Name: Matt Sabourin Email: mdsabourin@gmail.com Answer 1: 00:25:00:FE:07:C4 Answer 2: AppleTV/2.4 Answer 3a: h Answer 3b: ha Answer 3c: hac Answer 3d: hack Answer 4: Hackers Answer 5: http://a227.v.phobos.apple.com/us/r1000/008/Video/62/bd/1b/mzm.plqacyqb..640x278.h264lc.d2.p.m4v Answer 6: Sneakers Answer 7: $9.99 Answer 8: iknowyourewatchingme Description: Submitter's Name: Matt Sabourin Submission Update: 2010-02-01 Puzzle #3, "Ann's AppleTV" =============================================================================== Contest Description from http://forensicscontest.com/ =============================================================================== Ann and Mr. X have set up their new base of operations. While waiting for the extradition paperwork to go through, you and your team of investigators covertly monitor her activity. Recently, Ann got a brand new AppleTV, and configured it with the static IP address 192.168.1.10. Here is the packet capture with her latest activity. You are the forensic investigator. Your mission is to find out what Ann searched for, build a profile of her interests, and recover evidence including: 1. What is the MAC address of Ann’s AppleTV? 2. What User-Agent string did Ann’s AppleTV use in HTTP requests? 3. What were Ann’s first four search terms on the AppleTV (all incremental searches count)? 4. What was the title of the first movie Ann clicked on? 5. What was the full URL to the movie trailer (defined by -Y΄preview-url‘)? 6. What was the title of the second movie Ann clicked on? 7. What was the price to buy it (defined by ΄price-display‘)? 8. What was the last full term Ann searched for? http://forensicscontest.com/contest03/evidence03.pcap MD5 (evidence03.pcap) = f8a01fbe84ef960d7cbd793e0c52a6c9 =============================================================================== Tools Used =============================================================================== - Python 2.5.1 - Python library dpkt (dpkt-read-only trunk r57) http://code.google.com/p/dpkt/source/checkout - Python library pypcap (pypcap-read-only trunk r87) http://code.google.com/p/pypcap/source/checkout - findatvsearches.py (a script written by the submitter for this contest) - Wireshark (to review the evidence file before building script) - md5deep (to verify the MD5 has of the evidence file) =============================================================================== Answers (Brief) =============================================================================== 1. What is the MAC address of Ann’s AppleTV? 00:25:00:FE:07:C4 2. What User-Agent string did Ann’s AppleTV use in HTTP requests? AppleTV/2.4 3. What were Ann’s first four search terms on the AppleTV (all incremental searches count)? h ha hac hack 4. What was the title of the first movie Ann clicked on? Hackers 5. What was the full URL to the movie trailer (defined by -Y΄preview-url‘)? http://a227.v.phobos.apple.com/us/r1000/008/Video/62/bd/1b/mzm.plqacyqb..640x278.h264lc.d2.p.m4v 6. What was the title of the second movie Ann clicked on? Sneakers 7. What was the price to buy it (defined by ΄price-display‘)? $9.99 8. What was the last full term Ann searched for? iknowyourewatchingme =============================================================================== Full Explanation =============================================================================== First, verify the MD5 hash of the evidence file. ############################################################################### $ cat evidence03.pcap.md5 f8a01fbe84ef960d7cbd793e0c52a6c9 evidence03.pcap $ md5deep -M evidence03.pcap.md5 evidence03.pcap f8a01fbe84ef960d7cbd793e0c52a6c9 /Users/mattsabourin/forensicscontest/puzzle3/evidence03.pcap ############################################################################### This output indicates the MD5 of the file on disk matches the MD5 sum provided by the contest creators. Run findatvsearches.py (a custom script) to search the network capture file, looking for potential Apple TV clients. ############################################################################### $ ./findatvsearches.py --help findatvsearches.py 1.1 Usage: findatvsearches.py [options] -p pcapfile Options: --version show program's version number and exit -h, --help show this help message and exit -p PCAPFILE, --pcap=PCAPFILE [Required] Filename of the of the pcap to process -r REPORTDIR, --report=REPORTDIR [Default: ./report] Directory for reporting and processed output. Created if needed. -f, --force [Default: False] Force overwriting of files and directories $ ./findatvsearches.py -p evidence03.pcap findatvsearches.py 1.1 [+] Storing reports in ./report [+] Using network capture file: evidence03.pcap [+] MD5 hash of capture file: f8a01fbe84ef960d7cbd793e0c52a6c9 [+] Starting to parse network capture... [+] Parsing Complete. [+] Using report directory: ./report [+] Writing report files... [+] Parsing information for movie... [+] Found an item view [+] Parsing information for movie... [+] Found an item view [+] Reports complete. [+] Overview report saved at: ./report/Overview-Report.txt [+] Overview report file MD5: fca6f717113e26bb617bc6eb256e9067 [+] Overview report listed below. ============================================================================== Report for network capture file: evidence03.pcap MD5 hash of network capture file: f8a01fbe84ef960d7cbd793e0c52a6c9 Report created at: 2010-02-01 18:04:00 UTC ============================================================================== This report lists possible AppleTV clients based on the presence of HTTP requests with specific parameters. Recognized requests are those that contain a known URI, user-agent, and addtional HTTP header information. Unrecognized requests are those that contain one or more of the known features, but do not meet all criteria ============================================================================== Number of possible AppleTV clients: 1 ----------------------------------------------------------------- Client IP address: 192.168.1.10 Client MAC address: 00:25:00:FE:07:C4 Number of recognized requests: 33 Number of unrecognized requests: 83 Report filename: ./report/Report-192.168.1.10.txt Report MD5: 00eb44b2941867eb4e9625e067f87bec ----------------------------------------------------------------- ============================================================================== REPORT COMPLETE ============================================================================== ############################################################################### From the overview report, we see a single potential Apple TV client, with an IP address that matches the IP address provided in the contest description. The overview report indicates this client has a MAC address of 00:25:00:FE:07:C4 [Answer #1] The findatvsearches.py script creates an overview report, a report for each potential AppleTV client, and separate files containing the HTTP traffic for each recognized AppleTV request/response. ############################################################################### $ ls dpkt evidence03.pcap.md5~ narrative.txt~ report evidence03.pcap findatvsearches.py notes.txt resources evidence03.pcap.md5 narrative.txt pcap.so todo.txt $ ls report Overview-Report.txt Report-192.168.1.10.txt Traffic-192.168.1.10 $ ls report/Traffic-192.168.1.10/ Report-0006-viewGrouping Report-1168-incrementalSearch Report-1684-incrementalSearch Report-0043-incrementalSearch Report-1181-viewMovie Report-1690-incrementalSearch Report-0180-incrementalSearch Report-1472-incrementalSearch Report-1709-incrementalSearch Report-0230-incrementalSearch Report-1631-incrementalSearch Report-1719-incrementalSearch Report-0276-incrementalSearch Report-1641-incrementalSearch Report-1725-incrementalSearch Report-0307-viewMovie Report-1647-incrementalSearch Report-1732-incrementalSearch Report-0871-incrementalSearch Report-1653-incrementalSearch Report-1739-incrementalSearch Report-1003-incrementalSearch Report-1659-incrementalSearch Report-1745-incrementalSearch Report-1119-incrementalSearch Report-1666-incrementalSearch Report-1752-incrementalSearch Report-1146-incrementalSearch Report-1672-incrementalSearch Report-1759-incrementalSearch Report-1157-incrementalSearch Report-1678-incrementalSearch Report-1766-incrementalSearch ############################################################################### The report file for each potential AppleTV client includes a list of unique values for the 'user-agent' HTTP request header. The relevant section of this file is listed below. ############################################################################### ------------------------------------------------------------------------------ Unique Values for user-agent Request Header: ------------------------------------------------------------------------------ AppleTV/2.4 ############################################################################### The output shows that every potential AppleTV request used the same string for the User-Agent header: AppleTV/2.4 [Answer #2] The report for the AppleTV client also lists the search terms sent from the client. The relevant section of this file is listed below: ############################################################################### ------------------------------------------------------------------------------ Search Terms Sent by Client: ------------------------------------------------------------------------------ h ha hac hack ############################################################################### Based on this information, the first four search requests are [Answer #3]: h ha hac hack The filenames of the traffic files for each client include the starting packet number of the HTTP request and the "type" of AppleTV request. The viewMovie request is sent when the client wants to obtain further information about a specific movie. For example, information about the first movie the subject clicked on is contained in the file named Report-0307-viewMovie. In addition to the HTTP request and response header information, this file contains the uncompressed body of the HTTP response. In this case, the body is an XML document using the Apple plist DTD. The client report file includes a section that displays specific information from an Apple plist XML document, for those AppleTV requests that represent a client request to view information about a specific movie. The relevant section of this report is listed below: ############################################################################### ------------------------------------------------------------------------------ Movie Items Viewed by Client: ------------------------------------------------------------------------------ Title: Hackers Copyright: 1995 UNITED ARTISTS PICTURES INC. ALL RIGHTS RESERVED. Rating: Unrated (mpaa) Release Date: 1998-08-25T07:00:00Z iTunes Item ID: 333441649 iTunes Item URL: http://ax.itunes.apple.com/WebObjects/MZStore.woa/wa/viewMovie?id=333441649&s=143441 Can Rent: HDVOD Trailer URL: http://a227.v.phobos.apple.com/us/r1000/008/Video/62/bd/1b/mzm.plqacyqb..640x278.h264lc.d2.p.m4v Rental Price: $3.99 Can Purchase: STDQ Trailer URL: http://a227.v.phobos.apple.com/us/r1000/008/Video/62/bd/1b/mzm.plqacyqb..640x278.h264lc.d2.p.m4v Purchase Price: $4.99 Can Rent: SDVOD Trailer URL: http://a227.v.phobos.apple.com/us/r1000/008/Video/62/bd/1b/mzm.plqacyqb..640x278.h264lc.d2.p.m4v Rental Price: $2.99 Note: The copyright value has had the leading two characters removed. ############################################################################### Based on this information in the client report, the title of the first movie the user clicked on is Hackers [Answer #4] Based on the information provided in the contest description, the URL to the trailer of this movie is "defined by 'preview-url'" This is the element that is used to provide the value for the "Trailer URL" item in this section of the client report. Based on this information, the URL to the trailer for the first movei the user clicked on is the following [Answer #5] http://a227.v.phobos.apple.com/us/r1000/008/Video/62/bd/1b/mzm.plqacyqb..640x278.h264lc.d2.p.m4v Based on the filenames of the traffic report files for the suspected AppleTV device, information about the second movie the subject clicked on is contained in the file named Report-1181-viewMovie. Again, the client report "Movie Items Viewed by Client" section contains information abou the second movie the user clicked on: ############################################################################### Title: Sneakers Copyright: 2008 Universal Studios. All Rights Reserved. Rating: PG-13 (mpaa) Release Date: 1998-03-31T08:00:00Z iTunes Item ID: 283963264 iTunes Item URL: http://ax.itunes.apple.com/WebObjects/MZStore.woa/wa/viewMovie?id=283963264&s=143441 Can Purchase: STDQ Trailer URL: http://a1738.v.phobos.apple.com/us/r1000/011/Video/7f/9d/ce/mzm.gbctwnmq..640x352.h264lc.D2.p.m4v Purchase Price: $9.99 Can Rent: SDVOD Trailer URL: http://a1738.v.phobos.apple.com/us/r1000/011/Video/7f/9d/ce/mzm.gbctwnmq..640x352.h264lc.D2.p.m4v Rental Price: $2.99 Note: The copyright value has had the leading two characters removed. ############################################################################### Based on the information in this file, the title of the second movie the subject clicked on is Sneakers [Answer #6]. The contest description states 'price-display' defines the price to purchase the second movie. This is the element used to derive the value for the "Purchase Price" item in this listing. Based on this information, the price to buy the second movie is $9.99 [Answer #7]. As stated previously, the report for the suspected AppleTV device lists each of the search terms, in the order they were sent. ############################################################################### iknowyourewatchi iknowyourewatchin iknowyourewatching iknowyourewatchingm iknowyourewatchingme ############################################################################### Based on this information, the last full term the subject searched for is iknowyourewatchingme [Answer #8] =============================================================================== References =============================================================================== "iTunes 9, now with more WebKit" http://willnorris.com/2009/09/itunes-9-now-with-more-webkit iTunes Link Maker http://www.apple.com/itunes/linkmaker/ iTunes Link Maker FAQ http://www.apple.com/itunes/linkmaker/faq/ iTunes Store Web Services Search API http://www.apple.com/itunesaffiliates/API/AffiliatesSearch2.1.pdf