 47 A2 EA 9D 30 28 3B 6C D8 61 10 C4 9E 03 3E BC 23 7C 00 BD A2 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 183.240.52.107:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.240.52.107 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D5 DA 1C 82 81 93 AF 7C 58 6B 44 AD A3 12 2E 41 64 4E 49 14 D6 E2 0A 65 ED B3 EF 76 C2 2A -"Time": 2086/5/5 9:37:32 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:14:02.020 -Connection: close -EndTime: 09:14:02.267 -ClientToServerBytes: 778 -ServerToClientBytes: 6138 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D5 DA A8 F6 C6 5B 13 0B FD C9 1B BA 41 55 2B 6A B6 A8 9A CE 20 39 E7 67 82 67 82 B5 3B 75 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 61.147.227.52:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 61.147.227.52 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D5 DA ED 13 F5 F8 63 E2 D8 E2 41 F5 56 C0 B5 E1 BE C8 18 C6 2A 6F 93 5B 5D 19 57 8E B3 40 -"Time": 2086/5/5 9:37:32 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:14:02.305 -Connection: close -EndTime: 09:14:02.533 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D5 DA 57 83 9E F0 9F 09 A1 1B ED C3 C4 1F 08 0C 3E 73 0F 8C 77 BF BC 7C 51 26 A4 53 B5 4C -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 180.97.178.147:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 180.97.178.147 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D5 DA 43 92 35 AC 67 7E 6A 70 97 EE C5 7D EC 42 91 08 41 5D 02 DF A1 E8 6D 5A 59 67 4D 20 -"Time": 2086/5/5 9:37:32 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:14:02.569 -Connection: close -EndTime: 09:14:03.025 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D5 DA ED 90 49 5A 6D B8 AF A4 8A 34 1E 25 0E 49 04 19 B9 12 89 07 6F E1 F0 16 B9 B8 EF 2C -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 180.97.178.253:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 180.97.178.253 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D5 DB 71 AA 77 F0 E6 DE 30 04 22 E0 97 6C 4B 4A 16 58 D3 93 5A 86 63 EF 63 8C 4B 9E 0A 6B -"Time": 2086/11/15 13:57:48 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 82 1F 45 2C 3F 76 48 42 96 18 0E 27 82 80 0B 1A 12 D0 78 2E 58 74 33 C7 B8 10 57 77 2A 6F A3 C9 A7 86 E4 1A FE 5A 44 5C 13 FF 6F AB AD 14 A5 9A A2 2F 6A 96 EC 35 DF 1E 31 37 10 E4 52 D2 B3 38 EC 40 F9 EF 7C 09 07 F7 08 EB C0 BC E3 01 D3 1E 15 C1 42 BE DE C5 CD 21 F1 B9 BA 11 24 D3 53 28 60 D2 48 C8 BA F0 04 3F 43 8E 0C 67 98 57 B0 D1 D1 4F 4C DF AF AC 7A 39 43 C6 12 0D 72 D6 A5 66 18 09 BA 29 A3 6A 39 8C 77 1F 10 30 B2 41 65 33 2B 20 34 F1 E0 40 39 35 90 A1 C8 E6 03 81 EF 23 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:14:03.063 -Connection: close -EndTime: 09:14:03.391 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D5 DB 3F 18 45 12 AE 33 41 2C 58 4D AE BE 46 A0 91 4B 56 CA 0B 9A FC 05 6C 1D 09 1C 21 57 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 183.214.140.238:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.214.140.238 - - -HTTP/1.1 502 Fiddler - Connection Failed -Date: Wed, 26 Dec 2018 01:14:24 GMT -Content-Type: text/html; charset=UTF-8 -Connection: close -Cache-Control: no-cache, must-revalidate -Timestamp: 09:14:24.395 - -[Fiddler] The connection to '183.214.140.238' failed.
    Error: TimedOut (0x274c).
    System.Net.Sockets.SocketException 由于连接方在一段时间后没有正确答复或连接的主机没有反应，连接尝试失败。 183.214.140.238:443 - ------------------------------------------------------------------- - -CONNECT 58.216.109.192:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 58.216.109.192 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D5 F0 98 3B 2E FD 04 15 96 41 F9 C0 79 F7 85 A4 1E D8 33 18 CE 8E CE E2 1E 0A D1 09 D4 B9 -"Time": 2098/1/14 9:03:24 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:14:24.437 -Connection: close -EndTime: 09:14:24.660 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D5 F0 94 79 A5 DA 8A EE A9 2D 5F CA 37 9B A9 67 10 94 7D D9 94 D0 42 57 A6 6C 3E 0B 53 8E -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 183.131.124.43:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.131.124.43 - - -HTTP/1.1 502 Fiddler - Connection Failed -Date: Wed, 26 Dec 2018 01:14:45 GMT -Content-Type: text/html; charset=UTF-8 -Connection: close -Cache-Control: no-cache, must-revalidate -Timestamp: 09:14:45.662 - -[Fiddler] The connection to '183.131.124.43' failed.
    Error: TimedOut (0x274c).
    System.Net.Sockets.SocketException 由于连接方在一段时间后没有正确答复或连接的主机没有反应，连接尝试失败。 183.131.124.43:443 - ------------------------------------------------------------------- - -CONNECT 183.214.1.25:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.214.1.25 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 05 9B 91 96 10 A5 56 D5 5A 10 0D 4B 24 2C 98 C7 EC 87 87 E8 61 44 BA 51 AC 5A A2 E4 FA -"Time": 1973/2/7 15:53:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 82 1F 45 2C 3F 76 48 42 96 18 0E 27 82 80 0B 1A 12 D0 78 2E 58 74 33 C7 B8 10 57 77 2A 6F A3 C9 A7 86 E4 1A FE 5A 44 5C 13 FF 6F AB AD 14 A5 9A A2 2F 6A 96 EC 35 DF 1E 31 37 10 E4 52 D2 B3 38 EC 40 F9 EF 7C 09 07 F7 08 EB C0 BC E3 01 D3 1E 15 C1 42 BE DE C5 CD 21 F1 B9 BA 11 24 D3 53 28 60 D2 48 C8 BA F0 04 3F 43 8E 0C 67 98 57 B0 D1 D1 4F 4C DF AF AC 7A 39 43 C6 12 0D 72 D6 A5 66 18 09 BA 29 A3 6A 39 8C 77 1F 10 30 B2 41 65 33 2B 20 34 F1 E0 40 39 35 90 A1 C8 E6 03 81 EF 23 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:14:45.690 -Connection: close -EndTime: 09:14:45.938 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 05 F7 DF 39 DD 71 98 A5 CC 21 9C 15 84 05 7C B9 44 92 D9 57 A5 B9 5A B6 30 E6 65 7B 28 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 58.223.164.233:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 58.223.164.233 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 05 CF 39 23 10 02 46 0C D4 BA E6 D6 20 C2 FB AB 19 EC BD E2 78 DC DF A4 32 55 76 F9 0B -"Time": 1973/2/7 15:53:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:14:45.979 -Connection: close -EndTime: 09:14:46.228 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 06 97 36 F8 3B 21 39 88 EC C7 E1 47 5D 18 18 D0 3D 0B 0B 92 EA 21 28 46 E2 C4 54 F8 68 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 39.130.253.48:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 39.130.253.48 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 06 BF 03 35 2A 9A 44 33 ED 5C A9 1D DA B5 6D 80 B5 F7 B2 AE A9 8C 40 04 5D A1 8E 5C 0C -"Time": 1973/8/20 20:13:16 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:14:46.279 -Connection: close -EndTime: 09:14:46.455 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 06 82 B9 6D D3 66 1B BA DC CB 54 C1 FC 1F D6 67 63 A3 41 6A 3B B4 98 01 68 99 BF D2 1B -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 218.197.116.214:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 218.197.116.214 - - -HTTP/1.1 502 Fiddler - Connection Failed -Date: Wed, 26 Dec 2018 01:15:07 GMT -Content-Type: text/html; charset=UTF-8 -Connection: close -Cache-Control: no-cache, must-revalidate -Timestamp: 09:15:07.462 - -[Fiddler] The connection to '218.197.116.214' failed.
    Error: TimedOut (0x274c).
    System.Net.Sockets.SocketException 由于连接方在一段时间后没有正确答复或连接的主机没有反应，连接尝试失败。 218.197.116.214:443 - ------------------------------------------------------------------- - -CONNECT 113.16.208.251:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 113.16.208.251 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 1B 1E EA A9 81 EB 76 D2 BE 06 13 7D 0F 95 90 4C DA 3B 90 04 7E EB 2B E2 3B 2C AB 4A 42 -"Time": 1984/10/19 15:18:52 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:07.482 -Connection: close -EndTime: 09:15:07.816 -ClientToServerBytes: 853 -ServerToClientBytes: 9483 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 1B A1 98 31 45 29 A3 81 24 65 87 4E 9D B7 18 31 F5 7E 5B DF 65 CE DD 90 9A 85 C7 54 01 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 27.195.145.62:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 27.195.145.62 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 1B 40 63 B7 B6 F2 8A A3 21 53 DD DE 3D 80 4B 81 FA 13 14 2F A8 06 F3 9B 1C A3 A3 DB 2E -"Time": 1984/10/19 15:18:52 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:07.857 -Connection: close -EndTime: 09:15:08.023 -ClientToServerBytes: 853 -ServerToClientBytes: 9520 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 1B 03 E6 D5 0F CA F2 61 B9 A8 69 B8 F2 6C 93 7C 7A E5 85 EF 36 5F 55 A6 1F 8B 19 A7 39 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 59.63.241.54:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 59.63.241.54 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 1C 9B D8 22 76 83 D0 58 D7 2B CA 67 E3 57 AD E5 11 F2 62 3C 33 6F EE 7F 3F 7A 6E D2 67 -"Time": 1985/5/1 19:39:08 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:08.083 -Connection: close -EndTime: 09:15:08.344 -ClientToServerBytes: 778 -ServerToClientBytes: 6138 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 1C 6B F1 1B 03 F0 EC A1 54 98 1F 84 55 9E 88 19 6D FD CE A1 BF 15 94 A3 5A 2D 70 DB F1 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 61.188.191.34:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 61.188.191.34 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 1C BC E9 27 50 39 5A 98 5D C8 ED 9A 34 FF 8B 66 D8 B7 79 6C 75 72 CD BD BC B0 ED 1B E5 -"Time": 1985/5/1 19:39:08 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:08.399 -Connection: close -EndTime: 09:15:08.575 -ClientToServerBytes: 778 -ServerToClientBytes: 6138 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 1C 73 20 D5 FD F3 6A D2 65 F6 68 A5 DD E4 F8 2A ED 41 C9 78 48 7E D2 DD 94 C4 34 C0 AD -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 125.90.206.79:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 125.90.206.79 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 1C 2D 65 B2 0B 03 80 E4 D1 6C C7 78 BC 63 C6 75 19 A0 F1 8C 26 75 4E 2F 61 7C 9D 4C 7F -"Time": 1985/5/1 19:39:08 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F FC 01 8E 96 18 32 F5 40 70 4C 0C DD 70 79 9C C7 59 FB 11 57 F4 D6 7A 62 6C 29 46 08 5A A7 04 1E 0A 5A 76 00 04 CF 69 4B B5 E2 16 FB 18 51 81 8D C0 55 85 DD A8 D2 BC 24 D3 DD BF 8D 9F 65 F4 EE E9 BA 91 67 41 D9 32 C3 AF BB ED C4 9B 4A 7F 64 6F 5B 1C 8B 2D 58 F2 D6 EA 18 25 39 08 AB 33 E2 2A 3A 37 BD 9D DC 57 CE 52 34 EC 93 D0 15 78 D9 23 0D 7B 2B 11 A8 F4 08 44 0B 06 0A A9 03 30 B6 CE 04 DA 56 83 31 AD 1B 76 98 90 F4 DE 87 1B 01 C1 86 F7 F3 12 A6 71 E6 96 28 A8 35 E3 72 28 8D - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:08.588 -Connection: close -EndTime: 09:15:08.673 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 1C 3B 15 D1 60 F9 93 68 E3 1A 76 8C B2 4A 72 BB 5D 0E 35 30 0B 71 13 C6 80 4E 97 DD 43 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 122.70.142.175:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 122.70.142.175 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 1C A4 5B D8 E4 AA 98 A9 7F 16 54 D2 0B 93 FA 43 50 24 5F 6E 34 92 7A 24 9C D4 28 18 B2 -"Time": 1985/5/1 19:39:08 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:08.747 -Connection: close -EndTime: 09:15:08.931 -ClientToServerBytes: 778 -ServerToClientBytes: 6138 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 1C 15 E1 61 9F 00 27 60 B6 0F 61 91 C0 C2 B6 65 72 F3 E7 CA 3E CC 14 B9 C6 F6 DD 5C 92 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 117.145.179.20:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 117.145.179.20 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 1D AA 70 B8 44 D9 C5 6B F7 41 E6 92 13 23 72 FE 1A B4 77 E2 32 40 4B 8F 4E 1E 3C 15 8E -"Time": 1985/11/11 23:59:24 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:09.014 -Connection: close -EndTime: 09:15:09.240 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 1D 37 01 4E 33 6D 0A A5 D3 E2 87 BC 4E 60 1C 94 0E 5E CD CD 2B 3D 35 DF 7C FC BF 64 83 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 125.77.130.251:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 125.77.130.251 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 1D F9 D5 A5 BA E6 EA 41 6D 12 18 90 F5 CB BC 20 99 90 A1 20 63 44 5C AA E7 7C 10 0D 30 -"Time": 1985/11/11 23:59:24 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:09.283 -Connection: close -EndTime: 09:15:09.582 -ClientToServerBytes: 853 -ServerToClientBytes: 9483 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 1D 5A 30 0A AE 04 85 D3 74 09 6C 36 ED CE 87 45 77 46 3C E2 A7 6E 9E D7 3A DA FC EC 38 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 183.131.168.147:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.131.168.147 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 1D EC 42 E5 96 32 67 8A C2 63 8E CF BE A0 D9 CC 47 88 D2 B8 69 56 0A 8E 09 42 29 86 6A -"Time": 1985/11/11 23:59:24 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:09.621 -Connection: close -EndTime: 09:15:09.799 -ClientToServerBytes: 853 -ServerToClientBytes: 9504 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 1D A4 5C 20 8B 07 8C 16 C7 98 7B 63 DD 22 DE F7 D7 FF E6 E9 B3 4F 03 C5 E6 10 44 2C 13 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 125.90.206.78:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 125.90.206.78 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 1D 36 ED 88 9A C1 19 F0 B0 BD 84 AE 46 7B 04 D9 07 76 98 7D 21 A1 15 E8 85 10 EB E7 D2 -"Time": 1985/11/11 23:59:24 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:09.820 -Connection: close -EndTime: 09:15:09.924 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 1D 29 1A 83 AF AE 2B 1B 34 B7 48 CD 23 B5 1B 1C 45 74 B3 FA 0B F6 42 D3 8C A1 EF 4B 6A -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 125.64.102.193:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 125.64.102.193 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 1D 34 E2 E7 32 5F 99 9C F1 FD 49 C7 33 CE EB E3 38 0C 82 C1 26 FE 08 C9 B9 A3 A7 57 3C -"Time": 1985/11/11 23:59:24 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:09.965 -Connection: close -EndTime: 09:15:10.179 -ClientToServerBytes: 853 -ServerToClientBytes: 9446 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 1D BF 0F AE 5C 08 65 B7 DD 61 4D DF D8 0C DF 44 DC 99 15 A0 BF 4F A0 32 9F 6B 49 87 CD -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 42.81.144.77:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 42.81.144.77 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 1E 21 7B 4A D1 28 9D 69 30 35 18 66 3E D9 00 59 08 18 E9 DB D5 53 45 6E 37 EC 69 F0 EE -"Time": 1986/5/25 4:19:40 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:10.225 -Connection: close -EndTime: 09:15:10.438 -ClientToServerBytes: 853 -ServerToClientBytes: 9504 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 1E 91 EA 4E 27 4F 4D 52 E4 72 48 B2 26 67 20 4C 13 EC 27 70 59 6E 17 31 B9 C7 FD 05 D6 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 183.47.216.20:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.47.216.20 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 1E DA 5E 52 3F 25 7F 49 50 C0 FB 01 D8 94 EC 41 ED 47 5D 25 B0 52 4F 19 97 79 AC 58 0C -"Time": 1986/5/25 4:19:40 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:10.449 -Connection: close -EndTime: 09:15:10.561 -ClientToServerBytes: 853 -ServerToClientBytes: 9520 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 1E D6 49 99 20 83 88 9D AA 13 7E 01 A9 C9 E9 EA 57 48 C7 50 8B 02 64 2B 7A 5D 46 F5 C8 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 183.236.28.121:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.236.28.121 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 1E A7 FF D0 4C 99 FA 8E 4B C7 7A D7 6F 6F 26 84 76 D4 C5 E1 61 D5 E8 86 C2 C6 4D 62 2A -"Time": 1986/5/25 4:19:40 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 9B 30 92 58 7C F4 9D DE A4 B5 07 58 01 7B B5 96 10 CF 0E 3D 65 A4 E4 5C 20 0A 2E 39 76 19 8A 58 0F 21 CB CC 45 86 B8 F8 BF 36 5F E6 16 F8 D3 0E 89 C8 7F 1A C5 5E 33 30 C3 EC 27 A0 3E D8 C1 A8 91 6D A8 41 D7 75 D0 27 90 A7 A1 5B D8 2C 8C 21 EB 6D E2 C6 84 66 28 AA 82 EF FE 1C 39 2B 46 52 F7 1A EB 20 CE 2E 4D 4F D4 08 66 B4 9C AB F3 32 BD C9 83 40 18 91 F5 18 C8 DE A4 D2 77 82 AE 97 A5 41 66 83 F7 FC AB B9 B9 9F 2E A4 10 20 EA C8 C0 3B 25 6D 99 5A 23 89 A6 A5 C7 3B 1E D7 34 8A - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:10.578 -Connection: close -EndTime: 09:15:10.665 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 1E 03 4F EC FE 1D B9 43 25 5B 0E E4 2A 28 4C 17 E9 A2 BF 48 55 41 51 70 2E D8 C9 12 2E -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 110.18.244.134:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 110.18.244.134 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 1E FB D2 CE 54 AF 95 7C CE FB 62 5C A7 FD A7 1C 06 47 80 1E FD 14 49 2F F5 7B F8 F5 AE -"Time": 1986/5/25 4:19:40 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 9B 30 92 58 7C F4 9D DE A4 B5 07 58 01 7B B5 96 10 CF 0E 3D 65 A4 E4 5C 20 0A 2E 39 76 19 8A 58 0F 21 CB CC 45 86 B8 F8 BF 36 5F E6 16 F8 D3 0E 89 C8 7F 1A C5 5E 33 30 C3 EC 27 A0 3E D8 C1 A8 91 6D A8 41 D7 75 D0 27 90 A7 A1 5B D8 2C 8C 21 EB 6D E2 C6 84 66 28 AA 82 EF FE 1C 39 2B 46 52 F7 1A EB 20 CE 2E 4D 4F D4 08 66 B4 9C AB F3 32 BD C9 83 40 18 91 F5 18 C8 DE A4 D2 77 82 AE 97 A5 41 66 83 F7 FC AB B9 B9 9F 2E A4 10 20 EA C8 C0 3B 25 6D 99 5A 23 89 A6 A5 C7 3B 1E D7 34 8A - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:10.711 -Connection: close -EndTime: 09:15:10.875 -ClientToServerBytes: 778 -ServerToClientBytes: 6064 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 1E 3A 84 82 12 8B CA 9B 30 CA 88 5F 32 EE 73 B9 24 09 59 BF FF 19 61 AD 26 F1 28 DA 80 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 113.207.0.97:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 113.207.0.97 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 1E 6F 67 34 D0 93 1F 53 D3 84 F7 0A 41 14 80 28 E2 67 6A 91 6A DB D7 DB 6F BC A0 2F 54 -"Time": 1986/5/25 4:19:40 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:10.910 -Connection: close -EndTime: 09:15:11.161 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 1E 24 95 8A 31 67 B0 C6 F6 77 04 2D 20 CC 59 32 48 15 02 09 FC 09 DA 68 57 15 10 2D 89 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 221.194.180.92:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 221.194.180.92 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 1F 80 1C 32 5D 09 9F 3B E9 9F 4A 56 B9 99 6E CC 50 A2 7D FC 6E 06 4F 31 45 1C FD 5A 8E -"Time": 1986/12/5 8:39:56 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 9B 30 92 58 7C F4 9D DE A4 B5 07 58 01 7B B5 96 10 CF 0E 3D 65 A4 E4 5C 20 0A 2E 39 76 19 8A 58 0F 21 CB CC 45 86 B8 F8 BF 36 5F E6 16 F8 D3 0E 89 C8 7F 1A C5 5E 33 30 C3 EC 27 A0 3E D8 C1 A8 91 6D A8 41 D7 75 D0 27 90 A7 A1 5B D8 2C 8C 21 EB 6D E2 C6 84 66 28 AA 82 EF FE 1C 39 2B 46 52 F7 1A EB 20 CE 2E 4D 4F D4 08 66 B4 9C AB F3 32 BD C9 83 40 18 91 F5 18 C8 DE A4 D2 77 82 AE 97 A5 41 66 83 F7 FC AB B9 B9 9F 2E A4 10 20 EA C8 C0 3B 25 6D 99 5A 23 89 A6 A5 C7 3B 1E D7 34 8A - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:11.203 -Connection: close -EndTime: 09:15:11.327 -ClientToServerBytes: 778 -ServerToClientBytes: 6106 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 1F C6 40 12 31 FD F5 45 39 E0 15 0F 3C 05 C5 31 90 BB DA BC C0 F8 E5 2E 9D 50 62 D6 E2 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 117.169.93.85:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 117.169.93.85 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 1F 25 1C 59 FF D0 9B 06 24 C3 6C 93 B5 43 22 84 87 2F BC FC 8C 64 E5 D5 85 55 3E AF 17 -"Time": 1986/12/5 8:39:56 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 9B 30 92 58 7C F4 9D DE A4 B5 07 58 01 7B B5 96 10 CF 0E 3D 65 A4 E4 5C 20 0A 2E 39 76 19 8A 58 0F 21 CB CC 45 86 B8 F8 BF 36 5F E6 16 F8 D3 0E 89 C8 7F 1A C5 5E 33 30 C3 EC 27 A0 3E D8 C1 A8 91 6D A8 41 D7 75 D0 27 90 A7 A1 5B D8 2C 8C 21 EB 6D E2 C6 84 66 28 AA 82 EF FE 1C 39 2B 46 52 F7 1A EB 20 CE 2E 4D 4F D4 08 66 B4 9C AB F3 32 BD C9 83 40 18 91 F5 18 C8 DE A4 D2 77 82 AE 97 A5 41 66 83 F7 FC AB B9 B9 9F 2E A4 10 20 EA C8 C0 3B 25 6D 99 5A 23 89 A6 A5 C7 3B 1E D7 34 8A - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:11.359 -Connection: close -EndTime: 09:15:11.619 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 1F 8F 80 A1 12 53 AC 5C 6F 36 B9 EC 58 16 82 28 79 BD 64 57 7D DD 08 64 FD 5B 8B E7 B7 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 14.17.80.67:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 14.17.80.67 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 1F BF E3 0F 67 FA DF 31 CD 84 5D 0F E1 1F 73 5E F5 72 8C 14 1E F2 6F 65 A8 C9 09 1A F7 -"Time": 1986/12/5 8:39:56 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:11.628 -Connection: close -EndTime: 09:15:11.709 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 1F 54 C9 B1 B7 D6 1E E1 A7 44 31 E3 66 6E E4 76 92 F2 E5 A3 93 DF C7 8A 05 59 64 4E 6B -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 14.17.80.84:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 14.17.80.84 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 1F 46 10 D0 95 C6 83 24 2B C0 77 3D 8A 52 17 C4 0E D5 84 60 B9 A4 33 6C 20 B4 05 EB 35 -"Time": 1986/12/5 8:39:56 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:11.722 -Connection: close -EndTime: 09:15:11.821 -ClientToServerBytes: 820 -ServerToClientBytes: 9503 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: B9 D5 4C 2C 46 AD 98 D3 F6 81 91 EE 8A 64 5C 0B CE C5 7E 13 9E 63 5E 07 86 F0 19 AA 59 21 44 29 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA [0xC013] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - extended_master_secret empty - - - ------------------------------------------------------------------- - -CONNECT 114.112.172.53:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 114.112.172.53 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 1F AD 88 38 66 F7 EE BE EF 03 89 83 37 CF 53 36 33 90 EC 8F BD 3C FC 85 58 64 FA 52 CE -"Time": 1986/12/5 8:39:56 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:11.861 -Connection: close -EndTime: 09:15:12.009 -ClientToServerBytes: 869 -ServerToClientBytes: 9520 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 1F E7 F9 48 AB 0C 33 95 5C 38 7E F3 6B 91 5E 5D 79 9F 96 94 EA D9 69 12 87 DA 77 67 41 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 125.90.206.80:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 125.90.206.80 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 20 F3 12 97 77 A3 31 8B 55 A6 1D 9A 19 3B BF 28 2F 43 9F D4 AB 22 F4 FC 89 01 28 CD C3 -"Time": 1987/6/17 13:00:12 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:12.021 -Connection: close -EndTime: 09:15:12.111 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 1F 9B 86 E7 8A E8 79 5B AF BD 81 75 C9 5A 84 EA 57 EB 46 BE 21 FE D3 49 55 36 89 DC 76 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 60.220.196.223:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 60.220.196.223 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 20 D4 0B B1 CB A4 C0 C7 3E DA 2C B2 8C 7B F1 70 9F 76 73 40 C7 97 D3 89 E4 0A 60 A1 EF -"Time": 1987/6/17 13:00:12 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:12.164 -Connection: close -EndTime: 09:15:12.313 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 20 1B 9B 5D DC 05 7E 64 9D 97 72 D3 22 5D A4 46 B4 5F C8 09 52 2A 29 70 3A 8D 83 4C 8D -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 123.53.139.36:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 123.53.139.36 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 20 CE 0E 6F FE 2F FE C6 E8 5E A6 88 8B BA 6A 53 F6 12 CE FE AB EE EC 57 2C 47 9F AE 1E -"Time": 1987/6/17 13:00:12 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 82 CE 50 3C CA 6B 0C 0B 98 65 67 10 6B 59 CD 14 57 DB 86 B6 7F F2 24 93 3B 20 70 03 5B FB 28 C3 D4 6B 69 F6 6A 00 AE 8B 1A C0 F6 A5 B7 90 C0 39 51 EF FB 3D C4 26 81 91 15 A4 F8 FB E1 36 57 AE 9C 0F 09 3A A5 DB 49 27 CA AC C8 99 A1 F7 74 B3 3E 80 C4 F6 33 57 2D 30 73 AA 7B 3A DE 75 08 37 3D F2 42 8C EB 3B 8E 75 3C 8B 0C 52 83 73 F1 AE CF 37 C8 39 DC B3 0C 4F 8A 9B C7 93 BE D0 15 97 55 82 D1 F1 E3 93 48 88 8D AB F7 5D 91 7F 11 D4 9F EE CD D8 BE 22 AE 4A 31 C7 C9 0D 34 40 9D 61 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:12.347 -Connection: close -EndTime: 09:15:12.476 -ClientToServerBytes: 778 -ServerToClientBytes: 6138 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 20 DB 5F 40 0A 41 3B 7F A1 6D D4 E0 C9 95 08 E6 E4 E8 CE 68 FF 90 46 A3 83 8D 95 39 BA -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 182.140.218.24:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 182.140.218.24 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 20 95 0B 1E 7F 0C 3F 0B A2 F2 61 A2 58 67 F1 B9 46 E9 DF CF F5 10 19 80 46 4A 46 C7 EB -"Time": 1987/6/17 13:00:12 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:12.513 -Connection: close -EndTime: 09:15:12.664 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 20 85 DB 9E 51 81 28 FD 23 70 C8 33 BA 13 1B 56 80 04 BA 51 D7 FB 0A 67 16 F9 18 91 A7 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 119.36.91.138:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 119.36.91.138 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 20 4D A6 01 63 F3 9D 78 75 3E C9 EC 7D 9D 24 55 8A 41 9E E7 4D DE 6E 51 4F 74 DA 56 D3 -"Time": 1987/6/17 13:00:12 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:12.691 -Connection: close -EndTime: 09:15:12.880 -ClientToServerBytes: 853 -ServerToClientBytes: 9483 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 20 CB 74 A6 03 09 F7 33 04 2D 9E AA C8 B9 3F E7 34 0F D1 2D D0 E8 32 FA 92 29 1C CF EC -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 202.114.51.35:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 202.114.51.35 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 20 40 97 2A 8C 48 5D E6 16 2F 96 1C 4C CC CE 7F E7 95 88 BC E9 5C 14 00 46 FD 91 03 B5 -"Time": 1987/6/17 13:00:12 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:12.933 -Connection: close -EndTime: 09:15:13.756 -ClientToServerBytes: 293 -ServerToClientBytes: 0 - - - ------------------------------------------------------------------- - -CONNECT 114.112.172.54:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 114.112.172.54 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 21 A5 C7 99 A4 AD 49 3F 3B 55 A8 FA DA D1 2E 33 F2 31 E4 FD 87 C7 7A 18 5C 9F 8D D2 2D -"Time": 1987/12/28 17:20:28 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket empty - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:13.798 -Connection: close -EndTime: 09:15:13.980 -ClientToServerBytes: 677 -ServerToClientBytes: 9504 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 21 8D DF 34 22 1E D0 0C 20 64 84 DC 52 9E C7 A3 C5 43 49 39 9A 42 74 B0 91 C0 BC 76 F4 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 219.138.186.44:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 219.138.186.44 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 22 9A A9 B4 8D 72 39 05 37 54 D9 6D 08 5C 91 16 1D 74 DE 7D 6A E9 41 07 A3 BF 8B BA D0 -"Time": 1988/7/9 21:40:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:14.012 -Connection: close -EndTime: 09:15:14.120 -ClientToServerBytes: 778 -ServerToClientBytes: 6064 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 21 8D A0 44 94 78 48 82 28 07 C8 17 21 93 FC E2 12 B0 33 DC 71 7B 9B 99 74 58 01 1D 37 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 14.17.80.253:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 14.17.80.253 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 22 88 AB 2A E1 77 98 28 C9 28 60 B6 E2 76 A6 E8 9D D5 C6 73 22 1E F6 72 25 DB 95 6C 91 -"Time": 1988/7/9 21:40:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:14.129 -Connection: close -EndTime: 09:15:14.344 -ClientToServerBytes: 820 -ServerToClientBytes: 9577 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 97 47 1D DC A9 4E BD 8C 5E 5E DF E0 38 08 5B 75 78 FE C7 5B A0 4B BB 50 F0 C4 B8 17 DC DC E6 55 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA [0xC013] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - extended_master_secret empty - - - ------------------------------------------------------------------- - -CONNECT 14.17.80.79:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 14.17.80.79 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 22 62 40 CD 23 20 E8 9B 5B 96 5C 93 4D C8 AC B4 2E 08 C3 25 82 A2 2F 31 64 05 97 52 98 -"Time": 1988/7/9 21:40:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:14.354 -Connection: close -EndTime: 09:15:14.463 -ClientToServerBytes: 836 -ServerToClientBytes: 9577 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 45 BB 32 E8 19 20 92 58 18 57 BD 7D 5B 4B 88 D6 6E 82 61 E9 47 C3 72 4D CB A8 65 2F 0A E1 40 E8 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA [0xC013] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - extended_master_secret empty - - - ------------------------------------------------------------------- - -CONNECT 117.149.154.188:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 117.149.154.188 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 22 7C C2 6A 2A C2 DB C1 B2 01 2B D7 CD DF 00 0F 15 ED BB 1A 4F 24 AA 3D E8 98 F4 3A 2D -"Time": 1988/7/9 21:40:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:14.499 -Connection: close -EndTime: 09:15:14.653 -ClientToServerBytes: 869 -ServerToClientBytes: 9557 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 22 FB 67 9A CD FA 7A B0 FD 10 26 E8 3D 94 AC 7B 1D 25 5C 0E F3 A8 2D A8 19 E0 C5 7F 0E -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 117.145.179.19:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 117.145.179.19 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 22 ED BD 31 2B 26 5E E6 14 3B CF A9 FA 17 19 CD 26 96 10 6E B0 4B E2 06 54 92 99 CC 5E -"Time": 1988/7/9 21:40:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:14.740 -Connection: close -EndTime: 09:15:14.982 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 22 66 3D B8 79 AC 84 71 3B 78 CA 1F 12 23 C4 B7 6D 4C F6 EE 5B 89 97 90 DE 44 02 CC 88 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 116.77.75.133:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 116.77.75.133 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 22 48 CA 9F 0E 6C 25 1F CF CC 37 88 77 62 9B 3A A3 B9 39 E8 CC 67 E7 87 93 18 20 13 44 -"Time": 1988/7/9 21:40:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 53 C3 F2 10 92 D6 59 01 CC DD EC 5C 61 F2 57 95 35 7D D6 24 66 58 2A 1F 85 84 A9 FA 84 C1 E6 88 80 A7 32 FC ED DC AF 89 FB EC F5 60 B8 47 C9 40 CF FA 43 79 4F 31 F1 97 AA B0 AB 0A B5 4F B9 C8 F4 C0 C1 7E 39 CE 21 6F 14 C8 DB 5D 1D 3F 69 E7 F2 22 7B 75 5A DA B9 2E 5E 3A FC 06 B4 A7 D9 F4 1E E5 8D 8F E5 25 A5 7F AE DC 53 24 B9 08 7C A3 04 D7 83 05 3F E0 2C 41 AA E5 19 23 64 97 C8 D7 28 ED 43 B2 C6 9D 26 EC 52 ED 47 27 8A 76 FE 43 75 CA 22 6F 81 DF BB B2 CF C5 29 1C F6 24 99 D4 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:14.990 -Connection: close -EndTime: 09:15:15.856 -ClientToServerBytes: 293 -ServerToClientBytes: 0 - - - ------------------------------------------------------------------- - -CONNECT 14.17.80.73:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 14.17.80.73 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 23 04 66 B6 D2 D5 E6 76 3C 8C 7B 0B 42 DB D6 40 44 F6 4B 76 A6 58 C8 33 3E E4 A5 43 11 -"Time": 1989/1/20 2:01:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket empty - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:15.870 -Connection: close -EndTime: 09:15:16.088 -ClientToServerBytes: 677 -ServerToClientBytes: 9520 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 23 4C 35 B2 6B C8 24 48 7D EF B5 8C 1E 9F A3 68 4B DA B2 F7 E2 7B 9A AE C6 7B 12 7A 1A -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 118.123.237.27:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 118.123.237.27 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 24 2D 14 8B 78 17 9B 12 6E 6F 24 DD 76 24 94 29 13 BE 1C F6 78 71 4A 03 A7 16 FF 75 68 -"Time": 1989/8/2 6:21:16 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:16.125 -Connection: close -EndTime: 09:15:16.428 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 24 6C 2D 57 DB 5F 37 55 DA 82 A8 00 72 30 D7 C3 F7 77 83 93 83 D2 A1 9A C6 5D FA 1C 2E -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 218.76.105.108:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 218.76.105.108 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 24 69 27 BC 11 B0 DA 24 1D 05 24 04 07 E2 AD D3 D4 A7 20 8D 24 14 C6 11 81 01 E6 7C 3B -"Time": 1989/8/2 6:21:16 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:16.459 -Connection: close -EndTime: 09:15:16.657 -ClientToServerBytes: 853 -ServerToClientBytes: 9520 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 24 23 3B 2E 76 1D C7 96 20 44 30 7E 03 4A F0 33 71 DB 77 DB 6F 50 D8 B2 FD 03 80 85 13 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 14.17.80.70:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 14.17.80.70 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 24 8F 38 C6 3A 74 A2 33 9B 0E 76 61 0B 15 E8 36 AC 91 3A 81 B5 F0 24 13 7C 3A 55 CE 9E -"Time": 1989/8/2 6:21:16 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:16.666 -Connection: close -EndTime: 09:15:16.868 -ClientToServerBytes: 853 -ServerToClientBytes: 9520 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 24 6F 60 29 2F 65 DB 8B 65 A0 FB 14 B6 E9 6E E9 61 49 6E 31 9C B9 F2 FB 74 FE 4C 94 E9 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 118.123.237.29:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 118.123.237.29 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 24 46 AD 63 1C 16 B6 56 C8 EC 68 1D 64 12 ED 00 7A C4 45 A1 9D A7 5D 21 C2 BB 41 44 2D -"Time": 1989/8/2 6:21:16 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:16.910 -Connection: close -EndTime: 09:15:17.049 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 24 69 DC CA 30 39 70 DF 9D E5 92 20 19 48 EC F0 07 AE 15 6B EE 29 7C 1D 5D 58 76 85 B5 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 113.215.224.9:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 113.215.224.9 - - -HTTP/1.1 502 Fiddler - Connection Failed -Date: Wed, 26 Dec 2018 01:15:38 GMT -Content-Type: text/html; charset=UTF-8 -Connection: close -Cache-Control: no-cache, must-revalidate -Timestamp: 09:15:38.054 - -[Fiddler] The connection to '113.215.224.9' failed.
