<html><head></head><body><div>On Fri, 2016-07-01 at 01:04 +1200, Amos Jeffries wrote:</div><blockquote type="cite"><pre>On 1/07/2016 12:43 a.m., James Lay wrote:
<blockquote type="cite">
On Wed, 2016-06-29 at 19:33 -0600, James Lay wrote:
<blockquote type="cite">
Yugh...starting around 10:00 facebook no longer works via
peek/splice. pcap contents show:
1QTV01...CHLO....SNI.....VERS....scontent.xx.fbcdn.netQTV1
after the threeway handshake and an instant reset. Anyone know what
this is? Cause I haven't a clue....screenshot of success after
bypassing included. Thank you.
</blockquote>
I guess I should also say that this is from the official Facebook app
on Android...just updated on Tuesday.
</blockquote>
FWIW: I identified the last one from your posted wireshark details.
Looking at the "Unknown Ciphers:" list and looking up the hex codes
listed there in the IANA registry.
The details posted so far about this issue tells me nothing except that
FB suddenly stopped working.
Amos
_______________________________________________
squid-users mailing list
<a href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a>
<a href="http://lists.squid-cache.org/listinfo/squid-users
">http://lists.squid-cache.org/listinfo/squid-users
</a></pre></blockquote><div><br></div><div>That's fair...I'm including a successful handshake...wireshark just sees this as data. Thanks Amos!</div><div><br></div><div>James</div></body></html>