Apple Computer PropertyList DTD http://www.apple.com/DTDs/PropertyList-1.0.dtd Apple URL Scheme Reference: iTunes Links http://developer.apple.com/safari/library/featuredarticles/iPhoneURLScheme_Reference/Articles/iTunesLinks.html Apple Developer Connection - Development Kits http://developer.apple.com/sdk/ =============================================================================== report/Overview-Report.txt =============================================================================== ============================================================================== Report for network capture file: evidence03.pcap MD5 hash of network capture file: f8a01fbe84ef960d7cbd793e0c52a6c9 Report created at: 2010-02-01 18:04:00 UTC ============================================================================== This report lists possible AppleTV clients based on the presence of HTTP requests with specific parameters. Recognized requests are those that contain a known URI, user-agent, and addtional HTTP header information. Unrecognized requests are those that contain one or more of the known features, but do not meet all criteria ============================================================================== Number of possible AppleTV clients: 1 ----------------------------------------------------------------- Client IP address: 192.168.1.10 Client MAC address: 00:25:00:FE:07:C4 Number of recognized requests: 33 Number of unrecognized requests: 83 Report filename: ./report/Report-192.168.1.10.txt Report MD5: 00eb44b2941867eb4e9625e067f87bec ----------------------------------------------------------------- ============================================================================== REPORT COMPLETE ============================================================================== =============================================================================== report/Report-192.168.1.10.txt =============================================================================== ============================================================================== Report for potential AppleTV client IP: 192.168.1.10 Potential AppleTV client MAC: 00:25:00:FE:07:C4 Report created at: 2010-02-01 18:04:00 UTC ============================================================================== This report lists the HTTP requests of the possible AppleTV client using the IP address listed at the start of this report. Recognized requests are those that contain a known URI, user-agent, and addtional HTTP header information. Unrecognized requests are those that contain one or more of the known features, but do not meet all criteria ============================================================================== ------------------------------------------------------------------------------ Unique Values for user-agent Request Header: ------------------------------------------------------------------------------ AppleTV/2.4 ------------------------------------------------------------------------------ Search Terms Sent by Client: ------------------------------------------------------------------------------ h ha hac hack s sn sne sneb snea sneak i ik ikn ikno iknow iknowy iknowyo iknowyou iknowyour iknowyoure iknowyourew iknowyourewa iknowyourewat iknowyourewatc iknowyourewatch iknowyourewatchi iknowyourewatchin iknowyourewatching iknowyourewatchingm iknowyourewatchingme ------------------------------------------------------------------------------ Movie Items Viewed by Client: ------------------------------------------------------------------------------ Title: Hackers Copyright: 1995 UNITED ARTISTS PICTURES INC. ALL RIGHTS RESERVED. Rating: Unrated (mpaa) Release Date: 1998-08-25T07:00:00Z iTunes Item ID: 333441649 iTunes Item URL: http://ax.itunes.apple.com/WebObjects/MZStore.woa/wa/viewMovie?id=333441649&s=143441 Can Rent: HDVOD Trailer URL: http://a227.v.phobos.apple.com/us/r1000/008/Video/62/bd/1b/mzm.plqacyqb..640x278.h264lc.d2.p.m4v Rental Price: $3.99 Can Purchase: STDQ Trailer URL: http://a227.v.phobos.apple.com/us/r1000/008/Video/62/bd/1b/mzm.plqacyqb..640x278.h264lc.d2.p.m4v Purchase Price: $4.99 Can Rent: SDVOD Trailer URL: http://a227.v.phobos.apple.com/us/r1000/008/Video/62/bd/1b/mzm.plqacyqb..640x278.h264lc.d2.p.m4v Rental Price: $2.99 Title: Sneakers Copyright: 2008 Universal Studios. All Rights Reserved. Rating: PG-13 (mpaa) Release Date: 1998-03-31T08:00:00Z iTunes Item ID: 283963264 iTunes Item URL: http://ax.itunes.apple.com/WebObjects/MZStore.woa/wa/viewMovie?id=283963264&s=143441 Can Purchase: STDQ Trailer URL: http://a1738.v.phobos.apple.com/us/r1000/011/Video/7f/9d/ce/mzm.gbctwnmq..640x352.h264lc.D2.p.m4v Purchase Price: $9.99 Can Rent: SDVOD Trailer URL: http://a1738.v.phobos.apple.com/us/r1000/011/Video/7f/9d/ce/mzm.gbctwnmq..640x352.h264lc.D2.p.m4v Rental Price: $2.99 Note: The copyright value has had the leading two characters removed. ------------------------------------------------------------------------------ Overview of Recognized Requests: ------------------------------------------------------------------------------ Pkt No. Timestamp Request ------------------------------------------------------------------------------ 6 1261973281.45 GET /WebObjects/MZStore.woa/wa/viewGrouping?id=39 Traffic report file: ./report/Traffic-192.168.1.10/Report-0006-viewGrouping Traffic report MD5: ceef3008d922bce04df31f9e3ab60cb6 43 1261973296.93 GET /WebObjects/MZSearch.woa/wa/incrementalSearch?media=movie&q=h Traffic report file: ./report/Traffic-192.168.1.10/Report-0043-incrementalSearch Traffic report MD5: ff4ada9297df1398b9af5055c37a7462 180 1261973299.73 GET /WebObjects/MZSearch.woa/wa/incrementalSearch?media=movie&q=ha Traffic report file: ./report/Traffic-192.168.1.10/Report-0180-incrementalSearch Traffic report MD5: 9f18b891c843267828c0394529c8dbd2 230 1261973302.98 GET /WebObjects/MZSearch.woa/wa/incrementalSearch?media=movie&q=hac Traffic report file: ./report/Traffic-192.168.1.10/Report-0230-incrementalSearch Traffic report MD5: 6b6edc96c286ac62fdb95532e0ac780a 276 1261973306.54 GET /WebObjects/MZSearch.woa/wa/incrementalSearch?media=movie&q=hack Traffic report file: ./report/Traffic-192.168.1.10/Report-0276-incrementalSearch Traffic report MD5: a642fa325da5c6b1b10c65f6be84f4f2 307 1261973316.05 GET /WebObjects/MZStore.woa/wa/viewMovie?id=333441649&s=143441 Traffic report file: ./report/Traffic-192.168.1.10/Report-0307-viewMovie Traffic report MD5: 6ecaf61c1e01eb48aa064cdc96c8daf3 871 1261973336.05 GET /WebObjects/MZSearch.woa/wa/incrementalSearch?media=movie&q=s Traffic report file: ./report/Traffic-192.168.1.10/Report-0871-incrementalSearch Traffic report MD5: 23b882c2646bd7bcce35099ecfa6f6eb 1003 1261973338.46 GET /WebObjects/MZSearch.woa/wa/incrementalSearch?media=movie&q=sn Traffic report file: ./report/Traffic-192.168.1.10/Report-1003-incrementalSearch Traffic report MD5: 1900a25082d7352a30d321bd3d76ae3e 1119 1261973341.77 GET /WebObjects/MZSearch.woa/wa/incrementalSearch?media=movie&q=sne Traffic report file: ./report/Traffic-192.168.1.10/Report-1119-incrementalSearch Traffic report MD5: ac7aa9f363120191287f08a26cda592c 1146 1261973352.8 GET /WebObjects/MZSearch.woa/wa/incrementalSearch?media=movie&q=sneb Traffic report file: ./report/Traffic-192.168.1.10/Report-1146-incrementalSearch Traffic report