    Error: TimedOut (0x274c).
    System.Net.Sockets.SocketException 由于连接方在一段时间后没有正确答复或连接的主机没有反应，连接尝试失败。 113.215.224.9:443 - ------------------------------------------------------------------- - -CONNECT 113.215.16.247:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 113.215.16.247 - - -HTTP/1.1 502 Fiddler - Connection Failed -Date: Wed, 26 Dec 2018 01:15:59 GMT -Content-Type: text/html; charset=UTF-8 -Connection: close -Cache-Control: no-cache, must-revalidate -Timestamp: 09:15:59.065 - -[Fiddler] The connection to '113.215.16.247' failed.
    Error: TimedOut (0x274c).
    System.Net.Sockets.SocketException 由于连接方在一段时间后没有正确答复或连接的主机没有反应，连接尝试失败。 113.215.16.247:443 - ------------------------------------------------------------------- - -CONNECT 120.198.197.88:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 120.198.197.88 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 4F C2 C5 F9 9A CF 35 38 26 AB B7 6A 71 FA 1A 2D 98 28 A1 B6 83 64 BB 0A 63 47 07 8A 3E -"Time": 2012/6/12 0:52:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:59.085 -Connection: close -EndTime: 09:15:59.395 -ClientToServerBytes: 778 -ServerToClientBytes: 6048 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 4F E7 36 8C A8 3C 51 12 69 D3 AD 18 10 8C 45 F7 8B 38 B5 7B 40 71 25 AC 6F 64 AF F4 D0 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 101.226.18.32:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 101.226.18.32 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 4F 2B 39 F6 1A 8A 88 C4 6E 2B BE A3 69 0E 35 8C 95 5A 67 65 AE 22 96 FA 6D 88 ED B5 A8 -"Time": 2012/6/12 0:52:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:59.433 -Connection: close -EndTime: 09:15:59.550 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 4F CC 87 7C 68 2B 44 F5 D9 C3 44 E1 8E CF 95 71 43 D9 B8 CE 9E 8F 55 3C D6 39 99 F8 94 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 36.250.248.25:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 36.250.248.25 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 4F D5 BC E5 75 9C 00 9C 3C 20 1E 3D 0D 84 A5 15 5C 10 8B 0B 92 3E 5C 4F 8D 55 E8 07 6C -"Time": 2012/6/12 0:52:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F DA 69 C1 47 EB 31 48 C2 BE 34 47 9D 4D FA 5B C3 BA 80 4A 77 DB 3D 01 2F A6 AF BD 2A 79 34 55 32 94 D6 B3 6D EC 6D 91 39 7B 92 6A 80 6C D0 F1 E3 20 75 42 F1 24 C8 3B 19 C6 F3 AD A6 F6 56 1F 5F CD 4E AD A6 7D 9B 6D 02 9C 95 6E 38 AB 59 3E 2E BC F9 14 B1 A6 17 B9 45 02 77 58 AB 80 A2 CE 3E 29 D2 9B 96 42 A4 41 80 FB 4F C2 D0 F0 85 6F 05 8B D7 F7 5D B1 A4 3E CD 74 5F EB AC 6B 5F CA D4 B4 D9 D3 FC 95 8D 82 B6 52 CC 6A 9B 3C 8F DE CC 2D E6 63 07 74 66 25 36 15 01 EC 1C 75 69 16 9A - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:59.576 -Connection: close -EndTime: 09:15:59.696 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 4F 30 38 CD 43 C1 DF AA E8 9F 55 9C BA 6A 0B 4A DF 47 C3 79 5F F7 C6 B0 D6 4A B1 0E 45 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 42.81.144.54:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 42.81.144.54 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 4F A2 D0 E6 C8 68 AA 75 E1 39 9F 4B 0C 8B D1 B7 82 0A F2 2F AB B3 B9 7A CD 72 C4 A0 89 -"Time": 2012/6/12 0:52:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F DA 69 C1 47 EB 31 48 C2 BE 34 47 9D 4D FA 5B C3 BA 80 4A 77 DB 3D 01 2F A6 AF BD 2A 79 34 55 32 94 D6 B3 6D EC 6D 91 39 7B 92 6A 80 6C D0 F1 E3 20 75 42 F1 24 C8 3B 19 C6 F3 AD A6 F6 56 1F 5F CD 4E AD A6 7D 9B 6D 02 9C 95 6E 38 AB 59 3E 2E BC F9 14 B1 A6 17 B9 45 02 77 58 AB 80 A2 CE 3E 29 D2 9B 96 42 A4 41 80 FB 4F C2 D0 F0 85 6F 05 8B D7 F7 5D B1 A4 3E CD 74 5F EB AC 6B 5F CA D4 B4 D9 D3 FC 95 8D 82 B6 52 CC 6A 9B 3C 8F DE CC 2D E6 63 07 74 66 25 36 15 01 EC 1C 75 69 16 9A - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:59.740 -Connection: close -EndTime: 09:15:59.858 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 4F 48 03 4D F8 29 15 87 72 74 F7 D0 65 7E 0A 2B 32 87 A7 5E 14 6E 9C 06 E2 26 EF 6F 63 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 121.11.81.102:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 121.11.81.102 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 4F 2E FC 32 6D 2C B5 AA D4 08 46 56 45 C3 63 FE 49 CC 3F AA 13 0A C3 FA D8 57 E1 E5 AD -"Time": 2012/6/12 0:52:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:15:59.876 -Connection: close -EndTime: 09:15:59.978 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 4F 24 3C 28 38 41 A2 F8 95 EB 72 B8 E5 3C D8 7A 87 20 79 79 FE 6D D5 F9 35 B9 21 5A 5B -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 36.250.248.56:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 36.250.248.56 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 50 6E 1A 9C C9 D1 8D A0 AB 94 39 14 E9 C9 75 86 D9 DD 84 D3 8D E3 D2 B3 ED 0B A6 73 76 -"Time": 2012/12/23 5:13:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:00.001 -Connection: close -EndTime: 09:16:00.235 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 4F 69 5D B8 A4 DC AD 44 E6 24 BF 0A 5E 95 95 0D EC DB F6 1D AE 30 B0 36 09 D9 8C 4D 84 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 59.34.229.55:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 59.34.229.55 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 50 92 7A 2F 8F 8B F9 6B EF 1A BB C6 08 E5 A9 AB 90 E5 E9 12 E9 6E EF 72 4D 1A F4 3D 4D -"Time": 2012/12/23 5:13:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:00.260 -Connection: close -EndTime: 09:16:00.420 -ClientToServerBytes: 778 -ServerToClientBytes: 6138 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 50 A8 E7 E0 9C 10 36 89 7F EA A3 A6 CC 9C 3D 07 DE BC B8 20 97 0E 9C CB 8F D2 82 DB DB -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 218.14.200.56:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 218.14.200.56 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 50 DD A9 80 F3 2E 53 1F 53 8C 09 2E F5 BE CA A2 85 E8 ED F7 D9 69 EC 63 09 E9 1D 72 A3 -"Time": 2012/12/23 5:13:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:00.441 -Connection: close -EndTime: 09:16:00.545 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 50 3D 66 07 63 42 4B EE B6 2E 4D F7 55 61 71 0C 3D 68 5F 56 21 A1 EB B5 F6 3D 36 13 92 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 58.223.166.118:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 58.223.166.118 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 50 CE E5 08 C6 53 D8 59 CE E6 B0 39 F3 54 F9 D0 44 AD B6 D8 53 70 69 6D 51 B4 0D A3 FC -"Time": 2012/12/23 5:13:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F DA 69 C1 47 EB 31 48 C2 BE 34 47 9D 4D FA 5B C3 BA 80 4A 77 DB 3D 01 2F A6 AF BD 2A 79 34 55 32 94 D6 B3 6D EC 6D 91 39 7B 92 6A 80 6C D0 F1 E3 20 75 42 F1 24 C8 3B 19 C6 F3 AD A6 F6 56 1F 5F CD 4E AD A6 7D 9B 6D 02 9C 95 6E 38 AB 59 3E 2E BC F9 14 B1 A6 17 B9 45 02 77 58 AB 80 A2 CE 3E 29 D2 9B 96 42 A4 41 80 FB 4F C2 D0 F0 85 6F 05 8B D7 F7 5D B1 A4 3E CD 74 5F EB AC 6B 5F CA D4 B4 D9 D3 FC 95 8D 82 B6 52 CC 6A 9B 3C 8F DE CC 2D E6 63 07 74 66 25 36 15 01 EC 1C 75 69 16 9A - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:00.588 -Connection: close -EndTime: 09:16:00.828 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 50 1B 2A E7 7A F8 3F BE 41 29 52 14 C1 49 19 59 2C D4 63 CA B9 F5 50 07 9F AB B4 32 17 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 59.34.229.59:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 59.34.229.59 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 50 28 05 9F 28 57 30 DA 61 82 BA 3E E4 31 71 6D D0 CF AD 4C 12 BB 66 0C DF 3C B4 FC B1 -"Time": 2012/12/23 5:13:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:00.852 -Connection: close -EndTime: 09:16:00.964 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 50 FE 10 31 97 C1 D2 7A F8 60 60 06 3A 6F 69 AE B1 2E E8 AE 76 7E DB 2F C2 DD DE 6C F5 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 124.236.28.95:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 124.236.28.95 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 51 7E BE 0B 63 65 01 0D 38 2B C2 D6 36 41 80 7A CA B0 58 4E 7D C9 80 2C 61 40 67 6C B3 -"Time": 2013/7/5 9:33:16 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F DA 69 C1 47 EB 31 48 C2 BE 34 47 9D 4D FA 5B C3 BA 80 4A 77 DB 3D 01 2F A6 AF BD 2A 79 34 55 32 94 D6 B3 6D EC 6D 91 39 7B 92 6A 80 6C D0 F1 E3 20 75 42 F1 24 C8 3B 19 C6 F3 AD A6 F6 56 1F 5F CD 4E AD A6 7D 9B 6D 02 9C 95 6E 38 AB 59 3E 2E BC F9 14 B1 A6 17 B9 45 02 77 58 AB 80 A2 CE 3E 29 D2 9B 96 42 A4 41 80 FB 4F C2 D0 F0 85 6F 05 8B D7 F7 5D B1 A4 3E CD 74 5F EB AC 6B 5F CA D4 B4 D9 D3 FC 95 8D 82 B6 52 CC 6A 9B 3C 8F DE CC 2D E6 63 07 74 66 25 36 15 01 EC 1C 75 69 16 9A - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:01.008 -Connection: close -EndTime: 09:16:01.132 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 50 BF 57 E4 72 6A 9E 94 0C BF B1 46 C7 7E 86 87 FB 7E 78 C9 EF 0B 68 F4 D8 F0 96 2E E8 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 117.161.19.126:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 117.161.19.126 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 51 50 3D B1 F2 CC D4 61 FE 29 27 DF 79 A0 C9 05 00 1F F2 DA E8 E2 15 7C 4F B2 E4 41 87 -"Time": 2013/7/5 9:33:16 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:01.191 -Connection: close -EndTime: 09:16:01.344 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 51 F5 25 09 1C 77 CA 69 5F 4E D6 30 D7 71 26 1C 11 21 A6 14 E8 8F 7C ED 4D F2 19 32 8A -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 211.144.81.22:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 211.144.81.22 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 51 9C FB FF F5 EA FF E4 6E 02 EE 9F 40 9F 7E A1 31 01 F9 95 10 0F 92 2B B8 DA C2 39 67 -"Time": 2013/7/5 9:33:16 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:01.384 -Connection: close -EndTime: 09:16:01.937 -ClientToServerBytes: 853 -ServerToClientBytes: 9377 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 51 CC E7 4D E9 B4 5E 4A D1 AE 78 92 DC EB B9 AA C1 F5 75 27 FB 32 C3 C6 01 C7 3E CD 2D -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 183.131.168.148:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.131.168.148 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 51 E9 88 17 3B 99 21 B8 39 8A ED 4B 1B B4 24 A7 4F 62 5B 2A 32 50 CB 52 93 75 F0 EA CE -"Time": 2013/7/5 9:33:16 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket 49 B3 8E 09 60 40 04 DC 7D 9B 54 B5 31 08 42 F0 04 B7 C0 DF 48 69 2F 71 2B 59 13 49 F0 10 00 0B 76 35 F4 85 EE 4A 93 64 B5 50 92 23 6F 2E 06 2A 45 62 C0 59 96 FB 74 07 56 D9 6E E0 BD 1A 7D 4A 22 07 01 36 F7 04 E8 DB 12 14 0F C6 80 05 24 4D 17 6A D1 BC 5C E3 3C E6 B6 47 FC 6B 52 29 32 DB 7B 83 CC 7F 1C 47 D9 75 FE C2 A5 A3 0E 2A 02 7F AE 0D CC 09 E4 1F 0A FA 53 58 27 3C B5 E6 E7 37 D9 91 78 EF 90 51 26 D8 42 D7 F0 64 B4 7B 3C D3 85 D0 11 59 23 3D B0 48 B5 F2 C9 C2 B4 0D 6F 2C 34 81 0D 5E B7 F3 FE 9F 6C 6C 79 83 23 00 6D 68 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:01.967 -Connection: close -EndTime: 09:16:02.110 -ClientToServerBytes: 853 -ServerToClientBytes: 9504 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 51 6F 57 FC 35 2A 7C FE 0A E3 1B 43 A8 8E EB 1D 33 4C F5 C7 DA 69 F9 2C F5 C9 67 2F 57 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 114.112.172.57:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 114.112.172.57 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 52 13 95 91 D0 26 6F 66 F5 A3 1A 1F A4 1F C9 CA D6 92 74 A7 F0 69 ED BF 5E C6 1A 1A 4E -"Time": 2014/1/15 13:53:32 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:02.153 -Connection: close -EndTime: 09:16:02.287 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 52 53 5A 17 9D C4 5E EB 2C 1A 14 B6 47 85 38 E7 22 00 96 19 F6 78 92 31 60 B0 64 9B F6 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 112.29.227.251:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.29.227.251 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 52 3A 31 88 F1 74 FE B3 FC F1 8A C8 96 A3 90 9E 6F 80 DE DB 6A 20 4D 7D 24 83 E1 7E 05 -"Time": 2014/1/15 13:53:32 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 23 69 3B 97 68 E6 65 1A 75 F7 2C 53 AB 6C A3 2A 73 B0 AB 29 61 C4 91 BA 90 4C 57 2A 1E 5D 3D E5 B7 DE F2 E5 D1 3A BB 94 AF 59 EC 22 EA 4B 7A 04 04 9C 59 53 C0 FD A9 8B B7 C1 34 D6 01 00 F1 26 A9 59 60 19 97 57 B9 2F 63 0F B8 B2 96 76 E0 95 C0 30 68 BD 7F 89 2C 85 D2 ED D1 15 F9 D4 C1 37 9F 42 64 96 43 4E 48 1B 83 E0 07 A9 B9 85 5D AB 68 FE 97 65 4F B6 1F D5 19 9A 99 C5 D8 71 45 B3 76 4D 03 37 E2 A2 1F 4E 46 15 33 26 63 DE 09 81 6A C0 A4 C5 E2 F2 A0 E7 29 41 92 0A 91 3F 8C 9E - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:02.332 -Connection: close -EndTime: 09:16:02.487 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 52 03 0B CC EC C2 43 2F CA 47 72 DD 5B 96 96 65 38 6A F0 D7 AE 69 F1 95 2C EC CB DE 8B -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 112.240.60.210:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.240.60.210 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 52 57 EA BE 51 F8 74 35 6D 84 EC 6B F4 3A 55 7E 9F 79 2F ED E9 11 F6 6F 6A ED A0 71 08 -"Time": 2014/1/15 13:53:32 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:02.531 -Connection: close -EndTime: 09:16:02.657 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 52 F4 23 48 FD 33 44 FB 2B E0 52 71 F4 EA 9E 11 54 B9 66 B4 3C 8F 52 06 F5 C1 F3 9E DB -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 106.120.178.22:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 106.120.178.22 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 52 82 49 5F AF 91 64 84 0D B4 D9 E6 AB 92 31 3E 7A EF C3 F5 68 60 08 F6 3E 9D C6 0D 06 -"Time": 2014/1/15 13:53:32 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 23 69 3B 97 68 E6 65 1A 75 F7 2C 53 AB 6C A3 2A 73 B0 AB 29 61 C4 91 BA 90 4C 57 2A 1E 5D 3D E5 B7 DE F2 E5 D1 3A BB 94 AF 59 EC 22 EA 4B 7A 04 04 9C 59 53 C0 FD A9 8B B7 C1 34 D6 01 00 F1 26 A9 59 60 19 97 57 B9 2F 63 0F B8 B2 96 76 E0 95 C0 30 68 BD 7F 89 2C 85 D2 ED D1 15 F9 D4 C1 37 9F 42 64 96 43 4E 48 1B 83 E0 07 A9 B9 85 5D AB 68 FE 97 65 4F B6 1F D5 19 9A 99 C5 D8 71 45 B3 76 4D 03 37 E2 A2 1F 4E 46 15 33 26 63 DE 09 81 6A C0 A4 C5 E2 F2 A0 E7 29 41 92 0A 91 3F 8C 9E - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:02.700 -Connection: close -EndTime: 09:16:02.809 -ClientToServerBytes: 778 -ServerToClientBytes: 6138 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 52 75 22 97 D9 94 DE 74 FB 68 F3 DE 9B BB 4E 86 12 DE B5 DC 66 32 1A EC 35 14 0B 98 F3 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 106.120.178.20:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 106.120.178.20 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 52 64 2F C5 DD 6B 83 05 1B A9 23 5A CF AE AA 9F 5C 03 24 7B 6C 5F B3 DD 6A AF D7 C3 41 -"Time": 2014/1/15 13:53:32 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:02.851 -Connection: close -EndTime: 09:16:02.971 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 52 60 2C 73 1D 5D FE 6F 7A B1 99 53 5B ED AA 5B 3D F9 0A 51 1F F8 FD 4C 5F 0E 54 6B 27 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 111.19.233.99:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 111.19.233.99 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 53 A0 D0 5A 64 66 48 C0 5A 87 B0 84 4C 05 8A 3D 01 1D 11 51 0C FE B5 99 6A 75 3A 65 D6 -"Time": 2014/7/28 18:13:48 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:03.029 -Connection: close -EndTime: 09:16:03.199 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 53 0F 10 B5 21 85 3B 64 64 9F DC 90 CB 21 A4 2D 21 A3 02 A5 8D 4A EF F5 0B A0 CD D6 75 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 183.134.53.155:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.134.53.155 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 53 77 35 88 54 B9 3F BB 29 AE 92 8A 2D BD 4C 17 98 8E CF C2 61 18 D5 14 86 12 38 3C 85 -"Time": 2014/7/28 18:13:48 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:03.235 -Connection: close -EndTime: 09:16:03.359 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 53 2E 8B 3B 8C 53 02 3B EB CE 87 F6 FF FE ED DA 8D 6B 4A EB 5F 3B 53 74 14 3B F3 D7 1B -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 114.112.172.59:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 114.112.172.59 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 53 71 D0 07 6E F2 B8 E2 59 4B 0E E6 30 C4 DB F2 05 5D F9 C1 D5 6E DD 45 0E B5 16 CA CB -"Time": 2014/7/28 18:13:48 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:03.402 -Connection: close -EndTime: 09:16:03.516 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 53 2B E9 39 EF BA F2 E9 04 32 74 C3 E7 35 56 23 7D A3 C7 EF 1F 00 D2 B3 02 26 14 47 9B -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 221.235.187.56:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 221.235.187.56 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 53 A9 8E FB 74 22 BC 44 85 33 6F EA 6F 78 AE FB EE 33 C0 1C 83 63 1F 66 0D 73 30 2A 48 -"Time": 2014/7/28 18:13:48 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:03.544 -Connection: close -EndTime: 09:16:03.684 -ClientToServerBytes: 853 -ServerToClientBytes: 9409 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 53 AF B1 16 BD 64 48 00 E4 4B 2F 21 FB 8C C6 69 20 F1 E9 63 1E 37 C6 2E 88 63 E0 95 16 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 36.102.230.162:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 36.102.230.162 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 53 28 2D 16 3F 90 7B 1A B3 4F 57 0B 02 76 05 93 2C 4C 39 0D 7D CB 89 22 7F FE 33 D0 AE -"Time": 2014/7/28 18:13:48 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:03.747 -Connection: close -EndTime: 09:16:03.994 -ClientToServerBytes: 853 -ServerToClientBytes: 9446 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 53 A6 8B 4B 4F 3C B1 BF C2 68 88 C2 2F 76 E3 D5 8A F5 F7 0C 27 CB 38 F6 90 D9 52 EF 1F -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 14.0.45.164:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 14.0.45.164 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 54 FF A4 5D E9 15 0C 55 63 1A 8C 84 3C E2 76 4C C5 39 48 EA 69 02 B6 44 13 6C EE 51 23 -"Time": 2015/2/7 22:34:04 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:04.119 -Connection: close -EndTime: 09:16:04.514 -ClientToServerBytes: 853 -ServerToClientBytes: 3569 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 54 3B 1B 44 BD 24 89 41 BC 6F 3A A4 A0 88 23 FB 62 5C EC 9A F9 E6 A6 36 21 68 75 D3 D4 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 14.0.45.164:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 14.0.45.164 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 54 F2 91 57 F6 1C 08 09 1C 25 4A AF BE 7A 97 84 44 DA 48 66 1E A3 F9 88 A6 F7 62 93 3B -"Time": 2015/2/7 22:34:04 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:04.641 -Connection: close -EndTime: 09:16:04.855 -ClientToServerBytes: 778 -ServerToClientBytes: 113 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 54 96 A9 E2 6E A1 ED A3 16 CB 09 BB 05 FA BC 4A FD D7 AA F6 50 22 31 3E 8B 22 D2 AA 4A -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 221.230.141.51:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 221.230.141.51 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 54 50 7A 9B 8F EA 9B 48 3A F3 07 F2 11 8F 3F 07 F8 85 98 14 A0 A5 E1 95 D0 DF 91 E0 42 -"Time": 2015/2/7 22:34:04 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:04.888 -Connection: close -EndTime: 09:16:05.047 -ClientToServerBytes: 853 -ServerToClientBytes: 9446 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 54 D3 B2 22 2C F5 1F C5 E7 90 3B E2 1C 4D 07 71 DA 3A 95 97 75 E1 E1 BB 2B 2E B8 61 63 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 59.80.28.58:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 59.80.28.58 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 55 B7 D5 B1 F7 96 ED 09 05 64 46 60 59 BB 62 A2 9B 38 89 37 25 C7 CC DA 21 0F 10 7C FA -"Time": 2015/8/21 2:54:20 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket EE 01 71 E7 51 EF AE 46 9A 98 7E 50 55 7C 12 FE B4 E2 7C EF 0C 83 C4 92 02 F0 60 C2 FD 26 01 81 11 7A AA 0C D0 BD 4F 85 C7 BF 73 F5 A9 84 AD 84 4C 6F 2F 82 C3 E6 85 85 71 D3 AC BB F5 CA 16 8C 58 CE DC E0 22 AB 56 E4 08 DA 53 BD 90 37 60 2D C7 AF 19 70 01 A5 E7 9D E1 42 75 B9 96 C2 A2 63 28 88 B3 A1 32 F4 CA 0B AD E2 93 B9 A5 C4 68 8E C1 5D A9 1B 26 49 E9 97 2C D5 6D 26 15 7F CC B8 E3 86 03 C0 E6 E1 8A 21 FB 6B C0 BC 3E 20 E2 E6 49 25 61 9B 93 24 B4 36 C4 31 0C 0F 10 29 FC ED B3 D1 AA 31 EF 5E 55 7E 5F 57 33 FA 77 0A 20 B5 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:05.083 -Connection: close -EndTime: 09:16:05.283 -ClientToServerBytes: 853 -ServerToClientBytes: 9409 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 55 33 4A CD 0B 6A 2F F5 CC 96 EE 84 59 DA CB 8F 7B 21 7D 3A C5 47 5F 78 9F B9 CD DB F0 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 183.47.216.37:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.47.216.37 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 55 DC 91 6A 9D 45 6D FB B6 73 F3 B8 AD 63 A2 0F 4F 61 D8 CF 39 3F BE A5 30 1D EC 70 90 -"Time": 2015/8/21 2:54:20 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:05.294 -Connection: close -EndTime: 09:16:05.407 -ClientToServerBytes: 853 -ServerToClientBytes: 9520 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 55 D8 FC CF 40 9A 85 0A F2 4F CA 3C B0 65 6D 33 FD F7 79 E6 CA DD 4C FF 07 93 41 11 9B -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 14.17.80.82:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 14.17.80.82 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 55 45 C8 87 5E 4E 4D 08 B0 E0 29 BC 04 6A FD 21 40 D9 52 C7 4B A2 BD 27 70 6E 2C 87 C8 -"Time": 2015/8/21 2:54:20 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:05.417 -Connection: close -EndTime: 09:16:05.730 -ClientToServerBytes: 820 -ServerToClientBytes: 9540 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 57 54 C4 89 77 DB C7 6B EC 44 08 25 2E 2A 11 0A 8E 1F A7 EE B6 44 C8 62 A3 08 54 31 FC 7D B2 F9 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA [0xC013] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - extended_master_secret empty - - - ------------------------------------------------------------------- - -CONNECT 124.165.125.253:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 124.165.125.253 - - -HTTP/1.1 502 Fiddler - Connection Failed -Date: Wed, 26 Dec 2018 01:16:26 GMT -Content-Type: text/html; charset=UTF-8 -Connection: close -Cache-Control: no-cache, must-revalidate -Timestamp: 09:16:26.736 - -[Fiddler] The connection to '124.165.125.253' failed.