MD5: c55645e74236a0639f91ae1687ff762e 1157 1261973360.89 GET /WebObjects/MZSearch.woa/wa/incrementalSearch?media=movie&q=snea Traffic report file: ./report/Traffic-192.168.1.10/Report-1157-incrementalSearch Traffic report MD5: b8912b642c38d3b45f1e8d85439e8a87 1168 1261973365.01 GET /WebObjects/MZSearch.woa/wa/incrementalSearch?media=movie&q=sneak Traffic report file: ./report/Traffic-192.168.1.10/Report-1168-incrementalSearch Traffic report MD5: ab4ee9e8c2768bb4626d07ecdeda1e1f 1181 1261973368.97 GET /WebObjects/MZStore.woa/wa/viewMovie?id=283963264&s=143441 Traffic report file: ./report/Traffic-192.168.1.10/Report-1181-viewMovie Traffic report MD5: 3fe940540203c041f95154aed9fcfbce 1472 1261973381.07 GET /WebObjects/MZSearch.woa/wa/incrementalSearch?media=movie&q=i Traffic report file: ./report/Traffic-192.168.1.10/Report-1472-incrementalSearch Traffic report MD5: dfa2695a9efa0ede39d11bba6af49796 1631 1261973387.41 GET /WebObjects/MZSearch.woa/wa/incrementalSearch?media=movie&q=ik Traffic report file: ./report/Traffic-192.168.1.10/Report-1631-incrementalSearch Traffic report MD5: 7a66b21e24e350b1ed7564ce1346f2b5 1641 1261973389.64 GET /WebObjects/MZSearch.woa/wa/incrementalSearch?media=movie&q=ikn Traffic report file: ./report/Traffic-192.168.1.10/Report-1641-incrementalSearch Traffic report MD5: 359e049c296242c94e62a55ebb3058f2 1647 1261973391.29 GET /WebObjects/MZSearch.woa/wa/incrementalSearch?media=movie&q=ikno Traffic report file: ./report/Traffic-192.168.1.10/Report-1647-incrementalSearch Traffic report MD5: a0198ed5e498e8fcc98c483252537fb7 1653 1261973394.53 GET /WebObjects/MZSearch.woa/wa/incrementalSearch?media=movie&q=iknow Traffic report file: ./report/Traffic-192.168.1.10/Report-1653-incrementalSearch Traffic report MD5: 42def8cd6f7d4483978aabd7f3e7fbd2 1659 1261973400.76 GET /WebObjects/MZSearch.woa/wa/incrementalSearch?media=movie&q=iknowy Traffic report file: ./report/Traffic-192.168.1.10/Report-1659-incrementalSearch Traffic report MD5: 49265ca3e933ba3b0ad0923b7d0168ec 1666 1261973405.29 GET /WebObjects/MZSearch.woa/wa/incrementalSearch?media=movie&q=iknowyo Traffic report file: ./report/Traffic-192.168.1.10/Report-1666-incrementalSearch Traffic report MD5: 2ddfd08dff63f75b3eb576ffd2159770 1672 1261973407.4 GET /WebObjects/MZSearch.woa/wa/incrementalSearch?media=movie&q=iknowyou Traffic report file: ./report/Traffic-192.168.1.10/Report-1672-incrementalSearch Traffic report MD5: 6bc76dd7d76f1c8efec67f828c78cc33 1678 1261973411.95 GET /WebObjects/MZSearch.woa/wa/incrementalSearch?media=movie&q=iknowyour Traffic report file: ./report/Traffic-192.168.1.10/Report-1678-incrementalSearch Traffic report MD5: 5d575f9ef44af071020937dab84bf112 1684 1261973414.19 GET /WebObjects/MZSearch.woa/wa/incrementalSearch?media=movie&q=iknowyoure Traffic report file: ./report/Traffic-192.168.1.10/Report-1684-incrementalSearch Traffic report MD5: 38d4d7a837e7d2e877235ef628395576 1690 1261973416.76 GET /WebObjects/MZSearch.woa/wa/incrementalSearch?media=movie&q=iknowyourew Traffic report file: ./report/Traffic-192.168.1.10/Report-1690-incrementalSearch Traffic report MD5: b0f8f9af80bbc1cae48dd2762bdb0856 1709 1261973421.7 GET /WebObjects/MZSearch.woa/wa/incrementalSearch?media=movie&q=iknowyourewa Traffic report file: ./report/Traffic-192.168.1.10/Report-1709-incrementalSearch Traffic report MD5: cd72f891ceb3ed9805bab339929aeef8 1719 1261973423.97 GET /WebObjects/MZSearch.woa/wa/incrementalSearch?media=movie&q=iknowyourewat Traffic report file: ./report/Traffic-192.168.1.10/Report-1719-incrementalSearch Traffic report MD5: ad1268c9283a5bec1a8a7cd977e30d98 1725 1261973426.75 GET /WebObjects/MZSearch.woa/wa/incrementalSearch?media=movie&q=iknowyourewatc Traffic report file: ./report/Traffic-192.168.1.10/Report-1725-incrementalSearch Traffic report MD5: 368331324b07b23d4534070030197830 1732 1261973428.84 GET /WebObjects/MZSearch.woa/wa/incrementalSearch?media=movie&q=iknowyourewatch Traffic report file: ./report/Traffic-192.168.1.10/Report-1732-incrementalSearch Traffic report MD5: d7132ea842b73d409702bfce50374b66 1739 1261973430.33 GET /WebObjects/MZSearch.woa/wa/incrementalSearch?media=movie&q=iknowyourewatchi Traffic report file: ./report/Traffic-192.168.1.10/Report-1739-incrementalSearch Traffic report MD5: 827e64cf9446f4c72a97da946c86c998 1745 1261973431.96 GET /WebObjects/MZSearch.woa/wa/incrementalSearch?media=movie&q=iknowyourewatchin Traffic report file: ./report/Traffic-192.168.1.10/Report-1745-incrementalSearch Traffic report MD5: e6095cf98cb0d4389c4c09c6417d0931 1752 1261973433.85 GET /WebObjects/MZSearch.woa/wa/incrementalSearch?media=movie&q=iknowyourewatching Traffic report file: ./report/Traffic-192.168.1.10/Report-1752-incrementalSearch Traffic report MD5: c92e24fd5782e7b19640f21f39786798 1759 1261973435.39 GET /WebObjects/MZSearch.woa/wa/incrementalSearch?media=movie&q=iknowyourewatchingm Traffic report file: ./report/Traffic-192.168.1.10/Report-1759-incrementalSearch Traffic report MD5: db70b6543bfd213a6ed9293d7cef8335 1766 1261973439.39 GET /WebObjects/MZSearch.woa/wa/incrementalSearch?media=movie&q=iknowyourewatchingme Traffic report file: ./report/Traffic-192.168.1.10/Report-1766-incrementalSearch Traffic report MD5: 7f00600e1513eec53e8a9f4dc9838341 ------------------------------------------------------------------------------ Overview of Unrecognized Requests: ------------------------------------------------------------------------------ Pkt No. Timestamp Request ------------------------------------------------------------------------------ 32 1261973282.87 GET /b/ss/applesuperglobal/1/G.6--NS?pageName=US-Movies-Movies-33&pccr=true&h5=appleitmsnatv%2Cappleitmsustv&ch=Movies%20main&g=http%3A%2F%2Fax.itunes.apple.com%2FWebObjects%2FMZStore.woa%2Fwa%2FviewGrouping%3Fid%3D39 63 1261973297.8 GET /b/ss/applesuperglobal/1/G.6--NS?pccr=true&ch=Movies-Search&g=http%3A%2F%2Fax.search.itunes.apple.com%2FWebObjects%2FMZSearch.woa%2Fwa%2FincrementalSearch%3Fmedia%3Dmovie%26q%3Dh&pageName=Movies-Search%20Hints-US&v2=h&h5=appleitmsnatv%2Cappleitmsustv&c2=h 69 1261973297.89 GET /us/r1000/038/Video/57/e5/af/mzi.hnmcsmdp.170x170-75.jpg 86 1261973298.07 GET /us/r1000/051/Features/a8/de/6e/dj.nofulnci.170x170-75.jpg 104 1261973298.23 GET /us/r1000/009/Video/f0/1e/ec/mzl.hhpbkslu.170x170-75.jpg 122 1261973298.38 GET /us/r1000/037/Features/71/b1/8c/dj.orlnvciu.170x170-75.jpg 142 1261973298.51 GET /us/r1000/032/Features/8e/dc/ca/dj.dzbaqgpw.170x170-75.jpg 158 1261973298.6 GET /us/r1000/015/Video/88/d3/62/mzi.xtsujktt.170x170-75.jpg 194 1261973300.37 GET /b/ss/applesuperglobal/1/G.6--NS?pccr=true&ch=Movies-Search&g=http%3A%2F%2Fax.search.itunes.apple.com%2FWebObjects%2FMZSearch.woa%2Fwa%2FincrementalSearch%3Fmedia%3Dmovie%26q%3Dha&pageName=Movies-Search%20Hints-US&v2=ha&h5=appleitmsnatv%2Cappleitmsustv&c2=ha 195 1261973300.4 GET /us/r1000/032/Music/f1/33/e0/mzi.kvyqgmsa.170x170-75.jpg 214 1261973300.49 GET /us/r1000/032/Music/5c/86/a2/mzi.dutwwfyg.170x170-75.jpg 235 1261973303.12 GET /b/ss/applesuperglobal/1/G.6--NS?pccr=true&ch=Movies-Search&g=http%3A%2F%2Fax.search.itunes.apple.com%2FWebObjects%2FMZSearch.woa%2Fwa%2FincrementalSearch%3Fmedia%3Dmovie%26q%3Dhac&pageName=Movies-Search%20Hints-US&v2=hac&h5=appleitmsnatv%2Cappleitmsustv&c2=hac 236 1261973303.13 GET /us/r1000/032/Video/f0/48/dd/mzi.pizbdeal.170x170-75.jpg 