    Error: TimedOut (0x274c).
    System.Net.Sockets.SocketException 由于连接方在一段时间后没有正确答复或连接的主机没有反应，连接尝试失败。 124.165.125.253:443 - ------------------------------------------------------------------- - -CONNECT 221.235.187.244:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 221.235.187.244 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 6A AC 1B 9D 0C 4E CF 0D E4 46 46 C4 E2 6F C1 9A 12 6B 7B AF A1 81 25 A5 67 2E 8D B5 98 -"Time": 2026/10/19 21:59:56 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:26.774 -Connection: close -EndTime: 09:16:27.264 -ClientToServerBytes: 869 -ServerToClientBytes: 9541 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 6A D4 EC 9A B1 8C 6A 8F BA DA DF C8 A7 29 97 7F 26 6E A1 13 6F AB FA 85 87 C5 2F A5 53 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 183.214.1.26:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.214.1.26 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 6B C0 00 F5 13 7E 86 CC 80 B7 56 CC E3 60 AE 14 5A 0C 35 20 C8 B2 81 32 3D 3C E3 29 F5 -"Time": 2027/5/2 2:20:12 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:27.295 -Connection: close -EndTime: 09:16:27.514 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 6B 19 54 05 9E D7 78 EE 8C E2 0A 38 7C 7A 63 19 13 02 F7 BA A9 14 6A 00 D7 A1 B9 91 22 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 61.184.117.30:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 61.184.117.30 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 6B EB 0B 0E FA 70 23 29 EC E5 7F 5C 3C E9 68 E3 EC 22 83 10 F1 83 EE 9A A6 E6 D5 26 56 -"Time": 2027/5/2 2:20:12 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:27.542 -Connection: close -EndTime: 09:16:28.283 -ClientToServerBytes: 853 -ServerToClientBytes: 9446 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 6B 61 3F 72 E3 55 A6 70 CF 22 EB 01 79 6D DA F6 13 5B 16 A4 AF 26 64 F4 47 2D 88 5D 82 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 120.226.48.27:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 120.226.48.27 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 6C 57 C2 DD 9D 17 3C 1E 25 3C 5F 7F 1C C1 E5 31 43 19 32 15 1F B9 11 B0 90 05 E3 FD 6C -"Time": 2027/11/12 6:40:28 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket 0B B5 5B 5B EA 24 0D 2C EF 63 81 ED 52 C3 E8 A1 51 F1 23 B0 54 16 31 6E 98 15 A6 F2 D6 A2 A4 DE CA 90 AE 4A C7 11 DF 66 0E AB 00 DB C4 D4 AE B3 82 F7 F2 8A 9F F7 66 39 E1 88 EE 16 BE BE F2 9F A5 C0 FA 28 FB 84 D6 9F 33 52 0B 2A C5 46 72 E2 20 AC 80 80 E7 F1 0C 64 E3 BE 11 DB 4B 83 4C 3B BB 2A F2 A0 9A BD 30 26 57 74 A8 C5 E9 F4 29 68 79 D1 F9 95 31 B0 65 CE ED 45 8A 4B E3 50 30 41 39 1F 56 C4 C5 10 D2 BA 39 24 24 6D C0 63 0B DD 47 71 8C 23 E0 08 7E 01 6B F9 54 C5 9D F6 87 EA C7 16 A2 93 28 1A 4A 3A 44 FE 35 57 FD A5 6E FA - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:28.321 -Connection: close -EndTime: 09:16:28.680 -ClientToServerBytes: 853 -ServerToClientBytes: 9557 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 6C C8 0A 68 C9 F1 50 AA B0 60 42 D7 95 B7 6A 18 DA BB AE D1 F1 C6 93 DF 51 50 9A A6 38 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 125.90.206.81:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 125.90.206.81 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 6C 32 5B 52 E8 8F A4 CF 0F 75 F4 00 87 F7 6D 0B DD 9C 69 58 8B 8A 0B 58 8B F1 95 03 DC -"Time": 2027/11/12 6:40:28 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:28.700 -Connection: close -EndTime: 09:16:28.998 -ClientToServerBytes: 778 -ServerToClientBytes: 6138 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 6C 6E D4 6C AC 97 A1 2C 36 0C 07 7B 84 D9 C7 AE 2B 40 0B 2A 07 87 5D 98 32 4C 42 1F 4A -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 61.147.228.89:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 61.147.228.89 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 6D 89 D1 B0 21 22 6B 4A 7C 91 AC DD 87 37 38 8E 0F F0 A2 61 23 41 88 08 3B 7F 17 CF 17 -"Time": 2028/5/24 11:00:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F F8 FD 5F B2 47 63 E6 4E 29 E4 01 65 10 0E AC 1B 8E EC D8 0E 85 29 3C 11 99 B3 F2 E4 60 64 FE B6 EC 9A A5 7B 4C 49 B4 CD AE E1 16 21 41 D5 0A F0 90 26 45 0C F3 81 43 E4 6F 91 BA D3 5D 1F 67 43 4E 79 3E 98 13 AF 93 BC 3D 14 9D CB 45 66 AA 6A AF 21 85 CB A5 C2 6D F3 AE 7B 11 61 6E 20 3E 78 A5 11 02 76 23 EA 9A 9A D6 C2 D8 02 8D 9E FA FC A9 7F CF 42 7B 3A E3 3F B8 2D 88 61 70 3E 4E 83 6D B0 44 66 D4 A6 9A D0 2D 55 4D EC 85 10 0D BC 50 77 DE F0 8C 67 A9 6E 21 13 46 CC AA EC AB E4 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:29.041 -Connection: close -EndTime: 09:16:29.177 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 6D CD 53 63 49 D4 B1 8B 39 E3 DC 4E 74 D6 C1 87 A2 7F A7 4E 0E E2 75 BE B8 E7 FC A4 C8 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 111.161.122.135:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 111.161.122.135 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 6D 61 5A 9C B4 FA 4F EC 91 81 1C 34 9B F6 1B 54 96 2A C1 97 CB 13 9B 0A 8B 7A B1 8C 2E -"Time": 2028/5/24 11:00:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:29.218 -Connection: close -EndTime: 09:16:29.346 -ClientToServerBytes: 778 -ServerToClientBytes: 6106 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 6D CB 1F 7B 7E 5A 9E 23 5F 4D 43 29 67 85 01 31 5D D1 27 4F 88 29 82 32 86 99 E4 B8 0D -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 222.218.87.28:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 222.218.87.28 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 6D 0A 0B C9 04 41 92 52 82 2F 0D 01 2C 79 32 D2 7E 3A 25 42 69 81 CC 7B 0B 87 58 CE 8C -"Time": 2028/5/24 11:00:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:29.370 -Connection: close -EndTime: 09:16:29.770 -ClientToServerBytes: 853 -ServerToClientBytes: 9467 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 6D 79 55 47 3F 4B ED D4 11 09 75 41 BC 4E 8B 99 00 DD C9 DD D5 C5 B1 46 02 1C E6 97 5A -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 59.34.229.62:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 59.34.229.62 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 6D 5C 33 23 28 CC 7F 81 F4 85 ED 71 4E BC 3A 13 79 88 B9 43 55 F3 1E E1 56 64 B3 69 56 -"Time": 2028/5/24 11:00:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:29.790 -Connection: close -EndTime: 09:16:29.924 -ClientToServerBytes: 853 -ServerToClientBytes: 9520 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 6D A0 17 83 9A 80 87 58 C8 07 A6 11 AE 07 98 D0 D8 EB F9 85 A6 72 B1 80 95 F0 40 8D CB -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 219.138.27.30:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 219.138.27.30 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 6D 36 51 3B 44 01 83 CC 0B 67 73 A8 96 B1 0C 86 D2 62 ED 8F AC 46 28 E3 29 15 0B F3 65 -"Time": 2028/5/24 11:00:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:29.957 -Connection: close -EndTime: 09:16:30.057 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 6D B0 20 77 5B FD 7E C4 AF 75 3E 75 EF CF 12 02 42 BA B1 57 05 CD 54 32 78 47 EE C0 56 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 14.17.80.68:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 14.17.80.68 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 6E 3F 8D B6 7E 7D C5 C8 8D CD 0B 92 B4 96 43 47 CE 08 44 43 B1 4E 8A 78 90 E0 0F 5B 29 -"Time": 2028/12/4 15:21:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:30.074 -Connection: close -EndTime: 09:16:30.312 -ClientToServerBytes: 778 -ServerToClientBytes: 6138 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 6E 6C C2 F0 F2 52 7C 10 73 EA 22 A6 2F CE 9B 99 7F 90 E0 A1 34 1A 67 94 7A 88 93 3A 01 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 114.112.172.56:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 114.112.172.56 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 6E 28 B7 E5 D8 5D AB 74 EC A3 F0 1F 70 72 5C 5C 32 54 32 FF 65 4C 21 54 2C E5 A4 23 0E -"Time": 2028/12/4 15:21:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 0A 31 65 61 F1 B5 31 8F 22 FB 42 C8 A3 63 D7 9B 21 81 04 CA 4C C6 36 7C FA 07 F3 05 2A 42 92 08 50 D6 4A F5 3C 6E 11 1E 2C 19 B0 94 A4 11 94 18 CA E4 0B 5D B5 BD 1F 94 1D 85 FE 7D CC 05 46 AD 3E DA B9 21 31 69 D2 4D EA 62 51 D7 C3 6C 65 4C C7 F5 EB 91 13 D2 CB BB 13 20 49 FF 40 1A F4 C0 39 71 CB F3 1A 0C C0 FB DC F4 B0 B1 DB 89 01 C2 FC 18 DC 9C 63 60 08 BC 14 F9 B6 85 5C 64 84 A4 21 DC 5B 60 69 81 B0 24 D9 E6 B9 54 88 82 F5 DA E9 D8 AF 27 A5 21 CF 39 BD 39 E2 CC CE A3 9B 85 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:30.352 -Connection: close -EndTime: 09:16:30.459 -ClientToServerBytes: 778 -ServerToClientBytes: 6138 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 6E CB A8 40 09 F0 7F F7 BF 41 22 78 F6 1E 8D 63 88 AA 03 44 F6 E9 EA 2B F8 4D A2 76 78 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 183.131.169.225:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.131.169.225 - - -HTTP/1.1 502 Fiddler - Connection Failed -Date: Wed, 26 Dec 2018 01:16:51 GMT -Content-Type: text/html; charset=UTF-8 -Connection: close -Cache-Control: no-cache, must-revalidate -Timestamp: 09:16:51.465 - -[Fiddler] The connection to '183.131.169.225' failed.
    Error: TimedOut (0x274c).
    System.Net.Sockets.SocketException 由于连接方在一段时间后没有正确答复或连接的主机没有反应，连接尝试失败。 183.131.169.225:443 - ------------------------------------------------------------------- - -CONNECT 211.144.81.24:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 211.144.81.24 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 83 A7 32 65 49 B8 36 65 BD 25 A3 B4 6A A6 2B 45 A2 57 1E B7 B7 48 9B FB DC 7B F2 8D 9B -"Time": 2040/2/3 10:26:36 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:51.505 -Connection: close -EndTime: 09:16:52.353 -ClientToServerBytes: 427 -ServerToClientBytes: 3282 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 84 DC 6C 6B 92 CD CE EB 31 44 72 11 CE 14 11 5B 59 1E 20 3B 90 99 C0 F3 09 A0 2B 84 E2 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 183.134.53.153:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.134.53.153 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 84 8C 75 61 C3 C3 86 03 C4 AB E1 83 73 E4 B1 DF E5 7A D9 32 8C 77 F7 D8 C0 B3 3E 20 49 -"Time": 2040/8/15 14:46:52 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket empty - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:52.386 -Connection: close -EndTime: 09:16:52.556 -ClientToServerBytes: 677 -ServerToClientBytes: 9483 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 84 76 D9 74 0C 79 0F B7 3B 52 35 77 EC F2 C3 32 93 59 3F 3B 53 0A 41 AC A6 02 FE 99 46 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 61.132.238.92:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 61.132.238.92 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 84 1B 4C F8 3A 5B C0 D6 99 83 73 9B D6 F4 E1 32 35 58 07 BA 7A AB 7C CD CC A6 D4 57 3F -"Time": 2040/8/15 14:46:52 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:52.601 -Connection: close -EndTime: 09:16:52.807 -ClientToServerBytes: 853 -ServerToClientBytes: 9409 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 84 AD 80 53 18 FD 65 3E 0C D8 FE 9C 4E BF B3 51 2C 14 94 6D 9C 1C CC 1F 51 EB 81 2E 7A -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 221.235.187.90:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 221.235.187.90 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 84 7E A2 B1 19 73 F3 3D 1B C2 13 E8 44 E3 4D 94 93 6C C0 3A 92 6F A1 2F 05 4A 01 63 B2 -"Time": 2040/8/15 14:46:52 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:52.835 -Connection: close -EndTime: 09:16:53.051 -ClientToServerBytes: 853 -ServerToClientBytes: 9446 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 84 0E 68 0B 2B BF 4D F3 B1 81 41 E6 C7 5F C4 D8 F9 1D 40 05 8A 9F 02 30 84 98 BC 3F 65 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 218.242.102.131:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 218.242.102.131 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 85 83 D8 1D A0 FB 0F 18 BE 7D 31 BB E8 3A 60 C6 71 8C 78 9A 58 F4 EE FF F7 92 69 75 A1 -"Time": 2041/2/25 19:07:08 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:53.087 -Connection: close -EndTime: 09:16:53.500 -ClientToServerBytes: 853 -ServerToClientBytes: 9377 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 85 58 51 4A ED 98 93 AF 46 62 FC FB 5F EE 5C 85 A5 55 45 47 40 22 A4 15 8A AC 19 7A 7C -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 14.17.80.75:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 14.17.80.75 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 85 D4 52 9E F0 B0 AB 26 8A 35 57 F3 61 64 28 74 56 7E AC 4B F0 04 A5 4D C9 6E 69 60 F0 -"Time": 2041/2/25 19:07:08 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:53.510 -Connection: close -EndTime: 09:16:53.758 -ClientToServerBytes: 853 -ServerToClientBytes: 9520 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 85 CA E8 D6 09 2F 76 B1 C7 3F E3 0F 0E D7 90 C7 DF 60 97 00 42 1E 0F BA 16 96 EE BE 20 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 219.138.27.31:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 219.138.27.31 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 85 1E 80 AE 33 D0 C4 9B BD 42 90 3D F2 6D 9E 39 53 41 A7 FF 4D 8A ED 13 E2 38 9B 56 0F -"Time": 2041/2/25 19:07:08 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 2D 1C 91 27 D1 D8 D8 D2 21 66 67 38 01 C3 80 95 29 FF 91 E4 6C DD 10 51 B9 1C 95 A3 3F A3 C2 12 4A 74 37 60 9F AF 44 CC 9B 93 D7 F5 12 7C 5F A1 C7 3A 0D 9C E0 1B 90 E2 8C 8F 24 24 D3 07 AA 93 CA F0 B6 3F 5B 13 74 FF 0F 69 E1 6C B4 D4 12 79 50 F0 B9 CC 90 B7 16 5E 4C 8D FF A1 17 C6 E3 4C FB 39 D3 45 F8 8B A0 70 1F D3 04 8C CD BA B2 AD AC 4F B7 1B 5D 79 B8 6C 26 30 59 7B CB AB CC 74 3F 65 8C FB 30 1E D8 AB 30 59 4A 8C F6 2D 68 89 F3 74 F9 46 4B 6A 5A D9 11 D5 E5 68 8D 2D 3A 10 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:53.788 -Connection: close -EndTime: 09:16:53.904 -ClientToServerBytes: 778 -ServerToClientBytes: 6138 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 85 19 49 9C 7C 27 53 C0 99 70 E4 F7 0C 5A 49 4B C4 4A BF 94 71 80 2B A7 50 0B E6 88 B2 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 42.81.144.56:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 42.81.144.56 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 85 BC 22 CE 17 F5 FB 93 C3 5D 72 61 52 79 04 EC 43 4A A8 B9 0E F9 36 5C 50 5A 90 0B 43 -"Time": 2041/2/25 19:07:08 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:53.948 -Connection: close -EndTime: 09:16:54.054 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 85 0C B5 F3 86 7E DC C8 52 94 39 5E 55 36 08 C9 64 10 D4 83 24 A9 E9 70 77 A9 CE 38 8B -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 183.131.168.146:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.131.168.146 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 86 AC 6E BD 27 18 B5 B7 FE 28 F7 6E 71 E5 18 1C 21 07 D7 88 BD 16 B0 78 A7 BA 5F A1 AC -"Time": 2041/9/7 23:27:24 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:54.088 -Connection: close -EndTime: 09:16:54.213 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 86 DF 1C 41 76 67 1A 97 10 88 09 D4 DD 08 47 8C 5B 8C 7A 1A 4F BE E7 46 86 89 1B 14 FD -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 183.236.28.123:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.236.28.123 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 86 73 2F 46 74 86 A5 FD FB 8A 3C C9 3F 4D 6E 67 89 04 56 69 10 43 3B 1D C5 E4 C7 9C 44 -"Time": 2041/9/7 23:27:24 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:54.230 -Connection: close -EndTime: 09:16:54.436 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 86 0D 3A DE 2F 6E 85 81 8E 0B 47 34 92 68 32 29 B4 15 DA F3 67 68 4D AF 85 5D FC 98 1B -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 117.174.21.130:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 117.174.21.130 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 86 BE 90 28 AB F5 A5 2D 03 DA 54 B1 5E 0D D0 F8 C9 CC 7E 4C 5A A4 8C 6E B0 A8 EA A7 0B -"Time": 2041/9/7 23:27:24 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:54.479 -Connection: close -EndTime: 09:16:54.642 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 86 47 B4 28 8B 4B 8A 33 1E EE 54 77 BF D3 08 C0 74 33 D3 9D B9 B8 53 95 7C 2A 9A 83 B0 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 36.104.132.48:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 36.104.132.48 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 86 06 04 52 1E 92 53 F3 F1 ED E9 4C 70 BB 31 7D 0B BA 84 29 8B 69 69 2A 89 98 D2 90 E6 -"Time": 2041/9/7 23:27:24 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 2D 1C 91 27 D1 D8 D8 D2 21 66 67 38 01 C3 80 95 29 FF 91 E4 6C DD 10 51 B9 1C 95 A3 3F A3 C2 12 4A 74 37 60 9F AF 44 CC 9B 93 D7 F5 12 7C 5F A1 C7 3A 0D 9C E0 1B 90 E2 8C 8F 24 24 D3 07 AA 93 CA F0 B6 3F 5B 13 74 FF 0F 69 E1 6C B4 D4 12 79 50 F0 B9 CC 90 B7 16 5E 4C 8D FF A1 17 C6 E3 4C FB 39 D3 45 F8 8B A0 70 1F D3 04 8C CD BA B2 AD AC 4F B7 1B 5D 79 B8 6C 26 30 59 7B CB AB CC 74 3F 65 8C FB 30 1E D8 AB 30 59 4A 8C F6 2D 68 89 F3 74 F9 46 4B 6A 5A D9 11 D5 E5 68 8D 2D 3A 10 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:54.727 -Connection: close -EndTime: 09:16:54.947 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 86 F2 DB 66 07 9E 19 83 10 94 5C E7 83 1D 9D B5 69 1C 03 E7 86 2A DE 04 08 C1 E6 B0 66 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 61.136.167.20:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 61.136.167.20 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 86 B4 8E EC 67 AC F5 1B D1 11 94 1D 8D 59 DF BB 44 07 13 EE F9 C3 70 1E B2 11 5E 65 FA -"Time": 2041/9/7 23:27:24 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 2D 1C 91 27 D1 D8 D8 D2 21 66 67 38 01 C3 80 95 29 FF 91 E4 6C DD 10 51 B9 1C 95 A3 3F A3 C2 12 4A 74 37 60 9F AF 44 CC 9B 93 D7 F5 12 7C 5F A1 C7 3A 0D 9C E0 1B 90 E2 8C 8F 24 24 D3 07 AA 93 CA F0 B6 3F 5B 13 74 FF 0F 69 E1 6C B4 D4 12 79 50 F0 B9 CC 90 B7 16 5E 4C 8D FF A1 17 C6 E3 4C FB 39 D3 45 F8 8B A0 70 1F D3 04 8C CD BA B2 AD AC 4F B7 1B 5D 79 B8 6C 26 30 59 7B CB AB CC 74 3F 65 8C FB 30 1E D8 AB 30 59 4A 8C F6 2D 68 89 F3 74 F9 46 4B 6A 5A D9 11 D5 E5 68 8D 2D 3A 10 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:54.986 -Connection: close -EndTime: 09:16:55.110 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 86 C0 41 0D FD 0A 45 63 9A 83 9A 8C 47 23 4F 98 8D EB 72 EE 0B 23 9C BF 4C 51 CD 7F 36 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 122.224.186.225:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 122.224.186.225 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 87 8A 05 85 28 19 2D 9F B8 39 D0 5B 5D 2D 38 A0 3D 3A A7 82 8D 59 B9 04 BB B6 FE 4F 4E -"Time": 2042/3/21 3:47:40 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:55.157 -Connection: close -EndTime: 09:16:55.560 -ClientToServerBytes: 778 -ServerToClientBytes: 6138 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 87 32 63 FF A0 73 91 A6 2B A1 0A 17 74 DE 72 F3 D1 FA 25 CD 8B A5 35 D5 A7 C4 9E 39 AD -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 124.116.133.20:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 124.116.133.20 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 87 70 13 F9 DA B3 F4 62 D2 94 64 12 F4 2C B2 EC A4 34 7A A1 F1 DA 0D AB C1 7F 8D 6C BF -"Time": 2042/3/21 3:47:40 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:55.611 -Connection: close -EndTime: 09:16:55.786 -ClientToServerBytes: 778 -ServerToClientBytes: 6069 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 87 9B 3D 90 6E 10 C4 12 E8 7F 10 0B 7B 5A 2D 51 5E EF 76 7D 46 6B 59 A7 96 41 C5 71 EF -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 61.162.100.41:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 61.162.100.41 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 87 FA F7 DF 6E 15 27 DA DE 3F 31 06 31 46 80 1F 6A 80 4B FE 52 EE 89 15 49 67 61 B5 FC -"Time": 2042/3/21 3:47:40 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:55.835 -Connection: close -EndTime: 09:16:56.878 -ClientToServerBytes: 778 -ServerToClientBytes: 3243 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 87 16 FE 5F C9 33 04 A7 22 EE CB CA 41 9A C9 E2 62 01 16 FD 6A D2 0E 3E 3F AF CF 0A 8E -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 61.136.167.18:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 61.136.167.18 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 88 15 D5 D7 7F 0A 44 D5 4D 8F B4 F9 B0 01 DE 42 44 AE F7 40 15 DB ED 8B D5 C7 88 E8 4E -"Time": 2042/10/1 8:07:56 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:56.923 -Connection: close -EndTime: 09:16:57.044 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 88 2E 0E FA 10 04 A2 DD F3 89 9C D4 62 B1 36 C6 CE D6 B5 07 83 F9 3B D1 6C CF 7E 8E 29 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 112.30.197.17:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.30.197.17 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 89 A2 2B D1 49 DD 7D DA 95 3A 3B 35 79 A4 E9 D6 62 AC 28 86 77 DA 76 54 B6 56 41 69 6A -"Time": 2043/4/13 12:28:12 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 2D 1C 91 27 D1 D8 D8 D2 21 66 67 38 01 C3 80 95 29 FF 91 E4 6C DD 10 51 B9 1C 95 A3 3F A3 C2 12 4A 74 37 60 9F AF 44 CC 9B 93 D7 F5 12 7C 5F A1 C7 3A 0D 9C E0 1B 90 E2 8C 8F 24 24 D3 07 AA 93 CA F0 B6 3F 5B 13 74 FF 0F 69 E1 6C B4 D4 12 79 50 F0 B9 CC 90 B7 16 5E 4C 8D FF A1 17 C6 E3 4C FB 39 D3 45 F8 8B A0 70 1F D3 04 8C CD BA B2 AD AC 4F B7 1B 5D 79 B8 6C 26 30 59 7B CB AB CC 74 3F 65 8C FB 30 1E D8 AB 30 59 4A 8C F6 2D 68 89 F3 74 F9 46 4B 6A 5A D9 11 D5 E5 68 8D 2D 3A 10 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:57.108 -Connection: close -EndTime: 09:16:57.288 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 89 81 1E 18 99 2C 9C 9F 70 7C B2 28 0C 4B DE 6C 16 D6 C3 7C 1E 0D EA 65 70 27 18 5C 73 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 222.186.141.186:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 222.186.141.186 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 89 A3 4D C7 4B 78 8B 35 A2 76 8E B4 2E B1 9D 8F 52 C9 A8 E8 2D 6A A6 B3 05 77 75 3D 28 -"Time": 2043/4/13 12:28:12 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 2D 1C 91 27 D1 D8 D8 D2 21 66 67 38 01 C3 80 95 29 FF 91 E4 6C DD 10 51 B9 1C 95 A3 3F A3 C2 12 4A 74 37 60 9F AF 44 CC 9B 93 D7 F5 12 7C 5F A1 C7 3A 0D 9C E0 1B 90 E2 8C 8F 24 24 D3 07 AA 93 CA F0 B6 3F 5B 13 74 FF 0F 69 E1 6C B4 D4 12 79 50 F0 B9 CC 90 B7 16 5E 4C 8D FF A1 17 C6 E3 4C FB 39 D3 45 F8 8B A0 70 1F D3 04 8C CD BA B2 AD AC 4F B7 1B 5D 79 B8 6C 26 30 59 7B CB AB CC 74 3F 65 8C FB 30 1E D8 AB 30 59 4A 8C F6 2D 68 89 F3 74 F9 46 4B 6A 5A D9 11 D5 E5 68 8D 2D 3A 10 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:57.330 -Connection: close -EndTime: 09:16:58.162 -ClientToServerBytes: 853 -ServerToClientBytes: 3532 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 89 B6 6D 6A 57 4E 26 FA 78 A7 A5 AA 5D E4 02 88 EC 6D 7D 1A F5 0B 1E F6 40 43 87 4D 67 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 122.224.186.226:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 122.224.186.226 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 8A 6F 98 04 6D 3E 4D 8F F7 8D 65 87 27 53 5E 85 67 05 E8 52 5B 43 56 35 67 5C 5E C4 6E -"Time": 2043/10/24 16:48:28 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:58.201 -Connection: close -EndTime: 09:16:58.385 -ClientToServerBytes: 853 -ServerToClientBytes: 9557 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 8A 51 06 02 35 68 9B D2 50 11 93 59 28 D9 3D 64 0A C0 47 F0 12 A1 A8 73 65 74 95 F7 36 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 122.225.28.160:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 122.225.28.160 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 8A 3B E6 A3 09 AB FD C6 17 84 E3 A6 24 CA 8F 0D 23 9D 28 6D D8 06 38 8F C3 F4 BA 6E C0 -"Time": 2043/10/24 16:48:28 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F E4 54 93 8D 5C B2 69 26 92 2A 45 C7 B5 A7 07 A1 42 95 58 1C 5D 4A E0 61 88 25 F3 3E 01 F4 F1 D9 C6 42 D1 E9 7B F8 42 5F F3 84 BF 04 A2 71 8E E1 8D 98 DB 30 8A 40 96 8D 5C 05 77 DA 04 99 0B BC AD 95 00 74 EE E9 D0 4C 26 1A E7 9D 9D 87 3C 9A 63 6F BD A5 B3 F0 30 9F 23 3B 02 66 32 83 95 A1 D2 81 B0 99 E5 96 96 D5 68 B9 56 56 5B 65 35 4B B7 FA 93 91 75 32 4B 61 BB D5 F6 C1 19 96 7F 4D 4B 29 4F 1A E6 93 1D 08 4A 26 96 B6 29 F5 98 07 7E BE 7E BF 48 A0 CF 1E 5C C3 7D 86 69 19 EC FD - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:58.426 -Connection: close -EndTime: 09:16:58.559 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 8A 68 BF 27 00 BB FE EE 6A 0A 10 2E 1E CF C4 6E FB 9F CB 2F 23 15 FF 4E D7 7A F3 FF C3 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 114.112.172.52:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 114.112.172.52 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 8A 76 E6 0D D1 A3 64 1A 97 C9 4E 55 2A 0F D3 70 94 89 8F B9 49 34 54 53 5A AA AA CA 98 -"Time": 2043/10/24 16:48:28 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:58.601 -Connection: close -EndTime: 09:16:58.981 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 8A 44 55 6B 5C 2E E5 F0 DE 60 E3 9B 8B 56 35 FE 91 6C 10 89 B3 08 F6 AF F9 D1 F1 6E 24 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 124.236.97.45:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 124.236.97.45 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 8B 08 E8 61 0A 09 21 E3 3E 50 AC 33 10 CE A3 D0 C1 A8 22 89 05 65 88 6F FE 90 25 AF 62 -"Time": 2044/5/5 21:08:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:59.021 -Connection: close -EndTime: 09:16:59.131 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 8A 57 9C 29 CD 8F FC 8C 67 34 D4 05 C8 2E 26 A4 4A F3 CE D4 C4 0A 6E CF 45 91 8F 90 52 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 111.161.122.128:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 111.161.122.128 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 8B 02 4E B3 53 4F 30 28 26 3C 0B 6A 89 0F EA E9 54 0D FA D2 28 2D ED DA B0 2E EB 03 5E -"Time": 2044/5/5 21:08:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:59.174 -Connection: close -EndTime: 09:16:59.489 -ClientToServerBytes: 778 -ServerToClientBytes: 6106 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 8B 3C AD E3 7B 1D AF 22 1A CB 62 3B 70 20 98 64 48 2F 54 01 62 6B CC 5C E4 19 29 A1 1E -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 153.101.208.90:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 153.101.208.90 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 8B DC 55 56 21 75 88 C9 4B DE 63 C7 A9 87 3C FF 6A AB 32 B8 E3 EC B0 12 BD 38 EB AB 1E -"Time": 2044/5/5 21:08:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F E4 54 93 8D 5C B2 69 26 92 2A 45 C7 B5 A7 07 A1 42 95 58 1C 5D 4A E0 61 88 25 F3 3E 01 F4 F1 D9 C6 42 D1 E9 7B F8 42 5F F3 84 BF 04 A2 71 8E E1 8D 98 DB 30 8A 40 96 8D 5C 05 77 DA 04 99 0B BC AD 95 00 74 EE E9 D0 4C 26 1A E7 9D 9D 87 3C 9A 63 6F BD A5 B3 F0 30 9F 23 3B 02 66 32 83 95 A1 D2 81 B0 99 E5 96 96 D5 68 B9 56 56 5B 65 35 4B B7 FA 93 91 75 32 4B 61 BB D5 F6 C1 19 96 7F 4D 4B 29 4F 1A E6 93 1D 08 4A 26 96 B6 29 F5 98 07 7E BE 7E BF 48 A0 CF 1E 5C C3 7D 86 69 19 EC FD - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:59.523 -Connection: close -EndTime: 09:16:59.658 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 8B 7F 1B F8 FA 05 A9 97 17 0C 93 EC A7 1A 56 96 79 68 2B 97 90 EE A3 96 78 DB 1D 69 9D -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 110.242.21.78:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 110.242.21.78 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 8B 72 3D 9E 1E 1A EF F0 75 A3 CE 91 BA 83 23 19 84 3E BE D1 47 1B 3E 4F 5B 12 58 85 AE -"Time": 2044/5/5 21:08:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:59.708 -Connection: close -EndTime: 09:16:59.945 -ClientToServerBytes: 853 -ServerToClientBytes: 9483 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 8B 60 8C 4E 74 84 F1 0A 80 C1 31 D2 CE 90 51 53 D2 6A 58 89 C4 12 31 CE 90 1E 70 7F 08 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 61.149.22.105:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 61.149.22.105 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 8B 24 1A D9 74 66 7D DE 69 14 08 32 43 85 C8 E8 F2 61 FD 7F FE 37 0B 0F 9C F4 D6 B9 D3 -"Time": 2044/5/5 21:08:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:16:59.989 -Connection: close -EndTime: 09:17:00.411 -ClientToServerBytes: 853 -ServerToClientBytes: 9409 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 8C 0F 63 45 60 B4 47 68 FB 45 44 FD B7 54 51 63 7F 00 61 FC 38 54 D7 87 73 57 9C 6C 57 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 58.223.166.122:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 58.223.166.122 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 8C 31 35 78 68 FD C2 E0 CB AE 1E 01 14 DE 36 04 62 F5 66 84 19 BA 77 AC DF 2E EA 65 F5 -"Time": 2044/11/16 1:29:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:00.454 -Connection: close -EndTime: 09:17:00.743 -ClientToServerBytes: 853 -ServerToClientBytes: 9504 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 8C D1 7C 1D 8D AA 54 D7 22 8E 68 D5 FA E8 00 10 02 F9 4C F9 7A B7 D8 77 A6 34 07 C0 65 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 112.90.135.92:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.90.135.92 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 8C 22 FF C5 96 68 FF 89 96 D5 F0 77 94 3C 93 11 8F 5F 68 4C B6 09 A7 71 01 0B 2C 3A 18 -"Time": 2044/11/16 1:29:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:00.766 -Connection: close -EndTime: 09:17:00.881 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 8C AE EE 7E 8A 4C B1 76 45 7B 47 37 73 39 A5 BE 21 71 A7 56 9F 3E C8 52 C7 DB 6C A7 7E -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 123.53.139.39:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 123.53.139.39 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 8C 84 84 67 6D 50 D8 00 14 26 79 C7 27 65 48 4A 50 BC 69 D1 70 66 4B 79 3E 86 12 7B 2D -"Time": 2044/11/16 1:29:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:00.923 -Connection: close -EndTime: 09:17:01.046 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 8C 5E 23 DA 57 22 F9 A4 AE D6 05 39 05 8B 62 20 9C E9 10 89 A5 23 EC 3A 43 C1 E4 87 7A -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 180.97.178.165:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 180.97.178.165 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 8D 90 FF D7 F6 81 C7 99 F9 29 51 E2 40 CA 24 DD 02 27 69 17 17 CA 9A 60 58 DB 64 20 76 -"Time": 2045/5/29 5:49:16 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:01.079 -Connection: close -EndTime: 09:17:01.228 -ClientToServerBytes: 778 -ServerToClientBytes: 6138 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 8D 65 F3 14 E4 0F 1C 2B A2 31 B8 65 7C 15 4F 89 5F AF 07 B6 38 B2 E8 24 E4 80 BE 48 E3 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 14.17.80.76:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 14.17.80.76 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 8D 2A 40 49 2D 1D 6A 48 2F B4 72 82 65 6B 91 9E 8A DA F8 3F 53 2A 42 27 B7 74 91 27 6B -"Time": 2045/5/29 5:49:16 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:01.238 -Connection: close -EndTime: 09:17:01.318 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 8D 6A 6F 89 B6 DA 8D E6 C6 32 9B E7 03 5C 32 C6 9A B8 2A 34 F9 88 74 CF 23 B4 6C 70 E9 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 223.111.19.81:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 223.111.19.81 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 8D 92 45 9A EB 87 5B 94 A7 50 4D A9 74 34 38 CE 93 77 AE 9F 50 49 62 AD 84 CB 30 15 87 -"Time": 2045/5/29 5:49:16 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:01.358 -Connection: close -EndTime: 09:17:01.482 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 8D 7C 72 93 0E 41 EE 5D 5C 42 4C FB 2C 19 4D DC BB B8 54 94 DC 66 29 BE BF 90 1D B2 81 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 223.111.19.91:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 223.111.19.91 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 8D F3 CC 31 B7 D4 3A EE 62 B1 CD 07 68 68 6C F2 10 21 61 16 BD 03 47 40 21 60 45 13 5B -"Time": 2045/5/29 5:49:16 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 11 D7 27 D2 55 6A 2A C9 5E F7 BB 6A BC 3C 2F E9 D6 63 6B 4C C9 EB 73 1B 1B 2C 7D CA 91 28 A7 40 F4 25 D2 44 99 A7 41 E4 5A 1A 60 67 87 F9 49 22 F2 39 FB 0F 20 CA EB AC A2 4D 0B 5D AE 92 D2 E7 70 53 AF C7 64 92 4A B0 9D 04 96 3D F4 23 76 A5 06 8E 66 D5 16 FE DA 22 2B F0 19 52 E1 79 D2 F3 D6 69 9A 0B 72 31 D0 6B FE CA E3 46 75 9C 1E D2 3E DD 82 51 8B F3 71 2B 58 4F 5D 89 21 1A 46 E9 00 0A EC EF 0B 7F C7 61 04 FD 8C 71 81 99 81 1E DF 75 4B 28 D5 B9 98 A9 B7 83 6A FC 57 D9 11 9A - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:01.536 -Connection: close -EndTime: 09:17:01.778 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 8D 90 BA 6B 0C C7 63 DE 86 77 8B C2 8F D0 5B 66 7E 58 5E 49 B1 4F 91 37 9B 17 D3 0B 10 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 58.216.109.95:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 58.216.109.95 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 8D 6D BB 48 76 6B 90 6E C0 8A 5C 34 41 45 20 AB 3A ED 50 AE 0B 83 8D E8 E7 0C C3 03 F3 -"Time": 2045/5/29 5:49:16 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:01.819 -Connection: close -EndTime: 09:17:02.044 -ClientToServerBytes: 778 -ServerToClientBytes: 6069 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 8D 41 B7 ED A0 D9 40 B3 5D 34 3E B6 F1 3C FA C6 7B 34 64 18 70 36 A8 1D BA 1B 8A 35 62 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 221.180.208.50:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 221.180.208.50 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 8E B5 40 58 E2 22 30 52 8E D3 9F 83 C7 B6 E1 48 13 2E 1D F2 77 7C E1 77 2B DE 35 6E AA -"Time": 2045/12/9 10:09:32 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:02.098 -Connection: close -EndTime: 09:17:02.244 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 8E B5 F4 A6 06 D0 94 83 2B 94 F1 C6 0F 9C 76 64 46 23 61 C4 75 1E 6E A4 2F D7 4D 5C 96 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 111.32.1.230:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 111.32.1.230 - - -HTTP/1.1 502 Fiddler - Connection Failed -Date: Wed, 26 Dec 2018 01:17:23 GMT -Content-Type: text/html; charset=UTF-8 -Connection: close -Cache-Control: no-cache, must-revalidate -Timestamp: 09:17:23.248 - -[Fiddler] The connection to '111.32.1.230' failed.
    Error: TimedOut (0x274c).
    System.Net.Sockets.SocketException 由于连接方在一段时间后没有正确答复或连接的主机没有反应，连接尝试失败。 111.32.1.230:443 - ------------------------------------------------------------------- - -CONNECT 183.131.168.187:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.131.168.187 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 A3 BC 94 24 38 12 72 C9 BF 82 8C 12 77 B0 1A DB 37 28 1D 0E 07 20 AF 9F 81 03 80 A6 4C -"Time": 2057/2/7 5:15:08 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:23.282 -Connection: close -EndTime: 09:17:23.395 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 A3 A0 1E F0 FE 77 76 00 2C 93 4D B3 1E D2 C9 08 87 B6 95 1F BA 06 93 8B 79 5F A4 87 F0 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 125.90.206.76:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 125.90.206.76 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 A3 07 A7 7B 4F 45 3D FF 3F 4B 94 99 6F AF 97 2F 12 DD 13 D9 C4 89 07 32 2B EC 16 48 30 -"Time": 2057/2/7 5:15:08 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:23.412 -Connection: close -EndTime: 09:17:23.672 -ClientToServerBytes: 778 -ServerToClientBytes: 6138 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 A3 CD 33 BD A2 43 6F 3A 50 E7 E8 54 A4 61 D7 78 AA B1 9B 63 2F B5 B1 BE BD 93 4C 61 4E -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 180.163.150.115:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 180.163.150.115 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 A3 65 98 6C 9F 16 0B 29 A9 D3 E1 9F D2 8C BE 18 49 AA D6 A6 0E 95 8E FA 97 A1 6F 57 4B -"Time": 2057/2/7 5:15:08 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:23.709 -Connection: close -EndTime: 09:17:23.834 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 A3 5D 14 BD 46 CA D7 13 E2 96 0C 46 5C DE 9D E7 44 AF 53 C9 D3 2C 7C 28 A4 95 52 2F 1E -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 110.242.21.24:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 110.242.21.24 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 A3 EB FC A9 FF D0 B4 62 73 1D AF F8 D3 D4 72 71 85 1D AA B1 4F 90 80 FC 3F F4 72 4D A5 -"Time": 2057/2/7 5:15:08 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:23.890 -Connection: close -EndTime: 09:17:24.855 -ClientToServerBytes: 853 -ServerToClientBytes: 9504 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 A3 3E 59 2C 16 BB 2E A1 13 D9 FA E3 14 5A F4 3E F5 A9 2B 5C 3F C7 6D 2E 44 8A F9 D8 99 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 42.81.144.53:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 42.81.144.53 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 A4 5E 14 09 D0 84 0E E6 61 A6 F1 45 72 3E E2 09 5F ED DE CA 83 26 BC 19 61 5D E6 C2 45 -"Time": 2057/8/20 9:35:24 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:24.898 -Connection: close -EndTime: 09:17:25.056 -ClientToServerBytes: 853 -ServerToClientBytes: 9520 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 A4 FF 34 38 6B D2 A6 DB EC 57 59 16 CA 13 D0 39 5B 16 0C C4 CD 60 F8 48 CF 77 D0 D3 E9 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 58.220.71.63:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 58.220.71.63 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 A5 D3 E0 EA 18 0B 8C 45 F4 9E C5 78 4A 3C 30 35 0C 61 13 93 BD 80 3B F3 56 A4 E2 20 71 -"Time": 2058/3/2 13:55:40 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:25.101 -Connection: close -EndTime: 09:17:25.231 -ClientToServerBytes: 778 -ServerToClientBytes: 6138 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 A5 25 33 13 04 EB EC 7D 7D 8B C7 0C 12 65 8F CA CF 5C 62 60 16 8D E1 19 CC 39 8D 85 82 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 60.174.241.97:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 60.174.241.97 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 A5 2D DD 44 3D E4 55 A1 2B 5D 4B 11 D7 AD 32 14 AC B9 24 B7 9E F7 7F 90 C4 7B 1C 0C A6 -"Time": 2058/3/2 13:55:40 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:25.278 -Connection: close -EndTime: 09:17:25.421 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 A5 9A F4 5E FD 14 AA 68 19 EC A7 3E 74 A9 BD 01 87 34 D2 C7 9F 46 CD A1 6F C9 47 1B 7A -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 42.123.117.23:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 42.123.117.23 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 A5 D8 FF AB 37 34 D4 EA 20 2E 07 79 7B 88 B6 C9 58 A5 8A 55 91 1E BF B6 C0 B3 2E CC AB -"Time": 2058/3/2 13:55:40 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:25.450 -Connection: close -EndTime: 09:17:26.296 -ClientToServerBytes: 853 -ServerToClientBytes: 3532 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 A5 9D 99 F7 55 7F 51 5F AB 57 C3 E2 B6 2B D1 C3 30 39 BB 17 4F FB 84 FF 64 DC 9D 0B 49 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 223.111.196.49:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 223.111.196.49 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 A6 D3 CD AA D1 80 BC 3D 2F 03 3A 8F 9D D5 97 E0 CB 2D A8 2E 6F 46 93 E7 D6 1B 1A 67 84 -"Time": 2058/9/12 18:15:56 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:26.344 -Connection: close -EndTime: 09:17:26.550 -ClientToServerBytes: 853 -ServerToClientBytes: 9520 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 A6 70 6E 0C 4E 70 24 5E 13 A6 E4 23 70 09 DA F7 22 48 7A 4F AC F9 9A AF 3C 79 6C 7B 34 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 111.32.1.206:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 111.32.1.206 - - -HTTP/1.1 502 Fiddler - Connection Failed -Date: Wed, 26 Dec 2018 01:17:47 GMT -Content-Type: text/html; charset=UTF-8 -Connection: close -Cache-Control: no-cache, must-revalidate -Timestamp: 09:17:47.553 - -[Fiddler] The connection to '111.32.1.206' failed.
    Error: TimedOut (0x274c).
    System.Net.Sockets.SocketException 由于连接方在一段时间后没有正确答复或连接的主机没有反应，连接尝试失败。 111.32.1.206:443 - ------------------------------------------------------------------- - -CONNECT 125.90.206.77:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 125.90.206.77 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 BB 23 79 B3 86 0B 59 73 69 26 94 47 48 EF E7 D7 C8 42 65 43 A7 30 46 EA 0D 1A D5 6C 08 -"Time": 2069/11/11 13:21:32 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:47.573 -Connection: close -EndTime: 09:17:47.665 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 BB 5F B5 66 94 B2 6B 90 86 A4 96 C8 7F F2 50 E8 4F B9 45 A7 F4 77 EF A8 0C EF 50 84 95 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 123.128.14.71:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 123.128.14.71 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 BB 3C D4 BE 43 2F 70 2A 37 97 83 A2 51 F0 1A 0D 71 12 DC 75 4F A3 36 89 0B 8E 98 03 1D -"Time": 2069/11/11 13:21:32 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F B6 13 C2 2D 74 A4 A8 55 8C 97 D8 B9 19 44 F2 C7 8C 51 28 C1 19 94 AF A9 BF 0C 58 21 CF CB 0C 63 DE 03 59 9B D7 81 94 85 C5 16 5A BB 48 EF 52 08 74 CD F6 CB 27 74 82 0C 05 DC EE F5 FE 90 9D 54 BE 20 ED 70 46 D5 B5 72 65 6D CC B3 F6 C7 E1 FD C9 72 63 B5 27 D8 CA 7A 40 4E B6 8F 89 6D 2A 8C AA 2D 49 33 B9 4D A5 2F 7B F7 F4 73 CC E5 7A 5C 81 02 28 29 4D 77 12 68 24 9B B8 9C 68 7C 28 14 C6 65 F5 CB 4A 2C 62 44 37 FC B7 85 14 8C 21 0B 16 ED B6 21 36 8A C2 A4 7E D5 46 D1 F8 96 D1 AA - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:47.707 -Connection: close -EndTime: 09:17:47.824 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 BB AE 07 65 8B 6F 0A 3C A3 DD EA 74 EE 9A 4A 6B 34 00 18 D7 7E 59 A1 CE 5A 67 22 35 61 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 222.186.141.142:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 222.186.141.142 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 BB 0D 0C C1 DC E0 F0 E8 4C 2E 98 E2 54 96 EE 8A 15 FE 76 8E 89 07 87 B1 C5 7B 20 E7 25 -"Time": 2069/11/11 13:21:32 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:47.861 -Connection: close -EndTime: 09:17:48.699 -ClientToServerBytes: 853 -ServerToClientBytes: 3532 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 BB 31 95 23 C2 3A 08 5C D1 84 E6 22 03 F9 62 EF A1 32 20 BE 9A BF BD 0B 8C B1 BF 7A 65 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 153.101.208.93:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 153.101.208.93 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 BC 93 89 8E 79 F3 67 6A 1E 60 D1 EA 1C 70 F4 79 28 F2 0F DA 2D 2D 5E E3 1D C4 5A 60 D2 -"Time": 2070/5/24 17:41:48 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:48.895 -Connection: close -EndTime: 09:17:49.157 -ClientToServerBytes: 853 -ServerToClientBytes: 9520 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 BC 7A A2 FD 8F E5 6E ED 63 03 52 C0 1A AB F2 BF D6 E8 83 24 84 9A AE 3A BF AB 5D DB 26 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 150.138.214.85:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 150.138.214.85 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 BD 48 01 74 AD 89 95 8D 7D E0 F7 AC 66 F1 52 7B B6 4D A1 E2 CC 0D 99 38 54 33 F4 DE 6E -"Time": 2070/12/4 22:02:04 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:49.208 -Connection: close -EndTime: 09:17:49.384 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 BD 36 3F A0 41 1F 6F 1A 2E 78 1E F1 B2 49 E5 BE 18 6B 6D 4B B6 42 B1 CD 78 39 DA 64 E7 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 14.17.80.71:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 14.17.80.71 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 BD BF A1 81 5B DC 89 5F 17 BE 74 66 39 FC 6E 03 21 45 40 C6 0B F6 BA 5C 84 B9 A4 F9 F4 -"Time": 2070/12/4 22:02:04 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:49.393 -Connection: close -EndTime: 09:17:49.532 -ClientToServerBytes: 778 -ServerToClientBytes: 6138 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 BD 8F DE 51 40 90 ED 36 5C 9F 62 FD 59 47 F9 92 FA AF 03 9E 11 DB E4 05 D0 87 B8 34 58 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 59.83.228.89:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 59.83.228.89 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 BD AC A1 C8 27 C0 40 5E C7 D7 5E DD B7 D0 91 70 09 16 2B F9 FC 87 27 35 95 AF 2B 90 BD -"Time": 2070/12/4 22:02:04 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:49.573 -Connection: close -EndTime: 09:17:49.707 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 BD 89 38 EA DB 75 2C 86 A8 5A 52 8E 34 8A 3B 99 45 C8 EA A6 30 8C F4 1D 1A 65 72 CD F7 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 110.18.244.44:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 110.18.244.44 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 BD BB D2 DB 22 88 C5 64 3B 20 DC 46 07 4A 4C 87 8A CF 07 58 40 EC 2B 1E E3 09 08 3D B4 -"Time": 2070/12/4 22:02:04 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:49.752 -Connection: close -EndTime: 09:17:49.938 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 BD 55 3D B6 D7 CE 2A 9B 1C E1 6C 14 0F F5 1D E8 21 58 6E 37 5F 8C 8F 50 76 59 F7 92 C5 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 42.81.144.55:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 42.81.144.55 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 BE B2 ED 48 14 21 23 04 B0 05 18 17 96 7B 55 30 99 5D FB 84 73 85 18 9F 8B ED BE AC 64 -"Time": 2071/6/17 2:22:20 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:50.143 -Connection: close -EndTime: 09:17:50.270 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 BE AB AE 8A 44 5B 9D 98 76 92 02 F0 B7 67 41 C6 E0 91 74 95 7F 2B 16 51 0F 15 4C 9D A1 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 120.198.197.87:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 120.198.197.87 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 BE A2 A2 5F 29 26 1D 55 76 B7 9C FC 79 71 DC 01 98 E1 73 76 6F 72 69 76 10 15 0D 71 2C -"Time": 2071/6/17 2:22:20 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 62 34 17 9F 7C 81 8B B9 5A E7 BD F9 20 53 D5 01 F2 7B 92 EA 7F 9A 63 BC 24 22 C9 BD 3B D7 7E 79 41 DD 0D F3 05 67 03 71 03 50 BE 7C DF FD 1C 9A 90 F9 9E 25 58 96 F8 15 36 43 D7 F3 5A CD D9 ED 8D 85 CD 86 EE 20 AF FD 5C 9E EE 1D EF D8 1F 8B CC 3B 59 EA FE B4 40 FB 5F 56 13 61 7C FF 7A 35 DB 84 15 C4 33 11 CF 91 29 C0 64 2B 3F A4 56 4C 16 C0 A7 CF 9A 4D AC E7 01 7D 91 7E BC DE 8E 5B 45 6D E2 6A 9A 81 C8 A7 75 FF 91 CD 5A 36 FA 8B 54 F7 0E C2 E2 39 59 40 3A AD B2 87 AA 0C A6 C4 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:50.298 -Connection: close -EndTime: 09:17:50.441 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 BE 20 55 89 35 46 C0 49 26 D8 00 28 E2 DA C0 9E 9D 82 B4 6E 49 35 8D BB 52 50 82 AB 8E -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 218.58.206.57:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 218.58.206.57 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 BE 3F 26 66 F3 38 3E 0C C0 6F 6E 87 2F F8 EB B8 B9 5F 2F FB 6F F0 F1 50 05 80 1D C9 17 -"Time": 2071/6/17 2:22:20 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:50.491 -Connection: close -EndTime: 09:17:50.626 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 BE 20 37 EE C7 73 F3 CA C5 09 78 14 57 EC BC D8 4D 64 CD 76 1A 64 EF E0 A6 4C A7 F9 B6 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 61.167.54.26:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 61.167.54.26 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 BE 90 65 95 84 5D D0 5D 85 E5 E0 19 FD 7E 29 83 16 FA B1 1B 14 A5 6D 55 78 F6 6E AB 52 -"Time": 2071/6/17 2:22:20 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:50.691 -Connection: close -EndTime: 09:17:50.896 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 BE BA 86 4A 73 F0 6F 9D B8 F0 2D 16 45 E2 FF C5 20 4B BC B2 2B 50 C6 E5 16 10 9E F8 48 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 183.214.1.24:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.214.1.24 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 BE 57 EB F4 F8 C3 9F 0C 40 32 28 7C C0 54 DB 5E 4A 3A 1C 0A 54 E9 98 0C 44 12 AF AC 64 -"Time": 2071/6/17 2:22:20 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:50.927 -Connection: close -EndTime: 09:17:51.064 -ClientToServerBytes: 778 -ServerToClientBytes: 6138 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 BE 70 95 45 8E E0 41 06 7A 14 22 9D 31 41 D5 60 D8 1D 4A B9 AF CC 6A 11 E4 CA 1E 76 CF -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 117.149.154.187:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 117.149.154.187 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 BF 74 32 1D C7 3F 5A 39 BC 73 70 61 7A 8D 84 08 6B 0F 08 CD 0C 08 5E AD 82 7F 7F 0E 95 -"Time": 2071/12/28 6:42:36 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:51.106 -Connection: close -EndTime: 09:17:51.251 -ClientToServerBytes: 778 -ServerToClientBytes: 6138 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 BF 15 09 8C 73 22 14 64 CF 79 8F 41 A5 0C B7 9D A8 7E C9 55 28 23 AE 4F 02 BF 36 C4 83 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 111.6.177.215:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 111.6.177.215 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 BF C4 4C 0C B4 3C 16 87 AF 58 1B 96 32 EC FF 20 38 F4 EF 22 BE AD 1F CD A9 E4 28 25 99 -"Time": 2071/12/28 6:42:36 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:51.296 -Connection: close -EndTime: 09:17:51.537 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 BF 47 FE 3D 2F 03 0E 09 E1 97 E5 5A C3 8E 1D 30 77 BE 69 E7 BD 8F 08 8D 9D 0D 21 86 3E -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 117.169.93.86:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 117.169.93.86 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 BF 49 BC 52 D0 DD A9 CF 90 0A F9 B6 DB 41 A8 3A 4B 67 48 D7 A2 F7 26 87 0C 25 0D C8 24 -"Time": 2071/12/28 6:42:36 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 62 34 17 9F 7C 81 8B B9 5A E7 BD F9 20 53 D5 01 F2 7B 92 EA 7F 9A 63 BC 24 22 C9 BD 3B D7 7E 79 41 DD 0D F3 05 67 03 71 03 50 BE 7C DF FD 1C 9A 90 F9 9E 25 58 96 F8 15 36 43 D7 F3 5A CD D9 ED 8D 85 CD 86 EE 20 AF FD 5C 9E EE 1D EF D8 1F 8B CC 3B 59 EA FE B4 40 FB 5F 56 13 61 7C FF 7A 35 DB 84 15 C4 33 11 CF 91 29 C0 64 2B 3F A4 56 4C 16 C0 A7 CF 9A 4D AC E7 01 7D 91 7E BC DE 8E 5B 45 6D E2 6A 9A 81 C8 A7 75 FF 91 CD 5A 36 FA 8B 54 F7 0E C2 E2 39 59 40 3A AD B2 87 AA 0C A6 C4 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:51.568 -Connection: close -EndTime: 09:17:51.692 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 BF 61 4B E2 64 3A 5D E0 86 91 85 1B 87 9C 6F 78 AE B4 B8 EC 81 CC 78 AB 93 8E 25 C6 B2 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 183.253.58.253:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.253.58.253 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 BF 8B F5 30 CA 7B 01 8A D9 57 E1 2A 88 91 3C 2F E5 EF 3B 0E 3C C8 E3 9F 78 6B 15 6C 44 -"Time": 2071/12/28 6:42:36 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:51.730 -Connection: close -EndTime: 09:17:51.947 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 BF F8 5A BB B1 16 FE ED 53 01 71 4C 03 87 07 9A AE 05 80 1F B3 BD 83 71 FE 55 59 EF D3 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 113.207.0.98:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 113.207.0.98 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 BF 40 07 D8 C4 1A 01 00 C7 01 D1 B8 40 01 5A 67 0E EB AB CE B2 00 17 23 24 3E A1 79 99 -"Time": 2071/12/28 6:42:36 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:51.984 -Connection: close -EndTime: 09:17:52.121 -ClientToServerBytes: 778 -ServerToClientBytes: 6106 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 BF FC F1 78 EF 80 74 CE 70 9F E8 A0 30 8B 68 AA EC 11 2E 8E 31 C0 37 91 D2 F2 A1 56 EF -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 222.141.84.250:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 222.141.84.250 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 C0 8B 50 7E AF 68 17 4F 2F CD DF BF 97 BE 6E 93 F3 3A FD 8E B5 65 F0 E4 BB 48 ED EE 62 -"Time": 2072/7/9 11:02:52 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:52.159 -Connection: close -EndTime: 09:17:52.353 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 C0 A8 44 43 C1 0E DC 09 52 9E 71 FB 17 38 2C A0 43 2D 12 88 08 9B 14 F0 44 BD 5B 3A A7 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 14.17.80.69:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 14.17.80.69 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 C0 CE 73 C5 1C 82 69 8C FD 4A B9 E5 E9 72 79 18 71 DA 31 B1 83 71 64 A4 82 BF 0A E8 4E -"Time": 2072/7/9 11:02:52 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:52.363 -Connection: close -EndTime: 09:17:52.443 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 C0 F4 75 C2 CD 0F 08 F3 7B C4 C1 18 EB 2B 23 A9 DE 06 DC 61 AE E5 BD 4F 6E F0 78 A4 F5 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 183.214.1.251:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.214.1.251 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 C0 C4 14 CB FC E3 CD 27 6A 3C 63 5C 46 55 98 34 CA F4 13 98 08 DC 60 D2 D7 8E 4F 10 14 -"Time": 2072/7/9 11:02:52 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:52.470 -Connection: close -EndTime: 09:17:52.953 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 C0 1B 61 E6 B3 96 AA DE 64 CC 49 54 1F 4B C9 16 3A 61 DB CE CF E1 12 84 4B 89 6C 2E 75 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 112.51.125.62:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.51.125.62 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 C0 EB 93 4A F8 AD C7 AE 33 E1 67 A2 FB 0B BE E7 95 75 8D 36 E6 CD B0 83 B3 43 53 F6 F5 -"Time": 2072/7/9 11:02:52 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:52.978 -Connection: close -EndTime: 09:17:53.115 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 C0 94 52 DF 54 67 FD 2E 9D 2C 49 B9 EE 4E 7A 8D 16 7E 1B 17 76 DB AB 37 FB 64 CE 98 06 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 222.138.255.46:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 222.138.255.46 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 C1 43 35 D8 02 61 61 34 92 91 18 56 5C 10 1E D0 8F 7F 9C 0C F0 B7 57 3C 6E 2B 2C 0F B7 -"Time": 2073/1/19 15:23:08 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:53.145 -Connection: close -EndTime: 09:17:53.251 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 C1 FB 57 DC 94 6E 4C 9C A9 AB F4 39 50 0E 8D 55 40 B0 C4 9F 79 27 A3 1F 19 F6 65 88 CB -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 117.27.245.52:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 117.27.245.52 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 C1 08 2A 55 2B 63 0C 9A 20 E0 71 47 D8 5F 0C F6 06 E7 A1 71 56 78 F1 EE 40 8F F1 BB 95 -"Time": 2073/1/19 15:23:08 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 62 34 17 9F 7C 81 8B B9 5A E7 BD F9 20 53 D5 01 F2 7B 92 EA 7F 9A 63 BC 24 22 C9 BD 3B D7 7E 79 41 DD 0D F3 05 67 03 71 03 50 BE 7C DF FD 1C 9A 90 F9 9E 25 58 96 F8 15 36 43 D7 F3 5A CD D9 ED 8D 85 CD 86 EE 20 AF FD 5C 9E EE 1D EF D8 1F 8B CC 3B 59 EA FE B4 40 FB 5F 56 13 61 7C FF 7A 35 DB 84 15 C4 33 11 CF 91 29 C0 64 2B 3F A4 56 4C 16 C0 A7 CF 9A 4D AC E7 01 7D 91 7E BC DE 8E 5B 45 6D E2 6A 9A 81 C8 A7 75 FF 91 CD 5A 36 FA 8B 54 F7 0E C2 E2 39 59 40 3A AD B2 87 AA 0C A6 C4 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:53.292 -Connection: close -EndTime: 09:17:53.446 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 C1 A9 ED 51 30 EA D8 0D C1 06 A9 BF 7F 9D EC 9A 28 4A 59 72 EA 6A FF 89 32 6B 65 23 A8 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 112.90.135.94:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.90.135.94 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 C1 3A E9 F7 A6 80 FB 68 25 2E 23 BC 80 EA 52 1B 32 62 5B A4 C4 E0 7F FE 42 08 5E 8E F3 -"Time": 2073/1/19 15:23:08 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:53.469 -Connection: close -EndTime: 09:17:53.580 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 C1 68 0C F3 A9 FD EB EC 00 FD 4B EA A6 8F D1 EE BF E7 A2 77 F7 8E 7C 1B 98 6E D1 64 C4 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 58.51.168.46:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 58.51.168.46 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 C1 65 50 F6 01 AC EE 75 A4 BF 7C 70 EC FE 4B 7F F7 68 61 3C 39 AA 2B 09 FE 6F 4F D8 19 -"Time": 2073/1/19 15:23:08 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:53.617 -Connection: close -EndTime: 09:17:53.753 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 C1 D4 E9 32 DE 5D 7B B4 52 AD 1E F0 AA D2 0A F1 90 8B 92 12 50 BD 2C 8B BE 62 94 FA 11 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 180.97.178.146:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 180.97.178.146 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 C1 F7 61 DF D9 3E DC DC 6E AB 7E B2 6D D3 5C CA DA 51 36 C2 9F 88 EB B1 76 E7 77 C4 B8 -"Time": 2073/1/19 15:23:08 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:53.790 -Connection: close -EndTime: 09:17:54.014 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 C1 80 6F C7 38 8C 47 4B 1D 93 A5 2A 38 8A C5 CE 6A 45 85 E1 89 C7 9A 93 36 5B 21 AB 1B -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 117.169.93.247:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 117.169.93.247 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 C2 C2 39 93 0D 49 E5 68 AE 20 21 49 50 34 34 55 E2 A2 82 24 B0 97 D4 A9 9D 39 71 38 36 -"Time": 2073/8/1 19:43:24 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:54.049 -Connection: close -EndTime: 09:17:54.160 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 C2 E4 EB 72 A5 B1 C1 D6 17 54 D3 0A D4 D9 67 AB BC 55 D8 01 41 4F ED CD 79 2F 15 F4 B2 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 113.207.81.76:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 113.207.81.76 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 C2 B9 49 20 65 00 A6 FC 99 21 06 5A 6E D7 0A 76 C8 1D B2 1A A7 AA 44 CD A9 AE E9 5E 74 -"Time": 2073/8/1 19:43:24 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:54.198 -Connection: close -EndTime: 09:17:54.337 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 C2 99 BA 4B 74 44 8D DA 6F 8E 60 33 B6 0B C3 9A FE 2B 4F B0 EF AF B0 8B 3A A1 BE 7E 70 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 123.53.139.60:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 123.53.139.60 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 C2 66 A3 CF 8D 79 69 B9 07 94 B6 CD 9A EB DE C5 7B 33 FD 50 4D A7 AA 9E ED B2 F0 52 55 -"Time": 2073/8/1 19:43:24 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 62 34 17 9F 7C 81 8B B9 5A E7 BD F9 20 53 D5 01 F2 7B 92 EA 7F 9A 63 BC 24 22 C9 BD 3B D7 7E 79 41 DD 0D F3 05 67 03 71 03 50 BE 7C DF FD 1C 9A 90 F9 9E 25 58 96 F8 15 36 43 D7 F3 5A CD D9 ED 8D 85 CD 86 EE 20 AF FD 5C 9E EE 1D EF D8 1F 8B CC 3B 59 EA FE B4 40 FB 5F 56 13 61 7C FF 7A 35 DB 84 15 C4 33 11 CF 91 29 C0 64 2B 3F A4 56 4C 16 C0 A7 CF 9A 4D AC E7 01 7D 91 7E BC DE 8E 5B 45 6D E2 6A 9A 81 C8 A7 75 FF 91 CD 5A 36 FA 8B 54 F7 0E C2 E2 39 59 40 3A AD B2 87 AA 0C A6 C4 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:54.372 -Connection: close -EndTime: 09:17:54.477 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 C2 02 E6 FE 10 D9 F6 78 6A 24 AA F0 BD B5 7F EC 37 AE 2B 5C CD 46 68 94 70 FE 0C F0 EB -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 221.235.187.130:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 221.235.187.130 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 C2 D9 89 CD 4F 88 D9 6C A1 50 B4 46 66 68 00 22 6E D0 89 A9 B7 B5 05 D8 5B 9D F4 E5 C5 -"Time": 2073/8/1 19:43:24 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:54.501 -Connection: close -EndTime: 09:17:54.614 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 C2 4E D5 8C 11 65 8A 5F FE 84 DF 08 37 D3 EC 05 1E 0E D0 ED 9F 64 EA C2 EF C9 87 EE 03 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 121.11.81.104:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 121.11.81.104 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 C2 DB 63 7B 8F 0D 6F 9F F3 D5 92 B4 35 08 31 8E 05 FB A5 F4 27 9E 4A 0A 5A 06 61 9A 25 -"Time": 2073/8/1 19:43:24 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:54.630 -Connection: close -EndTime: 09:17:54.731 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 C2 F9 09 5A 55 ED 3E 18 AF D3 16 33 3F 62 84 D8 F7 7D 68 EA 15 46 EC 44 F8 50 8A 49 CC -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 183.214.1.32:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.214.1.32 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 C2 15 E1 B4 E9 39 3B AA F9 56 5E AB E7 AB 15 84 83 B9 FD A8 07 79 09 56 50 3B 6E 52 24 -"Time": 2073/8/1 19:43:24 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:54.759 -Connection: close -EndTime: 09:17:54.867 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 C2 4F 66 B7 A4 41 D5 3D 35 FA A0 D7 34 D2 1C 14 A4 81 B5 A6 C7 F4 D8 44 CE 46 8F 12 56 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 183.236.28.122:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 183.236.28.122 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 C2 60 56 52 55 B0 84 14 ED 53 8E FD 35 E1 FE C5 D3 CB E4 6B 6B 7B 4D 23 3B 3E E5 74 05 -"Time": 2073/8/1 19:43:24 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 62 34 17 9F 7C 81 8B B9 5A E7 BD F9 20 53 D5 01 F2 7B 92 EA 7F 9A 63 BC 24 22 C9 BD 3B D7 7E 79 41 DD 0D F3 05 67 03 71 03 50 BE 7C DF FD 1C 9A 90 F9 9E 25 58 96 F8 15 36 43 D7 F3 5A CD D9 ED 8D 85 CD 86 EE 20 AF FD 5C 9E EE 1D EF D8 1F 8B CC 3B 59 EA FE B4 40 FB 5F 56 13 61 7C FF 7A 35 DB 84 15 C4 33 11 CF 91 29 C0 64 2B 3F A4 56 4C 16 C0 A7 CF 9A 4D AC E7 01 7D 91 7E BC DE 8E 5B 45 6D E2 6A 9A 81 C8 A7 75 FF 91 CD 5A 36 FA 8B 54 F7 0E C2 E2 39 59 40 3A AD B2 87 AA 0C A6 C4 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:54.881 -Connection: close -EndTime: 09:17:55.127 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 C2 21 BE 1D 2A 08 D8 19 DE 8C 7E 77 CA 5C 7D F2 C6 65 64 47 F3 11 F9 56 D5 3D AB 9D 4A -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 221.235.187.119:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 221.235.187.119 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 C3 26 BC D2 D4 78 1C ED 5F CE C5 E8 91 7F 19 D0 D4 6F F8 6C 03 63 6A 50 85 9A CA 74 59 -"Time": 2074/2/12 0:03:40 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:55.156 -Connection: close -EndTime: 09:17:55.382 -ClientToServerBytes: 853 -ServerToClientBytes: 9483 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 C3 B0 1A 05 B1 E3 EC 41 B6 2E 60 B3 0C 1D C4 3A AE D9 46 E3 D5 39 C6 E9 6B EE 78 E9 91 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 116.77.75.146:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 116.77.75.146 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 C3 4A B7 37 51 7D D7 B6 FC DB FE 96 06 72 DF E4 2C 59 3F AA 88 9E 0E 8F 6D 66 5F 4D FB -"Time": 2074/2/12 0:03:40 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:55.390 -Connection: close -EndTime: 09:17:55.694 -ClientToServerBytes: 853 -ServerToClientBytes: 9377 