259 1261973303.29 GET /us/r1000/026/Music/68/ec/04/mzi.aydemkgw.170x170-75.jpg 281 1261973306.65 GET /b/ss/applesuperglobal/1/G.6--NS?pccr=true&ch=Movies-Search&g=http%3A%2F%2Fax.search.itunes.apple.com%2FWebObjects%2FMZSearch.woa%2Fwa%2FincrementalSearch%3Fmedia%3Dmovie%26q%3Dhack&pageName=Movies-Search%20Hints-US&v2=hack&h5=appleitmsnatv%2Cappleitmsustv&c2=hack 315 1261973316.18 GET /WebObjects/MZStore.woa/wa/relatedItemsShelf?ct-id=3&id=333441649&storeFrontId=143441&mt=6 320 1261973316.24 GET /b/ss/applesuperglobal/1/G.6--NS?pageName=Movie%20Page-US-Hackers-Iain%20Softley-333441649&pccr=true&h5=appleitmsnatv%2Cappleitmsustv&ch=Movie%20Page&g=http%3A%2F%2Fax.itunes.apple.com%2FWebObjects%2FMZStore.woa%2Fwa%2FviewMovie%3Fid%3D333441649%26s%3D143441 331 1261973316.43 GET /us/r1000/032/Video/f0/48/dd/mzi.pizbdeal.enc.jpg?downloadKey2=1265245618_f3a714a27ea9388f7c07104353e1d763 743 1261973318.54 GET /us/r1000/038/Music/2e/10/15/mzi.qdnwlnpu.170x170-75.jpg 758 1261973318.78 GET /us/r1000/026/Music/36/fd/a8/mzi.xvqemsit.170x170-75.jpg 772 1261973318.87 GET /us/r1000/005/Video/87/fa/5e/mzi.fwmnbval.170x170-75.jpg 787 1261973318.95 GET /us/r1000/021/Video/2e/7e/94/mzi.uamugbjf.170x170-75.jpg 808 1261973319.04 GET /us/r1000/048/Video/bb/8d/f4/mzi.psezsery.170x170-75.jpg 821 1261973319.13 GET /us/r1000/029/Video/55/d4/5c/mzi.sguxmcmd.170x170-75.jpg 834 1261973319.24 GET /us/r1000/028/Music/f6/97/60/mzi.hlfzpopj.170x170-75.jpg 853 1261973319.33 GET /us/r1000/054/Video/9b/29/aa/mzi.mmtjwaae.170x170-75.jpg 885 1261973336.72 GET /us/r1000/011/Video/b7/ba/da/mzl.kxwraovb.170x170-75.jpg 900 1261973336.81 GET /us/r1000/011/Video/b7/ba/da/mzl.kxwraovb.170x170-75.jpg 914 1261973336.88 GET /us/r1000/012/Video/fb/7e/d2/mzi.boiaxgvc.170x170-75.jpg 930 1261973336.97 GET /us/r1000/054/Music/ad/18/c5/mzi.cjolhefb.170x170-75.jpg 933 1261973336.98 GET /b/ss/applesuperglobal/1/G.6--NS?pccr=true&ch=Movies-Search&g=http%3A%2F%2Fax.search.itunes.apple.com%2FWebObjects%2FMZSearch.woa%2Fwa%2FincrementalSearch%3Fmedia%3Dmovie%26q%3Ds&pageName=Movies-Search%20Hints-US&v2=s&h5=appleitmsnatv%2Cappleitmsustv&c2=s 949 1261973337.05 GET /us/r1000/008/Music/d8/9c/8a/mzi.vmajyyha.170x170-75.jpg 970 1261973337.19 GET /us/r1000/044/Music/38/09/d4/dj.wdkoguku.170x170-75.jpg 987 1261973337.28 GET /us/r1000/030/Video/1f/b0/11/mzl.euqistqj.170x170-75.jpg 1009 1261973338.65 GET /b/ss/applesuperglobal/1/G.6--NS?pccr=true&ch=Movies-Search&g=http%3A%2F%2Fax.search.itunes.apple.com%2FWebObjects%2FMZSearch.woa%2Fwa%2FincrementalSearch%3Fmedia%3Dmovie%26q%3Dsn&pageName=Movies-Search%20Hints-US&v2=sn&h5=appleitmsnatv%2Cappleitmsustv&c2=sn 1010 1261973338.66 GET /us/r1000/026/Music/9d/e8/6d/mzi.jfgvuipy.170x170-75.jpg 1033 1261973338.77 GET /us/r1000/041/Music/d4/d9/11/dj.stznhpab.170x170-75.jpg 1055 1261973338.92 GET /us/r1000/013/Music/ab/89/91/mzi.mndbzjie.170x170-75.jpg 1067 1261973339.01 GET /us/r1000/040/Music/58/c1/da/mzi.ztrjvfac.170x170-75.jpg 1086 1261973339.12 GET /us/r1000/035/Music/68/de/81/mzi.ncrmmuho.170x170-75.jpg 1103 1261973339.22 GET /us/r1000/037/Music/48/2a/c6/mzi.uwuvovtt.170x170-75.jpg 1124 1261973341.97 GET /b/ss/applesuperglobal/1/G.6--NS?pccr=true&ch=Movies-Search&g=http%3A%2F%2Fax.search.itunes.apple.com%2FWebObjects%2FMZSearch.woa%2Fwa%2FincrementalSearch%3Fmedia%3Dmovie%26q%3Dsne&pageName=Movies-Search%20Hints-US&v2=sne&h5=appleitmsnatv%2Cappleitmsustv&c2=sne 1153 1261973352.95 GET /b/ss/applesuperglobal/1/G.6--NS?pccr=true&ch=Movies-Search&g=http%3A%2F%2Fax.search.itunes.apple.com%2FWebObjects%2FMZSearch.woa%2Fwa%2FincrementalSearch%3Fmedia%3Dmovie%26q%3Dsneb&pageName=Movies-Search%20Hints-US&v2=sneb&h5=appleitmsnatv%2Cappleitmsustv&c2=sneb 1165 1261973361.09 GET /b/ss/applesuperglobal/1/G.6--NS?pccr=true&ch=Movies-Search&g=http%3A%2F%2Fax.search.itunes.apple.com%2FWebObjects%2FMZSearch.woa%2Fwa%2FincrementalSearch%3Fmedia%3Dmovie%26q%3Dsnea&pageName=Movies-Search%20Hints-US&v2=snea&h5=appleitmsnatv%2Cappleitmsustv&c2=snea 1173 1261973365.13 GET /b/ss/applesuperglobal/1/G.6--NS?pccr=true&ch=Movies-Search&g=http%3A%2F%2Fax.search.itunes.apple.com%2FWebObjects%2FMZSearch.woa%2Fwa%2FincrementalSearch%3Fmedia%3Dmovie%26q%3Dsneak&pageName=Movies-Search%20Hints-US&v2=sneak&h5=appleitmsnatv%2Cappleitmsustv&c2=sneak 1189 1261973369.09 GET /b/ss/applesuperglobal/1/G.6--NS?pageName=Movie%20Page-US-Sneakers-Phil%20Alden%20Robinson-283963264&pccr=true&h5=appleitmsnatv%2Cappleitmsustv&ch=Movie%20Page&g=http%3A%2F%2Fax.itunes.apple.com%2FWebObjects%2FMZStore.woa%2Fwa%2FviewMovie%3Fid%3D283963264%26s%3D143441 1190 1261973369.1 GET /WebObjects/MZStore.woa/wa/relatedItemsShelf?ct-id=3&id=283963264&storeFrontId=143441&mt=6 1201 1261973369.37 GET /us/r1000/013/Music/ab/89/91/mzi.mndbzjie.enc.jpg?downloadKey2=1265341450_c424218767dba839ab1937b1fce2bd04 1352 1261973370.19 GET /us/r1000/059/Video/68/67/29/mzi.ruejwber.170x170-75.jpg 1366 1261973370.27 GET /us/r1000/014/Music/81/b1/5d/mzi.hivlicje.170x170-75.jpg 1384 1261973370.36 GET /us/r1000/011/Music/bb/5e/fb/dj.ontidfxk.170x170-75.jpg 1396 1261973370.45 GET /us/r1000/034/Music/02/86/73/mzi.piscvson.170x170-75.jpg 1410 1261973370.53 GET /us/r30/Music/80/6f/14/mzi.hbqfvwwx.170x170-75.jpg 1424 1261973370.63 GET /us/r1000/042/Video/93/fa/35/mzi.izxeiuxj.170x170-75.jpg 1436 1261973370.71 GET /us/r1000/059/Video/43/41/20/mzi.coawydzo.170x170-75.jpg 1454 1261973370.8 GET /us/r1000/059/Features/06/1e/58/dj.gcuctkqs.170x170-75.jpg 1488 1261973381.8 GET /us/r1000/014/Video/9a/7b/a5/mzl.xjaduzqu.170x170-75.jpg 1504 1261973381.89 GET /us/r1000/014/Video/9a/7b/a5/mzl.xjaduzqu.170x170-75.jpg 1507 1261973381.91 GET /b/ss/applesuperglobal/1/G.6--NS?pccr=true&ch=Movies-Search&g=http%3A%2F%2Fax.search.itunes.apple.com%2FWebObjects%2FMZSearch.woa%2Fwa%2FincrementalSearch%3Fmedia%3Dmovie%26q%3Di&pageName=Movies-Search%20Hints-US&v2=i&h5=appleitmsnatv%2Cappleitmsustv&c2=i 1521 1261973381.96 GET /us/r1000/006/Music/ea/a2/fa/mzi.zhncmjvv.170x170-75.jpg 1539 1261973382.04 GET /us/r30/Video/91/e8/c9/mzi.yiaigqdc.170x170-75.jpg 1557 1261973382.12 GET /us/r30/Video/89/10/8c/mzl.qvjqoatm.170x170-75.jpg 1578 1261973382.25 GET /us/r1000/023/Music/3d/9d/55/dj.jdlaiovn.170x170-75.jpg 1594 1261973382.38 GET /us/r1000/048/Music/12/8a/30/dj.hfbbuzty.170x170-75.jpg 1638 1261973387.58 GET /b/ss/applesuperglobal/1/G.6--NS?pccr=true&ch=Movies-Search&g=http%3A%2F%2Fax.search.itunes.apple.com%2FWebObjects%2FMZSearch.woa%2Fwa%2FincrementalSearch%3Fmedia%3Dmovie%26q%3Dik&pageName=Movies-Search%20Hints-US&v2=ik&h5=appleitmsnatv%2Cappleitmsustv&c2=ik 1644 1261973389.73 GET /b/ss/applesuperglobal/1/G.6--NS?pccr=true&ch=Movies-Search&g=http%3A%2F%2Fax.search.itunes.apple.com%2FWebObjects%2FMZSearch.woa%2Fwa%2FincrementalSearch%3Fmedia%3Dmovie%26q%3Dikn&pageName=Movies-Search%20Hints-US&v2=ikn&h5=appleitmsnatv%2Cappleitmsustv&c2=ikn 1650 1261973391.36 GET /b/ss/applesuperglobal/1/G.6--NS?pccr=true&ch=Movies-Search&g=http%3A%2F%2Fax.search.itunes.apple.com%2FWebObjects%2FMZSearch.woa%2Fwa%2FincrementalSearch%3Fmedia%3Dmovie%26q%3Dikno&pageName=Movies-Search%20Hints-US&v2=ikno&h5=appleitmsnatv%2Cappleitmsustv&c2=ikno 1656 1261973394.62 GET /b/ss/applesuperglobal/1/G.6--NS?pccr=true&ch=Movies-Search&g=http%3A%2F%2Fax.search.itunes.apple.com%2FWebObjects%2FMZSearch.woa%2Fwa%2FincrementalSearch%3Fmedia%3Dmovie%26q%3Diknow&pageName=Movies-Search%20Hints-US&v2=iknow&h5=appleitmsnatv%2Cappleitmsustv&c2=iknow 