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 C3 C9 2A 26 CA 4F 7C 7F DE C7 17 81 85 E5 19 D7 C7 94 18 12 C9 E0 34 AF DC C3 2C 7D 80 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 121.11.81.100:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 121.11.81.100 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 C3 13 A9 8A 3A BD 9A 26 2F C3 4A C5 12 7E AF DC E0 AF B1 4A A3 EA 4E 66 19 5F 85 62 9E -"Time": 2074/2/12 0:03:40 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:55.712 -Connection: close -EndTime: 09:17:55.954 -ClientToServerBytes: 853 -ServerToClientBytes: 9520 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 C3 40 D3 C5 E7 A1 26 19 BE A1 6E B6 50 01 11 B9 E3 DD 07 C0 3D 10 52 94 8D 35 B6 F2 99 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 182.34.127.48:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 182.34.127.48 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 C4 E6 77 F9 27 14 FC E6 3F A3 3D 11 F0 6E A6 DB 50 B2 12 4A 83 49 6F 9D 5A 6B 85 94 BB -"Time": 2074/8/25 4:23:56 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 77 90 97 E4 B5 EF B4 35 83 57 5B C9 0F A5 4B F0 3E A0 5A 5A 54 A2 D1 12 4A 3F C6 4D 42 BC 7E 66 83 40 90 8D 29 FF D4 35 F6 1F 9A 2B 9B 19 6B 26 32 87 5E 27 B7 49 CB 7C 88 06 79 D2 48 0F 8F A7 C3 EC CF E8 B6 D4 13 41 0F 6B 51 D9 BC 27 19 FC 28 C8 40 2C D1 09 04 4F DE 77 26 D1 94 6B E5 0C CE A3 DA FB 28 E0 E9 BF 20 38 60 7E C3 47 59 84 66 F3 48 EC 09 EC 19 5F 96 A3 8C F1 F2 EE F2 DD 82 92 2B 43 ED E7 62 07 44 4E A9 A9 E7 B2 56 A1 7D 46 61 52 C1 B0 E5 3E 96 0F 3D 6D 42 DC 4A DF - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:56.014 -Connection: close -EndTime: 09:17:56.828 -ClientToServerBytes: 293 -ServerToClientBytes: 0 - - - ------------------------------------------------------------------- - -CONNECT 125.77.147.67:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 125.77.147.67 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 C4 DA 74 79 18 25 15 5B A7 70 9C 20 8E CB EE 00 F3 EE 57 D3 1A 30 69 A9 A3 C8 46 C1 0A -"Time": 2074/8/25 4:23:56 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket empty - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:56.865 -Connection: close -EndTime: 09:17:57.253 -ClientToServerBytes: 677 -ServerToClientBytes: 9557 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 C4 68 B7 16 33 84 DB 9B BC 1E B3 E9 85 DD FC 12 2C EF 09 D2 F7 8B 7F 39 9B DE E3 AD B2 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 59.83.228.88:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 59.83.228.88 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 C5 5B 02 03 33 D9 F1 D1 00 97 A3 84 1C FD D0 69 A1 1C 3C D2 21 BB 64 3F 42 2C B0 53 AC -"Time": 2075/3/7 8:44:12 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:57.299 -Connection: close -EndTime: 09:17:57.448 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 C5 3C C8 F5 CB D0 B1 4A BA C9 01 C3 56 90 A1 45 7D 53 47 10 AB 67 13 91 CD A9 4A 0E F4 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 175.43.20.64:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 175.43.20.64 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 C5 54 40 24 F1 5C 27 E3 97 23 7A 6E 84 77 98 65 3D B6 D2 6D C8 07 0A 30 7B A6 7F C7 74 -"Time": 2075/3/7 8:44:12 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:57.485 -Connection: close -EndTime: 09:17:57.809 -ClientToServerBytes: 853 -ServerToClientBytes: 9541 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 C5 69 00 99 D2 F1 22 0C EB 66 61 30 B3 62 1F F3 3A B1 2C F0 4F 49 2E F3 7C 12 3A 01 95 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 218.242.102.151:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 218.242.102.151 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 C5 49 14 EB E8 67 C6 91 CA 93 A1 8E 2A C4 31 B7 78 17 33 6B 18 7F B2 F8 8F 71 4C 6E A7 -"Time": 2075/3/7 8:44:12 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:57.850 -Connection: close -EndTime: 09:17:58.684 -ClientToServerBytes: 293 -ServerToClientBytes: 0 - - - ------------------------------------------------------------------- - -CONNECT 218.76.129.173:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 218.76.129.173 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 C6 5F C6 99 14 3D 4A 98 69 0E 36 05 27 FF 31 E4 F7 22 96 CC C1 E5 9C 2D 6B 54 BF AB 63 -"Time": 2075/9/17 13:04:28 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket empty - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:58.714 -Connection: close -EndTime: 09:17:58.994 -ClientToServerBytes: 677 -ServerToClientBytes: 9504 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 C6 F4 1C A9 61 04 15 DA 21 EB B8 40 7A D8 59 4F 78 93 4C D4 C4 72 CB 60 FF 2C FF 34 E0 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 101.226.18.29:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 101.226.18.29 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 C7 0F C0 83 B7 AC 85 36 79 01 5E 23 1E F6 9D 4D 2F 4D 69 9C 1B CD 16 E1 44 66 B6 F9 7E -"Time": 2076/3/29 17:24:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:59.030 -Connection: close -EndTime: 09:17:59.156 -ClientToServerBytes: 778 -ServerToClientBytes: 6138 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 C7 B6 90 52 15 63 3E 52 AE 2A DC 64 7E F7 25 F1 60 6D 26 4B 34 60 6B 2A 1B 44 E9 48 EB -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 180.97.178.166:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 180.97.178.166 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 C7 09 24 83 86 D9 4F 7B 9E 76 D9 EC 5D 55 54 DE 28 C1 46 B3 03 26 73 74 CA FA 46 29 E4 -"Time": 2076/3/29 17:24:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:59.194 -Connection: close -EndTime: 09:17:59.932 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 C7 0D 36 94 37 FD 3A 08 C8 FA D7 18 93 A2 5A B1 EA 50 85 3A D2 4B BD 4F 6E 8C 02 81 26 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 116.77.75.183:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 116.77.75.183 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 C7 5E 66 9C 53 26 F3 CA 83 C8 49 6B 69 F2 2E 72 FA EC 35 DF 1B 2D 90 28 B3 56 9A A3 FA -"Time": 2076/3/29 17:24:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:17:59.940 -Connection: close -EndTime: 09:18:00.805 -ClientToServerBytes: 293 -ServerToClientBytes: 0 - - - ------------------------------------------------------------------- - -CONNECT 218.76.129.176:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 218.76.129.176 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 C8 C5 14 00 10 78 CE BE 83 BC D7 63 F0 88 2E 4F BA 76 C6 0A A5 D1 CE 0C C4 8A 38 15 0D -"Time": 2076/10/9 21:45:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket empty - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:00.832 -Connection: close -EndTime: 09:18:00.981 -ClientToServerBytes: 677 -ServerToClientBytes: 9520 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 C8 87 9D 7F A9 30 25 67 E0 63 D9 ED 8A 66 A6 3A FB 6F F3 A4 9F D7 6D 63 9D 1F B8 9F C2 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 36.250.74.127:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 36.250.74.127 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 C9 C4 97 5C 26 7A 2E 2C 00 AF B1 55 6C 45 5A 76 69 97 05 83 61 8B 7D 54 2B C2 EF A6 89 -"Time": 2077/4/22 2:05:16 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:01.004 -Connection: close -EndTime: 09:18:02.129 -ClientToServerBytes: 778 -ServerToClientBytes: 1755 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 C9 42 DF C5 30 A7 62 49 92 D4 E2 00 C1 60 15 EA 0F B4 05 97 CA E7 E4 0B 93 5C BF 1F 1B -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 112.90.135.97:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.90.135.97 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 CA 74 60 A5 96 BC 52 D4 A8 53 CC 23 BE 58 75 69 B4 28 65 4F 06 47 A8 E8 BF C8 D9 E7 65 -"Time": 2077/11/2 6:25:32 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:02.146 -Connection: close -EndTime: 09:18:02.256 -ClientToServerBytes: 778 -ServerToClientBytes: 6138 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 CA 3A A0 78 87 D2 80 89 4C 5B 47 A2 4F 71 ED 50 E1 97 F6 34 E4 D4 51 A6 AC 21 38 0F 93 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 182.140.218.23:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 182.140.218.23 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 CA 7F 21 E2 65 E9 A9 10 E3 1D B3 DA AC 42 17 5D 78 CF 84 48 29 C9 3D AF BB D1 C8 DC C2 -"Time": 2077/11/2 6:25:32 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:02.296 -Connection: close -EndTime: 09:18:02.444 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 CA 1A 6B 36 06 B8 7E 09 E1 E8 23 86 B8 19 F9 08 54 C1 3A F4 E2 B8 2F 63 49 5D 47 1E FF -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 101.226.18.30:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 101.226.18.30 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 CA C3 E2 8E ED A6 16 AD 09 9B B6 9E D3 79 30 2A 49 1B E6 7F CE 00 8E 9A 19 7D 87 C4 9D -"Time": 2077/11/2 6:25:32 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:02.481 -Connection: close -EndTime: 09:18:02.712 -ClientToServerBytes: 778 -ServerToClientBytes: 6138 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 CA 2B 87 A9 47 34 70 E2 F9 A4 B1 AF 90 7E 6E 80 B5 D4 78 81 CF 28 44 17 74 CC 29 9A 26 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 222.44.151.67:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 222.44.151.67 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 CA 11 35 39 1A 58 76 12 EC ED 81 58 3D 9F 37 80 3A D4 8C 8F EB C5 1F B7 CE 1D 6A 59 B8 -"Time": 2077/11/2 6:25:32 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:02.765 -Connection: close -EndTime: 09:18:03.587 -ClientToServerBytes: 293 -ServerToClientBytes: 0 - - - ------------------------------------------------------------------- - -CONNECT 125.90.206.43:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 125.90.206.43 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 CB EA 0F 10 A9 85 75 4C 74 EC 6F 7B 09 1E 43 25 B9 CE E0 44 30 0C 02 CA F8 3D C7 88 90 -"Time": 2078/5/15 10:45:48 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket empty - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:03.597 -Connection: close -EndTime: 09:18:03.713 -ClientToServerBytes: 677 -ServerToClientBytes: 9541 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 CB 05 66 9F 61 16 22 B3 77 AD 97 AA 2B 62 AE A6 CB 24 FD C8 85 08 7B D4 98 18 CF 48 B4 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 163.177.132.254:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 163.177.132.254 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 CB 4F C8 43 8A FD B0 F4 5A 9C 13 5D D7 8E 53 C0 88 DA 7E B8 C1 9B E0 A8 B4 63 64 89 D8 -"Time": 2078/5/15 10:45:48 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:03.734 -Connection: close -EndTime: 09:18:04.024 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 CB BC AB B1 E0 CF 4A AB 42 BE 59 2A 0A 92 67 DA EF D6 53 05 EB 69 F9 A5 C9 AF 79 23 70 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 58.216.109.109:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 58.216.109.109 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 CC F3 A8 83 BA AF 45 85 25 D6 0B 8B EA 8A 3A 98 A3 4D A5 BC B6 75 40 30 37 D5 73 34 6A -"Time": 2078/11/25 15:06:04 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 8F BC 77 10 48 7E 34 84 34 FD AD C5 15 A2 E2 C8 18 BE F7 0F 84 C5 F3 28 AF 7D 12 04 F6 16 6A EF BC 8D D2 B3 D0 32 6D B2 AE E4 4F 64 7B 66 0F 7D 98 DA 0B C1 F0 23 EC CB 05 E7 DA 90 7A 8D 6B 1F 13 D3 F6 58 12 26 BE B5 F3 D6 55 D7 D0 53 70 F3 9E 93 FC 12 A9 0C 1B 5D A3 27 99 B2 27 47 F9 D5 DC B4 8E 05 76 32 22 59 21 DA F3 B3 98 FE D1 30 EA B4 A0 08 D0 B0 81 75 A7 EF D4 31 8A 75 2A DC B9 A5 1E 8D 7A 61 59 27 11 40 5A 20 74 5C 2A 59 54 20 88 35 BA 27 F4 76 D1 B9 85 E0 A3 9C FC A5 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:04.066 -Connection: close -EndTime: 09:18:04.210 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 CC A1 1C CD 61 05 FC 98 93 0C BA EA 1B 43 C2 0E 8B 47 90 2F 5F 75 C7 EB 83 80 85 57 91 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 120.220.18.252:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 120.220.18.252 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 CC D5 F7 DF F0 CB 5E BB 0D 4A 4F AF C1 AD 49 D9 BA 14 F4 B8 30 2C 5E B7 57 45 9F 69 04 -"Time": 2078/11/25 15:06:04 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:04.254 -Connection: close -EndTime: 09:18:04.394 -ClientToServerBytes: 778 -ServerToClientBytes: 6138 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 BD 5D B0 97 1E 5C FA 89 21 7E F9 65 0B 71 AE 45 82 99 15 92 57 10 27 C3 E8 7D B8 CF 59 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 218.12.228.224:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 218.12.228.224 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 CC BF FD 21 2E 8B 2E EA 6F 39 5C CF 28 7C 97 4B 43 B9 09 F9 AA 39 BF 92 33 67 26 62 8E -"Time": 2078/11/25 15:06:04 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:04.446 -Connection: close -EndTime: 09:18:04.632 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 CC 68 61 18 DE 2A 5B 19 85 F9 02 68 E6 E0 68 F1 95 C0 A2 B2 82 6C 5E 03 57 B8 25 67 78 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 61.156.243.246:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 61.156.243.246 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 CC 2C 68 85 69 12 23 17 28 7D DA 22 67 FD 58 05 71 D0 0B 62 B6 05 17 67 59 B5 BE CE 14 -"Time": 2078/11/25 15:06:04 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:04.672 -Connection: close -EndTime: 09:18:04.789 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 CC C5 1C A0 F0 43 7D 8D B3 CE E1 65 08 13 29 5F 50 5F AD B5 82 00 B8 10 FC DB D8 49 3B -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 112.240.60.253:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.240.60.253 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 CC 4B BB ED EA 2B D9 D2 53 4B 08 4E 0F 4D C7 36 6A CC ED EB 47 3C 1E A8 3A 29 BD 0F 69 -"Time": 2078/11/25 15:06:04 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:04.832 -Connection: close -EndTime: 09:18:05.164 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 CC 62 3A A2 B3 80 55 21 AB C7 46 9D 45 FD 3E 08 C8 A1 70 5F AA 80 A0 54 49 B6 5A 86 06 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 14.21.78.46:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 14.21.78.46 - - -HTTP/1.1 502 Fiddler - Connection Failed -Date: Wed, 26 Dec 2018 01:18:06 GMT -Content-Type: text/html; charset=UTF-8 -Connection: close -Cache-Control: no-cache, must-revalidate -Timestamp: 09:18:06.208 - -[Fiddler] The connection to '14.21.78.46' failed.
    Error: ConnectionRefused (0x274d).
    System.Net.Sockets.SocketException 由于目标计算机积极拒绝，无法连接。 14.21.78.46:443 - ------------------------------------------------------------------- - -CONNECT 61.156.243.111:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 61.156.243.111 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 CE 31 86 34 8A E6 4D 6D DC C4 7E FE DE 48 DF 4B 30 79 03 26 94 15 5A 39 17 61 9B 67 40 -"Time": 2079/12/18 23:46:36 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:06.249 -Connection: close -EndTime: 09:18:06.369 -ClientToServerBytes: 778 -ServerToClientBytes: 6138 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 CE 5C 27 44 BA A6 89 08 61 54 60 78 15 09 CF 98 40 2E 9E 5A 37 2A C2 35 1E 60 52 91 7B -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 61.156.243.110:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 61.156.243.110 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 CE 93 3F 1B DB 61 2B FD 06 31 09 04 31 D2 03 90 92 91 69 FE F7 A8 59 76 9A 48 26 DF 9C -"Time": 2079/12/18 23:46:36 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 8F BC 77 10 48 7E 34 84 34 FD AD C5 15 A2 E2 C8 18 BE F7 0F 84 C5 F3 28 AF 7D 12 04 F6 16 6A EF BC 8D D2 B3 D0 32 6D B2 AE E4 4F 64 7B 66 0F 7D 98 DA 0B C1 F0 23 EC CB 05 E7 DA 90 7A 8D 6B 1F 13 D3 F6 58 12 26 BE B5 F3 D6 55 D7 D0 53 70 F3 9E 93 FC 12 A9 0C 1B 5D A3 27 99 B2 27 47 F9 D5 DC B4 8E 05 76 32 22 59 21 DA F3 B3 98 FE D1 30 EA B4 A0 08 D0 B0 81 75 A7 EF D4 31 8A 75 2A DC B9 A5 1E 8D 7A 61 59 27 11 40 5A 20 74 5C 2A 59 54 20 88 35 BA 27 F4 76 D1 B9 85 E0 A3 9C FC A5 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:06.414 -Connection: close -EndTime: 09:18:06.570 -ClientToServerBytes: 778 -ServerToClientBytes: 6048 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 CE DF 37 69 90 7C 93 56 85 BD F5 4A 62 72 B3 62 33 C4 63 7E 90 DF 37 60 2D EB 6B 65 46 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 61.156.243.112:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 61.156.243.112 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 CE A3 89 0E 91 A4 54 8C 53 07 E4 8B 38 E6 9A 1A 4E E4 F7 61 FA A8 74 FA 47 4F 97 EA 3F -"Time": 2079/12/18 23:46:36 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:06.619 -Connection: close -EndTime: 09:18:06.762 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 CE 33 19 CB E4 E9 07 10 04 DF DC 6E BF 00 02 86 A0 08 C0 79 3B 2D 22 85 B3 76 BC 1B E2 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 61.156.243.109:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 61.156.243.109 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 CE AD CA F2 1A 9B F2 30 55 E6 5D E2 EE 6B 2C 88 12 1D D0 37 46 30 F4 10 7A DB F3 79 38 -"Time": 2079/12/18 23:46:36 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:06.808 -Connection: close -EndTime: 09:18:06.992 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 CE 34 F5 B6 67 B7 DD 6B D8 8A C9 A2 18 52 C3 30 DF 3F 6B 59 15 FC 7B CF 16 B2 B5 2D 71 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 61.156.243.108:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 61.156.243.108 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 CF 9E B4 A7 CF A8 F4 3E D8 CE 50 77 C4 6B 72 B8 B4 77 C3 83 44 B9 5C 28 49 04 9F 54 E5 -"Time": 2080/6/30 4:06:52 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:07.035 -Connection: close -EndTime: 09:18:07.189 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 CF C4 07 C2 B4 2B A0 ED E4 13 44 3B FF 8F B3 0C 6D D3 BC 5D 67 BD 7C B4 89 2F 6A 8C 29 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 112.47.14.199:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.47.14.199 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 CF 8F 1C 89 96 C1 1E 42 30 CC 76 A5 8B 54 4A D4 37 E8 69 E2 C7 FA BF EA B8 0D 2F E2 60 -"Time": 2080/6/30 4:06:52 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:07.223 -Connection: close -EndTime: 09:18:07.375 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 CF F3 C0 C9 66 EA A9 4B 31 0D 69 B8 63 38 84 95 4D 4B 52 5B 8D 4B C8 E6 27 28 E4 FE C5 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 112.47.14.198:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.47.14.198 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 CF 00 18 27 D1 B8 00 51 AA 07 FD D2 84 2A CF B0 6D E0 F8 76 08 08 C1 1E FF 86 1F F1 B2 -"Time": 2080/6/30 4:06:52 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:07.414 -Connection: close -EndTime: 09:18:07.557 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 CF 0D 38 C6 FD EA 15 CE 70 8D CB 33 46 6B B1 95 9B 62 19 02 CC 2A 91 BF 7B FE 11 C5 23 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 112.47.14.200:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.47.14.200 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 CF F6 F0 83 2E 72 03 29 87 88 80 18 00 9D C0 D3 91 80 84 14 11 C9 3E 48 26 C6 64 90 F1 -"Time": 2080/6/30 4:06:52 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:07.588 -Connection: close -EndTime: 09:18:07.735 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 CF 84 85 D8 04 27 0B CC AD F4 DF 82 68 45 2A 77 32 9D 85 02 82 71 72 7E FE B4 B2 3C 62 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 112.47.14.201:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.47.14.201 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 CF DA 6D D1 03 CE 7A 02 56 D1 24 C4 A1 5E 0C AD 45 72 42 0F B3 E0 02 3F 5A BA 4A C8 52 -"Time": 2080/6/30 4:06:52 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:07.758 -Connection: close -EndTime: 09:18:07.878 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 CF 6A 45 AC 5C 64 EA 39 4B 0D 2F A2 E3 88 EC EE 44 89 22 D2 11 EC 4D 4E 61 8F C8 3E 1D -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 222.74.113.225:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 222.74.113.225 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 CF CB 71 5F A5 A4 67 45 89 14 8D 8F C5 0E 6D C7 31 EA 70 83 72 56 86 27 4F 08 8C 53 31 -"Time": 2080/6/30 4:06:52 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 8F BC 77 10 48 7E 34 84 34 FD AD C5 15 A2 E2 C8 18 BE F7 0F 84 C5 F3 28 AF 7D 12 04 F6 16 6A EF BC 8D D2 B3 D0 32 6D B2 AE E4 4F 64 7B 66 0F 7D 98 DA 0B C1 F0 23 EC CB 05 E7 DA 90 7A 8D 6B 1F 13 D3 F6 58 12 26 BE B5 F3 D6 55 D7 D0 53 70 F3 9E 93 FC 12 A9 0C 1B 5D A3 27 99 B2 27 47 F9 D5 DC B4 8E 05 76 32 22 59 21 DA F3 B3 98 FE D1 30 EA B4 A0 08 D0 B0 81 75 A7 EF D4 31 8A 75 2A DC B9 A5 1E 8D 7A 61 59 27 11 40 5A 20 74 5C 2A 59 54 20 88 35 BA 27 F4 76 D1 B9 85 E0 A3 9C FC A5 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:07.955 -Connection: close -EndTime: 09:18:08.261 -ClientToServerBytes: 853 -ServerToClientBytes: 9451 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 D0 A0 AE 02 63 4F EF 11 43 74 24 C4 A5 DC 81 85 74 F1 B2 F6 A6 84 1C 77 44 28 15 57 6D -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 222.74.113.229:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 222.74.113.229 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D0 2B F8 D1 48 88 67 A5 EE BA B4 91 03 09 8B A5 6A 9C 5A 73 BB 12 50 1E 31 6F 54 A5 54 -"Time": 2081/1/10 8:27:08 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:08.337 -Connection: close -EndTime: 09:18:08.650 -ClientToServerBytes: 853 -ServerToClientBytes: 9525 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 D0 5E 9D FD DF C6 4E 14 9F CE 2C 32 DB 1E 4A 68 74 83 1B 2F BC 11 2F CF A2 09 C6 C7 1F -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 222.74.113.219:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 222.74.113.219 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D0 BE 5B 50 75 8A D9 4A 3C 00 97 7C 42 75 0E 5B D7 AB DB 76 AC F5 6A 0C AA 13 1E AF EF -"Time": 2081/1/10 8:27:08 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:08.729 -Connection: close -EndTime: 09:18:09.044 -ClientToServerBytes: 853 -ServerToClientBytes: 11902 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 D0 2E 04 A3 F9 DC 38 B3 E2 BE 19 42 20 32 AC F2 4B 01 4C 6E 47 68 C1 E7 B3 02 23 59 8E -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 222.74.113.228:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 222.74.113.228 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D1 36 BE E3 08 67 7F 8F 56 11 85 02 0E AC 34 68 46 FD 2A 7F BA B2 60 EE D5 F6 DA 6D 99 -"Time": 2081/7/23 12:47:24 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:09.129 -Connection: close -EndTime: 09:18:09.469 -ClientToServerBytes: 853 -ServerToClientBytes: 9488 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 D1 53 A2 80 B4 B4 F1 FC D7 E3 A1 EA 89 85 96 FC B9 4F A2 0D F0 F6 6A E6 CA 63 CC 2E 99 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 222.74.113.231:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 222.74.113.231 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D1 FF CC 87 3D 90 C6 1E 9A B0 5B BD 14 B8 55 95 25 34 D3 DB 7B A4 11 B6 FA 1A 5E DD 86 -"Time": 2081/7/23 12:47:24 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:09.542 -Connection: close -EndTime: 09:18:09.843 -ClientToServerBytes: 853 -ServerToClientBytes: 9414 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 D1 0E 0E 5A B4 5B 0D 1F 82 5A 81 27 45 77 15 D4 01 61 F9 3D 4D 4D 30 F1 C8 F4 D1 B6 FA -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 112.47.27.131:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.47.27.131 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D1 D7 4B 5D 26 06 C9 FE 68 22 2B 84 DD 92 A8 CC EB 93 EE A8 A6 CC 8D E8 3F D2 AC 49 29 -"Time": 2081/7/23 12:47:24 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:09.878 -Connection: close -EndTime: 09:18:10.093 -ClientToServerBytes: 853 -ServerToClientBytes: 9520 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 D1 BF 97 54 FA E7 17 23 55 74 E1 BA 78 A8 08 71 F3 29 D5 41 71 F0 52 EE 8B 3B 67 76 FA -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 222.74.113.218:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 222.74.113.218 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D2 30 B1 B9 05 EF 1F C3 4C E6 27 53 78 6A 35 34 22 9F 9C 7E 22 91 E4 EC AA C4 FC 61 EF -"Time": 2082/2/2 17:07:40 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:10.175 -Connection: close -EndTime: 09:18:10.621 -ClientToServerBytes: 853 -ServerToClientBytes: 9451 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 D2 E9 50 FD 3A 11 F4 41 0A AA 51 6B 68 FE BD 0F AF 48 18 D5 EF 7C 18 CB A0 E4 42 DE 12 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 112.47.27.132:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.47.27.132 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D2 DB 46 EB 77 7F 5B 3D A8 85 00 DF 0D 52 98 FB F9 85 98 C1 AE 32 80 BA 95 E4 22 D0 74 -"Time": 2082/2/2 17:07:40 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket 13 06 6B 33 F8 58 15 DB D5 3A 20 5B B0 11 9E 8C AB E5 57 A0 3D AC B8 01 32 F5 85 83 8D 1A B6 0E 5A 7E B3 55 F5 C4 D2 46 4A CC F7 B8 86 5E 0F 9C 65 14 D9 1A 36 60 D8 AA 04 54 7F 25 18 C6 3A 68 79 46 55 72 4D A9 00 DC 97 23 D5 26 76 45 36 B3 E0 D7 78 08 56 16 FE FD 6A 1F 0C 96 7B 6A CE 94 8B 63 0D 56 02 4B FD E2 60 32 E1 E7 30 DC 44 80 04 46 F5 72 67 02 78 DC A2 A8 A0 90 8D 85 17 67 0F 60 19 65 35 F5 61 0B CA 07 D0 92 2A DD 16 6C 56 35 FF 6B 0A 8D 11 CD 34 48 91 11 B6 76 49 91 71 E5 B3 16 11 C6 0B 37 44 48 60 C5 D3 22 B6 E6 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:10.645 -Connection: close -EndTime: 09:18:10.848 -ClientToServerBytes: 853 -ServerToClientBytes: 9483 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 D2 C2 56 51 13 B3 4E E8 97 7A CE 1D 10 98 24 CB 9E F2 EA EE 3A 32 88 29 00 A9 64 AC E7 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 112.47.27.172:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.47.27.172 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D2 2D 13 80 A2 84 F3 4B 66 87 A6 BF 41 31 0D 1A 5E 48 C5 3B 3D D8 8F C7 FB CE 73 E9 DF -"Time": 2082/2/2 17:07:40 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:10.875 -Connection: close -EndTime: 09:18:11.054 -ClientToServerBytes: 853 -ServerToClientBytes: 9520 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 D2 BB C2 20 9C 1F 9E 32 A0 E0 7C 0C 16 AF 03 F5 F1 71 15 E5 69 D0 45 05 20 69 28 36 EA -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 221.180.218.74:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 221.180.218.74 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D3 0D D5 07 C3 85 C1 0F C2 D9 C8 A9 4E B5 C9 76 6C E5 7B B2 42 D7 EF 88 31 4C 1C 95 02 -"Time": 2082/8/15 21:27:56 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:11.106 -Connection: close -EndTime: 09:18:11.302 -ClientToServerBytes: 853 -ServerToClientBytes: 9520 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 D3 20 B3 A9 62 13 E4 0F 7E 21 02 6E 88 9B 1F 70 46 D2 35 9E 93 7B E2 07 01 33 3E 4D 4D -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 221.180.218.73:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 221.180.218.73 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D3 EE A8 8C 4E B6 62 C7 A5 09 35 5B 4A 7F CB F5 A1 11 84 9F 92 22 9F A7 F8 E2 C2 E9 A8 -"Time": 2082/8/15 21:27:56 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:11.362 -Connection: close -EndTime: 09:18:11.517 -ClientToServerBytes: 778 -ServerToClientBytes: 6138 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 D3 CF 00 42 A0 70 EB 8C 04 5E 5E 27 10 82 EA 1F 57 9A EB 10 A9 D6 12 17 D2 A8 F3 02 B3 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 60.213.22.34:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 60.213.22.34 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D3 E3 E1 0E DF 89 F2 E1 DD 46 97 1A 34 65 76 00 09 0B B6 FE D6 4A EC 3C C2 B8 E1 40 E7 -"Time": 2082/8/15 21:27:56 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:11.559 -Connection: close -EndTime: 09:18:11.682 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 D3 AE 6F 27 B9 A2 2A 27 BD 52 46 C8 7B 10 CD 1F 43 A5 6C 6C CB E2 2B 76 3B 6E 3D 50 A3 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 60.213.21.156:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 60.213.21.156 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D3 C0 A9 08 A7 2F 73 33 0F 18 01 2A 98 3A FF F0 59 33 95 4B 7B 3C 11 C1 40 E8 A4 51 58 -"Time": 2082/8/15 21:27:56 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:11.733 -Connection: close -EndTime: 