1663 1261973400.82 GET /b/ss/applesuperglobal/1/G.6--NS?pccr=true&ch=Movies-Search&g=http%3A%2F%2Fax.search.itunes.apple.com%2FWebObjects%2FMZSearch.woa%2Fwa%2FincrementalSearch%3Fmedia%3Dmovie%26q%3Diknowy&pageName=Movies-Search%20Hints-US&v2=iknowy&h5=appleitmsnatv%2Cappleitmsustv&c2=iknowy 1669 1261973405.36 GET /b/ss/applesuperglobal/1/G.6--NS?pccr=true&ch=Movies-Search&g=http%3A%2F%2Fax.search.itunes.apple.com%2FWebObjects%2FMZSearch.woa%2Fwa%2FincrementalSearch%3Fmedia%3Dmovie%26q%3Diknowyo&pageName=Movies-Search%20Hints-US&v2=iknowyo&h5=appleitmsnatv%2Cappleitmsustv&c2=iknowyo 1675 1261973407.47 GET /b/ss/applesuperglobal/1/G.6--NS?pccr=true&ch=Movies-Search&g=http%3A%2F%2Fax.search.itunes.apple.com%2FWebObjects%2FMZSearch.woa%2Fwa%2FincrementalSearch%3Fmedia%3Dmovie%26q%3Diknowyou&pageName=Movies-Search%20Hints-US&v2=iknowyou&h5=appleitmsnatv%2Cappleitmsustv&c2=iknowyou 1681 1261973412.04 GET /b/ss/applesuperglobal/1/G.6--NS?pccr=true&ch=Movies-Search&g=http%3A%2F%2Fax.search.itunes.apple.com%2FWebObjects%2FMZSearch.woa%2Fwa%2FincrementalSearch%3Fmedia%3Dmovie%26q%3Diknowyour&pageName=Movies-Search%20Hints-US&v2=iknowyour&h5=appleitmsnatv%2Cappleitmsustv&c2=iknowyour 1687 1261973414.26 GET /b/ss/applesuperglobal/1/G.6--NS?pccr=true&ch=Movies-Search&g=http%3A%2F%2Fax.search.itunes.apple.com%2FWebObjects%2FMZSearch.woa%2Fwa%2FincrementalSearch%3Fmedia%3Dmovie%26q%3Diknowyoure&pageName=Movies-Search%20Hints-US&v2=iknowyoure&h5=appleitmsnatv%2Cappleitmsustv&c2=iknowyoure 1693 1261973416.83 GET /b/ss/applesuperglobal/1/G.6--NS?pccr=true&ch=Movies-Search&g=http%3A%2F%2Fax.search.itunes.apple.com%2FWebObjects%2FMZSearch.woa%2Fwa%2FincrementalSearch%3Fmedia%3Dmovie%26q%3Diknowyourew&pageName=Movies-Search%20Hints-US&v2=iknowyourew&h5=appleitmsnatv%2Cappleitmsustv&c2=iknowyourew 1716 1261973421.86 GET /b/ss/applesuperglobal/1/G.6--NS?pccr=true&ch=Movies-Search&g=http%3A%2F%2Fax.search.itunes.apple.com%2FWebObjects%2FMZSearch.woa%2Fwa%2FincrementalSearch%3Fmedia%3Dmovie%26q%3Diknowyourewa&pageName=Movies-Search%20Hints-US&v2=iknowyourewa&h5=appleitmsnatv%2Cappleitmsustv&c2=iknowyourewa 1722 1261973424.04 GET /b/ss/applesuperglobal/1/G.6--NS?pccr=true&ch=Movies-Search&g=http%3A%2F%2Fax.search.itunes.apple.com%2FWebObjects%2FMZSearch.woa%2Fwa%2FincrementalSearch%3Fmedia%3Dmovie%26q%3Diknowyourewat&pageName=Movies-Search%20Hints-US&v2=iknowyourewat&h5=appleitmsnatv%2Cappleitmsustv&c2=iknowyourewat 1729 1261973427.12 GET /b/ss/applesuperglobal/1/G.6--NS?pccr=true&ch=Movies-Search&g=http%3A%2F%2Fax.search.itunes.apple.com%2FWebObjects%2FMZSearch.woa%2Fwa%2FincrementalSearch%3Fmedia%3Dmovie%26q%3Diknowyourewatc&pageName=Movies-Search%20Hints-US&v2=iknowyourewatc&h5=appleitmsnatv%2Cappleitmsustv&c2=iknowyourewatc 1736 1261973428.9 GET /b/ss/applesuperglobal/1/G.6--NS?pccr=true&ch=Movies-Search&g=http%3A%2F%2Fax.search.itunes.apple.com%2FWebObjects%2FMZSearch.woa%2Fwa%2FincrementalSearch%3Fmedia%3Dmovie%26q%3Diknowyourewatch&pageName=Movies-Search%20Hints-US&v2=iknowyourewatch&h5=appleitmsnatv%2Cappleitmsustv&c2=iknowyourewatch 1742 1261973430.41 GET /b/ss/applesuperglobal/1/G.6--NS?pccr=true&ch=Movies-Search&g=http%3A%2F%2Fax.search.itunes.apple.com%2FWebObjects%2FMZSearch.woa%2Fwa%2FincrementalSearch%3Fmedia%3Dmovie%26q%3Diknowyourewatchi&pageName=Movies-Search%20Hints-US&v2=iknowyourewatchi&h5=appleitmsnatv%2Cappleitmsustv&c2=iknowyourewatchi 1749 1261973432.16 GET /b/ss/applesuperglobal/1/G.6--NS?pccr=true&ch=Movies-Search&g=http%3A%2F%2Fax.search.itunes.apple.com%2FWebObjects%2FMZSearch.woa%2Fwa%2FincrementalSearch%3Fmedia%3Dmovie%26q%3Diknowyourewatchin&pageName=Movies-Search%20Hints-US&v2=iknowyourewatchin&h5=appleitmsnatv%2Cappleitmsustv&c2=iknowyourewatchin 1756 1261973434.1 GET /b/ss/applesuperglobal/1/G.6--NS?pccr=true&ch=Movies-Search&g=http%3A%2F%2Fax.search.itunes.apple.com%2FWebObjects%2FMZSearch.woa%2Fwa%2FincrementalSearch%3Fmedia%3Dmovie%26q%3Diknowyourewatching&pageName=Movies-Search%20Hints-US&v2=iknowyourewatching&h5=appleitmsnatv%2Cappleitmsustv&c2=iknowyourewatching 1763 1261973435.46 GET /b/ss/applesuperglobal/1/G.6--NS?pccr=true&ch=Movies-Search&g=http%3A%2F%2Fax.search.itunes.apple.com%2FWebObjects%2FMZSearch.woa%2Fwa%2FincrementalSearch%3Fmedia%3Dmovie%26q%3Diknowyourewatchingm&pageName=Movies-Search%20Hints-US&v2=iknowyourewatchingm&h5=appleitmsnatv%2Cappleitmsustv&c2=iknowyourewatchingm 1771 1261973439.51 GET /b/ss/applesuperglobal/1/G.6--NS?pccr=true&ch=Movies-Search&g=http%3A%2F%2Fax.search.itunes.apple.com%2FWebObjects%2FMZSearch.woa%2Fwa%2FincrementalSearch%3Fmedia%3Dmovie%26q%3Diknowyourewatchingme&pageName=Movies-Search%20Hints-US&v2=iknowyourewatchingme&h5=appleitmsnatv%2Cappleitmsustv&c2=iknowyourewatchingme ------------------------------------------------------------------------------ Criteria Used to Identify AppleTV Requests: ------------------------------------------------------------------------------ Recognized URI patterns (URI must start with one of the following strings): /WebObjects/MZSearch.woa/wa/incrementalSearch /WebObjects/MZStore.woa/wa/viewMovie /WebObjects/MZStore.woa/wa/search /WebObjects/MZStore.woa/wa/viewGrouping Recognized values for HTTP request "Host:" header: ax.search.itunes.apple.com ax.itunes.apple.com Recognized patterns for HTTP request "User-Agent:" header (Python regular expression syntax): ^AppleTV\/\d\.\d$ ============================================================================== REPORT COMPLETE ============================================================================== =============================================================================== report/Traffic-192.168.1.10/Report-0307-viewMovie =============================================================================== ============================================================================== Report for request from 192.168.1.10:49168 to 8.18.65.67:80 Report created at: 2010-02-01 18:04:00 UTC AppleTV request type: viewMovie Request starting packet: 307 Request timestamp: 1261973316.05 Response starting packet: 309 Response timestamp: 1261973316.13 ============================================================================== GET /WebObjects/MZStore.woa/wa/viewMovie?id=333441649&s=143441 HTTP/1.1 Accept: */* Accept-Language: en Accept-Encoding: gzip, deflate Cookie: s_vi=[CS]v1|259C176A85010C29-6000010D80115D7F[CE] User-Agent: AppleTV/2.4 X-Apple-Store-Front: 143441-1,3 Connection: keep-alive Host: ax.itunes.apple.com HTTP/1.1 200 OK Last-Modified: Sat, 26 Dec 2009 08:58:38 GMT x-apple-lok-response-date: Sat Dec 26 04:37:43 PST 2009 Content-Encoding: gzip x-apple-lok-current-storefront: 143441-1,3 x-apple-application-site: NWK Content-Type: text/xml x-apple-lok-expire-date: Sat Dec 26 01:38:38 PST 2009 x-apple-lok-mode: disaster-recovery x-apple-lok-stor: memcached x-apple-max-age: 3600 x-apple-woa-inbound-url: /WebObjects/MZStore.woa/wa/viewMovie?id=333441649&s=143441 x-apple-application-instance: 16026 x-apple-lok-path: v0_1:MZStore/viewMovie&id=333441649&s=143441-143441-1,3,pc-3-Ak x-apple-aka-ttl: Generated Sat Dec 26 04:37:43 PST 2009, Expires Sat Dec 26 05:37:43 PST 2009, TTL 3600s x-apple-lok-ttl: Generated Sat Dec 26 00:58:38 PST 2009, Expires Sat Dec 26 01:38:38 PST 2009, TTL 2400s x-webobjects-loadaverage: 0 