09:18:11.860 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 D3 1A 26 46 0A 68 50 03 D2 CF E6 9A 9C 0C 31 7A CA 1E 98 58 F7 A6 0F 5A 67 E6 1D 69 71 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 60.213.21.117:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 60.213.21.117 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D3 AF AC 4E C8 D8 85 DA 4F 23 A6 6B BB 59 0F 97 E4 C7 69 59 F4 C1 CD 39 36 53 C2 0D 8B -"Time": 2082/8/15 21:27:56 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:11.905 -Connection: close -EndTime: 09:18:12.035 -ClientToServerBytes: 778 -ServerToClientBytes: 6064 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 D3 AB 5D 45 17 19 3A 1F DF 03 D7 6C 3B FB 98 F4 59 1D B2 70 89 BE 61 42 D9 F7 AD 05 6F -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 60.213.21.118:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 60.213.21.118 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D4 6F 9D C4 1A FF 8A 4A 39 26 08 EF 73 2E 73 D6 5F E6 9F B8 CC 7F 98 B9 3B 78 FA 3B E1 -"Time": 2083/2/26 1:48:12 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:12.081 -Connection: close -EndTime: 09:18:12.213 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 D4 C3 FE 95 36 94 B2 24 22 46 20 86 B2 A2 81 2D 05 AF E8 AB 91 AD 43 2D 80 E4 24 28 F8 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 60.213.21.157:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 60.213.21.157 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D4 B6 85 58 E2 57 35 E6 8B FE 23 C2 2A 39 06 2D B9 D0 F6 19 37 2B 76 A1 55 BD F8 B6 E1 -"Time": 2083/2/26 1:48:12 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 70 22 5D DC 0A F7 0D FB 51 99 B4 BE F3 1F 80 10 1A BD C0 E5 53 63 7C 77 67 B7 DA EF 78 68 90 3B 82 D9 F3 04 58 52 28 63 63 ED AA F0 73 FA 22 5C 19 9A 24 95 B4 32 96 CF 3D EC 87 AB 3B 86 86 1D 4B FD EA 7D 46 7A 63 82 9C F9 DC 73 8F 95 C9 51 25 C9 5E 95 90 57 0C 94 77 BE ED BF 46 B6 3E ED AA 52 B9 A0 5D F9 94 66 8D 31 C3 77 9A A0 1C DE 82 1C 14 12 76 E8 54 F2 3B 80 D5 AE 99 8E 7E A6 D9 8A FC B3 11 66 8C EB 87 4F FA D6 23 6C 47 22 16 B7 16 3F 23 AD C7 66 89 7B 02 03 C1 48 88 E8 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:12.258 -Connection: close -EndTime: 09:18:12.437 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 D4 C8 ED 29 A1 49 B0 97 7E DF 7B 97 93 28 83 70 9A F5 D6 99 68 C0 55 6D 05 2B 5B 44 0A -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 58.216.21.22:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 58.216.21.22 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D4 27 6C 49 04 B3 03 B2 86 FB 64 51 04 AB AD 96 4C 8D 49 C7 92 DE 6E D4 57 CE 62 0F 35 -"Time": 2083/2/26 1:48:12 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:12.474 -Connection: close -EndTime: 09:18:12.715 -ClientToServerBytes: 820 -ServerToClientBytes: 9508 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 37 46 FA 05 DF DE B9 7F 95 76 24 86 27 2B 3E DC E9 31 A4 E0 E0 6C C0 33 26 47 74 A6 2B AF 86 65 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA [0xC013] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - extended_master_secret empty - - - ------------------------------------------------------------------- - -CONNECT 112.51.121.108:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.51.121.108 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D4 00 BE 03 25 40 46 C5 A7 3E 04 7C BC B5 87 C0 F9 68 EE 50 B4 50 F3 6F 29 70 8D D1 67 -"Time": 2083/2/26 1:48:12 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:12.744 -Connection: close -EndTime: 09:18:12.920 -ClientToServerBytes: 869 -ServerToClientBytes: 9504 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 D4 84 09 12 5F EC A8 AB DC 35 FA EE 18 63 81 50 02 91 6F A7 ED B2 29 CA F0 0D BB 81 E0 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 112.30.197.16:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.30.197.16 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D4 36 95 F0 9C 38 D0 1E D4 A4 B6 63 B6 3B 91 CD 41 2F DB 65 DC E8 BE ED F5 47 BD BE 95 -"Time": 2083/2/26 1:48:12 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:12.961 -Connection: close -EndTime: 09:18:13.107 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 D4 2A B7 89 34 32 28 90 C0 26 82 56 26 68 4C 3D 02 03 9B E8 63 9E B4 6D B1 D8 85 94 0F -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 112.51.121.107:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 112.51.121.107 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D5 D9 17 87 01 52 93 CE C9 6D 3B 24 AF C6 12 21 8F 4A 90 05 03 DB BE 09 22 A4 18 2A F1 -"Time": 2083/9/8 6:08:28 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:13.132 -Connection: close -EndTime: 09:18:13.514 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 D5 23 AE EB 70 89 06 34 19 1C A7 92 AB 74 6C 3C 1A 7E BF A8 6F E2 95 04 97 0B 70 5C 9C -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 111.19.215.39:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 111.19.215.39 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D5 53 45 B8 FD 52 23 87 9B 4C FA 5F 20 9E 4D 27 7C 6F F9 A7 8E 61 75 88 F1 80 FE 61 1B -"Time": 2083/9/8 6:08:28 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:13.568 -Connection: close -EndTime: 09:18:13.942 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 D5 0C EA A0 2A 21 6F 25 F8 0B 46 C5 86 86 FC 3A FD 7F 5B 3D 09 DE CA C7 97 4F 9A E8 CD -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 111.19.215.40:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 111.19.215.40 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D5 DF 64 FD F3 EB 37 A2 7A 57 F0 15 01 92 BE 08 82 6F D4 BB CA 55 17 11 CF B5 BB EB E2 -"Time": 2083/9/8 6:08:28 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:13.991 -Connection: close -EndTime: 09:18:14.154 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 D6 E2 73 A6 3E 83 CF AC 0B B0 FC 83 4B E7 84 79 9B 1E 8D 41 60 11 11 A3 BF 54 E8 F8 AF -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 14.18.17.20:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 14.18.17.20 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D6 A8 74 6F B5 C9 A4 19 9B 9D 24 B2 24 1C 21 01 F1 7A 54 23 FD EE C9 84 5F FF 9D 3E 76 -"Time": 2084/3/20 10:28:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:14.162 -Connection: close -EndTime: 09:18:14.191 -ClientToServerBytes: 820 -ServerToClientBytes: 3752 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 77 D3 EB 6F 48 0A EA DE A1 FC 46 5D E4 03 D4 5A 55 F7 C6 81 8C 8A 31 77 FC B0 56 AB 76 89 D8 42 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA [0xC013] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - extended_master_secret empty - - - ------------------------------------------------------------------- - -CONNECT 111.178.233.221:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 111.178.233.221 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D6 D9 33 69 B6 49 5A 5D 97 17 05 E0 4C 3C E7 2A 88 29 4D CD E6 9D 0C C8 EA DA CF E0 D8 -"Time": 2084/3/20 10:28:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:14.240 -Connection: close -EndTime: 09:18:14.467 -ClientToServerBytes: 869 -ServerToClientBytes: 9488 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 D6 5A F5 47 50 D8 D7 65 14 05 EF E1 F8 4A 89 EC 7E 3B B1 20 CC 6C 44 43 8A 61 0D A3 A1 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 14.18.17.27:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 14.18.17.27 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D6 03 09 75 A6 EA 2F D9 EF FE 56 A5 53 E9 A5 51 25 8E EA 17 B1 A1 31 3A C5 E6 71 8A 26 -"Time": 2084/3/20 10:28:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:14.476 -Connection: close -EndTime: 09:18:14.508 -ClientToServerBytes: 820 -ServerToClientBytes: 3715 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 21 CA 4A 98 FE A3 3A 85 43 4E 7A 4E 2B 97 A1 A1 B2 AB 72 CF AB FD 0B AF 88 0B 7F 4E 9D 84 01 14 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA [0xC013] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - extended_master_secret empty - - - ------------------------------------------------------------------- - -CONNECT 111.178.233.220:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 111.178.233.220 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D6 61 57 9E A6 6B 28 40 73 58 13 CA 50 00 F0 84 FB A0 65 AC 71 93 05 74 0E 7A F2 B7 53 -"Time": 2084/3/20 10:28:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:14.558 -Connection: close -EndTime: 09:18:14.787 -ClientToServerBytes: 869 -ServerToClientBytes: 9488 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 D6 47 20 F6 34 56 7C A9 9A 4A 16 E5 98 D0 EF E8 BC AE 08 DD E5 A1 6B D3 DA C8 24 F8 20 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 163.177.132.27:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 163.177.132.27 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D6 42 35 80 E1 96 E9 44 70 20 5B 51 63 0E 5F E2 C9 90 32 21 3D 40 CE E6 D8 0E 33 12 6A -"Time": 2084/3/20 10:28:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:14.804 -Connection: close -EndTime: 09:18:14.915 -ClientToServerBytes: 853 -ServerToClientBytes: 9557 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 D6 E2 8D C2 FD 65 FB AA 52 F3 29 DA 58 7C 92 77 05 AA CA A9 FC 6B 60 62 50 DF 27 ED 6A -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 163.177.132.30:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 163.177.132.30 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D6 DC 16 9B 4B 3D BD CD 41 26 80 72 C6 17 1D 68 4E DA 13 F4 CF 4E DE 58 D7 F3 00 E4 AB -"Time": 2084/3/20 10:28:44 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:14.932 -Connection: close -EndTime: 09:18:15.044 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 D6 98 99 B7 8D 5D 5B B6 74 25 57 98 40 33 4B 59 A0 51 29 83 06 CF 5B 6B 5B CF 6E 52 CA -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 163.177.132.28:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 163.177.132.28 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D7 BE 18 7D 4A 73 8E 7A F9 84 85 95 80 02 8B 73 ED 16 D2 50 F6 15 AF FA 88 41 CC 71 D5 -"Time": 2084/9/30 14:49:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:15.064 -Connection: close -EndTime: 09:18:15.181 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 D7 2D A3 D5 95 99 BC D4 60 27 2D 96 D0 2F 50 CA 7C 29 78 57 C5 44 C4 B5 3B 65 92 E4 50 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 163.177.132.31:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 163.177.132.31 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D7 FE 55 D1 55 E3 54 66 D9 E4 2D E3 B8 1E B6 03 D8 86 67 3B 26 7C 84 BE 74 2E 08 B6 A9 -"Time": 2084/9/30 14:49:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:15.198 -Connection: close -EndTime: 09:18:15.295 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 D7 1C 62 79 BE F4 48 3F B4 FA 86 83 75 F1 FA 9D A1 54 F1 48 89 21 74 15 DF E6 12 27 85 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 27.148.151.176:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 27.148.151.176 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D7 97 F5 AA 14 B9 BB A8 7C 31 67 E1 BE 27 BA A9 7D 76 46 B4 DF 36 0A 09 10 34 09 FA 84 -"Time": 2084/9/30 14:49:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:15.334 -Connection: close -EndTime: 09:18:15.472 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 D7 8F DF C4 85 F6 82 08 AA 73 8F 9E 44 82 E7 1A E7 84 81 67 C1 4D C0 0F DA D8 A3 31 2A -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 27.148.151.179:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 27.148.151.179 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D7 EF F8 B3 8B 3E 5A 8A 13 A0 57 1E 14 5E D5 CE D2 BC 5A 18 C9 5C 85 BD CF 40 ED B0 93 -"Time": 2084/9/30 14:49:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 45 C1 67 C2 C5 AC 66 0F 65 0F 86 5E 3C 77 7D 82 94 A0 72 73 1B 2B 56 9F 8A 9C BF 41 44 4B 47 3D 0A BA 48 EB DD 8D EC DD 5F 88 BC 9B 11 9C 44 E6 06 E8 CF 61 B4 EB 3F 75 CE 72 F7 68 8E FF 23 03 D9 E1 F8 A5 DD E6 C4 71 C3 4E C4 7A EB 33 A5 DB 57 41 D8 5D 23 1C 44 28 A0 CA E7 A0 A9 2F E2 9A F4 52 C7 32 94 6A B5 3E 10 CC C8 D8 8A B6 58 90 59 6C CF 71 F3 00 41 ED C0 BD 68 7F 3A 60 9B 7D 90 11 4E 6D 4F AB 0B 98 1A 1A 2B 7D 3D F2 0E 86 A9 C5 FE D2 4E 28 E5 DA FE 98 E8 23 24 A4 87 31 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:15.514 -Connection: close -EndTime: 09:18:15.662 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 D7 CE 29 16 34 AA 80 4E 9D 9D 94 6C 32 29 EE 7D 01 32 18 D1 4B 12 F1 01 C6 87 D8 63 4A -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 27.148.151.178:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 27.148.151.178 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D7 51 2E 3E BD 1C 12 46 C9 D1 97 8A FB 49 AA 6A 6C F3 72 2C 81 A5 A7 3C 54 77 42 45 46 -"Time": 2084/9/30 14:49:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:15.699 -Connection: close -EndTime: 09:18:15.837 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 D7 E9 A4 20 E4 D8 D8 A7 6C 2A 53 BA 9F F2 8A 07 D6 C1 EE 75 F7 34 1B CE D5 C8 CC A3 36 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 27.148.151.174:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 27.148.151.174 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D7 0D AF BD F3 35 59 EA 8F E5 89 DC 53 56 4A 53 A3 73 3E 7A 97 8E D2 51 67 25 F7 23 E9 -"Time": 2084/9/30 14:49:00 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 45 C1 67 C2 C5 AC 66 0F 65 0F 86 5E 3C 77 7D 82 94 A0 72 73 1B 2B 56 9F 8A 9C BF 41 44 4B 47 3D 0A BA 48 EB DD 8D EC DD 5F 88 BC 9B 11 9C 44 E6 06 E8 CF 61 B4 EB 3F 75 CE 72 F7 68 8E FF 23 03 D9 E1 F8 A5 DD E6 C4 71 C3 4E C4 7A EB 33 A5 DB 57 41 D8 5D 23 1C 44 28 A0 CA E7 A0 A9 2F E2 9A F4 52 C7 32 94 6A B5 3E 10 CC C8 D8 8A B6 58 90 59 6C CF 71 F3 00 41 ED C0 BD 68 7F 3A 60 9B 7D 90 11 4E 6D 4F AB 0B 98 1A 1A 2B 7D 3D F2 0E 86 A9 C5 FE D2 4E 28 E5 DA FE 98 E8 23 24 A4 87 31 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:15.877 -Connection: close -EndTime: 09:18:16.138 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 D7 B5 94 4F 38 10 C0 7F 0C 32 FE 14 8D 71 DB 39 9D 81 15 F3 FF F4 30 9E 7B 2A F6 5B 70 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 27.148.151.180:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 27.148.151.180 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D8 24 A1 58 3A 0A AA BC F8 3F F7 B2 89 E4 C7 FA D3 E5 56 86 F5 17 4A B4 6E F3 FB BB 83 -"Time": 2085/4/12 19:09:16 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:16.177 -Connection: close -EndTime: 09:18:16.330 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 D8 EF F9 03 D8 DC 2A CE 58 07 6C E4 1A 22 8A 0D 1F B6 5F EE DD 11 F5 0E 39 F8 90 57 38 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 27.148.151.175:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 27.148.151.175 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D8 B2 E3 E7 4D BC FD 63 C7 44 F5 AF 97 7C 9C F5 28 1F BB A2 DC 2E 0D 8A 93 CD 72 88 76 -"Time": 2085/4/12 19:09:16 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 45 C1 67 C2 C5 AC 66 0F 65 0F 86 5E 3C 77 7D 82 94 A0 72 73 1B 2B 56 9F 8A 9C BF 41 44 4B 47 3D 0A BA 48 EB DD 8D EC DD 5F 88 BC 9B 11 9C 44 E6 06 E8 CF 61 B4 EB 3F 75 CE 72 F7 68 8E FF 23 03 D9 E1 F8 A5 DD E6 C4 71 C3 4E C4 7A EB 33 A5 DB 57 41 D8 5D 23 1C 44 28 A0 CA E7 A0 A9 2F E2 9A F4 52 C7 32 94 6A B5 3E 10 CC C8 D8 8A B6 58 90 59 6C CF 71 F3 00 41 ED C0 BD 68 7F 3A 60 9B 7D 90 11 4E 6D 4F AB 0B 98 1A 1A 2B 7D 3D F2 0E 86 A9 C5 FE D2 4E 28 E5 DA FE 98 E8 23 24 A4 87 31 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:16.372 -Connection: close -EndTime: 09:18:16.541 -ClientToServerBytes: 778 -ServerToClientBytes: 6122 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 D8 11 43 63 7A 5B AF C0 CE 82 AA AD F1 00 94 84 58 2A CE 51 04 BE 61 7E C2 41 2E 79 0E -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 27.148.151.177:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 27.148.151.177 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D8 57 76 CB 5B 82 CC 47 9C 04 E2 2B C0 2D 6E 91 25 47 E9 5E 10 3B 12 47 ED AB AF 52 61 -"Time": 2085/4/12 19:09:16 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:16.583 -Connection: close -EndTime: 09:18:16.883 -ClientToServerBytes: 778 -ServerToClientBytes: 6138 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 D8 EF C1 D4 A1 B0 AE A6 64 3B D8 EA 94 54 7A 78 91 52 BA D4 1B D3 AB 75 32 0A 86 73 AC -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 27.148.151.72:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 27.148.151.72 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D8 CF 69 44 55 07 70 0A 77 E6 3D EA 80 B9 AF 62 FE 33 B2 E7 9C DB CA E8 96 5F EB AF B1 -"Time": 2085/4/12 19:09:16 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 45 C1 67 C2 C5 AC 66 0F 65 0F 86 5E 3C 77 7D 82 94 A0 72 73 1B 2B 56 9F 8A 9C BF 41 44 4B 47 3D 0A BA 48 EB DD 8D EC DD 5F 88 BC 9B 11 9C 44 E6 06 E8 CF 61 B4 EB 3F 75 CE 72 F7 68 8E FF 23 03 D9 E1 F8 A5 DD E6 C4 71 C3 4E C4 7A EB 33 A5 DB 57 41 D8 5D 23 1C 44 28 A0 CA E7 A0 A9 2F E2 9A F4 52 C7 32 94 6A B5 3E 10 CC C8 D8 8A B6 58 90 59 6C CF 71 F3 00 41 ED C0 BD 68 7F 3A 60 9B 7D 90 11 4E 6D 4F AB 0B 98 1A 1A 2B 7D 3D F2 0E 86 A9 C5 FE D2 4E 28 E5 DA FE 98 E8 23 24 A4 87 31 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:16.922 -Connection: close -EndTime: 09:18:17.067 -ClientToServerBytes: 778 -ServerToClientBytes: 6085 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 D8 82 1B 8D 85 ED 5D F5 E3 F7 26 DD 7F 96 E2 B2 E2 C8 43 0A 75 1F 65 83 DB E9 E0 B3 A2 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 122.225.28.159:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 122.225.28.159 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D9 C0 53 5E A3 77 36 09 E4 AA FF DB 8D 39 2E 8C A9 2A 52 93 8F 75 43 F3 28 2F 7D B7 31 -"Time": 2085/10/23 23:29:32 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:17.108 -Connection: close -EndTime: 09:18:17.239 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 D9 13 C4 0B 25 E5 96 86 12 74 CC B5 20 D1 9B 14 56 A3 C5 50 49 F5 60 EA 69 3E B7 BE C6 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 122.225.28.161:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 122.225.28.161 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D9 E6 F0 51 70 EB 99 72 46 BF C9 99 9B 07 7A A7 53 D1 71 12 18 FC 91 E1 AC F4 C1 85 D1 -"Time": 2085/10/23 23:29:32 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 45 C1 67 C2 C5 AC 66 0F 65 0F 86 5E 3C 77 7D 82 94 A0 72 73 1B 2B 56 9F 8A 9C BF 41 44 4B 47 3D 0A BA 48 EB DD 8D EC DD 5F 88 BC 9B 11 9C 44 E6 06 E8 CF 61 B4 EB 3F 75 CE 72 F7 68 8E FF 23 03 D9 E1 F8 A5 DD E6 C4 71 C3 4E C4 7A EB 33 A5 DB 57 41 D8 5D 23 1C 44 28 A0 CA E7 A0 A9 2F E2 9A F4 52 C7 32 94 6A B5 3E 10 CC C8 D8 8A B6 58 90 59 6C CF 71 F3 00 41 ED C0 BD 68 7F 3A 60 9B 7D 90 11 4E 6D 4F AB 0B 98 1A 1A 2B 7D 3D F2 0E 86 A9 C5 FE D2 4E 28 E5 DA FE 98 E8 23 24 A4 87 31 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:17.275 -Connection: close -EndTime: 09:18:17.406 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 D9 2C DB 00 3D 23 17 41 4F 55 52 64 4F 0D D4 42 36 8D 9A FD 05 96 56 F0 42 12 5C 5E BA -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 122.225.28.163:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 122.225.28.163 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D9 7C 7E 1D 8F B2 07 2F 92 9A 12 DC E1 8C 4E E6 96 07 2A 87 4C E0 FC A1 77 38 C8 F2 0E -"Time": 2085/10/23 23:29:32 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:17.441 -Connection: close -EndTime: 09:18:17.564 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 D9 66 B9 A7 B5 A9 AC FA 79 4E 0C E6 79 9F F7 83 D6 65 C3 5C 9D F8 C0 8A 87 EE 2D 88 61 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 219.147.92.217:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 219.147.92.217 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D9 B9 28 EF 7E 1B E0 06 8F D5 7B E6 D7 04 11 8F F5 4B 19 63 38 1D C4 D7 46 E7 3A 10 B3 -"Time": 2085/10/23 23:29:32 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket D2 F3 E9 56 63 4F 4A A8 06 41 B7 1B 53 BF 10 0F 45 C1 67 C2 C5 AC 66 0F 65 0F 86 5E 3C 77 7D 82 94 A0 72 73 1B 2B 56 9F 8A 9C BF 41 44 4B 47 3D 0A BA 48 EB DD 8D EC DD 5F 88 BC 9B 11 9C 44 E6 06 E8 CF 61 B4 EB 3F 75 CE 72 F7 68 8E FF 23 03 D9 E1 F8 A5 DD E6 C4 71 C3 4E C4 7A EB 33 A5 DB 57 41 D8 5D 23 1C 44 28 A0 CA E7 A0 A9 2F E2 9A F4 52 C7 32 94 6A B5 3E 10 CC C8 D8 8A B6 58 90 59 6C CF 71 F3 00 41 ED C0 BD 68 7F 3A 60 9B 7D 90 11 4E 6D 4F AB 0B 98 1A 1A 2B 7D 3D F2 0E 86 A9 C5 FE D2 4E 28 E5 DA FE 98 E8 23 24 A4 87 31 - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:17.631 -Connection: close -EndTime: 09:18:17.925 -ClientToServerBytes: 778 -ServerToClientBytes: 6101 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 D9 C6 43 D2 B2 99 88 7E AD 4D BB CC FE A5 E0 8D DE 0F 7A AF E0 92 F0 C0 22 86 12 37 62 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - renegotiation_info 00 - - - ------------------------------------------------------------------- - -CONNECT 219.220.29.189:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 219.220.29.189 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 D9 15 ED 4A B0 13 64 80 B6 AE 29 7A 81 77 64 9E FC 0A 31 F8 A0 EF 9B D6 6D A1 DC 49 8A -"Time": 2085/10/23 23:29:32 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:17.988 -Connection: close -EndTime: 09:18:18.799 -ClientToServerBytes: 293 -ServerToClientBytes: 0 - - - ------------------------------------------------------------------- - -CONNECT 119.44.24.30:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 119.44.24.30 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 DA 83 C5 25 97 D7 8C 17 3A 3E 42 9E E0 03 07 43 BD 89 A1 AD 61 9C F1 4E 00 D7 C1 1F CA -"Time": 2086/5/6 3:49:48 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket empty - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:18.821 -Connection: close -EndTime: 09:18:19.168 -ClientToServerBytes: 677 -ServerToClientBytes: 9520 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 DA 3C 06 B0 FF 2E E7 90 07 41 51 C4 71 62 8A C4 76 3E 07 40 4F 42 67 FF 41 D9 A0 B1 32 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 219.220.29.182:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 219.220.29.182 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 DB BC 4C 9B FE A1 7A EA 3B E9 16 C0 C3 90 1B BC FA 36 14 71 40 3A 88 59 FA 41 AD 66 EA -"Time": 2086/11/16 8:10:04 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:19.235 -Connection: close -EndTime: 09:18:20.044 -ClientToServerBytes: 293 -ServerToClientBytes: 0 - - - ------------------------------------------------------------------- - -POST http://www.12306bypass.com/General.ashx HTTP/1.1 -Accept: */* -Accept-Language: zh-CN,zh;q=0.9 -Accept-Encoding: gzip, deflate, br -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Content-Type: application/x-www-form-urlencoded -Host: www.12306bypass.com -Content-Length: 87 -Connection: Close - -type=checkupdate&version=2018-12-25 14:50:40&programVersion=1.13.16&remark=获取更新 -HTTP/1.1 200 OK -Date: Wed, 26 Dec 2018 01:18:19 GMT -Content-Type: text/plain; charset=utf-8 -Content-Length: 47 -Connection: close -Cache-Control: private - -{"code":0,"Msg":"","Time":"2018/12/26 9:18:19"} - ------------------------------------------------------------------- - -CONNECT 219.220.29.175:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 219.220.29.175 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 DC 3B DF 6B E0 29 3F DB 38 F3 07 D0 95 0A FD CB 8B 52 25 28 ED F8 B7 29 58 5B 34 35 54 -"Time": 2087/5/29 12:30:20 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket empty - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:20.107 -Connection: close -EndTime: 09:18:20.917 -ClientToServerBytes: 117 -ServerToClientBytes: 0 - - - ------------------------------------------------------------------- - -CONNECT 219.220.29.177:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 219.220.29.177 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 DC E3 44 FC 4B 30 57 9F 55 D1 B6 44 E1 74 C8 7E 1F 07 A6 8A D0 BE 80 A8 31 4B 64 73 1B -"Time": 2087/5/29 12:30:20 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket empty - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:20.979 -Connection: close -EndTime: 09:18:21.791 -ClientToServerBytes: 117 -ServerToClientBytes: 0 - - - ------------------------------------------------------------------- - -CONNECT 219.220.29.190:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 219.220.29.190 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 DD 8A BA 0E 87 AE 0A F3 43 5F A7 89 DB 73 51 A0 3D 97 6F 29 8E 65 77 4E 5F 22 4C 93 8A -"Time": 2087/12/9 16:50:36 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket empty - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:21.853 -Connection: close -EndTime: 09:18:22.221 -ClientToServerBytes: 677 -ServerToClientBytes: 9377 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 DD 34 3D 8A 05 45 E2 9D A6 3C 02 85 F1 14 B9 50 ED 91 D5 47 1C 29 56 6E 3A B3 D4 55 14 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 125.75.35.173:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 125.75.35.173 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 DE 9C 57 3E 7B 71 75 93 4F 7D 09 65 D0 74 86 1D 7F 92 6E 9F 3F C9 48 6A 31 9C 95 EB 5F -"Time": 2088/6/20 21:10:52 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket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extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:22.280 -Connection: close -EndTime: 09:18:22.471 -ClientToServerBytes: 853 -ServerToClientBytes: 3814 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 DE C9 61 E4 6C A6 0B 2A 25 58 D1 82 76 AE FC F7 B5 20 4D 40 AD C3 A1 00 FC 8A 0B CA 48 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 125.75.35.190:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 125.75.35.190 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 DE C3 0A 94 47 97 66 AE F8 FD 1F 95 26 0F B9 96 CB 6A 40 99 AE F4 82 A4 4E D9 90 C1 F4 -"Time": 2088/6/20 21:10:52 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket F5 64 FE 91 80 05 0D 06 5D 1F F1 18 2F F6 16 22 0F FD 7D 28 BF 2F 92 38 66 FA 59 42 00 E5 40 59 45 30 CF FA CE 02 D3 F0 AF 58 40 A8 FF CC 75 0C EB 6B F1 D6 02 5D 9E FF E0 23 86 B5 C1 3C DA 82 23 23 15 F9 A7 82 FF 3A 90 37 1D FE D6 EE EC C4 12 C4 D8 42 21 D3 87 31 92 E0 EB 5D 47 70 C5 AB 81 7E 8D 7B 4E 5B D1 62 F1 E5 7D CB B9 7D 71 0A 57 43 74 37 7D 8E 4E 84 A9 30 7B 4C 08 2F B8 4F 5A 0E 0A 08 50 92 F8 AF 29 35 41 D1 A6 B8 21 F9 68 96 60 AE 4D 02 64 A1 13 CB 69 F2 1F DB 05 9C AF 19 A1 21 17 A0 C4 A6 AC 2B 1F D3 85 FD 2E 5A - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:22.540 -Connection: close -EndTime: 09:18:23.343 -ClientToServerBytes: 293 -ServerToClientBytes: 0 - - - ------------------------------------------------------------------- - -CONNECT 125.75.35.189:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 125.75.35.189 - -A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -Random: 5C 22 D6 DF 07 36 5C 1F 4D D5 B1 0A 12 6D A7 0F 2A 51 78 9E F3 E9 18 B7 CF CF A5 E7 78 95 21 DC -"Time": 2089/1/1 1:31:08 -SessionID: empty -Extensions: - server_name kyfw.12306.cn - elliptic_curves unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18] - ec_point_formats uncompressed [0x0] - SessionTicket empty - extended_master_secret empty - renegotiation_info 00 -Ciphers: - [C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - [C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - [C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA - [C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA - [0035] TLS_RSA_AES_256_SHA - [002F] TLS_RSA_AES_128_SHA - [000A] SSL_RSA_WITH_3DES_EDE_SHA - -Compression: - [00] NO_COMPRESSION - - - -HTTP/1.1 200 Connection Established -FiddlerGateway: Direct -StartTime: 09:18:23.392 -Connection: close -EndTime: 09:18:24.215 -ClientToServerBytes: 251 -ServerToClientBytes: 3282 - -这是一个连接隧道，它加密 HTTPS 流量。 -要查看此隧道内的加密会话，请启用工具>选项> HTTPS>解密 HTTPS 流量选项。 - -A SSLv3-compatible ServerHello handshake was found. Fiddler extracted the parameters below. - -Version: 3.1 (TLS/1.0) -SessionID: empty -Random: 5C 22 D6 E0 2D 47 AE 49 5F C1 F7 30 1D 8B B5 DD 4B A7 2D 7D 0D 66 13 B7 D5 B5 A2 2F 59 9E 94 24 -Cipher: TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA [0xC014] -CompressionSuite: NO_COMPRESSION [0x00] -Extensions: - server_name empty - renegotiation_info 00 - ec_point_formats uncompressed [0x0], ansiX962_compressed_prime [0x1], ansiX962_compressed_char2 [0x2] - SessionTicket empty - - - ------------------------------------------------------------------- - -CONNECT 211.162.212.246:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 211.162.212.246 - - -HTTP/1.1 502 Fiddler - Connection Failed -Date: Wed, 26 Dec 2018 01:18:45 GMT -Content-Type: text/html; charset=UTF-8 -Connection: close -Cache-Control: no-cache, must-revalidate -Timestamp: 09:18:45.231 - -[Fiddler] The connection to '211.162.212.246' failed.
    Error: TimedOut (0x274c).
    System.Net.Sockets.SocketException 由于连接方在一段时间后没有正确答复或连接的主机没有反应，连接尝试失败。 211.162.212.246:443 - ------------------------------------------------------------------- - -CONNECT 211.162.212.213:443 HTTP/1.1 -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Host: 211.162.212.213 - - -HTTP/1.1 502 Fiddler - Connection Failed -Date: Wed, 26 Dec 2018 01:19:06 GMT -Content-Type: text/html; charset=UTF-8 -Connection: close -Cache-Control: no-cache, must-revalidate -Timestamp: 09:19:06.236 - -[Fiddler] The connection to '211.162.212.213' failed.
    Error: TimedOut (0x274c).
    System.Net.Sockets.SocketException 由于连接方在一段时间后没有正确答复或连接的主机没有反应，连接尝试失败。 211.162.212.213:443 - ------------------------------------------------------------------- - -POST http://www.12306bypass.com/GetList.ashx HTTP/1.1 -Accept: */* -Accept-Language: zh-CN,zh;q=0.9 -Accept-Encoding: gzip, deflate, br -User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 -Content-Type: application/x-www-form-urlencoded -Host: www.12306bypass.com -Content-Length: 18 -Connection: Close - -_rid=1545787125440 -HTTP/1.1 200 OK -Date: Wed, 26 Dec 2018 01:18:45 GMT -Content-Type: text/plain; charset=utf-8 -Content-Length: 105 -Connection: close -Cache-Control: private - -最新动态：王**在9:18:41抢到了2019-01-01,深圳北-清远,G1032车次,￥159.0元的一等座！ - ------------------------------------------------------------------- - +112.90.133.253 +14.17.80.254 +183.47.216.87 +121.11.81.237 +218.14.200.254 +59.34.229.254 +125.90.206.248 +114.112.160.201 +183.134.53.252 +115.223.24.254 +122.225.28.251 +58.223.166.253 +120.241.57.252 +14.17.80.254 +183.47.216.87 +121.11.81.237 +218.14.200.254 +59.34.229.254 +125.90.206.248 +114.112.160.201 +183.134.53.252 +115.223.24.254 +122.225.28.251 +58.223.166.253 +120.241.57.252 +183.236.28.146 +120.241.57.30 +120.198.197.251 +222.138.255.252 +112.90.135.238 +112.84.104.52 +114.112.172.123 +61.149.9.239 +180.163.150.251 +101.226.18.72 +106.120.178.253 +124.236.28.247 +218.76.129.252 +222.20.147.189 +112.90.135.244 +118.123.237.254 +112.90.135.240 +112.90.133.253 +221.194.180.54 +58.220.71.253 +58.216.109.187 +58.51.168.202 +117.149.154.251 +117.149.154.237 +125.77.147.254 +223.111.203.126 +111.62.89.38 +124.116.133.63 +221.194.180.26 +218.60.185.215 +42.176.192.171 +121.11.81.101 +183.47.216.19 +218.14.200.57 +183.47.216.35 +14.17.80.77 +115.223.7.173 +183.47.216.18 +183.47.216.36 +122.224.186.252 +120.226.48.144 +59.83.228.160 +114.236.88.254 +150.138.214.122 +117.21.217.98 +60.174.241.120 +124.236.28.252 +27.148.151.251 +123.183.164.249 +61.136.167.254 +222.221.102.254 +61.188.191.254 +61.147.228.248 +115.223.7.248 +58.223.164.247 +58.221.28.245 +103.254.188.39 +103.254.188.39 +219.138.186.254 +219.138.27.249 +182.140.218.254 +118.118.216.252 +59.34.229.252 +124.236.97.49 +117.174.21.238 +111.161.22.62 +112.16.227.125 +150.138.169.238 +111.62.92.6 +113.207.81.126 +223.113.14.230 +223.111.196.125 +183.201.225.249 +222.141.84.253 +118.180.15.252 +27.195.145.124 +218.58.206.78 +112.240.60.88 +117.27.241.254 +114.112.160.30 +183.62.114.154 +183.56.172.30 +157.255.76.48 +183.240.52.108 +183.222.97.135 +36.25.241.77 +58.220.71.62 +103.254.188.40 +103.254.188.40 +114.112.160.29 +183.56.172.31 +36.25.241.76 +122.70.142.147 +122.70.142.148 +116.77.75.185 +114.112.160.31 +183.240.52.131 +183.62.114.155 +116.77.73.165 +122.228.237.248 +36.250.248.252 +36.250.248.223 +59.44.30.54 +36.104.132.103 +219.147.93.62 +120.226.49.252 +183.214.1.253 +39.130.253.253 +153.99.235.112 +153.101.208.254 +112.28.196.100 +183.62.114.189 +59.63.221.41 +59.63.221.45 +59.63.221.44 +59.63.221.47 +221.180.218.248 +111.26.157.7 +223.111.156.210 +117.148.128.68 +58.20.179.31 +59.80.29.40 +218.92.209.249 +60.174.241.125 +111.161.122.181 +111.41.54.254 +123.53.139.253 +183.216.176.251 +223.111.19.126 +123.128.14.254 +61.162.100.252 +60.210.23.175 +60.210.23.116 +60.213.22.57 +60.213.21.252 +119.176.61.99 +123.138.157.93 +123.138.203.56 +111.19.233.253 +117.145.179.248 +110.96.40.225 +101.69.146.234 +61.243.144.244 +61.167.54.31 +221.180.208.214 +111.6.177.254 +218.29.50.27 +117.27.245.254 +120.221.64.77 +120.221.64.251 +120.221.23.39 +111.19.215.69 +116.207.132.253 +59.63.221.56 +59.63.221.46 +111.206.186.42 +125.90.206.82 +36.102.230.254 +124.116.133.126 +183.222.97.246 +60.220.196.240 +120.226.49.87 +183.240.52.132 +36.250.233.254 +183.253.58.137 +112.51.121.251 +112.30.197.137 +112.28.196.101 +114.112.160.32 +182.34.127.23 +27.36.62.28 +183.131.124.39 +183.216.176.116 +36.250.248.254 +123.183.164.40 +117.148.128.254 +111.178.233.87 +111.178.233.87 +150.138.167.52 +103.254.188.216 +122.70.142.252 +58.221.28.53 +42.81.144.78 +183.56.168.252 +183.56.168.252 +106.120.178.19 +111.161.22.16 +112.240.60.252 +183.236.28.251 +183.56.172.35 +58.221.28.51 +101.66.224.248 +61.149.22.254 +183.62.114.157 +183.62.114.157 +111.161.122.67 +111.161.22.17 +58.223.164.231 +183.56.172.124 +111.161.22.18 +183.222.101.236 +183.56.172.34 +36.25.241.156 +36.25.241.156 +112.240.60.172 +14.18.17.241 +14.18.17.241 +222.186.145.101 +60.18.86.100 +117.161.66.125 +111.161.22.19 +113.142.88.31 +60.174.241.96 +112.51.125.251 +112.47.20.209 +61.149.9.136 +61.149.9.136 +112.5.62.12 +183.240.52.107 +61.147.227.52 +180.97.178.147 +180.97.178.253 +183.214.140.238 +58.216.109.192 +183.131.124.43 +183.214.1.25 +58.223.164.233 +39.130.253.48 +218.197.116.214 +113.16.208.251 +27.195.145.62 +59.63.241.54 +61.188.191.34 +125.90.206.79 +122.70.142.175 +117.145.179.20 +125.77.130.251 +183.131.168.147 +125.90.206.78 +125.64.102.193 +42.81.144.77 +183.47.216.20 +183.236.28.121 +110.18.244.134 +113.207.0.97 +221.194.180.92 +117.169.93.85 +14.17.80.67 +14.17.80.84 +114.112.172.53 +125.90.206.80 +60.220.196.223 +123.53.139.36 +182.140.218.24 +119.36.91.138 +202.114.51.35 +114.112.172.54 +219.138.186.44 +14.17.80.253 +14.17.80.79 +117.149.154.188 +117.145.179.19 +116.77.75.133 +14.17.80.73 +118.123.237.27 +218.76.105.108 +14.17.80.70 +118.123.237.29 +113.215.224.9 +113.215.16.247 +120.198.197.88 +101.226.18.32 +36.250.248.25 +42.81.144.54 +121.11.81.102 +36.250.248.56 +59.34.229.55 +218.14.200.56 +58.223.166.118 +59.34.229.59 +124.236.28.95 +117.161.19.126 +211.144.81.22 +183.131.168.148 +114.112.172.57 +112.29.227.251 +112.240.60.210 +106.120.178.22 +106.120.178.20 +111.19.233.99 +183.134.53.155 +114.112.172.59 +221.235.187.56 +36.102.230.162 +14.0.45.164 +14.0.45.164 +221.230.141.51 +59.80.28.58 +183.47.216.37 +14.17.80.82 +124.165.125.253 +221.235.187.244 +183.214.1.26 +61.184.117.30 +120.226.48.27 +125.90.206.81 +61.147.228.89 +111.161.122.135 +222.218.87.28 +59.34.229.62 +219.138.27.30 +14.17.80.68 +114.112.172.56 +183.131.169.225 +211.144.81.24 +183.134.53.153 +61.132.238.92 +221.235.187.90 +218.242.102.131 +14.17.80.75 +219.138.27.31 +42.81.144.56 +183.131.168.146 +183.236.28.123 +117.174.21.130 +36.104.132.48 +61.136.167.20 +122.224.186.225 +124.116.133.20 +61.162.100.41 +61.136.167.18 +112.30.197.17 +222.186.141.186 +122.224.186.226 +122.225.28.160 +114.112.172.52 +124.236.97.45 +111.161.122.128 +153.101.208.90 +110.242.21.78 +61.149.22.105 +58.223.166.122 +112.90.135.92 +123.53.139.39 +180.97.178.165 +14.17.80.76 +223.111.19.81 +223.111.19.91 +58.216.109.95 +221.180.208.50 +111.32.1.230 +183.131.168.187 +125.90.206.76 +180.163.150.115 +110.242.21.24 +42.81.144.53 +58.220.71.63 +60.174.241.97 +42.123.117.23 +223.111.196.49 +111.32.1.206 +125.90.206.77 +123.128.14.71 +222.186.141.142 +153.101.208.93 +150.138.214.85 +14.17.80.71 +59.83.228.89 +110.18.244.44 +42.81.144.55 +120.198.197.87 +218.58.206.57 +61.167.54.26 +183.214.1.24 +117.149.154.187 +111.6.177.215 +117.169.93.86 +183.253.58.253 +113.207.0.98 +222.141.84.250 +14.17.80.69 +183.214.1.251 +112.51.125.62 +222.138.255.46 +117.27.245.52 +112.90.135.94 +58.51.168.46 +180.97.178.146 +117.169.93.247 +113.207.81.76 +123.53.139.60 +221.235.187.130 +121.11.81.104 +183.214.1.32 +183.236.28.122 +221.235.187.119 +116.77.75.146 +121.11.81.100 +182.34.127.48 +125.77.147.67 +59.83.228.88 +175.43.20.64 +218.242.102.151 +218.76.129.173 +101.226.18.29 +180.97.178.166 +116.77.75.183 +218.76.129.176 +36.250.74.127 +112.90.135.97 +182.140.218.23 +101.226.18.30 +222.44.151.67 +125.90.206.43 +163.177.132.254 +58.216.109.109 +120.220.18.252 +218.12.228.224 +61.156.243.246 +112.240.60.253 +14.21.78.46 +61.156.243.111 +61.156.243.110 +61.156.243.112 +61.156.243.109 +61.156.243.108 +112.47.14.199 +112.47.14.198 +112.47.14.200 +112.47.14.201 +222.74.113.225 +222.74.113.229 +222.74.113.219 +222.74.113.228 +222.74.113.231 +112.47.27.131 +222.74.113.218 +112.47.27.132 +112.47.27.172 +221.180.218.74 +221.180.218.73 +60.213.22.34 +60.213.21.156 +60.213.21.117 +60.213.21.118 +60.213.21.157 +58.216.21.22 +112.51.121.108 +112.30.197.16 +112.51.121.107 +111.19.215.39 +111.19.215.40 +14.18.17.20 +111.178.233.221 +14.18.17.27 +111.178.233.220 +163.177.132.27 +163.177.132.30 +163.177.132.28 +163.177.132.31 +27.148.151.176 +27.148.151.179 +27.148.151.178 +27.148.151.174 +27.148.151.180 +27.148.151.175 +27.148.151.177 +27.148.151.72 +122.225.28.159 +122.225.28.161 +122.225.28.163 +219.147.92.217 +219.220.29.189 +119.44.24.30 +219.220.29.182 +219.220.29.175 +219.220.29.177 +219.220.29.190 +125.75.35.173 +125.75.35.190 +125.75.35.189 +211.162.212.246 +211.162.212.213 \ No newline at end of file diff --git a/init/select_ticket_info.py b/init/select_ticket_info.py index 762b15a..03abc41 100755 --- a/init/select_ticket_info.py +++ b/init/select_ticket_info.py @@ -52,7 +52,7 @@ class select: self.urls = urlConf.urls self.login = GoLogin(self, self.is_auto_code, self.auto_code_type) self.cdn_list = [] - self.queryUrl = "leftTicket/queryX" + self.queryUrl = "leftTicket/queryZ" self.passengerTicketStrList = "" self.oldPassengerStr = "" self.set_type = "" From 342bebc7330d532d499b54726798845f2e36f850 Mon Sep 17 00:00:00 2001 From: cclauss Date: Mon, 7 Jan 2019 08:58:43 +0100 Subject: [PATCH 10/21] Define raw_input() in Python 3 __raw_input()__ was removed in Python 3 in favor of a reworked version of __input()__. This change ensures equivalent functionality in both Python 2 and Python 3. --- inter/GetRandCode.py | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/inter/GetRandCode.py b/inter/GetRandCode.py index 8d496e4..e95f8c8 100644 --- a/inter/GetRandCode.py +++ b/inter/GetRandCode.py @@ -4,6 +4,11 @@ from PIL import Image from config.ticketConf import _get_yaml from damatuCode.ruokuai import RClient +try: + raw_input # Python 2 +excpet NameError: # Python 3 + raw_input = input + def getRandCode(is_auto_code, auto_code_type, result): """ From 252ca4002c4378e8935048362a89b48f1a2ddcdf Mon Sep 17 00:00:00 2001 From: cclauss Date: Mon, 7 Jan 2019 09:04:01 +0100 Subject: [PATCH 11/21] Define xrange() in Python 3 __xrange()__ was removed in Python 3 in favor of a reworked version of __range()__. This change ensures equivalent functionality in both Python 2 and Python 3. --- inter/GetPassengerDTOs.py | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/inter/GetPassengerDTOs.py b/inter/GetPassengerDTOs.py index 0c7da1f..02f52ba 100644 --- a/inter/GetPassengerDTOs.py +++ b/inter/GetPassengerDTOs.py @@ -3,6 +3,11 @@ from config.TicketEnmu import ticket from myException.PassengerUserException import PassengerUserException import wrapcache +try: + xrange # Python 2 +except NameError: + xrange = range # Python 3 + class getPassengerDTOs: """ From 378bb75bf8ca2d80a35e243bffefa8bb56e539be Mon Sep 17 00:00:00 2001 From: cclauss Date: Mon, 7 Jan 2019 09:09:26 +0100 Subject: [PATCH 12/21] Use feature detection instead of version detection Follows the Python porting best practice [__use feature detection instead of version detection__](https://docs.python.org/3/howto/pyporting.html#use-feature-detection-instead-of-version-detection). --- init/select_ticket_info.py | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/init/select_ticket_info.py b/init/select_ticket_info.py index 03abc41..455eb38 100755 --- a/init/select_ticket_info.py +++ b/init/select_ticket_info.py @@ -30,9 +30,12 @@ from myException.ticketIsExitsException import ticketIsExitsException from myException.ticketNumOutException import ticketNumOutException from myUrllib.httpUtils import HTTPClient from utils.timeUtil import time_to_minutes, minutes_to_time -if sys.version_info.major == 2: + +try: reload(sys) sys.setdefaultencoding('utf-8') +except NameError: + pass class select: From 4371b0b3b013cffb570e9226da12b53cada92ef1 Mon Sep 17 00:00:00 2001 From: cclauss Date: Mon, 7 Jan 2019 09:11:31 +0100 Subject: [PATCH 13/21] Use feature detection instead of version detection --- agency/cdn_utils.py | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/agency/cdn_utils.py b/agency/cdn_utils.py index 6559259..a00dc17 100755 --- a/agency/cdn_utils.py +++ b/agency/cdn_utils.py @@ -7,10 +7,12 @@ import sys import csv import requests from config import urlConf -if sys.version_info.major == 2: + +try: reload(sys) sys.setdefaultencoding('utf-8') - +except NameError: + pass class CDNProxy: def __init__(self, host=None): From 3ca6f13d06344d36c6f6aebcaf65ca4c87af15a7 Mon Sep 17 00:00:00 2001 From: cclauss Date: Mon, 7 Jan 2019 09:34:44 +0100 Subject: [PATCH 14/21] Fix typo --- inter/GetRandCode.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/inter/GetRandCode.py b/inter/GetRandCode.py index e95f8c8..140caa4 100644 --- a/inter/GetRandCode.py +++ b/inter/GetRandCode.py @@ -6,7 +6,7 @@ from damatuCode.ruokuai import RClient try: raw_input # Python 2 -excpet NameError: # Python 3 +except NameError: # Python 3 raw_input = input From 4c1ab61b7b43c19a6c995cecc4c41b379328a124 Mon Sep 17 00:00:00 2001 From: cclauss Date: Mon, 7 Jan 2019 09:45:38 +0100 Subject: [PATCH 15/21] Trailing whitespace --- inter/GetRandCode.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/inter/GetRandCode.py b/inter/GetRandCode.py index 140caa4..01feb68 100644 --- a/inter/GetRandCode.py +++ b/inter/GetRandCode.py @@ -7,7 +7,7 @@ from damatuCode.ruokuai import RClient try: raw_input # Python 2 except NameError: # Python 3 - raw_input = input + raw_input = input def getRandCode(is_auto_code, auto_code_type, result): From e6ce310eca63bf0652101ef1e8509f179b785e62 Mon Sep 17 00:00:00 2001 From: wenxianping <931128603@qq.com> Date: Mon, 7 Jan 2019 17:48:41 +0800 Subject: [PATCH 16/21] =?UTF-8?q?=E9=AA=8C=E8=AF=81=E7=A0=81=E5=9B=BE?= =?UTF-8?q?=E7=89=87=E6=94=B9=E5=90=8E=E7=BC=80?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- config/configCommon.py | 20 ++++++++++---------- config/ticketConf.py | 6 +++++- inter/GetPassCodeNewOrderAndLogin.py | 4 ++-- inter/GetRandCode.py | 4 ++-- tkcode | Bin 14332 -> 0 bytes 5 files changed, 19 insertions(+), 15 deletions(-) delete mode 100755 tkcode diff --git a/config/configCommon.py b/config/configCommon.py index 0caf12d..5891ed6 100755 --- a/config/configCommon.py +++ b/config/configCommon.py @@ -18,17 +18,17 @@ RS_JSON_ERROR = 2 RS_OTHER_ERROR = 3 seat_conf = {'商务座': 32, - '一等座': 31, - '二等座': 30, - '特等座': 25, - '软卧': 23, - '硬卧': 28, - '软座': 24, - '硬座': 29, - '无座': 26, - } + '一等座': 31, + '二等座': 30, + '特等座': 25, + '软卧': 23, + '硬卧': 28, + '软座': 24, + '硬座': 29, + '无座': 26, + } if sys.version_info.major == 2: - seat_conf_2 = dict([(v,k) for (k,v) in seat_conf.iteritems()]) + seat_conf_2 = dict([(v, k) for (k, v) in seat_conf.iteritems()]) else: seat_conf_2 = dict([(v, k) for (k, v) in seat_conf.items()]) diff --git a/config/ticketConf.py b/config/ticketConf.py index 9455234..9c55da7 100755 --- a/config/ticketConf.py +++ b/config/ticketConf.py @@ -13,4 +13,8 @@ def _get_yaml(): f = open(path) s = yaml.load(f) f.close() - return s.decode() if isinstance(s, bytes) else s \ No newline at end of file + return s.decode() if isinstance(s, bytes) else s + + +if __name__ == '__main__': + print(_get_yaml()) \ No newline at end of file diff --git a/inter/GetPassCodeNewOrderAndLogin.py b/inter/GetPassCodeNewOrderAndLogin.py index 3689d01..26c17c1 100644 --- a/inter/GetPassCodeNewOrderAndLogin.py +++ b/inter/GetPassCodeNewOrderAndLogin.py @@ -18,11 +18,11 @@ def getPassCodeNewOrderAndLogin(session, imgType): codeImgUrl = copy.deepcopy(session.urls["codeImgByOrder"]) codeImgUrl["req_url"] = codeImgUrl["req_url"].format(random.random()) print (u"下载验证码...") - img_path = './tkcode' + img_path = './tkcode.png' result = session.httpClint.send(codeImgUrl) try: if isinstance(result, dict): - print(u"下载验证码失败, 请手动检查是否ip被封，或者重试，请求地址：{}".format(codeImgUrl.get("req_url"))) + print(u"下载验证码失败, 请手动检查是否ip被封，或者重试，请求地址：https://kyfw.12306.cn/{}".format(codeImgUrl.get("req_url"))) return False else: print(u"下载验证码成功") diff --git a/inter/GetRandCode.py b/inter/GetRandCode.py index 8d496e4..647512b 100644 --- a/inter/GetRandCode.py +++ b/inter/GetRandCode.py @@ -26,7 +26,7 @@ def getRandCode(is_auto_code, auto_code_type, result): print(u"打码平台错误: {0}, 请登录打码平台查看-http://www.ruokuai.com/client/index?6726".format(Result["Error"])) return "" else: - img = Image.open('./tkcode') + img = Image.open('./tkcode.png') img.show() return codexy() except Exception as e: @@ -46,7 +46,7 @@ def codexy(Ofset=None, is_raw_input=True): | 5 | 6 | 7 | 8 | ***************** """) - print(u"验证码分为8个，对应上面数字，例如第一和第二张，输入1, 2") + print(u"验证码分为8个，对应上面数字，例如第一和第二张，输入1, 2 如果开启cdn查询的话，会冲掉提示，直接鼠标点击命令行获取焦点，输入即可，不要输入空格") Ofset = raw_input(u"输入对应的验证码: ") Ofset = Ofset.replace("，", ",") select = Ofset.split(',') diff --git a/tkcode b/tkcode deleted file mode 100755 index 017773ef34fbfeef494bd105b9e8ed9e6a1c6a1f..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 14332 zcmdVBbx>SS*Dkuz!3hKs90HS&V1Y?+hv30waCd?X?gR-5WN-@vcXyZI3_7?33otl= z;4UY>_xtMo-nwHZ}+w3kL)O;o{=p5s(oQ;Nufel0GITqoty!qotyuVE}V5Gcd9-(a^l)eZ|Jf z_4e&sdS-rMK8O&uk#;}?*8 zCnYT-D<`k6p{WJc*3mUHx3ILbwy||_b#wRd^zsf4`4sy3OIUbpTzo=e(zoQ4?3~=Z z{DQ)w;_8~(y84F3rsl5hp58u0|G?nH0X#)VBPt_m`NJ!XUi;*d$i zWL0(IGQCkdBsX;)$9n>PyZZd-A8P+%_WzAo(Eky$e-ry3Uh@C}2HM}r!yo}ffs1R_ zQEqlUl_cc^`y}lkovk#?#}t%n9|-cbB%_IB8B(z^>I@F=8$2wse=Y9fd-2Y(PbbqG zn@YrrU4;#xD0>0-DJXG~foC}W!X5PYd|qCx-m~NE*y*DhFU#(@xybYck%|&qt-)t? zGmKFdjVFYCVZz-lBx#*%uHv0EXq}++4veboMkBo4`Lu(Kf=-W81f!yLu}~V-+AB#i z3P=8>IHsv`!Z!v@r#8E815W7|iSIi|pv`8}B?`Rme1GG=|{xGf|9^59;qy<T*+r>L4eNd?t#C~OI&_kLOVB6im19e5ub9Wk%$V8DJ(1BF=#{hg zZ~K+_U9@>gbG%N*@$jM(ize#DnrJU38Rhn>MiYRDk`Zy5VsDg652%|;gr$2mbkd*OcZXiZO z?t+)b;ZLt8BGh$<+dy|_{zBG*CyKna41JS5OMkt&=H)YU8rXD8x}eXJKXnGB_=mBQ z-h2eOGo%DtMycW zEC_BXsB^rU2pFwxPk8{2G`#)?qK)oQ8P?f*z{H?23GyBGGWyIe=P`ja_y_&snZp3;B0w>)SGhO99ikpfV zl|Q)sx1ImAI4dM-SGXepSJ9cjE8gXyGwXxse?()Z+y;qEEm?JsEpK1U%siT(U(#Qw zMR$Bjz-q>Ts_M1--*ZlBuHi^s;x9tD6(QS0%2ucB^D2Yp=Vz92tH^9>Taj59H0}#6 zC&d?Zq$yk7R6HrVWKFepCPKxs&zVFy)gxO|&7qoGau0yW#J$}E(5w0%Si^_H){U+E zQIio*$vyE^P3-5cr_r9pgJ&F)+PZ=QS2a&#!Xz3OYS9LS)~5szT=i< z@qRbK`AG-s$9w=Do$W;aEFVS2-TUR;&OQL)IsXHT&L7>kS1>Nye6d9?=s6l8mMw`x z-?ENy?B4I5eaQCt6#8ubqdV z4-fl|o}p{T$^Prj_FGN5eoBH`0pa(LOBu516V&LjD(y7T>wvE#U0 zT=$2dtZTR8SWgXoBZJm_G{A7M{o#=_89;?^7t;$UU!5nN7~Qi({TqFJk)8FQOW;2-x-HB9)sJN2 z7UusDqc|&n+IO9>jt?W_RbOBu{i(1i^-Mx@!__2aVS|!xt-3@<4Qg5YN}!JHaUJqF z{7T=mp~vr5yd+@dLk3D$_w^ScDL?n4fG)`ruTITXdfS*l+8ZNzW*S~vWVp33vPx=&+yZ3U_FxiimOt&2Pz3b(-`O8R}YsEN4lWsWIS zwWrlgy2AI6=N3&}QEwBNhbo8Qr zVXqOpv+bSy%^`-u{Xb=X%GuWC7@dFL$BZG}8>1noiG^mx&B2~3V?|C>58%gl2f@a;KQG>QP17EQQG zSkP)ma*U9LHMV*-c9T=FCtN;MwXupHDU7r2J+)uFUKGBXN`KyeC)$^Q7(}LoZ$zy3 zr+>JpAhSz!9v$DMg(0Ss4VIE) zUoqgugkuriSAdn)&wsDs@{G2QykCF!@xr@_y5YwCWceWfwjXV*Uo(2=hoLN0Mgy<# zMBVkMqkKsgDk^3(b2k(7!@v8`A*9GOlfNwSR|sDQT94-0mIr!VvFys-@3F>2U7~Ss z%j7xzdc+Xx!>ipXXusu-(SGm(h667{oOI_ z?v?8e>by_iP7rGxLAb|=VA(H1N$U!hc*^bRmkNj@g0MRdXw_{cMiN}ap z)xQH8bva^AZ!ueM`G)*(Y}B%iOzzZUHxAt_iXTnwqzs>-ZM^4%Fh(k z!WF8N(NGKU^^dKw(l~vxA~`dCHIU4Saubi32~O=QdQTp&PElUT*(};hEWt8fjfTmY zwcS^0KP^~_kDW`U4^)mJIs6RhoZhDS(;UygOHF#L2ezlKlN=WcRS7?(1y)djniVZ& z*Hp|0UC8svLt%vuQ$^Nyp$d^X>Nf&b>7_9N5W8u;Jg?WmXB208b|ubS2m0mXvjsPvS?`mW4trHs@|qbBAe+1Pq&vJsC?9ECNtUB?ODn*<7(-$zH|)q z_iqbY_sL=KgJ^dawI)yz0{zq3*(ddeoCpGWq@}$dr~4<2>fK7! zG*TLfoT58HaweIDZZu9<=X}d&1$9}!8Byvr2i5aN#6**ei?mNAgRYdEvZ*cs|F5wc{3;zcGb0*%L`YJwi3 z@^j_NYjnA;?SyQ_OpZ1e`BlatwXvWVslN!EP9-u?rD-MRgN#) zLRkshF@_m#ueL!LwAxnb&YVs#BDrm+>i8#+UnSY{@4n>aG6Xq^b@a)UJHx`~D=TC9 zAF;l5V!-ShNhHASpg^T>#ig%5lAIT2H(9ce`(~(}_^xWM z?p^cf+|07!DIQ@vuBuY5scUoz!IaG_2N|SSPf#nfV z@6YIC$_Wh-+c7QjOYM?UZeHAi2BBScq4f>%j4W5hEuGW@Oir38V0|5z0ZT3UzigIiDiM`Sc@`CjCFXdL}ykQ8zaQPh{Sw%1zKQgxy4 zT%VaisojYbM9@0e+|NdVEedieE9hZu74RuhJOYV5KCtrm&jNMR%1TOMlXJmyD;I0U zMyUav#RK0LW<~^dF=8D{1CEbbB3s3{9)KueA3GY;R{YiGfxA49H>Hso#vofJLEb;) z(qzt_hRX?i>2GJsZbetmr>w%#auVJ>msyP70?pF8L}tb;w?O6wGzypJ{R{dnPxr%M zdf$=RvOn=cwI~>lakxk44BC1}%CqbD*9|k+#W5*@S4I{fGVNe^ScEZCEGKcNm3PZ$B z^F$DgU2?t-h^Z&@5qU@Px(1S5?;VfV2^*N;D8Bx!6n1!nDQkvs>{IGkZhZ?St`;W# zYqJVp%OAdn!UuJ^BR-{Ig6mjW%*2{R=->SJ_X)g`AE9bEuv$TF)7%$%Liq%@EFAGx znK70kEpw}0nFf{7&FxbXV?_Kr?_f7F1h>7;%vis}*y&2hfuO}Nu+u-y=ak&NSS<2; zUbHl`6UGNx07*u-Vt#feETHy16!I4K;);x5eO1~|dGhGCS0su5tA-|ilN-hSV>?Vp zk<)W%bPA;IXLgy*vPNPv!09LbNt zy*V+08Oy(zX#Do(eM1#4nRKs+DK+I*AX4T%ihG-$6#jK}4;rDGA~+S0&beZue~iP} zYUtDE(0`Tqrf)3j%9uesYB|hb4Hz8_J_TIhP+A8WL1D@|!Q(X3Q7{lsuy+xh3wLT{ z@NE*g8}(0}mC9GdLM9MED-kcm1snTE+bbqoo4b3U&iZmpis0BcHF9L_%WMjMBBn|{ zo6UBFrj)56`1vnk)!o`Y<5zb0^49Hh0im2IZ@E)lC(yx;m=otkw^ ze9CY$lhy#g{d~;*mA5wT-us2&n>(4+mOcH1^2+h(=Yp~{&GbodfBm>UxXYB*x_7Md zBZUw-Q<1j4Vh#xOD`&j!;{LuvW^0&bee#R2&qQzv`oV$<0V>%@qdM!^YF*{25VPRl zelk^S3tSrDUOS^1n-K1d`7UqG^FL5?WA^un{6? z#F_!WfQy;|F@*?ylTI!!cQaf00wphL_|vFXG=PR^jdDj#7tzo~TQs zUbeq0cvi@)h<2BjX9Ax!iImglOZ}l!r#B5H6NqO0q>qSI3-cY8=}-$zO~M8e0MU!_A#8)xdX+P(DdSfym7BXKg_}=B zllK(6=2O=>x9el1$9t5Nu{G^O-1#u9X%P=VaZIfNM9@8)VqL|{Y>QuX^a`e?-E%(S z^)A#Yuo4%D{B}k|BzWk3q?CS47Oq1%^A;0*_)@(?7-1-T%aTy~1j_GIq&6?7)enZ< zO$!b^l2Ka>zLkfiCyRXRoGx`UkTIL@Iqs4k4@0+rdMPc7RC#G}+WAU`8`(#B6jDlC{hqo55IFdB$H z5qK_>HR-C6fAw<#*hS|lhgDtGdj^(II>X7}L{T4RIKZ`lQ9(fqjbM`Xwexc9sxchw zg&SHf9rcMX{7O92?3! z2iE{%+_m}$f(wZDa6fVt1+LQYg*#)T_TgsEv*Z@sWo?H(C5}7`{*-dhW1Jz-XneHv zCc5nUR>9Rj`-BphKIh?@xJ*(MFc$Qo+M$YkMS+DI$V(GB-FL8!F0eV?H?~K{F0GLdK%Pof zqS2+ypX_jmM5UD@=f}(yD{G;Q_(-%}XK6sdkl}DCF(FT{S}<<_!=)Wv{GuTU(ni>?|{yK}v%t1Jgv|A>v3OtY5{0L$5H+P5*= zl?sm`tsX3$@zKx?2WQslPM($72j3`fw1sq$nT% zM!d1d{NmY&J%(mv*Tm{HWBNvCn9zPt-{*2{CzteOVIuJn@4Efc$3q)Sx)K&DgH{@I ze~{vA-z>K>zB37(ZC2JfV%f}>Rt=HOK9Qzqa*KFwqiiV4@)Z66c-K4GnL1s5>++ra z`;jj>-<^h;r(CZn^~SiH$f{s_qorP7N7^~A=2wV(;oz2ARY%Vu7;ugW#YEQ*qMX}M z&%D=WZ#v{?FYK!MzW+iFcQO3a__sqqFsIL775PV(y_Fo5SLMe6+n6VnMR#>lcH)#< zk9zN-Xh1bpCefO^{JGjwx%by$BE@DT?(ZqqKS3%5UW2O%pM{(Sh~!Soo5WNA3c7^N zWrD+*n*7~y19^S1F`S?IOwXXys?tj6CxMaq5^{^cY1T|JZe9@zx~_h~gNKd9PM#GL zwwA_!#!f#N(Ip^D^MsNTIJ%yV{$;aIyU+=H`qM#1M9**bLj69Vdzs>IN(B`yzjU9~ zXn4hD(s(6%Gw2s#rWIajgBK}CM;?&f?b_2^tIpxxPdqHzSG8f6#`&pP70du*AzHrA z*edgWQjx2_10ics7p|8cO3;S{v91L0m4MYjn`B=Y;`#6boR9&XczIY(Z*Zvv$aOSk+%y;O_gSJXqNE1zFya6 zRyq36oF=aOb156&>bcPi|73u^ug3pR8#<~SzVs9d0e`Y;a>e=vX;f>0dQplIFP)7# zdIx#A*T#)9#*%&h#_1q|jlmE09WFUBi}qv1r3}f^oDT1oekS?M7#qi-^^ZvAQ6%Ci z-LAr2mb_Oir@q*uh)-XMf(eN9m?{?{r{o58>z~y3pS})FbRM8Z7Qq^Ph@bPsO$tWQ z5+9zNtw0smN_wltZ@1J2=`sDW%dEYXlEm4%&k^DS-oPX{T(F5koH|TTl#|*NNTqS(+ZMf^p6urH#K5LsJu8eX|Lq`@ zH|4k2;JJ6=K4NaG8-M;w;Jr}2K{rgZ9~7$qyS)qh!q*$q`hE#*-ezFsAwFEF&xU* zN6r#MzGy3+aK?zC7)->4sR>6nc9e~~h7neHA7C*xsp*`~PM#|s6tpt(pGrB@yr`J9 zzhqq4YVYI5^?}Bv%rBa8YnMNb&78w7Wl#UZi)qR65rNeJy|RM+3D~Z z<8bR(7^h(2XJ5%ye`CTS=da_@a&pgY0ju^O)=hO`oB9i}{d+eElaIL@{lemXumhX< z^_&Uo?C`n%R|RnUvWBr@dQrK7mJ@) z8;K?a(M#mWV%C4$F+kbhzY{HZG2-{S)Dy<7^F9bQXhtD%0E+n3v9bMjjAx@MP?zm7`7jIymYd9~eP=Jrdr-Zlx-J59~TFsDbf ztq%LATfjMaGNZxLvR72&(6dD_9|mQgI3GZip2oWUJpdCd*u5O4*&fo_@cs_-8DV z6*hgZ_IabvF%Q5`EsjXD3U*fC*{kT9aNHK9q45VG24S7Tw8J}Z64;aEyx2t zAwhKxbJ0&3eB;dwXMAHl2w;Wb~=^5%;LNpgi zT5(3ZT=qUq-}J=hL^Kroxb|Xy3VT~kG+R!T8giD|I4rm{xQd~Kul{H~3uMq|4D6sG za1tQSV9G5rn$Y6>u;0{iOY}c>|QJ|88KFMFmNFDGMrd{^sy568q$h9pL|yHG{AxjS>t$o zv4s}O6*KGR$X@#uMyL)?p=y0SU9ZITK$^8hN2n-~S?=i% zPEMJrj1App*AjPV0yJMMU<_Jx~u-iOR z;#BwnP}WTt>{D$`%$59{G#shG+oz(4bi`v)T65V|Ou1{Z9HuKM#j+d-BLjq{% zcWowuH04x=q7d9|4*<^SL6=`m!QGqdo16Q1dV&oyzse1ttAIOicN15~aVc{1e@S#? zKPiegq?PlWmnn~gms^T#S)XUbS7QND*nLKXn38>^dod%2}>Sy~i-Nv%|5;LKCA;Gco^5v=6c?@%i9&K_Zoo>??eX=8qbgi^+b(Yt!?lZ?;wJyf|dh$l_OUDZSDhz)%n z-oVDtAvj?ZKUx&M2Vd#Fa*ytQeSr(62*b4Q%MA-@JH!BR==s5)DOjUKYA8OcSY&Im z-7$$~`EN9}CuCU~ef8|MHmZD<`FeKn*J1qSmsHvSjR&A(K=iWsEZ{R?shkb@$a$6z zf1`be;+w{KZ#UDw8@%Rp3FK8=xp965pU-40|5WYL+cjeb!(PvNmD#()?8#F%*`-yI zLoch!BF}j96T@PO6+DLL2}2} zb%e^@`F>O+=V3;Jubgh=%kLtcBRVm_Chdl-Nt1snYByphZw$9o!W9yO4g{OtyXZ2g z1P{5?r6!qoqip(bT2uDfYyVX4u$$SrFw(-ShA&;{vpP{2lLck4<+tN?Eq6qAvbCOd zgfc_QuT{g}MchN#Lotg$^h;oiC=8l{y1v-WDuu3lkgz==(&HuVIGSWI3Siv6hc7T*@&P~Yk9R@ z&oBDLd#1#q!YF&!!+i|#SFa>&8!G?(dKfX(Y3SK`x-^NNH*P-l=WM6;%dM0bS@nDk zQ{He~u9sSYjXQEh$=|_~me6g!JY&_*M@te`)a8&&HNG0U@4^X+XCZPX@}v-oQLMRi z%ic*E^2=|Vu3NX&dIjHq(ILmz{W$u~WS+2NW7CBEFUUrU!A|TPdoFZ7+#q81DQ}Y6 z>-a{RFLRG@N0+)#AZG6I_4Ev6;f}jUqIE1hZChK>ng@Br3kPqZS0pOqY&SQ ztFo9F-c+i{o(_X}1c5eArgWMSiqO)W$BEw(J$3I@2|7L%nyYy@0L<1eVXmyyQ z9BE#s+1TV01_|(7aQ6CBiMEr9_rXuvAjzl26V>^w+IbxiJX%EYU6gbOZVTHcq?H~S z=nru(4Ab22Q)+mzZsY7--l+ZBb@vWPY|0?Vr|!10_=pf6!&YB!R#m#$I)%u-qKTzCsAq- z`ShezuY%l=%LEhluHX~Og&4ti$C5c-m+ZjPs&y#Ca(|#>!PfQOikJdpvL>a;ab-Yz zVZg7b1p-%~At{!5y_HCxhQW1E_x&d7EU9`0{;0tE);&hs@(e8Fp=TKKdkqfz)#%8Yec@=#T9XTz6m4v=7Y_5xvfhjwG##HI{d4b%RpiY@& z!Ix*W$~$6_*Ec=hen~0S%kxY*_A0Yz7xeFC+WLfNs$UCPnCDAaJ7$iFDn=-+LL6+KCeR@Ov0x_J{(#P>zAPQDC;!=9(iZ|6TOl&iTwy z)?g_tu=e5_8mm2bNiUYj`kkFurM)!>#^$oLc;zFX8hi|!a%I)MXeV*g@$IdTT%MzY zqq(bI9{QY

    1C`+ zL0})>OnKZhfNnHbFDZok_$mtB_C#x?)t`G*fT}BZu4hNQ%Ytp@%X+gw7mgos2QUgT zqt@1~mRsS}=gw)M@$?aX7x6ca@?&*6wW?lrg|$-a^p-)draef95}7@J1~Hup1|5yf zK)-zI+C|nZvCj_D@lT7LkleeOf}E+Dh1O4W6D51*Ex%i^J$)k`M}I2#KG8<-{mDW{KIR{W9Te%i6KZ}9dib!l$y?x~U=6xvWD#RmSs zNh^CG()RfW>y80Y*W0Qvs5O_d1s~;~d%wGqLI02xK~o;IpUZqS zFdBgoYi;G;=9AM=#TOZwp6WLcMG5>is7ks!>sxCiS<`?i{-dXS0O?4_UeG(% z7UIS2GeNuc>YFzT-ie#!^jzOK7D@TQM?2ThBs;?w)7(XLv_#`3W2Nh{LqiFi4QlqQ z@*nXsRpv1GQB0W?GBdS;_U^2nmXK84l!ae z3nTbF&&39DVq8+MBYuj&z1F9>VXSno3fSr|aD|$S7nXG5XkIW<WiJ@@GRm5ZfnSaBt$yAze9asB`UC1laepSww2FRTIQ(Y<)PD@!D)2%K z%_R{(HRY5ZLpH^-1eO!FjM`V>$gTd?70U70g_LiIi%&%f(`o@yYZmuQveo1`!~2-s zv1d}JJ0M4>a(-EN_m?%n3#6${;=AW$2TqdfAH};4T_$Ih<&Tu940@U$fG@RsJMee4 zYV)DSKOD9Ljo(Zwb^TbpPAPDeteH+h!OZFB;OXrd8zwEokB3lS7nb-W;Uo3Kr+fQ6ocSn%EXwO;mGl!5UAev zX{CG7AmG(4@ei1?Aa2S>7CX zP*C0L6^M4rD|w4o;rBGdf-QhYwtrz(xVV?e^#Q;Gkgbhy8|d^J*} zKg6OSJQW9tO2~7*yj8SPa1w|+P_nCOxU}-%`BT4Z%KgFqSOsKcmez5PskKqiorVWm zg3%-?Nz+<<$O-7cW$-6MTMymy>-ePSS_&cYGCMWQFW0ltEzc}IPcc~U<}=%Pq`pfL ze7m<$dP>XE#T~hz9K>xHYzaFZ<<1F|#q+NC?;wuY*Zp@uM-()YJEBe)*!X^)z-Ge_ zjl#~ce;Mkf637>P6rkAxUkq3x@>#bfCt49}=?Pmq`$D$j4Z|O4u&%rY&QJ`*TI8Fi zCcjJi>Q22y$4)ub+jjmYo4d^m3pyNWmXr8c@jdQV1ig}vupwe@dvPaKql%3Z{M>#z z?_e_2$esknUJWxgFEENySkbNCpR*3$RhrLf-$NbC5b>ClXa!)xlc4}o34#N^W)Rh4 zxD*c*kwK&>t{762D3Q)$NZFfidbdED@MO(%m`iMfS@n{#{NZ`RU4n(hqrrXE7GY1o z_$ClOYseMJrLo#z#0eqiiV4E)JQvL~xYx`#lA2VDZ>|~Ync9ku|GQ!?-IX72k82~q zHuW$j(EYQjP_#}Ke}|m0>q$jLl)b3|epixr2+)_0J`8Z&H??Yq$ z$Q9hHGnpG}51G*k4l{giMM_vo0Z$Da+v3hx<6@h4J)B!&^A2%p>mgZ>?G*?1)o`i9 z@A(Sr>LfRRtQS@6jOL0I*EIZm9O}q^OavP=a}v7t7*(>vSd&hB(X{%up}r>ZC`DzE z5ll|4N7w;AqamZjHL z81+ga4ILRA@ZbF?BRP4gHOT+AMOb%pJZI`f-8+vs>cJrQQ-B~y&>Lf-c3{WkaNE67vUsO-KFb%g!I1-3tRGyn9{5okEmoEWJ|#+cwh?bI=OyuyYIPV( zR)cuJdi+f^fc6oCV$tSB{VwZX)()AflnTxg>(D)ighiBsMWXh)bUcvx$-aZ&$!|YV zsxypjeM9S`<i*%i5MB&z;{s<*gzK3t9L%iILXI$*D2OM!Vb!{?$NRBK1exz`^wsA2z3^v$!fe8URN&ot>9^)gtj4z2J&Xrp*jbVzOCqeT)$FNp|zJfZm$7oBIRuxfoo{QRA*9?*J=>V)0v0tpZQs~iGx3~N!( z8?%&aP*;kC&H0!(6-6urSKka2*+}cTwP@Am;_gp!!y8sGW%;G*N{pQjM1%fKXdP>7 z?mE?*C(ZucQ_keGOCx;tvEx(SM-45sMn&7Ew#BYX>7}gz1^@^b`Aonf<1O1x`koZt zzIUa=EtX`_5F+eG^m>a~0;v3~dc(tT z*xB?oEn6sbJ|u2bwX+=2D}ong)EIOy;a1ZcsWKspcDHM0gB1Ph2&5h%8UsH0g5Rb| z_$lqavulzbCj;12;RMl~xXzNK0rR~aMxOqAlcQuE)K2n0R@Ng%V^TjVGaXGI`nB?A zkoij51rVq$+-1v3wSM7gl<4GrE!|b1j#RRn9|Jf6L}g)pel> zHx1Y1S_FbpvBQj?2?(4`*)7Z)3|UJ~&e^7N_+-Csb6(Yz*00+1qoC;4P61;~ZCpYN zGxi_#peuNUOap)~Y0Fi&&)xy81g;2xv;@9VEAP+#*1MuHAa&GAF(?yR)@7ruubxAEA0J8^RGT_$b z0jSW8R~5s?qWH&4W4b9U{E5WBKZ*2`seni`h~F7K%0JTZPVbE`p%%yH$0JKyXhP!d tEY4a#CEI=Jo$#s&oFVpC_XGn@big-%DCQI<9Kq;U^y6{{jW)!(ada From dedc49120396f3ff19ae9600afcd18cca631ba3f Mon Sep 17 00:00:00 2001 From: pyfaith Date: Mon, 7 Jan 2019 18:51:27 +0800 Subject: [PATCH 17/21] =?UTF-8?q?=E4=BF=AE=E6=AD=A3=E6=9F=A5=E8=AF=A2?= =?UTF-8?q?=E4=BD=99=E7=A5=A8=E6=97=B6=EF=BC=8C=E4=B8=8D=E6=98=BE=E7=A4=BA?= =?UTF-8?q?=E5=BD=93=E5=89=8Dcdn=E8=BD=AE=E8=AF=A2IP=E9=97=AE=E9=A2=98?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- inter/Query.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/inter/Query.py b/inter/Query.py index 3721224..91a7442 100644 --- a/inter/Query.py +++ b/inter/Query.py @@ -161,7 +161,7 @@ class query: } else: print(u"车次配置信息有误，或者返回数据异常，请检查 {}".format(station_ticket)) - return {"code": ticket.FAIL_CODE, "status": False} + return {"code": ticket.FAIL_CODE, "status": False, "cdn": self.httpClint.cdn,} if __name__ == "__main__": From ac69e2c9e04e64fe60c7751cd37b9bd0ddcad293 Mon Sep 17 00:00:00 2001 From: wenxianping <931128603@qq.com> Date: Mon, 7 Jan 2019 22:54:46 +0800 Subject: [PATCH 18/21] =?UTF-8?q?=E5=88=A0=E9=99=A4=E5=8A=A0=E5=85=A5cdn?= =?UTF-8?q?=E6=8F=90=E7=A4=BA?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- myUrllib/httpUtils.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/myUrllib/httpUtils.py b/myUrllib/httpUtils.py index 5712981..cdf854b 100755 --- a/myUrllib/httpUtils.py +++ b/myUrllib/httpUtils.py @@ -116,7 +116,7 @@ class HTTPClient(object): url_host = self._cdn elif is_cdn: if self._cdn: - print(u"当前请求cdn为{}".format(self._cdn)) + # print(u"当前请求cdn为{}".format(self._cdn)) url_host = self._cdn else: url_host = urls["Host"] From a9cf9c6c6ca7000b55ce914dc13f4c411d55a949 Mon Sep 17 00:00:00 2001 From: wenxianping <931128603@qq.com> Date: Tue, 8 Jan 2019 09:48:18 +0800 Subject: [PATCH 19/21] =?UTF-8?q?=E5=88=A0=E9=99=A4cdn=E6=8F=90=E7=A4=BA?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- agency/cdn_utils.py | 48 -------------------------------------- init/select_ticket_info.py | 2 +- myUrllib/httpUtils.py | 7 +++++- 3 files changed, 7 insertions(+), 50 deletions(-) diff --git a/agency/cdn_utils.py b/agency/cdn_utils.py index a00dc17..77698eb 100755 --- a/agency/cdn_utils.py +++ b/agency/cdn_utils.py @@ -71,56 +71,8 @@ class CDNProxy: # print(i.replace("\n", "")) if i and "kyfw.12306.cn:443" not in i: cdn.append(i.replace("\n", "")) - print(cdn) return cdn - def get_cdn_list(self): - """ - 筛选代理 - :return: - """ - f = self.open_cdn_file() - url = self.urlConf["cdn_list"]["req_url"] - num = 1 - f.seek(0) - f.truncate() - for guid in self.city_list: - data = {"guid": guid, - "host": "kyfw.12306.cn", - "ishost": 0, - "encode": "HJXhdRqjh5yCF6G/AZ6EDk9faB1oSk5r", - "checktype": 0} - try: - cdn_info = self.httpClint.post(url, data, headers=self._set_header(), timeout=self.timeout).content - print(cdn_info) - if cdn_info: - split_cdn = cdn_info.split("(")[1].rstrip(")").replace("{", "").replace("}", "").split(",") - local_dict = collections.OrderedDict() - for i in split_cdn: - splits = i.split(":") - local_dict[splits[0]] = splits[2] if splits[0] == "result" else splits[1] - if local_dict and "state" in local_dict and local_dict["state"] == "1": - if "responsetime" in local_dict and local_dict["responsetime"].find("毫秒") != -1 and int(filter(str.isdigit, local_dict["responsetime"])) < 100: - f.write(json.dumps(local_dict)+"\n") - num += 1 - except Exception as e: - print(e) - print(u"本次cdn获取完成，总个数{0}".format(num)) - - def all_cdn(self): - """获取cdn列表""" - with open('cdn_list', 'r') as f: - cdn = f.readlines() - return cdn - - def par_csv(self): - cdn_csv = csv.reader(open("../cdn1.csv", "r")) - for c in cdn_csv: - cdn_re = re.compile(r'https://(\S+)/otn/index/init') - cdn_ip = re.findall(cdn_re, c[0]) - if cdn_ip and c[2] == "200": - print(cdn_ip[0]) - if __name__ == '__main__': cdn = CDNProxy() diff --git a/init/select_ticket_info.py b/init/select_ticket_info.py index 455eb38..a709e2d 100755 --- a/init/select_ticket_info.py +++ b/init/select_ticket_info.py @@ -153,7 +153,7 @@ class select: rep = http.send(urls) if rep and "message" not in rep and (datetime.datetime.now() - start_time).microseconds / 1000 < 500: if cdn[i].replace("\n", "") not in self.cdn_list: # 如果有重复的cdn，则放弃加入 - print(u"加入cdn {0}".format(cdn[i].replace("\n", ""))) + # print(u"加入cdn {0}".format(cdn[i].replace("\n", ""))) self.cdn_list.append(cdn[i].replace("\n", "")) print(u"所有cdn解析完成...") diff --git a/myUrllib/httpUtils.py b/myUrllib/httpUtils.py index cdf854b..879dcd8 100755 --- a/myUrllib/httpUtils.py +++ b/myUrllib/httpUtils.py @@ -6,6 +6,7 @@ from time import sleep import requests from config import logger + def _set_header_default(): header_dict = OrderedDict() header_dict["Accept"] = "application/json, text/plain, */*" @@ -25,6 +26,7 @@ class HTTPClient(object): """ self.initS() self._cdn = None + self._proxies = None def initS(self): self._s = requests.Session() @@ -126,7 +128,10 @@ class HTTPClient(object): try: # sleep(urls["s_time"]) if "s_time" in urls else sleep(0.001) sleep(s_time) - requests.packages.urllib3.disable_warnings() + try: + requests.packages.urllib3.disable_warnings() + except: + pass response = self._s.request(method=method, timeout=2, url="https://" + url_host + req_url, From f76371ba72f975e1b1fe4098cee85e6d4f78d626 Mon Sep 17 00:00:00 2001 From: wenxianping <931128603@qq.com> Date: Tue, 8 Jan 2019 10:16:24 +0800 Subject: [PATCH 20/21] readme update --- README.md | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index d08958f..3cb51b3 100755 --- a/README.md +++ b/README.md @@ -35,7 +35,8 @@ ![image](https://github.com/testerSunshine/12306/blob/master/uml/uml.png) - 项目声明： - - 本软件只供学习交流使用，务作为商业用途，交流群号：286271084(已满)， 2群：649992274(已满)，请加3群， 群号：632501142 + - 本软件只供学习交流使用，务作为商业用途，交流群号：286271084(已满)， 2群：649992274(已满)，请加3群， 群号：632501142， + - **进群先看公告！！！进群先看公告！！！进群先看公告！！！ 重要的事情说三遍** - 能为你抢到一张回家的票，是我最大的心愿 - 成功log，如果是购票失败的，请带上失败的log给我，我尽力帮你调，也可加群一起交流，程序只是加速买票的过程，并不一定能买到票 @@ -57,7 +58,10 @@ 恭喜您订票成功，订单号为：EB52743573, 请立即打开浏览器登录12306，访问‘未完成订单’，在30分钟内完成支付！ ``` - 使用帮助： - - 测试邮箱是否可用 + - 测试邮箱是否可用 [邮箱配置问题看issues](https://github.com/testerSunshine/12306/issues/107) + - 学生票issues [学生票修改](https://github.com/testerSunshine/12306/issues/47) + - 依赖安装不对的问题 [requirements.txt问题](https://github.com/testerSunshine/12306/issues/91) + - 若快豆子疑问[点我](https://github.com/testerSunshine/12306/issues/67) - 测试下单接口是否可用，有两个下单接口，随便用哪个都ok - 如果下载验证码过期或者下载失败的问题，应该是12306封ip的策略，多重试几次，12306现在封服务器(阿里云和腾讯云)ip比较严重，尽量不要放在服务器里面 - 感谢一下小伙伴对本项目提供的帮助 From 8e97d1d1606a687b184faa476e7ce5578b749fcb Mon Sep 17 00:00:00 2001 From: wenxianping <931128603@qq.com> Date: Tue, 8 Jan 2019 10:22:46 +0800 Subject: [PATCH 21/21] =?UTF-8?q?=E4=BC=98=E5=8C=96=E6=8F=90=E7=A4=BA?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- README.md | 5 +++-- inter/GetRandCode.py | 1 + 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 3cb51b3..e335e49 100755 --- a/README.md +++ b/README.md @@ -60,8 +60,9 @@ - 使用帮助： - 测试邮箱是否可用 [邮箱配置问题看issues](https://github.com/testerSunshine/12306/issues/107) - 学生票issues [学生票修改](https://github.com/testerSunshine/12306/issues/47) - - 依赖安装不对的问题 [requirements.txt问题](https://github.com/testerSunshine/12306/issues/91) - - 若快豆子疑问[点我](https://github.com/testerSunshine/12306/issues/67) + - 依赖安装不对的问题（ImportError）[requirements.txt问题](https://github.com/testerSunshine/12306/issues/91) + - 若快豆子疑问 [点我](https://github.com/testerSunshine/12306/issues/67) + - 测试下单接口是否可用，有两个下单接口，随便用哪个都ok - 如果下载验证码过期或者下载失败的问题，应该是12306封ip的策略，多重试几次，12306现在封服务器(阿里云和腾讯云)ip比较严重，尽量不要放在服务器里面 - 感谢一下小伙伴对本项目提供的帮助 diff --git a/inter/GetRandCode.py b/inter/GetRandCode.py index 5c19ae2..f65edff 100644 --- a/inter/GetRandCode.py +++ b/inter/GetRandCode.py @@ -52,6 +52,7 @@ def codexy(Ofset=None, is_raw_input=True): ***************** """) print(u"验证码分为8个，对应上面数字，例如第一和第二张，输入1, 2 如果开启cdn查询的话，会冲掉提示，直接鼠标点击命令行获取焦点，输入即可，不要输入空格") + print(u"如果是linux无图形界面，请使用自动打码，is_auto_code: True") Ofset = raw_input(u"输入对应的验证码: ") Ofset = Ofset.replace("，", ",") select = Ofset.split(',')