Content-Length: 2278 Expires: Mon, 28 Dec 2009 04:08:36 GMT Cache-Control: max-age=0, no-cache Pragma: no-cache Date: Mon, 28 Dec 2009 04:08:36 GMT Connection: keep-alive Vary: Accept-Encoding Vary: X-Apple-Store-Front X-Apple-Partner: origin.0 page-type template-nameitem template-parameters titleHackers store-version1.0 pings http://metrics.apple.com/b/ss/applesuperglobal/1/G.6--NS?pageName=Movie%20Page-US-Hackers-Iain%20Softley-333441649&pccr=true&h5=appleitmsnatv%2Cappleitmsustv&ch=Movie%20Page&g=http%3A%2F%2Fax.itunes.apple.com%2FWebObjects%2FMZStore.woa%2Fwa%2FviewMovie%3Fid%3D333441649%26s%3D143441 items typemovie titleHackers unmodified-titleHackers item-id333441649 urlhttp://ax.itunes.apple.com/WebObjects/MZStore.woa/wa/viewMovie?id=333441649&s=143441 release-date1998-08-25T07:00:00Z genre-nameDrama copyright© 1995 UNITED ARTISTS PICTURES INC. ALL RIGHTS RESERVED. artwork-urls box-height1000 urlhttp://a1.phobos.apple.com/us/r1000/032/Video/f0/48/dd/mzi.pizbdeal.enc.jpg?downloadKey2=1265245618_f3a714a27ea9388f7c07104353e1d763 box-width1000 user-rating-count22 average-user-rating0.95 title222 Ratings user-rating-count-string22 Ratings rating systemmpaa rank600 labelUnrated description store-offers STDQ action-paramsproductType=V&salableAdamId=333441649&pricingParameters=STDQ&price=4990 action-display-nameBuy buy-paramsproductType=V&salableAdamId=333441649&pricingParameters=STDQ&price=4990 duration6320737 close-captioned dolby-digital djl-enabled has-additional-content preview-urlhttp://a227.v.phobos.apple.com/us/r1000/008/Video/62/bd/1b/mzm.plqacyqb..640x278.h264lc.d2.p.m4v preview-duration151609.0 price4.99000 price-display$4.99 screen-formatwidescreen size1265658010 SDVOD action-display-nameRent duration6320737 close-captioned dolby-digital has-additional-content preview-urlhttp://a227.v.phobos.apple.com/us/r1000/008/Video/62/bd/1b/mzm.plqacyqb..640x278.h264lc.d2.p.m4v preview-duration151609.0 price2.99000 rent-paramsproductType=V&salableAdamId=333441649&pricingParameters=SDVOD&price=2990&rental=1 rent-price-display$2.99 rental-duration43200 rental-playback-duration1440 screen-formatwidescreen size1353118549 HDVOD action-display-nameRent duration6320737 close-captioned dolby-digital has-additional-content preview-urlhttp://a227.v.phobos.apple.com/us/r1000/008/Video/62/bd/1b/mzm.plqacyqb..640x278.h264lc.d2.p.m4v preview-duration151609.0 price3.99000 rent-paramsproductType=V&salableAdamId=333441649&pricingParameters=HDVOD&price=3990&rental=1 rent-price-display$3.99 rental-duration43200 rental-playback-duration1440 screen-formatwidescreen size3266589199 flavors 4:640x480LC-128 action-paramsproductType=V&salableAdamId=333441649&pricingParameters=STDQ&price=4990 action-display-nameBuy buy-paramsproductType=V&salableAdamId=333441649&pricingParameters=STDQ&price=4990 duration6320737 close-captioned dolby-digital djl-enabled has-additional-content preview-urlhttp://a227.v.phobos.apple.com/us/r1000/008/Video/62/bd/1b/mzm.plqacyqb..640x278.h264lc.d2.p.m4v preview-duration151609.0 price4.99000 price-display$4.99 screen-formatwidescreen size1265658010 8:480p action-display-nameRent duration6320737 close-captioned dolby-digital has-additional-content preview-urlhttp://a227.v.phobos.apple.com/us/r1000/008/Video/62/bd/1b/mzm.plqacyqb..640x278.h264lc.d2.p.m4v preview-duration151609.0 price2.99000 rent-paramsproductType=V&salableAdamId=333441649&pricingParameters=SDVOD&price=2990&rental=1 rent-price-display$2.99 rental-duration43200 rental-playback-duration1440 screen-formatwidescreen size1353118549 7:720p action-display-nameRent duration6320737 close-captioned dolby-digital has-additional-content preview-urlhttp://a227.v.phobos.apple.com/us/r1000/008/Video/62/bd/1b/mzm.plqacyqb..640x278.h264lc.d2.p.m4v preview-duration151609.0 price3.99000 rent-paramsproductType=V&salableAdamId=333441649&pricingParameters=HDVOD&price=3990&rental=1 rent-price-display$3.99 rental-duration43200 rental-playback-duration1440 screen-formatwidescreen size3266589199 url-page-typemovie thumbnail-artwork box-height170 urlhttp://a1.phobos.apple.com/us/r1000/032/Video/f0/48/dd/mzi.pizbdeal.170x170-75.jpg box-width170 related-contenthttp://ax.itunes.apple.com/WebObjects/MZStore.woa/wa/relatedItemsShelf?ct-id=3&id=333441649&storeFrontId=143441&mt=6 descriptionCereal Killer, Phantom Phreak, Crash Override...if these handles appear on your computer screen, you're beyond saving--consider yourself hacked. In this cyberpunk thriller, a renegade group of elite teenage computer hackers rollerblade through New York City by day and ride the information highway by night. After hacking into a high-stakes industrial conspiracy, they become prime suspects and must recruit the best of the cybernet underground to help clear their names. studio-nameMGM credits producers Michael Peyser Ralph Winter directors Iain Softley cast Jonny Lee Miller Angelina Jolie Jesse Bradford Matthew Lillard Laurence Mason audio-formats English more-info typemore-info-section section-titleActors items typemore-info-section-item item-titleJonny Lee Miller item-urlhttp://ax.itunes.apple.com/us/artist/jonny-lee-miller/id288861359 typemore-info-section-item item-titleAngelina Jolie item-urlhttp://ax.itunes.apple.com/us/artist/angelina-jolie/id188702730 typemore-info-section-item item-titleJesse Bradford item-urlhttp://ax.itunes.apple.com/us/artist/jesse-bradford/id208785324 typemore-info-section-item item-titleMatthew Lillard item-urlhttp://ax.itunes.apple.com/us/artist/matthew-lillard/id208631212 typemore-info-section-item item-titleLaurence Mason item-urlhttp://ax.itunes.apple.com/us/artist/laurence-mason/id333441651 typemore-info-section section-titleDirector items typemore-info-section-item item-titleIain Softley item-urlhttp://ax.itunes.apple.com/us/artist/iain-softley/id283740313 typemore-info-section section-titleProducers items typemore-info-section-item item-titleMichael Peyser item-urlhttp://ax.itunes.apple.com/us/artist/michael-peyser/id333441658 typemore-info-section-item item-titleRalph Winter item-urlhttp://ax.itunes.apple.com/us/artist/ralph-winter/id273697675 ============================================================================== REPORT COMPLETE ============================================================================== ============================================================================== report/Traffic-192.168.1.10/Report-1181-viewMovie ============================================================================== ============================================================================== Report for request from 192.168.1.10:49176 to 8.18.65.67:80 Report created at: 2010-02-01 18:04:00 UTC AppleTV request type: viewMovie Request starting packet: 1181 Request timestamp: 1261973368.97 Response starting packet: 1183 Response timestamp: 1261973369.04 ============================================================================== GET /WebObjects/MZStore.woa/wa/viewMovie?id=283963264&s=143441 HTTP/1.1 Accept: */* Accept-Language: en Accept-Encoding: gzip, deflate Cookie: s_vi=[CS]v1|259C176A85010C29-6000010D80115D7F[CE] User-Agent: AppleTV/2.4 X-Apple-Store-Front: 143441-1,3 Connection: keep-alive Host: ax.itunes.apple.com HTTP/1.1 200 OK Last-Modified: Sat, 26 Dec 2009 04:51:14 GMT x-apple-lok-response-date: Sat Dec 26 02:33:51 PST 2009 Content-Encoding: gzip x-apple-lok-current-storefront: 143441-1,3 x-apple-application-site: CUP Content-Type: text/xml x-apple-lok-expire-date: Fri Dec 25 21:31:14 PST 2009 x-apple-lok-mode: disaster-recovery x-apple-lok-stor: memcached x-apple-max-age: 3600 x-apple-woa-inbound-url: /WebObjects/MZStore.woa/wa/viewMovie?id=283963264&s=143441 x-apple-application-instance: 3127 x-apple-lok-path: v0_1:MZStore/viewMovie&id=283963264&s=143441-143441-1,3,pc-3-Ak x-apple-aka-ttl: Generated Sat Dec 26 02:33:51 PST 2009, Expires Sat Dec 26 03:33:51 PST 2009, TTL 3600s x-apple-lok-ttl: Generated Fri Dec 25 20:51:14 PST 2009, Expires Fri Dec 25 21:31:14 PST 2009, TTL 2400s x-webobjects-loadaverage: 0 Content-Length: 2586 Vary: Accept-Encoding Vary: X-Apple-Store-Front Expires: Mon, 28 Dec 2009 04:09:29 GMT Cache-Control: max-age=0, no-cache Pragma: no-cache Date: Mon, 28 Dec 2009 04:09:29 GMT Connection: keep-alive Vary: X-Apple-Store-Front X-Apple-Partner: origin.0 page-type template-nameitem template-parameters titleSneakers store-version1.0 pings http://metrics.apple.com/b/ss/applesuperglobal/1/G.6--NS?pageName=Movie%20Page-US-Sneakers-Phil%20Alden%20Robinson-283963264&pccr=true&h5=appleitmsnatv%2Cappleitmsustv&ch=Movie%20Page&g=http%3A%2F%2Fax.itunes.apple.com%2FWebObjects%2FMZStore.woa%2Fwa%2FviewMovie%3Fid%3D283963264%26s%3D143441 items typemovie titleSneakers unmodified-titleSneakers item-id283963264 urlhttp://ax.itunes.apple.com/WebObjects/MZStore.woa/wa/viewMovie?id=283963264&s=143441 release-date1998-03-31T08:00:00Z genre-nameAction & Adventure copyright© 2008 Universal Studios. All Rights Reserved. artwork-urls box-height1000 urlhttp://a1.phobos.apple.com/us/r1000/013/Music/ab/89/91/mzi.mndbzjie.enc.jpg?downloadKey2=1265341450_c424218767dba839ab1937b1fce2bd04 box-width1000 user-rating-count43 average-user-rating0.88 title243 Ratings user-rating-count-string43 Ratings rating systemmpaa rank300 labelPG-13 descriptionfor brief sexual references. store-offers STDQ action-paramsproductType=V&salableAdamId=283963264&pricingParameters=STDQ&price=9990 action-display-nameBuy buy-paramsproductType=V&salableAdamId=283963264&pricingParameters=STDQ&price=9990 duration7518393 close-captioned dolby-digital djl-enabled has-additional-content preview-urlhttp://a1738.v.phobos.apple.com/us/r1000/011/Video/7f/9d/ce/mzm.gbctwnmq..640x352.h264lc.D2.p.m4v preview-duration164080.0 price9.99000 price-display$9.99 screen-formatwidescreen size1236583962 SDVOD action-display-nameRent duration7518393 close-captioned dolby-digital has-additional-content preview-urlhttp://a1738.v.phobos.apple.com/us/r1000/011/Video/7f/9d/ce/mzm.gbctwnmq..640x352.h264lc.D2.p.m4v preview-duration164080.0 price2.99000 rent-paramsproductType=V&salableAdamId=283963264&pricingParameters=SDVOD&price=2990&rental=1 rent-price-display$2.99 rental-duration43200 rental-playback-duration1440 screen-formatwidescreen size1528822900 flavors 4:640x480LC-128 action-paramsproductType=V&salableAdamId=283963264&pricingParameters=STDQ&price=9990 action-display-nameBuy buy-paramsproductType=V&salableAdamId=283963264&pricingParameters=STDQ&price=9990 duration7518393 close-captioned dolby-digital djl-enabled has-additional-content preview-urlhttp://a1738.v.phobos.apple.com/us/r1000/011/Video/7f/9d/ce/mzm.gbctwnmq..640x352.h264lc.D2.p.m4v preview-duration164080.0 price9.99000 price-display$9.99 screen-formatwidescreen size1236583962 8:480p action-display-nameRent duration7518393 close-captioned dolby-digital has-additional-content preview-urlhttp://a1738.v.phobos.apple.com/us/r1000/011/Video/7f/9d/ce/mzm.gbctwnmq..640x352.h264lc.D2.p.m4v preview-duration164080.0 price2.99000 rent-paramsproductType=V&salableAdamId=283963264&pricingParameters=SDVOD&price=2990&rental=1 rent-price-display$2.99 rental-duration43200 rental-playback-duration1440 screen-formatwidescreen size1528822900 url-page-typemovie thumbnail-artwork box-height170 urlhttp://a1.phobos.apple.com/us/r1000/013/Music/ab/89/91/mzi.mndbzjie.170x170-75.jpg box-width170 related-contenthttp://ax.itunes.apple.com/WebObjects/MZStore.woa/wa/relatedItemsShelf?ct-id=3&id=283963264&storeFrontId=143441&mt=6 descriptionRobert Redford leads an all-star cast in one of the most satisfying suspense films! Computer expert Martin Bishop (Redford) heads a team of renegade hackers - including a former CIA employee (Sidney Poitier), a gadgets wizard (Dan Aykroyd), a young genius (River Phoenix) and a blind soundman (David Strathairn) - who are routinely hired to test security systems. But Bishop's past comes back to haunt him when government agents blackmail the "sneakers" into carrying out a covert operation: tracking down an elusive black box. Along with his former girlfriend (Mary McDonnell), Bishop's team retrieves the box and makes a stunning discovery - the device can break into any computer system in the world. With factions from all sides willing to kill for the powerful box, Bishop and his team embark on their most dangerous assignment ever in this exhilarating high-tech caper from Phil Alden Robinson (Field of Dreams). studio-nameUniversal Pictures credits producers Lawrence Lasker Lindsley Parsons Jr. Walter F. Parkes directors Phil Alden Robinson cast Robert Redford Dan Aykroyd Ben Kingsley Mary McDonnell River Phoenix Sidney Poitier screenwriters Phil Alden Robinson Walter F. Parkes Lawrence Lasker audio-formats English more-info typemore-info-section section-titleActors items typemore-info-section-item item-titleRobert Redford item-urlhttp://ax.itunes.apple.com/us/artist/robert-redford/id187699116 typemore-info-section-item item-titleDan Aykroyd item-urlhttp://ax.itunes.apple.com/us/artist/dan-aykroyd/id4973865 typemore-info-section-item item-titleBen Kingsley item-urlhttp://ax.itunes.apple.com/us/artist/ben-kingsley/id2798803 typemore-info-section-item item-titleMary McDonnell item-urlhttp://ax.itunes.apple.com/us/artist/mary-mcdonnell/id283963267 typemore-info-section-item item-titleRiver Phoenix item-urlhttp://ax.itunes.apple.com/us/artist/river-phoenix/id283963270 typemore-info-section-item item-titleSidney Poitier item-urlhttp://ax.itunes.apple.com/us/artist/sidney-poitier/id213854865 typemore-info-section section-titleDirector items typemore-info-section-item item-titlePhil Alden Robinson item-urlhttp://ax.itunes.apple.com/us/artist/phil-alden-robinson/id283963275 typemore-info-section section-titleProducers items typemore-info-section-item item-titleLawrence Lasker item-urlhttp://ax.itunes.apple.com/us/artist/lawrence-lasker/id270230752 typemore-info-section-item item-titleLindsley Parsons Jr. item-urlhttp://ax.itunes.apple.com/us/artist/lindsley-parsons-jr/id284531308 typemore-info-section-item item-titleWalter F. Parkes item-urlhttp://ax.itunes.apple.com/us/artist/walter-f-parkes/id294583002 typemore-info-section section-titleScreenwriters items typemore-info-section-item item-titlePhil Alden Robinson typemore-info-section-item item-titleWalter F. Parkes item-urlhttp://ax.itunes.apple.com/us/artist/walter-f-parkes/id294583002 typemore-info-section-item item-titleLawrence Lasker item-urlhttp://ax.itunes.apple.com/us/artist/lawrence-lasker/id270230752 ============================================================================== REPORT COMPLETE ============================================================================== Additional Text: