192.168.104.36 CH - [2015-05-20 12:53:11.139981] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7362 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4a7ffdda.522871162568d" ViYdF6wxQzZrjEdU2@UAAAAi TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 963 11973 -% 935006 1542 930596 2156 0 0 192.168.104.36 CH - [2015-05-20 12:53:12.232266] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4a7ffdda.522871162568d" ViYdGKwxQzZrjEdU2@cAAAAk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 437 2427 14% 867783 1978 863312 294 0 0 192.168.176.10 CH - [2015-05-20 12:54:57.772135] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7370 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "7chost.5228717bd6a67" ViYdgawxQzZrjEdU2-YAAAAz TLSv1 ECDHE-RSA-AES256-SHA 756 11785 -% 991977 1836 928162 3652 0 0 192.168.176.10 CH - [2015-05-20 12:54:58.842986] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "7chost.5228717bd6a67" ViYdgqwxQzZrjEdU2-cAAAA0 TLSv1 ECDHE-RSA-AES256-SHA 592 2431 14% 985790 4795 965061 149 0 0 192.168.176.10 CH - [2015-05-20 12:54:59.009303] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "7chost.5228717bd6a67" ViYdg6wxQzZrjEdVDGkAAABq TLSv1 ECDHE-RSA-AES256-SHA 887 1835 -% 981818 2832 978085 154 0 0 192.168.176.10 CH - [2015-05-20 12:54:59.003103] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "7chost.5228717bd6a67" ViYdg6wxQzZrjEdU2-oAAAA3 TLSv1 ECDHE-RSA-AES256-SHA 887 4404 23% 1001088 1869 996963 152 0 0 192.168.176.10 CH - [2015-05-20 12:54:59.006098] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "7chost.5228717bd6a67" ViYdg6wxQzZrjEdU2-sAAAA4 TLSv1 ECDHE-RSA-AES256-SHA 839 2032 22% 1000670 2011 997447 145 0 0 192.168.176.10 CH - [2015-05-20 12:54:58.992113] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "7chost.5228717bd6a67" ViYdgqwxQzZrjEdU2-gAAAA2 TLSv1 ECDHE-RSA-AES256-SHA 839 752 56% 1048915 1941 45900 186 0 0 192.168.176.10 CH - [2015-05-20 12:54:58.994096] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "7ccffd46.5228717bd6a67" ViYdgqwxQzZrjEdU2-kAAAA1 TLSv1 ECDHE-RSA-AES256-SHA 871 7813 22% 1057174 2216 51336 190 0 0 192.168.176.10 CH - [2015-05-20 12:55:00.270296] "GET /EMail/scripts/csshover.htc HTTP/1.1" 200 4255 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "7chost.5228717bd6a67" ViYdhKwxQzZrjEdU2-wAAAA5 TLSv1 ECDHE-RSA-AES256-SHA 496 4682 -% 826016 3000 808255 187 0 0 192.168.176.10 CH - [2015-05-20 12:55:00.290259] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "7chost.5228717bd6a67" ViYdhKwxQzZrjEdU2-4AAAA6 TLSv1 ECDHE-RSA-AES256-SHA 640 1802 -% 825618 1881 808028 149 0 0 192.168.176.10 CH - [2015-05-20 12:55:01.177130] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "7chost.5228717bd6a67" ViYdhawxQzZrjEdU2-8AAAA8 TLSv1 ECDHE-RSA-AES256-SHA 480 1578 -% 859946 2956 841460 355 0 0 192.168.176.10 CH - [2015-05-20 12:55:05.630427] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "7chost.5228717bd6a67" ViYdiawxQzZrjEdU3AMAAAAA TLSv1 ECDHE-RSA-AES256-SHA 821 421 -% 1304401 5378 283839 175 0 0 192.168.176.10 CH - [2015-05-20 12:55:07.158085] "GET /EMail/main.aspx HTTP/1.1" 200 3402 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "7chost.5228717bd6a67" ViYdi6wxQzZrjEdU3AQAAAAB TLSv1 ECDHE-RSA-AES256-SHA 640 3818 -% 931587 2809 912164 1847 0 0 192.168.176.10 CH - [2015-05-20 12:55:08.340275] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "7ccffd46.5228717bd6a67" ViYdjKwxQzZrjEdU3AUAAAAE TLSv1 ECDHE-RSA-AES256-SHA 592 4154 -% 957446 2287 929479 10526 0 0 192.168.176.10 CH - [2015-05-20 12:55:08.446411] "GET /EMail/overview.aspx HTTP/1.1" 200 5302 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "7chost.5228717bd6a67" ViYdjKwxQzZrjEdU3AYAAAAG TLSv1 ECDHE-RSA-AES256-SHA 839 5883 -% 1473020 2051 468660 1740 0 0 192.168.176.10 CH - [2015-05-20 12:55:08.446526] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "7chost.5228717bd6a67" ViYdjKwxQzZrjEdU3AcAAAAF TLSv1 ECDHE-RSA-AES256-SHA 871 9379 -% 1719549 2380 708667 4485 0 0 192.168.176.10 CH - [2015-05-20 12:55:09.946802] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "7chost.5228717bd6a67" ViYdjawxQzZrjEdU3AgAAAAH TLSv1 ECDHE-RSA-AES256-SHA 624 1258 -% 857138 1910 841121 188 0 0 192.168.176.10 CH - [2015-05-20 12:55:10.428057] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "7chost.5228717bd6a67" ViYdjqwxQzZrjEdU3AkAAAAI TLSv1 ECDHE-RSA-AES256-SHA 656 1274 -% 630606 3224 609880 147 0 0 192.168.176.10 CH - [2015-05-20 12:55:12.449815] "GET /EMail/inbox.aspx HTTP/1.1" 200 8591 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "7chost.5228717bd6a67" ViYdkKwxQzZrjEdU3AoAAAAK TLSv1 ECDHE-RSA-AES256-SHA 592 9071 -% 1051057 3071 26521 6236 0 0 192.168.176.10 CH - [2015-05-20 12:55:13.727983] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "7chost.5228717bd6a67" ViYdkawxQzZrjEdU3AwAAAAM TLSv1 ECDHE-RSA-AES256-SHA 608 554 -% 772752 3257 754395 181 0 0 192.168.176.10 CH - [2015-05-20 12:55:13.729281] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "7chost.5228717bd6a67" ViYdkawxQzZrjEdU3A0AAAAN TLSv1 ECDHE-RSA-AES256-SHA 624 1818 -% 1035431 2877 17896 133 0 0 192.168.176.10 CH - [2015-05-20 12:55:13.729631] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "7ccffd46.5228717bd6a67" ViYdkawxQzZrjEdU3A4AAAAL TLSv1 ECDHE-RSA-AES256-SHA 624 538 -% 1053657 2787 36411 96 0 0 192.168.176.10 CH - [2015-05-20 12:55:16.376967] "GET /EMail/message.aspx?&mailId=3890_19&folderId=1590_6&mailPos=0 HTTP/1.1" 200 11202 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "7chost.5228717bd6a67" ViYdlKwxQzZrjEdU3A8AAAAO TLSv1 ECDHE-RSA-AES256-SHA 640 11679 -% 798249 6611 746445 29768 0 0 192.168.176.10 CH - [2015-05-20 12:55:20.251592] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3890_19&folderId=1590_6&attachmentId=2&token=-44320890014117536E17 HTTP/1.1" 200 57184 "https://www.example.com/EMail/message.aspx?&mailId=3890_19&folderId=1590_6&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "7chost.5228717bd6a67" ViYdmKwxQzZrjEdU3BAAAAAP TLSv1 ECDHE-RSA-AES256-SHA 736 58931 -% 1185788 6469 142446 225 0 0 192.168.176.10 CH - [2015-05-20 12:55:47.867532] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "7ccffd46.5228717bd6a67" ViYds6wxQzZrjEdU3BUAAAAU TLSv1 ECDHE-RSA-AES256-SHA 855 2235 -% 937727 3137 933791 140 0 0 192.168.176.10 CH - [2015-05-20 12:55:50.834411] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "7ccffd46.5228717bd6a67" ViYdtqwxQzZrjEdU3BcAAAAW TLSv1 ECDHE-RSA-AES256-SHA 608 421 -% 946565 2144 929586 282 0 0 192.168.176.10 CH - [2015-05-20 12:55:52.010770] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "7ccffd46.5228717bd6a67" ViYduKwxQzZrjEdU3BgAAAAX TLSv1 ECDHE-RSA-AES256-SHA 592 687 75% 978904 3029 960658 321 0 0 192.168.176.10 CH - [2015-05-20 12:55:53.228137] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 - - + "7chost.5228717bd6a67" ViYduawxQzZrjEdU3BkAAAAY TLSv1 ECDHE-RSA-AES256-SHA 416 1562 -% 16159 1453 65 138 0 0 192.168.176.10 CH - [2015-05-20 12:55:53.333365] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "7chost.5228717bd6a67" ViYduawxQzZrjEdVDG0AAABt TLSv1 ECDHE-RSA-AES256-SHA 807 470 -% 969943 3600 965434 207 0 0 192.168.176.10 CH - [2015-05-20 12:55:54.525883] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "7chost.5228717bd6a67" ViYduqwxQzZrjEdVDG4AAABv TLSv1 ECDHE-RSA-AES256-SHA 544 7786 -% 977323 3028 955969 3614 0 0 192.168.176.10 CH - [2015-05-20 12:55:55.534237] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "7chost.5228717bd6a67" ViYdu6wxQzZrjEdU3BsAAAAa TLSv1 ECDHE-RSA-AES256-SHA 656 1887 22% 904376 3108 844524 187 0 0 192.168.176.10 CH - [2015-05-20 12:55:55.531761] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "7chost.5228717bd6a67" ViYdu6wxQzZrjEdVDG8AAABw TLSv1 ECDHE-RSA-AES256-SHA 656 2431 14% 990249 4836 969387 254 0 0 192.168.176.10 CH - [2015-05-20 12:55:55.641890] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "7chost.5228717bd6a67" ViYdu6wxQzZrjEdVDHEAAABy TLSv1 ECDHE-RSA-AES256-SHA 935 358 -% 896082 2685 892528 143 0 0 192.168.176.10 CH - [2015-05-20 12:55:55.633662] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "7ccffd46.5228717bd6a67" ViYdu6wxQzZrjEdVDHAAAABx TLSv1 ECDHE-RSA-AES256-SHA 935 8173 22% 1108516 1969 101127 1779 0 0 192.168.176.10 CH - [2015-05-20 12:55:55.633471] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "7chost.5228717bd6a67" ViYdu6wxQzZrjEdU3BwAAAAc TLSv1 ECDHE-RSA-AES256-SHA 951 4404 23% 1126979 2107 122754 182 0 0 192.168.176.10 CH - [2015-05-20 12:55:55.633991] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "7chost.5228717bd6a67" ViYdu6wxQzZrjEdU3B0AAAAb TLSv1 ECDHE-RSA-AES256-SHA 903 752 56% 1203586 2716 200017 146 0 0 192.168.186.76 CH - [2015-05-20 13:07:34.335916] "GET /EMail/overview.aspx HTTP/1.1" 200 5538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "5e731f84.5228287a05f9e" ViYgdqwxQzZrjEdU3HsAAAA9 TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 10134 -% 1328005 6571 316693 2231 3 0 192.168.186.76 CH - [2015-05-20 13:07:51.856312] "GET /EMail/newMessage.aspx?action=reply&mailId=3889_35&folderId=947_65&showPics=false HTTP/1.1" 200 22877 "https://www.example.com/EMail/message.aspx?&mailId=3889_35&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "5e731f84.5228287a05f9e" ViYgh6wxQzZrjEdU3IAAAAAA TLSv1.2 ECDHE-RSA-AES256-SHA384 1292 23871 -% 1207133 9158 144216 38486 6 3 192.168.186.76 CH - [2015-05-20 13:07:53.141838] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3889_35&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "5e731f84.5228287a05f9e" ViYgiawxQzZrjEdU3IEAAAAB TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 911054 4375 899692 5661 3 0 192.168.186.76 CH - [2015-05-20 13:08:45.224600] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "5e731f84.5228287a05f9e" ViYgvawxQzZrjEdU3IoAAAAM TLSv1.2 ECDHE-RSA-AES256-SHA384 1261 13742 -% 1405012 5568 391720 2755 3 0 192.168.186.76 CH - [2015-05-20 13:08:48.020448] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "5e731f84.5228287a05f9e" ViYgwKwxQzZrjEdU3IwAAAAO TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1249249 16820 230413 155 3 0 192.168.186.76 CH - [2015-05-20 13:08:49.282718] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7291 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "5e731f84.5228287a05f9e" ViYgwawxQzZrjEdU3I0AAAAQ TLSv1.2 ECDHE-RSA-AES256-SHA384 726 7802 -% 1205326 4388 196638 2308 3 0 192.168.190.127 CH - [2015-05-20 14:17:13.037119] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3918 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "d262a4a8.522883de7953f" ViYwyawxQzZrjCzQ@8QAAAAj TLSv1.2 ECDHE-RSA-AES256-SHA384 659 8706 -% 965045 2152 961430 214 0 0 192.168.198.106 CH - [2015-05-20 15:03:22.268380] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7355 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "27e79e8d.52288e2f6b2dc" ViY7mqwxQzZrjCzQ-XsAAAA1 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 774 11961 -% 1836940 4028 827618 3188 3 0 192.168.198.106 CH - [2015-05-20 15:03:24.262388] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "27e79e8d.52288e2f6b2dc" ViY7nKwxQzZrjCzQ-XwAAAA5 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 554 2421 13% 824529 3692 818933 133 3 0 192.168.198.106 CH - [2015-05-20 15:03:24.313118] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "27e79e8d.52288e2f6b2dc" ViY7nKwxQzZrjCzQ-X8AAAA9 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1109 7799 22% 960296 3731 952080 161 3 0 192.168.198.106 CH - [2015-05-20 15:03:24.310920] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "27e79e8d.52288e2f6b2dc" ViY7nKwxQzZrjCzQ-X0AAAA7 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1114 4234 23% 1126789 5436 118620 131 3 0 192.168.198.106 CH - [2015-05-20 15:03:24.311704] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "27e79e8d.52288e2f6b2dc" ViY7nKwxQzZrjCzQ-X4AAAA6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1089 1705 -% 1227819 5112 220702 174 3 0 192.168.198.106 CH - [2015-05-20 15:03:24.313649] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "27e79e8d.52288e2f6b2dc" ViY7nKwxQzZrjCzQ-YAAAAA8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1119 732 56% 1440460 5801 432616 166 3 0 192.168.198.106 CH - [2015-05-20 15:03:24.314117] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "27e79e8d.52288e2f6b2dc" ViY7nKwxQzZrjCzQ-YEAAAA@ TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1119 2014 22% 1475633 6045 467846 101 3 0 192.168.198.106 CH - [2015-05-20 15:03:25.875107] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/css/NNstyle.css" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "27e79e8d.52288e2f6b2dc" ViY7nawxQzZrjCzQ-YQAAAAB TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 550 1792 -% 1245492 3587 240130 129 3 0 192.168.198.106 CH - [2015-05-20 15:03:25.813025] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "27e79e8d.52288e2f6b2dc" ViY7nawxQzZrjCzQ-YIAAAAA TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 569 1685 -% 1863684 5043 856884 163 3 0 192.168.198.106 CH - [2015-05-20 15:03:30.620453] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "27e79e8d.52288e2f6b2dc" ViY7oqwxQzZrjCzQ-YUAAAAC TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 733 451 -% 1679757 7606 669675 185 3 0 192.168.198.106 CH - [2015-05-20 15:03:32.325942] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7528 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "27e79e8d.52288e2f6b2dc" ViY7pKwxQzZrjCzQ-YYAAAAE TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 622 7950 -% 979051 4784 949239 23046 3 0 192.168.198.106 CH - [2015-05-20 15:03:37.511939] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "27e79e8d.52288e2f6b2dc" ViY7qawxQzZrjCzQ-YcAAAAF TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 736 421 -% 1075786 4746 69117 169 3 0 192.168.198.106 CH - [2015-05-20 15:03:38.612561] "GET /EMail/main.aspx HTTP/1.1" 200 3387 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "27e79e8d.52288e2f6b2dc" ViY7qqwxQzZrjCzQ-YgAAAAD TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 592 3803 -% 968776 3483 962998 1137 3 0 192.168.198.106 CH - [2015-05-20 15:03:39.660309] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "27e79e8d.52288e2f6b2dc" ViY7q6wxQzZrjCzQ-YkAAAAG TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 564 4128 -% 1482205 3683 470499 6586 3 0 192.168.198.106 CH - [2015-05-20 15:03:39.711557] "GET /EMail/overview.aspx HTTP/1.1" 200 5286 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "27e79e8d.52288e2f6b2dc" ViY7q6wxQzZrjCzQ-YsAAAAH TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1133 5846 -% 1702275 2868 694844 2854 3 0 192.168.198.106 CH - [2015-05-20 15:03:39.710849] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "27e79e8d.52288e2f6b2dc" ViY7q6wxQzZrjCzQ-YoAAAAI TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1159 9317 -% 2210432 4909 195026 4213 3 0 192.168.198.106 CH - [2015-05-20 15:03:41.443071] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "27e79e8d.52288e2f6b2dc" ViY7rawxQzZrjCzQ-YwAAAAL TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 550 1248 -% 611107 3663 605511 132 3 0 192.168.198.106 CH - [2015-05-20 15:03:41.994830] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "27e79e8d.52288e2f6b2dc" ViY7rawxQzZrjCzQ-Y0AAAAN TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 592 1260 -% 864727 5204 856640 142 3 0 192.168.198.106 CH - [2015-05-20 15:03:43.101631] "GET /EMail/inbox.aspx HTTP/1.1" 200 13781 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "27e79e8d.52288e2f6b2dc" ViY7r6wxQzZrjCzQ-Y8AAAAK TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 567 14262 -% 953878 4086 943188 4295 3 0 192.168.198.106 CH - [2015-05-20 15:03:44.094336] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "27e79e8d.52288e2f6b2dc" ViY7sKwxQzZrjCzQ-ZIAAAAJ TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1112 1951 -% 923331 5115 915859 241 3 0 192.168.198.106 CH - [2015-05-20 15:03:44.093857] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "27e79e8d.52288e2f6b2dc" ViY7sKwxQzZrjCzQ-ZEAAAAP TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 545 527 -% 999452 5145 992694 189 3 0 192.168.198.106 CH - [2015-05-20 15:03:44.093109] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "27e79e8d.52288e2f6b2dc" ViY7sKwxQzZrjCzQ-ZAAAAAO TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 542 539 -% 1248037 3402 242682 286 3 0 192.168.198.106 CH - [2015-05-20 15:03:44.127897] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "27e79e8d.52288e2f6b2dc" ViY7sKwxQzZrjCzQ-ZMAAAAR TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 545 1878 -% 1213736 3668 208505 111 3 0 192.168.198.106 CH - [2015-05-20 15:03:45.866952] "GET /EMail/message.aspx?&mailId=3888_76&folderId=2552_82&mailPos=0 HTTP/1.1" 200 13171 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "27e79e8d.52288e2f6b2dc" ViY7sawxQzZrjCzQ-ZQAAAAU TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 609 13652 -% 1565619 7544 550470 5064 3 0 192.168.198.106 CH - [2015-05-20 15:03:49.435929] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3888_76&folderId=2552_82&attachmentId=2&token=-62415007462736704E17 HTTP/1.1" 200 256 "https://www.example.com/EMail/message.aspx?&mailId=3888_76&folderId=2552_82&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "27e79e8d.52288e2f6b2dc" ViY7tawxQzZrjCzQ-ZUAAAAT TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 716 721 -% 1695193 8310 681830 187 3 0 192.168.198.106 CH - [2015-05-20 15:04:46.339590] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/css/NNstyle.css" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "27e79e8d.52288e2f6b2dc" ViY77qwxQzZrjCzQ-Z8AAAAS TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1115 2226 -% 2753986 3804 748465 123 3 0 192.168.198.106 CH - [2015-05-20 15:04:46.884392] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "27e79e8d.52288e2f6b2dc" ViY77qwxQzZrjCzQ-aAAAAAf TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1152 547 -% 3646179 7010 637087 162 3 0 192.168.198.106 CH - [2015-05-20 15:04:50.558132] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "27e79e8d.52288e2f6b2dc" ViY78qwxQzZrjCzQ-aIAAAAe TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 566 676 75% 2894802 5451 887072 268 3 0 192.168.198.106 CH - [2015-05-20 15:04:53.531127] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 - - + "27e79e8d.52288e2f6b2dc" ViY79awxQzZrjCzQ-aQAAAAi TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 463 1554 -% 3857 2456 47 97 3 0 192.168.198.106 CH - [2015-05-20 15:04:53.535259] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "27e79e8d.52288e2f6b2dc" ViY79awxQzZrjCzQ-aUAAAAi TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 532 318 -% 1530986 3089 526690 130 3 0 192.168.198.106 CH - [2015-05-20 15:04:55.094390] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "27e79e8d.52288e2f6b2dc" ViY796wxQzZrjCzQ-aYAAAAl TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 514 7758 -% 2707791 5008 698617 2741 3 0 192.168.32.7 CH - [2015-05-20 15:08:28.899883] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7375 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY8zKwxQzZrjCzRQZYAAABo TLSv1.2 ECDHE-RSA-AES128-SHA256 787 11811 -% 2108344 4468 100405 2717 0 0 192.168.32.7 CH - [2015-05-20 15:08:31.160303] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY8z6wxQzZrjCzQ-cYAAAAD TLSv1.2 ECDHE-RSA-AES128-SHA256 776 864 56% 1078149 2541 74433 189 0 0 192.168.32.7 CH - [2015-05-20 15:08:31.121060] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY8z6wxQzZrjCzRQZcAAABp TLSv1.2 ECDHE-RSA-AES128-SHA256 486 2527 14% 1119637 3734 114233 139 0 0 192.168.32.7 CH - [2015-05-20 15:08:31.162169] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY8z6wxQzZrjCzQ-ccAAAAI TLSv1.2 ECDHE-RSA-AES128-SHA256 808 4660 23% 1129796 1939 126131 141 0 0 192.168.32.7 CH - [2015-05-20 15:08:31.178466] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY8z6wxQzZrjCzQ-coAAAAG TLSv1.2 ECDHE-RSA-AES128-SHA256 776 2144 22% 1383737 2235 380270 187 0 0 192.168.32.7 CH - [2015-05-20 15:08:31.162188] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY8z6wxQzZrjCzQ-cgAAAAL TLSv1.2 ECDHE-RSA-AES128-SHA256 808 1931 -% 1452573 2361 449141 183 0 0 192.168.32.7 CH - [2015-05-20 15:08:31.166429] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7239 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY8z6wxQzZrjCzQ-ckAAAAH TLSv1.2 ECDHE-RSA-AES128-SHA256 792 8621 22% 1505087 1817 498979 195 0 0 192.168.32.7 CH - [2015-05-20 15:08:32.746437] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY80KwxQzZrjCzQ-csAAAAM TLSv1.2 ECDHE-RSA-AES128-SHA256 518 1866 -% 820028 1997 817348 144 0 0 192.168.32.7 CH - [2015-05-20 15:08:33.512180] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY80awxQzZrjCzQ-cwAAAAN TLSv1.2 ECDHE-RSA-AES128-SHA256 518 2154 -% 804441 3184 800454 142 0 0 192.168.32.7 CH - [2015-05-20 15:08:34.430381] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ac6ff65d.5228493bcb670" ViY80qwxQzZrjCzRQZgAAABq TLSv1.2 ECDHE-RSA-AES128-SHA256 755 5587 -% 871016 2184 867981 213 0 0 192.168.32.7 CH - [2015-05-20 15:08:44.386605] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY83KwxQzZrjCzQ-c0AAAAK TLSv1.2 ECDHE-RSA-AES128-SHA256 952 630 -% 5165207 3354 161178 173 0 0 192.168.32.7 CH - [2015-05-20 15:08:49.564514] "GET /EMail/main.aspx HTTP/1.1" 200 3407 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY84awxQzZrjCzQ-c4AAAAJ TLSv1.2 ECDHE-RSA-AES128-SHA256 534 3882 -% 3083769 2339 79683 1176 0 0 192.168.32.7 CH - [2015-05-20 15:08:52.761036] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY85KwxQzZrjCzQ-dEAAAAU TLSv1.2 ECDHE-RSA-AES128-SHA256 760 5963 -% 2867231 2962 860713 2738 0 0 192.168.32.7 CH - [2015-05-20 15:08:52.735442] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY85KwxQzZrjCzQ-dAAAAAO TLSv1.2 ECDHE-RSA-AES128-SHA256 470 4202 -% 3189502 3125 178998 6669 0 0 192.168.32.7 CH - [2015-05-20 15:08:52.761318] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY85KwxQzZrjCzQ-dIAAAAR TLSv1.2 ECDHE-RSA-AES128-SHA256 792 9683 -% 4131671 3268 119187 4976 0 0 192.168.32.7 CH - [2015-05-20 15:08:55.671685] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY856wxQzZrjCzQ-dMAAAAQ TLSv1.2 ECDHE-RSA-AES128-SHA256 502 1322 -% 2978840 3126 974869 153 0 0 192.168.32.7 CH - [2015-05-20 15:08:56.942984] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY86KwxQzZrjCzQ-dQAAAAT TLSv1.2 ECDHE-RSA-AES128-SHA256 534 1338 -% 4015282 2976 11297 139 0 0 192.168.32.7 CH - [2015-05-20 15:08:57.475921] "GET /EMail/inbox.aspx HTTP/1.1" 200 11171 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY86awxQzZrjCzQ-dUAAAAV TLSv1.2 ECDHE-RSA-AES128-SHA256 470 11780 -% 3800743 1995 794141 3592 0 0 192.168.32.7 CH - [2015-05-20 15:09:01.354994] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY87awxQzZrjCzQ-dkAAAAb TLSv1.2 ECDHE-RSA-AES128-SHA256 776 2123 -% 2634386 1893 631841 143 0 0 192.168.32.7 CH - [2015-05-20 15:09:01.324557] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY87awxQzZrjCzQ-dcAAAAY TLSv1.2 ECDHE-RSA-AES128-SHA256 486 602 -% 2680648 1939 677803 148 0 0 192.168.32.7 CH - [2015-05-20 15:09:01.327740] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY87awxQzZrjCzQ-dgAAAAZ TLSv1.2 ECDHE-RSA-AES128-SHA256 486 602 -% 2986151 1766 983542 187 0 0 192.168.32.7 CH - [2015-05-20 15:09:05.300425] "GET /EMail/message.aspx?&mailId=3890_1&folderId=3481_21&mailPos=0 HTTP/1.1" 200 11358 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY88awxQzZrjCzQ-doAAAAa TLSv1.2 ECDHE-RSA-AES128-SHA256 518 11903 -% 4674547 4872 643752 24886 0 0 192.168.32.7 CH - [2015-05-20 15:09:11.721270] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3890_1&folderId=3481_21&attachmentId=2&token=-45662965404399213E17 HTTP/1.1" 200 129347 "https://www.example.com/EMail/message.aspx?&mailId=3890_1&folderId=3481_21&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY896wxQzZrjCzQ-dsAAAAc TLSv1.2 ECDHE-RSA-AES128-SHA256 614 135194 -% 3530126 6587 466379 234 0 0 192.168.32.7 CH - [2015-05-20 15:10:10.177145] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 11171 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY9MqwxQzZrjCzRQaMAAAB1 TLSv1.2 ECDHE-RSA-AES128-SHA256 760 11904 -% 1354589 2788 347674 3302 0 0 192.168.32.7 CH - [2015-05-20 15:10:10.177098] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY9MqwxQzZrjCzQ-eUAAAAm TLSv1.2 ECDHE-RSA-AES128-SHA256 776 9683 -% 1548746 3941 535221 5465 0 0 192.168.32.7 CH - [2015-05-20 15:12:37.968781] "POST /EMail/inbox.aspx HTTP/1.1" 200 7305 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY9xawxQzZrjCzQ-foAAAA8 TLSv1.2 ECDHE-RSA-AES128-SHA256 1091 11651 -% 1192728 7069 182203 2741 0 0 192.168.32.7 CH - [2015-05-20 15:12:38.461453] "POST /EMail/inbox.aspx HTTP/1.1" 200 7304 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY9xqwxQzZrjCzRQa0AAABA TLSv1.2 ECDHE-RSA-AES128-SHA256 1091 11651 -% 1014136 9608 0 3745 0 0 192.168.32.7 CH - [2015-05-20 15:12:49.436692] "POST /EMail/inbox.aspx HTTP/1.1" 200 7305 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY90awxQzZrjCzQ-f0AAAAC TLSv1.2 ECDHE-RSA-AES128-SHA256 1075 11651 -% 998299 8345 986940 2353 0 0 192.168.32.7 CH - [2015-05-20 15:12:53.194344] "POST /EMail/inbox.aspx HTTP/1.1" 200 11171 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY91awxQzZrjCzQ-f8AAAAF TLSv1.2 ECDHE-RSA-AES128-SHA256 742 11780 -% 1145605 5889 134772 4034 0 0 192.168.32.7 CH - [2015-05-20 15:12:53.235020] "POST /EMail/inbox.aspx HTTP/1.1" 200 11171 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY91awxQzZrjCzQ-gAAAAAD TLSv1.2 ECDHE-RSA-AES128-SHA256 1032 11957 -% 1319761 9886 303323 5496 0 0 192.168.32.7 CH - [2015-05-20 15:13:17.123830] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY97awxQzZrjCzQ-gUAAAAN TLSv1.2 ECDHE-RSA-AES128-SHA256 776 614 -% 921625 2603 918375 179 0 0 192.168.32.7 CH - [2015-05-20 15:13:18.055707] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY97qwxQzZrjCzQ-gYAAAAK TLSv1.2 ECDHE-RSA-AES128-SHA256 470 767 75% 968705 2750 965004 207 0 0 192.168.32.7 CH - [2015-05-20 15:13:19.123855] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "ac6ff65d.5228493bcb670" ViY976wxQzZrjCzQ-ggAAAAJ TLSv1.2 ECDHE-RSA-AES128-SHA256 616 1787 -% 2384 1688 42 100 0 0 192.168.32.7 CH - [2015-05-20 15:13:19.095094] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY976wxQzZrjCzQ-gcAAAAP TLSv1.2 ECDHE-RSA-AES128-SHA256 438 357 -% 927193 2183 924369 190 0 0 192.168.32.7 CH - [2015-05-20 15:13:20.032579] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY98KwxQzZrjCzQ-gkAAAAU TLSv1.2 ECDHE-RSA-AES128-SHA256 422 7834 -% 802906 1914 796796 3511 0 0 192.168.32.7 CH - [2015-05-20 15:13:20.936030] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY98KwxQzZrjCzRQa8AAABD TLSv1.2 ECDHE-RSA-AES128-SHA256 824 2144 22% 767945 3653 762448 139 0 0 192.168.32.7 CH - [2015-05-20 15:13:20.890932] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY98KwxQzZrjCzQ-gsAAAAR TLSv1.2 ECDHE-RSA-AES128-SHA256 550 2527 14% 950776 3166 946242 174 0 0 192.168.32.7 CH - [2015-05-20 15:13:20.937884] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY98KwxQzZrjCzQ-gwAAAAQ TLSv1.2 ECDHE-RSA-AES128-SHA256 856 8573 22% 1150797 2290 144700 147 0 0 192.168.32.7 CH - [2015-05-20 15:13:20.941638] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY98KwxQzZrjCzRQbAAAABB TLSv1.2 ECDHE-RSA-AES128-SHA256 856 4405 23% 1187625 2664 183450 146 0 0 192.168.32.7 CH - [2015-05-20 15:13:20.938070] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY98KwxQzZrjCzQ-g0AAAAW TLSv1.2 ECDHE-RSA-AES128-SHA256 872 422 -% 1203785 3320 199525 187 0 0 192.168.32.7 CH - [2015-05-20 15:13:20.983852] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY98KwxQzZrjCzQ-g4AAAAX TLSv1.2 ECDHE-RSA-AES128-SHA256 824 864 56% 1297763 3447 293389 196 0 0 192.168.32.7 CH - [2015-05-20 15:13:22.547312] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7560a760.52284938b1608" ViY98qwxQzZrjCzQ-g8AAAAT TLSv1.2 ECDHE-RSA-AES128-SHA256 582 245 -% 1011444 1996 8653 166 0 0 192.168.146.78 CH - [2015-05-20 15:24:29.222668] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a537de2.52283b4e6d77b" ViZAjawxQzZrjCzRQdQAAABo TLSv1.2 ECDHE-RSA-AES128-SHA256 847 4302 -% 924964 3662 920514 152 0 0 192.168.146.78 CH - [2015-05-20 15:24:30.291719] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a537de2.52283b4e6d77b" ViZAjqwxQzZrjCzRQdUAAABp TLSv1.2 ECDHE-RSA-AES128-SHA256 438 357 -% 884927 3391 880723 149 0 0 192.168.146.78 CH - [2015-05-20 15:24:31.200974] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a537de2.52283b4e6d77b" ViZAj6wxQzZrjCzRQdYAAABq TLSv1.2 ECDHE-RSA-AES128-SHA256 422 7834 -% 1133856 2951 127813 2322 0 0 192.168.146.78 CH - [2015-05-20 15:24:32.442398] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a537de2.52283b4e6d77b" ViZAkKwxQzZrjCzQ-ncAAAAC TLSv1.2 ECDHE-RSA-AES128-SHA256 868 422 -% 860729 2917 856694 211 0 0 192.168.146.78 CH - [2015-05-20 15:24:32.443054] "GET /EMail/scripts/variables_de.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a537de2.52283b4e6d77b" ViZAkKwxQzZrjCzRQdgAAABs TLSv1.2 ECDHE-RSA-AES128-SHA256 852 422 -% 967417 2919 963831 154 0 0 192.168.146.78 CH - [2015-05-20 15:24:32.372282] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a537de2.52283b4e6d77b" ViZAkKwxQzZrjCzRQdcAAABr TLSv1.2 ECDHE-RSA-AES128-SHA256 534 245 -% 1169737 3762 165019 194 0 0 192.168.146.78 CH - [2015-05-20 15:24:32.444113] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a537de2.52283b4e6d77b" ViZAkKwxQzZrjCzRQdkAAABt TLSv1.2 ECDHE-RSA-AES128-SHA256 820 422 -% 1125463 3207 121385 173 0 0 192.168.146.78 CH - [2015-05-20 15:24:32.779037] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a537de2.52283b4e6d77b" ViZAkKwxQzZrjCzQ-ngAAAAI TLSv1.2 ECDHE-RSA-AES128-SHA256 852 422 -% 1038090 4023 33210 134 0 0 192.168.146.78 CH - [2015-05-20 15:24:35.506944] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a537de2.52283b4e6d77b" ViZAk6wxQzZrjCzQ-noAAAAG TLSv1.2 ECDHE-RSA-AES128-SHA256 820 422 -% 1041512 2603 38027 136 0 0 192.168.146.78 CH - [2015-05-20 15:24:36.636753] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a537de2.52283b4e6d77b" ViZAlKwxQzZrjCzQ-nsAAAAD TLSv1.2 ECDHE-RSA-AES128-SHA256 582 245 -% 925473 2058 922750 173 0 0 192.168.146.78 CH - [2015-05-20 15:25:17.410167] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a537de2.52283b4e6d77b" ViZAvawxQzZrjCzQ-oEAAAAJ TLSv1.2 ECDHE-RSA-AES128-SHA256 916 630 -% 1109362 3557 105024 203 0 0 192.168.146.78 CH - [2015-05-20 15:25:18.551056] "GET /EMail/main.aspx HTTP/1.1" 200 3402 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a537de2.52283b4e6d77b" ViZAvqwxQzZrjCzQ-oIAAAAP TLSv1.2 ECDHE-RSA-AES128-SHA256 486 3882 -% 878645 1969 874187 1817 0 0 192.168.146.78 CH - [2015-05-20 15:25:19.470481] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a537de2.52283b4e6d77b" ViZAv6wxQzZrjCzQ-oMAAAAO TLSv1.2 ECDHE-RSA-AES128-SHA256 470 4202 -% 738659 2264 728591 7037 0 0 192.168.146.78 CH - [2015-05-20 15:25:19.539183] "GET /EMail/overview.aspx HTTP/1.1" 200 5300 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a537de2.52283b4e6d77b" ViZAv6wxQzZrjCzRQd8AAAB2 TLSv1.2 ECDHE-RSA-AES128-SHA256 756 5963 -% 910724 3003 903637 3229 0 0 192.168.146.78 CH - [2015-05-20 15:25:19.541108] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a537de2.52283b4e6d77b" ViZAv6wxQzZrjCzRQeAAAAB1 TLSv1.2 ECDHE-RSA-AES128-SHA256 788 9683 -% 1803368 3274 792386 3412 0 0 192.168.146.78 CH - [2015-05-20 15:25:23.881199] "GET /EMail/inbox.aspx HTTP/1.1" 200 15969 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a537de2.52283b4e6d77b" ViZAw6wxQzZrjCzRQeEAAAB3 TLSv1.2 ECDHE-RSA-AES128-SHA256 470 16580 -% 1637055 1984 628554 5025 0 0 192.168.146.78 CH - [2015-05-20 15:26:35.430835] "GET /EMail/newMessage.aspx?msg=new HTTP/1.1" 200 12041 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a537de2.52283b4e6d77b" ViZBC6wxQzZrjCzQ-o8AAAAc TLSv1.2 ECDHE-RSA-AES128-SHA256 772 12837 -% 949813 2722 919435 25011 3 3 192.168.146.78 CH - [2015-05-20 15:26:35.439849] "GET /EMail/tree.aspx?sNode-sharedTree=treeNewMsg HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a537de2.52283b4e6d77b" ViZBC6wxQzZrjCzQ-pAAAAAd TLSv1.2 ECDHE-RSA-AES128-SHA256 772 9683 -% 2082793 2288 71509 4638 0 0 192.168.146.78 CH - [2015-05-20 15:26:36.515549] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a537de2.52283b4e6d77b" ViZBDKwxQzZrjCzQ-pEAAAAg TLSv1.2 ECDHE-RSA-AES128-SHA256 486 3402 -% 1124223 2038 115202 6088 0 0 192.168.146.78 CH - [2015-05-20 15:26:36.665234] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce.eot? HTTP/1.1" 200 10024 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a537de2.52283b4e6d77b" ViZBDKwxQzZrjCzQ-pIAAAAS TLSv1.2 ECDHE-RSA-AES128-SHA256 804 10837 -% 1200989 2491 197344 218 0 0 192.168.146.78 CH - [2015-05-20 15:26:36.676464] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce-small.eot? HTTP/1.1" 200 10316 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a537de2.52283b4e6d77b" ViZBDKwxQzZrjCzRQecAAAB9 TLSv1.2 ECDHE-RSA-AES128-SHA256 804 11125 -% 1212666 2379 209266 286 0 0 192.168.146.78 CH - [2015-05-20 15:26:36.695728] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5472 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a537de2.52283b4e6d77b" ViZBDKwxQzZrjCzRQegAAAB@ TLSv1.2 ECDHE-RSA-AES128-SHA256 756 8755 -% 1209867 2043 0 0 0 0 192.168.146.78 CH - [2015-05-20 15:34:59.211464] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a537de2.52283b4e6d77b" ViZDA6wxQzZrjCzQ-t8AAAAt TLSv1.2 ECDHE-RSA-AES128-SHA256 1796 4302 -% 1181278 14514 164330 149 18 0 192.168.146.78 CH - [2015-05-20 15:35:00.552657] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc= HTTP/1.1" 200 3934 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a537de2.52283b4e6d77b" ViZDBKwxQzZrjCzQ-uAAAAAs TLSv1.2 ECDHE-RSA-AES128-SHA256 582 4410 -% 1066864 3777 53974 8523 0 0 192.168.146.78 CH - [2015-05-20 15:51:02.110367] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7354 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1dd95381.522898d6c6c9f" ViZGxqwxQzZrjCzQ-24AAAAH TLSv1.2 ECDHE-RSA-AES128-SHA256 1007 11875 -% 736828 6068 726056 3050 3 0 192.168.146.78 CH - [2015-05-20 15:51:23.881590] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1dd95381.522898d6c6c9f" ViZG26wxQzZrjCzQ-3AAAAAK TLSv1.2 ECDHE-RSA-AES128-SHA256 1252 630 -% 1057834 7042 48976 152 3 0 192.168.146.78 CH - [2015-05-20 15:51:24.972616] "GET /EMail/main.aspx HTTP/1.1" 200 3400 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1dd95381.522898d6c6c9f" ViZG3KwxQzZrjCzQ-3IAAAAR TLSv1.2 ECDHE-RSA-AES128-SHA256 822 3882 -% 994988 7228 984896 1256 3 0 192.168.146.78 CH - [2015-05-20 15:51:26.017120] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1dd95381.522898d6c6c9f" ViZG3qwxQzZrjCzQ-3MAAAAQ TLSv1.2 ECDHE-RSA-AES128-SHA256 774 4202 -% 780009 7324 764120 7011 3 0 192.168.146.78 CH - [2015-05-20 15:51:26.096150] "GET /EMail/overview.aspx HTTP/1.1" 200 5303 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1dd95381.522898d6c6c9f" ViZG3qwxQzZrjCzQ-3UAAAAJ TLSv1.2 ECDHE-RSA-AES128-SHA256 1060 5963 -% 1240433 6608 230528 1739 3 0 192.168.146.78 CH - [2015-05-20 15:51:26.095567] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1dd95381.522898d6c6c9f" ViZG3qwxQzZrjCzQ-3QAAAAO TLSv1.2 ECDHE-RSA-AES128-SHA256 1092 9683 -% 1607001 8380 590864 2948 3 0 192.168.146.78 CH - [2015-05-20 15:51:28.791480] "GET /EMail/inbox.aspx HTTP/1.1" 200 19669 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1dd95381.522898d6c6c9f" ViZG4KwxQzZrjCzQ-3YAAAAU TLSv1.2 ECDHE-RSA-AES128-SHA256 774 20398 -% 1049351 5575 979895 10683 3 0 192.168.146.78 CH - [2015-05-20 15:51:34.479501] "GET /EMail/message.aspx?&mailId=3884_16&folderId=2771_43&mailPos=3 HTTP/1.1" 200 20124 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1dd95381.522898d6c6c9f" ViZG5qwxQzZrjCzQ-3gAAAAW TLSv1.2 ECDHE-RSA-AES128-SHA256 822 20862 -% 1474189 8187 412441 39265 3 0 192.168.54.177 CH - [2015-05-20 16:02:23.352925] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3918 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "f83e279f.52289b6075c5d" ViZJb6wxQzZrjCzQ-9UAAAAz TLSv1.2 ECDHE-RSA-AES256-SHA384 659 8706 -% 1008519 1795 5771 142 0 0 192.168.146.78 CH - [2015-05-20 16:07:09.533169] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1dd95381.522898d6c6c9f" ViZKjawxQzZrjCzQ--0AAAAd TLSv1.2 ECDHE-RSA-AES128-SHA256 1151 4302 -% 910062 9892 897960 216 3 0 192.168.146.78 CH - [2015-05-20 16:07:10.499334] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1dd95381.522898d6c6c9f" ViZKjqwxQzZrjCzQ--4AAAAg TLSv1.2 ECDHE-RSA-AES128-SHA256 742 357 -% 916446 9892 904031 208 3 0 192.168.146.78 CH - [2015-05-20 16:07:11.434078] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1dd95381.522898d6c6c9f" ViZKj6wxQzZrjCzQ--8AAAAS TLSv1.2 ECDHE-RSA-AES128-SHA256 726 7834 -% 897051 6585 886774 2243 3 0 192.168.146.78 CH - [2015-05-20 16:07:12.420287] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1dd95381.522898d6c6c9f" ViZKkKwxQzZrjCzQAAIAAAAe TLSv1.2 ECDHE-RSA-AES128-SHA256 1124 422 -% 786000 5483 777776 257 3 0 192.168.146.78 CH - [2015-05-20 16:07:12.757123] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1dd95381.522898d6c6c9f" ViZKkKwxQzZrjCzQAAYAAAAn TLSv1.2 ECDHE-RSA-AES128-SHA256 1124 422 -% 679613 9384 668456 139 3 0 192.168.146.78 CH - [2015-05-20 16:07:12.355747] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1dd95381.522898d6c6c9f" ViZKkKwxQzZrjCzQAAEAAAAh TLSv1.2 ECDHE-RSA-AES128-SHA256 838 245 -% 1082014 9200 70936 184 3 0 192.168.146.78 CH - [2015-05-20 16:07:12.441326] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1dd95381.522898d6c6c9f" ViZKkKwxQzZrjCzQAAMAAAAi TLSv1.2 ECDHE-RSA-AES128-SHA256 1172 422 -% 1195969 5480 188533 188 3 0 192.168.146.78 CH - [2015-05-20 16:07:12.512043] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1dd95381.522898d6c6c9f" ViZKkKwxQzZrjCzQAAQAAAAl TLSv1.2 ECDHE-RSA-AES128-SHA256 1156 422 -% 1243842 9751 231963 232 3 0 192.168.146.78 CH - [2015-05-20 16:07:12.535541] "GET /EMail/scripts/variables_de.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1dd95381.522898d6c6c9f" ViZKkKwxQzZrjCzQAAUAAAAk TLSv1.2 ECDHE-RSA-AES128-SHA256 1156 422 -% 1357565 5274 349407 175 3 0 192.168.146.78 CH - [2015-05-20 16:07:13.921709] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1dd95381.522898d6c6c9f" ViZKkawxQzZrjCzQAAcAAAAj TLSv1.2 ECDHE-RSA-AES128-SHA256 886 245 -% 953441 9125 942085 186 3 0 192.168.213.21 CH - [2015-05-20 16:12:11.507543] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/main.aspx" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E)" www.example.com 192.168.34.16 443 proxy-server - + "376c4163.52289d65d3dc4" ViZLu6wxQzZrjCzQADUAAAAb TLSv1 ECDHE-RSA-AES256-SHA 1208 4257 -% 1006938 3367 2787 207 0 0 192.168.213.21 CH - [2015-05-20 16:12:13.706306] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E)" www.example.com 192.168.34.16 443 proxy-server - + "376c4163.52289d65d3dc4" ViZLvawxQzZrjCzQADcAAAAa TLSv1 ECDHE-RSA-AES256-SHA 1064 7990 -% 1035728 2302 26525 6198 0 0 192.168.213.21 CH - [2015-05-20 16:12:13.707234] "GET /EMail/overview.aspx HTTP/1.1" 200 6212 "https://www.example.com/EMail/main.aspx" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E)" www.example.com 192.168.34.16 443 proxy-server - + "376c4163.52289d65d3dc4" ViZLvawxQzZrjCzQADgAAAAc TLSv1 ECDHE-RSA-AES256-SHA 1064 10486 -% 1098685 1821 92652 3656 0 0 192.168.213.21 CH - [2015-05-20 16:12:32.463230] "GET /EMail/sent.aspx HTTP/1.1" 200 47927 "https://www.example.com/EMail/overview.aspx" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E)" www.example.com 192.168.34.16 443 proxy-server - + "376c4163.52289d65d3dc4" ViZL0KwxQzZrjCzQAD0AAAAh TLSv1 ECDHE-RSA-AES256-SHA 1064 52504 -% 2175474 1974 729785 24616 0 0 192.168.213.21 CH - [2015-05-20 16:12:34.913730] "GET /EMail/images/Highost.gif HTTP/1.1" 304 - "https://www.example.com/EMail/sent.aspx" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E)" www.example.com 192.168.34.16 443 proxy-server - + "376c4163.52289d65d3dc4" ViZL0qwxQzZrjCzQAD8AAAAk TLSv1 ECDHE-RSA-AES256-SHA 984 4049 -% 1055659 2139 52811 186 0 0 192.168.213.21 CH - [2015-05-20 16:12:34.912081] "GET /EMail/images/Highprio.gif HTTP/1.1" 200 91 "https://www.example.com/EMail/sent.aspx" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E)" www.example.com 192.168.34.16 443 proxy-server - + "376c4163.52289d65d3dc4" ViZL0qwxQzZrjCzQAD4AAAAl TLSv1 ECDHE-RSA-AES256-SHA 888 4342 -% 1059535 1976 56812 138 0 0 192.168.213.21 CH - [2015-05-20 16:12:34.914838] "GET /EMail/images/msgOpened.png HTTP/1.1" 304 - "https://www.example.com/EMail/sent.aspx" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E)" www.example.com 192.168.34.16 443 proxy-server - + "376c4163.52289d65d3dc4" ViZL0qwxQzZrjCzQAEAAAAAj TLSv1 ECDHE-RSA-AES256-SHA 984 4049 -% 1276659 2092 273857 192 0 0 192.168.213.21 CH - [2015-05-20 16:12:43.804198] "GET /EMail/message.aspx?&mailId=3881_55&folderId=1001_10&mailPos=5 HTTP/1.1" 200 11985 "https://www.example.com/EMail/sent.aspx" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E)" www.example.com 192.168.34.16 443 proxy-server - + "376c4163.52289d65d3dc4" ViZL26wxQzZrjCzQAEMAAAAu TLSv1 ECDHE-RSA-AES256-SHA 1112 16320 -% 1354270 5120 322862 25274 0 0 192.168.213.21 CH - [2015-05-20 16:12:55.507456] "GET /EMail/scripts/tinymce/langs/de.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=resend&mailId=3881_55&to=john.smith@ourindustry.com&folderId=1001_10&showPics=false" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E)" www.example.com 192.168.34.16 443 proxy-server - + "376c4163.52289d65d3dc4" ViZL56wxQzZrjCzQAEYAAAAv TLSv1 ECDHE-RSA-AES256-SHA 1080 4049 -% 907201 3542 902892 186 0 0 192.168.213.21 CH - [2015-05-20 16:13:31.556830] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=resend&mailId=3881_55&to=john.smith@ourindustry.com&folderId=1001_10&showPics=false" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E)" www.example.com 192.168.34.16 443 proxy-server - + "376c4163.52289d65d3dc4" ViZMC6wxQzZrjCzRQpAAAABu TLSv1 ECDHE-RSA-AES256-SHA 2834 4241 -% 1010626 32182 0 239 59 0 192.168.213.21 CH - [2015-05-20 16:13:39.757270] "POST /EMail/newMessage.aspx HTTP/1.1" 200 12054 "https://www.example.com/EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E)" www.example.com 192.168.34.16 443 proxy-server - + "376c4163.52289d65d3dc4" ViZME6wxQzZrjCzQAE4AAAA5 TLSv1 ECDHE-RSA-AES256-SHA 1208 16400 -% 1186084 3185 157329 23513 3 3 192.168.126.210 CH - [2015-05-20 16:16:55.640435] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3918 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "54be9ca2.52289ea056973" ViZM16wxQzZrjCzRQpgAAAB3 TLSv1.2 ECDHE-RSA-AES256-SHA384 659 8706 -% 826256 1791 823534 131 0 0 192.168.213.21 CH - [2015-05-20 16:17:57.119380] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E)" www.example.com 192.168.34.16 443 proxy-server - + "376c4163.52289d65d3dc4" ViZNFawxQzZrjCzRQp0AAAB8 TLSv1 ECDHE-RSA-AES256-SHA 984 4049 -% 886102 1993 883414 144 0 0 192.168.213.22 CH - [2015-05-20 16:32:53.501434] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7860c2ad.5228a231d35fa" ViZQlawxQzZrjCzQAPEAAAAh TLSv1.2 ECDHE-RSA-AES128-SHA256 730 5651 -% 1022885 906 21120 153 0 0 192.168.213.22 CH - [2015-05-20 16:33:05.006647] "GET /EMail/main.aspx HTTP/1.1" 200 3415 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ff0a4444.5228a22e9b9e4" ViZQoawxQzZrjCzQAPMAAAAk TLSv1.2 ECDHE-RSA-AES128-SHA256 942 7768 -% 926702 1932 922294 1844 0 0 192.168.213.22 CH - [2015-05-20 16:33:06.460433] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ff0a4444.5228a22e9b9e4" ViZQoqwxQzZrjCzQAPQAAAAm TLSv1.2 ECDHE-RSA-AES128-SHA256 894 8072 -% 836433 1945 822945 10874 0 0 192.168.213.22 CH - [2015-05-20 16:33:06.457841] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ff0a4444.5228a22e9b9e4" ViZQoqwxQzZrjCzRQuUAAABJ TLSv1.2 ECDHE-RSA-AES128-SHA256 926 13376 -% 1947405 4285 934428 4206 0 0 192.168.213.22 CH - [2015-05-20 16:33:07.908074] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ff0a4444.5228a22e9b9e4" ViZQo6wxQzZrjCzQAPUAAAAj TLSv1.2 ECDHE-RSA-AES128-SHA256 1022 4115 -% 817498 3076 813567 148 0 0 192.168.213.22 CH - [2015-05-20 16:33:11.423573] "GET /EMail/newMessage.aspx?msg=new HTTP/1.1" 200 12054 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ff0a4444.5228a22e9b9e4" ViZQp6wxQzZrjCzQAPcAAAAq TLSv1.2 ECDHE-RSA-AES128-SHA256 942 16546 -% 1117814 4650 86507 24495 3 3 192.168.213.22 CH - [2015-05-20 16:33:14.058201] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ff0a4444.5228a22e9b9e4" ViZQqqwxQzZrjCzQAPgAAAAt TLSv1.2 ECDHE-RSA-AES128-SHA256 926 7288 -% 1235678 1951 225414 7716 0 0 192.168.213.22 CH - [2015-05-20 16:33:14.108509] "GET /EMail/scripts/tinymce/langs/de.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ff0a4444.5228a22e9b9e4" ViZQqqwxQzZrjCzQAPkAAAAw TLSv1.2 ECDHE-RSA-AES128-SHA256 1022 4115 -% 1657479 2352 654389 177 0 0 192.168.213.22 CH - [2015-05-20 16:33:56.758847] "GET /EMail/images/active.gif HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ff0a4444.5228a22e9b9e4" ViZQ1KwxQzZrjCzRQugAAABN TLSv1.2 ECDHE-RSA-AES128-SHA256 1022 4115 -% 929666 2151 926867 138 0 0 192.168.213.22 CH - [2015-05-20 16:33:57.559780] "GET /EMail/attachost.aspx HTTP/1.1" 200 4990 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ff0a4444.5228a22e9b9e4" ViZQ1awxQzZrjCzRQukAAABO TLSv1.2 ECDHE-RSA-AES128-SHA256 862 9336 -% 1005159 1890 724 1888 0 0 192.168.213.22 CH - [2015-05-20 16:36:15.703954] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "7860c2ad.5228a231d35fa" ViZRX6wxQzZrjCzQARIAAAAN TLSv1.2 ECDHE-RSA-AES128-SHA256 799 1787 -% 2176 1407 53 102 0 0 192.168.213.22 CH - [2015-05-20 16:36:17.750726] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ff0a4444.5228a22e9b9e4" ViZRYawxQzZrjCzQARQAAAAK TLSv1.2 ECDHE-RSA-AES128-SHA256 974 4115 -% 957683 3046 953875 147 0 0 192.168.213.22 CH - [2015-05-20 16:36:19.162409] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ff0a4444.5228a22e9b9e4" ViZRY6wxQzZrjCzQARUAAAAQ TLSv1.2 ECDHE-RSA-AES128-SHA256 1006 4115 -% 837383 3030 833421 209 0 0 192.168.178.169 CH - [2015-05-20 16:45:42.344041] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3918 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "27dcb9d8.5228a50f0d169" ViZTlqwxQzZrjCzQAWsAAAAp TLSv1.2 ECDHE-RSA-AES256-SHA384 659 8706 -% 899370 2298 895632 135 0 0 192.168.212.1 CH - [2015-05-20 17:19:48.318807] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7383 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "bd15b545.52285a058e320" ViZblKwxQzZrjCzQAqUAAAAy TLSv1 ECDHE-RSA-AES256-SHA 784 11729 -% 977090 2614 964966 8912 0 0 192.168.212.1 CH - [2015-05-20 17:20:00.610134] "GET /EMail/main.aspx HTTP/1.1" 200 3415 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "bd15b545.52285a058e320" ViZboKwxQzZrjCzQAqcAAAAz TLSv1 ECDHE-RSA-AES256-SHA 872 7670 -% 978831 1896 974903 1343 0 0 192.168.212.1 CH - [2015-05-20 17:20:01.794197] "GET /EMail/overview.aspx HTTP/1.1" 200 6212 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "bd15b545.52285a058e320" ViZboawxQzZrjCzQAqkAAAA3 TLSv1 ECDHE-RSA-AES256-SHA 757 6795 -% 1239962 2156 233456 3723 0 0 192.168.212.1 CH - [2015-05-20 17:20:01.793892] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "bd15b545.52285a058e320" ViZboawxQzZrjCzQAqgAAAA4 TLSv1 ECDHE-RSA-AES256-SHA 773 9379 -% 2177976 2985 166438 4530 0 0 192.168.212.1 CH - [2015-05-20 17:20:05.890313] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8591 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "bd15b545.52285a058e320" ViZbpawxQzZrjCzQAqwAAAA7 TLSv1 ECDHE-RSA-AES256-SHA 550 9071 -% 1211813 2116 202938 5942 0 0 192.168.212.1 CH - [2015-05-20 17:20:05.896156] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "bd15b545.52285a058e320" ViZbpawxQzZrjCzQAq0AAAA6 TLSv1 ECDHE-RSA-AES256-SHA 566 9234 -% 1695200 3796 683787 3424 0 0 192.168.212.1 CH - [2015-05-20 17:20:08.506668] "GET /EMail/message.aspx?&mailId=3890_33&folderId=1001_9&mailPos=0 HTTP/1.1" 200 11217 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "bd15b545.52285a058e320" ViZbqKwxQzZrjCzQAq4AAAA8 TLSv1 ECDHE-RSA-AES256-SHA 598 11695 -% 1462780 4960 432816 24096 0 0 192.168.212.1 CH - [2015-05-20 17:20:11.228844] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3890_33&folderId=1001_9&attachmentId=2&token=-81657042441193843E17 HTTP/1.1" 200 54997 "https://www.example.com/EMail/message.aspx?&mailId=3890_33&folderId=1001_9&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "bd15b545.52285a058e320" ViZbq6wxQzZrjCzQAq8AAAA@ TLSv1 ECDHE-RSA-AES256-SHA 694 56718 -% 1069861 6293 40770 201 0 0 192.168.212.1 CH - [2015-05-20 17:22:28.876943] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8583 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "bd15b545.52285a058e320" ViZcNKwxQzZrjCzQAsAAAAAJ TLSv1 ECDHE-RSA-AES256-SHA 757 9200 -% 1220698 3312 211997 4581 0 0 192.168.212.1 CH - [2015-05-20 17:22:28.877169] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "bd15b545.52285a058e320" ViZcNKwxQzZrjCzQAsEAAAAO TLSv1 ECDHE-RSA-AES256-SHA 773 9379 -% 1490823 2897 479204 4760 0 0 192.168.212.1 CH - [2015-05-20 17:22:34.319868] "GET /EMail/moveToFolder.aspx?folderName=Inbox&mailId=3890_33 HTTP/1.1" 200 4654 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "bd15b545.52285a058e320" ViZcOqwxQzZrjCzQAsIAAAAU TLSv1 ECDHE-RSA-AES256-SHA 534 5098 -% 1531701 3634 524931 2449 0 0 192.168.212.1 CH - [2015-05-20 17:22:40.111778] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/moveToFolder.aspx?folderName=Inbox&mailId=3890_33" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "bd15b545.52285a058e320" ViZcQKwxQzZrjCzQAsQAAAAT TLSv1 ECDHE-RSA-AES256-SHA 774 341 -% 1325871 7351 317649 144 0 0 192.168.212.1 CH - [2015-05-20 17:22:41.465641] "GET /EMail/host.html HTTP/1.1" 200 199 "https://www.example.com/EMail/moveToFolder.aspx?folderName=Inbox&mailId=3890_33" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "bd15b545.52285a058e320" ViZcQawxQzZrjCzQAsUAAAAP TLSv1 ECDHE-RSA-AES256-SHA 582 703 76% 856340 3117 852105 340 0 0 192.168.212.1 CH - [2015-05-20 17:22:42.426044] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7291 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "bd15b545.52285a058e320" ViZcQqwxQzZrjCzQAsYAAAAV TLSv1 ECDHE-RSA-AES256-SHA 550 7722 -% 994710 4024 985736 3727 0 0 192.168.212.1 CH - [2015-05-20 17:22:43.507837] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "bd15b545.52285a058e320" ViZcQ6wxQzZrjCzQAscAAAAY TLSv1 ECDHE-RSA-AES256-SHA 630 213 -% 826333 3141 822420 136 0 0 192.168.212.1 CH - [2015-05-20 17:22:43.549594] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "bd15b545.52285a058e320" ViZcQ6wxQzZrjCzQAsgAAAAX TLSv1 ECDHE-RSA-AES256-SHA 853 358 -% 972310 1902 969774 168 0 0 192.168.212.1 CH - [2015-05-20 17:22:43.710000] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "bd15b545.52285a058e320" ViZcQ6wxQzZrjCzQAssAAAAb TLSv1 ECDHE-RSA-AES256-SHA 821 358 -% 867602 1931 864957 153 0 0 192.168.212.1 CH - [2015-05-20 17:22:43.554828] "GET /EMail/images/attach.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "bd15b545.52285a058e320" ViZcQ6wxQzZrjCzQAskAAAAZ TLSv1 ECDHE-RSA-AES256-SHA 869 358 -% 1029769 2314 26541 201 0 0 192.168.212.1 CH - [2015-05-20 17:22:43.558403] "GET /EMail/images/Highost.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "bd15b545.52285a058e320" ViZcQ6wxQzZrjCzQAsoAAAAa TLSv1 ECDHE-RSA-AES256-SHA 869 358 -% 1029053 1732 26793 83 0 0 192.168.212.1 CH - [2015-05-20 17:22:43.801343] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "bd15b545.52285a058e320" ViZcQ6wxQzZrjCzQAswAAAAd TLSv1 ECDHE-RSA-AES256-SHA 773 566 -% 852626 2188 849651 194 0 0 192.168.212.1 CH - [2015-05-20 17:22:44.768206] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "bd15b545.52285a058e320" ViZcRKwxQzZrjCzQAs4AAAAh TLSv1 ECDHE-RSA-AES256-SHA 518 325 -% 823955 3445 819594 221 0 0 192.168.212.1 CH - [2015-05-20 17:22:45.612943] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "bd15b545.52285a058e320" ViZcRawxQzZrjCzQAs8AAAAi TLSv1 ECDHE-RSA-AES256-SHA 486 7786 -% 926584 2978 920608 2249 0 0 192.168.212.1 CH - [2015-05-20 17:22:46.708115] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "bd15b545.52285a058e320" ViZcRqwxQzZrjCzQAtEAAAAp TLSv1 ECDHE-RSA-AES256-SHA 853 358 -% 812435 2850 808896 131 0 0 192.168.212.1 CH - [2015-05-20 17:22:46.698746] "GET /EMail/scripts/variables_de.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "bd15b545.52285a058e320" ViZcRqwxQzZrjCzQAtAAAAAk TLSv1 ECDHE-RSA-AES256-SHA 646 213 -% 1063925 3124 59841 182 0 0 192.168.212.1 CH - [2015-05-20 17:22:47.847868] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "bd15b545.52285a058e320" ViZcR6wxQzZrjCzQAtIAAAAm TLSv1 ECDHE-RSA-AES256-SHA 662 213 -% 932068 3160 928055 193 0 0 192.168.146.78 CH - [2015-05-20 18:13:26.285398] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7350 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68649192.522829f482968" ViZoJqwxQzZrjCzQBLAAAAAS TLSv1.2 ECDHE-RSA-AES128-SHA256 831 11795 -% 1019906 3233 13774 2227 0 0 192.168.146.78 CH - [2015-05-20 18:13:29.710219] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68649192.522829f482968" ViZoKawxQzZrjCzQBLEAAAAn TLSv1.2 ECDHE-RSA-AES128-SHA256 678 453 -% 1101626 5627 95131 164 0 0 192.168.146.78 CH - [2015-05-20 18:13:30.926503] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68649192.522829f482968" ViZoKqwxQzZrjCzQBLMAAAAh TLSv1.2 ECDHE-RSA-AES128-SHA256 534 3882 -% 976308 1941 971960 1802 0 0 192.168.146.78 CH - [2015-05-20 18:13:32.106146] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68649192.522829f482968" ViZoLKwxQzZrjCzQBLQAAAAi TLSv1.2 ECDHE-RSA-AES128-SHA256 486 4202 -% 834544 3120 824525 6254 0 0 192.168.146.78 CH - [2015-05-20 18:13:32.639421] "GET /EMail/overview.aspx HTTP/1.1" 200 5307 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68649192.522829f482968" ViZoLKwxQzZrjCzQBLYAAAAk TLSv1.2 ECDHE-RSA-AES128-SHA256 772 5963 -% 997561 2435 991462 2843 0 0 192.168.146.78 CH - [2015-05-20 18:13:32.518075] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68649192.522829f482968" ViZoLKwxQzZrjCzQBLUAAAAp TLSv1.2 ECDHE-RSA-AES128-SHA256 804 9683 -% 1804272 4054 790952 4491 0 0 192.168.146.78 CH - [2015-05-20 18:13:36.598479] "GET /EMail/inbox.aspx HTTP/1.1" 200 51637 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68649192.522829f482968" ViZoMKwxQzZrjCzQBLgAAAAm TLSv1.2 ECDHE-RSA-AES128-SHA256 486 52801 -% 2118488 2016 618608 18274 0 0 192.168.146.78 CH - [2015-05-20 18:13:40.872693] "GET /EMail/message.aspx?&mailId=3890_24&folderId=2634_79&mailPos=0 HTTP/1.1" 200 15707 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68649192.522829f482968" ViZoNKwxQzZrjCzQBLkAAAAu TLSv1.2 ECDHE-RSA-AES128-SHA256 534 16324 -% 1242796 4602 203477 33574 0 0 192.168.68.85 CH - [2015-05-20 18:23:13.546940] "GET /EMail/login.aspx?username=john.smith@govcert.com HTTP/1.1" 200 7346 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "16870702.5228badb316bc" ViZqcawxQzZrjCzQBQ4AAAAE TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 692 11952 -% 933377 1977 928491 2237 0 0 192.168.68.85 CH - [2015-05-20 18:23:14.524498] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/login.aspx?username=john.smith@govcert.com" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "16870702.5228badb316bc" ViZqcqwxQzZrjCzQBRAAAAAI TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 480 2545 14% 913654 2951 909212 128 0 0 192.168.68.85 CH - [2015-05-20 18:23:15.460559] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/css/NNstyle.css" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "16870702.5228badb316bc" ViZqc6wxQzZrjCzQBREAAAAG TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 471 1792 -% 765138 1878 762663 128 0 0 192.168.68.85 CH - [2015-05-20 18:23:20.203992] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/css/NNstyle.css" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "16870702.5228badb316bc" ViZqeKwxQzZrjCzQBRMAAAAF TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 469 2088 -% 941756 3033 937614 181 0 0 192.168.68.85 CH - [2015-05-20 18:23:24.690242] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx?username=john.smith@govcert.com" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "16870702.5228badb316bc" ViZqfKwxQzZrjCzQBRQAAAAH TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 468 7992 22% 995412 3010 987941 163 0 0 192.168.68.85 CH - [2015-05-20 18:23:28.949737] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@govcert.com" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "16870702.5228badb316bc" ViZqgKwxQzZrjCzQBRYAAAAM TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 662 421 -% 1055985 5264 49872 176 0 0 192.168.68.85 CH - [2015-05-20 18:23:30.027267] "GET /EMail/main.aspx HTTP/1.1" 200 3392 "https://www.example.com/EMail/login.aspx?username=john.smith@govcert.com" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "16870702.5228badb316bc" ViZqgqwxQzZrjCzQBRgAAAAN TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 518 3808 -% 909816 2829 905168 1207 0 0 192.168.68.85 CH - [2015-05-20 18:23:30.981540] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "16870702.5228badb316bc" ViZqgqwxQzZrjCzQBxQzZrjK TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 438 4096 23% 713971 3808 708188 289 0 0 192.168.68.85 CH - [2015-05-20 18:23:31.718488] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "16870702.5228badb316bc" ViZqg6wxQzZrjCzQBRoAAAAJ TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 485 4128 -% 568017 1886 555849 9719 0 0 192.168.68.85 CH - [2015-05-20 18:23:32.954466] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "16870702.5228badb316bc" ViZqhKwxQzZrjCzQBRsAAAAO TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 471 1248 -% 936920 2386 933667 227 0 0 192.168.68.85 CH - [2015-05-20 18:23:36.144256] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "16870702.5228badb316bc" ViZqiKwxQzZrjCzQBR0AAAAU TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 466 527 -% 874924 2923 871267 119 0 0 192.168.146.78 CH - [2015-05-20 19:10:10.653113] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7350 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68649192.522829f482968" ViZ1cqwxQzZrjCzQBsgAAAAL TLSv1.2 ECDHE-RSA-AES128-SHA256 799 11795 -% 987615 3895 979000 3657 0 0 192.168.146.78 CH - [2015-05-20 19:10:14.259986] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68649192.522829f482968" ViZ1dqwxQzZrjCzQBskAAAAR TLSv1.2 ECDHE-RSA-AES128-SHA256 678 453 -% 1077051 3647 72594 201 0 0 192.168.146.78 CH - [2015-05-20 19:10:15.444898] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68649192.522829f482968" ViZ1d6wxQzZrjCzQBssAAAAN TLSv1.2 ECDHE-RSA-AES128-SHA256 534 3882 -% 851817 2937 846261 1867 0 0 192.168.146.78 CH - [2015-05-20 19:10:16.524897] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68649192.522829f482968" ViZ1eKwxQzZrjCzQBswAAAAK TLSv1.2 ECDHE-RSA-AES128-SHA256 486 4202 -% 1183977 2918 170111 10311 0 0 192.168.146.78 CH - [2015-05-20 19:10:16.841800] "GET /EMail/overview.aspx HTTP/1.1" 200 5308 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68649192.522829f482968" ViZ1eKwxQzZrjCzQBs4AAAAO TLSv1.2 ECDHE-RSA-AES128-SHA256 772 5963 -% 1602560 2772 595434 3611 0 0 192.168.146.78 CH - [2015-05-20 19:10:16.809796] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68649192.522829f482968" ViZ1eKwxQzZrjCzQBs0AAAAJ TLSv1.2 ECDHE-RSA-AES128-SHA256 804 9683 -% 2067259 3827 54732 4490 0 0 192.168.146.78 CH - [2015-05-20 19:10:28.027830] "GET /EMail/inbox.aspx HTTP/1.1" 200 52004 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "68649192.522829f482968" ViZ1hKwxQzZrjCzQBs8AAAAQ TLSv1.2 ECDHE-RSA-AES128-SHA256 772 27396 -% 2240259 2921 737968 15564 0 0 192.168.146.78 CH - [2015-05-20 19:10:32.172701] "GET /EMail/inbox.aspx HTTP/1.1" 200 52004 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68649192.522829f482968" ViZ1iKwxQzZrjCzRRNsAAABX TLSv1.2 ECDHE-RSA-AES128-SHA256 772 53346 -% 2204412 2980 696925 19517 0 0 192.168.146.78 CH - [2015-05-20 19:10:38.431964] "GET /EMail/message.aspx?&mailId=3889_50&folderId=2634_79&mailPos=1 HTTP/1.1" 200 26038 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68649192.522829f482968" ViZ1jqwxQzZrjCzRRNwAAABZ TLSv1.2 ECDHE-RSA-AES128-SHA256 534 26835 -% 1470225 2916 416126 44704 0 0 192.168.146.78 CH - [2015-05-20 19:10:53.457834] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68649192.522829f482968" ViZ1nawxQzZrjCzQBtUAAAAY TLSv1.2 ECDHE-RSA-AES128-SHA256 804 9683 -% 1689915 3814 677481 4543 0 0 192.168.146.78 CH - [2015-05-20 19:10:53.448948] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 51996 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68649192.522829f482968" ViZ1nawxQzZrjCzQBtQAAAAT TLSv1.2 ECDHE-RSA-AES128-SHA256 788 53330 -% 2531498 3409 21152 20904 0 0 192.168.146.78 CH - [2015-05-20 19:10:57.739930] "GET /EMail/message.aspx?&mailId=3890_47&folderId=2634_79&mailPos=0 HTTP/1.1" 200 17853 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68649192.522829f482968" ViZ1oawxQzZrjCzQBtcAAAAc TLSv1.2 ECDHE-RSA-AES128-SHA256 550 18521 -% 1211331 4698 169901 34571 0 0 192.168.146.78 CH - [2015-05-20 19:15:23.337772] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68649192.522829f482968" ViZ2q6wxQzZrjCzRROsAAABn TLSv1.2 ECDHE-RSA-AES128-SHA256 879 13371 -% 1609310 3219 597255 4558 0 0 192.168.146.78 CH - [2015-05-20 19:15:23.314674] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 51988 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "68649192.522829f482968" ViZ2q6wxQzZrjCzRROoAAABm TLSv1.2 ECDHE-RSA-AES128-SHA256 863 31084 -% 2192315 2891 693121 16006 0 0 192.168.146.78 CH - [2015-05-20 19:15:36.657963] "GET /EMail/newMessage.aspx?action=reply&mailId=3890_47&folderId=2634_79&showPics=false HTTP/1.1" 200 27491 "https://www.example.com/EMail/message.aspx?&mailId=3890_47&folderId=2634_79&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68649192.522829f482968" ViZ2uKwxQzZrjCzQBwQAAAAF TLSv1.2 ECDHE-RSA-AES128-SHA256 959 32156 -% 1314594 4559 248662 53051 3 3 192.168.146.78 CH - [2015-05-20 19:15:38.698304] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3890_47&folderId=2634_79&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68649192.522829f482968" ViZ2uqwxQzZrjCzQBwUAAAAH TLSv1.2 ECDHE-RSA-AES128-SHA256 566 3402 -% 874051 2970 861811 8495 0 0 192.168.146.78 CH - [2015-05-20 19:15:40.434712] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5888 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3890_47&folderId=2634_79&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68649192.522829f482968" ViZ2vKwxQzZrjCzQBwcAAAAM TLSv1.2 ECDHE-RSA-AES128-SHA256 836 9171 -% 863468 3208 0 0 0 0 192.168.146.78 CH - [2015-05-20 19:16:04.880269] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3890_47&folderId=2634_79&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68649192.522829f482968" ViZ21KwxQzZrjCzQBwkAAAAK TLSv1.2 ECDHE-RSA-AES128-SHA256 10297 630 -% 1928080 645199 130625 222 83 0 192.168.146.78 CH - [2015-05-20 19:16:07.209940] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4045 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3890_47&folderId=2634_79&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68649192.522829f482968" ViZ216wxQzZrjCzQBwsAAAAJ TLSv1.2 ECDHE-RSA-AES128-SHA256 678 4522 -% 886994 4849 874476 7139 0 0 192.168.146.78 CH - [2015-05-20 19:16:18.169146] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68649192.522829f482968" ViZ24qwxQzZrjCzQBw8AAAAW TLSv1.2 ECDHE-RSA-AES128-SHA256 804 9683 -% 1718857 3379 706758 4449 0 0 192.168.146.78 CH - [2015-05-20 19:16:18.169107] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 51995 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68649192.522829f482968" ViZ24qwxQzZrjCzQBw4AAAAP TLSv1.2 ECDHE-RSA-AES128-SHA256 788 53330 -% 2350227 3158 841414 19767 0 0 192.168.146.78 CH - [2015-05-20 19:16:25.345825] "GET /EMail/message.aspx?&mailId=3889_50&folderId=2634_79&mailPos=1 HTTP/1.1" 200 26030 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68649192.522829f482968" ViZ26awxQzZrjCzQBxEAAAAY TLSv1.2 ECDHE-RSA-AES128-SHA256 550 26819 -% 1511977 3303 452715 49179 0 0 192.168.146.78 CH - [2015-05-20 19:18:36.823345] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3889_50&folderId=2634_79&attachmentId=3&token=-6389787613851401E17 HTTP/1.1" 200 37342 "https://www.example.com/EMail/message.aspx?&mailId=3889_50&folderId=2634_79&mailPos=1" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68649192.522829f482968" ViZ3bKwxQzZrjCzQByEAAAAp TLSv1.2 ECDHE-RSA-AES128-SHA256 932 39571 -% 1197511 5389 177399 205 0 0 192.168.146.78 CH - [2015-05-20 19:22:36.776076] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68649192.522829f482968" ViZ4XKwxQzZrjCzQB0oAAAAU TLSv1.2 ECDHE-RSA-AES128-SHA256 879 13371 -% 1608448 3721 595874 4545 0 0 192.168.146.78 CH - [2015-05-20 19:22:36.776247] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 51994 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68649192.522829f482968" ViZ4XKwxQzZrjCzQB0sAAAAQ TLSv1.2 ECDHE-RSA-AES128-SHA256 863 57018 -% 2547353 3264 843732 19148 0 0 192.168.146.78 CH - [2015-05-20 19:23:12.354823] "GET /EMail/message.aspx?&mailId=3884_16&folderId=2634_79&mailPos=13 HTTP/1.1" 200 20241 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68649192.522829f482968" ViZ4gKwxQzZrjCzQB1MAAAAc TLSv1.2 ECDHE-RSA-AES128-SHA256 836 21151 -% 1462946 3101 408694 38250 0 0 192.168.146.78 CH - [2015-05-20 19:23:29.051846] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68649192.522829f482968" ViZ4kawxQzZrjCzQB1gAAAAe TLSv1.2 ECDHE-RSA-AES128-SHA256 804 9683 -% 1712104 3625 699815 4499 0 0 192.168.146.78 CH - [2015-05-20 19:23:29.011639] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 51996 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68649192.522829f482968" ViZ4kawxQzZrjCzQB1cAAAAa TLSv1.2 ECDHE-RSA-AES128-SHA256 788 53330 -% 2459322 3305 947481 21921 0 0 192.168.146.78 CH - [2015-05-20 19:23:53.221986] "GET /EMail/message.aspx?&mailId=3887_72&folderId=2634_79&mailPos=6 HTTP/1.1" 200 15288 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68649192.522829f482968" ViZ4qawxQzZrjCzQB14AAAAk TLSv1.2 ECDHE-RSA-AES128-SHA256 836 16085 -% 1376602 4755 339706 30711 0 0 192.168.146.78 CH - [2015-05-20 19:24:01.234707] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68649192.522829f482968" ViZ4sawxQzZrjCzQB2EAAAAr TLSv1.2 ECDHE-RSA-AES128-SHA256 804 9683 -% 1468771 3822 456688 4444 0 0 192.168.146.78 CH - [2015-05-20 19:24:01.196812] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 51995 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68649192.522829f482968" ViZ4sawxQzZrjCzQB2AAAAAm TLSv1.2 ECDHE-RSA-AES128-SHA256 788 53330 -% 2224465 2323 761524 15870 0 0 192.168.12.193 CH - [2015-05-20 19:25:03.063453] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3918 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "2b985641.5228c8acdd19d" ViZ476wxQzZrjCzQB2sAAAAs TLSv1.2 ECDHE-RSA-AES256-SHA384 659 8706 -% 1043799 1170 41435 183 0 0 192.168.227.145 CH - [2015-05-20 22:57:47.225270] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7356 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "a2e814a2.5228f839b78b6" Viaqy6wxQzZrjCzQDrUAAAAx TLSv1.2 ECDHE-RSA-AES256-SHA384 915 11923 -% 991703 2490 983296 3862 3 0 192.168.227.145 CH - [2015-05-20 22:57:48.641348] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "a2e814a2.5228f839b78b6" ViaqzKwxQzZrjCzQDrgAAAAj TLSv1.2 ECDHE-RSA-AES256-SHA384 964 928 56% 791812 4940 784693 157 3 0 192.168.227.145 CH - [2015-05-20 22:57:48.471426] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "a2e814a2.5228f839b78b6" ViaqzKwxQzZrjCzQDrYAAAAl TLSv1.2 ECDHE-RSA-AES256-SHA384 646 2777 14% 1027946 5038 19883 136 3 0 192.168.227.145 CH - [2015-05-20 22:57:48.685946] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "a2e814a2.5228f839b78b6" ViaqzKwxQzZrjCzRR-UAAABb TLSv1.2 ECDHE-RSA-AES256-SHA384 948 8781 22% 843911 5078 833523 135 3 0 192.168.227.145 CH - [2015-05-20 22:57:48.687248] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "a2e814a2.5228f839b78b6" ViaqzKwxQzZrjCzQDroAAAAw TLSv1.2 ECDHE-RSA-AES256-SHA384 948 1979 -% 844037 3999 838152 121 3 0 192.168.227.145 CH - [2015-05-20 22:57:48.603507] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "a2e814a2.5228f839b78b6" ViaqzKwxQzZrjCzQDrcAAAAo TLSv1.2 ECDHE-RSA-AES256-SHA384 964 2208 22% 1062588 4227 56034 162 3 0 192.168.227.145 CH - [2015-05-20 22:57:48.660334] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "a2e814a2.5228f839b78b6" ViaqzKwxQzZrjCzQDrkAAAAq TLSv1.2 ECDHE-RSA-AES256-SHA384 964 4485 23% 1092621 4776 84376 165 3 0 192.168.227.145 CH - [2015-05-20 22:57:50.147478] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "a2e814a2.5228f839b78b6" ViaqzqwxQzZrjCzQDr0AAAA0 TLSv1.2 ECDHE-RSA-AES256-SHA384 630 1898 -% 847420 5059 840762 126 3 0 192.168.227.145 CH - [2015-05-20 22:58:10.836462] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "a2e814a2.5228f839b78b6" Viaq4qwxQzZrjCzQDr8AAAA9 TLSv1.2 ECDHE-RSA-AES256-SHA384 1261 662 -% 1140370 9058 120580 182 3 0 192.168.227.145 CH - [2015-05-20 22:58:12.212611] "GET /EMail/main.aspx HTTP/1.1" 200 3388 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "a2e814a2.5228f839b78b6" Viaq5KwxQzZrjCzQDsAAAAA4 TLSv1.2 ECDHE-RSA-AES256-SHA384 710 3898 -% 861570 5066 849138 2979 3 0 192.168.227.145 CH - [2015-05-20 22:58:13.606310] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "a2e814a2.5228f839b78b6" Viaq5awxQzZrjCzQDsEAAAA6 TLSv1.2 ECDHE-RSA-AES256-SHA384 662 4218 -% 901752 4796 886977 8498 3 0 192.168.227.145 CH - [2015-05-20 22:58:13.822300] "GET /EMail/overview.aspx HTTP/1.1" 200 5289 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "a2e814a2.5228f839b78b6" Viaq5awxQzZrjCzQDsMAAAA@ TLSv1.2 ECDHE-RSA-AES256-SHA384 980 5995 -% 747241 2903 739816 2785 3 0 192.168.227.145 CH - [2015-05-20 22:58:13.778254] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "a2e814a2.5228f839b78b6" Viaq5awxQzZrjCzQDsIAAAA8 TLSv1.2 ECDHE-RSA-AES256-SHA384 996 9843 -% 1220092 6018 206337 2978 3 0 192.168.227.145 CH - [2015-05-20 22:58:14.828488] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "a2e814a2.5228f839b78b6" Viaq5qwxQzZrjCzQDsQAAAA7 TLSv1.2 ECDHE-RSA-AES256-SHA384 614 1354 -% 914455 5039 907933 129 3 0 192.168.227.145 CH - [2015-05-20 22:58:15.142548] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "a2e814a2.5228f839b78b6" Viaq56wxQzZrjCzQDsUAAAA- TLSv1.2 ECDHE-RSA-AES256-SHA384 662 1370 -% 855426 5047 848903 128 3 0 192.168.227.145 CH - [2015-05-20 22:58:25.767281] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "a2e814a2.5228f839b78b6" Viaq8awxQzZrjCzQDscAAAAI TLSv1.2 ECDHE-RSA-AES256-SHA384 1000 646 -% 1096346 3310 91725 132 3 0 192.168.227.145 CH - [2015-05-20 22:58:27.247352] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "a2e814a2.5228f839b78b6" Viaq86wxQzZrjCzQDsgAAAAG TLSv1.2 ECDHE-RSA-AES256-SHA384 662 815 75% 710926 3253 706105 229 3 0 192.168.227.145 CH - [2015-05-20 22:58:28.517491] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "https://www.example.com/EMail/index.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "a2e814a2.5228f839b78b6" Viaq9KwxQzZrjCzQDskAAAAD TLSv1.2 ECDHE-RSA-AES256-SHA384 678 373 -% 942975 3558 937510 156 3 0 192.168.227.145 CH - [2015-05-20 22:58:29.667433] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "https://www.example.com/EMail/index.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "a2e814a2.5228f839b78b6" Viaq9awxQzZrjCzQDswAAAAL TLSv1.2 ECDHE-RSA-AES256-SHA384 662 7850 -% 844179 4925 833778 3594 3 0 192.168.32.7 CH - [2015-05-21 06:52:42.307379] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9546db5c.52296260beb33" VicaGqwxQzZrjHXWnjcAAAA6 TLSv1.2 ECDHE-RSA-AES128-SHA256 627 5651 -% 889383 958 887745 154 0 0 192.168.32.7 CH - [2015-05-21 07:07:22.061050] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "bebc0fe5.52296250588f1" VicdiqwxQzZrjHXY1T0AAABY TLSv1.2 ECDHE-RSA-AES128-SHA256 819 13371 -% 1402803 4271 389760 4500 0 0 192.168.186.76 CH - [2015-05-21 07:26:41.972752] "GET /EMail/main.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" ViciEawxQzZrjHXY1dEAAAB0 TLSv1.2 ECDHE-RSA-AES256-SHA384 919 12118 -% 918297 4318 908715 3498 3 0 192.168.186.76 CH - [2015-05-21 07:26:42.991513] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" ViciEqwxQzZrjHXY1dMAAAB1 TLSv1.2 ECDHE-RSA-AES256-SHA384 646 2015 22% 1012794 4044 6397 190 3 0 192.168.186.76 CH - [2015-05-21 07:26:43.064450] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" ViciE6wxQzZrjHXY1dQAAAB3 TLSv1.2 ECDHE-RSA-AES256-SHA384 1164 896 56% 948457 6385 940279 127 3 0 192.168.186.76 CH - [2015-05-21 07:26:43.067585] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" ViciE6wxQzZrjHXY1dUAAAB4 TLSv1.2 ECDHE-RSA-AES256-SHA384 1180 8021 22% 953959 6262 943490 131 3 0 192.168.186.76 CH - [2015-05-21 07:26:46.832675] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3ad23c0b.522969fe8e623" ViciFqwxQzZrjHXY1dYAAAB5 TLSv1.2 ECDHE-RSA-AES256-SHA384 711 5894 -% 699975 953 698062 192 0 0 192.168.196.112 CH - [2015-05-21 07:29:00.277484] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e26b913.52296a7dd1aec" VicinKwxQzZrjHXY1eUAAABJ TLSv1.2 ECDHE-RSA-AES256-SHA384 655 5699 -% 1051117 613 49822 167 0 0 192.168.169.43 CH - [2015-05-21 07:29:16.644248] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" VicirKwxQzZrjHXY1egAAABN TLSv1.2 ECDHE-RSA-AES256-SHA384 847 5896 22% 1047458 3123 42875 192 0 0 192.168.169.43 CH - [2015-05-21 07:29:16.711273] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" VicirKwxQzZrjHXY1ewAAABP TLSv1.2 ECDHE-RSA-AES256-SHA384 836 8053 22% 1077004 2667 71587 152 0 0 192.168.169.43 CH - [2015-05-21 07:29:16.699319] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" VicirKwxQzZrjHXY1eoAAABO TLSv1.2 ECDHE-RSA-AES256-SHA384 804 928 56% 1152444 2564 148597 341 0 0 192.168.169.43 CH - [2015-05-21 07:29:16.699311] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" VicirKwxQzZrjHXY1ekAAABM TLSv1.2 ECDHE-RSA-AES256-SHA384 852 1979 -% 1329498 2572 326082 144 0 0 192.168.169.43 CH - [2015-05-21 07:29:16.705084] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" VicirKwxQzZrjHXY1esAAABQ TLSv1.2 ECDHE-RSA-AES256-SHA384 836 4485 23% 1376236 3070 371511 144 0 0 192.168.169.43 CH - [2015-05-21 07:29:18.217522] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" VicirqwxQzZrjHXY1e0AAABR TLSv1.2 ECDHE-RSA-AES256-SHA384 534 1898 -% 1042174 2044 39465 148 0 0 192.168.169.43 CH - [2015-05-21 07:29:45.174741] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" ViciyawxQzZrjHXY1fIAAABW TLSv1.2 ECDHE-RSA-AES256-SHA384 852 2379 -% 906328 3196 902097 191 0 0 192.168.169.43 CH - [2015-05-21 07:29:48.247387] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" VicizKwxQzZrjHXY1fMAAABX TLSv1.2 ECDHE-RSA-AES256-SHA384 678 469 -% 929270 5238 923146 160 0 0 192.168.169.43 CH - [2015-05-21 07:29:49.198017] "GET /EMail/main.aspx HTTP/1.1" 200 3400 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" VicizawxQzZrjHXY1fQAAABY TLSv1.2 ECDHE-RSA-AES256-SHA384 534 3914 -% 822496 2115 818531 1182 0 0 192.168.169.43 CH - [2015-05-21 07:29:50.129909] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" VicizqwxQzZrjHXY1fUAAABa TLSv1.2 ECDHE-RSA-AES256-SHA384 486 4234 -% 906550 2341 896608 6705 0 0 192.168.169.43 CH - [2015-05-21 07:29:50.182300] "GET /EMail/overview.aspx HTTP/1.1" 200 5298 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" VicizqwxQzZrjHXWnuwAAAA0 TLSv1.2 ECDHE-RSA-AES256-SHA384 804 6011 -% 1228831 1937 224295 2053 0 0 192.168.169.43 CH - [2015-05-21 07:29:50.136571] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" VicizqwxQzZrjHXWnusAAAAz TLSv1.2 ECDHE-RSA-AES256-SHA384 836 9859 -% 1629945 2414 618638 4888 0 0 192.168.169.43 CH - [2015-05-21 07:29:51.818351] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" Viciz6wxQzZrjHXWnu4AAAA3 TLSv1.2 ECDHE-RSA-AES256-SHA384 550 1370 -% 442448 1880 439905 139 0 0 192.168.169.43 CH - [2015-05-21 07:29:51.469722] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" Viciz6wxQzZrjHXWnu0AAAA1 TLSv1.2 ECDHE-RSA-AES256-SHA384 518 1354 -% 833150 2963 829365 121 0 0 192.168.169.43 CH - [2015-05-21 07:30:14.830808] "GET /EMail/inbox.aspx HTTP/1.1" 200 8595 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" Vici5qwxQzZrjHXWnvQAAAA9 TLSv1.2 ECDHE-RSA-AES256-SHA384 804 9392 -% 1069282 2130 63125 3132 0 0 192.168.169.43 CH - [2015-05-21 07:30:15.953968] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" Vici56wxQzZrjHXWnvYAAAA@ TLSv1.2 ECDHE-RSA-AES256-SHA384 820 827 -% 822663 1753 820132 266 0 0 192.168.169.43 CH - [2015-05-21 07:30:15.947378] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" Vici56wxQzZrjHXWnvUAAAA- TLSv1.2 ECDHE-RSA-AES256-SHA384 502 634 -% 1045417 2193 42438 189 0 0 192.168.169.43 CH - [2015-05-21 07:30:16.003312] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" Vici6KwxQzZrjHXY1fkAAABe TLSv1.2 ECDHE-RSA-AES256-SHA384 820 2107 -% 1027061 2006 24271 171 0 0 192.168.169.43 CH - [2015-05-21 07:30:18.455261] "GET /EMail/message.aspx?&mailId=3890_50&folderId=75_57&mailPos=0 HTTP/1.1" 200 13013 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" Vici6qwxQzZrjHXY1foAAABg TLSv1.2 ECDHE-RSA-AES256-SHA384 534 13700 -% 1206133 4795 193209 6726 0 0 192.168.169.43 CH - [2015-05-21 07:30:21.031047] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3890_50&folderId=75_57&attachmentId=2&token=-20220658210883888E17 HTTP/1.1" 200 4096 "https://www.example.com/EMail/message.aspx?&mailId=3890_50&folderId=75_57&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" Vici7awxQzZrjHXY1fsAAABf TLSv1.2 ECDHE-RSA-AES256-SHA384 630 4857 -% 1179367 6450 167913 181 0 0 192.168.212.2 CH - [2015-05-21 07:31:16.114377] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7379 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53f17b79.52296aff5cfc9" VicjJKwxQzZrjHXY1gIAAABm TLSv1 ECDHE-RSA-AES256-SHA 704 11809 -% 934410 2447 928548 2665 0 0 192.168.212.2 CH - [2015-05-21 07:31:17.964938] "GET /EMail/images/icon10.ico HTTP/1.1" 304 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b85cf34.52296b0120c8a" VicjJawxQzZrjHXWnv0AAAAH TLSv1 ECDHE-RSA-AES256-SHA 720 4204 -% 822428 645 820624 390 0 0 192.168.212.2 CH - [2015-05-21 07:31:29.503146] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53f17b79.52296aff5cfc9" VicjMawxQzZrjHXY1gMAAABo TLSv1 ECDHE-RSA-AES256-SHA 1032 4257 -% 1091171 4481 85763 151 0 0 192.168.212.2 CH - [2015-05-21 07:31:31.804404] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53f17b79.52296aff5cfc9" VicjM6wxQzZrjHXY1gYAAABq TLSv1 ECDHE-RSA-AES256-SHA 840 7990 -% 1132479 1975 123380 6605 0 0 192.168.212.2 CH - [2015-05-21 07:31:31.736209] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53f17b79.52296aff5cfc9" VicjM6wxQzZrjHXY1gUAAABs TLSv1 ECDHE-RSA-AES256-SHA 757 5883 -% 1440019 1872 435456 2186 0 0 192.168.212.2 CH - [2015-05-21 07:31:31.735090] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53f17b79.52296aff5cfc9" VicjM6wxQzZrjHXY1gQAAABr TLSv1 ECDHE-RSA-AES256-SHA 773 9379 -% 2221084 3899 210213 3088 0 0 192.168.212.2 CH - [2015-05-21 07:31:38.524738] "GET /EMail/tree.aspx?oNode-sharedTree=treePreferences&sNode-sharedTree=treePreferences HTTP/1.1" 200 10871 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53f17b79.52296aff5cfc9" VicjOqwxQzZrjHXY1ggAAABu TLSv1 ECDHE-RSA-AES256-SHA 630 11649 -% 1544823 3706 532401 3409 0 0 192.168.212.2 CH - [2015-05-21 07:31:44.681941] "GET /EMail/changePassword.aspx HTTP/1.1" 200 5181 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePreferences&sNode-sharedTree=treePreferences" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53f17b79.52296aff5cfc9" VicjQKwxQzZrjHXY1gkAAABw TLSv1 ECDHE-RSA-AES256-SHA 614 5626 -% 1154581 3101 148580 1953 0 0 192.168.212.2 CH - [2015-05-21 07:31:56.101320] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/changePassword.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53f17b79.52296aff5cfc9" VicjTKwxQzZrjHXWnwMAAAAK TLSv1 ECDHE-RSA-AES256-SHA 1048 4193 -% 1160022 7679 151229 278 0 0 192.168.169.43 CH - [2015-05-21 07:32:11.922155] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8586 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" VicjW6wxQzZrjHXY1g8AAAB1 TLSv1.2 ECDHE-RSA-AES256-SHA384 804 9376 -% 1682608 2200 674932 4650 0 0 192.168.169.43 CH - [2015-05-21 07:32:11.909393] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" VicjW6wxQzZrjHXY1g4AAAB0 TLSv1.2 ECDHE-RSA-AES256-SHA384 820 9859 -% 1714548 2515 703521 4520 0 0 192.168.169.43 CH - [2015-05-21 07:32:13.683010] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" VicjXawxQzZrjHXY1hAAAAB3 TLSv1.2 ECDHE-RSA-AES256-SHA384 518 1978 -% 1041348 2957 37460 194 0 0 192.168.169.43 CH - [2015-05-21 07:32:16.836765] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" VicjYKwxQzZrjHXY1hMAAAB8 TLSv1.2 ECDHE-RSA-AES256-SHA384 790 405 -% 1195274 5819 188449 194 0 0 192.168.169.43 CH - [2015-05-21 07:32:18.052141] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7292 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" VicjYqwxQzZrjHXY1hQAAAB6 TLSv1.2 ECDHE-RSA-AES256-SHA384 534 7802 -% 1057930 3059 51259 2926 0 0 192.168.169.43 CH - [2015-05-21 07:32:19.809167] "GET /EMail/trash.aspx?dir=desc HTTP/1.1" 200 8680 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" VicjY6wxQzZrjHXY1hUAAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 486 9279 -% 1120892 2219 115284 2666 0 0 192.168.169.43 CH - [2015-05-21 07:32:19.859426] "GET /EMail/tree.aspx?sNode-sharedTree=treeTrash HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" VicjY6wxQzZrjHXY1hYAAAB9 TLSv1.2 ECDHE-RSA-AES256-SHA384 820 9859 -% 1498586 2394 488172 4517 0 0 192.168.169.43 CH - [2015-05-21 07:32:22.513066] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/trash.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" VicjZqwxQzZrjHXY1hcAAAB@ TLSv1.2 ECDHE-RSA-AES256-SHA384 790 405 -% 1104839 9410 94584 185 0 0 192.168.169.43 CH - [2015-05-21 07:32:23.639410] "GET /EMail/trash.aspx?returnedFromDelete=true HTTP/1.1" 200 7279 "https://www.example.com/EMail/trash.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" VicjZ6wxQzZrjHXY1hgAAABA TLSv1.2 ECDHE-RSA-AES256-SHA384 534 7786 -% 1028064 3465 20484 3363 0 0 192.168.169.43 CH - [2015-05-21 07:32:26.322901] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" VicjaqwxQzZrjHXY1hoAAAB- TLSv1.2 ECDHE-RSA-AES256-SHA384 502 453 -% 1074976 2255 71952 185 0 0 192.168.169.43 CH - [2015-05-21 07:32:27.419131] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" Vicja6wxQzZrjHXY1hsAAABB TLSv1.2 ECDHE-RSA-AES256-SHA384 486 815 75% 862231 2084 859290 235 0 0 192.168.169.43 CH - [2015-05-21 07:32:28.365846] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" VicjbKwxQzZrjHXY1hwAAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 454 373 -% 695032 3619 690530 172 0 0 192.168.169.43 CH - [2015-05-21 07:32:29.081811] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" VicjbawxQzZrjHXY1h0AAABD TLSv1.2 ECDHE-RSA-AES256-SHA384 438 7866 -% 977669 1953 971147 3900 0 0 192.168.169.43 CH - [2015-05-21 07:32:30.119839] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" VicjbqwxQzZrjHXY1h4AAABG TLSv1.2 ECDHE-RSA-AES256-SHA384 566 2575 14% 689888 2019 686575 162 0 0 192.168.169.43 CH - [2015-05-21 07:32:30.174778] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" VicjbqwxQzZrjHXY1h8AAABF TLSv1.2 ECDHE-RSA-AES256-SHA384 868 928 56% 872665 2007 869695 203 0 0 192.168.169.43 CH - [2015-05-21 07:32:30.174814] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" VicjbqwxQzZrjHXY1iAAAABI TLSv1.2 ECDHE-RSA-AES256-SHA384 916 454 -% 996049 2996 992095 138 0 0 192.168.169.43 CH - [2015-05-21 07:32:30.181054] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" VicjbqwxQzZrjHXY1iEAAABH TLSv1.2 ECDHE-RSA-AES256-SHA384 868 2208 22% 1067485 2716 63700 122 0 0 192.168.169.43 CH - [2015-05-21 07:32:30.187162] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" VicjbqwxQzZrjHXY1iIAAABJ TLSv1.2 ECDHE-RSA-AES256-SHA384 900 8781 22% 1073530 1830 68652 113 0 0 192.168.169.43 CH - [2015-05-21 07:32:30.180902] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" VicjbqwxQzZrjHXWnwUAAAAP TLSv1.2 ECDHE-RSA-AES256-SHA384 900 4485 23% 1206217 2794 201659 158 0 0 192.168.169.43 CH - [2015-05-21 07:32:31.510760] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a4ef0074.52296a8c779da" Vicjb6wxQzZrjHXWnwYAAAAQ TLSv1.2 ECDHE-RSA-AES256-SHA384 598 261 -% 840237 3092 836335 144 0 0 192.168.212.2 CH - [2015-05-21 07:33:14.883576] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/preferences.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53f17b79.52296aff5cfc9" VicjmqwxQzZrjHXWnw0AAAAZ TLSv1 ECDHE-RSA-AES256-SHA 933 486 -% 938760 8030 929825 158 0 0 192.168.212.2 CH - [2015-05-21 07:33:15.837205] "GET /EMail/main.aspx HTTP/1.1" 200 3411 "https://www.example.com/EMail/preferences.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53f17b79.52296aff5cfc9" Vicjm6wxQzZrjHXWnw4AAAAY TLSv1 ECDHE-RSA-AES256-SHA 550 3834 -% 918682 2211 913952 1823 0 0 192.168.212.2 CH - [2015-05-21 07:33:16.903468] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53f17b79.52296aff5cfc9" VicjnKwxQzZrjHXWnw8AAAAa TLSv1 ECDHE-RSA-AES256-SHA 550 4154 -% 952264 2901 941973 6713 0 0 192.168.212.2 CH - [2015-05-21 07:33:16.935232] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53f17b79.52296aff5cfc9" VicjnKwxQzZrjHXY1icAAABT TLSv1 ECDHE-RSA-AES256-SHA 757 5883 -% 960245 1730 955654 2295 0 0 192.168.212.2 CH - [2015-05-21 07:33:16.930962] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 10879 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53f17b79.52296aff5cfc9" VicjnKwxQzZrjHXY1iYAAABS TLSv1 ECDHE-RSA-AES256-SHA 773 11810 -% 1605208 2563 592496 4172 0 0 192.168.212.2 CH - [2015-05-21 07:33:21.830313] "GET /EMail/preferences.aspx HTTP/1.1" 200 7134 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53f17b79.52296aff5cfc9" VicjoawxQzZrjHXY1ikAAABV TLSv1 ECDHE-RSA-AES256-SHA 582 7578 -% 1194302 1978 188390 3392 0 0 192.168.212.2 CH - [2015-05-21 07:33:21.832992] "GET /EMail/tree.aspx?sNode-sharedTree=treeUserPreferences HTTP/1.1" 200 10879 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53f17b79.52296aff5cfc9" VicjoawxQzZrjHXY1ioAAABW TLSv1 ECDHE-RSA-AES256-SHA 614 11665 -% 1486110 2317 474850 3546 0 0 192.168.212.2 CH - [2015-05-21 07:33:34.253639] "GET /EMail/tree.aspx?sNode-sharedTree=treeCertManag HTTP/1.1" 200 10879 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeUserPreferences" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53f17b79.52296aff5cfc9" VicjrqwxQzZrjHXWnxEAAAAc TLSv1 ECDHE-RSA-AES256-SHA 904 15501 -% 1578244 2604 564391 5701 0 0 192.168.212.2 CH - [2015-05-21 07:34:01.008814] "POST /EMail/certificatesManualP12Outlook.aspx HTTP/1.1" 200 6772 "https://www.example.com/EMail/selectMailNS.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53f17b79.52296aff5cfc9" VicjyawxQzZrjHXY1jMAAABg TLSv1 ECDHE-RSA-AES256-SHA 984 11046 -% 1010019 3269 4015 2193 0 0 192.168.212.2 CH - [2015-05-21 07:35:29.456573] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8476 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeCertManag" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53f17b79.52296aff5cfc9" VickIawxQzZrjHXY1kEAAABv TLSv1 ECDHE-RSA-AES256-SHA 789 9104 -% 1269382 2319 263803 2634 0 0 192.168.212.2 CH - [2015-05-21 07:35:29.456407] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 10879 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeCertManag" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53f17b79.52296aff5cfc9" VickIawxQzZrjHXWnxoAAAAm TLSv1 ECDHE-RSA-AES256-SHA 805 11810 -% 1753609 2544 741778 4048 0 0 192.168.212.2 CH - [2015-05-21 07:35:30.874732] "GET /EMail/images/msgClosed.png HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53f17b79.52296aff5cfc9" VickIqwxQzZrjHXY1kQAAABx TLSv1 ECDHE-RSA-AES256-SHA 869 358 -% 725009 1889 722501 141 0 0 192.168.212.2 CH - [2015-05-21 07:35:30.836687] "GET /EMail/images/attach.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53f17b79.52296aff5cfc9" VickIqwxQzZrjHXY1kIAAABy TLSv1 ECDHE-RSA-AES256-SHA 662 213 -% 998629 2322 995355 204 0 0 192.168.212.2 CH - [2015-05-21 07:35:30.859334] "GET /EMail/images/Highost.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53f17b79.52296aff5cfc9" VickIqwxQzZrjHXY1kMAAABw TLSv1 ECDHE-RSA-AES256-SHA 869 358 -% 1121425 2509 118150 252 0 0 192.168.212.2 CH - [2015-05-21 07:35:40.852198] "GET /EMail HTTP/1.1" 302 223 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "-" VickLKwxQzZrjHXWnxsAAAAo TLSv1 ECDHE-RSA-AES256-SHA 776 4454 -% 769 225 403 194 0 0 192.168.212.2 CH - [2015-05-21 07:35:54.505503] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7379 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53f17b79.52296aff5cfc9" VickOqwxQzZrjHXY1kcAAAB1 TLSv1 ECDHE-RSA-AES256-SHA 840 11654 -% 866006 3166 857844 4441 0 0 192.168.212.2 CH - [2015-05-21 07:36:00.456657] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53f17b79.52296aff5cfc9" VickQKwxQzZrjHXWnx8AAAAt TLSv1 ECDHE-RSA-AES256-SHA 1032 4305 -% 971191 3522 966889 202 0 0 192.168.212.2 CH - [2015-05-21 07:36:08.008684] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53f17b79.52296aff5cfc9" VickSKwxQzZrjHXWnyAAAAAv TLSv1 ECDHE-RSA-AES256-SHA 1016 4257 -% 1083745 4593 78315 144 0 0 192.168.212.2 CH - [2015-05-21 07:36:09.208931] "GET /EMail/main.aspx HTTP/1.1" 200 3411 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53f17b79.52296aff5cfc9" VickSawxQzZrjHXY1kkAAAB4 TLSv1 ECDHE-RSA-AES256-SHA 872 7670 -% 838655 2550 834305 1211 0 0 192.168.212.2 CH - [2015-05-21 07:36:10.309582] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53f17b79.52296aff5cfc9" VickSqwxQzZrjHXWnyIAAAAy TLSv1 ECDHE-RSA-AES256-SHA 840 7990 -% 1112584 2341 102509 7219 0 0 192.168.212.2 CH - [2015-05-21 07:36:10.312140] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53f17b79.52296aff5cfc9" VickSqwxQzZrjHXY1ksAAAB6 TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1714054 2406 703290 4460 0 0 192.168.192.35 CH - [2015-05-21 07:49:42.054711] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" VicndqwxQzZrjHXWn2EAAAA0 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1132 4620 56% 1019815 2144 16870 149 0 0 192.168.192.35 CH - [2015-05-21 07:49:42.050368] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" VicndqwxQzZrjHXWn2AAAAAy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1132 5902 22% 1038216 1901 35480 96 0 0 192.168.192.35 CH - [2015-05-21 07:49:42.062727] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" VicndqwxQzZrjHXY1rUAAABp TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1090 5593 -% 1216943 1682 214662 117 0 0 192.168.192.35 CH - [2015-05-21 07:49:42.056581] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7239 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" VicndqwxQzZrjHXY1rQAAABo TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1122 12067 22% 1258295 1635 253175 133 0 0 192.168.192.35 CH - [2015-05-21 07:49:42.065805] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" VicndqwxQzZrjHXWn2IAAAAz TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1127 8269 23% 1264245 2757 259586 129 0 0 192.168.192.35 CH - [2015-05-21 07:49:43.356109] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" Vicnd6wxQzZrjHXY1rYAAABq TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 507 1685 -% 786992 1867 784341 159 0 0 192.168.192.35 CH - [2015-05-21 07:49:43.408093] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/css/NNstyle.css" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" Vicnd6wxQzZrjHXWn2MAAAA3 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 476 1792 -% 840667 1818 838232 123 0 0 192.168.172.254 CH - [2015-05-21 08:00:51.024020] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqE6wxQzZrjHXY1xEAAABK TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1566 13200 -% 1316967 6636 300372 4005 6 0 192.168.172.254 CH - [2015-05-21 08:00:51.029721] "GET /EMail/overview.aspx HTTP/1.1" 200 5289 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqE6wxQzZrjHXY1xIAAABO TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1540 9732 -% 1356812 9201 344209 2172 6 0 192.168.172.254 CH - [2015-05-21 08:00:52.471100] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqFKwxQzZrjHXY1xMAAABM TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 966 205 -% 956039 14180 939113 161 6 0 192.168.172.254 CH - [2015-05-21 08:00:52.471353] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqFKwxQzZrjHXY1xQAAABQ TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 924 205 -% 1085732 10292 73182 160 6 0 192.168.172.254 CH - [2015-05-21 08:00:55.149799] "GET /EMail/inbox.aspx HTTP/1.1" 200 12103 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqF6wxQzZrjHXY1xUAAABR TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 899 12584 -% 1211764 9923 196062 3791 6 0 192.168.172.254 CH - [2015-05-21 08:00:56.471352] "GET /EMail/images/attach.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqGKwxQzZrjHXY1xYAAABP TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 916 205 -% 1033625 6331 25282 179 6 0 192.168.172.254 CH - [2015-05-21 08:00:56.496686] "GET /EMail/images/msgOpenedReplied.png HTTP/1.1" 200 717 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqGKwxQzZrjHXY1xcAAABU TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 838 1129 -% 1167649 10051 155572 177 6 0 192.168.172.254 CH - [2015-05-21 08:00:57.283274] "GET /EMail/images/active.gif HTTP/1.1" 304 - "https://www.example.com/EMail/css/NNstyle.css" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqGawxQzZrjHXY1xgAAABT TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1490 344 -% 855667 16449 837179 150 6 0 192.168.172.254 CH - [2015-05-21 08:00:58.245012] "GET /EMail/message.aspx?&mailId=3882_23&folderId=1810_98&mailPos=0 HTTP/1.1" 200 22859 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqGqwxQzZrjHXY1xkAAABS TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 941 23398 -% 1605011 6998 549251 45389 6 0 192.168.172.254 CH - [2015-05-21 08:01:31.726555] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 12096 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqO6wxQzZrjHXY1x0AAABY TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1501 12715 -% 1595659 8163 581649 3914 6 0 192.168.172.254 CH - [2015-05-21 08:01:31.728148] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqO6wxQzZrjHXY1x4AAABa TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1518 9317 -% 1896739 7453 879080 4475 6 0 192.168.172.254 CH - [2015-05-21 08:01:35.392393] "GET /EMail/message.aspx?&mailId=3881_81&folderId=1810_98&mailPos=1 HTTP/1.1" 200 18892 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqP6wxQzZrjHXY1yAAAABd TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 950 19402 -% 1333791 7892 284976 37967 6 0 192.168.172.254 CH - [2015-05-21 08:01:45.696733] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 12087 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqSawxQzZrjHXY1yMAAABe TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1498 12677 -% 1308229 13930 288493 3731 6 0 192.168.172.254 CH - [2015-05-21 08:01:45.697452] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqSawxQzZrjHXY1yQAAABf TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1515 9317 -% 1477789 10507 458566 4019 6 0 192.168.172.254 CH - [2015-05-21 08:01:48.871056] "GET /EMail/message.aspx?&mailId=3879_44&folderId=1810_98&mailPos=2 HTTP/1.1" 200 22167 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqTKwxQzZrjHXY1yUAAABh TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 950 22706 -% 1383027 11806 321253 46432 6 0 192.168.172.254 CH - [2015-05-21 08:01:57.691241] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3879_44&folderId=1810_98&mailPos=2" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqVawxQzZrjHXY1ygAAABj TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1739 494 -% 1127980 8153 117611 125 6 0 192.168.172.254 CH - [2015-05-21 08:01:58.869101] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 10855 "https://www.example.com/EMail/message.aspx?&mailId=3879_44&folderId=1810_98&mailPos=2" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqVqwxQzZrjHXY1ykAAABk TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 991 11307 -% 1506271 10826 490200 3486 6 0 192.168.172.254 CH - [2015-05-21 08:02:01.928889] "GET /EMail/message.aspx?&mailId=3879_26&folderId=1810_98&mailPos=2 HTTP/1.1" 200 17643 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqWawxQzZrjHXY1ysAAABn TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 965 18153 -% 1274387 7739 215587 47882 6 0 192.168.172.254 CH - [2015-05-21 08:02:08.920130] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3879_26&folderId=1810_98&mailPos=2" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqYKwxQzZrjHXWn5gAAAAu TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1739 494 -% 1168245 10644 155226 167 6 0 192.168.172.254 CH - [2015-05-21 08:02:10.116723] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 9649 "https://www.example.com/EMail/message.aspx?&mailId=3879_26&folderId=1810_98&mailPos=2" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqYqwxQzZrjHXWn5kAAAAw TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 991 10100 -% 1160909 6769 147297 5009 6 0 192.168.172.254 CH - [2015-05-21 08:02:14.671219] "GET /EMail/sent.aspx?dir=desc HTTP/1.1" 200 12813 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqZqwxQzZrjHXWn5oAAAAv TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 930 13294 -% 1561232 10706 541298 6262 6 0 192.168.172.254 CH - [2015-05-21 08:02:14.724539] "GET /EMail/tree.aspx?sNode-sharedTree=treeSent HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqZqwxQzZrjHXWn5sAAAAx TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1514 9317 -% 1706597 9798 687047 4282 6 0 192.168.172.254 CH - [2015-05-21 08:02:22.147464] "GET /EMail/message.aspx?&mailId=3877_100&folderId=1810_99&mailPos=1 HTTP/1.1" 200 12874 "https://www.example.com/EMail/sent.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqbqwxQzZrjHXY1zAAAABt TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1517 13464 -% 963490 10309 926438 25000 6 0 192.168.172.254 CH - [2015-05-21 08:02:26.671949] "GET /EMail/newMessage.aspx?action=resend&mailId=3877_100&to=john.smith@ourindustry.com&folderId=1810_99&showPics=false HTTP/1.1" 200 14149 "https://www.example.com/EMail/message.aspx?&mailId=3877_100&folderId=1810_99&mailPos=1" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqcqwxQzZrjHXY1zEAAABs TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1036 14630 -% 864731 10231 826498 25176 9 3 192.168.172.254 CH - [2015-05-21 08:02:27.597469] "GET /EMail/scripts/tinymce/tinymce.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=resend&mailId=3877_100&to=john.smith@ourindustry.com&folderId=1810_99&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" Vicqc6wxQzZrjHXY1zIAAABr TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1001 208 -% 712361 10166 699593 182 6 0 192.168.172.254 CH - [2015-05-21 08:02:28.629801] "GET /EMail/scripts/tinymce/themes/modern/theme.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=resend&mailId=3877_100&to=john.smith@ourindustry.com&folderId=1810_99&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqdKwxQzZrjHXY1zUAAABx TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1578 344 -% 902809 7838 892092 190 6 0 192.168.172.254 CH - [2015-05-21 08:02:28.630757] "GET /EMail/scripts/tinymce/plugins/print/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=resend&mailId=3877_100&to=john.smith@ourindustry.com&folderId=1810_99&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqdKwxQzZrjHXY1zYAAABy TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1578 343 -% 959278 7470 950308 113 6 0 192.168.172.254 CH - [2015-05-21 08:02:28.564566] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2942 "https://www.example.com/EMail/newMessage.aspx?action=resend&mailId=3877_100&to=john.smith@ourindustry.com&folderId=1810_99&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqdKwxQzZrjHXY1zMAAABv TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 998 3335 -% 1030157 10094 11938 6696 6 0 192.168.172.254 CH - [2015-05-21 08:02:28.632102] "GET /EMail/scripts/tinymce/plugins/paste/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=resend&mailId=3877_100&to=john.smith@ourindustry.com&folderId=1810_99&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqdKwxQzZrjHXWn54AAAAz TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1580 345 -% 996266 6541 988070 109 6 0 192.168.172.254 CH - [2015-05-21 08:02:28.569013] "GET /EMail/scripts/tinymce/langs/de.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=resend&mailId=3877_100&to=john.smith@ourindustry.com&folderId=1810_99&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqdKwxQzZrjHXY1zQAAABu TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1563 344 -% 1119919 6671 111202 113 6 0 192.168.172.254 CH - [2015-05-21 08:02:28.631528] "GET /EMail/scripts/tinymce/plugins/preview/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=resend&mailId=3877_100&to=john.smith@ourindustry.com&folderId=1810_99&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqdKwxQzZrjHXWn50AAAAy TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1581 344 -% 1312021 6421 304037 262 6 0 192.168.172.254 CH - [2015-05-21 08:02:29.592568] "GET /EMail/scripts/tinymce/plugins/searchreplace/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=resend&mailId=3877_100&to=john.smith@ourindustry.com&folderId=1810_99&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqdawxQzZrjHXY1zcAAABw TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1020 206 -% 729582 8225 718843 172 6 0 192.168.172.254 CH - [2015-05-21 08:02:29.619804] "GET /EMail/scripts/tinymce/plugins/fullpage/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=resend&mailId=3877_100&to=john.smith@ourindustry.com&folderId=1810_99&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqdawxQzZrjHXY1zgAAABz TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1015 206 -% 930058 10574 916247 505 6 0 192.168.172.254 CH - [2015-05-21 08:02:29.671863] "GET /EMail/scripts/tinymce/plugins/charmap/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=resend&mailId=3877_100&to=john.smith@ourindustry.com&folderId=1810_99&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqdawxQzZrjHXY1zkAAAB2 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1014 206 -% 917269 9583 898655 110 6 0 192.168.172.254 CH - [2015-05-21 08:02:29.723709] "GET /EMail/scripts/tinymce/plugins/visualblocks/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=resend&mailId=3877_100&to=john.smith@ourindustry.com&folderId=1810_99&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqdawxQzZrjHXY1zoAAAB1 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1019 206 -% 940930 9606 929248 147 6 0 192.168.172.254 CH - [2015-05-21 08:02:29.673221] "GET /EMail/scripts/tinymce/plugins/insertdatetime/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=resend&mailId=3877_100&to=john.smith@ourindustry.com&folderId=1810_99&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqdawxQzZrjHXWn58AAAA3 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1021 206 -% 1194705 8195 184686 174 6 0 192.168.172.254 CH - [2015-05-21 08:02:30.010415] "GET /EMail/scripts/tinymce/plugins/hr/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=resend&mailId=3877_100&to=john.smith@ourindustry.com&folderId=1810_99&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqdqwxQzZrjHXWn6AAAAA1 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1008 205 -% 891838 10033 879855 116 6 0 192.168.172.254 CH - [2015-05-21 08:02:30.356509] "GET /EMail/scripts/tinymce/plugins/link/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=resend&mailId=3877_100&to=john.smith@ourindustry.com&folderId=1810_99&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqdqwxQzZrjHXY1zsAAAB0 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1011 206 -% 992412 6385 984657 125 6 0 192.168.172.254 CH - [2015-05-21 08:02:30.579028] "GET /EMail/scripts/tinymce/plugins/anchor/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=resend&mailId=3877_100&to=john.smith@ourindustry.com&folderId=1810_99&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqdqwxQzZrjHXY1z0AAAB5 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1012 205 -% 1004790 11607 0 120 6 0 192.168.172.254 CH - [2015-05-21 08:02:30.645869] "GET /EMail/scripts/tinymce/plugins/textcolor/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=resend&mailId=3877_100&to=john.smith@ourindustry.com&folderId=1810_99&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqdqwxQzZrjHXY1z4AAAB4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1016 206 -% 951585 9664 939625 146 6 0 192.168.172.254 CH - [2015-05-21 08:02:30.694977] "GET /EMail/scripts/tinymce/plugins/visualchars/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=resend&mailId=3877_100&to=john.smith@ourindustry.com&folderId=1810_99&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqdqwxQzZrjHXY1z8AAAB8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1018 206 -% 1057238 9445 45849 229 6 0 192.168.172.254 CH - [2015-05-21 08:02:30.929799] "GET /EMail/scripts/tinymce/plugins/table/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=resend&mailId=3877_100&to=john.smith@ourindustry.com&folderId=1810_99&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqdqwxQzZrjHXWn6IAAAA4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1013 207 -% 831697 10195 819575 115 6 0 192.168.172.254 CH - [2015-05-21 08:02:30.897546] "GET /EMail/scripts/tinymce/plugins/image/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=resend&mailId=3877_100&to=john.smith@ourindustry.com&folderId=1810_99&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqdqwxQzZrjHXWn6EAAAA2 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1012 206 -% 956884 10619 944664 139 6 0 192.168.172.254 CH - [2015-05-21 08:02:31.911239] "GET /EMail/scripts/tinymce/skins/lightgray/skin.min.css HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=resend&mailId=3877_100&to=john.smith@ourindustry.com&folderId=1810_99&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" Vicqd6wxQzZrjHXWn6MAAAA5 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1029 207 -% 774433 9267 763018 163 6 0 192.168.172.254 CH - [2015-05-21 08:02:31.949135] "GET /EMail/scripts/tinymce/skins/lightgray/content.min.css HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=resend&mailId=3877_100&to=john.smith@ourindustry.com&folderId=1810_99&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" Vicqd6wxQzZrjHXY10AAAAB6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1031 206 -% 1156327 6320 148352 132 6 0 192.168.172.254 CH - [2015-05-21 08:02:31.965009] "GET /EMail/css/editor_content.css HTTP/1.1" 404 6122 "https://www.example.com/EMail/newMessage.aspx?action=resend&mailId=3877_100&to=john.smith@ourindustry.com&folderId=1810_99&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" Vicqd6wxQzZrjHXWn6QAAAA7 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 917 7776 -% 1142930 10302 0 0 6 0 192.168.172.254 CH - [2015-05-21 08:02:32.760006] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce-small.woff HTTP/1.1" 304 - "https://www.example.com/EMail/scripts/tinymce/skins/lightgray/skin.min.css" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqeKwxQzZrjHXWn6UAAAA6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 997 206 -% 796001 10164 784160 163 6 0 192.168.172.254 CH - [2015-05-21 08:03:43.631377] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=resend&mailId=3877_100&to=john.smith@ourindustry.com&folderId=1810_99&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" Vicqv6wxQzZrjHXY10oAAABG TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 4014 536 -% 1069254 68798 0 167 69 0 192.168.172.254 CH - [2015-05-21 08:03:44.745696] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc= HTTP/1.1" 200 3911 "https://www.example.com/EMail/newMessage.aspx?action=resend&mailId=3877_100&to=john.smith@ourindustry.com&folderId=1810_99&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqwKwxQzZrjHXY10sAAABF TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1082 4333 -% 858439 13099 837113 6627 6 0 192.168.172.254 CH - [2015-05-21 08:03:49.502768] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9647 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeSent" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqxawxQzZrjHXY10wAAABI TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 930 10098 -% 1307769 6960 296222 3103 6 0 192.168.172.254 CH - [2015-05-21 08:03:49.558760] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeSent" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqxawxQzZrjHXY100AAABH TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1514 9317 -% 1754563 10870 734476 4270 6 0 192.168.172.254 CH - [2015-05-21 08:03:53.370910] "GET /EMail/message.aspx?&mailId=3882_23&folderId=1810_98&mailPos=0 HTTP/1.1" 200 22857 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicqyawxQzZrjHXY104AAABL TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 950 23396 -% 1394118 7345 340633 42529 6 0 192.168.172.254 CH - [2015-05-21 08:06:52.967564] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicrfKwxQzZrjHXY12UAAABi TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1559 4430 -% 1158532 6404 150580 141 6 0 192.168.172.254 CH - [2015-05-21 08:06:54.197567] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "https://www.example.com/EMail/index.html" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicrfqwxQzZrjHXY12YAAABj TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 915 318 -% 715989 7006 707505 167 6 0 192.168.172.254 CH - [2015-05-21 08:06:54.943149] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "https://www.example.com/EMail/index.html" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "27a6b070.5229718f1ec41" VicrfqwxQzZrjHXY12cAAABl TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 897 7758 -% 911070 10677 896790 2171 6 0 192.168.186.76 CH - [2015-05-21 08:07:16.419264] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" VicrlKwxQzZrjHXY12sAAABo TLSv1.2 ECDHE-RSA-AES256-SHA384 1399 4545 -% 1035953 7063 26428 259 3 0 192.168.186.76 CH - [2015-05-21 08:07:17.467025] "GET /EMail/main.aspx HTTP/1.1" 200 3391 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" VicrlawxQzZrjHXY12wAAABq TLSv1.2 ECDHE-RSA-AES256-SHA384 678 3898 -% 875326 4633 866383 2419 3 0 192.168.186.76 CH - [2015-05-21 08:07:18.377597] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" VicrlqwxQzZrjHXY124AAABs TLSv1.2 ECDHE-RSA-AES256-SHA384 662 4234 -% 1216501 4167 201227 10049 3 0 192.168.186.76 CH - [2015-05-21 08:07:20.302646] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" VicrmKwxQzZrjHXY128AAABr TLSv1.2 ECDHE-RSA-AES256-SHA384 726 1370 -% 1011911 6367 3441 202 3 0 192.168.186.76 CH - [2015-05-21 08:07:22.224789] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" VicrmqwxQzZrjHXY13AAAABx TLSv1.2 ECDHE-RSA-AES256-SHA384 678 634 -% 880242 4785 873156 345 3 0 192.168.186.76 CH - [2015-05-21 08:08:37.993215] "GET /EMail/message.aspx?&mailId=3890_57&folderId=947_65&mailPos=0 HTTP/1.1" 200 17199 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" Vicr5awxQzZrjHXY13sAAAB4 TLSv1.2 ECDHE-RSA-AES256-SHA384 1303 22021 -% 1433465 7429 373489 44437 3 0 192.168.186.76 CH - [2015-05-21 08:08:51.444134] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3890_57&folderId=947_65&attachmentId=4&token=-135825578149573024E17 HTTP/1.1" 200 1604308 "https://www.example.com/EMail/message.aspx?&mailId=3890_57&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" Vicr86wxQzZrjHXY134AAAB8 TLSv1.2 ECDHE-RSA-AES256-SHA384 1399 1677967 -% 1430067 9781 21947 198 3 0 192.168.186.76 CH - [2015-05-21 08:09:05.036409] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3890_57&folderId=947_65&attachmentId=6&token=-135825578149573024E17 HTTP/1.1" 200 1255755 "https://www.example.com/EMail/message.aspx?&mailId=3890_57&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" VicsAawxQzZrjHXY138AAAB9 TLSv1.2 ECDHE-RSA-AES256-SHA384 1324 1324019 -% 1677750 6538 276225 168 3 0 192.168.186.76 CH - [2015-05-21 08:09:30.383850] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3890_57&folderId=947_65&attachmentId=5&token=-135825578149573024E17 HTTP/1.1" 200 1528861 "https://www.example.com/EMail/message.aspx?&mailId=3890_57&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" VicsGqwxQzZrjHXY14QAAABB TLSv1.2 ECDHE-RSA-AES256-SHA384 1324 1611689 -% 1585042 6632 60277 184 3 0 192.168.105.68 CH - [2015-05-21 08:11:44.218352] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3918 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "7b520bdc.5229740afbcf0" VicsoKwxQzZrjHXWn9EAAAAo TLSv1.2 ECDHE-RSA-AES256-SHA384 659 8706 -% 685504 2068 682403 170 0 0 192.168.186.76 CH - [2015-05-21 08:12:04.121623] "GET /EMail/scripts/tinymce/tinymce.min.js HTTP/1.1" 200 102063 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3890_57&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" VicstKwxQzZrjHXY154AAABe TLSv1.2 ECDHE-RSA-AES256-SHA384 1335 110301 33% 1891296 7430 938483 215 3 0 192.168.186.76 CH - [2015-05-21 08:12:06.545720] "GET /EMail/scripts/tinymce/themes/modern/theme.min.js HTTP/1.1" 200 2651 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3890_57&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" VicstqwxQzZrjHXY16AAAABg TLSv1.2 ECDHE-RSA-AES256-SHA384 1276 3525 41% 816675 4047 810115 209 3 0 192.168.186.76 CH - [2015-05-21 08:12:06.389238] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3890_57&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" VicstqwxQzZrjHXY158AAABf TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 1151492 7852 136579 5200 3 0 192.168.186.76 CH - [2015-05-21 08:12:07.554888] "GET /EMail/scripts/tinymce/plugins/charmap/plugin.min.js HTTP/1.1" 200 2698 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3890_57&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" Vicst6wxQzZrjHXWn9IAAAAp TLSv1.2 ECDHE-RSA-AES256-SHA384 1351 7488 38% 1056504 6286 48140 149 3 0 192.168.186.76 CH - [2015-05-21 08:12:07.555148] "GET /EMail/scripts/tinymce/plugins/insertdatetime/plugin.min.js HTTP/1.1" 200 867 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3890_57&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" Vicst6wxQzZrjHXY16EAAABh TLSv1.2 ECDHE-RSA-AES256-SHA384 1351 5579 42% 1061737 4422 54911 472 3 0 192.168.186.76 CH - [2015-05-21 08:12:07.577019] "GET /EMail/scripts/tinymce/plugins/visualblocks/plugin.min.js HTTP/1.1" 200 525 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3890_57&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" Vicst6wxQzZrjHXY16IAAABi TLSv1.2 ECDHE-RSA-AES256-SHA384 758 1167 43% 1082230 3834 76307 186 3 0 192.168.186.76 CH - [2015-05-21 08:12:07.639811] "GET /EMail/scripts/tinymce/plugins/hr/plugin.min.js HTTP/1.1" 200 191 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3890_57&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" Vicst6wxQzZrjHXY16MAAABj TLSv1.2 ECDHE-RSA-AES256-SHA384 758 831 53% 1040176 5536 32451 230 3 0 192.168.186.76 CH - [2015-05-21 08:12:08.760886] "GET /EMail/scripts/tinymce/plugins/table/plugin.min.js HTTP/1.1" 200 9155 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3890_57&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" VicsuKwxQzZrjHXY16QAAABl TLSv1.2 ECDHE-RSA-AES256-SHA384 1276 10547 32% 838832 3862 830844 161 3 0 192.168.186.76 CH - [2015-05-21 08:12:08.765767] "GET /EMail/scripts/tinymce/plugins/image/plugin.min.js HTTP/1.1" 200 2136 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3890_57&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" VicsuKwxQzZrjHXWn9MAAAAq TLSv1.2 ECDHE-RSA-AES256-SHA384 1276 3013 42% 1050873 3895 43899 222 3 0 192.168.186.76 CH - [2015-05-21 08:12:09.904445] "GET /EMail/scripts/tinymce/skins/lightgray/content.min.css HTTP/1.1" 200 588 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3890_57&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" VicsuawxQzZrjHXY16UAAABp TLSv1.2 ECDHE-RSA-AES256-SHA384 742 1231 38% 1072666 4500 65786 222 3 0 192.168.186.76 CH - [2015-05-21 08:12:09.864195] "GET /EMail/scripts/tinymce/skins/lightgray/skin.min.css HTTP/1.1" 200 6071 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3890_57&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" VicsuawxQzZrjHXWn9UAAAAt TLSv1.2 ECDHE-RSA-AES256-SHA384 742 7367 17% 1116888 7622 103681 151 3 0 192.168.186.76 CH - [2015-05-21 08:12:11.328346] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce.eot? HTTP/1.1" 200 10024 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3890_57&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" Vicsu6wxQzZrjHXWn9YAAAAu TLSv1.2 ECDHE-RSA-AES256-SHA384 758 10724 -% 1031997 6314 23156 198 3 0 192.168.186.76 CH - [2015-05-21 08:12:11.328845] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce-small.eot? HTTP/1.1" 200 10316 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3890_57&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" Vicsu6wxQzZrjHXY16YAAABo TLSv1.2 ECDHE-RSA-AES256-SHA384 774 11012 -% 1033283 4234 26855 159 3 0 192.168.172.254 CH - [2015-05-21 08:15:55.382279] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3882_23&folderId=1810_98&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "a2724af2.5229747ef2aca" Victm6wxQzZrjHXY18UAAABN TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 20109 4436 -% 3408374 2136706 205120 198 84 0 192.168.172.254 CH - [2015-05-21 08:15:58.816997] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4025 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3882_23&folderId=1810_98&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "a2724af2.5229747ef2aca" VictnqwxQzZrjHXY18YAAABK TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1070 4447 -% 979822 12211 958177 7314 6 0 192.168.186.76 CH - [2015-05-21 08:16:03.265665] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3890_57&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" Victo6wxQzZrjHXWn@kAAAAF TLSv1.2 ECDHE-RSA-AES256-SHA384 7303 630 -% 1691630 391826 280299 199 81 0 192.168.186.76 CH - [2015-05-21 08:16:04.968567] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3890_57&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" VictpKwxQzZrjHXWn@sAAAAG TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 957263 5852 942749 7258 3 0 192.168.172.254 CH - [2015-05-21 08:16:16.228115] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "a2724af2.5229747ef2aca" VictsKwxQzZrjHXWn@0AAAAD TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1484 547 -% 1192058 7422 183016 141 6 0 192.168.172.254 CH - [2015-05-21 08:16:17.470438] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "https://www.example.com/EMail/index.html" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "a2724af2.5229747ef2aca" VictsawxQzZrjHXWn@4AAAAI TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 915 318 -% 1290314 7558 280749 130 6 0 192.168.172.254 CH - [2015-05-21 08:16:18.810694] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "https://www.example.com/EMail/index.html" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "a2724af2.5229747ef2aca" VictsqwxQzZrjHXWn@8AAAAL TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 897 7758 -% 803128 6366 792983 2307 6 0 192.168.186.76 CH - [2015-05-21 08:16:38.428705] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" VictxqwxQzZrjHXY18sAAABP TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1536320 6427 521065 3634 3 0 192.168.192.35 CH - [2015-05-21 08:24:01.473564] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" VicvgawxQzZrjHXY2AsAAABT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 916 13205 -% 1479111 2602 469141 3262 0 0 192.168.192.35 CH - [2015-05-21 08:40:05.740832] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" ViczRawxQzZrjHXY2I8AAABZ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 916 13205 -% 1497509 4086 484480 4750 0 0 192.168.192.35 CH - [2015-05-21 08:46:59.147466] "GET /EMail/inbox.aspx HTTP/1.1" 200 7278 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" Vic046wxQzZrjHXY2McAAABc TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 861 11726 -% 1298461 1993 293708 2195 0 0 192.168.192.35 CH - [2015-05-21 08:47:00.501900] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" Vic05KwxQzZrjHXY2MgAAABY TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 468 539 -% 664554 3633 659970 161 0 0 192.168.192.35 CH - [2015-05-21 08:47:00.612533] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" Vic05KwxQzZrjHXWoHAAAAAN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1038 670 -% 886526 2866 882892 141 0 0 192.168.192.35 CH - [2015-05-21 08:47:02.219736] "GET /EMail/overview.aspx HTTP/1.1" 200 5294 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" Vic05qwxQzZrjHXY2MsAAABb TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 522 5716 -% 1359731 2932 354317 1800 0 0 192.168.192.35 CH - [2015-05-21 08:47:02.229731] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" Vic05qwxQzZrjHXWoHEAAAAO TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 548 9179 -% 1590511 2612 579177 4622 0 0 192.168.186.76 CH - [2015-05-21 08:53:59.821449] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" Vic2h6wxQzZrjHXY2QkAAABY TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 12038 -% 1226516 5960 216962 2199 3 0 192.168.186.76 CH - [2015-05-21 08:54:01.094579] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" Vic2iawxQzZrjHXY2QoAAABb TLSv1.2 ECDHE-RSA-AES256-SHA384 662 7866 -% 1143730 6874 130797 3767 3 0 192.168.186.76 CH - [2015-05-21 08:54:03.168845] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" Vic2i6wxQzZrjHXY2QsAAABZ TLSv1.2 ECDHE-RSA-AES256-SHA384 822 469 -% 1318061 11307 304512 196 3 0 192.168.186.76 CH - [2015-05-21 08:54:04.499320] "GET /EMail/main.aspx HTTP/1.1" 200 3391 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" Vic2jKwxQzZrjHXY2QwAAABe TLSv1.2 ECDHE-RSA-AES256-SHA384 678 3898 -% 989948 4223 981918 1913 3 0 192.168.186.76 CH - [2015-05-21 08:54:05.522785] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" Vic2jawxQzZrjHXY2Q0AAABg TLSv1.2 ECDHE-RSA-AES256-SHA384 662 4234 -% 1041044 7589 23628 8015 3 0 192.168.186.76 CH - [2015-05-21 08:54:36.664345] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5882 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3890_61&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" Vic2rKwxQzZrjHXY2RQAAABn TLSv1.2 ECDHE-RSA-AES256-SHA384 1303 13742 -% 553242 5030 0 0 3 0 192.168.186.76 CH - [2015-05-21 08:54:51.179012] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" Vic2u6wxQzZrjHXY2RkAAABs TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1713474 7143 696595 3939 3 0 192.168.186.76 CH - [2015-05-21 08:54:54.789025] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" Vic2vqwxQzZrjHXY2RoAAABr TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1309581 13061 293031 207 3 0 192.168.186.76 CH - [2015-05-21 08:54:56.111367] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 9493 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" Vic2wKwxQzZrjHXY2RsAAABx TLSv1.2 ECDHE-RSA-AES256-SHA384 726 10095 -% 1170746 5232 158621 4777 3 0 192.168.186.76 CH - [2015-05-21 08:57:36.911628] "GET /EMail/message.aspx?&mailId=3890_60&folderId=947_65&mailPos=1 HTTP/1.1" 200 16216 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" Vic3YKwxQzZrjHXY2S4AAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 1244 17061 -% 1261460 6310 218074 34442 3 0 192.168.186.76 CH - [2015-05-21 08:58:12.884293] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3890_60&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" Vic3hKwxQzZrjHXY2TYAAABN TLSv1.2 ECDHE-RSA-AES256-SHA384 1319 7526 -% 895122 4142 884442 5132 3 0 192.168.186.76 CH - [2015-05-21 08:58:29.701515] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3890_60&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" Vic3lawxQzZrjHXY2TkAAABM TLSv1.2 ECDHE-RSA-AES256-SHA384 7394 4545 -% 1604467 267407 317064 201 86 0 192.168.186.76 CH - [2015-05-21 08:58:31.317554] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3890_60&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" Vic3l6wxQzZrjHXY2TwAAABU TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 903238 9197 880031 12335 3 0 192.168.186.76 CH - [2015-05-21 08:58:33.824356] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9490 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" Vic3mawxQzZrjHXY2T0AAABT TLSv1.2 ECDHE-RSA-AES256-SHA384 662 10095 -% 1252369 6990 240906 2891 3 0 192.168.186.76 CH - [2015-05-21 08:58:33.825344] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" Vic3mawxQzZrjHXY2T4AAABQ TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1489079 7163 473900 2898 3 0 192.168.186.76 CH - [2015-05-21 08:58:37.802458] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" Vic3nawxQzZrjHXY2T8AAABV TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1271503 11202 257828 195 3 0 192.168.186.76 CH - [2015-05-21 08:58:39.088897] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8394 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" Vic3n6wxQzZrjHXY2UAAAABS TLSv1.2 ECDHE-RSA-AES256-SHA384 726 8991 -% 1024610 7142 12580 3121 3 0 192.168.186.76 CH - [2015-05-21 09:07:48.849169] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3b938202.52298092d447e" Vic5xKwxQzZrjHXY2ZYAAABs TLSv1.2 ECDHE-RSA-AES256-SHA384 1127 5862 -% 852863 2021 850174 190 0 0 192.168.186.76 CH - [2015-05-21 09:07:48.784038] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3b938202.52298092d447e" Vic5xKwxQzZrjHXY2ZQAAABo TLSv1.2 ECDHE-RSA-AES256-SHA384 871 6091 22% 921800 2762 917453 129 0 0 192.168.186.76 CH - [2015-05-21 09:07:48.848061] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3b938202.52298092d447e" Vic5xKwxQzZrjHXY2ZUAAABq TLSv1.2 ECDHE-RSA-AES256-SHA384 1111 12664 22% 858826 2744 852065 101 0 0 192.168.186.76 CH - [2015-05-21 09:07:48.871080] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3b938202.52298092d447e" Vic5xKwxQzZrjHXY2ZcAAABr TLSv1.2 ECDHE-RSA-AES256-SHA384 1111 8368 23% 1129204 3253 123769 265 0 0 192.168.186.76 CH - [2015-05-21 09:07:50.042087] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3b938202.52298092d447e" Vic5xqwxQzZrjHXY2ZgAAABx TLSv1.2 ECDHE-RSA-AES256-SHA384 534 1898 -% 719779 3025 715532 269 0 0 192.168.186.76 CH - [2015-05-21 09:07:54.350141] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "3b938202.52298092d447e" Vic5yqwxQzZrjHXY2ZkAAABy TLSv1.2 ECDHE-RSA-AES256-SHA384 534 0 -% 1187207 3059 183100 189 0 0 192.168.186.76 CH - [2015-05-21 09:07:55.123354] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3b938202.52298092d447e" Vic5y6wxQzZrjHXWoMgAAAAr TLSv1.2 ECDHE-RSA-AES256-SHA384 1154 630 -% 2233064 5070 226977 186 0 0 192.168.186.76 CH - [2015-05-21 09:07:57.371060] "GET /EMail/main.aspx HTTP/1.1" 200 3391 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3b938202.52298092d447e" Vic5zawxQzZrjHXWoMkAAAAq TLSv1.2 ECDHE-RSA-AES256-SHA384 534 3898 -% 1704388 3064 698507 1849 0 0 192.168.186.76 CH - [2015-05-21 09:07:59.153601] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3b938202.52298092d447e" Vic5z6wxQzZrjHXWoMsAAAAu TLSv1.2 ECDHE-RSA-AES256-SHA384 486 4234 -% 1382401 1920 372417 7268 0 0 192.168.186.76 CH - [2015-05-21 09:08:04.207433] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3b938202.52298092d447e" Vic51KwxQzZrjHXY2ZsAAABu TLSv1.2 ECDHE-RSA-AES256-SHA384 1111 6054 -% 1037012 3296 32815 146 0 0 192.168.186.76 CH - [2015-05-21 09:08:04.142324] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3b938202.52298092d447e" Vic51KwxQzZrjHXWoMwAAAAw TLSv1.2 ECDHE-RSA-AES256-SHA384 518 1914 -% 1307648 1941 304879 190 0 0 192.168.203.86 CH - [2015-05-21 09:10:22.741413] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3918 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "28bdb986.52298126823a5" Vic6XqwxQzZrjHXWoNAAAAAz TLSv1.2 ECDHE-RSA-AES256-SHA384 659 8706 -% 735939 2106 732533 187 0 0 192.168.186.76 CH - [2015-05-21 09:11:01.905061] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/message.aspx?&mailId=3889_55&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3b938202.52298092d447e" Vic6hawxQzZrjHXY2b0AAABW TLSv1.2 ECDHE-RSA-AES256-SHA384 1068 2347 -% 831163 2627 827785 151 0 0 192.168.212.3 CH - [2015-05-21 09:12:21.160715] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7383 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic61awxQzZrjHXY2cgAAABh TLSv1 ECDHE-RSA-AES256-SHA 704 11809 -% 1043691 2345 36889 3710 0 0 192.168.212.3 CH - [2015-05-21 09:12:22.346895] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic61qwxQzZrjHXY2csAAABj TLSv1 ECDHE-RSA-AES256-SHA 869 358 -% 927717 1880 925012 186 0 0 192.168.212.3 CH - [2015-05-21 09:12:22.319456] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic61qwxQzZrjHXY2coAAABi TLSv1 ECDHE-RSA-AES256-SHA 662 213 -% 1110537 2214 107376 274 0 0 192.168.212.3 CH - [2015-05-21 09:12:22.353878] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic61qwxQzZrjHXY2c0AAABm TLSv1 ECDHE-RSA-AES256-SHA 869 358 -% 1186086 2797 182433 182 0 0 192.168.212.3 CH - [2015-05-21 09:12:22.354653] "GET /EMail/scripts/variables_de.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic61qwxQzZrjHXY2c8AAABp TLSv1 ECDHE-RSA-AES256-SHA 901 358 -% 1185673 2905 181728 200 0 0 192.168.212.3 CH - [2015-05-21 09:12:22.352376] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic61qwxQzZrjHXY2cwAAABn TLSv1 ECDHE-RSA-AES256-SHA 885 358 -% 1270846 3779 266309 150 0 0 192.168.212.3 CH - [2015-05-21 09:12:22.354541] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic61qwxQzZrjHXY2c4AAABl TLSv1 ECDHE-RSA-AES256-SHA 901 358 -% 1422952 3653 418243 183 0 0 192.168.212.3 CH - [2015-05-21 09:12:23.781995] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic616wxQzZrjHXY2dEAAABs TLSv1 ECDHE-RSA-AES256-SHA 694 213 -% 679073 1956 676447 145 0 0 192.168.212.3 CH - [2015-05-21 09:12:41.086366] "GET /EMail/images/active.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic66awxQzZrjHXY2dMAAABq TLSv1 ECDHE-RSA-AES256-SHA 984 4049 -% 886991 3085 883051 175 0 0 192.168.212.3 CH - [2015-05-21 09:12:42.283084] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic66qwxQzZrjHXWoNkAAAA9 TLSv1 ECDHE-RSA-AES256-SHA 1032 4257 -% 1199498 7088 191317 286 0 0 192.168.212.3 CH - [2015-05-21 09:12:43.632229] "GET /EMail/main.aspx HTTP/1.1" 200 3415 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic666wxQzZrjHXWoNoAAAA7 TLSv1 ECDHE-RSA-AES256-SHA 872 7670 -% 859353 3469 853874 1242 0 0 192.168.212.3 CH - [2015-05-21 09:12:45.811705] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic67awxQzZrjHXY2dQAAABx TLSv1 ECDHE-RSA-AES256-SHA 952 4049 -% 960260 2154 957387 179 0 0 192.168.212.3 CH - [2015-05-21 09:12:49.122601] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 20291 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic68awxQzZrjHXY2dUAAABv TLSv1 ECDHE-RSA-AES256-SHA 840 24698 -% 1256582 3543 211053 7212 0 0 192.168.212.3 CH - [2015-05-21 09:12:50.624928] "GET /EMail/images/Highost.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic68qwxQzZrjHXY2dcAAAB3 TLSv1 ECDHE-RSA-AES256-SHA 952 4049 -% 833061 2899 829349 172 0 0 192.168.212.3 CH - [2015-05-21 09:12:50.623865] "GET /EMail/images/attach.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic68qwxQzZrjHXY2dYAAABw TLSv1 ECDHE-RSA-AES256-SHA 952 4049 -% 869793 2996 866079 115 0 0 192.168.212.3 CH - [2015-05-21 09:12:53.374347] "GET /EMail/message.aspx?&mailId=3889_43&folderId=1001_9&mailPos=9 HTTP/1.1" 200 11354 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic69awxQzZrjHXY2dgAAAB1 TLSv1 ECDHE-RSA-AES256-SHA 888 15696 -% 1240343 3028 215208 21094 0 0 192.168.212.3 CH - [2015-05-21 09:13:44.729548] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic7KKwxQzZrjHXWoOAAAAAG TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1641822 4439 629065 4304 0 0 192.168.212.3 CH - [2015-05-21 09:13:46.328300] "GET /EMail/images/msgOpened.png HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic7KqwxQzZrjHXY2eAAAABA TLSv1 ECDHE-RSA-AES256-SHA 952 4049 -% 893266 4753 887715 171 0 0 192.168.212.3 CH - [2015-05-21 09:13:51.128360] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3890_40&folderId=1001_9&attachmentId=2&token=-4499625551280048E16 HTTP/1.1" 200 53816 "https://www.example.com/EMail/message.aspx?&mailId=3890_40&folderId=1001_9&mailPos=8" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic7L6wxQzZrjHXY2eEAAAB- TLSv1 ECDHE-RSA-AES256-SHA 984 59296 -% 1058851 4534 32566 160 0 0 192.168.186.76 CH - [2015-05-21 09:14:42.469710] "GET /EMail/scripts/tinymce/themes/modern/theme.min.js HTTP/1.1" 200 2651 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3890_63&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3b938202.52298092d447e" Vic7YqwxQzZrjHXWoOQAAAAJ TLSv1.2 ECDHE-RSA-AES256-SHA384 1175 7440 41% 987594 2435 984044 147 0 0 192.168.186.76 CH - [2015-05-21 09:14:42.468267] "GET /EMail/scripts/tinymce/plugins/print/plugin.min.js HTTP/1.1" 200 182 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3890_63&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3b938202.52298092d447e" Vic7YqwxQzZrjHXY2esAAABN TLSv1.2 ECDHE-RSA-AES256-SHA384 1175 4891 55% 989108 2006 986438 110 0 0 192.168.186.76 CH - [2015-05-21 09:14:42.464453] "GET /EMail/scripts/tinymce/plugins/paste/plugin.min.js HTTP/1.1" 200 6239 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3890_63&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3b938202.52298092d447e" Vic7YqwxQzZrjHXY2eoAAABK TLSv1.2 ECDHE-RSA-AES256-SHA384 1175 11040 40% 1093996 3255 89114 133 0 0 192.168.186.76 CH - [2015-05-21 09:14:43.471065] "GET /EMail/scripts/tinymce/plugins/insertdatetime/plugin.min.js HTTP/1.1" 200 867 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3890_63&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3b938202.52298092d447e" Vic7Y6wxQzZrjHXY2ewAAABR TLSv1.2 ECDHE-RSA-AES256-SHA384 598 1503 42% 442750 2247 439485 149 0 0 192.168.186.76 CH - [2015-05-21 09:14:43.473082] "GET /EMail/scripts/tinymce/plugins/visualblocks/plugin.min.js HTTP/1.1" 200 525 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3890_63&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3b938202.52298092d447e" Vic7Y6wxQzZrjHXWoOUAAAAM TLSv1.2 ECDHE-RSA-AES256-SHA384 598 1167 43% 789349 1909 786772 105 0 0 192.168.186.76 CH - [2015-05-21 09:14:43.575123] "GET /EMail/scripts/tinymce/plugins/link/plugin.min.js HTTP/1.1" 200 1835 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3890_63&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3b938202.52298092d447e" Vic7Y6wxQzZrjHXY2e0AAABP TLSv1.2 ECDHE-RSA-AES256-SHA384 582 2479 41% 687321 2899 682998 302 0 0 192.168.186.76 CH - [2015-05-21 09:14:43.930137] "GET /EMail/scripts/tinymce/plugins/image/plugin.min.js HTTP/1.1" 200 2136 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3890_63&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3b938202.52298092d447e" Vic7Y6wxQzZrjHXY2e8AAABU TLSv1.2 ECDHE-RSA-AES256-SHA384 582 2852 42% 590012 2733 586238 148 0 0 192.168.186.76 CH - [2015-05-21 09:14:44.822092] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5882 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3890_63&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3b938202.52298092d447e" Vic7ZKwxQzZrjHXY2fAAAABT TLSv1.2 ECDHE-RSA-AES256-SHA384 550 9666 -% 935598 3156 0 0 0 0 192.168.212.3 CH - [2015-05-21 09:14:49.282330] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 20275 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic7aawxQzZrjHXWoOYAAAAN TLSv1 ECDHE-RSA-AES256-SHA 840 24682 -% 1350764 3528 304703 6084 0 0 192.168.212.3 CH - [2015-05-21 09:14:49.196631] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic7aawxQzZrjHXY2fIAAABS TLSv1 ECDHE-RSA-AES256-SHA 773 9379 -% 1486731 5352 472596 4349 0 0 192.168.212.3 CH - [2015-05-21 09:14:52.997696] "GET /EMail/message.aspx?&mailId=3890_41&folderId=1001_9&mailPos=7 HTTP/1.1" 200 11496 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic7bKwxQzZrjHXY2fMAAABW TLSv1 ECDHE-RSA-AES256-SHA 598 12004 -% 1401653 5092 374541 20546 0 0 192.168.212.3 CH - [2015-05-21 09:14:55.495980] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3890_41&folderId=1001_9&attachmentId=2&token=-57050398015964976E16 HTTP/1.1" 200 56129 "https://www.example.com/EMail/message.aspx?&mailId=3890_41&folderId=1001_9&mailPos=7" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic7b6wxQzZrjHXY2fYAAABa TLSv1 ECDHE-RSA-AES256-SHA 694 57875 -% 1371885 5465 333267 153 0 0 192.168.212.3 CH - [2015-05-21 09:15:31.834061] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic7k6wxQzZrjHXY2f8AAABi TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1658262 2648 648956 2728 0 0 192.168.212.3 CH - [2015-05-21 09:15:35.330399] "GET /EMail/message.aspx?&mailId=3890_42&folderId=1001_9&mailPos=6 HTTP/1.1" 200 11494 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic7l6wxQzZrjHXY2gEAAABn TLSv1 ECDHE-RSA-AES256-SHA 888 15840 -% 1431459 4597 406172 19739 0 0 192.168.212.3 CH - [2015-05-21 09:15:38.433166] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3890_42&folderId=1001_9&attachmentId=2&token=-23570776288635328E17 HTTP/1.1" 200 54754 "https://www.example.com/EMail/message.aspx?&mailId=3890_42&folderId=1001_9&mailPos=6" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic7mqwxQzZrjHXY2gMAAABs TLSv1 ECDHE-RSA-AES256-SHA 984 60240 -% 990741 7137 972199 180 0 0 192.168.212.3 CH - [2015-05-21 09:16:03.287220] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic7s6wxQzZrjHXWoOkAAAAR TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1797862 3315 787542 2973 0 0 192.168.212.3 CH - [2015-05-21 09:16:06.787804] "GET /EMail/message.aspx?&mailId=3889_45&folderId=1001_9&mailPos=5 HTTP/1.1" 200 11495 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic7tqwxQzZrjHXY2gYAAABx TLSv1 ECDHE-RSA-AES256-SHA 888 15840 -% 1317703 3367 288380 25110 0 0 192.168.212.3 CH - [2015-05-21 09:16:09.282087] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3889_45&folderId=1001_9&attachmentId=2&token=-54209537576960606E14 HTTP/1.1" 200 56670 "https://www.example.com/EMail/message.aspx?&mailId=3889_45&folderId=1001_9&mailPos=5" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic7uawxQzZrjHXY2gcAAABv TLSv1 ECDHE-RSA-AES256-SHA 984 62255 -% 1237868 7134 207446 190 0 0 192.168.186.76 CH - [2015-05-21 09:16:23.748551] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7291 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3b938202.52298092d447e" Vic7x6wxQzZrjHXY2gkAAABw TLSv1.2 ECDHE-RSA-AES256-SHA384 1095 11878 -% 1158400 3393 151031 3164 0 0 192.168.186.76 CH - [2015-05-21 09:16:23.780986] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3b938202.52298092d447e" Vic7x6wxQzZrjHXY2goAAABz TLSv1.2 ECDHE-RSA-AES256-SHA384 1111 13742 -% 1343865 2264 334728 2913 0 0 192.168.212.3 CH - [2015-05-21 09:16:44.236639] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3889_46&folderId=1001_9&attachmentId=2&token=-237148295937461824E17 HTTP/1.1" 200 54222 "https://www.example.com/EMail/message.aspx?&mailId=3889_46&folderId=1001_9&mailPos=4" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic73KwxQzZrjHXY2g0AAAB1 TLSv1 ECDHE-RSA-AES256-SHA 984 59770 -% 1147609 4994 121035 333 0 0 192.168.212.3 CH - [2015-05-21 09:17:14.083187] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic7@qwxQzZrjHXY2hMAAABA TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1497264 5111 484924 2992 0 0 192.168.212.3 CH - [2015-05-21 09:17:14.083818] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 20244 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic7@qwxQzZrjHXY2hQAAAB9 TLSv1 ECDHE-RSA-AES256-SHA 840 24650 -% 1509830 4249 447150 6233 0 0 192.168.212.3 CH - [2015-05-21 09:17:20.333864] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3889_47&folderId=1001_9&attachmentId=2&token=-10608136528248658E16 HTTP/1.1" 200 59837 "https://www.example.com/EMail/message.aspx?&mailId=3889_47&folderId=1001_9&mailPos=3" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic8AKwxQzZrjHXY2hUAAABB TLSv1 ECDHE-RSA-AES256-SHA 984 65534 -% 1318888 4312 290344 217 0 0 192.168.212.3 CH - [2015-05-21 09:17:56.733231] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 20236 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic8JKwxQzZrjHXY2hgAAABI TLSv1 ECDHE-RSA-AES256-SHA 840 24634 -% 1517146 3686 449220 6139 0 0 192.168.212.3 CH - [2015-05-21 09:18:00.133914] "GET /EMail/message.aspx?&mailId=3890_43&folderId=1001_9&mailPos=2 HTTP/1.1" 200 11495 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic8KKwxQzZrjHXY2hoAAABL TLSv1 ECDHE-RSA-AES256-SHA 888 15840 -% 1333737 5365 303565 23641 0 0 192.168.212.3 CH - [2015-05-21 09:18:42.532317] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 20228 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic8UqwxQzZrjHXY2h8AAABP TLSv1 ECDHE-RSA-AES256-SHA 840 24634 -% 1757577 2193 693588 7504 0 0 192.168.212.3 CH - [2015-05-21 09:18:48.884340] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3890_44&folderId=1001_9&attachmentId=2&token=-28712335656789792E16 HTTP/1.1" 200 53564 "https://www.example.com/EMail/message.aspx?&mailId=3890_44&folderId=1001_9&mailPos=1" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic8WKwxQzZrjHXY2iEAAABQ TLSv1 ECDHE-RSA-AES256-SHA 984 59056 -% 1049154 6399 21261 188 0 0 192.168.212.3 CH - [2015-05-21 09:19:39.336713] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 20217 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic8i6wxQzZrjHXY2i8AAABk TLSv1 ECDHE-RSA-AES256-SHA 840 24618 -% 1434082 2254 369116 10390 0 0 192.168.212.3 CH - [2015-05-21 09:19:39.337692] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic8i6wxQzZrjHXY2jAAAABh TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1665652 2898 656261 2798 0 0 192.168.212.3 CH - [2015-05-21 09:20:08.691270] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 20212 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic8qKwxQzZrjHXWoQgAAAA0 TLSv1 ECDHE-RSA-AES256-SHA 840 24618 -% 1502789 2165 437651 10233 0 0 192.168.212.3 CH - [2015-05-21 09:20:14.544215] "GET /EMail/moveToFolder.aspx?folderName=Inbox&mailId=3889_48&mailId=3890_44&mailId=3890_43&mailId=3889_47&mailId=3889_46&mailId=3889_45&mailId=3890_42&mailId=3890_41&mailId=3890_40&mailId=3889_43 HTTP/1.1" 200 5158 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic8rqwxQzZrjHXWoQoAAAA3 TLSv1 ECDHE-RSA-AES256-SHA 952 9430 -% 1541150 8752 528845 2777 0 0 192.168.212.3 CH - [2015-05-21 09:20:22.707461] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/moveToFolder.aspx?folderName=Inbox&mailId=3889_48&mailId=3890_44&mailId=3890_43&mailId=3889_47&mailId=3889_46&mailId=3889_45&mailId=3890_42&mailId=3890_41&mailId=3890_40&mailId=3889_43" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic8tqwxQzZrjHXY2j8AAAB2 TLSv1 ECDHE-RSA-AES256-SHA 1352 4177 -% 2186680 12102 173820 147 0 0 192.168.212.3 CH - [2015-05-21 09:20:27.487626] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic8u6wxQzZrjHXY2kEAAAB5 TLSv1 ECDHE-RSA-AES256-SHA 904 4049 -% 1052915 3303 48663 178 0 0 192.168.212.3 CH - [2015-05-21 09:20:27.706638] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic8u6wxQzZrjHXWoQ0AAAA5 TLSv1 ECDHE-RSA-AES256-SHA 928 4044 -% 1055441 1962 52307 247 0 0 192.168.212.3 CH - [2015-05-21 09:20:27.706555] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic8u6wxQzZrjHXY2kIAAAB1 TLSv1 ECDHE-RSA-AES256-SHA 896 4044 -% 1061503 2760 57709 149 0 0 192.168.212.3 CH - [2015-05-21 09:20:27.707199] "GET /EMail/images/Highost.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic8u6wxQzZrjHXY2kQAAAB6 TLSv1 ECDHE-RSA-AES256-SHA 912 4044 -% 1154929 2724 151030 271 0 0 192.168.212.3 CH - [2015-05-21 09:20:27.706800] "GET /EMail/images/attach.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic8u6wxQzZrjHXY2kMAAAB4 TLSv1 ECDHE-RSA-AES256-SHA 944 4044 -% 1408795 2717 405102 174 0 0 192.168.212.3 CH - [2015-05-21 09:20:35.937255] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7291 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic8w6wxQzZrjHXY2kUAAAB8 TLSv1 ECDHE-RSA-AES256-SHA 840 11558 -% 1136938 2405 131592 2366 0 0 192.168.212.3 CH - [2015-05-21 09:20:42.089577] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic8yqwxQzZrjHXY2kcAAAB9 TLSv1 ECDHE-RSA-AES256-SHA 776 11622 -% 970157 2003 965354 2255 0 0 192.168.212.3 CH - [2015-05-21 09:20:43.297187] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic8y6wxQzZrjHXY2kgAAAB- TLSv1 ECDHE-RSA-AES256-SHA 904 4049 -% 968903 3312 964484 234 0 0 192.168.212.3 CH - [2015-05-21 09:20:43.294589] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic8y6wxQzZrjHXWoREAAAA- TLSv1 ECDHE-RSA-AES256-SHA 936 4049 -% 1206191 3366 201684 158 0 0 192.168.212.3 CH - [2015-05-21 09:20:43.299560] "GET /EMail/scripts/variables_de.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" Vic8y6wxQzZrjHXWoRIAAAA@ TLSv1 ECDHE-RSA-AES256-SHA 936 4049 -% 1219841 2317 216671 364 0 0 192.168.186.76 CH - [2015-05-21 09:23:53.969262] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9655 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" Vic9iawxQzZrjHXWoTUAAAAa TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 14331 -% 1066729 4971 55489 4298 3 0 192.168.186.76 CH - [2015-05-21 09:23:53.960604] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" Vic9iawxQzZrjHXY2nMAAABq TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1444450 4813 428288 5613 3 0 192.168.186.76 CH - [2015-05-21 09:23:57.445727] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9656 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" Vic9jawxQzZrjHXY2nQAAABo TLSv1.2 ECDHE-RSA-AES256-SHA384 662 10255 -% 1350715 4506 341677 3031 3 0 192.168.186.76 CH - [2015-05-21 09:23:57.446820] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" Vic9jawxQzZrjHXWoTcAAAAc TLSv1.2 ECDHE-RSA-AES256-SHA384 694 9666 -% 1723842 5241 709880 3858 3 0 192.168.186.76 CH - [2015-05-21 09:25:06.955027] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3890_66&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" Vic90qwxQzZrjHXY2oIAAAB8 TLSv1.2 ECDHE-RSA-AES256-SHA384 1319 7526 -% 1011532 6536 0 9290 3 0 192.168.186.76 CH - [2015-05-21 09:25:17.851532] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3890_66&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" Vic93awxQzZrjHXY2oQAAABA TLSv1.2 ECDHE-RSA-AES256-SHA384 7639 630 -% 1472805 330803 122311 219 81 0 192.168.186.76 CH - [2015-05-21 09:25:19.336190] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3890_66&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" Vic936wxQzZrjHXY2oUAAAB9 TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 979306 9297 960461 7819 3 0 192.168.186.76 CH - [2015-05-21 09:25:21.647995] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9655 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" Vic94awxQzZrjHXY2oYAAABC TLSv1.2 ECDHE-RSA-AES256-SHA384 662 10255 -% 1353588 4787 341517 5072 3 0 192.168.186.76 CH - [2015-05-21 09:25:52.362119] "GET /EMail/newMessage.aspx?action=reply&mailId=3889_62&folderId=947_65&showPics=false HTTP/1.1" 200 24356 "https://www.example.com/EMail/message.aspx?&mailId=3889_62&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" Vic@AKwxQzZrjHXY2ocAAAB- TLSv1.2 ECDHE-RSA-AES256-SHA384 1367 29258 -% 569092 8961 511135 46255 6 3 192.168.186.76 CH - [2015-05-21 09:25:53.084532] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5882 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3889_62&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" Vic@AawxQzZrjHXY2okAAABB TLSv1.2 ECDHE-RSA-AES256-SHA384 1303 13742 -% 914707 4216 0 0 3 0 192.168.186.76 CH - [2015-05-21 09:25:53.000629] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3889_62&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" Vic@AawxQzZrjHXY2ogAAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 1004550 6807 983355 12645 3 0 192.168.192.35 CH - [2015-05-21 09:37:38.519660] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 7336 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" VidAwqwxQzZrjHXY2vsAAAB4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 916 11874 -% 773131 2124 768225 2338 0 0 192.168.192.35 CH - [2015-05-21 09:37:38.501855] "GET /EMail/overview.aspx HTTP/1.1" 200 7336 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" VidAwqwxQzZrjHXY2voAAAB6 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 890 11874 -% 1048920 2267 42470 3306 0 0 192.168.192.35 CH - [2015-05-21 09:37:39.371346] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" VidAw6wxQzZrjHXY2vwAAAB8 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 519 7758 -% 908025 2774 902359 2180 0 0 192.168.155.177 CH - [2015-05-21 09:38:01.973417] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "f58c4a25.522984f510ddd" VidA2awxQzZrjHXY2wIAAABE TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1380 4158 -% 1059985 11093 47940 198 0 0 192.168.155.177 CH - [2015-05-21 09:38:03.153155] "GET /EMail/error.aspx HTTP/1.1" 200 3744 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "f58c4a25.522984f510ddd" VidA26wxQzZrjHXY2wMAAABD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 732 4166 -% 1100058 5323 83816 10247 0 0 192.168.236.198 CH - [2015-05-21 09:41:53.044107] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3918 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "ed3f0f0a.522988313de8b" VidBwawxQzZrjHXY2x8AAABi TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 572 8400 -% 985551 1489 982924 228 0 0 192.168.186.76 CH - [2015-05-21 09:44:32.009599] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7291 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" VidCYKwxQzZrjHXY2zIAAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 11878 -% 1124618 6802 113999 2349 3 0 192.168.186.76 CH - [2015-05-21 09:44:42.643746] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7290 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" VidCaqwxQzZrjHXWoZgAAAA7 TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 11878 -% 1199472 5007 188292 3972 3 0 192.168.104.5 CH - [2015-05-21 09:46:53.526317] "GET /EMail/MailHandler?service=createCRL HTTP/1.1" 200 3918 "-" "Microsoft-CryptoAPI/6.2" www.example.com 192.168.34.16 443 proxy-server - + "cd5889f5.5229894fcdd2d" VidC7awxQzZrjHXY20kAAABP TLSv1 ECDHE-RSA-AES256-SHA 521 8627 -% 985016 946 982947 226 0 0 192.168.100.52 CH - [2015-05-21 09:56:46.396277] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7365 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7b6dc47a.52298b8535775" VidFPqwxQzZrjHXWocsAAAA0 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 694 11971 -% 1042484 1270 38546 2184 0 0 192.168.100.52 CH - [2015-05-21 09:56:47.488322] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7b6dc47a.52298b8535775" VidFP6wxQzZrjHXWocwAAAAy TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 497 1685 -% 738545 1864 735962 165 0 0 192.168.100.52 CH - [2015-05-21 09:56:47.542639] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/css/NNstyle.css" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7b6dc47a.52298b8535775" VidFP6wxQzZrjHXWoc0AAAA3 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1035 1930 -% 1027153 1921 24444 134 0 0 192.168.100.52 CH - [2015-05-21 09:56:51.116758] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7b6dc47a.52298b8535775" VidFQ6wxQzZrjHXWoc8AAAA4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 671 461 -% 1057931 5738 51443 134 0 0 192.168.100.52 CH - [2015-05-21 09:56:52.199298] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7538 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7b6dc47a.52298b8535775" VidFRKwxQzZrjHXWodAAAAA2 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 560 7960 -% 905816 3788 885598 15722 0 0 192.168.100.52 CH - [2015-05-21 09:56:52.250717] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/css/NNstyle.css" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7b6dc47a.52298b8535775" VidFRKwxQzZrjHXWodEAAAA5 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 466 2088 -% 861375 1840 858859 117 0 0 192.168.100.52 CH - [2015-05-21 09:56:57.678057] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7b6dc47a.52298b8535775" VidFSawxQzZrjHXWodIAAAA8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 674 421 -% 1008459 5493 2210 139 0 0 192.168.100.52 CH - [2015-05-21 09:56:58.703588] "GET /EMail/main.aspx HTTP/1.1" 200 3397 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7b6dc47a.52298b8535775" VidFSqwxQzZrjHXWodMAAAA6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 520 3813 -% 866378 2938 860816 1857 0 0 192.168.100.52 CH - [2015-05-21 09:56:59.645232] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7b6dc47a.52298b8535775" VidFS6wxQzZrjHXWodQAAAA9 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 482 4128 -% 691727 1915 682482 6833 0 0 192.168.100.52 CH - [2015-05-21 09:56:59.670371] "GET /EMail/overview.aspx HTTP/1.1" 200 5288 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7b6dc47a.52298b8535775" VidFS6wxQzZrjHXY25sAAABp TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1051 5848 -% 830667 1683 826838 1700 0 0 192.168.100.52 CH - [2015-05-21 09:57:00.520496] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7b6dc47a.52298b8535775" VidFTKwxQzZrjHXWodYAAAA7 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 468 1248 -% 807892 2303 804685 173 0 0 192.168.100.52 CH - [2015-05-21 09:56:59.667668] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7b6dc47a.52298b8535775" VidFS6wxQzZrjHXY25oAAABm TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1077 9317 -% 1873293 2133 864339 2884 0 0 192.168.100.52 CH - [2015-05-21 09:57:01.560863] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7b6dc47a.52298b8535775" VidFTawxQzZrjHXWodcAAAA@ TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 510 1260 -% 971777 1958 969032 165 0 0 192.168.100.52 CH - [2015-05-21 09:57:02.362157] "GET /EMail/inbox.aspx HTTP/1.1" 200 12228 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7b6dc47a.52298b8535775" VidFTqwxQzZrjHXY25wAAABn TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 485 12709 -% 1337371 2859 327235 6207 0 0 192.168.100.52 CH - [2015-05-21 09:57:03.794304] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7b6dc47a.52298b8535775" VidFT6wxQzZrjHXY258AAABs TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 463 1878 -% 758874 2195 755855 121 0 0 192.168.100.52 CH - [2015-05-21 09:57:03.794458] "GET /EMail/images/Highprio.gif HTTP/1.1" 200 91 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7b6dc47a.52298b8535775" VidFT6wxQzZrjHXY26AAAABt TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1029 639 -% 939921 2128 937026 140 0 0 192.168.100.52 CH - [2015-05-21 09:57:03.793786] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7b6dc47a.52298b8535775" VidFT6wxQzZrjHXY254AAABr TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 460 539 -% 990319 2740 986860 94 0 0 192.168.100.52 CH - [2015-05-21 09:57:03.817138] "GET /EMail/images/msgOpenedReplied.png HTTP/1.1" 200 717 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7b6dc47a.52298b8535775" VidFT6wxQzZrjHXY26EAAABq TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1037 1267 -% 1027323 2718 23497 387 0 0 192.168.100.52 CH - [2015-05-21 09:57:03.794092] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7b6dc47a.52298b8535775" VidFT6wxQzZrjHXWodgAAAAB TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 463 527 -% 1270584 2680 266966 252 0 0 192.168.100.52 CH - [2015-05-21 09:57:07.315975] "GET /EMail/message.aspx?&mailId=3888_37&folderId=2634_69&mailPos=0 HTTP/1.1" 200 17977 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7b6dc47a.52298b8535775" VidFU6wxQzZrjHXY26IAAABx TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 527 18487 -% 1335834 4736 293437 35522 0 0 192.168.100.52 CH - [2015-05-21 09:57:14.199965] "GET /EMail/message.aspx?&mailId=3878_82&folderId=2634_69&mailPos=1 HTTP/1.1" 200 23319 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7b6dc47a.52298b8535775" VidFWqwxQzZrjHXWodkAAAAC TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1094 23996 -% 1332077 5028 279820 44321 0 0 192.168.100.52 CH - [2015-05-21 09:59:24.015537] "GET /EMail/message.aspx?&mailId=3878_82&folderId=2634_69&mailPos=1 HTTP/1.1" 200 23314 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7b6dc47a.52298b8535775" VidF3KwxQzZrjHXY27kAAABR TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1094 23991 -% 1299212 4992 243613 47840 0 0 192.168.100.52 CH - [2015-05-21 10:01:42.949841] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7b6dc47a.52298b8535775" VidGZqwxQzZrjHXY284AAABm TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1070 547 -% 903804 2232 900753 218 0 0 192.168.4.116 CH - [2015-05-21 10:07:17.111329] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@iba.com HTTP/1.1" 200 7930 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "153fb66b.52298ddeb4a21" VidHtawxQzZrjHXY3AIAAABg TLSv1 ECDHE-RSA-AES256-SHA 640 12337 -% 970028 1376 963720 4261 0 0 192.168.4.116 CH - [2015-05-21 10:07:18.125653] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@iba.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "153fb66b.52298ddeb4a21" VidHtqwxQzZrjHXY3AMAAABZ TLSv1 ECDHE-RSA-AES256-SHA 507 2431 14% 998763 3088 994298 151 0 0 192.168.4.116 CH - [2015-05-21 10:07:18.154581] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@iba.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "153fb66b.52298ddeb4a21" VidHtqwxQzZrjHXY3AQAAABf TLSv1 ECDHE-RSA-AES256-SHA 757 1835 -% 972448 2712 968674 91 0 0 192.168.4.116 CH - [2015-05-21 10:07:18.150781] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@iba.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "153fb66b.52298ddeb4a21" VidHtqwxQzZrjHXWofoAAAAn TLSv1 ECDHE-RSA-AES256-SHA 741 8173 22% 976331 2708 970855 107 0 0 192.168.4.116 CH - [2015-05-21 10:07:18.148024] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@iba.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "153fb66b.52298ddeb4a21" VidHtqwxQzZrjHXWofkAAAAk TLSv1 ECDHE-RSA-AES256-SHA 725 752 56% 1004485 2800 905 101 0 0 192.168.4.116 CH - [2015-05-21 10:07:18.151477] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@iba.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "153fb66b.52298ddeb4a21" VidHtqwxQzZrjHXWofsAAAAl TLSv1 ECDHE-RSA-AES256-SHA 725 2032 22% 1190233 3023 185957 143 0 0 192.168.4.116 CH - [2015-05-21 10:07:19.383624] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@iba.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "153fb66b.52298ddeb4a21" VidHt6wxQzZrjHXWof0AAAAo TLSv1 ECDHE-RSA-AES256-SHA 539 1802 -% 955931 1903 953222 214 0 0 192.168.192.35 CH - [2015-05-21 10:12:19.260932] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 7336 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" VidI46wxQzZrjHXY3CwAAABN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 916 11874 -% 1071937 2402 65424 3543 0 0 192.168.192.35 CH - [2015-05-21 10:12:24.847872] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" VidI6KwxQzZrjHXY3C4AAABT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 481 7773 -% 964118 2307 956180 4840 0 0 192.168.50.183 CH - [2015-05-21 10:15:59.068853] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3918 "-" "Microsoft-CryptoAPI/6.1" www.example.com 192.168.34.16 443 proxy-server - + "1751a16.52298fd07bab5" VidJv6wxQzZrjHXY3EsAAABt TLSv1 ECDHE-RSA-AES256-SHA 533 8432 -% 817076 1278 814844 152 0 0 192.168.165.46 CH - [2015-05-21 10:26:34.660588] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7370 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c3b2a86c.5229922ea16ec" VidMOqwxQzZrjHXY3KwAAABK TLSv1.2 ECDHE-RSA-AES128-SHA256 687 11891 -% 1063424 1304 58526 2971 0 0 192.168.165.46 CH - [2015-05-21 10:26:35.828977] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c3b2a86c.5229922ea16ec" VidMO6wxQzZrjHXY3K0AAABP TLSv1.2 ECDHE-RSA-AES128-SHA256 470 2527 14% 907637 2384 903439 200 0 0 192.168.4.116 CH - [2015-05-21 10:28:23.446948] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@iba.com HTTP/1.1" 200 7930 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "153fb66b.52298ddeb4a21" VidMp6wxQzZrjHXWolIAAAA@ TLSv1 ECDHE-RSA-AES256-SHA 736 12177 -% 1004602 3987 0 3961 0 0 192.168.4.116 CH - [2015-05-21 10:29:19.356216] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@iba.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "153fb66b.52298ddeb4a21" VidM36wxQzZrjHXY3MAAAABh TLSv1 ECDHE-RSA-AES256-SHA 757 2235 -% 851676 3115 847793 145 0 0 192.168.4.116 CH - [2015-05-21 10:29:19.968354] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@iba.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "153fb66b.52298ddeb4a21" VidM36wxQzZrjHXY3MEAAABi TLSv1 ECDHE-RSA-AES256-SHA 1029 486 -% 974169 5716 967785 154 0 0 192.168.4.116 CH - [2015-05-21 10:29:20.953059] "GET /EMail/error.aspx HTTP/1.1" 200 3805 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@iba.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "153fb66b.52298ddeb4a21" VidM4KwxQzZrjHXY3MMAAABl TLSv1 ECDHE-RSA-AES256-SHA 539 4250 -% 925957 2112 915064 8174 0 0 192.168.4.116 CH - [2015-05-21 10:29:30.031258] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@iba.com HTTP/1.1" 200 7931 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "153fb66b.52298ddeb4a21" VidM6qwxQzZrjHXY3MQAAABn TLSv1 ECDHE-RSA-AES256-SHA 693 8491 -% 884446 4749 876649 2258 0 0 192.168.4.116 CH - [2015-05-21 10:29:30.958485] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@iba.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "153fb66b.52298ddeb4a21" VidM6qwxQzZrjHXY3MUAAABs TLSv1 ECDHE-RSA-AES256-SHA 539 2090 -% 898079 2006 895215 191 0 0 192.168.192.35 CH - [2015-05-21 10:34:41.112327] "GET /EMail/overview.aspx HTTP/1.1" 200 5293 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" VidOIawxQzZrjHXY3PMAAABd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 890 9741 -% 1175308 3219 169596 1668 0 0 192.168.38.28 CH - [2015-05-21 10:37:22.347178] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3918 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "cbf01c75.52299498500aa" VidOwqwxQzZrjHXY3QUAAABq TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 572 8400 -% 825908 1214 823662 187 0 0 192.168.192.35 CH - [2015-05-21 10:38:55.279106] "GET /EMail/overview.aspx HTTP/1.1" 200 5294 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" VidPH6wxQzZrjHXY3RIAAAB4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1164 9742 -% 851923 2077 846644 2643 0 0 192.168.192.35 CH - [2015-05-21 10:38:55.293520] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" VidPH6wxQzZrjHXY3RMAAAB6 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1190 13205 -% 1460145 2242 450597 3323 0 0 192.168.186.76 CH - [2015-05-21 10:47:30.709895] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" VidRIqwxQzZrjHXWoqwAAAAd TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 12038 -% 743659 6532 733323 2260 3 0 192.168.186.76 CH - [2015-05-21 10:47:31.489824] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "e7ba1fa5.522969f9ebe10" VidRI6wxQzZrjHXWoq0AAAAf TLSv1.2 ECDHE-RSA-AES256-SHA384 662 0 -% 919362 6354 908313 3315 3 0 192.168.186.76 CH - [2015-05-21 10:47:35.749477] "GET /EMail/overview.aspx HTTP/1.1" 200 5538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" VidRJ6wxQzZrjHXY3VoAAABB TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 10134 -% 1368933 6675 356863 3465 3 0 192.168.32.7 CH - [2015-05-21 10:48:03.901452] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7375 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidRQ6wxQzZrjHXY3WAAAABJ TLSv1.2 ECDHE-RSA-AES128-SHA256 691 11891 -% 1160924 2045 154859 3349 0 0 192.168.32.7 CH - [2015-05-21 10:48:05.164695] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidRRawxQzZrjHXY3WEAAABF TLSv1.2 ECDHE-RSA-AES128-SHA256 486 2713 14% 749204 2232 745799 151 0 0 192.168.32.7 CH - [2015-05-21 10:48:05.205250] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidRRawxQzZrjHXY3WIAAABM TLSv1.2 ECDHE-RSA-AES128-SHA256 808 4660 23% 1022347 2201 18506 157 0 0 192.168.32.7 CH - [2015-05-21 10:48:05.210173] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidRRawxQzZrjHXY3WYAAABK TLSv1.2 ECDHE-RSA-AES128-SHA256 776 864 56% 1045351 2693 41672 154 0 0 192.168.32.7 CH - [2015-05-21 10:48:05.206106] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4caecf8.522996fc2580c" VidRRawxQzZrjHXY3WMAAABR TLSv1.2 ECDHE-RSA-AES128-SHA256 792 8573 22% 1212587 3318 205285 157 0 0 192.168.32.7 CH - [2015-05-21 10:48:05.206329] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidRRawxQzZrjHXY3WQAAABN TLSv1.2 ECDHE-RSA-AES128-SHA256 776 2144 22% 1254457 2413 250277 245 0 0 192.168.32.7 CH - [2015-05-21 10:48:05.208148] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidRRawxQzZrjHXY3WUAAABT TLSv1.2 ECDHE-RSA-AES128-SHA256 808 1931 -% 1298154 3052 293971 186 0 0 192.168.186.76 CH - [2015-05-21 10:48:06.077702] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5882 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3890_79&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ba1fa5.522969f9ebe10" VidRRqwxQzZrjHXWoq8AAAAg TLSv1.2 ECDHE-RSA-AES256-SHA384 1303 13742 -% 612622 3919 0 0 3 0 192.168.32.7 CH - [2015-05-21 10:48:06.577852] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidRRqwxQzZrjHXY3WcAAABO TLSv1.2 ECDHE-RSA-AES128-SHA256 518 1866 -% 855558 2018 852684 234 0 0 192.168.32.7 CH - [2015-05-21 10:48:07.549460] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "5aea11c8.522996ffa0214" VidRR6wxQzZrjHXY3WkAAABU TLSv1.2 ECDHE-RSA-AES128-SHA256 627 5651 -% 869450 738 867976 181 0 0 192.168.32.7 CH - [2015-05-21 10:48:17.686480] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidRUawxQzZrjHXWorEAAAAj TLSv1.2 ECDHE-RSA-AES128-SHA256 808 2331 -% 1040224 1905 37437 212 0 0 192.168.32.7 CH - [2015-05-21 10:48:17.873652] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidRUawxQzZrjHXY3WsAAABS TLSv1.2 ECDHE-RSA-AES128-SHA256 952 630 -% 1111022 4733 105348 197 0 0 192.168.32.7 CH - [2015-05-21 10:48:18.996380] "GET /EMail/main.aspx HTTP/1.1" 200 3407 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidRUqwxQzZrjHXY3WwAAABV TLSv1.2 ECDHE-RSA-AES128-SHA256 534 3882 -% 1000098 1948 995829 1656 0 0 192.168.32.7 CH - [2015-05-21 10:48:20.081347] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4caecf8.522996fc2580c" VidRVKwxQzZrjHXY3W0AAABX TLSv1.2 ECDHE-RSA-AES128-SHA256 470 4202 -% 1132761 3360 118352 10349 0 0 192.168.32.7 CH - [2015-05-21 10:48:20.109627] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidRVKwxQzZrjHXWorIAAAAn TLSv1.2 ECDHE-RSA-AES128-SHA256 760 5963 -% 1727835 2103 722208 2878 0 0 192.168.32.7 CH - [2015-05-21 10:48:21.879556] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidRVawxQzZrjHXWorMAAAAk TLSv1.2 ECDHE-RSA-AES128-SHA256 502 1322 -% 884587 2862 880882 194 0 0 192.168.32.7 CH - [2015-05-21 10:48:20.107953] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidRVKwxQzZrjHXY3W4AAABc TLSv1.2 ECDHE-RSA-AES128-SHA256 792 9683 -% 2727302 2837 717815 4541 0 0 192.168.32.7 CH - [2015-05-21 10:48:22.877144] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidRVqwxQzZrjHXY3W8AAABa TLSv1.2 ECDHE-RSA-AES128-SHA256 534 1338 -% 804344 3162 800333 144 0 0 192.168.32.7 CH - [2015-05-21 10:48:23.788555] "GET /EMail/inbox.aspx HTTP/1.1" 200 11171 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidRV6wxQzZrjHXY3XAAAABd TLSv1.2 ECDHE-RSA-AES128-SHA256 470 11780 -% 916173 1998 909245 4095 0 0 192.168.32.7 CH - [2015-05-21 10:48:24.753916] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidRWKwxQzZrjHXY3XIAAABY TLSv1.2 ECDHE-RSA-AES128-SHA256 486 1946 -% 705806 2324 702478 427 0 0 192.168.32.7 CH - [2015-05-21 10:48:24.749972] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidRWKwxQzZrjHXY3XEAAABW TLSv1.2 ECDHE-RSA-AES128-SHA256 486 602 -% 877880 2136 875085 142 0 0 192.168.32.7 CH - [2015-05-21 10:48:24.752605] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4caecf8.522996fc2580c" VidRWKwxQzZrjHXWorQAAAAl TLSv1.2 ECDHE-RSA-AES128-SHA256 486 602 -% 1143309 2077 140478 256 0 0 192.168.32.7 CH - [2015-05-21 10:48:30.435761] "GET /EMail/message.aspx?&mailId=3890_1&folderId=3481_21&mailPos=0 HTTP/1.1" 200 11365 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidRXqwxQzZrjHXWorUAAAAo TLSv1.2 ECDHE-RSA-AES128-SHA256 518 11972 -% 1330083 2988 307601 18638 0 0 192.168.32.7 CH - [2015-05-21 10:48:33.727753] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3890_1&folderId=3481_21&attachmentId=2&token=-136257753481866656E17 HTTP/1.1" 200 129347 "https://www.example.com/EMail/message.aspx?&mailId=3890_1&folderId=3481_21&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidRYawxQzZrjHXWorYAAAAp TLSv1.2 ECDHE-RSA-AES128-SHA256 614 135401 -% 1146007 5563 84823 294 0 0 192.168.32.7 CH - [2015-05-21 10:50:29.674593] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/message.aspx?&mailId=3890_1&folderId=3481_21&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidR1awxQzZrjHXY3YkAAABu TLSv1.2 ECDHE-RSA-AES128-SHA256 824 2331 -% 989377 1940 986495 218 0 0 192.168.32.7 CH - [2015-05-21 10:50:35.263822] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 11172 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidR26wxQzZrjHXY3YoAAAB0 TLSv1.2 ECDHE-RSA-AES128-SHA256 470 11780 -% 1197588 3883 187976 4398 0 0 192.168.32.7 CH - [2015-05-21 10:50:35.299278] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidR26wxQzZrjHXY3YsAAAB5 TLSv1.2 ECDHE-RSA-AES128-SHA256 776 9683 -% 1724481 2618 715048 2689 0 0 192.168.192.35 CH - [2015-05-21 10:52:55.805730] "GET /EMail/overview.aspx HTTP/1.1" 200 5293 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" VidSZ6wxQzZrjHXY3aYAAABO TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 890 9741 -% 1137865 2170 133244 1903 0 0 192.168.32.7 CH - [2015-05-21 10:53:41.199359] "GET /EMail/message.aspx?&mailId=3890_1&folderId=3481_21&mailPos=0 HTTP/1.1" 200 11358 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidSlawxQzZrjHXWosIAAAA3 TLSv1.2 ECDHE-RSA-AES128-SHA256 883 15768 -% 1313827 2975 290900 19204 0 0 192.168.32.7 CH - [2015-05-21 10:53:43.875042] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3890_1&folderId=3481_21&attachmentId=2&token=-20768407523697992E16 HTTP/1.1" 200 129347 "https://www.example.com/EMail/message.aspx?&mailId=3890_1&folderId=3481_21&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidSl6wxQzZrjHXWosMAAAA1 TLSv1.2 ECDHE-RSA-AES128-SHA256 614 135401 -% 1133326 3851 73641 177 0 0 192.168.32.7 CH - [2015-05-21 10:56:22.371699] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 11171 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidTNqwxQzZrjHXWotAAAAAF TLSv1.2 ECDHE-RSA-AES128-SHA256 760 11957 -% 1385873 2405 375960 6432 0 0 192.168.32.7 CH - [2015-05-21 10:56:22.372575] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidTNqwxQzZrjHXY3cQAAABz TLSv1.2 ECDHE-RSA-AES128-SHA256 776 9683 -% 1699719 2188 688685 4690 0 0 192.168.32.7 CH - [2015-05-21 10:56:30.666682] "GET /EMail/message.aspx?&mailId=3890_1&folderId=3481_21&mailPos=0 HTTP/1.1" 200 11364 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidTPqwxQzZrjHXY3cUAAABv TLSv1.2 ECDHE-RSA-AES128-SHA256 808 12149 -% 1374829 4644 349756 19252 0 0 192.168.32.7 CH - [2015-05-21 10:56:35.108862] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3890_1&folderId=3481_21&attachmentId=2&token=-153332402079623904E17 HTTP/1.1" 200 129347 "https://www.example.com/EMail/message.aspx?&mailId=3890_1&folderId=3481_21&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidTQ6wxQzZrjHXY3ccAAABw TLSv1.2 ECDHE-RSA-AES128-SHA256 614 135401 -% 1270637 5264 209794 247 0 0 192.168.32.7 CH - [2015-05-21 10:57:27.271313] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3890_1&folderId=3481_21&attachmentId=2&token=-153332402079623904E17 HTTP/1.1" 200 129347 "https://www.example.com/EMail/message.aspx?&mailId=3890_1&folderId=3481_21&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidTd6wxQzZrjHXY3dAAAAB9 TLSv1.2 ECDHE-RSA-AES128-SHA256 904 135594 -% 1212004 8741 146864 199 0 0 192.168.32.7 CH - [2015-05-21 10:59:55.894260] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4caecf8.522996fc2580c" VidUC6wxQzZrjHXY3d4AAABF TLSv1.2 ECDHE-RSA-AES128-SHA256 851 4302 -% 1035827 3781 31010 194 0 0 192.168.32.7 CH - [2015-05-21 10:59:56.940921] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4caecf8.522996fc2580c" VidUDKwxQzZrjHXY3d8AAABM TLSv1.2 ECDHE-RSA-AES128-SHA256 470 767 75% 1037244 2767 33565 228 0 0 192.168.32.7 CH - [2015-05-21 10:59:58.265750] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "5aea11c8.522996ffa0214" VidUDqwxQzZrjHXY3eIAAABN TLSv1.2 ECDHE-RSA-AES128-SHA256 691 5475 -% 2405 1428 45 108 0 0 192.168.32.7 CH - [2015-05-21 10:59:58.075109] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidUDqwxQzZrjHXY3eEAAABR TLSv1.2 ECDHE-RSA-AES128-SHA256 438 357 -% 935651 2238 932646 219 0 0 192.168.32.7 CH - [2015-05-21 10:59:59.021752] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidUD6wxQzZrjHXY3eMAAABT TLSv1.2 ECDHE-RSA-AES128-SHA256 422 7834 -% 1038768 1928 32927 3144 0 0 192.168.32.7 CH - [2015-05-21 11:00:00.139323] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidUEKwxQzZrjHXY3eUAAABO TLSv1.2 ECDHE-RSA-AES128-SHA256 824 2144 22% 851012 2664 846979 193 0 0 192.168.32.7 CH - [2015-05-21 11:00:00.110535] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidUEKwxQzZrjHXY3eQAAABP TLSv1.2 ECDHE-RSA-AES128-SHA256 550 2713 14% 895349 2941 890697 150 0 0 192.168.32.7 CH - [2015-05-21 11:00:00.151593] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4caecf8.522996fc2580c" VidUEKwxQzZrjHXY3egAAABQ TLSv1.2 ECDHE-RSA-AES128-SHA256 856 7973 22% 1022120 2038 15941 203 0 0 192.168.32.7 CH - [2015-05-21 11:00:00.149880] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidUEKwxQzZrjHXY3eYAAABS TLSv1.2 ECDHE-RSA-AES128-SHA256 872 422 -% 1029595 3233 25662 147 0 0 192.168.32.7 CH - [2015-05-21 11:00:00.149970] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidUEKwxQzZrjHXY3ecAAABU TLSv1.2 ECDHE-RSA-AES128-SHA256 824 864 56% 1122356 2320 119060 229 0 0 192.168.32.7 CH - [2015-05-21 11:00:00.148036] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidUEKwxQzZrjHXWouYAAAAa TLSv1.2 ECDHE-RSA-AES128-SHA256 856 4405 23% 1178517 1948 174682 175 0 0 192.168.32.7 CH - [2015-05-21 11:00:01.360471] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidUEawxQzZrjHXWoucAAAAc TLSv1.2 ECDHE-RSA-AES128-SHA256 582 245 -% 660884 2510 657631 142 0 0 192.168.32.7 CH - [2015-05-21 11:00:12.058250] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7375 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidUHKwxQzZrjHXY3eoAAABc TLSv1.2 ECDHE-RSA-AES128-SHA256 744 8027 -% 913799 4161 906107 2838 0 0 192.168.32.7 CH - [2015-05-21 11:00:27.294033] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidUK6wxQzZrjHXWouwAAAAi TLSv1.2 ECDHE-RSA-AES128-SHA256 952 630 -% 1121830 3555 117393 244 0 0 192.168.32.7 CH - [2015-05-21 11:00:28.427178] "GET /EMail/main.aspx HTTP/1.1" 200 3407 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidULKwxQzZrjHXWou4AAAAm TLSv1.2 ECDHE-RSA-AES128-SHA256 534 3882 -% 1123934 3060 118172 1869 0 0 192.168.32.7 CH - [2015-05-21 11:00:29.627728] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4caecf8.522996fc2580c" VidULawxQzZrjHXWou8AAAAn TLSv1.2 ECDHE-RSA-AES128-SHA256 470 4202 -% 1187450 2861 177418 6422 0 0 192.168.32.7 CH - [2015-05-21 11:00:29.655067] "GET /EMail/overview.aspx HTTP/1.1" 200 5302 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidULawxQzZrjHXWovAAAAAk TLSv1.2 ECDHE-RSA-AES128-SHA256 760 5963 -% 1298057 3073 291272 2886 0 0 192.168.32.7 CH - [2015-05-21 11:00:29.663489] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidULawxQzZrjHXWovEAAAAl TLSv1.2 ECDHE-RSA-AES128-SHA256 792 9683 -% 1938899 3735 927308 3528 0 0 192.168.32.7 CH - [2015-05-21 11:00:34.883185] "GET /EMail/inbox.aspx HTTP/1.1" 200 11171 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidUMqwxQzZrjHXWovIAAAAo TLSv1.2 ECDHE-RSA-AES128-SHA256 470 11727 -% 1309943 2989 299502 6077 0 0 192.168.32.7 CH - [2015-05-21 11:01:37.258572] "GET /EMail/message.aspx?&mailId=3890_1&folderId=3481_21&mailPos=0 HTTP/1.1" 200 11365 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidUcawxQzZrjHXY3fMAAABj TLSv1.2 ECDHE-RSA-AES128-SHA256 808 12149 -% 1399306 3538 376269 18423 0 0 192.168.32.7 CH - [2015-05-21 11:01:40.718557] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3890_1&folderId=3481_21&attachmentId=2&token=-139232228831021696E17 HTTP/1.1" 200 129347 "https://www.example.com/EMail/message.aspx?&mailId=3890_1&folderId=3481_21&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidUdKwxQzZrjHXY3fUAAABh TLSv1.2 ECDHE-RSA-AES128-SHA256 614 135401 -% 1214805 4235 154828 360 0 0 192.168.32.7 CH - [2015-05-21 11:02:51.620973] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4caecf8.522996fc2580c" VidUu6wxQzZrjHXY3gEAAABv TLSv1.2 ECDHE-RSA-AES128-SHA256 776 614 -% 864639 3715 859965 302 0 0 192.168.32.7 CH - [2015-05-21 11:02:52.561879] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidUvKwxQzZrjHXY3gIAAAB3 TLSv1.2 ECDHE-RSA-AES128-SHA256 438 357 -% 773494 2472 770379 150 0 0 192.168.32.7 CH - [2015-05-21 11:02:53.346575] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidUvawxQzZrjHXY3gMAAABw TLSv1.2 ECDHE-RSA-AES128-SHA256 422 7834 -% 1152699 2206 147513 2237 0 0 192.168.32.7 CH - [2015-05-21 11:02:54.569387] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidUvqwxQzZrjHXY3gUAAAB0 TLSv1.2 ECDHE-RSA-AES128-SHA256 824 2144 22% 871665 1811 868740 264 0 0 192.168.32.7 CH - [2015-05-21 11:02:54.542575] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidUvqwxQzZrjHXY3gQAAABu TLSv1.2 ECDHE-RSA-AES128-SHA256 550 2527 14% 1167070 2046 163730 151 0 0 192.168.32.7 CH - [2015-05-21 11:02:54.583596] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidUvqwxQzZrjHXY3ggAAAB1 TLSv1.2 ECDHE-RSA-AES128-SHA256 872 422 -% 1191194 1780 188683 127 0 0 192.168.32.7 CH - [2015-05-21 11:02:54.580730] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidUvqwxQzZrjHXY3gYAAAB7 TLSv1.2 ECDHE-RSA-AES128-SHA256 856 4660 23% 1211711 1695 208602 106 0 0 192.168.32.7 CH - [2015-05-21 11:02:54.579864] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidUvqwxQzZrjHXWov0AAAAy TLSv1.2 ECDHE-RSA-AES128-SHA256 824 864 56% 1274533 1804 271947 133 0 0 192.168.32.7 CH - [2015-05-21 11:02:54.583142] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4caecf8.522996fc2580c" VidUvqwxQzZrjHXY3gcAAAB5 TLSv1.2 ECDHE-RSA-AES128-SHA256 856 8573 22% 1502226 2441 495417 207 0 0 192.168.32.7 CH - [2015-05-21 11:02:56.152474] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c4host.522996fc2580c" VidUwKwxQzZrjHXY3gkAAAB@ TLSv1.2 ECDHE-RSA-AES128-SHA256 582 245 -% 813367 3422 809147 147 0 0 192.168.215.195 CH - [2015-05-21 11:03:09.876892] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3918 "-" "ocspd (unknown version) CFNetwork/520.5.3 Darwin/11.4.2 (x86_64) (iMac8%2C1)" www.example.com 192.168.34.16 443 proxy-server - - "e58d14a8.52299a5c26e9c" VidUzawxQzZrjHXWov8AAAA1 TLSv1 ECDHE-RSA-AES256-SHA 507 8395 -% 848222 1408 845949 152 0 0 192.168.215.195 CH - [2015-05-21 11:04:43.932249] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3918 "-" "ocspd (unknown version) CFNetwork/520.5.3 Darwin/11.4.2 (x86_64) (iMac8%2C1)" www.example.com 192.168.34.16 443 proxy-server - - "8d5786d7.52299ab5d9a59" VidVK6wxQzZrjHXY3hgAAABL TLSv1 ECDHE-RSA-AES256-SHA 464 4707 -% 861529 1466 859034 190 0 0 192.168.60.114 CH - [2015-05-21 11:21:16.734739] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3918 "-" "Microsoft-CryptoAPI/6.1" www.example.com 192.168.34.16 443 proxy-server - + "eca0ffa7.52299e68a9113" VidZDKwxQzZrjHXWo1EAAAAK TLSv1 ECDHE-RSA-AES256-SHA 533 8432 -% 979880 1259 977502 202 0 0 192.168.219.126 CH - [2015-05-21 11:32:13.373345] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3918 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "cc01637f.52299d5e9718b" VidbnawxQzZrjHXWo3sAAAA3 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 661 8237 -% 931334 2476 927818 172 0 0 192.168.219.126 CH - [2015-05-21 11:32:17.953173] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3918 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "cc01637f.52299d5e9718b" VidboawxQzZrjHXWo3wAAAA1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 328 4411 -% 750589 4054 745120 138 0 0 192.168.192.35 CH - [2015-05-21 11:50:42.064261] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 7336 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" Vidf8qwxQzZrjHXY36gAAABn TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 916 11874 -% 827171 2574 821789 2265 0 0 192.168.192.35 CH - [2015-05-21 11:50:42.971250] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" Vidf8qwxQzZrjHXY36kAAABs TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 519 7758 -% 846221 1861 841093 2676 0 0 192.168.192.35 CH - [2015-05-21 11:50:46.855437] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" Vidf9qwxQzZrjHXY36oAAABt TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 481 7773 -% 939181 2366 934124 2138 0 0 192.168.192.35 CH - [2015-05-21 11:55:57.534353] "GET /EMail/overview.aspx HTTP/1.1" 200 5292 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" VidhLawxQzZrjHXWo9EAAAAP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 890 9740 -% 1278974 2850 273733 1736 0 0 192.168.192.35 CH - [2015-05-21 11:55:57.545390] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" VidhLawxQzZrjHXY39gAAABY TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 916 13205 -% 1524575 3584 512502 4487 0 0 192.168.165.46 CH - [2015-05-21 11:57:26.497289] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7370 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "496ae65f.5229a67de8409" VidhhqwxQzZrjHXWo9cAAAAV TLSv1.2 ECDHE-RSA-AES128-SHA256 687 11891 -% 923309 1295 917485 3683 0 0 192.168.165.46 CH - [2015-05-21 11:57:28.794243] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "496ae65f.5229a67de8409" VidhiKwxQzZrjHXWo9kAAAAZ TLSv1.2 ECDHE-RSA-AES128-SHA256 646 453 -% 1128952 3511 124609 225 0 0 192.168.165.46 CH - [2015-05-21 11:57:29.946070] "GET /EMail/main.aspx HTTP/1.1" 200 3402 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "496ae65f.5229a67de8409" VidhiawxQzZrjHXWo9oAAAAY TLSv1.2 ECDHE-RSA-AES128-SHA256 518 3882 -% 673350 2199 669258 1170 0 0 192.168.165.46 CH - [2015-05-21 11:57:30.675333] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "496ae65f.5229a67de8409" VidhiqwxQzZrjHXWo9sAAAAX TLSv1.2 ECDHE-RSA-AES128-SHA256 454 4202 -% 1281033 1953 271298 7245 0 0 192.168.165.46 CH - [2015-05-21 11:57:30.723179] "GET /EMail/overview.aspx HTTP/1.1" 200 5302 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "496ae65f.5229a67de8409" VidhiqwxQzZrjHXY3@UAAABl TLSv1.2 ECDHE-RSA-AES128-SHA256 740 5963 -% 1390456 1969 384788 3010 0 0 192.168.165.46 CH - [2015-05-21 11:57:47.935572] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "496ae65f.5229a67de8409" Vidhm6wxQzZrjHXY3@YAAABs TLSv1.2 ECDHE-RSA-AES128-SHA256 772 614 -% 894153 3657 889501 196 0 0 192.168.165.46 CH - [2015-05-21 11:57:48.883201] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "496ae65f.5229a67de8409" VidhnKwxQzZrjHXY3@cAAABt TLSv1.2 ECDHE-RSA-AES128-SHA256 422 357 -% 949643 2214 946452 203 0 0 192.168.165.46 CH - [2015-05-21 11:57:49.855441] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "496ae65f.5229a67de8409" VidhnawxQzZrjHXY3@gAAABq TLSv1.2 ECDHE-RSA-AES128-SHA256 406 7834 -% 933583 2585 927898 2269 0 0 192.168.165.46 CH - [2015-05-21 11:57:50.839982] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "496ae65f.5229a67de8409" VidhnqwxQzZrjHXY3@oAAABn TLSv1.2 ECDHE-RSA-AES128-SHA256 820 2144 22% 776966 1828 773979 192 0 0 192.168.165.46 CH - [2015-05-21 11:57:50.892628] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "496ae65f.5229a67de8409" VidhnqwxQzZrjHXWo@MAAAAh TLSv1.2 ECDHE-RSA-AES128-SHA256 852 422 -% 937150 2573 933733 181 0 0 192.168.165.46 CH - [2015-05-21 11:57:50.888813] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "496ae65f.5229a67de8409" VidhnqwxQzZrjHXWo@EAAAAe TLSv1.2 ECDHE-RSA-AES128-SHA256 820 864 56% 946239 1854 943524 107 0 0 192.168.165.46 CH - [2015-05-21 11:57:50.839328] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "496ae65f.5229a67de8409" VidhnqwxQzZrjHXY3@kAAABr TLSv1.2 ECDHE-RSA-AES128-SHA256 534 2527 14% 999264 3102 994698 117 0 0 192.168.165.46 CH - [2015-05-21 11:57:50.887975] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "496ae65f.5229a67de8409" VidhnqwxQzZrjHXWo@AAAAAg TLSv1.2 ECDHE-RSA-AES128-SHA256 852 4660 23% 1172866 1999 169093 188 0 0 192.168.165.46 CH - [2015-05-21 11:57:50.891197] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "496ae65f.5229a67de8409" VidhnqwxQzZrjHXWo@IAAAAf TLSv1.2 ECDHE-RSA-AES128-SHA256 852 8573 22% 1185632 1691 180636 107 0 0 192.168.165.46 CH - [2015-05-21 11:57:52.125036] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "496ae65f.5229a67de8409" VidhoKwxQzZrjHXWo@QAAAAj TLSv1.2 ECDHE-RSA-AES128-SHA256 566 245 -% 925501 1923 922886 162 0 0 192.168.192.35 CH - [2015-05-21 12:00:09.742948] "GET /EMail/overview.aspx HTTP/1.1" 200 5292 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" VidiKawxQzZrjHXY4AUAAABL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1089 5857 -% 1174017 1903 166879 4511 0 0 192.168.192.35 CH - [2015-05-21 12:00:09.752652] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" VidiKawxQzZrjHXY4AYAAABJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1115 9322 -% 1452129 2116 442588 2904 0 0 192.168.192.35 CH - [2015-05-21 12:01:30.210716] "GET /EMail/inbox.aspx HTTP/1.1" 200 7279 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" VidieqwxQzZrjHXY4BQAAABc TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 861 11727 -% 1030477 2798 24588 2352 0 0 192.168.192.35 CH - [2015-05-21 12:01:32.891394] "GET /EMail/overview.aspx HTTP/1.1" 200 5293 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" VidifKwxQzZrjHXY4BUAAABa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 522 5715 -% 1062750 2850 57629 1639 0 0 192.168.192.35 CH - [2015-05-21 12:10:18.141142] "GET /EMail/overview.aspx HTTP/1.1" 200 5293 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" VidkiqwxQzZrjHXWpBgAAAAX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 890 9741 -% 1100059 2909 94710 1789 0 0 192.168.192.35 CH - [2015-05-21 12:10:22.417569] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" VidkjqwxQzZrjHXWpBkAAAAb TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 548 9179 -% 1425989 3814 414804 2879 0 0 192.168.213.23 CH - [2015-05-21 12:16:26.861188] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7383 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4156aa79.5229aabd71684" Vidl@qwxQzZrjHXY4IkAAABP TLSv1 ECDHE-RSA-AES256-SHA 720 11809 -% 1002313 1577 997455 2573 0 0 192.168.213.23 CH - [2015-05-21 12:16:28.062295] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4156aa79.5229aabd71684" Vidl-KwxQzZrjHXWpDMAAAA3 TLSv1 ECDHE-RSA-AES256-SHA 885 358 -% 840298 2031 837536 143 0 0 192.168.213.23 CH - [2015-05-21 12:16:28.008960] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4156aa79.5229aabd71684" Vidl-KwxQzZrjHXY4IoAAABM TLSv1 ECDHE-RSA-AES256-SHA 678 213 -% 900712 2669 897281 106 0 0 192.168.213.23 CH - [2015-05-21 12:16:28.042203] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4156aa79.5229aabd71684" Vidl-KwxQzZrjHXY4IsAAABQ TLSv1 ECDHE-RSA-AES256-SHA 901 358 -% 1079757 3028 75841 201 0 0 192.168.213.23 CH - [2015-05-21 12:16:28.066519] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4156aa79.5229aabd71684" Vidl-KwxQzZrjHXY4IwAAABS TLSv1 ECDHE-RSA-AES256-SHA 917 358 -% 1061256 2236 58243 109 0 0 192.168.213.23 CH - [2015-05-21 12:16:28.055167] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4156aa79.5229aabd71684" Vidl-KwxQzZrjHXWpDIAAAAy TLSv1 ECDHE-RSA-AES256-SHA 885 358 -% 1077170 1732 74271 436 0 0 192.168.213.23 CH - [2015-05-21 12:16:28.066968] "GET /EMail/scripts/variables_de.js HTTP/1.1" 304 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4156aa79.5229aabd71684" Vidl-KwxQzZrjHXY4I0AAABV TLSv1 ECDHE-RSA-AES256-SHA 917 358 -% 1066447 2870 62730 99 0 0 192.168.213.23 CH - [2015-05-21 12:16:29.268087] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4156aa79.5229aabd71684" Vidl-awxQzZrjHXY4I4AAABU TLSv1 ECDHE-RSA-AES256-SHA 710 213 -% 851491 3708 846692 153 0 0 192.168.213.23 CH - [2015-05-21 12:16:52.615883] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7556 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4156aa79.5229aabd71684" VidmFKwxQzZrjHXWpDYAAAA2 TLSv1 ECDHE-RSA-AES256-SHA 936 11830 -% 994537 3470 972447 18058 0 0 192.168.213.23 CH - [2015-05-21 12:17:07.109747] "POST /EMail/MailHandler?service=requestPassword HTTP/1.1" 303 - "https://www.example.com/EMail/requestPassword.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4156aa79.5229aabd71684" VidmI6wxQzZrjHXY4JMAAABd TLSv1 ECDHE-RSA-AES256-SHA 1016 4209 -% 2096548 6687 89030 158 0 0 192.168.213.23 CH - [2015-05-21 12:17:48.302344] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4156aa79.5229aabd71684" VidmTKwxQzZrjHXWpDkAAAA- TLSv1 ECDHE-RSA-AES256-SHA 1032 4257 -% 925365 5645 918978 206 0 0 192.168.213.23 CH - [2015-05-21 12:17:50.559700] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4156aa79.5229aabd71684" VidmTqwxQzZrjHXWpDsAAAA@ TLSv1 ECDHE-RSA-AES256-SHA 840 7990 -% 1104465 2387 94936 6601 0 0 192.168.213.23 CH - [2015-05-21 12:17:50.597362] "GET /EMail/overview.aspx HTTP/1.1" 200 5300 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4156aa79.5229aabd71684" VidmTqwxQzZrjHXY4JwAAABp TLSv1 ECDHE-RSA-AES256-SHA 757 5883 -% 1490190 1854 484953 2801 0 0 192.168.213.23 CH - [2015-05-21 12:17:50.597577] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4156aa79.5229aabd71684" VidmTqwxQzZrjHXY4J0AAABh TLSv1 ECDHE-RSA-AES256-SHA 773 9379 -% 1579331 2541 567917 4748 0 0 192.168.213.23 CH - [2015-05-21 12:17:58.711384] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7291 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4156aa79.5229aabd71684" VidmVqwxQzZrjHXY4J4AAABm TLSv1 ECDHE-RSA-AES256-SHA 872 11558 -% 1122221 3274 115709 2289 0 0 192.168.213.23 CH - [2015-05-21 12:18:00.211683] "GET /EMail/images/attach.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4156aa79.5229aabd71684" VidmWKwxQzZrjHXY4J8AAABl TLSv1 ECDHE-RSA-AES256-SHA 952 4049 -% 1103415 3346 99366 154 0 0 192.168.213.23 CH - [2015-05-21 12:18:04.313634] "GET /EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle HTTP/1.1" 200 9413 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4156aa79.5229aabd71684" VidmXKwxQzZrjHXWpD4AAAAE TLSv1 ECDHE-RSA-AES256-SHA 936 13987 -% 1368515 4670 356430 2888 0 0 192.168.213.23 CH - [2015-05-21 12:18:06.466644] "GET /EMail/images/tree/folder/pixel.gif HTTP/1.1" 200 807 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4156aa79.5229aabd71684" VidmXqwxQzZrjHXY4KAAAABt TLSv1 ECDHE-RSA-AES256-SHA 936 5062 -% 1111092 3765 106397 205 0 0 192.168.213.23 CH - [2015-05-21 12:18:07.842109] "GET /EMail/folderOverview.aspx HTTP/1.1" 200 4650 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4156aa79.5229aabd71684" VidmX6wxQzZrjHXY4KEAAABn TLSv1 ECDHE-RSA-AES256-SHA 880 8913 -% 1319565 2023 315382 1582 0 0 192.168.212.1 CH - [2015-05-21 12:18:20.839478] "GET /EMail/main.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6b303f8.5229ab2a24236" VidmbKwxQzZrjHXY4KQAAABo TLSv1 ECDHE-RSA-AES256-SHA 656 11777 -% 997498 876 991690 3957 0 0 192.168.212.1 CH - [2015-05-21 12:18:22.072928] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6b303f8.5229ab2a24236" VidmbqwxQzZrjHXY4KcAAAB3 TLSv1 ECDHE-RSA-AES256-SHA 853 358 -% 712866 1846 710240 189 0 0 192.168.212.1 CH - [2015-05-21 12:18:22.067126] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6b303f8.5229ab2a24236" VidmbqwxQzZrjHXWpEIAAAAD TLSv1 ECDHE-RSA-AES256-SHA 821 358 -% 806922 3428 802407 141 0 0 192.168.212.1 CH - [2015-05-21 12:18:22.018674] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6b303f8.5229ab2a24236" VidmbqwxQzZrjHXY4KUAAABv TLSv1 ECDHE-RSA-AES256-SHA 614 213 -% 887391 3107 883409 130 0 0 192.168.212.1 CH - [2015-05-21 12:18:22.057979] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6b303f8.5229ab2a24236" VidmbqwxQzZrjHXWpEEAAAAL TLSv1 ECDHE-RSA-AES256-SHA 821 358 -% 1054624 2178 51773 189 0 0 192.168.212.1 CH - [2015-05-21 12:18:22.067946] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6b303f8.5229ab2a24236" VidmbqwxQzZrjHXY4KYAAABw TLSv1 ECDHE-RSA-AES256-SHA 837 358 -% 1044882 2323 41911 116 0 0 192.168.212.1 CH - [2015-05-21 12:18:22.073563] "GET /EMail/scripts/variables_de.js HTTP/1.1" 304 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6b303f8.5229ab2a24236" VidmbqwxQzZrjHXY4KgAAAB0 TLSv1 ECDHE-RSA-AES256-SHA 853 358 -% 1260943 1802 258357 189 0 0 192.168.212.1 CH - [2015-05-21 12:18:23.448671] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6b303f8.5229ab2a24236" Vidmb6wxQzZrjHXY4KkAAABu TLSv1 ECDHE-RSA-AES256-SHA 646 213 -% 910557 3113 906315 399 0 0 192.168.213.23 CH - [2015-05-21 12:18:41.563424] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7291 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treePerFolderOverView" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4156aa79.5229aabd71684" VidmgawxQzZrjHXY4K0AAAB@ TLSv1 ECDHE-RSA-AES256-SHA 872 11558 -% 1181061 3438 174574 2331 0 0 192.168.213.23 CH - [2015-05-21 12:18:45.962880] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7291 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4156aa79.5229aabd71684" VidmhawxQzZrjHXY4K8AAABz TLSv1 ECDHE-RSA-AES256-SHA 872 11558 -% 958336 3284 949942 4472 0 0 192.168.192.35 CH - [2015-05-21 12:20:02.240565] "GET /EMail/overview.aspx HTTP/1.1" 200 5294 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" Vidm0qwxQzZrjHXWpEgAAAAO TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 890 9742 -% 1285121 1829 280742 2045 0 0 192.168.192.35 CH - [2015-05-21 12:20:10.090758] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" Vidm2qwxQzZrjHXWpEkAAAAP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1025 461 -% 972802 2975 968945 123 0 0 192.168.192.35 CH - [2015-05-21 12:24:28.549632] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" Vidn3KwxQzZrjHXY4N8AAABy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1048 7916 -% 902215 3785 895498 2222 0 0 192.168.192.35 CH - [2015-05-21 12:24:38.516629] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" Vidn5qwxQzZrjHXY4OIAAABv TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1263 564 -% 985635 3380 981460 195 0 0 192.168.192.35 CH - [2015-05-21 12:24:39.527188] "GET /EMail/main.aspx HTTP/1.1" 200 3383 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" Vidn56wxQzZrjHXY4OMAAABw TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 3799 -% 858695 1871 854505 1725 0 0 192.168.192.35 CH - [2015-05-21 12:24:40.456944] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" Vidn6KwxQzZrjHXY4OQAAAB0 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 4128 -% 917443 1928 904131 10739 0 0 192.168.192.35 CH - [2015-05-21 12:24:40.486341] "GET /EMail/overview.aspx HTTP/1.1" 200 5293 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" Vidn6KwxQzZrjHXWpF4AAAAn TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1059 5858 -% 1249829 2953 240545 5422 0 0 192.168.192.35 CH - [2015-05-21 12:24:40.487185] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" Vidn6KwxQzZrjHXWpF8AAAAm TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1085 9322 -% 1609354 5722 594581 4652 0 0 192.168.213.23 CH - [2015-05-21 12:31:38.806917] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7291 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4156aa79.5229aabd71684" VidpiqwxQzZrjHXY4SQAAAB4 TLSv1 ECDHE-RSA-AES256-SHA 864 11553 -% 1362867 3442 354891 3761 0 0 192.168.213.23 CH - [2015-05-21 12:31:38.763895] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 9422 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4156aa79.5229aabd71684" VidpiqwxQzZrjHXY4SMAAAB@ TLSv1 ECDHE-RSA-AES256-SHA 880 13982 -% 1585287 2489 575283 2975 0 0 192.168.192.35 CH - [2015-05-21 12:43:22.653673] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "2e07605e.5229b0c261fe9" VidsSqwxQzZrjHXWpJ8AAAAk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 744 11962 -% 970576 1969 965086 2774 0 0 192.168.192.35 CH - [2015-05-21 12:43:23.686380] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "2e07605e.5229b0c261fe9" VidsS6wxQzZrjHXWpKEAAAAo TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 476 2421 13% 986334 2668 982402 137 0 0 192.168.192.35 CH - [2015-05-21 12:51:24.759374] "GET /EMail/overview.aspx HTTP/1.1" 200 5289 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" ViduLKwxQzZrjHXY4dMAAABn TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 890 9737 -% 1131912 2941 125447 2750 0 0 192.168.192.35 CH - [2015-05-21 12:51:24.776586] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" ViduLKwxQzZrjHXWpMIAAAAM TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 916 13205 -% 1209598 2968 197735 4641 0 0 192.168.192.35 CH - [2015-05-21 13:20:22.681857] "GET /EMail/overview.aspx HTTP/1.1" 200 5291 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" Vid09qwxQzZrjHXWpVIAAAAf TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 890 9739 -% 1091300 2267 86691 1863 0 0 192.168.192.35 CH - [2015-05-21 13:25:48.153122] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3891_4&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" Vid2PKwxQzZrjHXY4tYAAAB4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1382 4382 -% 1109698 3905 104932 130 0 0 192.168.192.35 CH - [2015-05-21 13:25:49.297679] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7278 "https://www.example.com/EMail/message.aspx?&mailId=3891_4&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" Vid2PawxQzZrjHXY4tcAAAB@ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 557 7700 -% 1029782 3689 22897 2293 0 0 192.168.192.35 CH - [2015-05-21 13:25:53.306325] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" Vid2QawxQzZrjHXY4toAAAB9 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1190 13205 -% 1532127 3740 520073 4298 0 0 192.168.192.35 CH - [2015-05-21 13:25:53.253942] "GET /EMail/overview.aspx HTTP/1.1" 200 5289 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" Vid2QawxQzZrjHXY4tkAAABz TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 522 5711 -% 1616634 3072 610265 2609 0 0 192.168.192.35 CH - [2015-05-21 13:25:58.854954] "GET /EMail/overview.aspx HTTP/1.1" 200 5290 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" Vid2RqwxQzZrjHXY4twAAABA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 522 5712 -% 1096331 2941 90609 1775 0 0 192.168.192.35 CH - [2015-05-21 13:25:58.864600] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" Vid2RqwxQzZrjHXY4t0AAAB8 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 548 9179 -% 1296588 3698 281584 7128 0 0 192.168.192.35 CH - [2015-05-21 13:37:42.008749] "GET /EMail/overview.aspx HTTP/1.1" 200 5287 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" Vid5BqwxQzZrjHXWpZcAAAAl TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 890 9735 -% 1122890 2138 118432 1736 0 0 192.168.192.35 CH - [2015-05-21 13:37:52.730416] "GET /EMail/overview.aspx HTTP/1.1" 200 5289 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" Vid5EKwxQzZrjHXY40IAAABs TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1089 5854 -% 1142995 4014 135423 2835 0 0 192.168.192.35 CH - [2015-05-21 13:37:52.752143] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" Vid5EKwxQzZrjHXY40MAAABq TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1115 9322 -% 1581050 2159 567590 6014 0 0 192.168.81.38 CH - [2015-05-21 14:08:34.792441] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7239 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7c1dba77.5229c3cc7eec9" VieAQqwxQzZrjHXY5DIAAABZ TLSv1 ECDHE-RSA-AES256-SHA 847 12107 22% 1049423 1911 43629 160 0 0 192.168.81.38 CH - [2015-05-21 14:08:34.795274] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7c1dba77.5229c3cc7eec9" VieAQqwxQzZrjHXWpiUAAAA5 TLSv1 ECDHE-RSA-AES256-SHA 863 5721 -% 1062622 3174 58586 150 0 0 192.168.81.38 CH - [2015-05-21 14:08:34.795257] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7c1dba77.5229c3cc7eec9" VieAQqwxQzZrjHXY5DMAAABj TLSv1 ECDHE-RSA-AES256-SHA 847 8131 23% 1152679 1742 149246 406 0 0 192.168.81.38 CH - [2015-05-21 14:08:36.040214] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7c1dba77.5229c3cc7eec9" VieARKwxQzZrjHXY5DQAAABk TLSv1 ECDHE-RSA-AES256-SHA 502 1802 -% 898781 3015 894980 154 0 0 192.168.81.38 CH - [2015-05-21 14:08:36.567015] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7c1dba77.5229c3cc7eec9" VieARKwxQzZrjHXWpiYAAAA8 TLSv1 ECDHE-RSA-AES256-SHA 502 2090 -% 697408 3004 693481 142 0 0 192.168.81.38 CH - [2015-05-21 14:08:37.299475] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7c1dba77.5229c3cc7eec9" VieARawxQzZrjHXWpicAAAA6 TLSv1 ECDHE-RSA-AES256-SHA 342 1578 -% 799517 1894 796719 264 0 0 192.168.81.38 CH - [2015-05-21 14:08:39.435218] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7c1dba77.5229c3cc7eec9" VieAR6wxQzZrjHXWpikAAAA9 TLSv1 ECDHE-RSA-AES256-SHA 646 421 -% 1084035 5579 77616 177 0 0 192.168.81.38 CH - [2015-05-21 14:08:40.672296] "GET /EMail/main.aspx HTTP/1.1" 200 3404 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7c1dba77.5229c3cc7eec9" VieASKwxQzZrjHXWpioAAAA7 TLSv1 ECDHE-RSA-AES256-SHA 502 3834 -% 851809 1939 847863 1513 0 0 192.168.81.38 CH - [2015-05-21 14:08:41.718588] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7c1dba77.5229c3cc7eec9" VieASawxQzZrjHXWpisAAAA@ TLSv1 ECDHE-RSA-AES256-SHA 438 4154 -% 769526 1988 756117 10703 0 0 192.168.81.38 CH - [2015-05-21 14:08:41.910816] "GET /EMail/overview.aspx HTTP/1.1" 200 5299 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7c1dba77.5229c3cc7eec9" VieASawxQzZrjHXY5DcAAABm TLSv1 ECDHE-RSA-AES256-SHA 815 9769 -% 858192 1884 852789 2944 0 0 192.168.81.38 CH - [2015-05-21 14:08:41.719206] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7c1dba77.5229c3cc7eec9" VieASawxQzZrjHXY5DYAAABh TLSv1 ECDHE-RSA-AES256-SHA 470 9234 -% 1714206 2187 701004 6898 0 0 192.168.81.38 CH - [2015-05-21 14:08:42.999249] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7c1dba77.5229c3cc7eec9" VieASqwxQzZrjHXY5DgAAABi TLSv1 ECDHE-RSA-AES256-SHA 470 1258 -% 900836 1925 898208 157 0 0 192.168.81.38 CH - [2015-05-21 14:08:43.643270] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7c1dba77.5229c3cc7eec9" VieAS6wxQzZrjHXY5DoAAABs TLSv1 ECDHE-RSA-AES256-SHA 518 1274 -% 536502 3181 532341 182 0 0 192.168.81.38 CH - [2015-05-21 14:08:45.996220] "GET /EMail/inbox.aspx HTTP/1.1" 200 8589 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7c1dba77.5229c3cc7eec9" VieATawxQzZrjHXY5DsAAABq TLSv1 ECDHE-RSA-AES256-SHA 454 9071 -% 1068699 2974 60153 4622 0 0 192.168.81.38 CH - [2015-05-21 14:08:47.285508] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7c1dba77.5229c3cc7eec9" VieAT6wxQzZrjHXWpiwAAAAB TLSv1 ECDHE-RSA-AES256-SHA 470 1818 -% 1051078 2934 47217 206 0 0 192.168.81.38 CH - [2015-05-21 14:08:47.285242] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7c1dba77.5229c3cc7eec9" VieAT6wxQzZrjHXY5DwAAABt TLSv1 ECDHE-RSA-AES256-SHA 470 554 -% 1054206 1933 51638 131 0 0 192.168.81.38 CH - [2015-05-21 14:08:47.293907] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7c1dba77.5229c3cc7eec9" VieAT6wxQzZrjHXY5D0AAABr TLSv1 ECDHE-RSA-AES256-SHA 470 538 -% 1268563 2715 264985 209 0 0 192.168.81.38 CH - [2015-05-21 14:08:49.684573] "GET /EMail/message.aspx?&mailId=3891_16&folderId=587_1&mailPos=0 HTTP/1.1" 200 11196 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7c1dba77.5229c3cc7eec9" VieAUawxQzZrjHXY5D8AAABx TLSv1 ECDHE-RSA-AES256-SHA 486 11679 -% 1289844 3420 263981 21556 0 0 192.168.81.38 CH - [2015-05-21 14:08:53.018791] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3891_16&folderId=587_1&attachmentId=2&token=-14405652941373722E16 HTTP/1.1" 200 62684 "https://www.example.com/EMail/message.aspx?&mailId=3891_16&folderId=587_1&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7c1dba77.5229c3cc7eec9" VieAVawxQzZrjHXY5EEAAABo TLSv1 ECDHE-RSA-AES256-SHA 598 64604 -% 1112133 5142 81639 246 0 0 192.168.81.38 CH - [2015-05-21 14:13:09.757344] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3891_16&folderId=587_1&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7c1dba77.5229c3cc7eec9" VieBVawxQzZrjHXY5GoAAABY TLSv1 ECDHE-RSA-AES256-SHA 1055 4388 -% 1296847 4435 291755 152 0 0 192.168.81.38 CH - [2015-05-21 14:13:11.193129] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7291 "https://www.example.com/EMail/message.aspx?&mailId=3891_16&folderId=587_1&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7c1dba77.5229c3cc7eec9" VieBV6wxQzZrjHXY5GsAAABb TLSv1 ECDHE-RSA-AES256-SHA 534 7722 -% 749757 4008 741091 3863 0 0 192.168.81.38 CH - [2015-05-21 14:13:13.405648] "GET /EMail/trash.aspx?dir=desc HTTP/1.1" 200 8674 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7c1dba77.5229c3cc7eec9" VieBWawxQzZrjHXY5G0AAABg TLSv1 ECDHE-RSA-AES256-SHA 454 9151 -% 1209814 2385 201195 5245 0 0 192.168.81.38 CH - [2015-05-21 14:13:14.857819] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/trash.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7c1dba77.5229c3cc7eec9" VieBWqwxQzZrjHXY5G4AAABe TLSv1 ECDHE-RSA-AES256-SHA 470 1882 -% 945721 3162 941604 147 0 0 192.168.81.38 CH - [2015-05-21 14:13:16.815131] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/trash.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7c1dba77.5229c3cc7eec9" VieBXKwxQzZrjHXY5G8AAABf TLSv1 ECDHE-RSA-AES256-SHA 758 357 -% 1342895 6332 335838 162 0 0 192.168.81.38 CH - [2015-05-21 14:13:18.277534] "GET /EMail/trash.aspx?returnedFromDelete=true HTTP/1.1" 200 7279 "https://www.example.com/EMail/trash.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7c1dba77.5229c3cc7eec9" VieBXqwxQzZrjHXY5HAAAABZ TLSv1 ECDHE-RSA-AES256-SHA 502 7722 -% 934024 2402 928665 2424 0 0 192.168.192.35 CH - [2015-05-21 14:16:52.709513] "GET /EMail/overview.aspx HTTP/1.1" 200 7336 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" VieCNKwxQzZrjHXWpkYAAAAd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 890 11874 -% 946863 2528 940297 3206 0 0 192.168.192.35 CH - [2015-05-21 14:16:52.713608] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 7336 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" VieCNKwxQzZrjHXY5JEAAAB- TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 916 11874 -% 1043078 2574 36004 3891 0 0 192.168.192.35 CH - [2015-05-21 14:16:53.733237] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" VieCNawxQzZrjHXWpkcAAAAh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 493 7758 -% 882335 3326 874832 3404 0 0 192.168.192.35 CH - [2015-05-21 14:16:58.036409] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f6124d69.52296f1ce555f" VieCOqwxQzZrjHXWpkgAAAAe TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 481 7773 -% 1058964 2793 51854 3668 0 0 192.168.212.2 CH - [2015-05-21 14:27:38.952473] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7556 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" VieEuqwxQzZrjHXY5P0AAAB0 TLSv1 ECDHE-RSA-AES256-SHA 920 11830 -% 920014 2751 902864 13796 0 0 192.168.212.2 CH - [2015-05-21 14:27:58.157588] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" VieEzqwxQzZrjHXY5P8AAAB7 TLSv1 ECDHE-RSA-AES256-SHA 1032 4257 -% 1041393 4338 36194 209 0 0 192.168.212.2 CH - [2015-05-21 14:27:59.408909] "GET /EMail/main.aspx HTTP/1.1" 200 3415 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" VieEz6wxQzZrjHXY5QAAAAB@ TLSv1 ECDHE-RSA-AES256-SHA 872 7670 -% 938255 6324 929799 1520 0 0 192.168.212.2 CH - [2015-05-21 14:28:00.856556] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" VieE0KwxQzZrjHXY5QEAAAB2 TLSv1 ECDHE-RSA-AES256-SHA 840 7990 -% 990255 1972 976947 10663 0 0 192.168.212.2 CH - [2015-05-21 14:28:59.411913] "GET /EMail/message.aspx?&mailId=3891_2&folderId=1001_9&mailPos=14 HTTP/1.1" 200 11481 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" VieFC6wxQzZrjHXY5QwAAABI TLSv1 ECDHE-RSA-AES256-SHA 888 15824 -% 1313106 5036 279055 27558 0 0 192.168.212.2 CH - [2015-05-21 14:29:30.059683] "GET /EMail/message.aspx?&mailId=3890_91&folderId=1001_9&mailPos=13 HTTP/1.1" 200 11497 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" VieFKqwxQzZrjHXWpmsAAAAH TLSv1 ECDHE-RSA-AES256-SHA 888 15840 -% 1218528 4832 187346 25097 0 0 192.168.212.2 CH - [2015-05-21 14:29:32.757548] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3890_91&folderId=1001_9&attachmentId=2&token=-10606885466838578E16 HTTP/1.1" 200 56327 "https://www.example.com/EMail/message.aspx?&mailId=3890_91&folderId=1001_9&mailPos=13" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" VieFLKwxQzZrjHXWpmwAAAAF TLSv1 ECDHE-RSA-AES256-SHA 984 61919 -% 1067332 5215 38975 191 0 0 192.168.212.2 CH - [2015-05-21 14:29:56.303107] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 28057 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" VieFRKwxQzZrjHXY5REAAABK TLSv1 ECDHE-RSA-AES256-SHA 840 32516 -% 1423154 3609 259022 8859 0 0 192.168.212.2 CH - [2015-05-21 14:30:02.556569] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3890_92&folderId=1001_9&attachmentId=2&token=-44394780589094216E16 HTTP/1.1" 200 61487 "https://www.example.com/EMail/message.aspx?&mailId=3890_92&folderId=1001_9&mailPos=12" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" VieFSqwxQzZrjHXY5RQAAABM TLSv1 ECDHE-RSA-AES256-SHA 984 67182 -% 1217144 7430 183891 193 0 0 192.168.212.2 CH - [2015-05-21 14:30:32.801879] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" VieFaKwxQzZrjHXY5RsAAABa TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1682778 4509 669806 4085 0 0 192.168.212.2 CH - [2015-05-21 14:30:39.206464] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3890_93&folderId=1001_9&attachmentId=2&token=-19497784201405756E16 HTTP/1.1" 200 54503 "https://www.example.com/EMail/message.aspx?&mailId=3890_93&folderId=1001_9&mailPos=11" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" VieFb6wxQzZrjHXY5RwAAABY TLSv1 ECDHE-RSA-AES256-SHA 984 59984 -% 1138820 3946 113511 251 0 0 192.168.212.2 CH - [2015-05-21 14:31:33.057641] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 28042 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" VieFpawxQzZrjHXY5SMAAABm TLSv1 ECDHE-RSA-AES256-SHA 840 32463 -% 1794844 3538 626465 9592 0 0 192.168.212.2 CH - [2015-05-21 14:31:39.557781] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3891_3&folderId=1001_9&attachmentId=2&token=-65498316013201272E16 HTTP/1.1" 200 54413 "https://www.example.com/EMail/message.aspx?&mailId=3891_3&folderId=1001_9&mailPos=10" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" VieFq6wxQzZrjHXY5SUAAABh TLSv1 ECDHE-RSA-AES256-SHA 984 59904 -% 777920 3914 751956 191 0 0 192.168.212.2 CH - [2015-05-21 14:32:12.579007] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" VieFzKwxQzZrjHXY5SsAAABr TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1737829 3873 724678 4872 0 0 192.168.212.2 CH - [2015-05-21 14:32:53.515624] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 28026 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" VieF9awxQzZrjHXY5TIAAABu TLSv1 ECDHE-RSA-AES256-SHA 840 32484 -% 1893390 3272 724054 13626 0 0 192.168.212.2 CH - [2015-05-21 14:33:38.065613] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" VieGIqwxQzZrjHXY5TkAAABz TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1802546 4080 789501 4967 0 0 192.168.212.2 CH - [2015-05-21 14:33:45.111386] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3890_96&folderId=1001_9&attachmentId=2&token=-52518089892635192E16 HTTP/1.1" 200 54248 "https://www.example.com/EMail/message.aspx?&mailId=3890_96&folderId=1001_9&mailPos=7" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" VieGKawxQzZrjHXY5TwAAABC TLSv1 ECDHE-RSA-AES256-SHA 984 59802 -% 1145298 5015 118538 178 0 0 192.168.212.2 CH - [2015-05-21 14:34:19.871271] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" VieGS6wxQzZrjHXY5UEAAABI TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1688120 2592 678649 2792 0 0 192.168.212.2 CH - [2015-05-21 14:34:23.868534] "GET /EMail/message.aspx?&mailId=3891_8&folderId=1001_9&mailPos=6 HTTP/1.1" 200 11479 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" VieGT6wxQzZrjHXY5UIAAABH TLSv1 ECDHE-RSA-AES256-SHA 888 15787 -% 1196888 4717 162236 29010 0 0 192.168.212.2 CH - [2015-05-21 14:34:51.067272] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" VieGa6wxQzZrjHXWpocAAAAi TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1802258 2573 792673 3074 0 0 192.168.212.2 CH - [2015-05-21 14:34:57.464712] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3891_9&folderId=1001_9&attachmentId=2&token=-31733846240683296E16 HTTP/1.1" 200 54433 "https://www.example.com/EMail/message.aspx?&mailId=3891_9&folderId=1001_9&mailPos=5" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" VieGcawxQzZrjHXWpogAAAAm TLSv1 ECDHE-RSA-AES256-SHA 984 59920 -% 1096153 4269 81139 193 0 0 192.168.212.2 CH - [2015-05-21 14:35:31.363823] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 27994 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" VieGk6wxQzZrjHXWpowAAAAt TLSv1 ECDHE-RSA-AES256-SHA 840 32452 -% 1376496 3446 196822 10983 0 0 192.168.212.2 CH - [2015-05-21 14:36:00.915967] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" VieGsKwxQzZrjHXY5U8AAABc TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1380202 2471 370896 2973 0 0 192.168.212.2 CH - [2015-05-21 14:36:04.611878] "GET /EMail/message.aspx?&mailId=3891_11&folderId=1001_9&mailPos=3 HTTP/1.1" 200 11495 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" VieGtKwxQzZrjHXY5VEAAABW TLSv1 ECDHE-RSA-AES256-SHA 888 15803 -% 1346578 5160 320339 20223 0 0 192.168.212.2 CH - [2015-05-21 14:36:41.468713] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" VieG2awxQzZrjHXY5VgAAABm TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1732360 2441 720706 5147 0 0 192.168.212.2 CH - [2015-05-21 14:37:37.513603] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" VieHEawxQzZrjHXY5WAAAABt TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1766030 2502 756865 2652 0 0 192.168.212.2 CH - [2015-05-21 14:38:13.372063] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" VieHNawxQzZrjHXY5WcAAAB0 TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1669159 2832 659038 2850 0 0 192.168.212.2 CH - [2015-05-21 14:38:23.064439] "GET /EMail/message.aspx?&mailId=3891_20&folderId=1001_9&mailPos=0 HTTP/1.1" 200 11365 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" VieHP6wxQzZrjHXY5WgAAAB1 TLSv1 ECDHE-RSA-AES256-SHA 888 15712 -% 1947486 5252 921851 19519 0 0 192.168.212.2 CH - [2015-05-21 14:38:28.214327] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3891_20&folderId=1001_9&attachmentId=2&token=-36758093377947392E16 HTTP/1.1" 200 56090 "https://www.example.com/EMail/message.aspx?&mailId=3891_20&folderId=1001_9&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" VieHRKwxQzZrjHXY5WsAAAB6 TLSv1 ECDHE-RSA-AES256-SHA 984 61679 -% 1098919 3853 73789 159 0 0 192.168.212.2 CH - [2015-05-21 14:39:00.424836] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 27954 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" VieHZKwxQzZrjHXWppgAAAA2 TLSv1 ECDHE-RSA-AES256-SHA 840 32420 -% 3333475 2804 156016 8623 0 0 192.168.212.2 CH - [2015-05-21 14:39:10.815632] "GET /EMail/moveToFolder.aspx?folderName=Inbox&mailId=3891_20&mailId=3890_97&mailId=3891_12&mailId=3891_11&mailId=3891_10&mailId=3891_9&mailId=3891_8&mailId=3890_96&mailId=3891_7&mailId=3891_6&mailId=3891_3&mailId=3890_93&mailId=3890_92&mailId=3890_91&mailId=3891_2&mailId=3891_1 HTTP/1.1" 200 5486 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" VieHbqwxQzZrjHXY5XMAAABE TLSv1 ECDHE-RSA-AES256-SHA 1032 9766 -% 2504131 10463 491257 1796 0 0 192.168.212.2 CH - [2015-05-21 14:39:23.219002] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7291 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" VieHe6wxQzZrjHXY5XYAAABI TLSv1 ECDHE-RSA-AES256-SHA 840 11558 -% 1061649 3581 53473 3813 0 0 192.168.212.2 CH - [2015-05-21 14:39:24.568901] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" VieHfKwxQzZrjHXWppkAAAA8 TLSv1 ECDHE-RSA-AES256-SHA 920 4049 -% 1088740 3136 84666 190 0 0 192.168.212.2 CH - [2015-05-21 14:39:27.368381] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f0afbff.522981977130b" VieHf6wxQzZrjHXWppoAAAA6 TLSv1 ECDHE-RSA-AES256-SHA 808 4161 -% 997831 3245 993834 166 0 0 192.168.32.7 CH - [2015-05-21 14:54:28.410607] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "99aff5c2.5229ce0fc0cef" VieLBKwxQzZrjHXWptEAAAA1 TLSv1.2 ECDHE-RSA-AES128-SHA256 659 11875 -% 974091 825 970002 2558 0 0 192.168.32.7 CH - [2015-05-21 14:54:29.581000] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "99aff5c2.5229ce0fc0cef" VieLBawxQzZrjHXY5f0AAABS TLSv1.2 ECDHE-RSA-AES128-SHA256 744 864 56% 856775 2401 853568 188 0 0 192.168.32.7 CH - [2015-05-21 14:54:29.519898] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "99aff5c2.5229ce0fc0cef" VieLBawxQzZrjHXWptIAAAA2 TLSv1.2 ECDHE-RSA-AES128-SHA256 454 2527 14% 1092072 1863 87714 284 0 0 192.168.32.7 CH - [2015-05-21 14:54:29.577922] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "99aff5c2.5229ce0fc0cef" VieLBawxQzZrjHXY5fwAAABU TLSv1.2 ECDHE-RSA-AES128-SHA256 776 1931 -% 1055831 2104 52677 181 0 0 192.168.32.7 CH - [2015-05-21 14:54:29.580845] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "99aff5c2.5229ce0fc0cef" VieLBawxQzZrjHXWptMAAAA5 TLSv1.2 ECDHE-RSA-AES128-SHA256 760 7973 22% 1090267 1920 84795 253 0 0 192.168.32.7 CH - [2015-05-21 14:54:29.584824] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "99aff5c2.5229ce0fc0cef" VieLBawxQzZrjHXY5f8AAABQ TLSv1.2 ECDHE-RSA-AES128-SHA256 744 2144 22% 1346613 2563 342533 213 0 0 192.168.32.7 CH - [2015-05-21 14:54:29.584488] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "99aff5c2.5229ce0fc0cef" VieLBawxQzZrjHXY5f4AAABV TLSv1.2 ECDHE-RSA-AES128-SHA256 760 4660 23% 1361840 2625 357040 158 0 0 192.168.32.7 CH - [2015-05-21 14:54:31.009525] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "99aff5c2.5229ce0fc0cef" VieLB6wxQzZrjHXY5gEAAABX TLSv1.2 ECDHE-RSA-AES128-SHA256 486 1866 -% 889521 2993 885569 216 0 0 192.168.32.7 CH - [2015-05-21 14:54:32.025763] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "922794e5.5229ce13336a3" VieLCKwxQzZrjHXY5gIAAABa TLSv1.2 ECDHE-RSA-AES128-SHA256 627 5651 -% 890035 1391 887270 229 0 0 192.168.32.7 CH - [2015-05-21 14:56:31.930701] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "99aff5c2.5229ce0fc0cef" VieLf6wxQzZrjHXY5hIAAABs TLSv1.2 ECDHE-RSA-AES128-SHA256 776 2331 -% 999178 2985 995194 144 0 0 192.168.32.7 CH - [2015-05-21 14:56:32.173671] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "99aff5c2.5229ce0fc0cef" VieLgKwxQzZrjHXWpt4AAAAF TLSv1.2 ECDHE-RSA-AES128-SHA256 920 630 -% 1115926 3363 111571 293 0 0 192.168.32.7 CH - [2015-05-21 14:56:33.306908] "GET /EMail/main.aspx HTTP/1.1" 200 3407 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "99aff5c2.5229ce0fc0cef" VieLgawxQzZrjHXWpuAAAAAD TLSv1.2 ECDHE-RSA-AES128-SHA256 486 3882 -% 891789 3039 885564 1766 0 0 192.168.32.7 CH - [2015-05-21 14:56:34.267035] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "99aff5c2.5229ce0fc0cef" VieLgqwxQzZrjHXWpuEAAAAL TLSv1.2 ECDHE-RSA-AES128-SHA256 470 4202 -% 900617 3100 890323 6510 0 0 192.168.32.7 CH - [2015-05-21 14:56:34.316799] "GET /EMail/overview.aspx HTTP/1.1" 200 5302 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "99aff5c2.5229ce0fc0cef" VieLgqwxQzZrjHXWpuIAAAAJ TLSv1.2 ECDHE-RSA-AES128-SHA256 760 5963 -% 1042579 2361 37834 1800 0 0 192.168.32.7 CH - [2015-05-21 14:56:34.314157] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "99aff5c2.5229ce0fc0cef" VieLgqwxQzZrjHXY5hMAAABn TLSv1.2 ECDHE-RSA-AES128-SHA256 792 9683 -% 1674139 3978 663230 2780 0 0 192.168.32.7 CH - [2015-05-21 14:56:35.393776] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "99aff5c2.5229ce0fc0cef" VieLg6wxQzZrjHXWpuMAAAAI TLSv1.2 ECDHE-RSA-AES128-SHA256 502 1322 -% 814751 2126 811917 147 0 0 192.168.32.7 CH - [2015-05-21 14:56:36.088120] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "99aff5c2.5229ce0fc0cef" VieLhKwxQzZrjHXY5hQAAABt TLSv1.2 ECDHE-RSA-AES128-SHA256 534 1338 -% 853274 2970 849464 147 0 0 192.168.32.7 CH - [2015-05-21 14:59:01.473985] "GET /EMail/inbox.aspx HTTP/1.1" 200 11171 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "99aff5c2.5229ce0fc0cef" VieMFawxQzZrjHXY5icAAAB4 TLSv1.2 ECDHE-RSA-AES128-SHA256 760 11957 -% 1137111 2943 129456 3578 0 0 192.168.32.7 CH - [2015-05-21 14:59:02.769649] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "99aff5c2.5229ce0fc0cef" VieMFqwxQzZrjHXWpu8AAAAV TLSv1.2 ECDHE-RSA-AES128-SHA256 776 779 -% 905980 1803 903438 215 0 0 192.168.32.7 CH - [2015-05-21 14:59:02.697839] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "99aff5c2.5229ce0fc0cef" VieMFqwxQzZrjHXY5igAAAB8 TLSv1.2 ECDHE-RSA-AES128-SHA256 486 602 -% 987248 3179 983307 106 0 0 192.168.32.7 CH - [2015-05-21 14:59:02.760182] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "99aff5c2.5229ce0fc0cef" VieMFqwxQzZrjHXY5ikAAABC TLSv1.2 ECDHE-RSA-AES128-SHA256 776 2123 -% 1128901 1866 126220 196 0 0 192.168.32.7 CH - [2015-05-21 14:59:07.009790] "GET /EMail/message.aspx?&mailId=3890_1&folderId=3481_21&mailPos=0 HTTP/1.1" 200 11358 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "99aff5c2.5229ce0fc0cef" VieMG6wxQzZrjHXY5isAAABE TLSv1.2 ECDHE-RSA-AES128-SHA256 518 11903 -% 1377969 3037 352070 21936 0 0 192.168.32.7 CH - [2015-05-21 14:59:10.175786] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3890_1&folderId=3481_21&attachmentId=2&token=-39948649201558528E16 HTTP/1.1" 200 129347 "https://www.example.com/EMail/message.aspx?&mailId=3890_1&folderId=3481_21&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "99aff5c2.5229ce0fc0cef" VieMHqwxQzZrjHXY5iwAAABG TLSv1.2 ECDHE-RSA-AES128-SHA256 614 135401 -% 1672858 6978 609760 202 0 0 192.168.32.7 CH - [2015-05-21 15:00:18.523587] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/message.aspx?&mailId=3890_1&folderId=3481_21&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "99aff5c2.5229ce0fc0cef" VieMYqwxQzZrjHXWpvUAAAAc TLSv1.2 ECDHE-RSA-AES128-SHA256 899 6019 -% 1756965 3208 752949 149 0 0 192.168.254.25 CH - [2015-05-21 15:02:33.159890] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7372 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieM6awxQzZrjHXY5k0AAABi TLSv1 ECDHE-RSA-AES256-SHA 720 11649 -% 1026851 4047 18795 3325 0 0 192.168.254.25 CH - [2015-05-21 15:02:35.120803] "GET /EMail/scripts/csshover.htc HTTP/1.1" 200 4255 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieM66wxQzZrjHXY5k8AAABs TLSv1 ECDHE-RSA-AES256-SHA 379 4682 -% 878192 2114 875251 214 0 0 192.168.254.25 CH - [2015-05-21 15:02:43.194537] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieM86wxQzZrjHXY5lEAAABn TLSv1 ECDHE-RSA-AES256-SHA 741 2235 -% 1042148 2888 38444 144 0 0 192.168.254.25 CH - [2015-05-21 15:02:47.206174] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieM96wxQzZrjHXY5lMAAABr TLSv1 ECDHE-RSA-AES256-SHA 683 421 -% 1115187 3689 110654 144 0 0 192.168.254.25 CH - [2015-05-21 15:02:48.494973] "GET /EMail/main.aspx HTTP/1.1" 200 3404 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieM@KwxQzZrjHXY5lUAAABx TLSv1 ECDHE-RSA-AES256-SHA 539 3834 -% 931861 2916 927047 1165 0 0 192.168.254.25 CH - [2015-05-21 15:02:51.253371] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieM@6wxQzZrjHXY5lYAAABo TLSv1 ECDHE-RSA-AES256-SHA 475 4154 -% 871098 1983 860771 7625 0 0 192.168.254.25 CH - [2015-05-21 15:02:51.453909] "GET /EMail/overview.aspx HTTP/1.1" 200 5303 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieM@6wxQzZrjHXY5lgAAABv TLSv1 ECDHE-RSA-AES256-SHA 693 5883 -% 1320191 3218 314510 1713 0 0 192.168.254.25 CH - [2015-05-21 15:02:51.356456] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieM@6wxQzZrjHXY5lcAAAB3 TLSv1 ECDHE-RSA-AES256-SHA 725 9379 -% 1787048 2408 775811 4546 0 0 192.168.254.25 CH - [2015-05-21 15:02:54.149969] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieM-qwxQzZrjHXY5lkAAABw TLSv1 ECDHE-RSA-AES256-SHA 507 1258 -% 807377 3457 803143 146 0 0 192.168.254.25 CH - [2015-05-21 15:02:55.004777] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieM-6wxQzZrjHXY5loAAAB0 TLSv1 ECDHE-RSA-AES256-SHA 555 1274 -% 942797 3179 938727 193 0 0 192.168.254.25 CH - [2015-05-21 15:03:07.033703] "GET /EMail/newMessage.aspx?msg=new HTTP/1.1" 200 12042 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieNC6wxQzZrjHXY5l0AAAB1 TLSv1 ECDHE-RSA-AES256-SHA 741 12693 -% 1087320 2230 60867 22590 3 3 192.168.254.25 CH - [2015-05-21 15:03:07.105815] "GET /EMail/tree.aspx?sNode-sharedTree=treeNewMsg HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieNC6wxQzZrjHXY5l4AAAB5 TLSv1 ECDHE-RSA-AES256-SHA 757 9379 -% 1369390 4041 358551 2877 0 0 192.168.254.25 CH - [2015-05-21 15:03:08.746422] "GET /EMail/scripts/tinymce/tinymce.min.js HTTP/1.1" 200 102543 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieNDKwxQzZrjHXY5mAAAAB6 TLSv1 ECDHE-RSA-AES256-SHA 507 105565 33% 991767 2081 956312 169 0 0 192.168.254.25 CH - [2015-05-21 15:03:10.228180] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieNDqwxQzZrjHXY5mEAAAB2 TLSv1 ECDHE-RSA-AES256-SHA 491 3354 -% 674133 1950 665931 5616 0 0 192.168.254.25 CH - [2015-05-21 15:03:12.259404] "GET /EMail/scripts/tinymce/plugins/print/plugin.min.js HTTP/1.1" 200 182 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieNEKwxQzZrjHXWpvwAAAAi TLSv1 ECDHE-RSA-AES256-SHA 741 848 55% 1078775 2944 74989 187 0 0 192.168.254.25 CH - [2015-05-21 15:03:12.139043] "GET /EMail/scripts/tinymce/langs/de.js HTTP/1.1" 200 2969 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieNEKwxQzZrjHXY5mIAAAB9 TLSv1 ECDHE-RSA-AES256-SHA 507 3508 38% 1199910 2162 196353 153 0 0 192.168.254.25 CH - [2015-05-21 15:03:12.273793] "GET /EMail/scripts/tinymce/plugins/preview/plugin.min.js HTTP/1.1" 200 737 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieNEKwxQzZrjHXY5mQAAABz TLSv1 ECDHE-RSA-AES256-SHA 741 1392 51% 1065203 3079 61234 91 0 0 192.168.254.25 CH - [2015-05-21 15:03:12.164914] "GET /EMail/scripts/tinymce/themes/modern/theme.min.js HTTP/1.1" 200 2651 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieNEKwxQzZrjHXY5mMAAABA TLSv1 ECDHE-RSA-AES256-SHA 523 3188 41% 1175893 2837 172102 92 0 0 192.168.254.25 CH - [2015-05-21 15:03:12.301675] "GET /EMail/scripts/tinymce/plugins/paste/plugin.min.js HTTP/1.1" 200 6239 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieNEKwxQzZrjHXWpv0AAAAn TLSv1 ECDHE-RSA-AES256-SHA 741 6933 40% 1173420 1852 169568 205 0 0 192.168.254.25 CH - [2015-05-21 15:03:12.430730] "GET /EMail/scripts/tinymce/plugins/fullpage/plugin.min.js HTTP/1.1" 200 2325 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieNEKwxQzZrjHXY5mYAAAB8 TLSv1 ECDHE-RSA-AES256-SHA 741 3013 36% 1061876 3312 57366 155 0 0 192.168.254.25 CH - [2015-05-21 15:03:12.358561] "GET /EMail/scripts/tinymce/plugins/searchreplace/plugin.min.js HTTP/1.1" 200 2586 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieNEKwxQzZrjHXY5mUAAAB4 TLSv1 ECDHE-RSA-AES256-SHA 741 3269 40% 1138769 2403 135261 92 0 0 192.168.254.25 CH - [2015-05-21 15:03:12.431669] "GET /EMail/scripts/tinymce/plugins/charmap/plugin.min.js HTTP/1.1" 200 2698 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieNEKwxQzZrjHXWpv4AAAAm TLSv1 ECDHE-RSA-AES256-SHA 741 3381 38% 1305927 2751 301992 148 0 0 192.168.254.25 CH - [2015-05-21 15:03:12.487043] "GET /EMail/scripts/tinymce/plugins/visualblocks/plugin.min.js HTTP/1.1" 200 525 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieNEKwxQzZrjHXY5mgAAAB- TLSv1 ECDHE-RSA-AES256-SHA 741 1184 43% 1342381 2732 338631 200 0 0 192.168.254.25 CH - [2015-05-21 15:03:12.591314] "GET /EMail/scripts/tinymce/plugins/link/plugin.min.js HTTP/1.1" 200 1835 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieNEKwxQzZrjHXY5moAAABG TLSv1 ECDHE-RSA-AES256-SHA 741 2496 41% 1276495 3054 272056 243 0 0 192.168.254.25 CH - [2015-05-21 15:03:12.475343] "GET /EMail/scripts/tinymce/plugins/insertdatetime/plugin.min.js HTTP/1.1" 200 867 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieNEKwxQzZrjHXY5mcAAABC TLSv1 ECDHE-RSA-AES256-SHA 741 1520 42% 1447276 3046 443357 152 0 0 192.168.254.25 CH - [2015-05-21 15:03:12.505813] "GET /EMail/scripts/tinymce/plugins/hr/plugin.min.js HTTP/1.1" 200 191 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieNEKwxQzZrjHXY5mkAAABE TLSv1 ECDHE-RSA-AES256-SHA 741 848 53% 1516484 1697 513764 299 0 0 192.168.254.25 CH - [2015-05-21 15:03:13.581521] "GET /EMail/scripts/tinymce/plugins/image/plugin.min.js HTTP/1.1" 200 2136 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieNEawxQzZrjHXY5m0AAABI TLSv1 ECDHE-RSA-AES256-SHA 523 2676 42% 605087 3007 600738 200 0 0 192.168.254.25 CH - [2015-05-21 15:03:13.346609] "GET /EMail/scripts/tinymce/plugins/anchor/plugin.min.js HTTP/1.1" 200 339 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieNEawxQzZrjHXWpv8AAAAk TLSv1 ECDHE-RSA-AES256-SHA 523 847 63% 904172 1917 901436 208 0 0 192.168.254.25 CH - [2015-05-21 15:03:13.517381] "GET /EMail/scripts/tinymce/plugins/textcolor/plugin.min.js HTTP/1.1" 200 1647 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieNEawxQzZrjHXY5msAAABB TLSv1 ECDHE-RSA-AES256-SHA 523 2159 44% 931055 1931 928305 148 0 0 192.168.254.25 CH - [2015-05-21 15:03:13.581468] "GET /EMail/scripts/tinymce/plugins/visualchars/plugin.min.js HTTP/1.1" 200 608 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieNEawxQzZrjHXY5mwAAABD TLSv1 ECDHE-RSA-AES256-SHA 523 1119 54% 1087912 3027 83933 151 0 0 192.168.254.25 CH - [2015-05-21 15:03:13.587101] "GET /EMail/scripts/tinymce/plugins/table/plugin.min.js HTTP/1.1" 200 9166 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieNEawxQzZrjHXY5m4AAABL TLSv1 ECDHE-RSA-AES256-SHA 523 9753 32% 1105632 1647 101294 154 0 0 192.168.254.25 CH - [2015-05-21 15:03:14.906447] "GET /EMail/scripts/tinymce/skins/lightgray/content.min.css HTTP/1.1" 200 588 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieNEqwxQzZrjHXWpwAAAAAl TLSv1 ECDHE-RSA-AES256-SHA 491 1087 38% 471704 1957 468932 145 0 0 192.168.254.25 CH - [2015-05-21 15:03:14.800675] "GET /EMail/scripts/tinymce/skins/lightgray/skin.min.css HTTP/1.1" 200 6020 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieNEqwxQzZrjHXY5m8AAABH TLSv1 ECDHE-RSA-AES256-SHA 491 6548 17% 700122 2605 694564 194 0 0 192.168.254.25 CH - [2015-05-21 15:03:14.941044] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5474 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieNEqwxQzZrjHXWpwEAAAAo TLSv1 ECDHE-RSA-AES256-SHA 475 7314 -% 730897 2186 0 0 0 0 192.168.254.25 CH - [2015-05-21 15:03:16.423319] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce.eot? HTTP/1.1" 200 10024 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieNFKwxQzZrjHXY5nEAAABF TLSv1 ECDHE-RSA-AES256-SHA 523 10532 -% 775484 3193 770898 212 0 0 192.168.254.25 CH - [2015-05-21 15:03:16.455071] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce-small.eot? HTTP/1.1" 200 10316 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieNFKwxQzZrjHXY5nIAAABT TLSv1 ECDHE-RSA-AES256-SHA 539 10820 -% 1000469 2723 996622 203 0 0 192.168.104.36 CH - [2015-05-21 15:07:48.709182] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7362 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "c56093e1.5229d10afa33e" VieOJKwxQzZrjHXWpxwAAAAE TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 963 11973 -% 1137356 1087 131446 4150 0 0 192.168.104.36 CH - [2015-05-21 15:07:49.940391] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "c56093e1.5229d10afa33e" VieOJawxQzZrjHXWpx0AAAAG TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 437 2427 14% 924433 3077 919708 269 0 0 192.168.104.36 CH - [2015-05-21 15:07:50.001981] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "c56093e1.5229d10afa33e" VieOJqwxQzZrjHXY5pEAAABy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1010 2019 22% 1008812 3052 4600 177 0 0 192.168.104.36 CH - [2015-05-21 15:07:50.013916] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "c56093e1.5229d10afa33e" VieOJqwxQzZrjHXY5pMAAABx TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1040 8135 22% 1096227 1824 90982 162 0 0 192.168.104.36 CH - [2015-05-21 15:07:50.022935] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "c56093e1.5229d10afa33e" VieOJqwxQzZrjHXY5pUAAABv TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1054 1828 -% 1316949 2750 313124 155 0 0 192.168.104.36 CH - [2015-05-21 15:07:50.007243] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "c56093e1.5229d10afa33e" VieOJqwxQzZrjHXY5pIAAABr TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1010 737 56% 1333608 2819 330107 91 0 0 192.168.104.36 CH - [2015-05-21 15:07:50.020308] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "c56093e1.5229d10afa33e" VieOJqwxQzZrjHXY5pQAAABo TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1045 4239 23% 1322222 2605 318203 96 0 0 192.168.104.36 CH - [2015-05-21 15:07:51.391727] "GET /EMail/scripts/csshover.htc HTTP/1.1" 200 4255 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "c56093e1.5229d10afa33e" VieOJ6wxQzZrjHXY5pYAAAB3 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 340 4676 -% 1051228 2163 48389 154 0 0 192.168.104.36 CH - [2015-05-21 15:07:51.452657] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "c56093e1.5229d10afa33e" VieOJ6wxQzZrjHXY5pcAAABw TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 483 1792 -% 1071261 2944 67346 247 0 0 192.168.104.36 CH - [2015-05-21 15:07:52.549115] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "c56093e1.5229d10afa33e" VieOKKwxQzZrjHXY5pkAAABu TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 337 1567 -% 921069 2949 917277 153 0 0 192.168.104.36 CH - [2015-05-21 15:07:56.773678] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "c56093e1.5229d10afa33e" VieOLKwxQzZrjHXY5poAAAB7 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 647 421 -% 1011248 5192 5211 163 0 0 192.168.104.36 CH - [2015-05-21 15:07:57.801213] "GET /EMail/main.aspx HTTP/1.1" 200 3394 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "c56093e1.5229d10afa33e" VieOLawxQzZrjHXY5psAAAB@ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 484 3810 -% 948061 3183 943041 1135 0 0 192.168.104.36 CH - [2015-05-21 15:07:58.848781] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "c56093e1.5229d10afa33e" VieOLqwxQzZrjHXY5p0AAAB5 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 437 4141 -% 895783 1897 886160 7182 0 0 192.168.104.36 CH - [2015-05-21 15:07:58.875475] "GET /EMail/overview.aspx HTTP/1.1" 200 5302 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "c56093e1.5229d10afa33e" VieOLqwxQzZrjHXY5p8AAAB2 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1014 5867 -% 1221218 2692 215039 2842 0 0 192.168.104.36 CH - [2015-05-21 15:07:58.872683] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "c56093e1.5229d10afa33e" VieOLqwxQzZrjHXY5p4AAAB6 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1040 9335 -% 1860766 4201 848719 4464 0 0 192.168.104.36 CH - [2015-05-21 15:08:00.136414] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "c56093e1.5229d10afa33e" VieOMKwxQzZrjHXY5qAAAAB9 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 466 1248 -% 852675 1814 850243 138 0 0 192.168.104.36 CH - [2015-05-21 15:08:00.792153] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "c56093e1.5229d10afa33e" VieOMKwxQzZrjHXY5qEAAABz TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 508 1260 -% 931771 3629 927012 161 0 0 192.168.104.36 CH - [2015-05-21 15:08:03.287401] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "c56093e1.5229d10afa33e" VieOM6wxQzZrjHXY5qMAAAB8 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 492 9192 -% 1744475 2218 735316 2954 0 0 192.168.104.36 CH - [2015-05-21 15:08:03.282861] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 53036 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "c56093e1.5229d10afa33e" VieOM6wxQzZrjHXY5qIAAABA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 475 53778 -% 2406232 2202 883420 20623 0 0 192.168.104.36 CH - [2015-05-21 15:08:05.768835] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "c56093e1.5229d10afa33e" VieONawxQzZrjHXY5qQAAAB4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 467 539 -% 899270 3005 895459 189 0 0 192.168.104.36 CH - [2015-05-21 15:08:05.796423] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "c56093e1.5229d10afa33e" VieONawxQzZrjHXY5qYAAABG TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1045 1956 -% 879029 1618 876858 104 0 0 192.168.104.36 CH - [2015-05-21 15:08:05.772557] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "c56093e1.5229d10afa33e" VieONawxQzZrjHXY5qUAAAB- TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 470 527 -% 1159087 2902 155368 378 0 0 192.168.104.36 CH - [2015-05-21 15:08:05.801020] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "c56093e1.5229d10afa33e" VieONawxQzZrjHXY5qcAAABC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1045 2021 -% 1147563 2823 144061 162 0 0 192.168.104.36 CH - [2015-05-21 15:08:07.955066] "GET /EMail/message.aspx?&mailId=3891_17&folderId=2833_44&mailPos=0 HTTP/1.1" 200 11353 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "c56093e1.5229d10afa33e" VieON6wxQzZrjHXY5qgAAABE TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 491 11805 -% 1338785 4761 308700 24329 0 0 192.168.104.36 CH - [2015-05-21 15:08:14.060271] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3891_17&folderId=2833_44&attachmentId=2&token=-25841049341079585E15 HTTP/1.1" 200 57885 "https://www.example.com/EMail/message.aspx?&mailId=3891_17&folderId=2833_44&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "c56093e1.5229d10afa33e" VieOPqwxQzZrjHXY5qkAAABI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 589 59551 -% 1072396 6431 42515 169 0 0 192.168.104.36 CH - [2015-05-21 15:08:20.441724] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/message.aspx?&mailId=3891_17&folderId=2833_44&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "c56093e1.5229d10afa33e" VieORKwxQzZrjHXY5qsAAABD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1078 2231 -% 832172 1982 829521 143 0 0 192.168.104.36 CH - [2015-05-21 15:08:40.688863] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "c56093e1.5229d10afa33e" VieOWKwxQzZrjHXY5rAAAABT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1033 552 -% 996978 2437 993765 205 0 0 192.168.104.36 CH - [2015-05-21 15:08:41.698309] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "c56093e1.5229d10afa33e" VieOWawxQzZrjHXY5rEAAABO TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 439 676 75% 954102 3057 950070 240 0 0 192.168.104.36 CH - [2015-05-21 15:08:42.706601] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 - - + "c56093e1.5229d10afa33e" VieOWqwxQzZrjHXY5rIAAABK TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 278 1554 -% 2896 1865 56 163 0 0 192.168.104.36 CH - [2015-05-21 15:08:42.744697] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "c56093e1.5229d10afa33e" VieOWqwxQzZrjHXY5rMAAABN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 405 318 -% 933423 3368 929078 205 0 0 192.168.104.36 CH - [2015-05-21 15:08:43.688225] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "c56093e1.5229d10afa33e" VieOW6wxQzZrjHXY5rUAAABM TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 387 7771 -% 1044116 1975 39381 2220 0 0 192.168.104.36 CH - [2015-05-21 15:08:44.824158] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "c56093e1.5229d10afa33e" VieOXKwxQzZrjHXWpyEAAAAJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1120 349 -% 820263 2415 817001 363 0 0 192.168.104.36 CH - [2015-05-21 15:08:44.804723] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "c56093e1.5229d10afa33e" VieOXKwxQzZrjHXY5rgAAABU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1080 737 56% 971316 1873 968577 202 0 0 192.168.104.36 CH - [2015-05-21 15:08:44.778443] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "c56093e1.5229d10afa33e" VieOXKwxQzZrjHXY5rYAAABS TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 509 2427 14% 998931 2415 994921 102 0 0 192.168.104.36 CH - [2015-05-21 15:08:44.803721] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "c56093e1.5229d10afa33e" VieOXKwxQzZrjHXY5rcAAABR TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1081 2019 22% 1164787 2018 161477 199 0 0 192.168.104.36 CH - [2015-05-21 15:08:44.813934] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "c56093e1.5229d10afa33e" VieOXKwxQzZrjHXY5rkAAABQ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1112 8135 22% 1235973 2251 230171 187 0 0 192.168.104.36 CH - [2015-05-21 15:08:44.815011] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "c56093e1.5229d10afa33e" VieOXKwxQzZrjHXY5roAAABV TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1117 4386 23% 1390726 1801 387255 147 0 0 192.168.104.36 CH - [2015-05-21 15:08:46.271487] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "c56093e1.5229d10afa33e" VieOXqwxQzZrjHXY5rsAAABX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 549 206 -% 902398 3201 898089 150 0 0 192.168.254.25 CH - [2015-05-21 15:12:06.791924] "GET /EMail/attachost.aspx HTTP/1.1" 200 4990 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" ViePJqwxQzZrjHXY5t4AAAB6 TLSv1 ECDHE-RSA-AES256-SHA 720 9249 -% 935606 2998 930292 1610 0 0 192.168.254.25 CH - [2015-05-21 15:12:09.370138] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/attachost.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" ViePKawxQzZrjHXY5t8AAAB9 TLSv1 ECDHE-RSA-AES256-SHA 507 554 -% 867398 1972 864599 221 0 0 192.168.254.25 CH - [2015-05-21 15:13:48.075922] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/attachost.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" ViePjKwxQzZrjHXY5uwAAABJ TLSv1 ECDHE-RSA-AES256-SHA 451595 486 -% 6178476 3539 0 156 0 0 192.168.254.25 CH - [2015-05-21 15:13:54.312977] "GET /EMail/attachost.aspx HTTP/1.1" 200 6427 "https://www.example.com/EMail/attachments.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" ViePkqwxQzZrjHXY5u4AAABF TLSv1 ECDHE-RSA-AES256-SHA 507 6842 -% 771343 3197 764064 3275 0 0 192.168.254.25 CH - [2015-05-21 15:15:53.406351] "GET /EMail/scripts/tinymce/skins/lightgray/content.min.css HTTP/1.1" 200 588 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; Microsoft Outlook 14.0.7149; ms-office; MSOffice 14)" www.example.com 192.168.34.16 443 proxy-server - + "c53b387c.5229d2d93878f" VieQCawxQzZrjHXY5wQAAABm TLSv1 ECDHE-RSA-AES256-SHA 795 5078 38% 827808 846 825857 211 0 0 192.168.254.25 CH - [2015-05-21 15:15:54.320403] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5090 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; Microsoft Outlook 14.0.7149; ms-office; MSOffice 14)" www.example.com 192.168.34.16 443 proxy-server - + "c53b387c.5229d2d93878f" VieQCqwxQzZrjHXY5wUAAABj TLSv1 ECDHE-RSA-AES256-SHA 502 6930 -% 938621 3110 0 0 0 0 192.168.254.25 CH - [2015-05-21 15:16:08.415969] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieQGKwxQzZrjHXY5wYAAABh TLSv1 ECDHE-RSA-AES256-SHA 5935 550 -% 1051860 209018 0 240 43 0 192.168.254.25 CH - [2015-05-21 15:16:09.473748] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc= HTTP/1.1" 200 3931 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieQGawxQzZrjHXY5wcAAABi TLSv1 ECDHE-RSA-AES256-SHA 587 4362 -% 1016121 5402 3672 6470 0 0 192.168.254.25 CH - [2015-05-21 15:16:18.854815] "GET /EMail/sent.aspx?dir=desc HTTP/1.1" 200 23034 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeNewMsg" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieQIqwxQzZrjHXWpzsAAAAn TLSv1 ECDHE-RSA-AES256-SHA 725 23743 -% 1377955 2350 289282 8156 0 0 192.168.254.25 CH - [2015-05-21 15:16:18.967306] "GET /EMail/tree.aspx?sNode-sharedTree=treeSent HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeNewMsg" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieQIqwxQzZrjHXWpzwAAAAm TLSv1 ECDHE-RSA-AES256-SHA 741 9363 -% 1391158 3734 380531 2669 0 0 192.168.254.25 CH - [2015-05-21 15:16:20.757538] "GET /EMail/images/Highprio.gif HTTP/1.1" 200 91 "https://www.example.com/EMail/sent.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieQJKwxQzZrjHXWpz8AAAAo TLSv1 ECDHE-RSA-AES256-SHA 507 506 -% 736515 3665 731844 241 0 0 192.168.254.25 CH - [2015-05-21 15:16:20.695912] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/sent.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieQJKwxQzZrjHXWpz4AAAAl TLSv1 ECDHE-RSA-AES256-SHA 507 538 -% 1041767 2153 38861 196 0 0 192.168.254.25 CH - [2015-05-21 15:16:20.784322] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/sent.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieQJKwxQzZrjHXY5wgAAABl TLSv1 ECDHE-RSA-AES256-SHA 725 2027 -% 1001810 1711 0 147 0 0 192.168.254.25 CH - [2015-05-21 15:16:25.593209] "GET /EMail/message.aspx?&mailId=3890_99&folderId=74_6&mailPos=0 HTTP/1.1" 200 14874 "https://www.example.com/EMail/sent.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieQKawxQzZrjHXWp0AAAAAp TLSv1 ECDHE-RSA-AES256-SHA 523 15380 -% 1385503 2972 350115 31157 0 0 192.168.254.25 CH - [2015-05-21 15:17:37.029691] "GET /EMail/message.aspx?mailId=3890_99&folderId=74_6&print=true&showPics=false HTTP/1.1" 200 9869 "https://www.example.com/EMail/message.aspx?&mailId=3890_99&folderId=74_6&mailPos=0" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a6e368c5.5229cfd613039" VieQcawxQzZrjHXY5xIAAAB0 TLSv1 ECDHE-RSA-AES256-SHA 864 14182 -% 1348257 4094 320893 22471 0 0 192.168.213.22 CH - [2015-05-21 15:26:50.689887] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7383 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieSmqwxQzZrjHXY52cAAABH TLSv1.2 ECDHE-RSA-AES128-SHA256 794 11907 -% 770790 1739 766074 2357 0 0 192.168.213.22 CH - [2015-05-21 15:26:51.767891] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieSm6wxQzZrjHXWp2cAAAAU TLSv1.2 ECDHE-RSA-AES128-SHA256 991 422 -% 822889 3096 818802 186 0 0 192.168.213.22 CH - [2015-05-21 15:26:51.722743] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieSm6wxQzZrjHXY52kAAABJ TLSv1.2 ECDHE-RSA-AES128-SHA256 959 422 -% 1029963 2911 26180 219 0 0 192.168.213.22 CH - [2015-05-21 15:26:51.729212] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieSm6wxQzZrjHXY52oAAABF TLSv1.2 ECDHE-RSA-AES128-SHA256 959 422 -% 1025250 3012 21440 166 0 0 192.168.213.22 CH - [2015-05-21 15:26:51.714389] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieSm6wxQzZrjHXY52gAAABT TLSv1.2 ECDHE-RSA-AES128-SHA256 694 245 -% 1067395 4497 61478 236 0 0 192.168.213.22 CH - [2015-05-21 15:26:51.730086] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieSm6wxQzZrjHXWp2YAAAAW TLSv1.2 ECDHE-RSA-AES128-SHA256 1007 422 -% 1262726 4531 257086 179 0 0 192.168.213.22 CH - [2015-05-21 15:26:52.934280] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieSnKwxQzZrjHXY52sAAABO TLSv1.2 ECDHE-RSA-AES128-SHA256 726 245 -% 812230 3058 808244 211 0 0 192.168.213.22 CH - [2015-05-21 15:26:53.999137] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d0423eec.5229d54f36021" VieSnawxQzZrjHXWp2gAAAAV TLSv1.2 ECDHE-RSA-AES128-SHA256 730 5651 -% 949294 883 947356 210 0 0 192.168.213.22 CH - [2015-05-21 15:27:34.347109] "GET /EMail/main.aspx HTTP/1.1" 200 3415 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieSxqwxQzZrjHXY53EAAABS TLSv1.2 ECDHE-RSA-AES128-SHA256 942 7768 -% 905568 1922 901133 1850 0 0 192.168.213.22 CH - [2015-05-21 15:27:35.845059] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieSx6wxQzZrjHXWp2wAAAAb TLSv1.2 ECDHE-RSA-AES128-SHA256 926 13376 -% 1859762 2491 849445 3766 0 0 192.168.213.22 CH - [2015-05-21 15:27:37.593089] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieSyawxQzZrjHXY53MAAABV TLSv1.2 ECDHE-RSA-AES128-SHA256 1022 4115 -% 3377623 3163 373538 188 0 0 192.168.213.22 CH - [2015-05-21 15:27:44.207802] "GET /EMail/newMessage.aspx?msg=new HTTP/1.1" 200 12052 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieS0KwxQzZrjHXY53UAAABc TLSv1.2 ECDHE-RSA-AES128-SHA256 942 16530 -% 1143375 3556 117228 20547 3 3 192.168.213.22 CH - [2015-05-21 15:27:47.130436] "GET /EMail/scripts/tinymce/plugins/searchreplace/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieS06wxQzZrjHXY53gAAABg TLSv1.2 ECDHE-RSA-AES128-SHA256 991 422 -% 1243161 1864 240580 189 0 0 192.168.213.22 CH - [2015-05-21 15:27:47.130172] "GET /EMail/scripts/tinymce/plugins/hr/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieS06wxQzZrjHXY53cAAABp TLSv1.2 ECDHE-RSA-AES128-SHA256 975 422 -% 1244817 2072 242062 138 0 0 192.168.213.22 CH - [2015-05-21 15:27:47.195194] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieS06wxQzZrjHXY53wAAABW TLSv1.2 ECDHE-RSA-AES128-SHA256 926 7288 -% 1431260 1952 421024 7700 0 0 192.168.213.22 CH - [2015-05-21 15:27:47.131541] "GET /EMail/scripts/tinymce/plugins/charmap/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieS06wxQzZrjHXY53kAAABe TLSv1.2 ECDHE-RSA-AES128-SHA256 991 422 -% 1514299 1778 511782 150 0 0 192.168.213.22 CH - [2015-05-21 15:27:47.135023] "GET /EMail/scripts/tinymce/plugins/visualblocks/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieS06wxQzZrjHXWp20AAAAc TLSv1.2 ECDHE-RSA-AES128-SHA256 991 422 -% 1511941 1693 509568 144 0 0 192.168.213.22 CH - [2015-05-21 15:27:47.141531] "GET /EMail/scripts/tinymce/plugins/insertdatetime/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieS06wxQzZrjHXY53oAAABf TLSv1.2 ECDHE-RSA-AES128-SHA256 991 422 -% 1615874 2301 612836 188 0 0 192.168.213.22 CH - [2015-05-21 15:27:47.146283] "GET /EMail/scripts/tinymce/plugins/fullpage/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieS06wxQzZrjHXY53sAAABb TLSv1.2 ECDHE-RSA-AES128-SHA256 991 422 -% 1868269 1755 865923 146 0 0 192.168.213.22 CH - [2015-05-21 15:27:47.204810] "GET /EMail/scripts/tinymce/plugins/print/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieS06wxQzZrjHXY530AAABk TLSv1.2 ECDHE-RSA-AES128-SHA256 1022 4115 -% 1838433 1672 836124 131 0 0 192.168.213.22 CH - [2015-05-21 15:27:47.200058] "GET /EMail/scripts/tinymce/langs/de.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieS06wxQzZrjHXWp24AAAAd TLSv1.2 ECDHE-RSA-AES128-SHA256 1022 4115 -% 1846295 2818 842649 171 0 0 192.168.213.22 CH - [2015-05-21 15:27:48.736165] "GET /EMail/scripts/tinymce/plugins/link/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieS1KwxQzZrjHXY54EAAABi TLSv1.2 ECDHE-RSA-AES128-SHA256 975 422 -% 504957 2288 501675 219 0 0 192.168.213.22 CH - [2015-05-21 15:27:48.714951] "GET /EMail/scripts/tinymce/plugins/anchor/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieS1KwxQzZrjHXY54AAAABh TLSv1.2 ECDHE-RSA-AES128-SHA256 991 422 -% 602763 2448 598916 170 0 0 192.168.213.22 CH - [2015-05-21 15:27:48.438588] "GET /EMail/scripts/tinymce/plugins/table/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieS1KwxQzZrjHXY538AAABm TLSv1.2 ECDHE-RSA-AES128-SHA256 710 245 -% 1067691 2380 64592 153 0 0 192.168.213.22 CH - [2015-05-21 15:27:48.438579] "GET /EMail/scripts/tinymce/plugins/image/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieS1KwxQzZrjHXY534AAABj TLSv1.2 ECDHE-RSA-AES128-SHA256 710 245 -% 1071968 2857 68298 146 0 0 192.168.213.22 CH - [2015-05-21 15:27:48.751236] "GET /EMail/scripts/tinymce/plugins/visualchars/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieS1KwxQzZrjHXY54IAAABs TLSv1.2 ECDHE-RSA-AES128-SHA256 991 422 -% 933305 1823 930576 148 0 0 192.168.213.22 CH - [2015-05-21 15:27:48.826251] "GET /EMail/scripts/tinymce/plugins/textcolor/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieS1KwxQzZrjHXY54MAAABn TLSv1.2 ECDHE-RSA-AES128-SHA256 991 422 -% 1159381 2988 155577 155 0 0 192.168.213.22 CH - [2015-05-21 15:27:50.134252] "GET /EMail/scripts/tinymce/skins/lightgray/content.min.css HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieS1qwxQzZrjHXY54cAAABr TLSv1.2 ECDHE-RSA-AES128-SHA256 694 245 -% 800841 2844 797239 174 0 0 192.168.213.22 CH - [2015-05-21 15:27:50.082321] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5474 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieS1qwxQzZrjHXY54UAAABx TLSv1.2 ECDHE-RSA-AES128-SHA256 566 8578 -% 854766 2104 0 0 0 0 192.168.213.22 CH - [2015-05-21 15:27:50.107188] "GET /EMail/scripts/tinymce/skins/lightgray/skin.min.css HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieS1qwxQzZrjHXY54YAAABv TLSv1.2 ECDHE-RSA-AES128-SHA256 678 245 -% 1081844 2960 78039 208 0 0 192.168.213.22 CH - [2015-05-21 15:27:51.267610] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce.eot? HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieS16wxQzZrjHXY54gAAAB3 TLSv1.2 ECDHE-RSA-AES128-SHA256 710 245 -% 980227 3133 976204 177 0 0 192.168.213.22 CH - [2015-05-21 15:27:51.267802] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce-small.eot? HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieS16wxQzZrjHXY54kAAAB0 TLSv1.2 ECDHE-RSA-AES128-SHA256 710 245 -% 1030583 2882 26996 115 0 0 192.168.213.22 CH - [2015-05-21 15:30:40.536243] "GET /EMail/attachost.aspx HTTP/1.1" 200 4990 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieTgKwxQzZrjHXY56AAAABF TLSv1.2 ECDHE-RSA-AES128-SHA256 815 5643 -% 989998 2623 985310 1522 0 0 192.168.213.22 CH - [2015-05-21 15:30:41.665236] "GET /EMail/images/attach.gif HTTP/1.1" 304 - "https://www.example.com/EMail/attachost.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieTgawxQzZrjHXY56EAAABT TLSv1.2 ECDHE-RSA-AES128-SHA256 678 245 -% 825959 2292 822837 184 0 0 192.168.213.22 CH - [2015-05-21 15:30:57.288337] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/attachost.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieTkawxQzZrjHXY56QAAABP TLSv1.2 ECDHE-RSA-AES128-SHA256 14616 4243 -% 978429 4952 961999 156 0 0 192.168.213.22 CH - [2015-05-21 15:31:14.342476] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieToqwxQzZrjHXY56kAAABQ TLSv1.2 ECDHE-RSA-AES128-SHA256 2083 4307 -% 1031024 18952 0 483 33 0 192.168.213.22 CH - [2015-05-21 15:31:15.492038] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc= HTTP/1.1" 200 3928 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieTo6wxQzZrjHXWp30AAAAw TLSv1.2 ECDHE-RSA-AES128-SHA256 974 8280 -% 1003037 5246 985643 11330 0 0 192.168.213.22 CH - [2015-05-21 15:31:18.743320] "GET /EMail/overview.aspx HTTP/1.1" 200 6211 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeNewMsg" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieTpqwxQzZrjHXY56sAAABV TLSv1.2 ECDHE-RSA-AES128-SHA256 926 10568 -% 1321527 2047 315930 2910 0 0 192.168.213.22 CH - [2015-05-21 15:31:18.651363] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeNewMsg" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieTpqwxQzZrjHXY56oAAABa TLSv1.2 ECDHE-RSA-AES128-SHA256 911 9683 -% 1596764 4352 585325 2997 0 0 192.168.213.22 CH - [2015-05-21 15:31:22.475206] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieTqqwxQzZrjHXY56wAAABd TLSv1.2 ECDHE-RSA-AES128-SHA256 598 437 -% 1007392 2302 4003 382 0 0 192.168.213.22 CH - [2015-05-21 15:31:23.503355] "GET /EMail/index.html HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieTq6wxQzZrjHXY564AAABg TLSv1.2 ECDHE-RSA-AES128-SHA256 662 245 -% 962437 4716 956827 143 0 0 192.168.213.22 CH - [2015-05-21 15:31:24.599295] "GET /favicon.ico HTTP/1.1" 304 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "d0423eec.5229d54f36021" VieTrKwxQzZrjHXY57AAAABW TLSv1.2 ECDHE-RSA-AES128-SHA256 799 406 -% 2084 1269 68 140 0 0 192.168.213.22 CH - [2015-05-21 15:31:24.550879] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieTrKwxQzZrjHXY568AAABp TLSv1.2 ECDHE-RSA-AES128-SHA256 534 357 -% 924845 3469 920465 196 0 0 192.168.213.22 CH - [2015-05-21 15:31:25.496468] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieTrawxQzZrjHXY57EAAABe TLSv1.2 ECDHE-RSA-AES128-SHA256 518 7834 -% 969777 2985 962267 3700 0 0 192.168.213.22 CH - [2015-05-21 15:31:26.602627] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieTrqwxQzZrjHXY57IAAABZ TLSv1.2 ECDHE-RSA-AES128-SHA256 646 245 -% 963106 1972 960489 140 0 0 192.168.213.22 CH - [2015-05-21 15:31:26.643534] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieTrqwxQzZrjHXY57QAAABl TLSv1.2 ECDHE-RSA-AES128-SHA256 943 422 -% 1083688 1728 81341 142 0 0 192.168.213.22 CH - [2015-05-21 15:31:26.648016] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieTrqwxQzZrjHXY57YAAABb TLSv1.2 ECDHE-RSA-AES128-SHA256 959 422 -% 1085036 1941 82226 141 0 0 192.168.213.22 CH - [2015-05-21 15:31:26.641668] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieTrqwxQzZrjHXY57MAAABq TLSv1.2 ECDHE-RSA-AES128-SHA256 959 4660 23% 1095384 3153 89743 158 0 0 192.168.213.22 CH - [2015-05-21 15:31:26.646905] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad3230b9.5229d54c0e15f" VieTrqwxQzZrjHXY57UAAABf TLSv1.2 ECDHE-RSA-AES128-SHA256 927 422 -% 1138754 2922 134859 199 0 0 192.168.213.23 CH - [2015-05-21 16:26:50.223304] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ac698a1d.5229e2ab13c64" ViegqqwxQzZrjHXY6bwAAABU TLSv1 ECDHE-RSA-AES256-SHA 1032 4257 -% 1001015 3440 0 202 0 0 192.168.213.23 CH - [2015-05-21 16:26:51.503364] "GET /EMail/main.aspx HTTP/1.1" 200 3415 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ac698a1d.5229e2ab13c64" Viegq6wxQzZrjHXY6b0AAABQ TLSv1 ECDHE-RSA-AES256-SHA 872 7670 -% 873619 1915 869428 1565 0 0 192.168.213.23 CH - [2015-05-21 16:27:55.558931] "GET /EMail/moveToFolder.aspx?folderName=Inbox&mailId=3890_100 HTTP/1.1" 200 4653 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ac698a1d.5229e2ab13c64" Vieg66wxQzZrjHXY6cQAAABp TLSv1 ECDHE-RSA-AES256-SHA 824 8934 -% 2040695 4206 32877 2457 0 0 192.168.213.23 CH - [2015-05-21 16:28:02.210397] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/moveToFolder.aspx?folderName=Inbox&mailId=3890_100" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ac698a1d.5229e2ab13c64" Vieg8qwxQzZrjHXY6cYAAABl TLSv1 ECDHE-RSA-AES256-SHA 1064 4177 -% 1304555 7255 296290 196 0 0 192.168.213.23 CH - [2015-05-21 16:28:05.860612] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ac698a1d.5229e2ab13c64" Vieg9awxQzZrjHXY6ccAAABq TLSv1 ECDHE-RSA-AES256-SHA 920 4049 -% 1225817 2507 222508 204 0 0 192.168.213.23 CH - [2015-05-21 16:28:06.203940] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7290 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ac698a1d.5229e2ab13c64" Vieg9qwxQzZrjHXY6cgAAABk TLSv1 ECDHE-RSA-AES256-SHA 800 11553 -% 966231 3439 959837 2282 0 0 192.168.213.23 CH - [2015-05-21 16:28:12.893459] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ac698a1d.5229e2ab13c64" Vieg-KwxQzZrjHXWqHIAAAAz TLSv1 ECDHE-RSA-AES256-SHA 853 358 -% 775988 2786 772339 191 0 0 192.168.213.23 CH - [2015-05-21 16:28:12.893511] "GET /EMail/scripts/variables_de.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ac698a1d.5229e2ab13c64" Vieg-KwxQzZrjHXWqHMAAAAx TLSv1 ECDHE-RSA-AES256-SHA 853 358 -% 975806 2261 972748 187 0 0 192.168.213.23 CH - [2015-05-21 16:28:13.961674] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ac698a1d.5229e2ab13c64" Vieg-awxQzZrjHXWqHQAAAA0 TLSv1 ECDHE-RSA-AES256-SHA 662 213 -% 863122 3276 859087 141 0 0 192.168.124.19 CH - [2015-05-21 16:35:18.135014] "GET /EMail/MailHandler?service=createCRL HTTP/1.1" 200 3918 "-" "Microsoft-CryptoAPI/6.1" www.example.com 192.168.34.16 443 proxy-server - + "1c31c980.5229e499384e6" VieipqwxQzZrjHXY6gAAAABl TLSv1 ECDHE-RSA-AES256-SHA 480 8432 -% 1043858 1387 41359 145 0 0 192.168.146.78 CH - [2015-05-21 17:15:49.321316] "GET /EMail/images/icon10.ico HTTP/1.1" 304 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f3099ac.5229ed847100c" ViesJawxQzZrjHXY61UAAABA TLSv1.2 ECDHE-RSA-AES128-SHA256 767 4190 -% 909399 1888 906560 205 0 0 192.168.145.72 CH - [2015-05-21 17:21:53.393939] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/4.0 (compatible;)" www.example.com 192.168.34.16 443 proxy-server - + "f2a1090b.5229ef02fc913" VietkawxQzZrjHXY64MAAABv TLSv1 AES256-SHA 774 3856 -% 879322 699 877885 135 0 0 192.168.177.37 CH - [2015-05-21 20:50:35.864675] "GET /EMail/MailHandler?service=createCRL HTTP/1.1" 200 3918 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "ff4f5df6.522a1da958663" Vifee6wxQzZrjHXY8gwAAABn TLSv1.2 ECDHE-RSA-AES256-SHA384 643 8706 -% 1161181 927 159067 259 0 0 192.168.119.37 CH - [2015-05-21 21:06:11.329707] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3918 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "6fdef89.522a2125796ab" VifiI6wxQzZrjHXY8n4AAABf TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 572 8399 -% 891011 1417 888461 248 0 0 192.168.155.177 CH - [2015-05-21 21:10:28.010378] "GET /EMail/error.aspx HTTP/1.1" 200 3712 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "52e6cebc.522a221a4398a" VifjJKwxQzZrjHXY8qEAAABL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 974 8123 -% 938776 3335 924074 10643 0 0 192.168.53.215 CH - [2015-05-21 21:33:47.895095] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3918 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "29bc3a5a.522a27514c537" Vifom6wxQzZrjHXY82YAAABQ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 572 8400 -% 935803 1809 932678 224 0 0 192.168.151.242 CH - [2015-05-22 07:11:31.399304] "GET /EMail/MailHandler?service=createCRL HTTP/1.1" 200 3918 "-" "Microsoft-CryptoAPI/6.1" www.example.com 192.168.34.16 443 proxy-server - + "8a262a64.522aa872fde88" VihwA6wxQzZrjBP3P6sAAAAt TLSv1.2 DHE-RSA-AES256-GCM-SHA384 734 9042 -% 1160685 1151 158371 149 0 0 192.168.186.76 CH - [2015-05-22 07:17:40.717173] "GET /EMail/main.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" VihxdKwxQzZrjBP3P9sAAAAg TLSv1.2 ECDHE-RSA-AES256-SHA384 919 12118 -% 988281 4210 980087 2331 3 0 192.168.186.76 CH - [2015-05-22 07:17:41.838580] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" VihxdawxQzZrjBP3P9wAAAAh TLSv1.2 ECDHE-RSA-AES256-SHA384 646 2575 14% 1075163 7391 64319 221 3 0 192.168.186.76 CH - [2015-05-22 07:17:41.920157] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" VihxdawxQzZrjBP3P90AAAAi TLSv1.2 ECDHE-RSA-AES256-SHA384 1196 1947 -% 1239339 5358 232060 202 3 0 192.168.186.76 CH - [2015-05-22 07:17:46.378718] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d97f5ae.522aa9d8999de" VihxeqwxQzZrjBP3P94AAAAj TLSv1.2 ECDHE-RSA-AES256-SHA384 711 5894 -% 1017331 993 15428 172 0 0 192.168.169.43 CH - [2015-05-22 07:21:31.328387] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7368 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "225e97ec.522aaaaf20f83" VihyW6wxQzZrjBP4eAMAAABn TLSv1.2 ECDHE-RSA-AES256-SHA384 735 11939 -% 966115 1759 961072 2528 0 0 192.168.169.43 CH - [2015-05-22 07:21:32.377199] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "225e97ec.522aaaaf20f83" VihyXKwxQzZrjBP4eAQAAABo TLSv1.2 ECDHE-RSA-AES256-SHA384 502 2575 14% 1063835 1922 60562 164 0 0 192.168.245.238 CH - [2015-05-22 07:23:50.206904] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7368 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6ab5ec40.522aab3392db8" Vihy5qwxQzZrjBP3QBMAAAAY TLSv1.2 ECDHE-RSA-AES256-SHA384 813 11939 -% 1069669 3860 62025 2956 0 0 192.168.245.238 CH - [2015-05-22 07:23:51.509511] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6ab5ec40.522aab3392db8" Vihy56wxQzZrjBP3QBQAAAAa TLSv1.2 ECDHE-RSA-AES256-SHA384 614 1786 -% 944849 4066 939878 195 0 0 192.168.144.21 CH - [2015-05-22 07:28:18.079264] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7369 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "84b321f3.522aac3309620" Vihz8qwxQzZrjBP3QDoAAAAC TLSv1.2 ECDHE-RSA-AES256-SHA384 726 11939 -% 995007 1226 989420 3664 0 0 192.168.144.21 CH - [2015-05-22 07:28:19.250907] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "84b321f3.522aac3309620" Vihz86wxQzZrjBP4eBsAAABB TLSv1.2 ECDHE-RSA-AES256-SHA384 795 2208 22% 923840 1913 920934 141 0 0 192.168.144.21 CH - [2015-05-22 07:28:19.272897] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "84b321f3.522aac3309620" Vihz86wxQzZrjBP3QD0AAAAF TLSv1.2 ECDHE-RSA-AES256-SHA384 827 1979 -% 919873 2163 917002 143 0 0 192.168.144.21 CH - [2015-05-22 07:28:19.202667] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "84b321f3.522aac3309620" Vihz86wxQzZrjBP3QDsAAAAB TLSv1.2 ECDHE-RSA-AES256-SHA384 486 2575 14% 993445 2195 989524 135 0 0 192.168.144.21 CH - [2015-05-22 07:28:19.272807] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "84b321f3.522aac3309620" Vihz86wxQzZrjBP4eB0AAABC TLSv1.2 ECDHE-RSA-AES256-SHA384 827 4485 23% 1046947 2244 43162 152 0 0 192.168.144.21 CH - [2015-05-22 07:28:19.251029] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "84b321f3.522aac3309620" Vihz86wxQzZrjBP4eBwAAABD TLSv1.2 ECDHE-RSA-AES256-SHA384 827 8053 22% 1116171 2830 110459 151 0 0 192.168.144.21 CH - [2015-05-22 07:28:19.250914] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "84b321f3.522aac3309620" Vihz86wxQzZrjBP3QDwAAAAD TLSv1.2 ECDHE-RSA-AES256-SHA384 795 928 56% 1157702 2897 153905 119 0 0 192.168.144.21 CH - [2015-05-22 07:28:20.578648] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "84b321f3.522aac3309620" Vihz9KwxQzZrjBP3QD4AAAAE TLSv1.2 ECDHE-RSA-AES256-SHA384 534 1898 -% 705473 3067 701295 171 0 0 192.168.144.21 CH - [2015-05-22 07:28:21.374002] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "84b321f3.522aac3309620" Vihz9awxQzZrjBP3QD8AAAAG TLSv1.2 ECDHE-RSA-AES256-SHA384 534 0 -% 888892 3002 885060 151 0 0 192.168.144.21 CH - [2015-05-22 07:28:21.485358] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "be5bff94.522aac3648f2e" Vihz9awxQzZrjBP3QEAAAAAH TLSv1.2 ECDHE-RSA-AES256-SHA384 646 5699 -% 1026617 593 25323 176 0 0 192.168.144.21 CH - [2015-05-22 07:28:22.208732] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "84b321f3.522aac3309620" Vihz9qwxQzZrjBP4eB4AAABF TLSv1.2 ECDHE-RSA-AES256-SHA384 662 469 -% 1034296 3544 29973 203 0 0 192.168.144.21 CH - [2015-05-22 07:28:23.255571] "GET /EMail/main.aspx HTTP/1.1" 200 3401 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "84b321f3.522aac3309620" Vihz96wxQzZrjBP4eB8AAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 534 3914 -% 969700 3079 964525 1174 0 0 192.168.144.21 CH - [2015-05-22 07:28:24.309340] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "84b321f3.522aac3309620" Vihz@KwxQzZrjBP4eCAAAABG TLSv1.2 ECDHE-RSA-AES256-SHA384 470 4234 -% 953111 2173 943343 7038 0 0 192.168.144.21 CH - [2015-05-22 07:28:24.312284] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "84b321f3.522aac3309620" Vihz@KwxQzZrjBP3QEMAAAAK TLSv1.2 ECDHE-RSA-AES256-SHA384 470 5818 -% 1269630 1696 265598 1833 0 0 192.168.144.21 CH - [2015-05-22 07:28:24.311346] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "84b321f3.522aac3309620" Vihz@KwxQzZrjBP4eCEAAABH TLSv1.2 ECDHE-RSA-AES256-SHA384 502 9666 -% 1757142 2249 747324 3346 0 0 192.168.144.21 CH - [2015-05-22 07:28:25.616884] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "84b321f3.522aac3309620" Vihz@awxQzZrjBP3QEQAAAAL TLSv1.2 ECDHE-RSA-AES256-SHA384 502 1354 -% 807681 2938 803787 231 0 0 192.168.144.21 CH - [2015-05-22 07:28:26.123970] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "84b321f3.522aac3309620" Vihz@qwxQzZrjBP4eCIAAABJ TLSv1.2 ECDHE-RSA-AES256-SHA384 550 1370 -% 807012 3371 802714 176 0 0 192.168.144.21 CH - [2015-05-22 07:28:26.603968] "GET /EMail/inbox.aspx HTTP/1.1" 200 8592 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "84b321f3.522aac3309620" Vihz@qwxQzZrjBP3QEUAAAAM TLSv1.2 ECDHE-RSA-AES256-SHA384 486 9199 -% 706224 3011 699536 2783 0 0 192.168.144.21 CH - [2015-05-22 07:28:27.356876] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "84b321f3.522aac3309620" Vihz@6wxQzZrjBP4eCMAAABI TLSv1.2 ECDHE-RSA-AES256-SHA384 502 634 -% 798370 3183 794214 165 0 0 192.168.144.21 CH - [2015-05-22 07:28:27.357290] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "84b321f3.522aac3309620" Vihz@6wxQzZrjBP4eCQAAABL TLSv1.2 ECDHE-RSA-AES256-SHA384 502 1914 -% 814856 2330 811685 157 0 0 192.168.144.21 CH - [2015-05-22 07:28:27.357008] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "84b321f3.522aac3309620" Vihz@6wxQzZrjBP3QEYAAAAN TLSv1.2 ECDHE-RSA-AES256-SHA384 502 634 -% 1037775 3124 33783 138 0 0 192.168.144.21 CH - [2015-05-22 07:28:29.237812] "GET /EMail/message.aspx?&mailId=3892_3&folderId=1094_6&mailPos=0 HTTP/1.1" 200 13005 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "84b321f3.522aac3309620" Vihz-awxQzZrjBP3QEcAAAAO TLSv1.2 ECDHE-RSA-AES256-SHA384 518 13684 -% 1395407 5148 384410 4530 0 0 192.168.144.21 CH - [2015-05-22 07:28:32.418182] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3892_3&folderId=1094_6&attachmentId=2&token=40313061022336634E17 HTTP/1.1" 200 2304 "https://www.example.com/EMail/message.aspx?&mailId=3892_3&folderId=1094_6&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "84b321f3.522aac3309620" Vih0AKwxQzZrjBP3QEgAAAAP TLSv1.2 ECDHE-RSA-AES256-SHA384 630 3065 -% 1390853 6941 379866 311 0 0 192.168.144.21 CH - [2015-05-22 07:28:51.318905] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/message.aspx?&mailId=3892_3&folderId=1094_6&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "84b321f3.522aac3309620" Vih0E6wxQzZrjBP3QEwAAAAT TLSv1.2 ECDHE-RSA-AES256-SHA384 843 2379 -% 845494 3838 840933 146 0 0 192.168.144.21 CH - [2015-05-22 07:28:51.763110] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3892_3&folderId=1094_6&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "84b321f3.522aac3309620" Vih0E6wxQzZrjBP3QE0AAAAU TLSv1.2 ECDHE-RSA-AES256-SHA384 1035 598 -% 963171 7010 955069 153 0 0 192.168.144.21 CH - [2015-05-22 07:28:52.740957] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7291 "https://www.example.com/EMail/message.aspx?&mailId=3892_3&folderId=1094_6&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "84b321f3.522aac3309620" Vih0FKwxQzZrjBP3QE4AAAAV TLSv1.2 ECDHE-RSA-AES256-SHA384 566 7802 -% 1036155 2827 28296 4037 0 0 192.168.144.21 CH - [2015-05-22 07:28:55.096608] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "84b321f3.522aac3309620" Vih0F6wxQzZrjBP3QFAAAAAX TLSv1.2 ECDHE-RSA-AES256-SHA384 502 453 -% 932875 3762 928207 152 0 0 192.168.144.21 CH - [2015-05-22 07:28:56.041917] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "84b321f3.522aac3309620" Vih0GKwxQzZrjBP3QFEAAAAZ TLSv1.2 ECDHE-RSA-AES256-SHA384 470 815 75% 872676 3335 868261 268 0 0 192.168.144.21 CH - [2015-05-22 07:28:57.007363] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "be5bff94.522aac3648f2e" Vih0GawxQzZrjBP3QFMAAAAa TLSv1.2 ECDHE-RSA-AES256-SHA384 619 1835 -% 3129 2001 55 154 0 0 192.168.144.21 CH - [2015-05-22 07:28:56.970655] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "84b321f3.522aac3309620" Vih0GKwxQzZrjBP3QFIAAAAY TLSv1.2 ECDHE-RSA-AES256-SHA384 438 373 -% 927589 4817 921917 147 0 0 192.168.144.21 CH - [2015-05-22 07:28:57.910477] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "84b321f3.522aac3309620" Vih0GawxQzZrjBP3QFQAAAAb TLSv1.2 ECDHE-RSA-AES256-SHA384 422 7866 -% 966571 2944 958954 3846 0 0 192.168.144.21 CH - [2015-05-22 07:28:58.975280] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "84b321f3.522aac3309620" Vih0GqwxQzZrjBP4eCcAAABM TLSv1.2 ECDHE-RSA-AES256-SHA384 891 4485 23% 889694 2303 885046 237 0 0 192.168.144.21 CH - [2015-05-22 07:28:58.977698] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "84b321f3.522aac3309620" Vih0GqwxQzZrjBP3QFcAAAAe TLSv1.2 ECDHE-RSA-AES256-SHA384 859 928 56% 930748 1781 928230 164 0 0 192.168.144.21 CH - [2015-05-22 07:28:58.919138] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "84b321f3.522aac3309620" Vih0GqwxQzZrjBP3QFUAAAAc TLSv1.2 ECDHE-RSA-AES256-SHA384 550 2793 14% 998459 3270 993361 150 0 0 192.168.144.21 CH - [2015-05-22 07:28:58.972592] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "84b321f3.522aac3309620" Vih0GqwxQzZrjBP3QFYAAAAd TLSv1.2 ECDHE-RSA-AES256-SHA384 859 2208 22% 948553 2504 944935 99 0 0 192.168.144.21 CH - [2015-05-22 07:28:58.976551] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "84b321f3.522aac3309620" Vih0GqwxQzZrjBP4eCgAAABP TLSv1.2 ECDHE-RSA-AES256-SHA384 891 8053 22% 1164777 1881 159867 169 0 0 192.168.144.21 CH - [2015-05-22 07:28:59.038598] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "84b321f3.522aac3309620" Vih0G6wxQzZrjBP3QFgAAAAf TLSv1.2 ECDHE-RSA-AES256-SHA384 891 454 -% 1133925 2235 131042 159 0 0 192.168.144.21 CH - [2015-05-22 07:29:00.219436] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "84b321f3.522aac3309620" Vih0HKwxQzZrjBP3QFkAAAAg TLSv1.2 ECDHE-RSA-AES256-SHA384 582 261 -% 691561 3079 687639 142 0 0 192.168.186.76 CH - [2015-05-22 08:31:34.700370] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiCxqwxQzZrjBP4eRoAAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 1399 4545 -% 1543653 6329 534718 195 3 0 192.168.186.76 CH - [2015-05-22 08:31:36.257572] "GET /EMail/main.aspx HTTP/1.1" 200 3391 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiCyKwxQzZrjBP4eRsAAABG TLSv1.2 ECDHE-RSA-AES256-SHA384 678 3898 -% 1116825 4090 109556 1845 3 0 192.168.186.76 CH - [2015-05-22 08:31:37.414543] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiCyawxQzZrjBP4eRwAAABH TLSv1.2 ECDHE-RSA-AES256-SHA384 662 4234 -% 1002439 4243 983210 13046 3 0 192.168.186.76 CH - [2015-05-22 08:31:43.207182] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiCz6wxQzZrjBP4eR4AAABI TLSv1.2 ECDHE-RSA-AES256-SHA384 678 1914 -% 908171 7303 898762 156 3 0 192.168.186.76 CH - [2015-05-22 08:32:12.727488] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/message.aspx?&mailId=3891_28&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiC7KwxQzZrjBP4eSIAAABM TLSv1.2 ECDHE-RSA-AES256-SHA384 1319 6262 -% 1086756 6637 77850 195 3 0 192.168.186.76 CH - [2015-05-22 08:32:13.267326] "GET /EMail/newMessage.aspx?action=reply&mailId=3891_28&folderId=947_65&showPics=false HTTP/1.1" 200 21516 "https://www.example.com/EMail/message.aspx?&mailId=3891_28&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiC7awxQzZrjBP3Qm8AAAAN TLSv1.2 ECDHE-RSA-AES256-SHA384 1292 22511 -% 919626 6766 856593 42594 6 3 192.168.186.76 CH - [2015-05-22 08:32:14.204485] "GET /EMail/scripts/tinymce/tinymce.min.js HTTP/1.1" 200 102049 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_28&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiC7qwxQzZrjBP4eSMAAABP TLSv1.2 ECDHE-RSA-AES256-SHA384 742 105152 33% 912177 5498 853984 178 3 0 192.168.186.76 CH - [2015-05-22 08:32:15.196777] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_28&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiC76wxQzZrjBP4eSQAAABN TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 988650 7171 974764 5198 3 0 192.168.186.76 CH - [2015-05-22 08:32:15.280703] "GET /EMail/scripts/tinymce/plugins/paste/plugin.min.js HTTP/1.1" 200 6239 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_28&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiC76wxQzZrjBP3QnIAAAAQ TLSv1.2 ECDHE-RSA-AES256-SHA384 1276 7125 40% 1006342 4390 0 204 3 0 192.168.186.76 CH - [2015-05-22 08:32:15.208832] "GET /EMail/scripts/tinymce/langs/de.js HTTP/1.1" 200 2969 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_28&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiC76wxQzZrjBP3QnAAAAAO TLSv1.2 ECDHE-RSA-AES256-SHA384 742 3684 38% 1222980 6300 214580 147 3 0 192.168.186.76 CH - [2015-05-22 08:32:15.280402] "GET /EMail/scripts/tinymce/plugins/preview/plugin.min.js HTTP/1.1" 200 737 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_28&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiC76wxQzZrjBP3QnEAAAAP TLSv1.2 ECDHE-RSA-AES256-SHA384 1276 1536 51% 1550012 4654 543707 173 3 0 192.168.186.76 CH - [2015-05-22 08:32:16.200340] "GET /EMail/scripts/tinymce/plugins/charmap/plugin.min.js HTTP/1.1" 200 2698 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_28&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiC8KwxQzZrjBP4eSUAAABQ TLSv1.2 ECDHE-RSA-AES256-SHA384 758 3412 38% 802721 3952 796774 143 3 0 192.168.186.76 CH - [2015-05-22 08:32:16.314473] "GET /EMail/scripts/tinymce/plugins/insertdatetime/plugin.min.js HTTP/1.1" 200 867 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_28&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiC8KwxQzZrjBP3QnMAAAAS TLSv1.2 ECDHE-RSA-AES256-SHA384 758 1503 42% 970083 3914 963732 234 3 0 192.168.186.76 CH - [2015-05-22 08:32:16.451030] "GET /EMail/scripts/tinymce/plugins/link/plugin.min.js HTTP/1.1" 200 1835 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_28&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiC8KwxQzZrjBP3QnQAAAAR TLSv1.2 ECDHE-RSA-AES256-SHA384 758 2479 41% 1135744 5077 128299 198 3 0 192.168.186.76 CH - [2015-05-22 08:32:17.016444] "GET /EMail/scripts/tinymce/plugins/table/plugin.min.js HTTP/1.1" 200 9155 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_28&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiC8awxQzZrjBP4eSYAAABR TLSv1.2 ECDHE-RSA-AES256-SHA384 758 10386 32% 785563 3649 777264 247 3 0 192.168.186.76 CH - [2015-05-22 08:32:16.844100] "GET /EMail/scripts/tinymce/plugins/visualchars/plugin.min.js HTTP/1.1" 200 608 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_28&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiC8KwxQzZrjBP3QnUAAAAT TLSv1.2 ECDHE-RSA-AES256-SHA384 758 1247 54% 958136 6544 949709 122 3 0 192.168.186.76 CH - [2015-05-22 08:32:18.097102] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5881 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_28&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiC8qwxQzZrjBP3QnYAAAAV TLSv1.2 ECDHE-RSA-AES256-SHA384 710 9666 -% 798490 6566 0 0 3 0 192.168.186.76 CH - [2015-05-22 08:32:18.097019] "GET /EMail/scripts/tinymce/skins/lightgray/content.min.css HTTP/1.1" 200 588 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_28&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiC8qwxQzZrjBP4eScAAABS TLSv1.2 ECDHE-RSA-AES256-SHA384 742 1231 38% 954405 6634 945847 157 3 0 192.168.186.76 CH - [2015-05-22 08:32:19.057982] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce-small.eot? HTTP/1.1" 200 10316 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_28&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiC86wxQzZrjBP3QncAAAAX TLSv1.2 ECDHE-RSA-AES256-SHA384 774 11012 -% 995443 7027 985804 198 3 0 192.168.186.76 CH - [2015-05-22 08:33:05.485772] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_28&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiDIawxQzZrjBP4eSoAAABV TLSv1.2 ECDHE-RSA-AES256-SHA384 7554 4545 -% 1570892 367098 183013 152 81 0 192.168.186.76 CH - [2015-05-22 08:33:07.068555] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_28&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiDI6wxQzZrjBP4eSsAAABW TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 946983 5881 932567 7024 3 0 192.168.186.76 CH - [2015-05-22 08:33:10.012079] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8481 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiDJqwxQzZrjBP4eSwAAABX TLSv1.2 ECDHE-RSA-AES256-SHA384 662 9087 -% 1316073 4312 307658 2619 3 0 192.168.186.76 CH - [2015-05-22 08:33:10.013455] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiDJqwxQzZrjBP3QoAAAAAg TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1547614 6785 533062 2781 3 0 192.168.186.76 CH - [2015-05-22 08:33:11.361191] "GET /EMail/images/msgOpenedReplied.png HTTP/1.1" 200 717 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiDJ6wxQzZrjBP4eS4AAABZ TLSv1.2 ECDHE-RSA-AES256-SHA384 694 1226 -% 1161070 6450 152533 219 3 0 192.168.186.76 CH - [2015-05-22 08:33:14.231663] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiDKqwxQzZrjBP4eS8AAABa TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1092123 13180 77038 178 3 0 192.168.186.76 CH - [2015-05-22 08:33:15.335027] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7291 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiDK6wxQzZrjBP4eTAAAABb TLSv1.2 ECDHE-RSA-AES256-SHA384 726 7802 -% 1110891 7300 98873 2355 3 0 192.168.186.76 CH - [2015-05-22 08:41:54.851304] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5473 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiFMqwxQzZrjBP3QtAAAAAz TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 13326 -% 927954 3879 0 0 3 0 192.168.186.76 CH - [2015-05-22 08:42:04.704678] "GET /EMail/tree.aspx?sNode-sharedTree=treeNewMsg HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiFPKwxQzZrjBP4eU8AAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 1212 9827 -% 1414560 4653 400697 3850 3 0 192.168.186.76 CH - [2015-05-22 08:42:05.659692] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5473 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiFPawxQzZrjBP4eVAAAAB8 TLSv1.2 ECDHE-RSA-AES256-SHA384 1180 9411 -% 949170 5261 0 0 3 0 192.168.186.76 CH - [2015-05-22 08:43:04.506089] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5873 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_6&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiFeKwxQzZrjBP3Qt4AAAAF TLSv1.2 ECDHE-RSA-AES256-SHA384 1303 13726 -% 1098629 4359 0 0 3 0 192.168.186.76 CH - [2015-05-22 08:43:49.482364] "GET /imagesCPR/Background-gradient-169.jpg HTTP/1.1" 404 5873 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_6&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "b49f5038.522aa9d333675" ViiFpawxQzZrjBP3QucAAAAM TLSv1.2 ECDHE-RSA-AES256-SHA384 1228 9811 -% 8908 5924 0 0 3 0 192.168.186.76 CH - [2015-05-22 08:43:51.410488] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_6&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiFp6wxQzZrjBP3QukAAAAN TLSv1.2 ECDHE-RSA-AES256-SHA384 8193 630 -% 1752612 432488 289995 196 86 0 192.168.186.76 CH - [2015-05-22 08:43:53.193945] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_6&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiFqawxQzZrjBP3QuoAAAAP TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 893069 24792 859130 7239 3 0 192.168.186.76 CH - [2015-05-22 08:43:59.656389] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiFr6wxQzZrjBP4eVQAAABB TLSv1.2 ECDHE-RSA-AES256-SHA384 1212 9827 -% 1554033 4562 541778 3080 3 0 192.168.186.76 CH - [2015-05-22 08:44:02.637361] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiFsqwxQzZrjBP4eVYAAABD TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1315011 12902 300217 187 3 0 192.168.186.76 CH - [2015-05-22 08:44:03.965033] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7290 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiFs6wxQzZrjBP4eVcAAABF TLSv1.2 ECDHE-RSA-AES256-SHA384 726 7802 -% 975436 9121 962299 2325 3 0 192.168.108.242 CH - [2015-05-22 08:50:30.569876] "GET /EMail/MailHandler?service=createCRL HTTP/1.1" 200 3918 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "8440bed3.522abe9306b94" ViiHNqwxQzZrjBP3QyAAAAAI TLSv1.2 ECDHE-RSA-AES256-SHA384 643 8706 -% 993230 1305 990643 227 0 0 192.168.186.76 CH - [2015-05-22 08:57:48.650194] "GET /EMail/newMessage.aspx?action=reply&mailId=3891_33&folderId=947_65&showPics=false HTTP/1.1" 200 23747 "https://www.example.com/EMail/message.aspx?&mailId=3891_33&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiI7KwxQzZrjBP3Q1gAAAAB TLSv1.2 ECDHE-RSA-AES256-SHA384 1367 28650 -% 1219803 5739 164765 45248 6 3 192.168.186.76 CH - [2015-05-22 08:57:49.976152] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_33&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiI7awxQzZrjBP3Q1oAAAAG TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 946827 4340 935930 5040 3 0 192.168.186.76 CH - [2015-05-22 08:57:50.070633] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5881 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_33&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiI7qwxQzZrjBP3Q1sAAAAD TLSv1.2 ECDHE-RSA-AES256-SHA384 1303 13742 -% 973803 7300 0 0 3 0 192.168.186.76 CH - [2015-05-22 08:59:03.629578] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_33&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiJN6wxQzZrjBP3Q2YAAAAU TLSv1.2 ECDHE-RSA-AES256-SHA384 8615 630 -% 1930421 444112 425821 222 81 0 192.168.186.76 CH - [2015-05-22 08:59:05.568992] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_33&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiJOawxQzZrjBP3Q2cAAAAR TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 987999 9259 964551 12074 3 0 192.168.186.76 CH - [2015-05-22 08:59:36.909967] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 11776 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiJWKwxQzZrjBP3Q2sAAAAZ TLSv1.2 ECDHE-RSA-AES256-SHA384 1229 16528 -% 1011270 4288 574 4594 3 0 192.168.186.76 CH - [2015-05-22 08:59:36.954844] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiJWKwxQzZrjBP3Q2wAAAAX TLSv1.2 ECDHE-RSA-AES256-SHA384 1261 13742 -% 1308046 4774 294282 3730 3 0 192.168.186.76 CH - [2015-05-22 08:59:39.862274] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiJW6wxQzZrjBP3Q20AAAAY TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1193943 14456 177364 187 3 0 192.168.186.76 CH - [2015-05-22 08:59:41.068737] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 10594 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiJXawxQzZrjBP3Q24AAAAb TLSv1.2 ECDHE-RSA-AES256-SHA384 726 11199 -% 1181600 6455 169110 4374 3 0 192.168.186.76 CH - [2015-05-22 08:59:43.700199] "GET /EMail/message.aspx?&mailId=3892_12&folderId=947_65&mailPos=0 HTTP/1.1" 200 15202 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiJX6wxQzZrjBP3Q3AAAAAc TLSv1.2 ECDHE-RSA-AES256-SHA384 726 15876 -% 1310003 8211 273670 25412 3 0 192.168.186.76 CH - [2015-05-22 09:00:51.748400] "GET /EMail/newMessage.aspx?action=reply&mailId=3892_12&folderId=947_65&showPics=false HTTP/1.1" 200 21381 "https://www.example.com/EMail/message.aspx?&mailId=3892_12&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiJo6wxQzZrjBP3Q30AAAAs TLSv1.2 ECDHE-RSA-AES256-SHA384 1266 22383 -% 1223625 6684 156123 48063 6 3 192.168.186.76 CH - [2015-05-22 09:00:53.119422] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5881 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_12&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiJpawxQzZrjBP3Q38AAAAu TLSv1.2 ECDHE-RSA-AES256-SHA384 710 9666 -% 700657 6584 0 0 3 0 192.168.186.76 CH - [2015-05-22 09:01:37.212849] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiJ0awxQzZrjBP3Q4UAAAA1 TLSv1.2 ECDHE-RSA-AES256-SHA384 1261 13742 -% 1701617 7704 684283 4142 3 0 192.168.186.76 CH - [2015-05-22 09:01:40.465697] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiJ1KwxQzZrjBP3Q4YAAAA3 TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1163360 8796 152121 220 3 0 192.168.186.76 CH - [2015-05-22 09:01:41.640895] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 9493 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiJ1awxQzZrjBP3Q4cAAAA2 TLSv1.2 ECDHE-RSA-AES256-SHA384 726 10095 -% 1106546 7292 94407 2949 3 0 192.168.146.84 CH - [2015-05-22 09:04:19.558796] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "338906e4.522ac1a99c98c" ViiKc6wxQzZrjBP3Q6AAAAAP TLSv1.2 ECDHE-RSA-AES256-SHA384 655 5699 -% 896485 668 894915 168 0 0 192.168.10.21 CH - [2015-05-22 09:17:33.267712] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7923 "-" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "c409a414.522ac49e8d300" ViiNjawxQzZrjBP4ed0AAABO TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 789 12328 -% 911198 1515 906776 2313 0 0 192.168.10.21 CH - [2015-05-22 09:17:34.394603] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "c409a414.522ac49e8d300" ViiNjqwxQzZrjBP3RBIAAAAD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 788 2014 22% 759808 1787 757176 136 0 0 192.168.10.21 CH - [2015-05-22 09:17:34.331628] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "c409a414.522ac49e8d300" ViiNjqwxQzZrjBP4ed4AAABM TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 535 2421 13% 823455 2780 819070 132 0 0 192.168.10.21 CH - [2015-05-22 09:17:34.379205] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "c409a414.522ac49e8d300" ViiNjqwxQzZrjBP4ed8AAABP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 788 732 56% 883398 2831 879564 164 0 0 192.168.10.21 CH - [2015-05-22 09:17:34.401869] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "c409a414.522ac49e8d300" ViiNjqwxQzZrjBP3RBMAAAAJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 775 1823 -% 995105 2592 991809 120 0 0 192.168.10.21 CH - [2015-05-22 09:17:34.413592] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "c409a414.522ac49e8d300" ViiNjqwxQzZrjBP4eeAAAABN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 778 8130 22% 986606 3033 979944 133 0 0 192.168.10.21 CH - [2015-05-22 09:17:35.465160] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "c409a414.522ac49e8d300" ViiNj6wxQzZrjBP4eeEAAABQ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 520 2421 13% 920147 3288 915559 140 0 0 192.168.10.21 CH - [2015-05-22 09:17:35.478106] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "c409a414.522ac49e8d300" ViiNj6wxQzZrjBP4eeIAAABR TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 524 1792 -% 929191 2861 925580 122 0 0 192.168.10.21 CH - [2015-05-22 09:19:23.978017] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "c409a414.522ac49e8d300" ViiN@6wxQzZrjBP4eekAAABX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1466 470 -% 1184680 9507 171325 136 0 0 192.168.10.21 CH - [2015-05-22 09:19:25.441029] "GET /EMail/error.aspx HTTP/1.1" 200 3792 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "c409a414.522ac49e8d300" ViiN-awxQzZrjBP4eeoAAABZ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 605 4214 -% 932506 2003 919331 10596 0 0 192.168.10.21 CH - [2015-05-22 09:19:26.597684] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/error.aspx" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "c409a414.522ac49e8d300" ViiN-qwxQzZrjBP4eesAAABa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 487 2421 13% 803907 4140 797727 176 0 0 192.168.10.21 CH - [2015-05-22 09:19:27.595325] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/error.aspx" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "c409a414.522ac49e8d300" ViiN-6wxQzZrjBP4eewAAABb TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 472 2545 14% 825314 1847 821905 134 0 0 192.168.10.21 CH - [2015-05-22 09:19:52.353046] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7922 "-" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "a672b446.522ac52331916" ViiOGKwxQzZrjBP3RCkAAAAd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1002 8639 -% 1064591 1367 60253 2443 0 0 192.168.10.21 CH - [2015-05-22 09:19:53.626732] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "a672b446.522ac52331916" ViiOGawxQzZrjBP4ee8AAABe TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 788 2014 22% 773659 2005 770806 131 0 0 192.168.10.21 CH - [2015-05-22 09:19:53.539134] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "a672b446.522ac52331916" ViiOGawxQzZrjBP3RCoAAAAf TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 535 2545 14% 883141 1913 879779 133 0 0 192.168.10.21 CH - [2015-05-22 09:19:53.661117] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "a672b446.522ac52331916" ViiOGawxQzZrjBP3RCwAAAAg TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 775 1823 -% 1120296 2173 117069 150 0 0 192.168.10.21 CH - [2015-05-22 09:19:53.638120] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "a672b446.522ac52331916" ViiOGawxQzZrjBP4efAAAABf TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 778 8130 22% 1220302 2863 214321 134 0 0 192.168.10.21 CH - [2015-05-22 09:19:53.649567] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "a672b446.522ac52331916" ViiOGawxQzZrjBP3RCsAAAAh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 788 732 56% 1229489 1640 227162 96 0 0 192.168.10.21 CH - [2015-05-22 09:19:54.960675] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "a672b446.522ac52331916" ViiOGqwxQzZrjBP4efEAAABg TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 524 1792 -% 670323 1889 667758 125 0 0 192.168.10.21 CH - [2015-05-22 09:19:54.942845] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "a672b446.522ac52331916" ViiOGqwxQzZrjBP3RC0AAAAi TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 520 2545 14% 936680 1878 933045 184 0 0 192.168.10.21 CH - [2015-05-22 09:20:58.536051] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "a672b446.522ac52331916" ViiOWqwxQzZrjBP3RDcAAAAu TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1470 470 -% 1010153 5288 4217 149 0 0 192.168.10.21 CH - [2015-05-22 09:20:59.757646] "GET /EMail/error.aspx HTTP/1.1" 200 3744 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "a672b446.522ac52331916" ViiOW6wxQzZrjBP3RDkAAAAx TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 605 4166 -% 997967 2065 988888 6467 0 0 192.168.10.21 CH - [2015-05-22 09:21:01.030946] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/error.aspx" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "a672b446.522ac52331916" ViiOXawxQzZrjBP3RDsAAAAy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 487 2545 14% 864326 2884 859765 190 0 0 192.168.10.21 CH - [2015-05-22 09:21:02.008301] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/error.aspx" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "a672b446.522ac52331916" ViiOXqwxQzZrjBP3RDwAAAAz TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 472 2421 13% 884293 1901 880726 222 0 0 192.168.10.21 CH - [2015-05-22 09:21:28.030483] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7922 "-" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b63ab37b.522ac57e70513" ViiOeKwxQzZrjBP4efoAAABp TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1002 8639 -% 1036999 1833 29937 4450 0 0 192.168.10.21 CH - [2015-05-22 09:21:29.436426] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b63ab37b.522ac57e70513" ViiOeawxQzZrjBP4ef0AAABs TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 778 7799 22% 704891 1868 700538 133 0 0 192.168.10.21 CH - [2015-05-22 09:21:29.343661] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b63ab37b.522ac57e70513" ViiOeawxQzZrjBP4efsAAABq TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 535 2545 14% 878224 1970 874642 137 0 0 192.168.10.21 CH - [2015-05-22 09:21:29.459496] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b63ab37b.522ac57e70513" ViiOeawxQzZrjBP3RD4AAAA1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 775 1823 -% 916920 1882 914395 129 0 0 192.168.10.21 CH - [2015-05-22 09:21:29.425210] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b63ab37b.522ac57e70513" ViiOeawxQzZrjBP4efwAAABr TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 788 2014 22% 966225 2413 962876 131 0 0 192.168.10.21 CH - [2015-05-22 09:21:29.465510] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b63ab37b.522ac57e70513" ViiOeawxQzZrjBP4ef4AAABt TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 788 732 56% 1182740 2737 179317 126 0 0 192.168.10.21 CH - [2015-05-22 09:21:30.908463] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b63ab37b.522ac57e70513" ViiOeqwxQzZrjBP4ef8AAABu TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 520 2545 14% 975026 1954 971375 274 0 0 192.168.10.21 CH - [2015-05-22 09:21:30.917519] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b63ab37b.522ac57e70513" ViiOeqwxQzZrjBP4egAAAABv TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 524 1792 -% 1002538 1653 220 164 0 0 192.168.192.35 CH - [2015-05-22 09:22:36.993753] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViiOvKwxQzZrjBP3REoAAAAC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 760 11962 -% 1000407 1670 991987 5878 0 0 192.168.192.35 CH - [2015-05-22 09:22:38.054316] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViiOvqwxQzZrjBP3REsAAAAF TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 492 2421 13% 766883 2968 762074 223 0 0 192.168.19.150 CH - [2015-05-22 09:22:48.150517] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3918 "-" "ocspd/1.0" www.example.com 192.168.34.16 443 proxy-server - - "aab516be.522ac5cad8df5" ViiOyKwxQzZrjBP3RE4AAAAH TLSv1 ECDHE-RSA-AES256-SHA 439 8400 -% 998661 1836 995705 147 0 0 192.168.10.21 CH - [2015-05-22 09:22:49.443015] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b63ab37b.522ac57e70513" ViiOyawxQzZrjBP4egQAAABz TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1545 4190 -% 1388533 9280 375075 169 0 0 192.168.10.21 CH - [2015-05-22 09:22:51.063431] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7358 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b63ab37b.522ac57e70513" ViiOy6wxQzZrjBP4egYAAAB1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 637 7780 -% 1333949 2510 327982 2959 0 0 192.168.10.21 CH - [2015-05-22 09:22:52.561778] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b63ab37b.522ac57e70513" ViiOzKwxQzZrjBP3RFAAAAAD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 767 4381 23% 636925 1992 633321 151 0 0 192.168.10.21 CH - [2015-05-22 09:22:52.499811] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b63ab37b.522ac57e70513" ViiOzKwxQzZrjBP4egcAAAB2 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 519 2545 14% 885303 2938 880802 139 0 0 192.168.10.21 CH - [2015-05-22 09:22:53.441216] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b63ab37b.522ac57e70513" ViiOzawxQzZrjBP4eggAAAB4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 504 2545 14% 934337 2949 929799 139 0 0 192.168.10.21 CH - [2015-05-22 09:23:08.204462] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b63ab37b.522ac57e70513" ViiO3KwxQzZrjBP3RFIAAAAI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1328 559 -% 825080 5275 817833 139 0 0 192.168.10.21 CH - [2015-05-22 09:23:09.301839] "GET /EMail/main.aspx HTTP/1.1" 200 3390 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b63ab37b.522ac57e70513" ViiO3awxQzZrjBP3RFMAAAAK TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 588 3806 -% 937084 2035 933367 1120 0 0 192.168.10.21 CH - [2015-05-22 09:23:10.444326] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b63ab37b.522ac57e70513" ViiO3qwxQzZrjBP3RFQAAAAL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 486 2421 13% 976758 1901 973718 131 0 0 192.168.10.21 CH - [2015-05-22 09:23:11.654123] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b63ab37b.522ac57e70513" ViiO36wxQzZrjBP3RFUAAAAM TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 526 4128 -% 962676 1837 950267 9933 0 0 192.168.10.21 CH - [2015-05-22 09:23:11.754770] "GET /EMail/overview.aspx HTTP/1.1" 200 5286 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b63ab37b.522ac57e70513" ViiO36wxQzZrjBP3RFYAAAAQ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 783 5846 -% 1055193 1773 50085 2799 0 0 192.168.10.21 CH - [2015-05-22 09:23:11.747439] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b63ab37b.522ac57e70513" ViiO36wxQzZrjBP4egsAAAB6 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 809 9317 -% 1663857 2490 654618 2777 0 0 192.168.10.21 CH - [2015-05-22 09:23:12.912022] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b63ab37b.522ac57e70513" ViiO4KwxQzZrjBP3RFkAAAAP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 2421 13% 756246 2902 751775 171 0 0 192.168.10.21 CH - [2015-05-22 09:23:12.905444] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b63ab37b.522ac57e70513" ViiO4KwxQzZrjBP3RFgAAAAN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 473 2545 14% 971101 1868 967757 171 0 0 192.168.10.21 CH - [2015-05-22 09:23:12.964211] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b63ab37b.522ac57e70513" ViiO4KwxQzZrjBP3RFoAAAAS TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 737 1386 -% 1064931 1906 62414 125 0 0 192.168.10.21 CH - [2015-05-22 09:23:13.611301] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b63ab37b.522ac57e70513" ViiO4awxQzZrjBP4egwAAAB7 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 524 1260 -% 573243 2515 569633 205 0 0 192.168.10.21 CH - [2015-05-22 09:23:13.712872] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b63ab37b.522ac57e70513" ViiO4awxQzZrjBP3RFsAAAAU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 475 2421 13% 906345 2859 901739 179 0 0 192.168.10.21 CH - [2015-05-22 09:23:26.999593] "GET /EMail/inbox.aspx HTTP/1.1" 200 8402 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b63ab37b.522ac57e70513" ViiO7qwxQzZrjBP3RF0AAAAT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1096 8991 -% 1193915 1944 188682 2596 0 0 192.168.10.21 CH - [2015-05-22 09:23:28.454610] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b63ab37b.522ac57e70513" ViiO8KwxQzZrjBP3RF4AAAAV TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 487 2421 13% 727345 2937 723048 163 0 0 192.168.10.21 CH - [2015-05-22 09:23:28.523679] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b63ab37b.522ac57e70513" ViiO8KwxQzZrjBP3RGAAAAAZ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 732 665 -% 841790 1806 839372 129 0 0 192.168.10.21 CH - [2015-05-22 09:23:28.543257] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b63ab37b.522ac57e70513" ViiO8KwxQzZrjBP3RGEAAAAa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 732 1951 -% 893983 1814 891363 165 0 0 192.168.10.21 CH - [2015-05-22 09:23:28.508353] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b63ab37b.522ac57e70513" ViiO8KwxQzZrjBP3RF8AAAAW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 729 677 -% 941975 3053 938167 91 0 0 192.168.10.21 CH - [2015-05-22 09:23:29.382024] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b63ab37b.522ac57e70513" ViiO8awxQzZrjBP3RGIAAAAX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 472 2545 14% 731867 2104 728487 164 0 0 192.168.186.76 CH - [2015-05-22 09:23:38.282501] "GET /EMail/message.aspx?&mailId=3891_32&folderId=947_65&mailPos=0 HTTP/1.1" 200 15823 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiO@qwxQzZrjBP4ehAAAAB- TLSv1.2 ECDHE-RSA-AES256-SHA384 1319 20576 -% 2509973 9090 446626 51001 3 0 192.168.10.21 CH - [2015-05-22 09:23:42.190261] "GET /EMail/message.aspx?&mailId=3892_22&folderId=3485_5&mailPos=0 HTTP/1.1" 200 15625 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b63ab37b.522ac57e70513" ViiO-qwxQzZrjBP4ehEAAABA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1137 16244 -% 1333981 3250 295601 33843 0 0 192.168.10.21 CH - [2015-05-22 09:23:43.810783] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/message.aspx?&mailId=3892_22&folderId=3485_5&mailPos=0" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b63ab37b.522ac57e70513" ViiO-6wxQzZrjBP4ehIAAABC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 531 2545 14% 842940 2011 839433 157 0 0 192.168.10.21 CH - [2015-05-22 09:23:44.830598] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/message.aspx?&mailId=3892_22&folderId=3485_5&mailPos=0" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b63ab37b.522ac57e70513" ViiPAKwxQzZrjBP4ehMAAABB TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 516 2421 13% 885470 2929 881015 139 0 0 192.168.186.76 CH - [2015-05-22 09:23:48.160031] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5881 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_32&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiPBKwxQzZrjBP4ehQAAABD TLSv1.2 ECDHE-RSA-AES256-SHA384 1228 9827 -% 670561 5720 0 0 3 0 192.168.10.21 CH - [2015-05-22 09:24:26.961817] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b63ab37b.522ac57e70513" ViiPKqwxQzZrjBP4ehkAAABI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1114 547 -% 1000298 2609 996918 170 0 0 192.168.10.21 CH - [2015-05-22 09:24:28.139207] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b63ab37b.522ac57e70513" ViiPLKwxQzZrjBP4ehoAAABL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 528 676 75% 986821 3410 982055 341 0 0 192.168.10.21 CH - [2015-05-22 09:24:29.421906] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "https://www.example.com/EMail/index.html" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b63ab37b.522ac57e70513" ViiPLawxQzZrjBP4ehsAAABK TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 545 318 -% 1015196 2304 12287 130 0 0 192.168.10.21 CH - [2015-05-22 09:24:30.606969] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "https://www.example.com/EMail/index.html" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b63ab37b.522ac57e70513" ViiPLqwxQzZrjBP4ehwAAABO TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 527 7758 -% 869235 3138 862393 2984 0 0 192.168.10.21 CH - [2015-05-22 09:24:31.755646] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b63ab37b.522ac57e70513" ViiPL6wxQzZrjBP4eh0AAABM TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 487 2545 14% 882906 1952 879422 170 0 0 192.168.10.21 CH - [2015-05-22 09:24:32.884586] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (iPad; CPU OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b63ab37b.522ac57e70513" ViiPMKwxQzZrjBP4eh4AAABP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 472 2545 14% 957691 1892 954209 177 0 0 192.168.186.76 CH - [2015-05-22 09:25:35.064580] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_32&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiPb6wxQzZrjBP3RHUAAAAs TLSv1.2 ECDHE-RSA-AES256-SHA384 7969 630 -% 1585494 309159 255001 491 91 0 192.168.186.76 CH - [2015-05-22 09:25:36.661288] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_32&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiPcKwxQzZrjBP3RHYAAAAt TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 960550 9484 942275 6972 3 0 192.168.186.76 CH - [2015-05-22 09:25:38.413079] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 10715 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiPcqwxQzZrjBP3RHcAAAAw TLSv1.2 ECDHE-RSA-AES256-SHA384 662 11396 -% 1320391 7055 308040 3380 3 0 192.168.186.76 CH - [2015-05-22 09:26:47.306809] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5881 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_11&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiPt6wxQzZrjBP3RIMAAAA5 TLSv1.2 ECDHE-RSA-AES256-SHA384 1303 13742 -% 894115 4010 0 0 3 0 192.168.186.76 CH - [2015-05-22 09:27:34.411292] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_11&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiP5qwxQzZrjBP4eicAAABZ TLSv1.2 ECDHE-RSA-AES256-SHA384 7137 630 -% 1658313 351770 286155 181 86 0 192.168.186.76 CH - [2015-05-22 09:27:36.084836] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_11&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiP6KwxQzZrjBP4eioAAABc TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 905399 9895 886788 7084 3 0 192.168.186.76 CH - [2015-05-22 09:27:38.571197] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 10800 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiP6qwxQzZrjBP4eisAAABd TLSv1.2 ECDHE-RSA-AES256-SHA384 662 11476 -% 1249146 6753 237176 3378 3 0 192.168.192.35 CH - [2015-05-22 09:28:17.846654] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViiQEawxQzZrjBP3RJIAAAAK TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 849 11799 -% 845461 3402 837330 3793 0 0 192.168.186.76 CH - [2015-05-22 09:32:36.520557] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3892_24&folderId=947_65&attachmentId=3&token=49352420875903104E17 HTTP/1.1" 200 838233 "https://www.example.com/EMail/message.aspx?&mailId=3892_24&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiRFKwxQzZrjBP3RLwAAAA0 TLSv1.2 ECDHE-RSA-AES256-SHA384 1399 887896 -% 1439457 8321 119702 200 3 0 192.168.186.76 CH - [2015-05-22 09:32:56.144365] "GET /EMail/newMessage.aspx?action=reply&mailId=3892_24&folderId=947_65&showPics=false HTTP/1.1" 200 21684 "https://www.example.com/EMail/message.aspx?&mailId=3892_24&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiRKKwxQzZrjBP3RL4AAAA2 TLSv1.2 ECDHE-RSA-AES256-SHA384 1292 22671 -% 1248956 5419 184146 46157 6 3 192.168.186.76 CH - [2015-05-22 09:32:57.471296] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_24&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiRKawxQzZrjBP3RL8AAAA6 TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 959569 7052 942547 7374 3 0 192.168.186.76 CH - [2015-05-22 09:36:33.679342] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiSAawxQzZrjBP3ROEAAAAY TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1462288 4872 447179 4516 3 0 192.168.186.76 CH - [2015-05-22 09:36:36.821475] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiSBKwxQzZrjBP3ROIAAAAb TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 866898 7812 856267 197 3 0 192.168.186.76 CH - [2015-05-22 09:36:37.700596] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8513 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiSBawxQzZrjBP3ROMAAAAc TLSv1.2 ECDHE-RSA-AES256-SHA384 726 9119 -% 1089395 7146 75708 4298 3 0 192.168.186.76 CH - [2015-05-22 09:37:12.804357] "GET /EMail/message.aspx?&mailId=3891_34&folderId=947_65&mailPos=0 HTTP/1.1" 200 15423 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiSKKwxQzZrjBP3ROkAAAAj TLSv1.2 ECDHE-RSA-AES256-SHA384 1244 16261 -% 1535434 5017 500120 27365 3 0 192.168.186.76 CH - [2015-05-22 09:37:16.691094] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3891_34&folderId=947_65&attachmentId=3&token=54903259024508045E17 HTTP/1.1" 200 1069571 "https://www.example.com/EMail/message.aspx?&mailId=3891_34&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiSLKwxQzZrjBP3ROwAAAAm TLSv1.2 ECDHE-RSA-AES256-SHA384 806 1105657 -% 2621934 10054 119188 195 3 0 192.168.186.76 CH - [2015-05-22 09:37:38.101819] "GET /EMail/newMessage.aspx?action=reply&mailId=3891_34&folderId=947_65&showPics=false HTTP/1.1" 200 21614 "https://www.example.com/EMail/message.aspx?&mailId=3891_34&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiSQqwxQzZrjBP3RO4AAAAo TLSv1.2 ECDHE-RSA-AES256-SHA384 1341 26522 -% 1097462 6151 17972 68917 6 3 192.168.186.76 CH - [2015-05-22 09:37:39.263104] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_34&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiSQ6wxQzZrjBP3RO8AAAAp TLSv1.2 ECDHE-RSA-AES256-SHA384 1319 7526 -% 881040 4251 868498 6850 3 0 192.168.186.76 CH - [2015-05-22 09:38:04.956933] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiSXKwxQzZrjBP3RPYAAAAu TLSv1.2 ECDHE-RSA-AES256-SHA384 1261 13742 -% 1446774 7700 430446 3039 3 0 192.168.186.76 CH - [2015-05-22 09:38:07.866935] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiSX6wxQzZrjBP3RPcAAAAy TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1087417 12178 72747 202 3 0 192.168.186.76 CH - [2015-05-22 09:38:08.966175] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7290 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiSYKwxQzZrjBP3RPgAAAAz TLSv1.2 ECDHE-RSA-AES256-SHA384 726 7802 -% 1056835 8412 42512 3839 3 0 192.168.192.35 CH - [2015-05-22 09:49:48.332608] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViiVHKwxQzZrjBP3RVYAAAAV TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1338 4447 -% 979823 5118 973904 182 0 0 192.168.192.35 CH - [2015-05-22 09:49:49.341436] "GET /EMail/main.aspx HTTP/1.1" 200 3383 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViiVHawxQzZrjBP3RVcAAAAZ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 3799 -% 901530 2308 896754 1816 0 0 192.168.192.35 CH - [2015-05-22 09:49:50.325862] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViiVHqwxQzZrjBP3RVgAAAAa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 4128 -% 902064 3041 891760 6632 0 0 192.168.192.35 CH - [2015-05-22 09:49:50.377502] "GET /EMail/overview.aspx HTTP/1.1" 200 5289 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViiVHqwxQzZrjBP4eoAAAAB1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1134 9737 -% 1199355 4223 192228 2064 0 0 192.168.192.35 CH - [2015-05-22 09:49:50.372037] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViiVHqwxQzZrjBP3RVkAAAAW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1160 13205 -% 2037881 3799 27177 2714 0 0 192.168.192.35 CH - [2015-05-22 09:49:54.006600] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViiVIqwxQzZrjBP3RVsAAAAe TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 511 409 -% 923067 3562 918592 217 0 0 192.168.192.35 CH - [2015-05-22 09:49:54.992311] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViiVIqwxQzZrjBP3RVwAAAAY TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 458 318 -% 1009275 2124 6427 165 0 0 192.168.192.35 CH - [2015-05-22 09:49:56.061249] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViiVJKwxQzZrjBP3RV4AAAAc TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 440 7758 -% 982663 2283 976215 3565 0 0 192.168.186.76 CH - [2015-05-22 09:56:56.555430] "GET /EMail/newMessage.aspx?msg=new HTTP/1.1" 200 12027 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiWyKwxQzZrjBP4eqEAAABa TLSv1.2 ECDHE-RSA-AES256-SHA384 1271 16784 -% 1115017 9004 71805 31606 6 3 192.168.186.76 CH - [2015-05-22 09:56:57.761455] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiWyawxQzZrjBP4eqIAAABb TLSv1.2 ECDHE-RSA-AES256-SHA384 678 3434 -% 752985 6269 738577 6210 3 0 192.168.147.214 CH - [2015-05-22 09:56:58.605210] "GET /EMail/main.aspx HTTP/1.1" 200 7343 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "31e09c2c.522acd6e5029a" ViiWyqwxQzZrjBP3RaoAAAAx TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 773 11949 -% 888210 707 884383 2642 0 0 192.168.186.76 CH - [2015-05-22 09:56:58.810211] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8393 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiWyqwxQzZrjBP4eqMAAABZ TLSv1.2 ECDHE-RSA-AES256-SHA384 662 8991 -% 1070202 8906 54553 4511 3 0 192.168.147.214 CH - [2015-05-22 09:56:59.565836] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "31e09c2c.522acd6e5029a" ViiWy6wxQzZrjBP3RasAAAAu TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 497 2421 13% 1051942 3003 47289 182 0 0 192.168.147.214 CH - [2015-05-22 09:56:59.883474] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "31e09c2c.522acd6e5029a" ViiWy6wxQzZrjBP3Ra0AAAAy TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1127 11682 22% 796956 1599 791046 179 0 0 192.168.147.214 CH - [2015-05-22 09:56:59.890809] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "31e09c2c.522acd6e5029a" ViiWy6wxQzZrjBP3Ra8AAAA1 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1149 5706 -% 795361 1629 793050 124 0 0 192.168.147.214 CH - [2015-05-22 09:56:59.886279] "GET /EMail/scripts/variables_fr.js HTTP/1.1" 200 1679 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "31e09c2c.522acd6e5029a" ViiWy6wxQzZrjBP3Ra4AAAA3 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1132 6201 27% 829998 2511 826327 138 0 0 192.168.147.214 CH - [2015-05-22 09:56:59.881370] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "31e09c2c.522acd6e5029a" ViiWy6wxQzZrjBP3RawAAAAz TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1137 4615 56% 884844 2541 881447 135 0 0 192.168.147.214 CH - [2015-05-22 09:57:00.814646] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/css/NNstyle.css" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "31e09c2c.522acd6e5029a" ViiWzKwxQzZrjBP3RbAAAAA0 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 518 1792 -% 687824 1856 685286 143 0 0 192.168.147.214 CH - [2015-05-22 09:57:01.549459] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "31e09c2c.522acd6e5029a" ViiWzawxQzZrjBP3RbEAAAA4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 484 1567 -% 638233 1955 635466 159 0 0 192.168.186.76 CH - [2015-05-22 09:57:44.426316] "GET /EMail/message.aspx?&mailId=3892_28&folderId=947_65&mailPos=0 HTTP/1.1" 200 15682 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiW@KwxQzZrjBP4eqgAAABg TLSv1.2 ECDHE-RSA-AES256-SHA384 1303 20432 -% 2350153 8521 309692 27140 3 0 192.168.147.214 CH - [2015-05-22 09:57:48.074462] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8532 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "31e09c2c.522acd6e5029a" ViiW-KwxQzZrjBP3RbgAAAA@ TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1248 13207 -% 1895167 2647 885307 3088 0 0 192.168.186.76 CH - [2015-05-22 09:57:53.951872] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5881 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_28&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiXAawxQzZrjBP4eqkAAABh TLSv1.2 ECDHE-RSA-AES256-SHA384 1228 9827 -% 962073 6341 0 0 3 0 192.168.32.7 CH - [2015-05-22 10:00:43.607337] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7377 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiXq6wxQzZrjBP3RdUAAAAY TLSv1.2 ECDHE-RSA-AES128-SHA256 691 11907 -% 882012 1795 876800 2520 0 0 192.168.32.7 CH - [2015-05-22 10:00:44.604038] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiXrKwxQzZrjBP3RdcAAAAd TLSv1.2 ECDHE-RSA-AES128-SHA256 486 2713 14% 920588 3232 915525 200 0 0 192.168.32.7 CH - [2015-05-22 10:00:44.632327] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiXrKwxQzZrjBP3RdkAAAAf TLSv1.2 ECDHE-RSA-AES128-SHA256 776 2144 22% 1037873 1752 35217 158 0 0 192.168.32.7 CH - [2015-05-22 10:00:44.632214] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiXrKwxQzZrjBP3RdgAAAAl TLSv1.2 ECDHE-RSA-AES128-SHA256 808 1931 -% 1146931 1843 144454 153 0 0 192.168.32.7 CH - [2015-05-22 10:00:44.634780] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiXrKwxQzZrjBP4erIAAABr TLSv1.2 ECDHE-RSA-AES128-SHA256 808 4405 23% 1159934 2000 156553 112 0 0 192.168.32.7 CH - [2015-05-22 10:00:44.632412] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiXrKwxQzZrjBP3RdoAAAAg TLSv1.2 ECDHE-RSA-AES128-SHA256 776 864 56% 1291671 2888 287908 152 0 0 192.168.32.7 CH - [2015-05-22 10:00:44.634928] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7239 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiXrKwxQzZrjBP3RdsAAAAk TLSv1.2 ECDHE-RSA-AES128-SHA256 792 8621 22% 1342926 2039 337187 155 0 0 192.168.32.7 CH - [2015-05-22 10:00:46.030402] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiXrqwxQzZrjBP3Rd0AAAAj TLSv1.2 ECDHE-RSA-AES128-SHA256 534 1866 -% 987313 1909 984753 145 0 0 192.168.32.7 CH - [2015-05-22 10:00:53.537670] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiXtawxQzZrjBP3Rd4AAAAi TLSv1.2 ECDHE-RSA-AES128-SHA256 808 2331 -% 933918 2311 930660 215 0 0 192.168.32.7 CH - [2015-05-22 10:00:54.048389] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiXtqwxQzZrjBP3Rd8AAAAm TLSv1.2 ECDHE-RSA-AES128-SHA256 968 630 -% 1064280 6717 56745 172 0 0 192.168.32.7 CH - [2015-05-22 10:00:55.125725] "GET /EMail/main.aspx HTTP/1.1" 200 3409 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiXt6wxQzZrjBP3ReEAAAAq TLSv1.2 ECDHE-RSA-AES128-SHA256 534 3898 -% 862077 2184 857204 1880 0 0 192.168.32.7 CH - [2015-05-22 10:00:56.078995] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiXuKwxQzZrjBP3ReIAAAAp TLSv1.2 ECDHE-RSA-AES128-SHA256 470 4202 -% 957736 1939 948439 6804 0 0 192.168.32.7 CH - [2015-05-22 10:00:56.105518] "GET /EMail/overview.aspx HTTP/1.1" 200 5302 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiXuKwxQzZrjBP3ReQAAAAt TLSv1.2 ECDHE-RSA-AES128-SHA256 760 5963 -% 1210878 2430 205411 2257 0 0 192.168.32.7 CH - [2015-05-22 10:00:56.105370] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiXuKwxQzZrjBP3ReMAAAAr TLSv1.2 ECDHE-RSA-AES128-SHA256 792 9683 -% 1900987 3228 887077 6346 0 0 192.168.32.7 CH - [2015-05-22 10:00:57.358863] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiXuawxQzZrjBP3ReUAAAAs TLSv1.2 ECDHE-RSA-AES128-SHA256 502 1322 -% 956154 3396 951925 156 0 0 192.168.32.7 CH - [2015-05-22 10:00:58.055515] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiXuqwxQzZrjBP3ReYAAAAv TLSv1.2 ECDHE-RSA-AES128-SHA256 534 1338 -% 898436 2990 894490 216 0 0 192.168.32.7 CH - [2015-05-22 10:00:59.077535] "GET /EMail/inbox.aspx HTTP/1.1" 200 8714 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiXu6wxQzZrjBP3RecAAAAx TLSv1.2 ECDHE-RSA-AES128-SHA256 470 9263 -% 1027614 2666 21357 2860 0 0 192.168.32.7 CH - [2015-05-22 10:01:00.149164] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiXvKwxQzZrjBP3RegAAAAu TLSv1.2 ECDHE-RSA-AES128-SHA256 486 602 -% 880086 2019 877421 146 0 0 192.168.32.7 CH - [2015-05-22 10:01:00.151298] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiXvKwxQzZrjBP3ReoAAAA1 TLSv1.2 ECDHE-RSA-AES128-SHA256 486 1882 -% 1044766 1685 42329 194 0 0 192.168.32.7 CH - [2015-05-22 10:01:00.149846] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiXvKwxQzZrjBP3RekAAAAy TLSv1.2 ECDHE-RSA-AES128-SHA256 486 602 -% 1092977 2768 89510 106 0 0 192.168.32.7 CH - [2015-05-22 10:01:04.294015] "GET /EMail/message.aspx?&mailId=3891_24&folderId=3232_82&mailPos=0 HTTP/1.1" 200 11219 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiXwKwxQzZrjBP3ResAAAA3 TLSv1.2 ECDHE-RSA-AES128-SHA256 518 11828 -% 1399219 3284 368575 26400 0 0 192.168.32.7 CH - [2015-05-22 10:01:13.100109] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3891_24&folderId=3232_82&attachmentId=2&token=180322715244245248E17 HTTP/1.1" 200 48679 "https://www.example.com/EMail/message.aspx?&mailId=3891_24&folderId=3232_82&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiXyawxQzZrjBP4erYAAABw TLSv1.2 ECDHE-RSA-AES128-SHA256 904 51207 -% 1063179 4269 39896 257 0 0 192.168.32.7 CH - [2015-05-22 10:01:29.831845] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiX2awxQzZrjBP3Re4AAAA4 TLSv1.2 ECDHE-RSA-AES128-SHA256 776 2331 -% 1063311 3040 59292 218 0 0 192.168.32.7 CH - [2015-05-22 10:01:41.225585] "GET /EMail/newMessage.aspx?action=reply&mailId=3891_24&folderId=3232_82&showPics=false HTTP/1.1" 200 12914 "https://www.example.com/EMail/message.aspx?&mailId=3891_24&folderId=3232_82&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiX5awxQzZrjBP4eroAAAB0 TLSv1.2 ECDHE-RSA-AES128-SHA256 872 13701 -% 1229642 4842 180097 42203 3 3 192.168.32.7 CH - [2015-05-22 10:01:42.501668] "GET /EMail/scripts/tinymce/tinymce.min.js HTTP/1.1" 200 102049 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_24&folderId=3232_82&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiX5qwxQzZrjBP4ersAAAB1 TLSv1.2 ECDHE-RSA-AES128-SHA256 550 104640 33% 1087796 4744 51009 174 0 0 192.168.32.7 CH - [2015-05-22 10:01:43.712072] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_24&folderId=3232_82&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiX56wxQzZrjBP4erwAAAB2 TLSv1.2 ECDHE-RSA-AES128-SHA256 534 3402 -% 1144869 1935 137212 5164 0 0 192.168.32.7 CH - [2015-05-22 10:01:43.751592] "GET /EMail/scripts/tinymce/langs/de.js HTTP/1.1" 200 2969 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_24&folderId=3232_82&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiX56wxQzZrjBP3RfAAAAA2 TLSv1.2 ECDHE-RSA-AES128-SHA256 840 3797 38% 1147616 2939 143001 137 0 0 192.168.32.7 CH - [2015-05-22 10:01:43.753528] "GET /EMail/scripts/tinymce/plugins/searchreplace/plugin.min.js HTTP/1.1" 200 2586 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_24&folderId=3232_82&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiX56wxQzZrjBP4er0AAAB4 TLSv1.2 ECDHE-RSA-AES128-SHA256 856 3413 40% 1677888 2767 673918 139 0 0 192.168.32.7 CH - [2015-05-22 10:01:43.768892] "GET /EMail/scripts/tinymce/plugins/preview/plugin.min.js HTTP/1.1" 200 737 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_24&folderId=3232_82&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiX56wxQzZrjBP4er4AAAB5 TLSv1.2 ECDHE-RSA-AES128-SHA256 856 1504 51% 1915156 1669 912620 150 0 0 192.168.32.7 CH - [2015-05-22 10:01:43.761286] "GET /EMail/scripts/tinymce/plugins/hr/plugin.min.js HTTP/1.1" 200 191 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_24&folderId=3232_82&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiX56wxQzZrjBP3RfEAAAA7 TLSv1.2 ECDHE-RSA-AES128-SHA256 856 960 53% 2141002 2463 137457 254 0 0 192.168.32.7 CH - [2015-05-22 10:01:43.768954] "GET /EMail/scripts/tinymce/plugins/paste/plugin.min.js HTTP/1.1" 200 6256 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_24&folderId=3232_82&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiX56wxQzZrjBP4er8AAAB3 TLSv1.2 ECDHE-RSA-AES128-SHA256 856 7507 40% 2246677 1731 242623 195 0 0 192.168.32.7 CH - [2015-05-22 10:01:43.773969] "GET /EMail/scripts/tinymce/plugins/insertdatetime/plugin.min.js HTTP/1.1" 200 867 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_24&folderId=3232_82&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiX56wxQzZrjBP4esEAAAB6 TLSv1.2 ECDHE-RSA-AES128-SHA256 856 1632 42% 2296895 1859 293772 202 0 0 192.168.32.7 CH - [2015-05-22 10:01:43.773681] "GET /EMail/scripts/tinymce/plugins/image/plugin.min.js HTTP/1.1" 200 2136 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_24&folderId=3232_82&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiX56wxQzZrjBP4esAAAAB8 TLSv1.2 ECDHE-RSA-AES128-SHA256 856 2965 42% 2315108 1897 311990 171 0 0 192.168.32.7 CH - [2015-05-22 10:01:43.772078] "GET /EMail/scripts/tinymce/plugins/link/plugin.min.js HTTP/1.1" 200 1835 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_24&folderId=3232_82&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiX56wxQzZrjBP3RfMAAAA@ TLSv1.2 ECDHE-RSA-AES128-SHA256 856 2608 41% 2330874 3140 326258 181 0 0 192.168.32.7 CH - [2015-05-22 10:01:43.768534] "GET /EMail/scripts/tinymce/plugins/print/plugin.min.js HTTP/1.1" 200 182 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_24&folderId=3232_82&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiX56wxQzZrjBP3RfIAAAA5 TLSv1.2 ECDHE-RSA-AES128-SHA256 856 944 55% 2423846 1780 421208 154 0 0 192.168.32.7 CH - [2015-05-22 10:01:43.774441] "GET /EMail/scripts/tinymce/plugins/charmap/plugin.min.js HTTP/1.1" 200 2698 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_24&folderId=3232_82&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiX56wxQzZrjBP3RfUAAAA8 TLSv1.2 ECDHE-RSA-AES128-SHA256 856 3525 38% 2531625 2901 527328 151 0 0 192.168.32.7 CH - [2015-05-22 10:01:43.773978] "GET /EMail/scripts/tinymce/plugins/anchor/plugin.min.js HTTP/1.1" 200 339 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_24&folderId=3232_82&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiX56wxQzZrjBP3RfQAAAA9 TLSv1.2 ECDHE-RSA-AES128-SHA256 856 1104 63% 2730132 2797 726261 204 0 0 192.168.32.7 CH - [2015-05-22 10:01:43.775560] "GET /EMail/scripts/tinymce/themes/modern/theme.min.js HTTP/1.1" 200 2651 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_24&folderId=3232_82&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiX56wxQzZrjBP3RfYAAAA6 TLSv1.2 ECDHE-RSA-AES128-SHA256 856 3477 41% 3453433 2940 448978 239 0 0 192.168.32.7 CH - [2015-05-22 10:01:43.775743] "GET /EMail/scripts/tinymce/plugins/visualblocks/plugin.min.js HTTP/1.1" 200 525 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_24&folderId=3232_82&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiX56wxQzZrjBP4esIAAAB7 TLSv1.2 ECDHE-RSA-AES128-SHA256 856 1296 43% 3676313 2810 672177 229 0 0 192.168.32.7 CH - [2015-05-22 10:01:43.776019] "GET /EMail/scripts/tinymce/plugins/visualchars/plugin.min.js HTTP/1.1" 200 608 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_24&folderId=3232_82&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiX56wxQzZrjBP3RfcAAAA- TLSv1.2 ECDHE-RSA-AES128-SHA256 856 1376 54% 3722405 2388 719066 151 0 0 192.168.32.7 CH - [2015-05-22 10:01:43.921440] "GET /EMail/scripts/tinymce/plugins/textcolor/plugin.min.js HTTP/1.1" 200 1647 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_24&folderId=3232_82&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiX56wxQzZrjBP3RfgAAAAC TLSv1.2 ECDHE-RSA-AES128-SHA256 856 2416 44% 3874081 2660 870462 175 0 0 192.168.32.7 CH - [2015-05-22 10:01:43.777383] "GET /EMail/scripts/tinymce/plugins/table/plugin.min.js HTTP/1.1" 200 9181 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_24&folderId=3232_82&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiX56wxQzZrjBP4esMAAAB9 TLSv1.2 ECDHE-RSA-AES128-SHA256 856 10626 32% 4213396 2171 207362 231 0 0 192.168.32.7 CH - [2015-05-22 10:01:43.937981] "GET /EMail/scripts/tinymce/plugins/fullpage/plugin.min.js HTTP/1.1" 200 2325 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_24&folderId=3232_82&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiX56wxQzZrjBP3RfkAAAAA TLSv1.2 ECDHE-RSA-AES128-SHA256 856 3157 36% 4082278 1818 79527 127 0 0 192.168.32.7 CH - [2015-05-22 10:01:48.073909] "GET /EMail/scripts/tinymce/skins/lightgray/skin.min.css HTTP/1.1" 200 6071 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_24&folderId=3232_82&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiX7KwxQzZrjBP3RfsAAAAB TLSv1.2 ECDHE-RSA-AES128-SHA256 550 7191 17% 2149703 1935 143709 219 0 0 192.168.32.7 CH - [2015-05-22 10:01:48.101476] "GET /EMail/scripts/tinymce/skins/lightgray/content.min.css HTTP/1.1" 200 588 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_24&folderId=3232_82&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiX7KwxQzZrjBP4esUAAAB- TLSv1.2 ECDHE-RSA-AES128-SHA256 550 1183 38% 2260709 3420 256275 156 0 0 192.168.32.7 CH - [2015-05-22 10:01:48.101772] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5889 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_24&folderId=3232_82&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiX7KwxQzZrjBP3RfwAAAAE TLSv1.2 ECDHE-RSA-AES128-SHA256 518 8994 -% 2297492 2253 0 0 0 0 192.168.32.7 CH - [2015-05-22 10:01:50.268949] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce-small.eot? HTTP/1.1" 200 10316 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_24&folderId=3232_82&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiX7qwxQzZrjBP3Rf4AAAAG TLSv1.2 ECDHE-RSA-AES128-SHA256 582 10948 -% 2258586 2088 255512 162 0 0 192.168.32.7 CH - [2015-05-22 10:01:50.267463] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce.eot? HTTP/1.1" 200 10024 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_24&folderId=3232_82&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiX7qwxQzZrjBP3Rf0AAAAH TLSv1.2 ECDHE-RSA-AES128-SHA256 566 10660 -% 2840536 3175 835942 260 0 0 192.168.32.7 CH - [2015-05-22 10:02:09.070570] "GET /EMail/message.aspx?&mailId=3891_24&folderId=3232_82&mailPos=0 HTTP/1.1" 200 11214 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiYAawxQzZrjBP4escAAABC TLSv1.2 ECDHE-RSA-AES128-SHA256 808 12005 -% 1294699 3214 262875 26341 0 0 192.168.32.7 CH - [2015-05-22 10:02:21.619504] "GET /EMail/message.aspx?&mailId=3891_24&folderId=3232_82&getFromPOP3=N&showPics=true HTTP/1.1" 200 11145 "https://www.example.com/EMail/message.aspx?&mailId=3891_24&folderId=3232_82&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiYDawxQzZrjBP4esgAAABB TLSv1.2 ECDHE-RSA-AES128-SHA256 872 11872 -% 1259142 3969 230171 23943 0 0 192.168.32.7 CH - [2015-05-22 10:02:30.761198] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3891_24&folderId=3232_82&getFromPOP3=N&showPics=true" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiYFqwxQzZrjBP3RgYAAAAP TLSv1.2 ECDHE-RSA-AES128-SHA256 1016 566 -% 1512158 5793 505596 183 0 0 192.168.32.7 CH - [2015-05-22 10:02:32.284725] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7290 "https://www.example.com/EMail/message.aspx?&mailId=3891_24&folderId=3232_82&getFromPOP3=N&showPics=true" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiYGKwxQzZrjBP3RgcAAAAN TLSv1.2 ECDHE-RSA-AES128-SHA256 582 7770 -% 1033329 3168 27367 2203 0 0 192.168.32.7 CH - [2015-05-22 10:02:36.186394] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiYHKwxQzZrjBP3RggAAAAS TLSv1.2 ECDHE-RSA-AES128-SHA256 486 437 -% 871372 3559 866913 204 0 0 192.168.32.7 CH - [2015-05-22 10:02:37.068342] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiYHawxQzZrjBP3RgsAAAAT TLSv1.2 ECDHE-RSA-AES128-SHA256 470 767 75% 716527 3046 712325 328 0 0 192.168.32.7 CH - [2015-05-22 10:02:37.877101] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiYHawxQzZrjBP3RgwAAAAV TLSv1.2 ECDHE-RSA-AES128-SHA256 438 357 -% 993140 3288 988812 223 0 0 192.168.32.7 CH - [2015-05-22 10:02:38.884054] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiYHqwxQzZrjBP3Rg0AAAAZ TLSv1.2 ECDHE-RSA-AES128-SHA256 422 7834 -% 869799 1969 864753 2475 0 0 192.168.32.7 CH - [2015-05-22 10:02:39.832409] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiYH6wxQzZrjBP4essAAABE TLSv1.2 ECDHE-RSA-AES128-SHA256 872 422 -% 889789 1749 887422 171 0 0 192.168.32.7 CH - [2015-05-22 10:02:39.798725] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiYH6wxQzZrjBP3Rg4AAAAW TLSv1.2 ECDHE-RSA-AES128-SHA256 550 2527 14% 999664 1972 996111 208 0 0 192.168.32.7 CH - [2015-05-22 10:02:39.833586] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiYH6wxQzZrjBP3Rg8AAAAX TLSv1.2 ECDHE-RSA-AES128-SHA256 824 864 56% 1145367 2305 142359 162 0 0 192.168.32.7 CH - [2015-05-22 10:02:39.828774] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7239 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiYH6wxQzZrjBP4esoAAABF TLSv1.2 ECDHE-RSA-AES128-SHA256 856 8621 22% 1153639 1775 148245 139 0 0 192.168.32.7 CH - [2015-05-22 10:02:39.825945] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiYH6wxQzZrjBP4eskAAABD TLSv1.2 ECDHE-RSA-AES128-SHA256 824 2144 22% 1189518 3241 184993 180 0 0 192.168.32.7 CH - [2015-05-22 10:02:39.835269] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiYH6wxQzZrjBP3RhAAAAAa TLSv1.2 ECDHE-RSA-AES128-SHA256 856 4660 23% 1222038 2293 217922 161 0 0 192.168.32.7 CH - [2015-05-22 10:02:41.107748] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2afabf1f.522ace44e4529" ViiYIawxQzZrjBP3RhEAAAAe TLSv1.2 ECDHE-RSA-AES128-SHA256 582 245 -% 881960 1980 879189 193 0 0 192.168.186.76 CH - [2015-05-22 10:04:26.726183] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_28&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiYiqwxQzZrjBP3RhsAAAAj TLSv1.2 ECDHE-RSA-AES256-SHA384 8034 4545 -% 1719462 436443 263595 210 86 0 192.168.186.76 CH - [2015-05-22 10:04:28.463711] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_28&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiYjKwxQzZrjBP3Rh4AAAAm TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 982934 7974 961157 11559 3 0 192.168.186.76 CH - [2015-05-22 10:04:30.546727] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8391 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiYjqwxQzZrjBP3Rh8AAAAq TLSv1.2 ECDHE-RSA-AES256-SHA384 662 8991 -% 856899 4717 847320 3088 3 0 192.168.186.76 CH - [2015-05-22 10:04:30.549093] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiYjqwxQzZrjBP3RiAAAAAi TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1204722 5508 188897 4839 3 0 192.168.186.76 CH - [2015-05-22 10:05:08.524452] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiYtKwxQzZrjBP4etkAAABV TLSv1.2 ECDHE-RSA-AES256-SHA384 1484 566 -% 1243145 9436 231809 196 3 0 192.168.186.76 CH - [2015-05-22 10:05:09.781251] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7291 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiYtawxQzZrjBP4etoAAABW TLSv1.2 ECDHE-RSA-AES256-SHA384 726 7802 -% 1087521 4480 78183 2763 3 0 192.168.186.76 CH - [2015-05-22 10:10:14.849482] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8426 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiZ5qwxQzZrjBP3RlwAAAAi TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 13099 -% 1082397 5510 70400 4339 3 0 192.168.186.76 CH - [2015-05-22 10:10:31.881431] "GET /EMail/newMessage.aspx?action=reply&mailId=3891_37&folderId=947_65&showPics=false HTTP/1.1" 200 23703 "https://www.example.com/EMail/message.aspx?&mailId=3891_37&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiZ96wxQzZrjBP3Rl4AAAAt TLSv1.2 ECDHE-RSA-AES256-SHA384 1292 24703 -% 1415141 6667 330867 48239 6 3 192.168.186.76 CH - [2015-05-22 10:10:33.392725] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_37&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiZ@awxQzZrjBP3RmAAAAAs TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 1119502 4663 107481 5636 3 0 192.168.192.35 CH - [2015-05-22 10:11:44.424075] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViiaQKwxQzZrjBP3RmgAAAA4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1338 4447 -% 957297 3464 953048 186 0 0 192.168.192.35 CH - [2015-05-22 10:11:45.399000] "GET /EMail/main.aspx HTTP/1.1" 200 3383 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViiaQawxQzZrjBP3RmoAAAAw TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 3799 -% 839981 2051 835515 1820 0 0 192.168.192.35 CH - [2015-05-22 10:11:46.332295] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViiaQqwxQzZrjBP3RmsAAAA2 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 4128 -% 808600 1868 799468 6783 0 0 192.168.192.35 CH - [2015-05-22 10:11:46.376052] "GET /EMail/overview.aspx HTTP/1.1" 200 5288 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViiaQqwxQzZrjBP3RmwAAAAF TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1134 9736 -% 1369869 3032 362485 3654 0 0 192.168.192.35 CH - [2015-05-22 10:11:46.394239] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViiaQqwxQzZrjBP4eu4AAABs TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1160 13205 -% 1845509 5793 830708 4725 0 0 192.168.192.35 CH - [2015-05-22 10:11:49.581692] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViiaRawxQzZrjBP4eu8AAABq TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 511 409 -% 502362 2631 498788 183 0 0 192.168.192.35 CH - [2015-05-22 10:11:50.144357] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViiaRqwxQzZrjBP4evAAAABr TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 458 318 -% 862830 3405 858551 183 0 0 192.168.192.35 CH - [2015-05-22 10:11:51.050718] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViiaR6wxQzZrjBP4evEAAABt TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 440 7758 -% 938303 2281 932185 3234 0 0 192.168.192.35 CH - [2015-05-22 10:15:26.869132] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViibHqwxQzZrjBP3Ro0AAAAc TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1123 11799 -% 1022741 2655 15825 3665 0 0 192.168.192.35 CH - [2015-05-22 10:15:34.331481] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViibJqwxQzZrjBP4ev8AAAB6 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1338 4447 -% 1078877 3133 74961 206 0 0 192.168.192.35 CH - [2015-05-22 10:15:35.437463] "GET /EMail/main.aspx HTTP/1.1" 200 3383 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViibJ6wxQzZrjBP4ewAAAAB8 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 3799 -% 830960 1980 826541 1778 0 0 192.168.192.35 CH - [2015-05-22 10:15:36.344784] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViibKKwxQzZrjBP4ewEAAAB7 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 4128 -% 850042 2977 838115 8245 0 0 192.168.192.35 CH - [2015-05-22 10:15:36.386813] "GET /EMail/overview.aspx HTTP/1.1" 200 5288 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViibKKwxQzZrjBP3Ro8AAAAh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1134 9736 -% 1233153 2794 227756 1917 0 0 192.168.192.35 CH - [2015-05-22 10:15:36.391436] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViibKKwxQzZrjBP4ewIAAAB9 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1160 13205 -% 1949113 3531 936627 4616 0 0 192.168.192.35 CH - [2015-05-22 10:15:49.243226] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViibNawxQzZrjBP4ewUAAABC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1153 4435 -% 1009923 2542 6629 174 0 0 192.168.192.35 CH - [2015-05-22 10:15:50.317589] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViibNqwxQzZrjBP4ewYAAABB TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 458 318 -% 915988 3337 911914 126 0 0 192.168.192.35 CH - [2015-05-22 10:15:51.247566] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViibN6wxQzZrjBP4ewcAAABE TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 440 7758 -% 959549 2189 954492 2162 0 0 192.168.186.76 CH - [2015-05-22 10:16:19.674731] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_37&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViibU6wxQzZrjBP3RpcAAAAj TLSv1.2 ECDHE-RSA-AES256-SHA384 9874 4545 -% 1716545 530342 162696 396 86 0 192.168.186.76 CH - [2015-05-22 10:16:21.399719] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_37&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViibVawxQzZrjBP3RpgAAAAm TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 966189 7930 946788 10125 3 0 192.168.186.76 CH - [2015-05-22 10:16:29.801047] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViibXawxQzZrjBP3RpoAAAAi TLSv1.2 ECDHE-RSA-AES256-SHA384 1212 9827 -% 1732145 6471 715612 4322 3 0 192.168.186.76 CH - [2015-05-22 10:23:06.409233] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_34&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" Viic6qwxQzZrjBP3RswAAAAb TLSv1.2 ECDHE-RSA-AES256-SHA384 7932 4545 -% 1617938 373887 222064 278 86 0 192.168.186.76 CH - [2015-05-22 10:23:08.042241] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_34&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" Viic7KwxQzZrjBP3Rs0AAAAY TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 993621 7388 975028 9511 3 0 192.168.186.76 CH - [2015-05-22 10:23:09.629312] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" Viic7awxQzZrjBP3Rs8AAAAc TLSv1.2 ECDHE-RSA-AES256-SHA384 1261 13742 -% 1164562 4310 149413 4685 3 0 192.168.186.76 CH - [2015-05-22 10:23:09.626804] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9566 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" Viic7awxQzZrjBP3Rs4AAAAd TLSv1.2 ECDHE-RSA-AES256-SHA384 662 10159 -% 1217283 4393 206158 4331 3 0 192.168.186.76 CH - [2015-05-22 10:23:13.867946] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" Viic8awxQzZrjBP3RtEAAAAf TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1207804 11108 194738 149 3 0 192.168.186.76 CH - [2015-05-22 10:23:15.087971] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8465 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" Viic86wxQzZrjBP3RtIAAAAl TLSv1.2 ECDHE-RSA-AES256-SHA384 726 9071 -% 1182431 6947 170804 2837 3 0 192.168.186.76 CH - [2015-05-22 10:23:20.433115] "GET /EMail/message.aspx?&mailId=3892_36&folderId=947_65&mailPos=0 HTTP/1.1" 200 16199 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" Viic@KwxQzZrjBP3RtMAAAAg TLSv1.2 ECDHE-RSA-AES256-SHA384 726 16884 -% 2409520 5070 369027 33185 3 0 192.168.186.76 CH - [2015-05-22 10:23:24.923600] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3892_36&folderId=947_65&attachmentId=3&token=259270005486607744E17 HTTP/1.1" 200 1617261 "https://www.example.com/EMail/message.aspx?&mailId=3892_36&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" Viic-KwxQzZrjBP3RtUAAAAn TLSv1.2 ECDHE-RSA-AES256-SHA384 806 1688843 -% 1596158 7007 34051 381 3 0 192.168.186.76 CH - [2015-05-22 10:23:59.265679] "GET /EMail/newMessage.aspx?action=reply&mailId=3892_36&folderId=947_65&showPics=false HTTP/1.1" 200 23455 "https://www.example.com/EMail/message.aspx?&mailId=3892_36&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViidH6wxQzZrjBP3RtsAAAAp TLSv1.2 ECDHE-RSA-AES256-SHA384 1292 24447 -% 1172753 7845 106248 44307 6 3 192.168.186.76 CH - [2015-05-22 10:24:00.534903] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_36&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViidIKwxQzZrjBP3RtwAAAAr TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 1000729 6417 987419 5317 3 0 192.168.186.76 CH - [2015-05-22 10:25:32.482634] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViidfKwxQzZrjBP3RusAAAA@ TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1382183 5059 367666 3693 3 0 192.168.186.76 CH - [2015-05-22 10:25:36.609482] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViidgKwxQzZrjBP3Ru0AAAA8 TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1155585 10440 143243 179 3 0 192.168.186.76 CH - [2015-05-22 10:25:37.783095] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7290 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViidgawxQzZrjBP3Ru4AAAA9 TLSv1.2 ECDHE-RSA-AES256-SHA384 726 7802 -% 1138405 4396 129879 2272 3 0 192.168.186.76 CH - [2015-05-22 10:35:42.011007] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8393 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" Viif3qwxQzZrjBP4e18AAABg TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 13067 -% 1374220 9074 358384 4301 3 0 192.168.186.76 CH - [2015-05-22 10:35:42.002312] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" Viif3qwxQzZrjBP3R0EAAAAS TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1577999 8194 559457 4524 3 0 192.168.186.76 CH - [2015-05-22 10:35:45.182636] "GET /EMail/message.aspx?&mailId=3892_39&folderId=947_65&mailPos=0 HTTP/1.1" 200 15709 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" Viif4awxQzZrjBP3R0MAAAAV TLSv1.2 ECDHE-RSA-AES256-SHA384 710 16388 -% 2162690 7062 124560 28775 3 0 192.168.186.76 CH - [2015-05-22 10:35:53.208599] "GET /EMail/newMessage.aspx?action=reply&mailId=3892_39&folderId=947_65&showPics=false HTTP/1.1" 200 22984 "https://www.example.com/EMail/message.aspx?&mailId=3892_39&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" Viif6awxQzZrjBP4e2AAAABh TLSv1.2 ECDHE-RSA-AES256-SHA384 1292 23983 -% 1169355 8423 101895 46472 6 3 192.168.186.76 CH - [2015-05-22 10:35:54.437083] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_39&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" Viif6qwxQzZrjBP4e2EAAABi TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 1140586 6988 127127 5028 3 0 192.168.192.35 CH - [2015-05-22 10:38:27.597945] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" Viigg6wxQzZrjBP3R1sAAAAs TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1338 4447 -% 1061354 6101 54098 194 0 0 192.168.192.35 CH - [2015-05-22 10:38:28.686965] "GET /EMail/main.aspx HTTP/1.1" 200 3383 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViighKwxQzZrjBP3R10AAAAx TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 3799 -% 893603 2007 889078 1883 0 0 192.168.192.35 CH - [2015-05-22 10:38:29.675284] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViighawxQzZrjBP3R14AAAAu TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 4128 -% 926112 1871 914054 9688 0 0 192.168.192.35 CH - [2015-05-22 10:38:29.720648] "GET /EMail/overview.aspx HTTP/1.1" 200 5288 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViighawxQzZrjBP3R18AAAA3 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1134 9736 -% 1213589 2163 209276 1841 0 0 192.168.192.35 CH - [2015-05-22 10:38:29.730505] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViighawxQzZrjBP3R2AAAAAy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1160 13205 -% 1325215 2286 314291 4219 0 0 192.168.192.35 CH - [2015-05-22 10:38:32.878661] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViigiKwxQzZrjBP3R2EAAAAz TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 511 409 -% 918999 3127 915100 178 0 0 192.168.192.35 CH - [2015-05-22 10:38:33.878217] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViigiawxQzZrjBP3R2IAAAA0 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 458 318 -% 913598 2531 910435 165 0 0 192.168.192.35 CH - [2015-05-22 10:38:34.805983] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViigiqwxQzZrjBP3R2MAAAA1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 440 7758 -% 1000128 1969 994286 3240 0 0 192.168.192.35 CH - [2015-05-22 10:41:08.961656] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViihJKwxQzZrjBP3R38AAAAT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1123 11799 -% 876328 3130 870023 2588 0 0 192.168.192.35 CH - [2015-05-22 10:41:16.362015] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViihLKwxQzZrjBP3R4EAAAAZ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1338 4447 -% 1030035 5394 23662 182 0 0 192.168.192.35 CH - [2015-05-22 10:41:17.407278] "GET /EMail/main.aspx HTTP/1.1" 200 3383 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViihLawxQzZrjBP3R4IAAAAV TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 3799 -% 921438 2839 916850 1124 0 0 192.168.192.35 CH - [2015-05-22 10:41:18.395547] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViihLqwxQzZrjBP3R4MAAAAW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 4128 -% 927388 2897 912815 10956 0 0 192.168.192.35 CH - [2015-05-22 10:41:18.439772] "GET /EMail/overview.aspx HTTP/1.1" 200 5289 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViihLqwxQzZrjBP3R4QAAAAa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1134 9737 -% 1499504 2864 494316 1686 0 0 192.168.192.35 CH - [2015-05-22 10:41:18.447750] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViihLqwxQzZrjBP3R4UAAAAX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1160 13205 -% 1833951 3842 823287 2801 0 0 192.168.192.35 CH - [2015-05-22 10:41:22.373575] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViihMqwxQzZrjBP3R4cAAAAb TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 511 409 -% 921088 3712 916489 182 0 0 192.168.192.35 CH - [2015-05-22 10:41:23.367082] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViihM6wxQzZrjBP3R4gAAAAY TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 458 318 -% 984001 3346 979891 140 0 0 192.168.192.35 CH - [2015-05-22 10:41:24.365628] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViihNKwxQzZrjBP3R4kAAAAc TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 440 7758 -% 911810 3269 905608 2250 0 0 192.168.192.35 CH - [2015-05-22 10:46:06.489990] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViiiTqwxQzZrjBP3R7cAAAAO TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1048 7916 -% 844656 3504 838137 2229 0 0 192.168.192.35 CH - [2015-05-22 10:46:14.303433] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViiiVqwxQzZrjBP3R7kAAAAQ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1263 564 -% 1090167 3016 86294 234 0 0 192.168.192.35 CH - [2015-05-22 10:46:15.424622] "GET /EMail/main.aspx HTTP/1.1" 200 3383 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViiiV6wxQzZrjBP3R7oAAAAP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 3799 -% 903454 3124 897216 2237 0 0 192.168.192.35 CH - [2015-05-22 10:46:16.394912] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViiiWKwxQzZrjBP3R7sAAAAN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 4128 -% 1146034 1841 136192 7388 0 0 192.168.192.35 CH - [2015-05-22 10:46:16.423343] "GET /EMail/overview.aspx HTTP/1.1" 200 5288 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViiiWKwxQzZrjBP4e4AAAABF TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1059 5853 -% 1257355 4054 249886 2320 0 0 192.168.192.35 CH - [2015-05-22 10:46:16.426186] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViiiWKwxQzZrjBP4e4EAAABE TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1085 9322 -% 1576213 3680 565474 3051 0 0 192.168.192.35 CH - [2015-05-22 10:46:20.112674] "GET /EMail/inbox.aspx HTTP/1.1" 200 7277 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViiiXKwxQzZrjBP4e4IAAABD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 493 7699 -% 1035379 1930 29256 3569 0 0 192.168.192.35 CH - [2015-05-22 10:46:21.199439] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViiiXawxQzZrjBP4e4MAAABG TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 468 539 -% 1074530 3268 70191 167 0 0 192.168.192.35 CH - [2015-05-22 10:46:21.202710] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViiiXawxQzZrjBP3R7wAAAAU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 471 527 -% 1095074 2719 91199 139 0 0 192.168.192.35 CH - [2015-05-22 10:46:25.572245] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViiiYawxQzZrjBP4e4QAAABH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 511 409 -% 995273 3563 990514 155 0 0 192.168.192.35 CH - [2015-05-22 10:46:26.677999] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViiiYqwxQzZrjBP4e4UAAABJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 458 318 -% 999407 3415 995136 155 0 0 192.168.192.35 CH - [2015-05-22 10:46:27.728758] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViiiY6wxQzZrjBP4e4YAAABI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 440 7758 -% 1115767 1901 109916 3398 0 0 192.168.192.35 CH - [2015-05-22 10:46:33.276772] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViiiaawxQzZrjBP4e4cAAABL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 481 7773 -% 824099 3226 816909 3312 0 0 192.168.186.76 CH - [2015-05-22 10:47:01.701119] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8419 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiihawxQzZrjBP3R8UAAAAb TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 13099 -% 1369355 4851 360069 2707 3 0 192.168.186.76 CH - [2015-05-22 10:47:01.704365] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiihawxQzZrjBP3R8YAAAAe TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1716183 7631 700784 2682 3 0 192.168.186.76 CH - [2015-05-22 10:47:04.300770] "GET /EMail/message.aspx?&mailId=3892_41&folderId=947_65&mailPos=0 HTTP/1.1" 200 15888 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiiiKwxQzZrjBP3R8cAAAAY TLSv1.2 ECDHE-RSA-AES256-SHA384 710 16564 -% 2680979 8777 637263 32656 3 0 192.168.186.76 CH - [2015-05-22 10:48:03.108344] "GET /EMail/newMessage.aspx?action=reply&mailId=3892_41&folderId=947_65&showPics=false HTTP/1.1" 200 23339 "https://www.example.com/EMail/message.aspx?&mailId=3892_41&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" Viiiw6wxQzZrjBP4e40AAABQ TLSv1.2 ECDHE-RSA-AES256-SHA384 1292 24335 -% 1647357 8919 578607 46597 6 3 192.168.186.76 CH - [2015-05-22 10:48:04.816000] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_41&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViiixKwxQzZrjBP4e44AAABR TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 717019 7266 700681 7529 3 0 192.168.186.76 CH - [2015-05-22 10:48:56.514726] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_41&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" Viii@KwxQzZrjBP3R9cAAAAv TLSv1.2 ECDHE-RSA-AES256-SHA384 8386 4545 -% 1322922 383174 0 183 86 0 192.168.186.76 CH - [2015-05-22 10:48:57.851882] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_41&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" Viii@awxQzZrjBP3R9gAAAAs TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 724636 5488 707338 10423 3 0 192.168.186.76 CH - [2015-05-22 10:49:00.298981] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8418 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" Viii-KwxQzZrjBP3R9kAAAAx TLSv1.2 ECDHE-RSA-AES256-SHA384 662 9023 -% 1326368 7334 314693 2587 3 0 192.168.186.76 CH - [2015-05-22 10:49:00.300387] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" Viii-KwxQzZrjBP3R9oAAAAt TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1641015 8623 624451 2800 3 0 192.168.186.76 CH - [2015-05-22 10:49:03.580347] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" Viii-6wxQzZrjBP3R9sAAAAu TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1230980 13520 195788 152 3 0 192.168.186.76 CH - [2015-05-22 10:49:04.811455] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7290 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" ViijAKwxQzZrjBP3R90AAAAu TLSv1.2 ECDHE-RSA-AES256-SHA384 725 7802 -% 1094518 7421 82383 2923 3 0 192.168.146.78 CH - [2015-05-22 10:50:13.346648] "GET /EMail/scripts/tinymce/skins/lightgray/content.min.css HTTP/1.1" 304 - "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; MS-RTC LM 8; InfoPath.3; ms-office; MSOffice 15)" www.example.com 192.168.34.16 443 proxy-server - + "d13852f7.522ad9550e558" ViijRawxQzZrjBP3R@cAAAA@ TLSv1.2 ECDHE-RSA-AES128-SHA256 863 4270 -% 999535 943 997618 199 0 0 192.168.146.78 CH - [2015-05-22 10:50:14.369586] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5089 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; MS-RTC LM 8; InfoPath.3; ms-office; MSOffice 15)" www.example.com 192.168.34.16 443 proxy-server - + "d13852f7.522ad9550e558" ViijRqwxQzZrjBP3R@gAAAA5 TLSv1.2 ECDHE-RSA-AES128-SHA256 502 8194 -% 983753 3394 0 0 0 0 192.168.192.35 CH - [2015-05-22 11:08:09.203826] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViineawxQzZrjBP4e9UAAABZ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1338 4447 -% 1032554 3417 28137 265 0 0 192.168.192.35 CH - [2015-05-22 11:08:10.263122] "GET /EMail/main.aspx HTTP/1.1" 200 3383 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViineqwxQzZrjBP4e9YAAABc TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 3799 -% 831663 2900 826218 1800 0 0 192.168.192.35 CH - [2015-05-22 11:08:11.208059] "GET /EMail/overview.aspx HTTP/1.1" 200 5288 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" Viine6wxQzZrjBP3SIgAAAAn TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1134 9736 -% 1096030 2700 89589 2630 0 0 192.168.192.35 CH - [2015-05-22 11:08:11.279763] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" Viine6wxQzZrjBP4e9cAAABd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 4128 -% 1077482 3255 67499 6078 0 0 192.168.192.35 CH - [2015-05-22 11:08:11.217566] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" Viine6wxQzZrjBP3SIkAAAAk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1160 13205 -% 1493849 3278 479847 6739 0 0 192.168.192.35 CH - [2015-05-22 11:08:14.165812] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViinfqwxQzZrjBP3SIoAAAAo TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 511 409 -% 1204203 2472 200971 184 0 0 192.168.192.35 CH - [2015-05-22 11:08:15.428025] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" Viinf6wxQzZrjBP3SIsAAAAj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 458 318 -% 922955 2145 920054 171 0 0 192.168.192.35 CH - [2015-05-22 11:08:16.368951] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViingKwxQzZrjBP3SIwAAAAm TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 440 7758 -% 958215 2551 952932 2192 0 0 192.168.192.35 CH - [2015-05-22 11:11:22.795908] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViioOqwxQzZrjBP3SKgAAAAD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1123 11799 -% 1074138 3957 67130 2301 0 0 192.168.192.35 CH - [2015-05-22 11:11:30.845780] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViioQqwxQzZrjBP3SKoAAAAH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1338 4447 -% 828058 3666 823692 185 0 0 192.168.192.35 CH - [2015-05-22 11:11:31.709215] "GET /EMail/main.aspx HTTP/1.1" 200 3383 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViioQ6wxQzZrjBP3SKsAAAAJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 3799 -% 659968 1870 655784 1762 0 0 192.168.192.35 CH - [2015-05-22 11:11:32.462369] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViioRKwxQzZrjBP3SKwAAAAI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 4128 -% 852913 4389 833708 13863 0 0 192.168.192.35 CH - [2015-05-22 11:11:32.555729] "GET /EMail/overview.aspx HTTP/1.1" 200 5288 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViioRKwxQzZrjBP3SK4AAAAL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1134 9736 -% 1162783 2922 157503 1701 0 0 192.168.192.35 CH - [2015-05-22 11:11:32.511853] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViioRKwxQzZrjBP3SK0AAAAK TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1160 13205 -% 2069757 2898 60065 2831 0 0 192.168.192.35 CH - [2015-05-22 11:11:40.141934] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViioTKwxQzZrjBP3SLEAAAAQ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1153 4435 -% 1380229 3374 375617 372 0 0 192.168.192.35 CH - [2015-05-22 11:11:41.583024] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViioTawxQzZrjBP3SLIAAAAP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 458 318 -% 573487 2151 570516 197 0 0 192.168.192.35 CH - [2015-05-22 11:11:42.170741] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViioTqwxQzZrjBP3SLMAAAAN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 440 7758 -% 1065232 2796 58138 3591 0 0 192.168.116.62 CH - [2015-05-22 11:47:23.477084] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3918 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "5d979c27.522ae61c4885c" Viiwq6wxQzZrjBP4fGUAAABx TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 572 8400 -% 993388 1211 991311 158 0 0 192.168.213.23 CH - [2015-05-22 11:49:32.027673] "GET /EMail/images/active.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1c6846c3.522ae68c2a70c" ViixLKwxQzZrjBP3SgkAAAAz TLSv1 ECDHE-RSA-AES256-SHA 984 4049 -% 929738 2047 926964 150 0 0 192.168.213.23 CH - [2015-05-22 11:49:33.728704] "GET /EMail/main.aspx HTTP/1.1" 200 3415 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1c6846c3.522ae68c2a70c" ViixLawxQzZrjBP3SgoAAAA0 TLSv1 ECDHE-RSA-AES256-SHA 872 7670 -% 940092 3685 933665 1922 0 0 192.168.213.23 CH - [2015-05-22 11:49:34.927957] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1c6846c3.522ae68c2a70c" ViixLqwxQzZrjBP3SgsAAAA1 TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 2167231 5065 153407 4449 0 0 192.168.213.23 CH - [2015-05-22 11:49:36.277918] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1c6846c3.522ae68c2a70c" ViixMKwxQzZrjBP3SgwAAAAy TLSv1 ECDHE-RSA-AES256-SHA 952 4049 -% 898029 2045 895290 186 0 0 192.168.213.23 CH - [2015-05-22 11:49:37.328605] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1c6846c3.522ae68c2a70c" ViixMawxQzZrjBP4fG8AAAB6 TLSv1 ECDHE-RSA-AES256-SHA 984 4049 -% 854256 2025 851510 217 0 0 192.168.213.23 CH - [2015-05-22 11:49:42.779992] "GET /EMail/images/Highost.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1c6846c3.522ae68c2a70c" ViixNqwxQzZrjBP3Sg4AAAA7 TLSv1 ECDHE-RSA-AES256-SHA 952 4049 -% 937081 2943 933036 261 0 0 192.168.213.23 CH - [2015-05-22 11:49:44.630739] "GET /EMail/message.aspx?&mailId=3892_46&folderId=1001_9&mailPos=0 HTTP/1.1" 200 11357 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1c6846c3.522ae68c2a70c" ViixOKwxQzZrjBP3Sg8AAAA5 TLSv1 ECDHE-RSA-AES256-SHA 888 15696 -% 1194811 3222 171450 19276 0 0 192.168.213.23 CH - [2015-05-22 11:49:48.132559] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3892_46&folderId=1001_9&attachmentId=2&token=42887998872665466E17 HTTP/1.1" 200 56284 "https://www.example.com/EMail/message.aspx?&mailId=3892_46&folderId=1001_9&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1c6846c3.522ae68c2a70c" ViixPKwxQzZrjBP3ShEAAAA6 TLSv1 ECDHE-RSA-AES256-SHA 984 61776 -% 999497 7313 981768 169 0 0 192.168.213.23 CH - [2015-05-22 11:50:28.681118] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9882 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1c6846c3.522ae68c2a70c" ViixZKwxQzZrjBP3ShgAAAAI TLSv1 ECDHE-RSA-AES256-SHA 840 14187 -% 1270895 2224 263110 4629 0 0 192.168.213.23 CH - [2015-05-22 11:50:30.183463] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1c6846c3.522ae68c2a70c" ViixZqwxQzZrjBP4fHQAAABC TLSv1 ECDHE-RSA-AES256-SHA 872 5718 -% 959158 1970 956360 200 0 0 192.168.213.23 CH - [2015-05-22 11:50:34.731702] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3891_38&folderId=1001_9&attachmentId=2&token=145106954894296512E17 HTTP/1.1" 200 56372 "https://www.example.com/EMail/message.aspx?&mailId=3891_38&folderId=1001_9&mailPos=1" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1c6846c3.522ae68c2a70c" ViixaqwxQzZrjBP3ShoAAAAK TLSv1 ECDHE-RSA-AES256-SHA 984 61967 -% 1161307 5332 133382 190 0 0 192.168.192.35 CH - [2015-05-22 11:51:56.210789] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViixvKwxQzZrjBP4fHgAAABG TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 849 11799 -% 956599 3792 949486 2596 0 0 192.168.192.35 CH - [2015-05-22 11:57:57.398512] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViizJawxQzZrjBP3SlwAAAAN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1123 11799 -% 834668 2391 827887 3760 0 0 192.168.192.35 CH - [2015-05-22 11:58:08.427592] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViizMKwxQzZrjBP3Sl4AAAAU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1338 4447 -% 1101884 4631 96270 210 0 0 192.168.192.35 CH - [2015-05-22 11:58:09.556594] "GET /EMail/main.aspx HTTP/1.1" 200 3383 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViizMawxQzZrjBP3Sl8AAAAT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 3799 -% 922514 3117 916995 1771 0 0 192.168.192.35 CH - [2015-05-22 11:58:10.559500] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViizMqwxQzZrjBP3SmAAAAAS TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 4128 -% 956566 3029 946149 6464 0 0 192.168.192.35 CH - [2015-05-22 11:58:10.605345] "GET /EMail/overview.aspx HTTP/1.1" 200 5289 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViizMqwxQzZrjBP3SmEAAAAV TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1134 9737 -% 1137540 3652 131520 1715 0 0 192.168.192.35 CH - [2015-05-22 11:58:10.609938] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViizMqwxQzZrjBP3SmIAAAAZ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1160 13205 -% 1825525 2950 815882 2749 0 0 192.168.192.35 CH - [2015-05-22 11:58:14.154550] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViizNqwxQzZrjBP3SmQAAAAa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 511 409 -% 831823 4423 826582 181 0 0 192.168.192.35 CH - [2015-05-22 11:58:15.043152] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViizN6wxQzZrjBP3SmUAAAAX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 458 318 -% 1152970 4252 147481 174 0 0 192.168.192.35 CH - [2015-05-22 11:58:16.210413] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViizOKwxQzZrjBP3SmYAAAAb TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 440 7758 -% 1020510 2038 15675 2248 0 0 192.168.192.35 CH - [2015-05-22 11:58:47.965952] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViizV6wxQzZrjBP3SmsAAAAh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1123 11799 -% 1001902 3606 993634 3804 0 0 192.168.192.35 CH - [2015-05-22 11:58:55.917441] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViizX6wxQzZrjBP3Sm0AAAAl TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1338 4447 -% 685937 3254 681792 155 0 0 192.168.192.35 CH - [2015-05-22 11:58:56.636864] "GET /EMail/main.aspx HTTP/1.1" 200 3383 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViizYKwxQzZrjBP3Sm4AAAAg TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 3799 -% 1107906 3328 102708 1140 0 0 192.168.192.35 CH - [2015-05-22 11:58:57.814274] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViizYawxQzZrjBP3SnAAAAAk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 4128 -% 1041302 4060 30368 6170 0 0 192.168.192.35 CH - [2015-05-22 11:58:57.846474] "GET /EMail/overview.aspx HTTP/1.1" 200 5289 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViizYawxQzZrjBP3SnEAAAAo TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1134 9737 -% 1226562 2814 221417 1706 0 0 192.168.192.35 CH - [2015-05-22 11:58:57.865977] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViizYawxQzZrjBP3SnIAAAAj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1160 13205 -% 1653365 3471 643162 2737 0 0 192.168.192.35 CH - [2015-05-22 11:59:05.801305] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViizaawxQzZrjBP3SnQAAAAq TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1153 4435 -% 672184 3180 668197 181 0 0 192.168.192.35 CH - [2015-05-22 11:59:06.559309] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" ViizaqwxQzZrjBP3SnUAAAAi TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1100 4344 -% 913916 3874 909164 167 0 0 192.168.192.35 CH - [2015-05-22 11:59:07.487400] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" Viiza6wxQzZrjBP3SnYAAAAp TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 440 7758 -% 696933 2397 690426 3520 0 0 192.168.192.35 CH - [2015-05-22 12:03:06.609156] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" Vii0WqwxQzZrjBP3Sp0AAAAS TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1048 7916 -% 932096 3776 923941 3638 0 0 192.168.192.35 CH - [2015-05-22 12:03:14.940746] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" Vii0YqwxQzZrjBP3SqAAAAAW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1263 564 -% 891676 3112 887893 138 0 0 192.168.192.35 CH - [2015-05-22 12:03:15.857383] "GET /EMail/main.aspx HTTP/1.1" 200 3383 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" Vii0Y6wxQzZrjBP3SqEAAAAa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 3799 -% 799855 1957 795488 1803 0 0 192.168.192.35 CH - [2015-05-22 12:03:16.724653] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" Vii0ZKwxQzZrjBP3SqIAAAAX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 4128 -% 1022931 3036 11201 7998 0 0 192.168.192.35 CH - [2015-05-22 12:03:16.748310] "GET /EMail/overview.aspx HTTP/1.1" 200 5288 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" Vii0ZKwxQzZrjBP3SqMAAAAP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1059 5853 -% 1387081 2749 381915 1838 0 0 192.168.192.35 CH - [2015-05-22 12:03:16.765282] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" Vii0ZKwxQzZrjBP3SqQAAAAb TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1085 9322 -% 2204686 3613 193997 3047 0 0 192.168.192.35 CH - [2015-05-22 12:03:22.571382] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" Vii0aqwxQzZrjBP3SqcAAAAY TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 511 409 -% 1023562 3480 19181 188 0 0 192.168.192.35 CH - [2015-05-22 12:03:23.669039] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" Vii0a6wxQzZrjBP3SqgAAAAd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 458 318 -% 816869 3652 812466 133 0 0 192.168.192.35 CH - [2015-05-22 12:03:24.500447] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" Vii0bKwxQzZrjBP3SqkAAAAh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 440 7758 -% 970462 3092 964532 2216 0 0 192.168.192.35 CH - [2015-05-22 12:39:33.552284] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" Vii85awxQzZrjBP3S-UAAAA4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 849 11799 -% 985811 5217 977595 2270 0 0 192.168.186.76 CH - [2015-05-22 12:57:43.134977] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" VijBJ6wxQzZrjBP3TJ8AAAAn TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 12038 -% 852950 5681 843006 2283 3 0 192.168.186.76 CH - [2015-05-22 12:57:44.043109] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" VijBKKwxQzZrjBP3TKAAAAAg TLSv1.2 ECDHE-RSA-AES256-SHA384 662 7866 -% 1000156 3942 992012 2679 3 0 192.168.186.76 CH - [2015-05-22 12:57:46.226865] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" VijBKqwxQzZrjBP3TKIAAAAm TLSv1.2 ECDHE-RSA-AES256-SHA384 822 469 -% 1117523 5549 109908 233 3 0 192.168.186.76 CH - [2015-05-22 12:57:47.357717] "GET /EMail/main.aspx HTTP/1.1" 200 3391 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" VijBK6wxQzZrjBP3TKMAAAAq TLSv1.2 ECDHE-RSA-AES256-SHA384 678 3898 -% 940974 6749 928429 2627 3 0 192.168.186.76 CH - [2015-05-22 12:57:48.346651] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" VijBLKwxQzZrjBP3TKQAAAAi TLSv1.2 ECDHE-RSA-AES256-SHA384 662 4234 -% 765782 8683 748283 6666 3 0 192.168.186.76 CH - [2015-05-22 12:58:36.264642] "GET /EMail/newMessage.aspx?action=reply&mailId=3892_48&folderId=947_65&showPics=false HTTP/1.1" 200 21123 "https://www.example.com/EMail/message.aspx?&mailId=3892_48&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" VijBXKwxQzZrjBP4fUwAAABn TLSv1.2 ECDHE-RSA-AES256-SHA384 1341 26026 -% 1259380 7312 199024 49067 6 3 192.168.186.76 CH - [2015-05-22 12:58:37.677027] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_48&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" VijBXawxQzZrjBP4fU0AAABo TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 1086297 6297 72960 5164 3 0 192.168.186.76 CH - [2015-05-22 12:59:11.357432] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_48&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" VijBf6wxQzZrjBP4fVIAAABt TLSv1.2 ECDHE-RSA-AES256-SHA384 7244 4545 -% 1430863 278943 139828 196 86 0 192.168.186.76 CH - [2015-05-22 12:59:12.799668] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_48&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" VijBgKwxQzZrjBP4fVMAAABv TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 813913 7631 793795 10533 3 0 192.168.186.76 CH - [2015-05-22 12:59:14.827474] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9507 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" VijBgqwxQzZrjBP4fVUAAABx TLSv1.2 ECDHE-RSA-AES256-SHA384 662 10111 -% 1219395 7592 206858 3090 3 0 192.168.186.76 CH - [2015-05-22 12:59:14.828858] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" VijBgqwxQzZrjBP4fVYAAABu TLSv1.2 ECDHE-RSA-AES256-SHA384 1261 13742 -% 1538072 7075 520425 4929 3 0 192.168.186.76 CH - [2015-05-22 12:59:18.005347] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" VijBhqwxQzZrjBP4fVcAAABy TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1101005 11949 87099 159 3 0 192.168.186.76 CH - [2015-05-22 12:59:19.119460] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8392 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" VijBh6wxQzZrjBP4fVgAAABz TLSv1.2 ECDHE-RSA-AES256-SHA384 726 8991 -% 1171273 4590 162542 2647 3 0 192.168.186.76 CH - [2015-05-22 12:59:21.171149] "GET /EMail/message.aspx?&mailId=3891_39&folderId=947_65&mailPos=0 HTTP/1.1" 200 15692 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" VijBiawxQzZrjBP4fVkAAAB0 TLSv1.2 ECDHE-RSA-AES256-SHA384 726 16372 -% 2292845 8283 246392 35293 3 0 192.168.186.76 CH - [2015-05-22 12:59:48.714093] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_39&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" VijBpKwxQzZrjBP3TLQAAAAF TLSv1.2 ECDHE-RSA-AES256-SHA384 8076 4545 -% 1731661 344697 367245 158 86 0 192.168.186.76 CH - [2015-05-22 12:59:50.459032] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_39&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" VijBpqwxQzZrjBP3TLUAAAA7 TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 892859 11226 873169 6769 3 0 192.168.186.76 CH - [2015-05-22 12:59:52.570810] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8392 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" VijBqKwxQzZrjBP3TLYAAAA@ TLSv1.2 ECDHE-RSA-AES256-SHA384 662 8991 -% 1270217 4706 259708 3293 3 0 192.168.186.76 CH - [2015-05-22 12:59:52.572814] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" VijBqKwxQzZrjBP4fVwAAAB@ TLSv1.2 ECDHE-RSA-AES256-SHA384 1261 13742 -% 1581885 4406 565218 4619 3 0 192.168.186.76 CH - [2015-05-22 12:59:55.813206] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" VijBq6wxQzZrjBP4fV0AAAB4 TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1514878 11525 500882 217 3 0 192.168.186.76 CH - [2015-05-22 12:59:57.339361] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7290 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b49f5038.522aa9d333675" VijBrawxQzZrjBP4fV4AAAB5 TLSv1.2 ECDHE-RSA-AES256-SHA384 726 7802 -% 1097765 7666 82625 4970 3 0 192.168.192.35 CH - [2015-05-22 13:03:55.156371] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" VijCm6wxQzZrjBP4fWsAAABG TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1338 4447 -% 1037664 3600 33143 175 0 0 192.168.192.35 CH - [2015-05-22 13:03:56.222471] "GET /EMail/main.aspx HTTP/1.1" 200 3383 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" VijCnKwxQzZrjBP4fWwAAABH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 3799 -% 913554 1935 909172 1847 0 0 192.168.192.35 CH - [2015-05-22 13:03:57.228856] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" VijCnawxQzZrjBP4fW0AAABJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 4128 -% 777156 1991 768215 6383 0 0 192.168.192.35 CH - [2015-05-22 13:03:57.289531] "GET /EMail/overview.aspx HTTP/1.1" 200 5289 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" VijCnawxQzZrjBP3TN0AAAAk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1134 9737 -% 927011 2058 921467 2865 0 0 192.168.192.35 CH - [2015-05-22 13:03:57.303928] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" VijCnawxQzZrjBP4fW4AAABL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1160 13205 -% 1866617 3839 855203 3255 0 0 192.168.192.35 CH - [2015-05-22 13:04:00.668095] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" VijCoKwxQzZrjBP4fW8AAABK TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 511 409 -% 914744 2145 911639 181 0 0 192.168.192.35 CH - [2015-05-22 13:04:01.670226] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" VijCoawxQzZrjBP4fXEAAABM TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 458 318 -% 912657 2937 908934 163 0 0 192.168.192.35 CH - [2015-05-22 13:04:02.611913] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" VijCoqwxQzZrjBP4fXIAAABP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 440 7758 -% 1171929 2452 165212 3405 0 0 192.168.192.35 CH - [2015-05-22 13:24:06.636068] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "e22d6176.522ac5c0350d9" VijHVqwxQzZrjBP3TZcAAAAk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 849 11799 -% 974238 2372 966390 4641 0 0 192.168.192.35 CH - [2015-05-22 13:41:13.301380] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijLWawxQzZrjBP4ffAAAABR TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1132 4620 56% 1131082 2735 127504 155 0 0 192.168.192.35 CH - [2015-05-22 13:41:13.309306] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijLWawxQzZrjBP4ffEAAABS TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1090 5593 -% 1131470 2437 128318 116 0 0 192.168.192.35 CH - [2015-05-22 13:41:13.297598] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijLWawxQzZrjBP3Ti0AAAA6 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1132 5902 22% 1190847 1924 188104 118 0 0 192.168.192.35 CH - [2015-05-22 13:41:13.306750] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijLWawxQzZrjBP3Ti4AAAA- TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1127 8122 23% 1289974 2892 285545 182 0 0 192.168.192.35 CH - [2015-05-22 13:41:13.316002] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7239 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijLWawxQzZrjBP4ffIAAABT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1122 12067 22% 1363956 2878 357340 155 0 0 192.168.192.35 CH - [2015-05-22 13:41:14.704002] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijLWqwxQzZrjBP3Ti8AAAAC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 507 1685 -% 983886 2878 980186 183 0 0 192.168.192.35 CH - [2015-05-22 13:41:14.757687] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/css/NNstyle.css" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijLWqwxQzZrjBP4ffMAAABU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 476 1792 -% 936821 2812 933261 152 0 0 192.168.192.35 CH - [2015-05-22 13:41:25.949975] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijLZawxQzZrjBP4ffUAAABW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1338 4447 -% 1074470 3497 70078 142 0 0 192.168.192.35 CH - [2015-05-22 13:41:27.039072] "GET /EMail/main.aspx HTTP/1.1" 200 3383 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijLZ6wxQzZrjBP4ffYAAABY TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 3799 -% 888822 2892 883408 1798 0 0 192.168.192.35 CH - [2015-05-22 13:41:27.998663] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijLZ6wxQzZrjBP4ffcAAABX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 4128 -% 804874 1895 791777 10596 0 0 192.168.192.35 CH - [2015-05-22 13:41:28.035318] "GET /EMail/overview.aspx HTTP/1.1" 200 5288 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijLaKwxQzZrjBP3TjEAAAAB TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1134 9736 -% 1183793 2040 179427 1714 0 0 192.168.192.35 CH - [2015-05-22 13:41:28.041633] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijLaKwxQzZrjBP3TjIAAAAE TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1160 13205 -% 1763423 2384 754827 4849 0 0 192.168.192.35 CH - [2015-05-22 13:41:29.260345] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijLaawxQzZrjBP4ffgAAABa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 476 1248 -% 887812 3098 883828 175 0 0 192.168.192.35 CH - [2015-05-22 13:41:29.849308] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijLaawxQzZrjBP3TjMAAAAG TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 518 1260 -% 822882 2996 819114 149 0 0 192.168.192.35 CH - [2015-05-22 13:41:34.925924] "GET /EMail/overview.aspx HTTP/1.1" 200 5288 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijLbqwxQzZrjBP4ffkAAABb TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 522 5710 -% 1299010 3134 293270 1933 0 0 192.168.192.35 CH - [2015-05-22 13:41:34.938137] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijLbqwxQzZrjBP3TjYAAAAH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 548 9179 -% 1498548 3738 486368 4382 0 0 192.168.192.35 CH - [2015-05-22 13:47:26.370060] "GET /EMail/overview.aspx HTTP/1.1" 200 5287 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijMzqwxQzZrjBP3TnAAAAAE TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 890 9735 -% 1212677 1862 207994 2276 0 0 192.168.13.65 CH - [2015-05-22 13:57:20.320288] "GET /EMail/main.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4231c8a5.522b0327eeb20" VijPIKwxQzZrjBP4fiQAAABG TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 959 11960 -% 1254356 657 250924 2233 0 0 192.168.13.65 CH - [2015-05-22 13:57:21.660388] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4231c8a5.522b0327eeb20" VijPIawxQzZrjBP4fiUAAABH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 433 2427 14% 875869 2699 871344 200 0 0 192.168.192.35 CH - [2015-05-22 14:00:20.612297] "GET /EMail/overview.aspx HTTP/1.1" 200 5289 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijP1KwxQzZrjBP3TucAAAA6 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 890 9737 -% 1327682 2874 322491 1796 0 0 192.168.24.161 CH - [2015-05-22 14:06:48.027412] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "669f1334.522b05444b651" VijRWKwxQzZrjBP3TyAAAAA7 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1104 5897 22% 997156 5566 989911 157 6 0 192.168.24.161 CH - [2015-05-22 14:06:48.033451] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "669f1334.522b05444b651" VijRWKwxQzZrjBP3TyEAAAA@ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1237 700 56% 1185074 8329 174823 188 6 0 192.168.24.161 CH - [2015-05-22 14:06:49.652518] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "1ebc8099.522b0546e3d26" VijRWawxQzZrjBP3TyIAAAA5 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 635 5751 -% 889582 498 888238 183 0 0 192.168.24.161 CH - [2015-05-22 14:06:50.444045] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - X "669f1334.522b05444b651" VijRWqwxQzZrjBP3TyMAAAA8 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 827 0 -% 993879 8668 983716 131 6 0 192.168.24.161 CH - [2015-05-22 14:06:53.082203] "GET /EMail/overview.aspx HTTP/1.1" 200 5286 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "669f1334.522b05444b651" VijRXawxQzZrjBP3TyQAAAA9 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 767 5708 -% 1569567 9020 557264 1643 6 0 192.168.24.161 CH - [2015-05-22 14:06:54.693816] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "669f1334.522b05444b651" VijRXqwxQzZrjBP3TyYAAAA- TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 794 1248 -% 1034635 5591 27640 131 6 0 192.168.24.161 CH - [2015-05-22 14:06:57.559644] "GET /EMail/inbox.aspx HTTP/1.1" 200 8466 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "669f1334.522b05444b651" VijRYawxQzZrjBP3TycAAAAC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 768 8917 -% 1070978 9030 57810 2623 6 0 192.168.24.161 CH - [2015-05-22 14:06:58.671391] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "669f1334.522b05444b651" VijRYqwxQzZrjBP3TygAAAAA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 786 539 -% 1052630 8632 41897 145 6 0 192.168.24.161 CH - [2015-05-22 14:07:18.615709] "GET /EMail/downloadPDF.aspx HTTP/1.1" 200 4280 "https://www.example.com/EMail/message.aspx?&mailId=3892_54&folderId=2846_92&mailPos=0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "669f1334.522b05444b651" VijRdqwxQzZrjBP3TywAAAAG TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1353 8723 -% 695006 12541 678221 2242 6 0 192.168.24.161 CH - [2015-05-22 14:07:26.005486] "POST /EMail/MailHandler HTTP/1.1" 200 4797198 "https://www.example.com/EMail/message.aspx?&mailId=3892_54&folderId=2846_92&mailPos=0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "669f1334.522b05444b651" VijRfqwxQzZrjBP3Ty8AAAAI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1486 4854106 -% 6807767 8915 194019 202 6 0 192.168.24.161 CH - [2015-05-22 14:08:50.632753] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3892_54&folderId=2846_92&attachmentId=3&token=68250621448699789E17 HTTP/1.1" 200 4792771 "https://www.example.com/EMail/message.aspx?&mailId=3892_54&folderId=2846_92&mailPos=0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "669f1334.522b05444b651" VijR0qwxQzZrjBP3TzwAAAAW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1378 4850351 -% 3698030 11558 50706 178 6 0 192.168.24.161 CH - [2015-05-22 14:10:25.844708] "GET /EMail/scripts/tinymce/tinymce.min.js HTTP/1.1" 200 102035 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_54&folderId=2846_92&showPics=false" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "669f1334.522b05444b651" VijSMawxQzZrjBP3T1AAAAAo TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1373 107785 33% 919689 9315 866695 170 6 0 192.168.24.161 CH - [2015-05-22 14:10:26.933138] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2942 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_54&folderId=2846_92&showPics=false" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "669f1334.522b05444b651" VijSMqwxQzZrjBP3T1IAAAAx TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 838 3335 -% 1020953 8298 835 10347 6 0 192.168.24.161 CH - [2015-05-22 14:10:27.006784] "GET /EMail/scripts/tinymce/plugins/preview/plugin.min.js HTTP/1.1" 200 737 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_54&folderId=2846_92&showPics=false" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "669f1334.522b05444b651" VijSM6wxQzZrjBP3T1QAAAA3 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1313 1343 51% 1109340 5838 101239 169 6 0 192.168.24.161 CH - [2015-05-22 14:10:26.993343] "GET /EMail/scripts/tinymce/themes/modern/theme.min.js HTTP/1.1" 200 2651 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_54&folderId=2846_92&showPics=false" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "669f1334.522b05444b651" VijSMqwxQzZrjBP3T1MAAAAt TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1310 3287 41% 1291572 5196 283440 173 6 0 192.168.24.161 CH - [2015-05-22 14:10:27.548936] "GET /EMail/scripts/tinymce/plugins/fullpage/plugin.min.js HTTP/1.1" 200 2325 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_54&folderId=2846_92&showPics=false" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "669f1334.522b05444b651" VijSM6wxQzZrjBP3T1YAAAAu TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1389 6876 36% 871516 8211 860948 140 6 0 192.168.24.161 CH - [2015-05-22 14:10:27.537419] "GET /EMail/scripts/tinymce/plugins/searchreplace/plugin.min.js HTTP/1.1" 200 2586 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_54&folderId=2846_92&showPics=false" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "669f1334.522b05444b651" VijSM6wxQzZrjBP3T1UAAAAz TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1394 7137 40% 1226073 8866 214841 180 6 0 192.168.24.161 CH - [2015-05-22 14:10:28.143637] "GET /EMail/scripts/tinymce/plugins/link/plugin.min.js HTTP/1.1" 200 1835 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_54&folderId=2846_92&showPics=false" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "669f1334.522b05444b651" VijSNKwxQzZrjBP3T1kAAAA1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 848 2336 41% 1112442 9109 100978 176 6 0 192.168.24.161 CH - [2015-05-22 14:10:27.991383] "GET /EMail/scripts/tinymce/plugins/hr/plugin.min.js HTTP/1.1" 200 191 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_54&folderId=2846_92&showPics=false" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "669f1334.522b05444b651" VijSM6wxQzZrjBP3T1gAAAA4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 846 690 53% 1279378 5357 271073 177 6 0 192.168.24.161 CH - [2015-05-22 14:10:28.311243] "GET /EMail/scripts/tinymce/plugins/textcolor/plugin.min.js HTTP/1.1" 200 1647 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_54&folderId=2846_92&showPics=false" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "669f1334.522b05444b651" VijSNKwxQzZrjBP3T1oAAAAw TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 853 2148 44% 1319942 12012 304863 182 6 0 192.168.24.161 CH - [2015-05-22 14:10:28.793829] "GET /EMail/scripts/tinymce/plugins/table/plugin.min.js HTTP/1.1" 200 9158 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_54&folderId=2846_92&showPics=false" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "669f1334.522b05444b651" VijSNKwxQzZrjBP3T1wAAAA2 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 849 9889 32% 1210184 6365 198145 185 6 0 192.168.24.161 CH - [2015-05-22 14:10:28.448384] "GET /EMail/scripts/tinymce/plugins/image/plugin.min.js HTTP/1.1" 200 2136 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_54&folderId=2846_92&showPics=false" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "669f1334.522b05444b651" VijSNKwxQzZrjBP3T1sAAAAy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 849 2666 42% 1814065 8708 802517 181 6 0 192.168.24.161 CH - [2015-05-22 14:10:30.326416] "GET /EMail/scripts/tinymce/skins/lightgray/skin.min.css HTTP/1.1" 200 6071 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_54&folderId=2846_92&showPics=false" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "669f1334.522b05444b651" VijSNqwxQzZrjBP3T10AAAAF TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 830 6837 17% 899350 8585 885959 151 6 0 192.168.24.161 CH - [2015-05-22 14:10:30.386218] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5889 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_54&folderId=2846_92&showPics=false" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "669f1334.522b05444b651" VijSNqwxQzZrjBP3T18AAAA@ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 808 7541 -% 1077446 5402 0 0 6 0 192.168.24.161 CH - [2015-05-22 14:10:30.378402] "GET /EMail/scripts/tinymce/skins/lightgray/content.min.css HTTP/1.1" 200 588 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_54&folderId=2846_92&showPics=false" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "669f1334.522b05444b651" VijSNqwxQzZrjBP3T14AAAA7 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 833 1081 38% 1089176 8144 78819 120 6 0 192.168.24.161 CH - [2015-05-22 14:10:31.285510] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce.woff HTTP/1.1" 200 7664 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_54&folderId=2846_92&showPics=false" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "669f1334.522b05444b651" VijSN6wxQzZrjBP3T2AAAAA5 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 857 8092 -% 940084 5454 932588 156 6 0 192.168.192.35 CH - [2015-05-22 14:13:51.282399] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijS-6wxQzZrjBP4flUAAAB5 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 916 13205 -% 1426422 2732 416798 2841 0 0 192.168.192.35 CH - [2015-05-22 14:13:54.533892] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7276 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijTAqwxQzZrjBP4flYAAAB3 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 528 7698 -% 1118587 3522 112087 2325 0 0 192.168.192.35 CH - [2015-05-22 14:13:55.699172] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijTA6wxQzZrjBP4flcAAAB6 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 477 539 -% 1024593 1978 21756 135 0 0 192.168.192.35 CH - [2015-05-22 14:13:55.721383] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijTA6wxQzZrjBP4flgAAAB8 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1047 670 -% 1004045 2082 1338 82 0 0 192.168.192.35 CH - [2015-05-22 14:13:57.707141] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijTBawxQzZrjBP4flkAAAB7 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 545 9179 -% 1454101 3805 436686 5598 0 0 192.168.24.161 CH - [2015-05-22 14:16:12.631301] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "669f1334.522b05444b651" VijTjKwxQzZrjBP3T5sAAAA7 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1248 515 -% 881204 6340 873049 153 6 0 192.168.24.161 CH - [2015-05-22 14:16:13.538682] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "669f1334.522b05444b651" VijTjawxQzZrjBP3T50AAAA5 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 767 676 75% 975635 7144 966835 213 6 0 192.168.24.161 CH - [2015-05-22 14:16:14.602071] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "669f1334.522b05444b651" VijTjqwxQzZrjBP3T54AAAA6 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 733 318 -% 700970 6098 692991 168 6 0 192.168.24.161 CH - [2015-05-22 14:16:15.327561] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "669f1334.522b05444b651" VijTj6wxQzZrjBP3T58AAAA9 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 715 7758 -% 934943 7893 923241 2401 6 0 192.168.24.161 CH - [2015-05-22 14:16:16.297182] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "669f1334.522b05444b651" VijTkKwxQzZrjBP3T6AAAAA- TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 831 2421 13% 746264 8598 734093 183 6 0 192.168.24.161 CH - [2015-05-22 14:16:16.410364] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "669f1334.522b05444b651" VijTkKwxQzZrjBP3T6IAAAAA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1396 8117 23% 1007917 7345 0 137 6 0 192.168.24.161 CH - [2015-05-22 14:16:16.387429] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "669f1334.522b05444b651" VijTkKwxQzZrjBP3T6EAAAAC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1391 12013 22% 1154367 7134 141763 161 6 0 192.168.24.161 CH - [2015-05-22 14:16:17.607041] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "669f1334.522b05444b651" VijTkawxQzZrjBP3T6MAAAAB TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 877 206 -% 888514 6540 879760 187 6 0 192.168.192.35 CH - [2015-05-22 14:20:09.979124] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijUeawxQzZrjBP3T8kAAAAs TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 916 13205 -% 1436174 2374 425128 4555 0 0 192.168.192.35 CH - [2015-05-22 14:20:13.582130] "GET /EMail/overview.aspx HTTP/1.1" 200 5288 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijUfawxQzZrjBP3T8oAAAA0 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 522 5710 -% 1045827 2075 40400 2531 0 0 192.168.192.35 CH - [2015-05-22 14:41:18.751326] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijZbqwxQzZrjBP3UIcAAAAu TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 916 13205 -% 1239800 4113 227044 4527 0 0 192.168.192.35 CH - [2015-05-22 14:41:22.356780] "GET /EMail/inbox.aspx HTTP/1.1" 200 9877 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijZcqwxQzZrjBP3UIgAAAAz TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 493 10328 -% 1569865 2873 562316 3884 0 0 192.168.192.35 CH - [2015-05-22 14:41:23.981054] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijZc6wxQzZrjBP3UIoAAAA4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 471 1813 -% 819192 3326 815172 132 0 0 192.168.192.35 CH - [2015-05-22 14:41:25.654019] "GET /EMail/message.aspx?&mailId=3891_43&folderId=540_81&mailPos=0 HTTP/1.1" 200 11323 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijZdawxQzZrjBP3UIwAAAA2 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 534 11775 -% 1202700 4706 174122 22693 0 0 192.168.192.35 CH - [2015-05-22 14:49:58.537344] "GET /EMail/inbox.aspx HTTP/1.1" 200 7277 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijbdqwxQzZrjBP3UN4AAAAK TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 861 11725 -% 1105856 2647 98232 4320 0 0 192.168.192.35 CH - [2015-05-22 14:50:01.263976] "GET /EMail/overview.aspx HTTP/1.1" 200 5288 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijbeawxQzZrjBP3UOAAAAAN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 522 5710 -% 1309301 2915 303996 1740 0 0 192.168.100.52 CH - [2015-05-22 14:50:45.417766] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7366 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "ce659777.522b0f188d326" VijbpawxQzZrjBP3UOsAAAAb TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 825 11972 -% 1487982 1422 482217 3755 0 0 192.168.100.52 CH - [2015-05-22 14:50:46.935543] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "ce659777.522b0f188d326" VijbpqwxQzZrjBP3UOwAAAAc TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 546 2421 13% 981971 2882 977733 154 0 0 192.168.100.52 CH - [2015-05-22 14:50:47.224019] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "ce659777.522b0f188d326" Vijbp6wxQzZrjBP4ftEAAAB8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1181 8264 23% 1510544 2992 505477 138 0 0 192.168.100.52 CH - [2015-05-22 14:50:47.223589] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7239 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "ce659777.522b0f188d326" Vijbp6wxQzZrjBP3UO0AAAAd TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1176 12062 22% 1512118 3075 504610 160 0 0 192.168.100.52 CH - [2015-05-22 14:50:47.232917] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "ce659777.522b0f188d326" Vijbp6wxQzZrjBP3UO8AAAAh TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1198 5706 -% 1764144 1701 761656 191 0 0 192.168.100.52 CH - [2015-05-22 14:50:47.223610] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "ce659777.522b0f188d326" Vijbp6wxQzZrjBP3UO4AAAAY TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1186 4615 56% 1791133 3079 786695 132 0 0 192.168.100.52 CH - [2015-05-22 14:50:49.053174] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/css/NNstyle.css" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "ce659777.522b0f188d326" VijbqawxQzZrjBP3UPAAAAAf TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 510 1792 -% 3841974 2966 837754 170 0 0 192.168.100.52 CH - [2015-05-22 14:50:52.914539] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "ce659777.522b0f188d326" VijbrKwxQzZrjBP3UPIAAAAn TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 533 1567 -% 2989855 2874 986253 175 0 0 192.168.100.52 CH - [2015-05-22 14:50:54.524759] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "ce659777.522b0f188d326" VijbrqwxQzZrjBP3UPMAAAAg TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1396 559 -% 2458960 5639 452508 145 0 0 192.168.100.52 CH - [2015-05-22 14:50:56.999441] "GET /EMail/main.aspx HTTP/1.1" 200 3398 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "ce659777.522b0f188d326" VijbsKwxQzZrjBP3UPQAAAAk TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 651 3814 -% 2402392 4206 396170 1108 0 0 192.168.100.52 CH - [2015-05-22 14:50:59.482693] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "ce659777.522b0f188d326" Vijbs6wxQzZrjBP3UPUAAAAm TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 570 4128 -% 1597868 3096 586467 7534 0 0 192.168.100.52 CH - [2015-05-22 14:50:59.502146] "GET /EMail/overview.aspx HTTP/1.1" 200 5289 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "ce659777.522b0f188d326" Vijbs6wxQzZrjBP3UPYAAAAp TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1139 5849 -% 1898241 1961 892862 2819 0 0 192.168.100.52 CH - [2015-05-22 14:50:59.482694] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "ce659777.522b0f188d326" Vijbs6wxQzZrjBP3UPUAAAAq TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 598 9179 -% 2600206 5120 586107 3439 0 0 192.168.100.52 CH - [2015-05-22 14:51:01.442180] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "ce659777.522b0f188d326" VijbtawxQzZrjBP3UPcAAAAi TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 510 1248 -% 879009 3071 875080 135 0 0 192.168.100.52 CH - [2015-05-22 14:51:02.132050] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "ce659777.522b0f188d326" VijbtqwxQzZrjBP3UPkAAAAv TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 552 1260 -% 899552 3117 895592 170 0 0 192.168.100.52 CH - [2015-05-22 14:51:02.735746] "GET /EMail/inbox.aspx HTTP/1.1" 200 22586 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "ce659777.522b0f188d326" VijbtqwxQzZrjBP3UPoAAAAj TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 573 23125 -% 1370965 2911 268811 10348 0 0 192.168.100.52 CH - [2015-05-22 14:51:04.192960] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "ce659777.522b0f188d326" VijbuKwxQzZrjBP3UPwAAAAs TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 502 539 -% 834409 4462 828753 168 0 0 192.168.100.52 CH - [2015-05-22 14:51:04.194123] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "ce659777.522b0f188d326" VijbuKwxQzZrjBP3UP4AAAAx TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 505 1878 -% 1017403 2935 13781 143 0 0 192.168.100.52 CH - [2015-05-22 14:51:04.192983] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "ce659777.522b0f188d326" VijbuKwxQzZrjBP3UP0AAAA0 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 505 527 -% 1082284 4441 76748 151 0 0 192.168.100.52 CH - [2015-05-22 14:51:04.213694] "GET /EMail/images/msgOpenedReplied.png HTTP/1.1" 200 717 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "ce659777.522b0f188d326" VijbuKwxQzZrjBP3UP8AAAA3 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1079 1267 -% 1106976 2695 103583 112 0 0 192.168.100.52 CH - [2015-05-22 14:51:08.359625] "GET /EMail/message.aspx?&mailId=3882_10&folderId=2718_83&mailPos=0 HTTP/1.1" 200 44915 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "ce659777.522b0f188d326" VijbvKwxQzZrjBP3UQAAAAAt TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 615 45599 -% 1528847 2997 401404 80387 0 0 192.168.192.35 CH - [2015-05-22 14:55:21.428679] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijcuawxQzZrjBP3USsAAAAh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1190 13205 -% 2634445 2344 625426 2645 0 0 192.168.192.35 CH - [2015-05-22 14:55:21.418301] "GET /EMail/overview.aspx HTTP/1.1" 200 5288 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijcuawxQzZrjBP3USoAAAAd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1164 9736 -% 2784505 1901 780348 1756 0 0 192.168.192.35 CH - [2015-05-22 15:16:33.022642] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3892_56&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijhsawxQzZrjBP3UfgAAAAw TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1383 4382 -% 1108667 4282 103559 244 0 0 192.168.192.35 CH - [2015-05-22 15:16:34.164784] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8577 "https://www.example.com/EMail/message.aspx?&mailId=3892_56&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijhsqwxQzZrjBP3UfkAAAA2 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 558 9028 -% 1119071 2369 111852 4196 0 0 192.168.192.35 CH - [2015-05-22 15:16:36.740407] "GET /EMail/message.aspx?&mailId=3891_46&folderId=540_81&mailPos=0 HTTP/1.1" 200 11178 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijhtKwxQzZrjBP3UfoAAAAy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 558 11659 -% 1275574 4984 245544 23634 0 0 192.168.192.35 CH - [2015-05-22 15:16:39.893591] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3891_46&folderId=540_81&attachmentId=2&token=35428456008776045E17 HTTP/1.1" 200 60458 "https://www.example.com/EMail/message.aspx?&mailId=3891_46&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" Vijht6wxQzZrjBP3UfwAAAA@ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 639 62153 -% 1192402 4846 162523 161 0 0 192.168.192.35 CH - [2015-05-22 15:16:57.454989] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3891_46&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijhyawxQzZrjBP3Uf8AAAA5 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1383 4382 -% 1159816 4091 155028 174 0 0 192.168.192.35 CH - [2015-05-22 15:16:58.648317] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7277 "https://www.example.com/EMail/message.aspx?&mailId=3891_46&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijhyqwxQzZrjBP3UgEAAAA9 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 558 7699 -% 866500 3904 859762 2185 0 0 192.168.192.35 CH - [2015-05-22 15:17:01.264367] "GET /EMail/overview.aspx HTTP/1.1" 200 5288 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijhzawxQzZrjBP3UgIAAAA- TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 522 5710 -% 1202705 2896 197307 1784 0 0 192.168.192.35 CH - [2015-05-22 15:17:01.301561] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" VijhzawxQzZrjBP3UgMAAAAA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1190 13205 -% 1406343 3740 396017 2700 0 0 192.168.192.35 CH - [2015-05-22 15:17:07.429785] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" Vijh06wxQzZrjBP3UgUAAAAB TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1153 4435 -% 939655 3452 935021 279 0 0 192.168.192.35 CH - [2015-05-22 15:17:08.384748] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" Vijh1KwxQzZrjBP3UgcAAAAE TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 492 676 75% 936046 2952 931776 410 0 0 192.168.192.35 CH - [2015-05-22 15:17:09.378480] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 - - + "141288a0.522aff8ca6571" Vijh1awxQzZrjBP3UggAAAAG TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 389 1554 -% 2807 1776 44 87 0 0 192.168.192.35 CH - [2015-05-22 15:17:09.428267] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" Vijh1awxQzZrjBP3UgkAAAAJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1100 4344 -% 944866 3285 940646 189 0 0 192.168.192.35 CH - [2015-05-22 15:17:10.387561] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "141288a0.522aff8ca6571" Vijh1qwxQzZrjBP3UgoAAAAH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 440 7758 -% 994622 2887 987378 3632 0 0 192.168.81.38 CH - [2015-05-22 15:29:05.017942] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7372 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b61ff05c.522b17a99f056" VijkoawxQzZrjBP3UnoAAAA6 TLSv1 ECDHE-RSA-AES256-SHA 703 12009 -% 927387 2201 922229 2308 0 0 192.168.81.38 CH - [2015-05-22 15:29:06.199301] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b61ff05c.522b17a99f056" VijkoqwxQzZrjBP3UnwAAAA9 TLSv1 ECDHE-RSA-AES256-SHA 454 2431 14% 980012 1949 976519 180 0 0 192.168.81.38 CH - [2015-05-22 15:29:06.254027] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b61ff05c.522b17a99f056" VijkoqwxQzZrjBP3Un0AAAA- TLSv1 ECDHE-RSA-AES256-SHA 847 8290 23% 1124153 2026 119276 183 0 0 192.168.81.38 CH - [2015-05-22 15:29:06.255979] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b61ff05c.522b17a99f056" VijkoqwxQzZrjBP3Un4AAAAA TLSv1 ECDHE-RSA-AES256-SHA 815 4638 56% 1328068 1689 325673 152 0 0 192.168.81.38 CH - [2015-05-22 15:29:07.674651] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b61ff05c.522b17a99f056" Vijko6wxQzZrjBP3Un8AAAAC TLSv1 ECDHE-RSA-AES256-SHA 502 1802 -% 1026414 3120 22377 192 0 0 192.168.81.38 CH - [2015-05-22 15:29:19.901684] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b61ff05c.522b17a99f056" Vijkr6wxQzZrjBP3UoMAAAAG TLSv1 ECDHE-RSA-AES256-SHA 831 13265 -% 1597073 3077 587171 2925 0 0 192.168.81.38 CH - [2015-05-22 15:29:21.735101] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b61ff05c.522b17a99f056" VijksawxQzZrjBP3UoQAAAAJ TLSv1 ECDHE-RSA-AES256-SHA 518 1274 -% 903444 1949 900824 154 0 0 192.168.81.38 CH - [2015-05-22 15:29:23.805304] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b61ff05c.522b17a99f056" Vijks6wxQzZrjBP3UoUAAAAH TLSv1 ECDHE-RSA-AES256-SHA 470 538 -% 1079030 3445 74715 337 0 0 192.168.81.38 CH - [2015-05-22 15:29:26.566232] "GET /EMail/message.aspx?&mailId=3891_44&folderId=587_1&mailPos=0 HTTP/1.1" 200 11196 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b61ff05c.522b17a99f056" VijktqwxQzZrjBP3UocAAAAL TLSv1 ECDHE-RSA-AES256-SHA 486 11700 -% 1256926 4579 225254 26108 0 0 192.168.81.38 CH - [2015-05-22 15:29:29.984609] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3891_44&folderId=587_1&attachmentId=2&token=214858912057409856E17 HTTP/1.1" 200 54729 "https://www.example.com/EMail/message.aspx?&mailId=3891_44&folderId=587_1&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b61ff05c.522b17a99f056" VijkuawxQzZrjBP3UokAAAAK TLSv1 ECDHE-RSA-AES256-SHA 598 56372 -% 1095822 6871 66983 305 0 0 192.168.81.38 CH - [2015-05-22 15:30:55.575910] "GET /EMail/tree.aspx?sNode-sharedTree=treeTrash HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b61ff05c.522b17a99f056" VijlD6wxQzZrjBP3UpAAAAAV TLSv1 ECDHE-RSA-AES256-SHA 831 13265 -% 1068840 2799 58848 3185 0 0 192.168.81.38 CH - [2015-05-22 15:30:58.027559] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/trash.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b61ff05c.522b17a99f056" VijlEqwxQzZrjBP3UpIAAAAZ TLSv1 ECDHE-RSA-AES256-SHA 758 357 -% 1346845 8899 337006 149 0 0 192.168.81.38 CH - [2015-05-22 15:30:59.494058] "GET /EMail/trash.aspx?returnedFromDelete=true HTTP/1.1" 200 7277 "https://www.example.com/EMail/trash.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b61ff05c.522b17a99f056" VijlE6wxQzZrjBP3UpMAAAAW TLSv1 ECDHE-RSA-AES256-SHA 502 7722 -% 1108212 2707 98797 5891 0 0 192.168.186.76 CH - [2015-05-22 15:34:39.272800] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "85ea2e0f.522b18e78602b" Vijl76wxQzZrjBP3UrsAAAA5 TLSv1.2 ECDHE-RSA-AES256-SHA384 1111 11936 22% 1003042 1808 997724 200 0 0 192.168.186.76 CH - [2015-05-22 15:34:39.270401] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "85ea2e0f.522b18e78602b" Vijl76wxQzZrjBP3UroAAAA6 TLSv1.2 ECDHE-RSA-AES256-SHA384 1111 8368 23% 1189135 2571 184610 207 0 0 192.168.186.76 CH - [2015-05-22 15:34:39.278912] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "85ea2e0f.522b18e78602b" Vijl76wxQzZrjBP4f1sAAABO TLSv1.2 ECDHE-RSA-AES256-SHA384 1127 5862 -% 1337242 2748 332936 419 0 0 192.168.186.76 CH - [2015-05-22 15:34:40.493300] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "85ea2e0f.522b18e78602b" Vijl8KwxQzZrjBP3UrwAAAA9 TLSv1.2 ECDHE-RSA-AES256-SHA384 534 1898 -% 680030 3186 675967 155 0 0 192.168.186.76 CH - [2015-05-22 15:34:51.067872] "GET /EMail/overview.aspx HTTP/1.1" 200 5537 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "85ea2e0f.522b18e78602b" Vijl@6wxQzZrjBP3Ur8AAAAD TLSv1.2 ECDHE-RSA-AES256-SHA384 1079 10134 -% 1208870 3184 201853 3025 0 0 192.168.186.76 CH - [2015-05-22 15:34:52.299990] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "85ea2e0f.522b18e78602b" Vijl-KwxQzZrjBP3UsAAAAAC TLSv1.2 ECDHE-RSA-AES256-SHA384 518 1354 -% 907865 1963 905004 215 0 0 192.168.186.76 CH - [2015-05-22 15:35:02.811429] "GET /EMail/newMessage.aspx?msg=new HTTP/1.1" 200 12029 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "85ea2e0f.522b18e78602b" VijmBqwxQzZrjBP4f10AAABM TLSv1.2 ECDHE-RSA-AES256-SHA384 1020 12869 -% 1169628 3180 140669 23707 3 3 192.168.186.76 CH - [2015-05-22 15:35:02.813001] "GET /EMail/tree.aspx?sNode-sharedTree=treeNewMsg HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "85ea2e0f.522b18e78602b" VijmBqwxQzZrjBP3UsMAAAAG TLSv1.2 ECDHE-RSA-AES256-SHA384 1036 9827 -% 1561320 3341 551326 2859 0 0 192.168.186.76 CH - [2015-05-22 15:35:04.039013] "GET /EMail/scripts/tinymce/tinymce.min.js HTTP/1.1" 200 102049 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "85ea2e0f.522b18e78602b" VijmCKwxQzZrjBP4f14AAABP TLSv1.2 ECDHE-RSA-AES256-SHA384 518 105152 33% 800408 3595 755944 184 0 0 192.168.186.76 CH - [2015-05-22 15:35:04.940268] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "85ea2e0f.522b18e78602b" VijmCKwxQzZrjBP4f18AAABN TLSv1.2 ECDHE-RSA-AES256-SHA384 518 3434 -% 845878 3044 836173 5982 0 0 192.168.186.76 CH - [2015-05-22 15:35:04.944912] "GET /EMail/scripts/tinymce/langs/de.js HTTP/1.1" 200 2969 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "85ea2e0f.522b18e78602b" VijmCKwxQzZrjBP3UscAAAAK TLSv1.2 ECDHE-RSA-AES256-SHA384 518 3684 38% 1006589 2097 2899 195 0 0 192.168.186.76 CH - [2015-05-22 15:35:05.024403] "GET /EMail/scripts/tinymce/plugins/preview/plugin.min.js HTTP/1.1" 200 737 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "85ea2e0f.522b18e78602b" VijmCawxQzZrjBP3UsgAAAAM TLSv1.2 ECDHE-RSA-AES256-SHA384 1052 1536 51% 1172108 2976 167905 211 0 0 192.168.186.76 CH - [2015-05-22 15:35:05.024333] "GET /EMail/scripts/tinymce/plugins/paste/plugin.min.js HTTP/1.1" 200 6239 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "85ea2e0f.522b18e78602b" VijmCawxQzZrjBP4f2AAAABI TLSv1.2 ECDHE-RSA-AES256-SHA384 1052 7125 40% 1176218 3018 170046 255 0 0 192.168.186.76 CH - [2015-05-22 15:35:05.800020] "GET /EMail/scripts/tinymce/plugins/charmap/plugin.min.js HTTP/1.1" 200 2698 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "85ea2e0f.522b18e78602b" VijmCawxQzZrjBP4f2EAAABQ TLSv1.2 ECDHE-RSA-AES256-SHA384 534 3412 38% 1103768 1901 100762 160 0 0 192.168.186.76 CH - [2015-05-22 15:35:06.218078] "GET /EMail/scripts/tinymce/plugins/visualblocks/plugin.min.js HTTP/1.1" 200 525 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "85ea2e0f.522b18e78602b" VijmCqwxQzZrjBP3UsoAAAAR TLSv1.2 ECDHE-RSA-AES256-SHA384 534 1167 43% 977489 1957 974499 194 0 0 192.168.186.76 CH - [2015-05-22 15:35:06.223239] "GET /EMail/scripts/tinymce/plugins/hr/plugin.min.js HTTP/1.1" 200 191 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "85ea2e0f.522b18e78602b" VijmCqwxQzZrjBP4f2IAAABR TLSv1.2 ECDHE-RSA-AES256-SHA384 534 831 53% 1046209 2933 42394 152 0 0 192.168.186.76 CH - [2015-05-22 15:35:05.969314] "GET /EMail/scripts/tinymce/plugins/insertdatetime/plugin.min.js HTTP/1.1" 200 867 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "85ea2e0f.522b18e78602b" VijmCawxQzZrjBP3UskAAAAN TLSv1.2 ECDHE-RSA-AES256-SHA384 550 1503 42% 1302188 2276 299174 118 0 0 192.168.186.76 CH - [2015-05-22 15:35:06.919309] "GET /EMail/scripts/tinymce/plugins/image/plugin.min.js HTTP/1.1" 200 2136 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "85ea2e0f.522b18e78602b" VijmCqwxQzZrjBP4f2MAAABS TLSv1.2 ECDHE-RSA-AES256-SHA384 534 2852 42% 998130 2580 994553 165 0 0 192.168.186.76 CH - [2015-05-22 15:35:07.208359] "GET /EMail/scripts/tinymce/plugins/table/plugin.min.js HTTP/1.1" 200 9166 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "85ea2e0f.522b18e78602b" VijmC6wxQzZrjBP3UssAAAAU TLSv1.2 ECDHE-RSA-AES256-SHA384 534 9961 32% 990535 2112 984685 259 0 0 192.168.186.76 CH - [2015-05-22 15:35:08.261452] "GET /EMail/scripts/tinymce/skins/lightgray/skin.min.css HTTP/1.1" 200 6034 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "85ea2e0f.522b18e78602b" VijmDKwxQzZrjBP3UswAAAAQ TLSv1.2 ECDHE-RSA-AES256-SHA384 518 7250 17% 717264 3374 711459 153 0 0 192.168.186.76 CH - [2015-05-22 15:35:08.304774] "GET /EMail/scripts/tinymce/skins/lightgray/content.min.css HTTP/1.1" 200 588 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "85ea2e0f.522b18e78602b" VijmDKwxQzZrjBP4f2QAAABU TLSv1.2 ECDHE-RSA-AES256-SHA384 518 1231 38% 1254448 2999 250451 208 0 0 192.168.186.76 CH - [2015-05-22 15:35:09.011327] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce.eot? HTTP/1.1" 200 10024 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "85ea2e0f.522b18e78602b" VijmDawxQzZrjBP3Us0AAAAV TLSv1.2 ECDHE-RSA-AES256-SHA384 534 10724 -% 1158651 3019 154265 226 0 0 192.168.186.76 CH - [2015-05-22 15:35:21.721706] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "85ea2e0f.522b18e78602b" VijmGawxQzZrjBP4f2UAAABW TLSv1.2 ECDHE-RSA-AES256-SHA384 1111 6262 -% 959621 2283 956492 143 0 0 192.168.186.76 CH - [2015-05-22 15:36:59.057250] "GET /EMail/attachost.aspx HTTP/1.1" 200 4989 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "85ea2e0f.522b18e78602b" Vijme6wxQzZrjBP3UtwAAAAn TLSv1.2 ECDHE-RSA-AES256-SHA384 972 5659 -% 861208 3480 855398 1576 0 0 192.168.186.76 CH - [2015-05-22 15:36:59.946284] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/attachost.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "85ea2e0f.522b18e78602b" Vijme6wxQzZrjBP3Ut0AAAAg TLSv1.2 ECDHE-RSA-AES256-SHA384 518 634 -% 674430 2996 670370 229 0 0 192.168.96.45 CH - [2015-05-22 15:39:07.099297] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7366 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "27fe443.522b19e7cf8a1" Vijm@6wxQzZrjBP4f3cAAABo TLSv1 AES256-SHA 885 11449 -% 919433 1414 915144 2310 0 0 192.168.96.45 CH - [2015-05-22 15:39:08.125766] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "27fe443.522b19e7cf8a1" Vijm-KwxQzZrjBP4f3gAAABp TLSv1 AES256-SHA 598 2569 14% 696954 1986 693697 167 0 0 192.168.96.45 CH - [2015-05-22 15:39:08.511866] "GET /EMail/scripts/variables_de.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "27fe443.522b19e7cf8a1" Vijm-KwxQzZrjBP3UvAAAAAy TLSv1 AES256-SHA 1125 3700 -% 921202 1788 918833 151 0 0 192.168.96.45 CH - [2015-05-22 15:39:08.510995] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "27fe443.522b19e7cf8a1" Vijm-KwxQzZrjBP3Uu8AAAA8 TLSv1 AES256-SHA 1093 3700 -% 1023559 2079 20850 129 0 0 192.168.96.45 CH - [2015-05-22 15:39:09.626538] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "27fe443.522b19e7cf8a1" Vijm-awxQzZrjBP3UvEAAAA@ TLSv1 AES256-SHA 582 213 -% 771840 3059 767902 154 0 0 192.168.96.45 CH - [2015-05-22 15:39:16.957605] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "27fe443.522b19e7cf8a1" VijnBKwxQzZrjBP3UvMAAAA7 TLSv1 AES256-SHA 1005 12717 -% 2012910 2586 1517 4592 0 0 192.168.96.45 CH - [2015-05-22 15:39:18.719678] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "27fe443.522b19e7cf8a1" VijnBqwxQzZrjBP3UvQAAAA5 TLSv1 AES256-SHA 1101 3696 -% 974430 2037 971666 145 0 0 192.168.96.45 CH - [2015-05-22 15:39:34.922793] "GET /EMail/images/attach.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "27fe443.522b19e7cf8a1" VijnFqwxQzZrjBP4f3wAAABx TLSv1 AES256-SHA 1085 3696 -% 973250 2096 970372 201 0 0 192.168.96.45 CH - [2015-05-22 15:39:34.923733] "GET /EMail/images/Highost.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "27fe443.522b19e7cf8a1" VijnFqwxQzZrjBP3UvUAAAA9 TLSv1 AES256-SHA 1085 3696 -% 1058198 1756 55675 177 0 0 192.168.96.45 CH - [2015-05-22 15:39:37.014849] "GET /EMail/message.aspx?&mailId=3892_57&folderId=1157_50&mailPos=0 HTTP/1.1" 200 11202 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "27fe443.522b19e7cf8a1" VijnGawxQzZrjBP3UvgAAAAC TLSv1 AES256-SHA 1021 15199 -% 1326541 3141 304275 18079 0 0 192.168.96.45 CH - [2015-05-22 15:39:40.571404] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3892_57&folderId=1157_50&attachmentId=2&token=56678823658872294E17 HTTP/1.1" 200 54914 "https://www.example.com/EMail/message.aspx?&mailId=3892_57&folderId=1157_50&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "27fe443.522b19e7cf8a1" VijnHKwxQzZrjBP4f30AAABz TLSv1 AES256-SHA 1133 60047 -% 1037836 4412 11387 186 0 0 192.168.186.76 CH - [2015-05-22 15:40:01.084622] "GET /EMail/tree.aspx?sNode-sharedTree=treeSent HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "85ea2e0f.522b18e78602b" VijnMawxQzZrjBP3Uv0AAAAO TLSv1.2 ECDHE-RSA-AES256-SHA384 1111 13742 -% 1255721 3696 243500 4354 0 0 192.168.186.76 CH - [2015-05-22 15:40:04.222972] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/sent.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "85ea2e0f.522b18e78602b" VijnNKwxQzZrjBP3UwAAAAAN TLSv1.2 ECDHE-RSA-AES256-SHA384 518 1978 -% 944043 2647 940508 210 0 0 192.168.186.76 CH - [2015-05-22 15:40:07.002846] "GET /EMail/message.aspx?&mailId=3892_58&folderId=947_66&mailPos=0 HTTP/1.1" 200 11475 "https://www.example.com/EMail/sent.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "85ea2e0f.522b18e78602b" VijnN6wxQzZrjBP3UwIAAAAQ TLSv1.2 ECDHE-RSA-AES256-SHA384 550 12148 -% 1411927 5007 376427 29461 0 0 192.168.186.76 CH - [2015-05-22 15:40:13.182356] "GET /EMail/downloadPDF.aspx HTTP/1.1" 200 4294 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "85ea2e0f.522b18e78602b" VijnPawxQzZrjBP3UwMAAAAV TLSv1.2 ECDHE-RSA-AES256-SHA384 454 4810 -% 983706 1954 978814 2298 0 0 192.168.96.45 CH - [2015-05-22 15:41:34.635974] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "27fe443.522b19e7cf8a1" VijnjqwxQzZrjBP3Uw4AAAAY TLSv1 AES256-SHA 1109 3700 -% 950672 3071 946633 200 0 0 192.168.96.45 CH - [2015-05-22 15:41:34.637196] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "27fe443.522b19e7cf8a1" VijnjqwxQzZrjBP3Uw8AAAAl TLSv1 AES256-SHA 1093 3700 -% 998633 2961 994980 127 0 0 192.168.241.107 CH - [2015-05-22 16:05:30.027650] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3918 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "6e218c20.522b1fcd68a82" VijtKqwxQzZrjBP3U-YAAAAR TLSv1.2 ECDHE-RSA-AES256-SHA384 659 8706 -% 952870 1839 949786 193 0 0 192.168.100.52 CH - [2015-05-22 16:18:56.276260] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "ce659777.522b0f188d326" VijwUKwxQzZrjBP4f@oAAABl TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 929 4430 -% 1043023 3839 38186 171 0 0 192.168.100.52 CH - [2015-05-22 16:18:57.333075] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "ce659777.522b0f188d326" VijwUawxQzZrjBP4f@sAAABm TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 572 676 75% 690863 2872 686772 307 0 0 192.168.100.52 CH - [2015-05-22 16:18:58.067081] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "https://www.example.com/EMail/index.html" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "ce659777.522b0f188d326" VijwUqwxQzZrjBP4f@wAAABn TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 589 318 -% 907441 4424 902243 161 0 0 192.168.100.52 CH - [2015-05-22 16:18:58.985014] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "https://www.example.com/EMail/index.html" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "ce659777.522b0f188d326" VijwUqwxQzZrjBP4f@0AAABo TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 571 7758 -% 422514 1852 417739 2429 0 0 192.168.146.78 CH - [2015-05-22 16:28:38.119655] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7350 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "367566dc.522ad7105e3e2" VijylqwxQzZrjBP3VM0AAAAq TLSv1.2 ECDHE-RSA-AES128-SHA256 831 11795 -% 640506 5174 631952 2572 0 0 192.168.146.78 CH - [2015-05-22 16:28:40.378399] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "367566dc.522ad7105e3e2" VijymKwxQzZrjBP3VM8AAAAv TLSv1.2 ECDHE-RSA-AES128-SHA256 678 453 -% 1083591 3281 79465 218 0 0 192.168.146.78 CH - [2015-05-22 16:28:41.483569] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "367566dc.522ad7105e3e2" VijymawxQzZrjBP3VNAAAAAo TLSv1.2 ECDHE-RSA-AES128-SHA256 534 3882 -% 1004347 2016 7 1693 0 0 192.168.146.78 CH - [2015-05-22 16:28:42.615203] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "367566dc.522ad7105e3e2" VijymqwxQzZrjBP3VNEAAAAj TLSv1.2 ECDHE-RSA-AES128-SHA256 486 4202 -% 905610 2127 896461 6425 0 0 192.168.146.78 CH - [2015-05-22 16:28:42.741166] "GET /EMail/overview.aspx HTTP/1.1" 200 5305 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "367566dc.522ad7105e3e2" VijymqwxQzZrjBP4gBIAAABQ TLSv1.2 ECDHE-RSA-AES128-SHA256 772 5963 -% 1144957 2618 139574 1896 0 0 192.168.146.78 CH - [2015-05-22 16:28:42.700200] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "367566dc.522ad7105e3e2" VijymqwxQzZrjBP4gBEAAABI TLSv1.2 ECDHE-RSA-AES128-SHA256 804 9683 -% 1789226 2548 778062 4523 0 0 192.168.146.78 CH - [2015-05-22 16:28:45.052294] "GET /EMail/inbox.aspx HTTP/1.1" 200 52062 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "367566dc.522ad7105e3e2" VijynawxQzZrjBP4gBMAAABR TLSv1.2 ECDHE-RSA-AES128-SHA256 486 53217 -% 2269817 3379 769986 27115 0 0 192.168.146.78 CH - [2015-05-22 16:28:48.877989] "GET /EMail/message.aspx?&mailId=3892_68&folderId=2634_79&mailPos=0 HTTP/1.1" 200 19033 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "367566dc.522ad7105e3e2" VijyoKwxQzZrjBP4gBQAAABT TLSv1.2 ECDHE-RSA-AES128-SHA256 534 19774 -% 1413477 6450 354185 46747 0 0 192.168.146.78 CH - [2015-05-22 16:28:56.790187] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3892_68&folderId=2634_79&attachmentId=4&token=59208980870598886E17 HTTP/1.1" 200 154541 "https://www.example.com/EMail/message.aspx?&mailId=3892_68&folderId=2634_79&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "367566dc.522ad7105e3e2" VijyqKwxQzZrjBP3VNQAAAA0 TLSv1.2 ECDHE-RSA-AES128-SHA256 932 161797 -% 1252576 4907 180651 177 0 0 192.168.146.78 CH - [2015-05-22 16:30:34.315032] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3892_68&folderId=2634_79&attachmentId=3&token=59208980870598886E17 HTTP/1.1" 200 828027 "https://www.example.com/EMail/message.aspx?&mailId=3892_68&folderId=2634_79&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "367566dc.522ad7105e3e2" VijzCqwxQzZrjBP3VOYAAAAD TLSv1.2 ECDHE-RSA-AES128-SHA256 932 864143 -% 1489082 6758 169530 625 0 0 192.168.24.161 CH - [2015-05-22 17:53:29.856713] "GET /EMail/message.aspx?&mailId=3892_54&folderId=2846_92&mailPos=0 HTTP/1.1" 200 16994 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "c71bbaa7.522b37e0d7346" VikGeawxQzZrjBP4gUEAAABH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1139 21525 -% 1188996 10475 138709 35531 6 0 192.168.24.161 CH - [2015-05-22 17:53:33.056110] "GET /EMail/newMessage.aspx?action=reply&mailId=3892_54&folderId=2846_92&showPics=false HTTP/1.1" 200 18227 "https://www.example.com/EMail/message.aspx?&mailId=3892_54&folderId=2846_92&mailPos=0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "c71bbaa7.522b37e0d7346" VikGfawxQzZrjBP4gUMAAABM TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 875 18737 -% 1139287 11196 89500 35639 9 3 192.168.24.161 CH - [2015-05-22 17:53:34.288365] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2942 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_54&folderId=2846_92&showPics=false" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "c71bbaa7.522b37e0d7346" VikGfqwxQzZrjBP4gUQAAABP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 838 3335 -% 992794 8552 973602 8610 6 0 192.168.24.161 CH - [2015-05-22 17:55:29.578820] "GET /EMail/attachost.aspx HTTP/1.1" 200 4975 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_54&folderId=2846_92&showPics=false" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "c71bbaa7.522b37e0d7346" VikG8awxQzZrjBP3V9AAAAAJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1373 9412 -% 866937 9206 854613 1572 6 0 192.168.24.161 CH - [2015-05-22 17:57:00.273257] "GET /errordocuments/logo_d.png HTTP/1.1" 200 7515 "https://www.example.com/EMail/MailHandler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 - - + "c71bbaa7.522b37e0d7346" VikHTKwxQzZrjBP3V90AAAAS TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1208 8023 -% 6661 4983 44 97 6 0 192.168.24.161 CH - [2015-05-22 17:57:13.868183] "GET /EMail/attachost.aspx HTTP/1.1" 200 4976 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_54&folderId=2846_92&showPics=false" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "c71bbaa7.522b37e0d7346" VikHWawxQzZrjBP3V98AAAAT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1298 5498 -% 840448 9399 826502 2539 6 0 192.168.24.161 CH - [2015-05-22 17:57:21.642479] "POST /EMail/MailHandler HTTP/1.1" 400 4107 "https://www.example.com/EMail/attachost.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - - "c71bbaa7.522b37e0d7346" VikHYawxQzZrjBP3V@EAAAAW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 164031 8545 -% 2769900 10726 0 0 11 0 192.168.146.78 CH - [2015-05-22 19:05:54.896809] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7811 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7chost.522b4820cefa9" VikXcqwxQzZrjBP3WmIAAAA3 TLSv1.2 ECDHE-RSA-AES128-SHA256 815 12323 -% 937262 2454 928927 3858 3 0 192.168.146.78 CH - [2015-05-22 19:05:55.888755] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7chost.522b4820cefa9" VikXc6wxQzZrjBP3WmMAAAAt TLSv1.2 ECDHE-RSA-AES128-SHA256 598 2527 14% 772540 5143 764789 178 3 0 192.168.146.78 CH - [2015-05-22 19:05:55.925797] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7chost.522b4820cefa9" VikXc6wxQzZrjBP3WmQAAAA1 TLSv1.2 ECDHE-RSA-AES128-SHA256 916 1931 -% 898941 4993 891676 194 3 0 192.168.146.78 CH - [2015-05-22 19:05:55.935280] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cca5bc6.522b4820cefa9" VikXc6wxQzZrjBP3WmYAAAA4 TLSv1.2 ECDHE-RSA-AES128-SHA256 900 7973 22% 906950 4385 897812 147 3 0 192.168.146.78 CH - [2015-05-22 19:05:55.924970] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7chost.522b4820cefa9" VikXc6wxQzZrjBP4giEAAABz TLSv1.2 ECDHE-RSA-AES128-SHA256 884 864 56% 919389 5065 912200 172 3 0 192.168.146.78 CH - [2015-05-22 19:05:55.931471] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7chost.522b4820cefa9" VikXc6wxQzZrjBP3WmUAAAAu TLSv1.2 ECDHE-RSA-AES128-SHA256 884 2144 22% 987970 2841 982711 170 3 0 192.168.146.78 CH - [2015-05-22 19:05:56.954440] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7chost.522b4820cefa9" VikXdKwxQzZrjBP3WmcAAAAz TLSv1.2 ECDHE-RSA-AES128-SHA256 630 1866 -% 888776 5022 881564 235 3 0 192.168.146.78 CH - [2015-05-22 19:53:59.391326] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7350 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "62b88aed.522b52dfad45e" Vikit6wxQzZrjBP3XDIAAAAU TLSv1.2 ECDHE-RSA-AES128-SHA256 703 11875 -% 946461 1153 939771 4752 0 0 192.168.146.78 CH - [2015-05-22 19:54:04.271895] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "62b88aed.522b52dfad45e" VikivKwxQzZrjBP3XDMAAAAQ TLSv1.2 ECDHE-RSA-AES128-SHA256 678 453 -% 991388 5094 985442 199 0 0 192.168.146.78 CH - [2015-05-22 19:54:05.407578] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "62b88aed.522b52dfad45e" VikivawxQzZrjBP3XDUAAAAS TLSv1.2 ECDHE-RSA-AES128-SHA256 534 3882 -% 985962 4841 977935 2118 0 0 192.168.146.78 CH - [2015-05-22 19:54:06.843703] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "62b88aed.522b52dfad45e" VikivqwxQzZrjBP3XDcAAAAP TLSv1.2 ECDHE-RSA-AES128-SHA256 486 4202 -% 895280 3094 883037 8427 0 0 192.168.146.78 CH - [2015-05-22 19:54:07.561472] "GET /EMail/overview.aspx HTTP/1.1" 200 5305 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "62b88aed.522b52dfad45e" Vikiv6wxQzZrjBP3XDkAAAAa TLSv1.2 ECDHE-RSA-AES128-SHA256 772 5963 -% 1088688 2758 83566 1729 0 0 192.168.146.78 CH - [2015-05-22 19:54:07.535621] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "62b88aed.522b52dfad45e" Vikiv6wxQzZrjBP3XDgAAAAT TLSv1.2 ECDHE-RSA-AES128-SHA256 804 9683 -% 1963881 3885 953448 2598 0 0 192.168.146.78 CH - [2015-05-22 19:54:10.363628] "GET /EMail/inbox.aspx HTTP/1.1" 200 52128 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "62b88aed.522b52dfad45e" VikiwqwxQzZrjBP3XDoAAAAb TLSv1.2 ECDHE-RSA-AES128-SHA256 486 53297 -% 2110899 2347 608319 17484 0 0 192.168.146.78 CH - [2015-05-22 19:54:14.917608] "GET /EMail/message.aspx?&mailId=3891_54&folderId=2634_79&mailPos=0 HTTP/1.1" 200 13547 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "62b88aed.522b52dfad45e" VikixqwxQzZrjBP3XDsAAAAW TLSv1.2 ECDHE-RSA-AES128-SHA256 534 14164 -% 1451693 4826 419823 25689 0 0 192.168.146.78 CH - [2015-05-22 19:54:32.446596] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3891_54&folderId=2634_79&attachmentId=3&token=195100542545447168E17 HTTP/1.1" 200 1115999 "https://www.example.com/EMail/message.aspx?&mailId=3891_54&folderId=2634_79&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "62b88aed.522b52dfad45e" Viki2KwxQzZrjBP3XEAAAAAd TLSv1.2 ECDHE-RSA-AES128-SHA256 932 1146321 -% 3679796 6590 929077 242 0 0 192.168.227.145 CH - [2015-05-22 21:33:16.388808] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7356 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "d2da6d7.522b6910b65c8" Vik5-KwxQzZrjBP3X@cAAAAd TLSv1.2 ECDHE-RSA-AES256-SHA384 915 11907 -% 1031740 3343 24615 2258 3 0 192.168.227.145 CH - [2015-05-22 21:33:17.710935] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "d2da6d7.522b6910b65c8" Vik5-awxQzZrjBP3X@gAAAAf TLSv1.2 ECDHE-RSA-AES256-SHA384 646 2777 14% 1071443 3101 65976 144 3 0 192.168.227.145 CH - [2015-05-22 21:33:17.850925] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "d2da6d7.522b6910b65c8" Vik5-awxQzZrjBP3X@kAAAAn TLSv1.2 ECDHE-RSA-AES256-SHA384 964 2208 22% 1004175 5053 0 172 3 0 192.168.227.145 CH - [2015-05-22 21:33:17.932833] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "d2da6d7.522b6910b65c8" Vik5-awxQzZrjBP3X@wAAAAp TLSv1.2 ECDHE-RSA-AES256-SHA384 948 1979 -% 925315 2834 921270 72 3 0 192.168.227.145 CH - [2015-05-22 21:33:17.890776] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "d2da6d7.522b6910b65c8" Vik5-awxQzZrjBP3X@oAAAAg TLSv1.2 ECDHE-RSA-AES256-SHA384 964 928 56% 975367 3214 970229 133 3 0 192.168.227.145 CH - [2015-05-22 21:33:17.910785] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "d2da6d7.522b6910b65c8" Vik5-awxQzZrjBP3X@sAAAAk TLSv1.2 ECDHE-RSA-AES256-SHA384 948 8053 22% 1022782 2919 15063 136 3 0 192.168.227.145 CH - [2015-05-22 21:33:17.950830] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "d2da6d7.522b6910b65c8" Vik5-awxQzZrjBP3X@0AAAAr TLSv1.2 ECDHE-RSA-AES256-SHA384 964 4788 23% 1042413 2913 37170 123 3 0 192.168.227.145 CH - [2015-05-22 21:33:19.245719] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "d2da6d7.522b6910b65c8" Vik5-6wxQzZrjBP3X@8AAAAi TLSv1.2 ECDHE-RSA-AES256-SHA384 630 1898 -% 899655 4982 892523 202 3 0 192.168.227.145 CH - [2015-05-22 21:33:41.451950] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "d2da6d7.522b6910b65c8" Vik6FawxQzZrjBP3X-UAAAAu TLSv1.2 ECDHE-RSA-AES256-SHA384 1261 662 -% 1082170 7443 71024 193 3 0 192.168.227.145 CH - [2015-05-22 21:33:42.724133] "GET /EMail/main.aspx HTTP/1.1" 200 3388 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "d2da6d7.522b6910b65c8" Vik6FqwxQzZrjBP3X-cAAAA2 TLSv1.2 ECDHE-RSA-AES256-SHA384 710 3898 -% 895533 5936 885570 1876 3 0 192.168.227.145 CH - [2015-05-22 21:33:43.912060] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "d2da6d7.522b6910b65c8" Vik6F6wxQzZrjBP3X-gAAAAw TLSv1.2 ECDHE-RSA-AES256-SHA384 662 4218 -% 1068481 4428 51642 10184 3 0 192.168.227.145 CH - [2015-05-22 21:33:44.045909] "GET /EMail/overview.aspx HTTP/1.1" 200 5288 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "d2da6d7.522b6910b65c8" Vik6GKwxQzZrjBP3X-kAAAAy TLSv1.2 ECDHE-RSA-AES256-SHA384 980 5995 -% 1058399 5130 48095 2836 3 0 192.168.227.145 CH - [2015-05-22 21:33:44.069954] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "d2da6d7.522b6910b65c8" Vik6GKwxQzZrjBP3X-oAAAA8 TLSv1.2 ECDHE-RSA-AES256-SHA384 996 9843 -% 1839123 4850 824074 5371 3 0 192.168.227.145 CH - [2015-05-22 21:33:45.285062] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "d2da6d7.522b6910b65c8" Vik6GawxQzZrjBP3X-sAAAA@ TLSv1.2 ECDHE-RSA-AES256-SHA384 614 1354 -% 873369 4400 867189 189 3 0 192.168.227.145 CH - [2015-05-22 21:33:46.043892] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "d2da6d7.522b6910b65c8" Vik6GqwxQzZrjBP3X-wAAAAF TLSv1.2 ECDHE-RSA-AES256-SHA384 646 1370 -% 895417 4106 889212 170 3 0 192.168.227.145 CH - [2015-05-22 21:33:54.374883] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "d2da6d7.522b6910b65c8" Vik6IqwxQzZrjBP3X-4AAAAD TLSv1.2 ECDHE-RSA-AES256-SHA384 1000 646 -% 1021814 4638 14543 186 3 0 192.168.227.145 CH - [2015-05-22 21:33:55.580027] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "d2da6d7.522b6910b65c8" Vik6I6wxQzZrjBP3X-8AAAA- TLSv1.2 ECDHE-RSA-AES256-SHA384 662 815 75% 847832 5018 841040 201 3 0 192.168.227.145 CH - [2015-05-22 21:33:56.722046] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "https://www.example.com/EMail/index.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "d2da6d7.522b6910b65c8" Vik6JKwxQzZrjBP3YAAAAAAA TLSv1.2 ECDHE-RSA-AES256-SHA384 678 373 -% 892003 5506 884923 169 3 0 192.168.227.145 CH - [2015-05-22 21:33:57.784111] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "https://www.example.com/EMail/index.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "d2da6d7.522b6910b65c8" Vik6JawxQzZrjBP3YAEAAAAB TLSv1.2 ECDHE-RSA-AES256-SHA384 662 7850 -% 851055 5104 840254 3622 3 0 192.168.81.114 CH - [2015-05-22 21:43:35.179248] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3918 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "724a4f93.522b6b5ed63f0" Vik8Z6wxQzZrjBP3YGgAAAAs TLSv1.2 ECDHE-RSA-AES256-SHA384 659 8706 -% 934774 2122 931293 169 0 0 192.168.186.76 CH - [2015-05-23 07:27:08.586210] "GET /EMail/main.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinFLKwxQzZrjD9c3l8AAABL TLSv1.2 ECDHE-RSA-AES256-SHA384 919 12118 -% 965041 5526 953680 3541 3 0 192.168.186.76 CH - [2015-05-23 07:27:10.258431] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinFLqwxQzZrjD9c3mAAAABM TLSv1.2 ECDHE-RSA-AES256-SHA384 646 2575 14% 766345 6432 757262 177 3 0 192.168.186.76 CH - [2015-05-23 07:27:10.324651] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinFLqwxQzZrjD9c3mEAAABN TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 12664 22% 982055 4135 973258 194 3 0 192.168.186.76 CH - [2015-05-23 07:27:10.342919] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinFLqwxQzZrjD9bXUEAAAA1 TLSv1.2 ECDHE-RSA-AES256-SHA384 1271 8368 23% 1225280 3824 218805 158 3 0 192.168.186.76 CH - [2015-05-23 07:27:13.897966] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinFMawxQzZrjD9c3mIAAABO TLSv1.2 ECDHE-RSA-AES256-SHA384 678 1898 -% 887609 6553 879341 170 3 0 192.168.186.76 CH - [2015-05-23 07:27:14.922313] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e00e6f71.522bedd444349" VinFMqwxQzZrjD9bXUIAAAA2 TLSv1.2 ECDHE-RSA-AES256-SHA384 711 5894 -% 716902 930 714671 189 0 0 192.168.169.43 CH - [2015-05-23 07:30:35.839528] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinF@6wxQzZrjD9bXVMAAAAJ TLSv1.2 ECDHE-RSA-AES256-SHA384 847 5896 22% 935328 2190 931861 194 0 0 192.168.169.43 CH - [2015-05-23 07:30:35.886926] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7239 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinF@6wxQzZrjD9bXVQAAAAK TLSv1.2 ECDHE-RSA-AES256-SHA384 836 8829 22% 940769 3923 933037 314 0 0 192.168.169.43 CH - [2015-05-23 07:30:35.893260] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinF@6wxQzZrjD9bXVUAAAAL TLSv1.2 ECDHE-RSA-AES256-SHA384 836 4485 23% 1033662 2982 28142 301 0 0 192.168.169.43 CH - [2015-05-23 07:30:35.899919] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinF@6wxQzZrjD9bXVYAAAAM TLSv1.2 ECDHE-RSA-AES256-SHA384 852 1979 -% 1089751 2006 86735 150 0 0 192.168.169.43 CH - [2015-05-23 07:30:35.900177] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinF@6wxQzZrjD9bXVcAAAAN TLSv1.2 ECDHE-RSA-AES256-SHA384 804 928 56% 1279453 1866 276546 196 0 0 192.168.169.43 CH - [2015-05-23 07:30:37.318786] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinF-awxQzZrjD9bXVgAAAAO TLSv1.2 ECDHE-RSA-AES256-SHA384 534 1898 -% 973798 2311 970724 148 0 0 192.168.169.43 CH - [2015-05-23 07:30:38.771411] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinF-qwxQzZrjD9bXVkAAAAQ TLSv1.2 ECDHE-RSA-AES256-SHA384 534 2186 -% 802025 3189 798014 154 0 0 192.168.169.43 CH - [2015-05-23 07:31:00.474596] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinGFKwxQzZrjD9c3oEAAABt TLSv1.2 ECDHE-RSA-AES256-SHA384 996 662 -% 978169 5644 971639 179 0 0 192.168.169.43 CH - [2015-05-23 07:31:01.472856] "GET /EMail/main.aspx HTTP/1.1" 200 3400 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinGFawxQzZrjD9c3oIAAABw TLSv1.2 ECDHE-RSA-AES256-SHA384 534 3914 -% 617816 3281 612672 1152 0 0 192.168.169.43 CH - [2015-05-23 07:31:02.242876] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinGFqwxQzZrjD9c3oQAAABv TLSv1.2 ECDHE-RSA-AES256-SHA384 486 4234 -% 1176540 2983 164514 7777 0 0 192.168.169.43 CH - [2015-05-23 07:31:02.298010] "GET /EMail/overview.aspx HTTP/1.1" 200 5296 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinGFqwxQzZrjD9c3oUAAABy TLSv1.2 ECDHE-RSA-AES256-SHA384 804 6011 -% 1305715 2398 299657 2928 0 0 192.168.169.43 CH - [2015-05-23 07:31:02.242761] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinGFqwxQzZrjD9c3oMAAABu TLSv1.2 ECDHE-RSA-AES256-SHA384 836 9859 -% 1482737 2519 473284 2818 0 0 192.168.169.43 CH - [2015-05-23 07:31:03.658461] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinGF6wxQzZrjD9c3oYAAABx TLSv1.2 ECDHE-RSA-AES256-SHA384 518 1354 -% 891872 2209 888698 207 0 0 192.168.169.43 CH - [2015-05-23 07:31:03.776841] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinGF6wxQzZrjD9c3ocAAABz TLSv1.2 ECDHE-RSA-AES256-SHA384 550 1370 -% 796969 2958 793205 133 0 0 192.168.169.43 CH - [2015-05-23 07:31:11.187332] "GET /EMail/inbox.aspx HTTP/1.1" 200 8593 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinGH6wxQzZrjD9c3okAAAB1 TLSv1.2 ECDHE-RSA-AES256-SHA384 804 9392 -% 1269669 1995 264147 2754 0 0 192.168.169.43 CH - [2015-05-23 07:31:12.506968] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinGIKwxQzZrjD9c3ooAAAB2 TLSv1.2 ECDHE-RSA-AES256-SHA384 820 827 -% 968666 2250 965500 161 0 0 192.168.169.43 CH - [2015-05-23 07:31:12.507114] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinGIKwxQzZrjD9c3osAAAB3 TLSv1.2 ECDHE-RSA-AES256-SHA384 502 634 -% 999843 2932 995924 136 0 0 192.168.169.43 CH - [2015-05-23 07:31:12.557187] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinGIKwxQzZrjD9c3owAAAB4 TLSv1.2 ECDHE-RSA-AES256-SHA384 820 2107 -% 949951 1924 947468 95 0 0 192.168.169.43 CH - [2015-05-23 07:31:15.686746] "GET /EMail/message.aspx?&mailId=3891_56&folderId=75_57&mailPos=0 HTTP/1.1" 200 13004 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinGI6wxQzZrjD9c3o0AAAB5 TLSv1.2 ECDHE-RSA-AES256-SHA384 534 13684 -% 1641450 3010 630652 6498 0 0 192.168.169.43 CH - [2015-05-23 07:31:20.309488] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3891_56&folderId=75_57&attachmentId=2&token=71873860641916032E17 HTTP/1.1" 200 3840 "https://www.example.com/EMail/message.aspx?&mailId=3891_56&folderId=75_57&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinGKKwxQzZrjD9c3o8AAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 630 4601 -% 1436982 5593 427999 164 0 0 192.168.169.43 CH - [2015-05-23 07:34:14.496585] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinG1qwxQzZrjD9bXW8AAAAl TLSv1.2 ECDHE-RSA-AES256-SHA384 820 9859 -% 1478274 2338 467160 4571 0 0 192.168.169.43 CH - [2015-05-23 07:34:14.496525] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8586 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinG1qwxQzZrjD9bXW4AAAAm TLSv1.2 ECDHE-RSA-AES256-SHA384 804 9376 -% 1595545 2313 589542 2889 0 0 192.168.169.43 CH - [2015-05-23 07:34:16.129374] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinG2KwxQzZrjD9bXXAAAAAn TLSv1.2 ECDHE-RSA-AES256-SHA384 518 1978 -% 911139 2672 907616 211 0 0 192.168.169.43 CH - [2015-05-23 07:34:18.182519] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinG2qwxQzZrjD9bXXEAAAAo TLSv1.2 ECDHE-RSA-AES256-SHA384 790 405 -% 1044011 6411 36934 149 0 0 192.168.169.43 CH - [2015-05-23 07:34:19.247695] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7291 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinG26wxQzZrjD9bXXIAAAAp TLSv1.2 ECDHE-RSA-AES256-SHA384 534 7802 -% 1211666 2454 206327 2342 0 0 192.168.169.43 CH - [2015-05-23 07:34:24.609641] "GET /EMail/trash.aspx?dir=desc HTTP/1.1" 200 8677 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinG4KwxQzZrjD9bXXQAAAAr TLSv1.2 ECDHE-RSA-AES256-SHA384 486 9279 -% 1111564 2525 105610 2725 0 0 192.168.169.43 CH - [2015-05-23 07:34:24.660043] "GET /EMail/tree.aspx?sNode-sharedTree=treeTrash HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinG4KwxQzZrjD9bXXUAAAAs TLSv1.2 ECDHE-RSA-AES256-SHA384 820 9859 -% 1829394 3865 818849 2848 0 0 192.168.169.43 CH - [2015-05-23 07:34:28.158878] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/trash.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinG5KwxQzZrjD9bXXYAAAAt TLSv1.2 ECDHE-RSA-AES256-SHA384 774 405 -% 1197919 6141 191117 151 0 0 192.168.169.43 CH - [2015-05-23 07:34:29.377648] "GET /EMail/trash.aspx?returnedFromDelete=true HTTP/1.1" 200 7279 "https://www.example.com/EMail/trash.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinG5awxQzZrjD9bXXcAAAAu TLSv1.2 ECDHE-RSA-AES256-SHA384 534 7786 -% 1114520 2422 107106 4311 0 0 192.168.169.43 CH - [2015-05-23 07:34:33.077145] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinG6awxQzZrjD9bXXoAAAAx TLSv1.2 ECDHE-RSA-AES256-SHA384 502 453 -% 958070 2330 954891 220 0 0 192.168.169.43 CH - [2015-05-23 07:34:34.058677] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinG6qwxQzZrjD9bXXsAAAAy TLSv1.2 ECDHE-RSA-AES256-SHA384 486 815 75% 995181 1964 992064 332 0 0 192.168.169.43 CH - [2015-05-23 07:34:35.211995] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "954946e6.522bee967ef67" VinG66wxQzZrjD9c3qQAAABQ TLSv1.2 ECDHE-RSA-AES256-SHA384 644 1835 -% 2526 1688 52 148 0 0 192.168.169.43 CH - [2015-05-23 07:34:35.141468] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinG66wxQzZrjD9bXXwAAAAz TLSv1.2 ECDHE-RSA-AES256-SHA384 454 373 -% 937462 2585 934034 192 0 0 192.168.169.43 CH - [2015-05-23 07:34:36.106140] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinG7KwxQzZrjD9bXX0AAAA0 TLSv1.2 ECDHE-RSA-AES256-SHA384 438 7866 -% 937387 1897 931856 3051 0 0 192.168.169.43 CH - [2015-05-23 07:34:37.107649] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinG7awxQzZrjD9bXX4AAAA1 TLSv1.2 ECDHE-RSA-AES256-SHA384 566 2575 14% 694381 3130 689386 199 0 0 192.168.169.43 CH - [2015-05-23 07:34:37.166055] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinG7awxQzZrjD9bXX8AAAA3 TLSv1.2 ECDHE-RSA-AES256-SHA384 916 454 -% 938715 1870 936165 165 0 0 192.168.169.43 CH - [2015-05-23 07:34:37.165813] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7160 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinG7awxQzZrjD9c3qUAAABT TLSv1.2 ECDHE-RSA-AES256-SHA384 900 8579 22% 940678 2019 935937 131 0 0 192.168.169.43 CH - [2015-05-23 07:34:37.173635] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinG7awxQzZrjD9bXYEAAAA4 TLSv1.2 ECDHE-RSA-AES256-SHA384 900 4485 23% 1150100 2255 146322 157 0 0 192.168.169.43 CH - [2015-05-23 07:34:37.166079] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinG7awxQzZrjD9bXYAAAAA2 TLSv1.2 ECDHE-RSA-AES256-SHA384 868 928 56% 1160890 1856 158224 141 0 0 192.168.169.43 CH - [2015-05-23 07:34:37.179754] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinG7awxQzZrjD9c3qYAAABU TLSv1.2 ECDHE-RSA-AES256-SHA384 868 2208 22% 1211315 1804 208591 152 0 0 192.168.169.43 CH - [2015-05-23 07:34:38.535630] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f296346.522bee92d17dd" VinG7qwxQzZrjD9c3qcAAABV TLSv1.2 ECDHE-RSA-AES256-SHA384 598 261 -% 788117 3069 783934 390 0 0 192.168.144.21 CH - [2015-05-23 07:34:58.283139] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "265dd593.522bef6768f9c" VinHAqwxQzZrjD9c3qwAAABc TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4616 56% 933839 3175 929497 229 0 0 192.168.144.21 CH - [2015-05-23 07:34:58.363346] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "265dd593.522bef6768f9c" VinHAqwxQzZrjD9bXYMAAAA@ TLSv1.2 ECDHE-RSA-AES256-SHA384 827 1979 -% 954152 3226 949906 184 0 0 192.168.144.21 CH - [2015-05-23 07:34:58.309159] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "265dd593.522bef6768f9c" VinHAqwxQzZrjD9bXYIAAAA9 TLSv1.2 ECDHE-RSA-AES256-SHA384 795 2208 22% 1013752 1994 10718 128 0 0 192.168.144.21 CH - [2015-05-23 07:34:59.711038] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "265dd593.522bef6768f9c" VinHA6wxQzZrjD9c3q0AAABd TLSv1.2 ECDHE-RSA-AES256-SHA384 534 1898 -% 904094 1942 901295 200 0 0 192.168.144.21 CH - [2015-05-23 07:38:25.539224] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "265dd593.522bef6768f9c" VinH0awxQzZrjD9c3ssAAAB@ TLSv1.2 ECDHE-RSA-AES256-SHA384 1014 4350 -% 1074855 3293 70883 182 0 0 192.168.144.21 CH - [2015-05-23 07:38:26.628562] "GET /EMail/main.aspx HTTP/1.1" 200 3401 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "265dd593.522bef6768f9c" VinH0qwxQzZrjD9c3s0AAABB TLSv1.2 ECDHE-RSA-AES256-SHA384 534 3914 -% 945300 2225 941158 1257 0 0 192.168.144.21 CH - [2015-05-23 07:38:27.662336] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "265dd593.522bef6768f9c" VinH06wxQzZrjD9c3s4AAABC TLSv1.2 ECDHE-RSA-AES256-SHA384 470 4234 -% 932187 1911 918079 11548 0 0 192.168.144.21 CH - [2015-05-23 07:39:44.268107] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "265dd593.522bef6768f9c" VinIIKwxQzZrjD9c3tgAAABL TLSv1.2 ECDHE-RSA-AES256-SHA384 779 6011 -% 1035645 1701 30338 2958 0 0 192.168.144.21 CH - [2015-05-23 07:39:44.263797] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "265dd593.522bef6768f9c" VinIIKwxQzZrjD9bXZcAAAAT TLSv1.2 ECDHE-RSA-AES256-SHA384 811 9859 -% 1844257 2830 833935 3599 0 0 192.168.144.21 CH - [2015-05-23 07:39:45.341291] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "265dd593.522bef6768f9c" VinIIawxQzZrjD9c3tkAAABM TLSv1.2 ECDHE-RSA-AES256-SHA384 502 1354 -% 1064156 2163 60996 287 0 0 192.168.144.21 CH - [2015-05-23 07:39:46.169986] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "265dd593.522bef6768f9c" VinIIqwxQzZrjD9bXZgAAAAU TLSv1.2 ECDHE-RSA-AES256-SHA384 550 1370 -% 903744 2148 900792 148 0 0 192.168.144.21 CH - [2015-05-23 07:41:17.915835] "GET /EMail/inbox.aspx HTTP/1.1" 200 8595 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "265dd593.522bef6768f9c" VinIfawxQzZrjD9c3ukAAABe TLSv1.2 ECDHE-RSA-AES256-SHA384 795 9392 -% 1428816 3007 419730 4845 0 0 192.168.144.21 CH - [2015-05-23 07:41:19.403994] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "265dd593.522bef6768f9c" VinIf6wxQzZrjD9c3uwAAABh TLSv1.2 ECDHE-RSA-AES256-SHA384 502 634 -% 1280651 3568 276291 149 0 0 192.168.144.21 CH - [2015-05-23 07:42:29.481863] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "265dd593.522bef6768f9c" VinIxawxQzZrjD9c3vQAAABq TLSv1.2 ECDHE-RSA-AES256-SHA384 811 2107 -% 865964 2989 862116 168 0 0 192.168.144.21 CH - [2015-05-23 07:42:29.488040] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "265dd593.522bef6768f9c" VinIxawxQzZrjD9c3vUAAABp TLSv1.2 ECDHE-RSA-AES256-SHA384 811 827 -% 1081562 2679 78171 151 0 0 192.168.170.122 CH - [2015-05-23 07:42:38.934389] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@saq-qualicon.com HTTP/1.1" 200 7948 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "1d44ba67.522bf14579175" VinIzqwxQzZrjD9c3vcAAABr TLSv1 ECDHE-RSA-AES256-SHA 654 12369 -% 996066 3021 988571 3736 0 0 192.168.170.122 CH - [2015-05-23 07:42:40.109139] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@saq-qualicon.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "1d44ba67.522bf14579175" VinI0KwxQzZrjD9c3voAAABv TLSv1 ECDHE-RSA-AES256-SHA 771 1835 -% 944256 1851 941598 178 0 0 192.168.170.122 CH - [2015-05-23 07:42:40.036684] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@saq-qualicon.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "1d44ba67.522bf14579175" VinI0KwxQzZrjD9c3vgAAABt TLSv1 ECDHE-RSA-AES256-SHA 507 1887 22% 1086851 3548 81967 141 0 0 192.168.170.122 CH - [2015-05-23 07:42:40.106287] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@saq-qualicon.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "1d44ba67.522bf14579175" VinI0KwxQzZrjD9c3vkAAABw TLSv1 ECDHE-RSA-AES256-SHA 755 8173 22% 1196652 2021 190522 188 0 0 192.168.170.122 CH - [2015-05-23 07:42:40.116344] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@saq-qualicon.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "1d44ba67.522bf14579175" VinI0KwxQzZrjD9c3vsAAABy TLSv1 ECDHE-RSA-AES256-SHA 723 752 56% 1206001 1922 203228 237 0 0 192.168.170.122 CH - [2015-05-23 07:42:41.363781] "GET /EMail/scripts/csshover.htc HTTP/1.1" 200 4255 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "1d44ba67.522bf14579175" VinI0awxQzZrjD9c3vwAAABu TLSv1 ECDHE-RSA-AES256-SHA 379 4682 -% 983993 1988 981252 160 0 0 192.168.170.122 CH - [2015-05-23 07:43:36.136551] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@saq-qualicon.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "1d44ba67.522bf14579175" VinJCKwxQzZrjD9bXagAAAAl TLSv1 ECDHE-RSA-AES256-SHA 771 2235 -% 918837 2396 915210 148 0 0 192.168.170.122 CH - [2015-05-23 07:43:56.041808] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@saq-qualicon.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "1d44ba67.522bf14579175" VinJHKwxQzZrjD9bXaoAAAAk TLSv1 ECDHE-RSA-AES256-SHA 1043 486 -% 889066 6285 882069 162 0 0 192.168.170.122 CH - [2015-05-23 07:43:56.964667] "GET /EMail/error.aspx HTTP/1.1" 200 3757 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@saq-qualicon.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "1d44ba67.522bf14579175" VinJHKwxQzZrjD9bXasAAAAn TLSv1 ECDHE-RSA-AES256-SHA 555 4202 -% 701672 2020 692814 6239 0 0 192.168.170.122 CH - [2015-05-23 07:43:59.918942] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@saq-qualicon.com HTTP/1.1" 200 7948 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "1d44ba67.522bf14579175" VinJH6wxQzZrjD9bXawAAAAo TLSv1 ECDHE-RSA-AES256-SHA 475 8378 -% 1014251 2886 7911 2723 0 0 192.168.170.122 CH - [2015-05-23 07:44:02.935367] "GET /EMail/error.aspx HTTP/1.1" 200 3757 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@saq-qualicon.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "1d44ba67.522bf14579175" VinJIqwxQzZrjD9bXa0AAAAp TLSv1 ECDHE-RSA-AES256-SHA 539 4202 -% 913602 2343 903898 6806 0 0 192.168.144.21 CH - [2015-05-23 07:46:52.038601] "GET /EMail/message.aspx?&mailId=3892_72&folderId=1094_6&mailPos=0 HTTP/1.1" 200 13022 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "265dd593.522bef6768f9c" VinJzKwxQzZrjD9c3yIAAABY TLSv1.2 ECDHE-RSA-AES256-SHA384 902 3881 -% 1244016 5405 231198 6018 0 0 192.168.170.122 CH - [2015-05-23 07:54:41.009898] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@saq-qualicon.com HTTP/1.1" 200 7950 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "e77cb589.522bf3f6190ea" VinLoawxQzZrjD9c32UAAABg TLSv1 ECDHE-RSA-AES256-SHA 654 12369 -% 1316190 2513 310136 2809 0 0 192.168.170.122 CH - [2015-05-23 07:55:30.087116] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@saq-qualicon.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "e77cb589.522bf3f6190ea" VinL0qwxQzZrjD9bXdsAAAAa TLSv1 ECDHE-RSA-AES256-SHA 1043 486 -% 1073236 6059 66394 195 0 0 192.168.170.122 CH - [2015-05-23 07:55:31.192117] "GET /EMail/error.aspx HTTP/1.1" 200 3805 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@saq-qualicon.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "e77cb589.522bf3f6190ea" VinL06wxQzZrjD9bXd0AAAAb TLSv1 ECDHE-RSA-AES256-SHA 771 4395 -% 931607 2229 919651 8966 0 0 192.168.170.122 CH - [2015-05-23 07:55:37.164262] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@saq-qualicon.com HTTP/1.1" 200 7949 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "e77cb589.522bf3f6190ea" VinL2awxQzZrjD9c32wAAABp TLSv1 ECDHE-RSA-AES256-SHA 691 8523 -% 689472 4478 679554 4748 0 0 192.168.170.122 CH - [2015-05-23 07:56:36.514825] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@saq-qualicon.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "e77cb589.522bf3f6190ea" VinMFKwxQzZrjD9bXeAAAAAf TLSv1 ECDHE-RSA-AES256-SHA 1059 518 -% 1858242 9083 848282 187 0 0 192.168.170.122 CH - [2015-05-23 07:56:38.405742] "GET /EMail/login.aspx?username=john.smith@saq-qualicon.com HTTP/1.1" 200 7378 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@saq-qualicon.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "e77cb589.522bf3f6190ea" VinMFqwxQzZrjD9bXeEAAAAg TLSv1 ECDHE-RSA-AES256-SHA 819 7963 -% 811190 4419 800465 5139 0 0 192.168.170.122 CH - [2015-05-23 07:56:39.251280] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@saq-qualicon.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - X "e77cb589.522bf3f6190ea" VinMF6wxQzZrjD9bXeIAAAAh TLSv1 ECDHE-RSA-AES256-SHA 523 0 23% 880414 2389 876387 159 0 0 192.168.170.122 CH - [2015-05-23 07:56:39.267902] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@saq-qualicon.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "e77cb589.522bf3f6190ea" VinMF6wxQzZrjD9bXeMAAAAi TLSv1 ECDHE-RSA-AES256-SHA 523 4100 23% 866162 3199 861476 97 0 0 192.168.170.122 CH - [2015-05-23 07:56:59.179304] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@saq-qualicon.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "e77cb589.522bf3f6190ea" VinMK6wxQzZrjD9c33kAAAB4 TLSv1 ECDHE-RSA-AES256-SHA 915 566 -% 1214142 5603 207546 211 0 0 192.168.170.122 CH - [2015-05-23 07:57:00.424366] "GET /EMail/main.aspx HTTP/1.1" 200 3410 "https://www.example.com/EMail/login.aspx?username=john.smith@saq-qualicon.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "e77cb589.522bf3f6190ea" VinMLKwxQzZrjD9c33oAAAB3 TLSv1 ECDHE-RSA-AES256-SHA 755 3979 -% 830313 3031 825418 1192 0 0 192.168.170.122 CH - [2015-05-23 07:57:01.310722] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "e77cb589.522bf3f6190ea" VinMLawxQzZrjD9c33sAAAB5 TLSv1 ECDHE-RSA-AES256-SHA 475 4154 -% 912523 3016 896045 12776 0 0 192.168.170.122 CH - [2015-05-23 07:57:01.377969] "GET /EMail/overview.aspx HTTP/1.1" 200 5299 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "e77cb589.522bf3f6190ea" VinMLawxQzZrjD9c330AAAB7 TLSv1 ECDHE-RSA-AES256-SHA 691 5883 -% 1468736 2619 461687 3588 0 0 192.168.170.122 CH - [2015-05-23 07:57:01.311651] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "e77cb589.522bf3f6190ea" VinMLawxQzZrjD9c33wAAAB6 TLSv1 ECDHE-RSA-AES256-SHA 507 9234 -% 2356954 3869 344512 4410 0 0 192.168.170.122 CH - [2015-05-23 07:57:02.881709] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "e77cb589.522bf3f6190ea" VinMLqwxQzZrjD9c338AAAB9 TLSv1 ECDHE-RSA-AES256-SHA 507 1258 -% 936799 3002 932889 200 0 0 192.168.170.122 CH - [2015-05-23 07:57:03.704094] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "e77cb589.522bf3f6190ea" VinML6wxQzZrjD9c34AAAAB- TLSv1 ECDHE-RSA-AES256-SHA 555 1274 -% 936298 2845 932301 377 0 0 192.168.170.122 CH - [2015-05-23 07:57:23.981747] "GET /EMail/inbox.aspx HTTP/1.1" 200 8578 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "e77cb589.522bf3f6190ea" VinMQ6wxQzZrjD9bXesAAAAq TLSv1 ECDHE-RSA-AES256-SHA 691 9200 -% 1030552 3441 22123 4166 0 0 192.168.170.122 CH - [2015-05-23 07:57:25.059445] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "e77cb589.522bf3f6190ea" VinMRawxQzZrjD9c34EAAAB@ TLSv1 ECDHE-RSA-AES256-SHA 707 699 -% 788929 1911 786331 148 0 0 192.168.170.122 CH - [2015-05-23 07:57:25.113409] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "e77cb589.522bf3f6190ea" VinMRawxQzZrjD9bXe0AAAAs TLSv1 ECDHE-RSA-AES256-SHA 723 1963 -% 742983 3352 738793 144 0 0 192.168.170.122 CH - [2015-05-23 07:57:25.048349] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "e77cb589.522bf3f6190ea" VinMRawxQzZrjD9bXewAAAAr TLSv1 ECDHE-RSA-AES256-SHA 507 538 -% 1018227 1900 15650 149 0 0 192.168.170.122 CH - [2015-05-23 07:57:34.499246] "GET /EMail/message.aspx?&mailId=3891_57&folderId=3402_88&mailPos=0 HTTP/1.1" 200 15096 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "e77cb589.522bf3f6190ea" VinMTqwxQzZrjD9c34QAAABA TLSv1 ECDHE-RSA-AES256-SHA 739 15749 -% 1333364 4649 296872 30516 0 0 192.168.170.122 CH - [2015-05-23 07:58:02.041481] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3891_57&folderId=3402_88&attachmentId=3&token=109531545574993446E18 HTTP/1.1" 200 7560405 "https://www.example.com/EMail/message.aspx?&mailId=3891_57&folderId=3402_88&mailPos=0" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "e77cb589.522bf3f6190ea" VinMaqwxQzZrjD9c34cAAABG TLSv1 ECDHE-RSA-AES256-SHA 851 7664413 -% 5440680 4965 73005 202 0 0 192.168.186.76 CH - [2015-05-23 08:02:59.763947] "GET /EMail/overview.aspx HTTP/1.1" 200 5537 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinNk6wxQzZrjD9bXgUAAAAF TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 10134 -% 1291995 5686 282191 1936 3 0 192.168.186.76 CH - [2015-05-23 08:03:01.077582] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinNlawxQzZrjD9bXgYAAAAG TLSv1.2 ECDHE-RSA-AES256-SHA384 694 1354 -% 1008006 6834 0 152 3 0 192.168.186.76 CH - [2015-05-23 08:03:02.165051] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinNlqwxQzZrjD9bXgcAAAAH TLSv1.2 ECDHE-RSA-AES256-SHA384 726 1370 -% 1017983 7218 8552 197 3 0 192.168.186.76 CH - [2015-05-23 08:03:04.779074] "GET /EMail/inbox.aspx HTTP/1.1" 200 8487 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinNmKwxQzZrjD9bXggAAAAI TLSv1.2 ECDHE-RSA-AES256-SHA384 662 9087 -% 1210184 3955 201979 2708 3 0 192.168.186.76 CH - [2015-05-23 08:03:06.083932] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinNmqwxQzZrjD9bXgoAAAAK TLSv1.2 ECDHE-RSA-AES256-SHA384 1196 2075 -% 1044806 5240 37915 294 3 0 192.168.186.76 CH - [2015-05-23 08:03:06.012819] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinNmqwxQzZrjD9bXgkAAAAJ TLSv1.2 ECDHE-RSA-AES256-SHA384 678 634 -% 1116998 4065 111635 97 3 0 192.168.186.76 CH - [2015-05-23 08:03:08.156122] "GET /EMail/message.aspx?&mailId=3891_58&folderId=947_65&mailPos=0 HTTP/1.1" 200 16717 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinNnKwxQzZrjD9bXgwAAAAM TLSv1.2 ECDHE-RSA-AES256-SHA384 710 17465 -% 1746476 7681 698043 35478 3 0 192.168.186.76 CH - [2015-05-23 08:03:21.395973] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/message.aspx?&mailId=3891_58&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinNqawxQzZrjD9c37MAAAB0 TLSv1.2 ECDHE-RSA-AES256-SHA384 1244 2347 -% 1011288 4747 4738 349 3 0 192.168.186.76 CH - [2015-05-23 08:03:23.844044] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3891_58&folderId=947_65&attachmentId=3&token=88380828813687424E17 HTTP/1.1" 200 1199548 "https://www.example.com/EMail/message.aspx?&mailId=3891_58&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinNq6wxQzZrjD9c37QAAAB1 TLSv1.2 ECDHE-RSA-AES256-SHA384 806 1264702 -% 1687081 6989 197537 234 3 0 192.168.186.76 CH - [2015-05-23 08:03:38.778157] "GET /EMail/scripts/tinymce/langs/de.js HTTP/1.1" 200 2969 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_58&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinNuqwxQzZrjD9c37gAAAB8 TLSv1.2 ECDHE-RSA-AES256-SHA384 1335 7760 38% 1190677 6675 181484 217 3 0 192.168.186.76 CH - [2015-05-23 08:03:38.852743] "GET /EMail/scripts/tinymce/themes/modern/theme.min.js HTTP/1.1" 200 2651 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_58&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinNuqwxQzZrjD9bXhAAAAAR TLSv1.2 ECDHE-RSA-AES256-SHA384 1276 3525 41% 1167741 6352 159392 152 3 0 192.168.186.76 CH - [2015-05-23 08:03:39.344201] "GET /EMail/scripts/tinymce/plugins/searchreplace/plugin.min.js HTTP/1.1" 200 2586 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_58&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinNu6wxQzZrjD9bXhEAAAAS TLSv1.2 ECDHE-RSA-AES256-SHA384 1351 7376 40% 1137109 7967 126543 190 3 0 192.168.186.76 CH - [2015-05-23 08:03:39.344486] "GET /EMail/scripts/tinymce/plugins/fullpage/plugin.min.js HTTP/1.1" 200 2325 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_58&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinNu6wxQzZrjD9bXhIAAAAP TLSv1.2 ECDHE-RSA-AES256-SHA384 1351 7120 36% 1428127 7752 417534 202 3 0 192.168.186.76 CH - [2015-05-23 08:03:39.984172] "GET /EMail/scripts/tinymce/plugins/link/plugin.min.js HTTP/1.1" 200 1835 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_58&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinNu6wxQzZrjD9c37kAAAB5 TLSv1.2 ECDHE-RSA-AES256-SHA384 758 2479 41% 1175859 4604 169137 202 3 0 192.168.186.76 CH - [2015-05-23 08:03:40.496530] "GET /EMail/scripts/tinymce/plugins/image/plugin.min.js HTTP/1.1" 200 2136 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_58&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinNvKwxQzZrjD9bXhQAAAAU TLSv1.2 ECDHE-RSA-AES256-SHA384 758 2852 42% 735312 5516 727709 162 3 0 192.168.186.76 CH - [2015-05-23 08:03:40.035749] "GET /EMail/scripts/tinymce/plugins/anchor/plugin.min.js HTTP/1.1" 200 339 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_58&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinNvKwxQzZrjD9bXhMAAAAT TLSv1.2 ECDHE-RSA-AES256-SHA384 758 975 63% 1347283 4353 340722 244 3 0 192.168.186.76 CH - [2015-05-23 08:03:41.522689] "GET /EMail/scripts/tinymce/skins/lightgray/content.min.css HTTP/1.1" 200 588 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_58&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinNvawxQzZrjD9bXhUAAAAW TLSv1.2 ECDHE-RSA-AES256-SHA384 742 1231 38% 970943 6666 962188 161 3 0 192.168.186.76 CH - [2015-05-23 08:05:43.883537] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8485 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinON6wxQzZrjD9c38oAAABN TLSv1.2 ECDHE-RSA-AES256-SHA384 1180 9248 -% 1299951 4499 291109 2575 3 0 192.168.186.76 CH - [2015-05-23 08:05:43.889116] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinON6wxQzZrjD9c38sAAABO TLSv1.2 ECDHE-RSA-AES256-SHA384 1186 9827 -% 1689629 4807 676292 3648 3 0 192.168.212.1 CH - [2015-05-23 08:18:49.616348] "GET /EMail/images/icon10.ico HTTP/1.1" 304 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3c46d99b.522bf95b98bdc" VinRSawxQzZrjD9c4DsAAABE TLSv1 ECDHE-RSA-AES256-SHA 720 4204 -% 804530 930 802730 230 0 0 192.168.212.1 CH - [2015-05-23 08:19:28.519426] "GET /EMail/images/active.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7e8bec9.522bf9581f67c" VinRcKwxQzZrjD9bXlQAAAAX TLSv1 ECDHE-RSA-AES256-SHA 984 4145 -% 940346 3071 936403 165 0 0 192.168.212.1 CH - [2015-05-23 08:19:29.473142] "GET /EMail/main.aspx HTTP/1.1" 200 3415 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7e8bec9.522bf9581f67c" VinRcawxQzZrjD9c4EAAAABH TLSv1 ECDHE-RSA-AES256-SHA 872 7670 -% 940970 3231 934957 1876 0 0 192.168.212.1 CH - [2015-05-23 08:19:30.673296] "GET /EMail/overview.aspx HTTP/1.1" 200 6217 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7e8bec9.522bf9581f67c" VinRcqwxQzZrjD9c4EEAAABK TLSv1 ECDHE-RSA-AES256-SHA 840 10486 -% 1131869 2019 126666 2548 0 0 192.168.212.1 CH - [2015-05-23 08:28:48.581238] "GET /EMail/message.aspx?&mailId=3892_60&folderId=1001_9&mailPos=11 HTTP/1.1" 200 11341 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7e8bec9.522bf9581f67c" VinToKwxQzZrjD9c4I4AAABb TLSv1 ECDHE-RSA-AES256-SHA 882 15680 -% 1275203 5420 242552 26168 0 0 192.168.212.1 CH - [2015-05-23 08:28:52.633664] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3892_60&folderId=1001_9&attachmentId=2&token=16433826481684704E17 HTTP/1.1" 200 53456 "https://www.example.com/EMail/message.aspx?&mailId=3892_60&folderId=1001_9&mailPos=11" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7e8bec9.522bf9581f67c" VinTpKwxQzZrjD9c4JAAAABf TLSv1 ECDHE-RSA-AES256-SHA 994 58944 -% 1202941 3905 177612 200 0 0 192.168.212.1 CH - [2015-05-23 08:29:36.382934] "GET /EMail/message.aspx?&mailId=3892_61&folderId=1001_9&mailPos=10 HTTP/1.1" 200 11490 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7e8bec9.522bf9581f67c" VinT0KwxQzZrjD9c4JkAAABo TLSv1 ECDHE-RSA-AES256-SHA 898 15840 -% 1193180 4032 168058 20239 0 0 192.168.212.1 CH - [2015-05-23 08:30:13.691978] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 22878 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7e8bec9.522bf9581f67c" VinT9awxQzZrjD9c4KIAAABz TLSv1 ECDHE-RSA-AES256-SHA 872 27274 -% 1473407 3558 375172 7561 0 0 192.168.212.1 CH - [2015-05-23 08:30:18.482689] "GET /EMail/message.aspx?&mailId=3892_62&folderId=1001_9&mailPos=9 HTTP/1.1" 200 11496 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7e8bec9.522bf9581f67c" VinT@qwxQzZrjD9c4KMAAAB1 TLSv1 ECDHE-RSA-AES256-SHA 888 15840 -% 1322676 4852 295375 21529 0 0 192.168.212.1 CH - [2015-05-23 08:30:55.591805] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7e8bec9.522bf9581f67c" VinUH6wxQzZrjD9c4KsAAAB- TLSv1 ECDHE-RSA-AES256-SHA 888 13070 -% 1966460 3346 955407 3423 0 0 192.168.212.1 CH - [2015-05-23 08:31:02.591789] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3892_63&folderId=1001_9&attachmentId=2&token=98754355356751488E17 HTTP/1.1" 200 55110 "https://www.example.com/EMail/message.aspx?&mailId=3892_63&folderId=1001_9&mailPos=8" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7e8bec9.522bf9581f67c" VinUJqwxQzZrjD9bXn8AAAAF TLSv1 ECDHE-RSA-AES256-SHA 984 60592 -% 940765 4054 924819 189 0 0 192.168.212.1 CH - [2015-05-23 08:31:27.987999] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7e8bec9.522bf9581f67c" VinUP6wxQzZrjD9bXoEAAAAI TLSv1 ECDHE-RSA-AES256-SHA 888 13070 -% 1322625 4522 311474 2753 0 0 192.168.212.1 CH - [2015-05-23 08:31:27.988439] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 22863 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7e8bec9.522bf9581f67c" VinUP6wxQzZrjD9c4LEAAABD TLSv1 ECDHE-RSA-AES256-SHA 872 27258 -% 1787529 3391 717095 8223 0 0 192.168.212.1 CH - [2015-05-23 08:31:35.240098] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3892_64&folderId=1001_9&attachmentId=2&token=68328719722949325E17 HTTP/1.1" 200 55743 "https://www.example.com/EMail/message.aspx?&mailId=3892_64&folderId=1001_9&mailPos=7" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7e8bec9.522bf9581f67c" VinUR6wxQzZrjD9c4LMAAABH TLSv1 ECDHE-RSA-AES256-SHA 984 61232 -% 1078423 6492 50347 186 0 0 192.168.212.1 CH - [2015-05-23 08:32:24.793452] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 22854 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7e8bec9.522bf9581f67c" VinUeKwxQzZrjD9c4LkAAABO TLSv1 ECDHE-RSA-AES256-SHA 872 27258 -% 1692031 2247 590101 9234 0 0 192.168.170.122 CH - [2015-05-23 08:34:30.969776] "GET /EMail/inbox.aspx HTTP/1.1" 200 7349 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "e77cb589.522bf3f6190ea" VinU9qwxQzZrjD9c4M8AAABn TLSv1 ECDHE-RSA-AES256-SHA 766 11697 -% 966985 2627 960812 2944 0 0 192.168.170.122 CH - [2015-05-23 08:34:32.092252] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "e77cb589.522bf3f6190ea" VinU@KwxQzZrjD9c4NAAAABm TLSv1 ECDHE-RSA-AES256-SHA 766 11617 -% 868190 2005 862766 2846 0 0 192.168.212.1 CH - [2015-05-23 08:34:53.996511] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3892_65&folderId=1001_9&attachmentId=2&token=45771256451474144E17 HTTP/1.1" 200 58908 "https://www.example.com/EMail/message.aspx?&mailId=3892_65&folderId=1001_9&mailPos=5" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7e8bec9.522bf9581f67c" VinVDawxQzZrjD9c4NUAAABv TLSv1 ECDHE-RSA-AES256-SHA 984 64569 -% 1097842 4210 70163 212 0 0 192.168.212.1 CH - [2015-05-23 08:41:36.200579] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3892_67&folderId=1001_9&attachmentId=2&token=137981412517633997E18 HTTP/1.1" 200 54343 "https://www.example.com/EMail/message.aspx?&mailId=3892_67&folderId=1001_9&mailPos=3" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7e8bec9.522bf9581f67c" VinWoKwxQzZrjD9c4RMAAABv TLSv1 ECDHE-RSA-AES256-SHA 984 59824 -% 1148215 5268 121197 207 0 0 192.168.212.1 CH - [2015-05-23 08:47:17.409655] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 22814 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7e8bec9.522bf9581f67c" VinX9awxQzZrjD9c4UUAAABj TLSv1 ECDHE-RSA-AES256-SHA 872 27210 -% 1568538 3677 463626 14774 0 0 192.168.212.1 CH - [2015-05-23 08:47:23.110964] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3891_48&folderId=1001_9&attachmentId=2&token=133880156150224384E18 HTTP/1.1" 200 57627 "https://www.example.com/EMail/message.aspx?&mailId=3891_48&folderId=1001_9&mailPos=1" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7e8bec9.522bf9581f67c" VinX@6wxQzZrjD9c4UYAAABl TLSv1 ECDHE-RSA-AES256-SHA 994 63289 -% 948541 4609 919927 189 0 0 192.168.212.1 CH - [2015-05-23 08:47:52.358582] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 22807 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7e8bec9.522bf9581f67c" VinYGKwxQzZrjD9c4U0AAABv TLSv1 ECDHE-RSA-AES256-SHA 882 27210 -% 1552036 2285 456069 7608 0 0 192.168.212.1 CH - [2015-05-23 08:47:55.608752] "GET /EMail/message.aspx?&mailId=3891_49&folderId=1001_9&mailPos=0 HTTP/1.1" 200 11364 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7e8bec9.522bf9581f67c" VinYG6wxQzZrjD9c4U4AAABw TLSv1 ECDHE-RSA-AES256-SHA 888 15675 -% 1598633 5304 569533 22814 0 0 192.168.212.1 CH - [2015-05-23 08:48:25.806000] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7e8bec9.522bf9581f67c" VinYOawxQzZrjD9c4VMAAAB0 TLSv1 ECDHE-RSA-AES256-SHA 888 13070 -% 1492219 5526 479225 2978 0 0 192.168.212.1 CH - [2015-05-23 08:48:48.812173] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/moveToFolder.aspx?folderName=Inbox&mailId=3891_49&mailId=3891_48&mailId=3892_69&mailId=3892_67&mailId=3892_66&mailId=3892_65&mailId=3891_47&mailId=3892_64&mailId=3892_63&mailId=3892_62&mailId=3892_61&mailId=3892_60" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7e8bec9.522bf9581f67c" VinYUKwxQzZrjD9c4VkAAAB6 TLSv1 ECDHE-RSA-AES256-SHA 1416 4177 -% 2706480 15129 690399 205 0 0 192.168.212.1 CH - [2015-05-23 08:48:51.662423] "GET /EMail/host.html HTTP/1.1" 200 199 "https://www.example.com/EMail/moveToFolder.aspx?folderName=Inbox&mailId=3891_49&mailId=3891_48&mailId=3892_69&mailId=3892_67&mailId=3892_66&mailId=3892_65&mailId=3891_47&mailId=3892_64&mailId=3892_63&mailId=3892_62&mailId=3892_61&mailId=3892_60" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7e8bec9.522bf9581f67c" VinYU6wxQzZrjD9c4VoAAAB- TLSv1 ECDHE-RSA-AES256-SHA 1032 4539 76% 817293 2170 814126 243 0 0 192.168.212.1 CH - [2015-05-23 08:48:53.006910] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "3c46d99b.522bf95b98bdc" VinYVawxQzZrjD9c4VsAAABB TLSv1 ECDHE-RSA-AES256-SHA 768 5393 -% 2242 1470 56 108 0 0 192.168.212.1 CH - [2015-05-23 08:48:54.011391] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7e8bec9.522bf9581f67c" VinYVqwxQzZrjD9c4VwAAABC TLSv1 ECDHE-RSA-AES256-SHA 904 4049 -% 1167325 3444 162943 230 0 0 192.168.186.76 CH - [2015-05-23 08:56:29.418976] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinaHawxQzZrjD9c4aIAAABJ TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 12038 -% 1123612 7343 109585 3947 3 0 192.168.186.76 CH - [2015-05-23 08:56:35.025445] "GET /EMail/overview.aspx HTTP/1.1" 200 5538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinaI6wxQzZrjD9c4aYAAABK TLSv1.2 ECDHE-RSA-AES256-SHA384 1180 6219 -% 1171964 4245 162578 3124 3 0 192.168.186.76 CH - [2015-05-23 08:56:35.022106] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinaI6wxQzZrjD9c4aUAAABN TLSv1.2 ECDHE-RSA-AES256-SHA384 694 9666 -% 2070916 8292 53067 4506 3 0 192.168.186.76 CH - [2015-05-23 08:56:37.507912] "GET /EMail/inbox.aspx HTTP/1.1" 200 9494 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinaJawxQzZrjD9c4acAAABR TLSv1.2 ECDHE-RSA-AES256-SHA384 662 10095 -% 1136190 6615 122206 4971 3 0 192.168.186.76 CH - [2015-05-23 08:56:40.475572] "GET /EMail/message.aspx?&mailId=3892_74&folderId=947_65&mailPos=1 HTTP/1.1" 200 15948 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinaKKwxQzZrjD9c4agAAABO TLSv1.2 ECDHE-RSA-AES256-SHA384 710 16628 -% 1838126 5222 791694 37964 3 0 192.168.186.76 CH - [2015-05-23 08:56:58.058907] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9479 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinaOqwxQzZrjD9c4awAAABU TLSv1.2 ECDHE-RSA-AES256-SHA384 1229 14155 -% 1409475 6394 396071 4806 3 0 192.168.186.76 CH - [2015-05-23 08:56:58.059101] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinaOqwxQzZrjD9c4a0AAABV TLSv1.2 ECDHE-RSA-AES256-SHA384 1261 13742 -% 1577743 4992 562639 4529 3 0 192.168.186.76 CH - [2015-05-23 09:01:26.364425] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5879 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_74&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinbRqwxQzZrjD9c4dYAAABC TLSv1.2 ECDHE-RSA-AES256-SHA384 1303 13742 -% 1100590 6478 0 0 3 0 192.168.186.76 CH - [2015-05-23 09:01:41.778177] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_74&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinbVawxQzZrjD9c4dsAAABG TLSv1.2 ECDHE-RSA-AES256-SHA384 8129 630 -% 1755536 376876 358253 568 86 0 192.168.186.76 CH - [2015-05-23 09:01:43.553481] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_74&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinbV6wxQzZrjD9c4dwAAABH TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 1231292 9160 206267 14254 3 0 192.168.186.76 CH - [2015-05-23 09:01:48.319975] "GET /EMail/newMessage.aspx?msg=new HTTP/1.1" 200 12029 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "ad652eca.522bedce394e2" VinbXKwxQzZrjD9c4d4AAABL TLSv1.2 ECDHE-RSA-AES256-SHA384 678 0 -% 1036126 7072 4490 22493 6 3 192.168.186.76 CH - [2015-05-23 09:23:15.271237] "GET /EMail/message.aspx?&mailId=3891_62&folderId=947_65&mailPos=0 HTTP/1.1" 200 15809 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VingY6wxQzZrjD9c4owAAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 1319 20560 -% 2360889 8502 313762 36265 3 0 192.168.186.76 CH - [2015-05-23 09:23:24.394654] "GET /EMail/newMessage.aspx?action=reply&mailId=3891_62&folderId=947_65&showPics=false HTTP/1.1" 200 22879 "https://www.example.com/EMail/message.aspx?&mailId=3891_62&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VingbKwxQzZrjD9bX0IAAAAT TLSv1.2 ECDHE-RSA-AES256-SHA384 1367 27786 -% 1182143 7480 127992 44167 6 3 192.168.186.76 CH - [2015-05-23 09:23:25.660976] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_62&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VingbawxQzZrjD9bX0MAAAAW TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 936134 4142 925222 5353 3 0 192.168.186.76 CH - [2015-05-23 09:24:07.056762] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" Vingl6wxQzZrjD9bX0YAAAAZ TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1171712 10069 148952 5250 3 0 192.168.186.76 CH - [2015-05-23 09:29:59.166931] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5879 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_61&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" Vinh96wxQzZrjD9c4sEAAABx TLSv1.2 ECDHE-RSA-AES256-SHA384 1303 13742 -% 947260 6574 0 0 3 0 192.168.186.76 CH - [2015-05-23 09:31:08.013172] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" ViniPKwxQzZrjD9c4tEAAABF TLSv1.2 ECDHE-RSA-AES256-SHA384 1261 13742 -% 1742830 5584 728845 3506 3 0 192.168.186.76 CH - [2015-05-23 09:31:11.759431] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" ViniP6wxQzZrjD9c4tIAAABI TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1257835 7544 248672 152 3 0 192.168.186.76 CH - [2015-05-23 09:31:13.050774] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8539 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" ViniQawxQzZrjD9c4tQAAABH TLSv1.2 ECDHE-RSA-AES256-SHA384 726 9135 -% 1394723 4519 385664 3026 3 0 192.168.186.76 CH - [2015-05-23 09:31:15.060064] "GET /EMail/message.aspx?&mailId=3892_80&folderId=947_65&mailPos=0 HTTP/1.1" 200 16230 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" ViniQ6wxQzZrjD9c4tUAAABJ TLSv1.2 ECDHE-RSA-AES256-SHA384 726 16916 -% 2656976 5140 615597 33904 3 0 192.168.186.76 CH - [2015-05-23 09:31:19.678270] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3892_80&folderId=947_65&attachmentId=3&token=109776283069063258E18 HTTP/1.1" 200 477026 "https://www.example.com/EMail/message.aspx?&mailId=3892_80&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" ViniR6wxQzZrjD9c4tYAAABM TLSv1.2 ECDHE-RSA-AES256-SHA384 806 494992 -% 1653260 9923 40104 222 3 0 192.168.186.76 CH - [2015-05-23 09:31:30.291028] "GET /EMail/newMessage.aspx?action=reply&mailId=3892_80&folderId=947_65&showPics=false HTTP/1.1" 200 23488 "https://www.example.com/EMail/message.aspx?&mailId=3892_80&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" ViniUqwxQzZrjD9c4tcAAABL TLSv1.2 ECDHE-RSA-AES256-SHA384 1292 24479 -% 1462073 8704 377759 40392 6 3 192.168.186.76 CH - [2015-05-23 09:31:32.040605] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5879 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_80&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" ViniVKwxQzZrjD9c4tgAAABK TLSv1.2 ECDHE-RSA-AES256-SHA384 710 9666 -% 992883 6423 0 0 3 0 192.168.186.76 CH - [2015-05-23 09:31:46.236885] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" ViniYqwxQzZrjD9c4twAAABP TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1427984 5372 412208 4825 3 0 192.168.186.76 CH - [2015-05-23 09:31:52.141770] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" ViniaKwxQzZrjD9c4t4AAABU TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1347631 13318 331876 179 3 0 192.168.186.76 CH - [2015-05-23 09:31:53.501678] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7290 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" ViniaawxQzZrjD9c4uAAAABV TLSv1.2 ECDHE-RSA-AES256-SHA384 726 7802 -% 931199 6602 920666 2473 3 0 192.168.18.22 CH - [2015-05-23 09:37:08.360171] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3918 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "4ca63494.522c0adcaafeb" VinjpKwxQzZrjD9c4wsAAABC TLSv1.2 ECDHE-RSA-AES256-SHA384 659 8706 -% 940784 1277 938417 171 0 0 192.168.192.35 CH - [2015-05-23 09:41:57.504540] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" VinkxawxQzZrjD9c4zYAAABq TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 760 11962 -% 1062065 1416 56528 3464 0 0 192.168.192.35 CH - [2015-05-23 09:41:58.620895] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" VinkxqwxQzZrjD9c4zcAAABy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 492 2421 13% 1043906 2896 39130 375 0 0 192.168.192.35 CH - [2015-05-23 09:52:28.592286] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" VinnPKwxQzZrjD9c45wAAABY TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1322 4447 -% 1063807 5764 57071 141 0 0 192.168.192.35 CH - [2015-05-23 09:52:29.678635] "GET /EMail/main.aspx HTTP/1.1" 200 3383 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" VinnPawxQzZrjD9c450AAABb TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 514 3799 -% 938174 2881 932706 1873 0 0 192.168.192.35 CH - [2015-05-23 09:52:30.709094] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" VinnPqwxQzZrjD9c458AAABd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 4128 -% 1119476 2687 104846 11217 0 0 192.168.192.35 CH - [2015-05-23 09:52:30.897700] "GET /EMail/overview.aspx HTTP/1.1" 200 5288 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" VinnPqwxQzZrjD9c46EAAABg TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1134 9736 -% 1069730 2925 63118 2935 0 0 192.168.192.35 CH - [2015-05-23 09:52:30.757843] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" VinnPqwxQzZrjD9c46AAAABf TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1160 13205 -% 1248941 3706 236969 4454 0 0 192.168.192.35 CH - [2015-05-23 09:52:32.057044] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" VinnQKwxQzZrjD9c46MAAABi TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 518 1260 -% 1010201 2896 6399 165 0 0 192.168.192.35 CH - [2015-05-23 09:52:32.007930] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" VinnQKwxQzZrjD9c46IAAABh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 476 1248 -% 1060144 3475 55967 93 0 0 192.168.186.76 CH - [2015-05-23 10:14:12.765440] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinsVKwxQzZrjD9bX-UAAAAM TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 12038 -% 960778 6132 940120 6042 3 0 192.168.186.76 CH - [2015-05-23 10:14:13.772639] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinsVawxQzZrjD9bX-YAAAAQ TLSv1.2 ECDHE-RSA-AES256-SHA384 662 7866 -% 933304 4185 924628 2485 3 0 192.168.186.76 CH - [2015-05-23 10:14:15.641296] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinsV6wxQzZrjD9bX-cAAAAR TLSv1.2 ECDHE-RSA-AES256-SHA384 822 469 -% 1066409 5771 57484 215 3 0 192.168.186.76 CH - [2015-05-23 10:14:16.720232] "GET /EMail/main.aspx HTTP/1.1" 200 3391 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinsWKwxQzZrjD9bX-gAAAAS TLSv1.2 ECDHE-RSA-AES256-SHA384 678 3898 -% 938400 6342 928452 1651 3 0 192.168.186.76 CH - [2015-05-23 10:14:17.708225] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinsWawxQzZrjD9bX-kAAAAP TLSv1.2 ECDHE-RSA-AES256-SHA384 662 4234 -% 997890 4726 980109 11340 3 0 192.168.186.76 CH - [2015-05-23 10:14:17.712346] "GET /EMail/overview.aspx HTTP/1.1" 200 5537 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinsWawxQzZrjD9c5GgAAABr TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 10134 -% 1307031 6038 297635 1746 3 0 192.168.186.76 CH - [2015-05-23 10:14:33.384122] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5879 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_64&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinsaawxQzZrjD9c5G0AAABw TLSv1.2 ECDHE-RSA-AES256-SHA384 1303 13742 -% 970647 9433 0 0 3 0 192.168.186.76 CH - [2015-05-23 10:16:13.681979] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_64&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" VinszawxQzZrjD9c5H4AAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 8305 630 -% 1722065 369189 333617 163 86 0 192.168.186.76 CH - [2015-05-23 10:16:15.415933] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3891_64&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" Vinsz6wxQzZrjD9c5IAAAABF TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 948276 7798 931798 6874 3 0 192.168.186.76 CH - [2015-05-23 10:16:18.306244] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8392 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" Vins0qwxQzZrjD9c5IEAAABG TLSv1.2 ECDHE-RSA-AES256-SHA384 662 8991 -% 1408953 4337 399218 3419 3 0 192.168.27.78 CH - [2015-05-23 10:16:30.290472] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3918 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "a7f6c2ca.522c13a92e228" Vins3qwxQzZrjD9c5IUAAABM TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 572 8400 -% 878272 1349 875727 252 0 0 192.168.192.35 CH - [2015-05-23 10:24:46.391065] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" VinuzqwxQzZrjD9bYBwAAAA3 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1338 4447 -% 947251 4978 941157 248 0 0 192.168.192.35 CH - [2015-05-23 10:24:47.366420] "GET /EMail/main.aspx HTTP/1.1" 200 3383 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" Vinuz6wxQzZrjD9bYB0AAAA4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 3799 -% 862044 1858 858403 1262 0 0 192.168.192.35 CH - [2015-05-23 10:24:48.302548] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" Vinu0KwxQzZrjD9bYB4AAAA2 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 4128 -% 1358535 3058 341376 13378 0 0 192.168.192.35 CH - [2015-05-23 10:24:48.347893] "GET /EMail/overview.aspx HTTP/1.1" 200 5290 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" Vinu0KwxQzZrjD9c5M8AAABV TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1134 9738 -% 1465847 4333 457746 2829 0 0 192.168.192.35 CH - [2015-05-23 10:24:48.343439] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" Vinu0KwxQzZrjD9c5M4AAABX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1160 13205 -% 2088929 3699 79069 2770 0 0 192.168.192.35 CH - [2015-05-23 10:28:29.660977] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" VinvrawxQzZrjD9c5PAAAAB4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1190 13205 -% 1502083 3588 491937 2704 0 0 192.168.192.35 CH - [2015-05-23 10:28:29.648518] "GET /EMail/overview.aspx HTTP/1.1" 200 5291 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" VinvrawxQzZrjD9c5O8AAAB2 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1164 9739 -% 1560497 3336 554805 1684 0 0 192.168.192.35 CH - [2015-05-23 10:28:33.887265] "GET /EMail/inbox.aspx HTTP/1.1" 200 9877 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" VinvsawxQzZrjD9c5PIAAAB8 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 493 10328 -% 1123763 3071 116689 2920 0 0 192.168.192.35 CH - [2015-05-23 10:28:34.113023] "GET /EMail/inbox.aspx HTTP/1.1" 200 9877 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" VinvsqwxQzZrjD9c5PMAAAB5 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 493 10357 -% 1105438 3103 95811 5435 0 0 192.168.192.35 CH - [2015-05-23 10:28:35.333261] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" Vinvs6wxQzZrjD9c5PYAAAB- TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1113 4553 -% 888164 2242 884875 215 0 0 192.168.192.35 CH - [2015-05-23 10:28:35.281636] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" Vinvs6wxQzZrjD9c5PUAAAB7 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 468 539 -% 1040445 2918 36642 164 0 0 192.168.192.35 CH - [2015-05-23 10:28:35.337655] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" Vinvs6wxQzZrjD9c5PcAAAB@ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1113 5839 -% 1070446 2892 66576 138 0 0 192.168.192.35 CH - [2015-05-23 10:28:37.310007] "GET /EMail/message.aspx?&mailId=3891_65&folderId=540_81&mailPos=0 HTTP/1.1" 200 11328 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" VinvtawxQzZrjD9c5PgAAABB TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 534 11809 -% 1495818 4693 453894 36121 0 0 192.168.192.35 CH - [2015-05-23 10:28:37.549839] "GET /EMail/message.aspx?&mailId=3891_65&folderId=540_81&mailPos=0 HTTP/1.1" 200 11262 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" VinvtawxQzZrjD9c5PkAAABA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 534 11743 -% 1365289 6887 338786 18782 0 0 192.168.192.35 CH - [2015-05-23 10:28:42.738884] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3891_65&folderId=540_81&attachmentId=2&token=68958368131294195E17 HTTP/1.1" 200 57508 "https://www.example.com/EMail/message.aspx?&mailId=3891_65&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" VinvuqwxQzZrjD9c5PsAAABE TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 639 59173 -% 1048374 6525 17352 177 0 0 192.168.192.35 CH - [2015-05-23 10:28:43.017484] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3891_65&folderId=540_81&attachmentId=2&token=68958368131294195E17 HTTP/1.1" 200 57508 "https://www.example.com/EMail/message.aspx?&mailId=3891_65&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" Vinvu6wxQzZrjD9bYC0AAAAL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1281 63199 -% 1133360 6086 104166 229 0 0 192.168.192.35 CH - [2015-05-23 10:29:04.312179] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/css/NNstyle.css" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" Vinv0KwxQzZrjD9bYC4AAAAK TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1116 6114 -% 922870 1937 920161 165 0 0 192.168.192.35 CH - [2015-05-23 10:29:05.233281] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3891_65&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" Vinv0awxQzZrjD9c5QEAAABL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1383 4382 -% 953250 4302 948148 176 0 0 192.168.192.35 CH - [2015-05-23 10:29:06.212532] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8577 "https://www.example.com/EMail/message.aspx?&mailId=3891_65&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" Vinv0qwxQzZrjD9bYC8AAAAJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 558 9028 -% 1086926 3751 79481 2779 0 0 192.168.192.35 CH - [2015-05-23 10:29:09.184446] "GET /EMail/message.aspx?&mailId=3892_90&folderId=540_81&mailPos=0 HTTP/1.1" 200 11179 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" Vinv1awxQzZrjD9bYDAAAAAN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 558 11660 -% 1123644 3661 99364 19588 0 0 192.168.192.35 CH - [2015-05-23 10:29:09.428207] "GET /EMail/message.aspx?&mailId=3892_90&folderId=540_81&mailPos=0 HTTP/1.1" 200 11184 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" Vinv1awxQzZrjD9c5QIAAABN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 558 11665 -% 1606802 5294 576971 23511 0 0 192.168.192.35 CH - [2015-05-23 10:29:12.699798] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3892_90&folderId=540_81&attachmentId=2&token=132510699443847782E18 HTTP/1.1" 200 56327 "https://www.example.com/EMail/message.aspx?&mailId=3892_90&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" Vinv2KwxQzZrjD9c5QQAAABR TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 640 57834 -% 955576 6350 939122 170 0 0 192.168.192.35 CH - [2015-05-23 10:29:13.013932] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3892_90&folderId=540_81&attachmentId=2&token=132510699443847782E18 HTTP/1.1" 200 56327 "https://www.example.com/EMail/message.aspx?&mailId=3892_90&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" Vinv2awxQzZrjD9bYDEAAAAM TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1282 61954 -% 860459 6001 843790 137 0 0 192.168.192.35 CH - [2015-05-23 10:29:31.705156] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3892_90&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" Vinv66wxQzZrjD9c5QgAAABW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1383 4382 -% 1230842 5123 224893 133 0 0 192.168.192.35 CH - [2015-05-23 10:29:32.971859] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7277 "https://www.example.com/EMail/message.aspx?&mailId=3892_90&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" Vinv7KwxQzZrjD9c5QkAAABU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 558 7699 -% 1225272 3992 216879 3634 0 0 192.168.192.35 CH - [2015-05-23 10:29:35.949908] "GET /EMail/overview.aspx HTTP/1.1" 200 5289 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" Vinv76wxQzZrjD9c5QsAAABX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 522 5711 -% 1120638 2933 114828 2074 0 0 192.168.192.35 CH - [2015-05-23 10:29:35.992230] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" Vinv76wxQzZrjD9c5QwAAABS TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1115 9322 -% 1446437 3796 435194 3401 0 0 192.168.192.35 CH - [2015-05-23 10:35:42.028960] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" VinxXqwxQzZrjD9bYFQAAAA0 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 916 13205 -% 1089205 4099 78389 2812 0 0 192.168.192.35 CH - [2015-05-23 10:35:46.048440] "GET /EMail/overview.aspx HTTP/1.1" 200 5289 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" VinxYqwxQzZrjD9bYFUAAAA1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 522 5711 -% 3874481 5162 865530 2776 0 0 192.168.81.38 CH - [2015-05-23 10:39:11.649750] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8c192301.522c18ba39704" VinyL6wxQzZrjD9c5VkAAABn TLSv1 ECDHE-RSA-AES256-SHA 847 5721 -% 1120777 3087 116436 426 0 0 192.168.81.38 CH - [2015-05-23 10:39:11.653270] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8c192301.522c18ba39704" VinyL6wxQzZrjD9c5VsAAABm TLSv1 ECDHE-RSA-AES256-SHA 847 8290 23% 1382729 2665 377927 201 0 0 192.168.81.38 CH - [2015-05-23 10:39:11.652576] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8c192301.522c18ba39704" VinyL6wxQzZrjD9c5VoAAABl TLSv1 ECDHE-RSA-AES256-SHA 815 5918 22% 1565381 2783 561210 203 0 0 192.168.81.38 CH - [2015-05-23 10:39:13.301561] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8c192301.522c18ba39704" VinyMawxQzZrjD9c5VwAAABo TLSv1 ECDHE-RSA-AES256-SHA 486 1802 -% 916402 3373 912076 214 0 0 192.168.81.38 CH - [2015-05-23 10:39:14.292345] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8c192301.522c18ba39704" VinyMqwxQzZrjD9c5V0AAABp TLSv1 ECDHE-RSA-AES256-SHA 342 1578 -% 681054 3538 676570 237 0 0 192.168.81.38 CH - [2015-05-23 10:39:17.906082] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8c192301.522c18ba39704" VinyNawxQzZrjD9c5V4AAABs TLSv1 ECDHE-RSA-AES256-SHA 630 421 -% 983810 5555 977321 190 0 0 192.168.81.38 CH - [2015-05-23 10:39:19.002176] "GET /EMail/main.aspx HTTP/1.1" 200 3404 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8c192301.522c18ba39704" VinyN6wxQzZrjD9c5V8AAABt TLSv1 ECDHE-RSA-AES256-SHA 502 3834 -% 950462 3056 945342 1401 0 0 192.168.81.38 CH - [2015-05-23 10:39:20.141486] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8c192301.522c18ba39704" VinyOKwxQzZrjD9c5WEAAABv TLSv1 ECDHE-RSA-AES256-SHA 438 4154 -% 820655 3157 808265 8534 0 0 192.168.81.38 CH - [2015-05-23 10:39:24.278500] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8c192301.522c18ba39704" VinyPKwxQzZrjD9c5WMAAABy TLSv1 ECDHE-RSA-AES256-SHA 454 1818 -% 906195 3029 902200 200 0 0 192.168.81.38 CH - [2015-05-23 10:39:41.297283] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/message.aspx?&mailId=3892_76&folderId=587_1&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8c192301.522c18ba39704" VinyTawxQzZrjD9c5WYAAABu TLSv1 ECDHE-RSA-AES256-SHA 863 6121 -% 884539 3137 880510 176 0 0 192.168.81.38 CH - [2015-05-23 10:39:46.971061] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3892_76&folderId=587_1&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8c192301.522c18ba39704" VinyUqwxQzZrjD9c5WgAAAB1 TLSv1 ECDHE-RSA-AES256-SHA 678 357 -% 1229668 6383 222462 149 0 0 192.168.81.38 CH - [2015-05-23 10:39:48.323494] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7290 "https://www.example.com/EMail/message.aspx?&mailId=3892_76&folderId=587_1&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8c192301.522c18ba39704" VinyVKwxQzZrjD9c5WkAAAB0 TLSv1 ECDHE-RSA-AES256-SHA 534 7722 -% 805779 3862 797692 3411 0 0 192.168.186.76 CH - [2015-05-23 10:51:04.207252] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" Vin0@KwxQzZrjD9c5cYAAABV TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 12038 -% 1042087 4628 33175 2478 3 0 192.168.186.76 CH - [2015-05-23 10:51:05.351615] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" Vin0@awxQzZrjD9c5ccAAABX TLSv1.2 ECDHE-RSA-AES256-SHA384 662 7866 -% 736466 4714 726863 3121 3 0 192.168.186.76 CH - [2015-05-23 10:51:07.889533] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" Vin0@6wxQzZrjD9c5cgAAABS TLSv1.2 ECDHE-RSA-AES256-SHA384 822 469 -% 939824 9085 927525 203 3 0 192.168.186.76 CH - [2015-05-23 10:51:08.843075] "GET /EMail/main.aspx HTTP/1.1" 200 3391 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" Vin0-KwxQzZrjD9c5ckAAABZ TLSv1.2 ECDHE-RSA-AES256-SHA384 678 3898 -% 883077 6424 872966 1824 3 0 192.168.186.76 CH - [2015-05-23 10:51:09.794312] "GET /EMail/overview.aspx HTTP/1.1" 200 5537 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" Vin0-awxQzZrjD9bYJMAAAA3 TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 10134 -% 746609 4211 737288 3029 3 0 192.168.186.76 CH - [2015-05-23 10:51:09.794362] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" Vin0-awxQzZrjD9c5coAAABa TLSv1.2 ECDHE-RSA-AES256-SHA384 662 4234 -% 1378059 4179 365194 7275 3 0 192.168.186.76 CH - [2015-05-23 10:51:44.372919] "GET /EMail/newMessage.aspx?action=reply&mailId=3892_92&folderId=947_65&showPics=false HTTP/1.1" 200 23736 "https://www.example.com/EMail/message.aspx?&mailId=3892_92&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" Vin1IKwxQzZrjD9c5c0AAABb TLSv1.2 ECDHE-RSA-AES256-SHA384 1292 24735 -% 1123094 8552 53598 47821 6 3 192.168.186.76 CH - [2015-05-23 10:51:45.575619] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_92&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" Vin1IawxQzZrjD9c5c4AAABd TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 895826 5823 882228 6037 3 0 192.168.186.76 CH - [2015-05-23 10:51:51.431518] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_92&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" Vin1J6wxQzZrjD9c5dAAAABf TLSv1.2 ECDHE-RSA-AES256-SHA384 8011 469 -% 1584315 412749 159750 221 81 0 192.168.186.76 CH - [2015-05-23 10:51:53.029815] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3892_92&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" Vin1KawxQzZrjD9c5dEAAABe TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 932505 7849 913536 9800 3 0 192.168.186.76 CH - [2015-05-23 10:51:54.636365] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8495 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" Vin1KqwxQzZrjD9c5dMAAABh TLSv1.2 ECDHE-RSA-AES256-SHA384 662 9087 -% 1199085 5374 189153 3045 3 0 192.168.186.76 CH - [2015-05-23 10:51:54.709810] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" Vin1KqwxQzZrjD9c5dQAAABj TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1343214 9087 326595 2852 3 0 192.168.186.76 CH - [2015-05-23 10:51:58.370954] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" Vin1LqwxQzZrjD9c5dUAAABk TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1128124 12988 112529 203 3 0 192.168.186.76 CH - [2015-05-23 10:51:59.510863] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7290 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" Vin1L6wxQzZrjD9c5dYAAABn TLSv1.2 ECDHE-RSA-AES256-SHA384 726 7802 -% 1089983 6579 77495 3722 3 0 192.168.192.35 CH - [2015-05-23 11:00:21.514570] "GET /EMail/overview.aspx HTTP/1.1" 200 5290 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" Vin3JawxQzZrjD9c5iEAAAB1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 890 9738 -% 1204888 2765 199673 1878 0 0 192.168.192.35 CH - [2015-05-23 11:06:40.576707] "GET /EMail/message.aspx?&mailId=3891_67&folderId=540_81&mailPos=0 HTTP/1.1" 200 11326 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" Vin4oKwxQzZrjD9c5lIAAABm TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1200 15833 -% 1154010 5468 126210 21310 0 0 192.168.192.35 CH - [2015-05-23 11:06:40.359898] "GET /EMail/message.aspx?&mailId=3891_67&folderId=540_81&mailPos=0 HTTP/1.1" 200 11328 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" Vin4oKwxQzZrjD9c5lEAAABn TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1200 15835 -% 1376649 3226 350019 22412 0 0 192.168.192.35 CH - [2015-05-23 11:06:48.093056] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3891_67&folderId=540_81&attachmentId=2&token=97041423688618726E17 HTTP/1.1" 200 56589 "https://www.example.com/EMail/message.aspx?&mailId=3891_67&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" Vin4qKwxQzZrjD9c5lUAAABs TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1281 62122 -% 1201292 6076 173036 145 0 0 192.168.192.35 CH - [2015-05-23 11:06:48.337873] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3891_67&folderId=540_81&attachmentId=2&token=97041423688618726E17 HTTP/1.1" 200 56589 "https://www.example.com/EMail/message.aspx?&mailId=3891_67&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" Vin4qKwxQzZrjD9c5lYAAABt TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1281 62122 -% 1188746 4446 161797 180 0 0 192.168.192.35 CH - [2015-05-23 11:07:06.798424] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3891_67&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" Vin4uqwxQzZrjD9c5lgAAABq TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1383 4382 -% 1192752 4346 187634 153 0 0 192.168.192.35 CH - [2015-05-23 11:07:08.026369] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8577 "https://www.example.com/EMail/message.aspx?&mailId=3891_67&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" Vin4vKwxQzZrjD9c5lkAAABy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 558 9028 -% 1153748 2892 147095 3010 0 0 192.168.192.35 CH - [2015-05-23 11:07:10.823076] "GET /EMail/message.aspx?&mailId=3891_66&folderId=540_81&mailPos=0 HTTP/1.1" 200 11179 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" Vin4vqwxQzZrjD9c5loAAABw TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 558 11631 -% 1320468 5309 295638 18360 0 0 192.168.192.35 CH - [2015-05-23 11:07:11.096180] "GET /EMail/message.aspx?&mailId=3891_66&folderId=540_81&mailPos=0 HTTP/1.1" 200 11115 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" Vin4v6wxQzZrjD9c5lsAAABx TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1200 15622 -% 1279455 4769 255288 18229 0 0 192.168.192.35 CH - [2015-05-23 11:07:14.261358] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3891_66&folderId=540_81&attachmentId=2&token=83229783139319936E17 HTTP/1.1" 200 59419 "https://www.example.com/EMail/message.aspx?&mailId=3891_66&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" Vin4wqwxQzZrjD9c5lwAAABz TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 639 61114 -% 1168413 4347 149137 179 0 0 192.168.192.35 CH - [2015-05-23 11:07:14.582693] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3891_66&folderId=540_81&attachmentId=2&token=83229783139319936E17 HTTP/1.1" 200 59419 "https://www.example.com/EMail/message.aspx?&mailId=3891_66&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" Vin4wqwxQzZrjD9c5l0AAAB1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1281 65140 -% 1100651 5199 76049 259 0 0 192.168.192.35 CH - [2015-05-23 11:07:32.782642] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3891_66&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" Vin41KwxQzZrjD9c5mIAAAB8 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1384 4382 -% 1237202 6567 229779 133 0 0 192.168.192.35 CH - [2015-05-23 11:07:34.054296] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7277 "https://www.example.com/EMail/message.aspx?&mailId=3891_66&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" Vin41qwxQzZrjD9c5mMAAAB9 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 558 7699 -% 1014839 3728 7622 2626 0 0 192.168.192.35 CH - [2015-05-23 11:07:37.681854] "GET /EMail/overview.aspx HTTP/1.1" 200 5287 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" Vin42awxQzZrjD9c5mUAAAB- TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 522 5709 -% 1122767 2178 118054 1978 0 0 192.168.192.35 CH - [2015-05-23 11:07:37.732405] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" Vin42awxQzZrjD9c5mYAAAB7 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1190 13205 -% 1496688 3781 485269 3549 0 0 192.168.192.35 CH - [2015-05-23 11:07:39.819729] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" Vin426wxQzZrjD9c5mcAAAB@ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 511 409 -% 676595 3635 672279 175 0 0 192.168.192.35 CH - [2015-05-23 11:07:40.510918] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" Vin43KwxQzZrjD9c5mgAAABB TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 492 676 75% 729424 3149 725094 461 0 0 192.168.192.35 CH - [2015-05-23 11:07:41.297745] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 - - + "b4f89f73.522c0bf06ae1c" Vin43awxQzZrjD9c5mkAAABC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 389 1554 -% 2859 2098 54 119 0 0 192.168.192.35 CH - [2015-05-23 11:07:41.314620] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" Vin43awxQzZrjD9c5moAAABA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 458 318 -% 935120 2570 931932 136 0 0 192.168.192.35 CH - [2015-05-23 11:07:42.270601] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "b4f89f73.522c0bf06ae1c" Vin43qwxQzZrjD9c5msAAABD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 440 7758 -% 982586 2499 975252 4180 0 0 192.168.212.2 CH - [2015-05-23 11:22:21.796805] "GET /EMail/main.aspx HTTP/1.1" 200 3415 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" Vin8TawxQzZrjD9c5vAAAABM TLSv1 ECDHE-RSA-AES256-SHA 872 7670 -% 959984 2677 955563 1161 0 0 192.168.212.2 CH - [2015-05-23 11:22:23.067560] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" Vin8T6wxQzZrjD9c5vEAAABN TLSv1 ECDHE-RSA-AES256-SHA 840 7990 -% 979413 2664 965161 10727 0 0 192.168.212.2 CH - [2015-05-23 11:24:00.451424] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 13774 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" Vin8sKwxQzZrjD9c5wAAAABb TLSv1 ECDHE-RSA-AES256-SHA 840 18112 -% 1196455 4067 184185 6882 0 0 192.168.212.2 CH - [2015-05-23 11:24:00.452205] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" Vin8sKwxQzZrjD9c5wEAAABd TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1551112 3692 540917 2668 0 0 192.168.212.2 CH - [2015-05-23 11:24:26.194316] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" Vin8yqwxQzZrjD9bYRUAAAA- TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1998278 2900 987320 3850 0 0 192.168.212.2 CH - [2015-05-23 11:24:29.444861] "GET /EMail/message.aspx?&mailId=3892_81&folderId=1001_9&mailPos=1 HTTP/1.1" 200 11493 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" Vin8zawxQzZrjD9c5wYAAABk TLSv1 ECDHE-RSA-AES256-SHA 888 15803 -% 1223037 5825 192447 23641 0 0 192.168.212.2 CH - [2015-05-23 11:24:32.045182] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3892_81&folderId=1001_9&attachmentId=2&token=129288297628320461E18 HTTP/1.1" 200 57195 "https://www.example.com/EMail/message.aspx?&mailId=3892_81&folderId=1001_9&mailPos=1" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" Vin80KwxQzZrjD9c5wkAAABo TLSv1 ECDHE-RSA-AES256-SHA 984 62783 -% 1157476 4152 130723 195 0 0 192.168.212.2 CH - [2015-05-23 11:24:55.694378] "GET /EMail/message.aspx?&mailId=3891_63&folderId=1001_9&mailPos=0 HTTP/1.1" 200 11358 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" Vin856wxQzZrjD9bYRYAAAAB TLSv1 ECDHE-RSA-AES256-SHA 888 15675 -% 1515330 5051 487740 21637 0 0 192.168.212.2 CH - [2015-05-23 11:24:58.791409] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3891_63&folderId=1001_9&attachmentId=2&token=85567733183952896E17 HTTP/1.1" 200 54571 "https://www.example.com/EMail/message.aspx?&mailId=3891_63&folderId=1001_9&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" Vin86qwxQzZrjD9c5w4AAABq TLSv1 ECDHE-RSA-AES256-SHA 984 60048 -% 1148944 3961 123326 256 0 0 192.168.212.2 CH - [2015-05-23 11:25:23.757737] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" Vin9A6wxQzZrjD9c5xIAAAB0 TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1282264 4169 271284 2677 0 0 192.168.212.2 CH - [2015-05-23 11:25:36.001306] "GET /EMail/host.html HTTP/1.1" 200 199 "https://www.example.com/EMail/moveToFolder.aspx?folderName=Inbox&mailId=3891_63&mailId=3892_81&mailId=3892_79&mailId=3892_78&mailId=3892_77" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" Vin9EKwxQzZrjD9c5xMAAAB3 TLSv1 ECDHE-RSA-AES256-SHA 936 4539 76% 796379 2112 793228 239 0 0 192.168.212.2 CH - [2015-05-23 11:25:37.069663] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7290 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" Vin9EawxQzZrjD9c5xQAAAB4 TLSv1 ECDHE-RSA-AES256-SHA 840 11558 -% 1223897 3613 217242 2372 0 0 192.168.212.2 CH - [2015-05-23 11:25:38.492279] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" Vin9EqwxQzZrjD9c5xUAAAB6 TLSv1 ECDHE-RSA-AES256-SHA 904 4049 -% 1354325 3062 350496 150 0 0 192.168.157.250 CH - [2015-05-23 11:58:43.042095] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@sabtec.com" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioE06wxQzZrjD9c6C0AAABc TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1116 5897 22% 844868 1922 841822 138 0 0 192.168.157.250 CH - [2015-05-23 11:58:43.076621] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7161 "https://www.example.com/EMail/login.aspx?username=john.smith@sabtec.com" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioE06wxQzZrjD9c6C8AAABg TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1106 11913 22% 811985 2924 806247 132 0 0 192.168.157.250 CH - [2015-05-23 11:58:43.076451] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@sabtec.com" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioE06wxQzZrjD9bYZ0AAAAS TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1111 8117 23% 1022357 3250 17072 191 0 0 192.168.157.250 CH - [2015-05-23 11:58:43.076517] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@sabtec.com" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioE06wxQzZrjD9c6C4AAABY TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1116 4615 56% 1029919 2021 27210 141 0 0 192.168.157.250 CH - [2015-05-23 11:58:43.077074] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioE06wxQzZrjD9bYZ4AAAAP TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1082 5588 -% 1037769 2596 34684 84 0 0 192.168.157.250 CH - [2015-05-23 11:58:44.138058] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/css/NNstyle.css" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioE1KwxQzZrjD9c6DAAAABb TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 468 1792 -% 994167 3105 990090 246 0 0 192.168.157.250 CH - [2015-05-23 12:36:31.989315] "GET /EMail/overview.aspx HTTP/1.1" 200 5287 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioNr6wxQzZrjD9c6ZQAAABR TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1126 9730 -% 1418066 1840 413796 1722 0 0 192.168.157.250 CH - [2015-05-23 12:36:31.973455] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioNr6wxQzZrjD9bYhoAAAAS TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1152 13200 -% 2133583 3028 124234 2637 0 0 192.168.157.250 CH - [2015-05-23 12:36:33.442597] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioNsawxQzZrjD9c6ZUAAABQ TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 468 1248 -% 948051 2882 944151 160 0 0 192.168.157.250 CH - [2015-05-23 12:36:34.136645] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioNsqwxQzZrjD9bYhsAAAAP TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 510 1260 -% 816599 2589 812870 160 0 0 192.168.157.250 CH - [2015-05-23 12:36:38.946577] "GET /EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle HTTP/1.1" 200 9400 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioNtqwxQzZrjD9bYh0AAAAU TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 584 10083 -% 1227857 5188 214990 3213 0 0 192.168.157.250 CH - [2015-05-23 12:36:40.240067] "GET /EMail/images/tree/folder/minus-first-node.gif HTTP/1.1" 200 842 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioNuKwxQzZrjD9bYh4AAAAT TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 555 1254 -% 937206 1960 934512 147 0 0 192.168.157.250 CH - [2015-05-23 12:36:59.366632] "GET /EMail/sent.aspx HTTP/1.1" 200 8454 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioNy6wxQzZrjD9c6ZgAAABW TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1126 12926 -% 1055788 2280 48415 4299 0 0 192.168.157.250 CH - [2015-05-23 12:37:00.486884] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/sent.aspx" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioNzKwxQzZrjD9c6ZkAAABU TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 459 539 -% 989371 1996 986205 389 0 0 192.168.157.250 CH - [2015-05-23 12:37:00.499658] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/sent.aspx" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioNzKwxQzZrjD9c6ZsAAABX TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1029 2016 -% 1081033 1710 78553 163 0 0 192.168.157.250 CH - [2015-05-23 12:37:00.498739] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/sent.aspx" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioNzKwxQzZrjD9c6ZoAAABV TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1029 665 -% 1145661 1856 143082 365 0 0 192.168.157.250 CH - [2015-05-23 12:37:03.736325] "GET /EMail/message.aspx?&mailId=3881_64&folderId=2885_97&mailPos=0 HTTP/1.1" 200 16277 "https://www.example.com/EMail/sent.aspx" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioNz6wxQzZrjD9c6ZwAAABZ TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 526 16758 -% 1417267 4994 380555 30265 0 0 192.168.157.250 CH - [2015-05-23 12:37:24.828198] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8486 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioN5KwxQzZrjD9bYiMAAAAc TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1131 9075 -% 986790 3369 979919 2761 0 0 192.168.157.250 CH - [2015-05-23 12:37:24.829976] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 9409 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioN5KwxQzZrjD9c6aEAAABb TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1148 10230 -% 1370430 3689 357055 5214 0 0 192.168.157.250 CH - [2015-05-23 12:37:27.339624] "GET /EMail/message.aspx?&mailId=3880_62&folderId=2885_96&mailPos=0 HTTP/1.1" 200 21574 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioN56wxQzZrjD9c6aIAAABd TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 536 22113 -% 1271587 4823 221960 42515 0 0 192.168.157.250 CH - [2015-05-23 12:37:33.195185] "GET /EMail/newMessage.aspx?action=reply&mailId=3880_62&folderId=2885_96&showPics=false HTTP/1.1" 200 23239 "https://www.example.com/EMail/message.aspx?&mailId=3880_62&folderId=2885_96&mailPos=0" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioN7awxQzZrjD9c6aQAAABe TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 592 23778 -% 1330747 3124 274024 50005 3 3 192.168.157.250 CH - [2015-05-23 12:37:34.588101] "GET /EMail/scripts/tinymce/tinymce.min.js HTTP/1.1" 200 102835 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3880_62&folderId=2885_96&showPics=false" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioN7qwxQzZrjD9c6aUAAABh TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 508 106043 34% 1047294 3289 10371 170 0 0 192.168.157.250 CH - [2015-05-23 12:37:35.759875] "GET /EMail/scripts/tinymce/langs/de.js HTTP/1.1" 200 2969 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3880_62&folderId=2885_96&showPics=false" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioN76wxQzZrjD9c6agAAABk TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1072 3637 38% 833676 2882 829048 238 0 0 192.168.157.250 CH - [2015-05-23 12:37:35.720813] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2942 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3880_62&folderId=2885_96&showPics=false" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioN76wxQzZrjD9c6acAAABm TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 555 3335 -% 1024068 2871 14480 6084 0 0 192.168.157.250 CH - [2015-05-23 12:37:35.761787] "GET /EMail/scripts/tinymce/plugins/print/plugin.min.js HTTP/1.1" 200 182 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3880_62&folderId=2885_96&showPics=false" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioN76wxQzZrjD9c6aoAAABl TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1088 819 55% 1047828 4105 42636 147 0 0 192.168.157.250 CH - [2015-05-23 12:37:35.760819] "GET /EMail/scripts/tinymce/plugins/preview/plugin.min.js HTTP/1.1" 200 737 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3880_62&folderId=2885_96&showPics=false" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioN76wxQzZrjD9c6akAAABn TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1090 1375 51% 1166109 2910 162100 192 0 0 192.168.157.250 CH - [2015-05-23 12:37:35.761863] "GET /EMail/scripts/tinymce/plugins/paste/plugin.min.js HTTP/1.1" 200 6256 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3880_62&folderId=2885_96&showPics=false" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioN76wxQzZrjD9bYiQAAAAa TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1088 7124 40% 1172256 2628 167737 103 0 0 192.168.157.250 CH - [2015-05-23 12:37:35.762534] "GET /EMail/scripts/tinymce/themes/modern/theme.min.js HTTP/1.1" 200 2651 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3880_62&folderId=2885_96&showPics=false" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioN76wxQzZrjD9bYiUAAAAb TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1087 3319 41% 1293891 2600 289888 155 0 0 192.168.157.250 CH - [2015-05-23 12:37:36.600303] "GET /EMail/scripts/tinymce/plugins/searchreplace/plugin.min.js HTTP/1.1" 200 2586 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3880_62&folderId=2885_96&showPics=false" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioN8KwxQzZrjD9c6asAAABo TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 529 3116 40% 457223 2336 453571 132 0 0 192.168.157.250 CH - [2015-05-23 12:37:36.750191] "GET /EMail/scripts/tinymce/plugins/fullpage/plugin.min.js HTTP/1.1" 200 2325 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3880_62&folderId=2885_96&showPics=false" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioN8KwxQzZrjD9c6awAAABp TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 524 2855 36% 825406 3176 821202 131 0 0 192.168.157.250 CH - [2015-05-23 12:37:37.062261] "GET /EMail/scripts/tinymce/plugins/link/plugin.min.js HTTP/1.1" 200 1835 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3880_62&folderId=2885_96&showPics=false" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioN8awxQzZrjD9c6a8AAABv TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 520 2336 41% 589047 2429 585463 145 0 0 192.168.157.250 CH - [2015-05-23 12:37:36.841011] "GET /EMail/scripts/tinymce/plugins/charmap/plugin.min.js HTTP/1.1" 200 2698 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3880_62&folderId=2885_96&showPics=false" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioN8KwxQzZrjD9c6a0AAABr TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 523 3228 38% 811536 2623 807899 89 0 0 192.168.157.250 CH - [2015-05-23 12:37:36.932089] "GET /EMail/scripts/tinymce/plugins/insertdatetime/plugin.min.js HTTP/1.1" 200 867 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3880_62&folderId=2885_96&showPics=false" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioN8KwxQzZrjD9c6a4AAABt TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 530 1367 42% 1023317 2880 19275 202 0 0 192.168.157.250 CH - [2015-05-23 12:37:36.939772] "GET /EMail/scripts/tinymce/plugins/visualblocks/plugin.min.js HTTP/1.1" 200 525 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3880_62&folderId=2885_96&showPics=false" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioN8KwxQzZrjD9bYiYAAAAd TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 528 1025 43% 1105437 2629 102003 176 0 0 192.168.157.250 CH - [2015-05-23 12:37:37.062255] "GET /EMail/scripts/tinymce/plugins/hr/plugin.min.js HTTP/1.1" 200 191 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3880_62&folderId=2885_96&showPics=false" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioN8awxQzZrjD9bYicAAAAe TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 518 690 53% 992585 2627 988977 166 0 0 192.168.157.250 CH - [2015-05-23 12:37:37.580433] "GET /EMail/scripts/tinymce/plugins/anchor/plugin.min.js HTTP/1.1" 200 339 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3880_62&folderId=2885_96&showPics=false" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioN8awxQzZrjD9c6bAAAABs TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 522 838 63% 618535 1886 615658 299 0 0 192.168.157.250 CH - [2015-05-23 12:37:37.656223] "GET /EMail/scripts/tinymce/plugins/textcolor/plugin.min.js HTTP/1.1" 200 1647 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3880_62&folderId=2885_96&showPics=false" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioN8awxQzZrjD9c6bEAAABq TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 525 2148 44% 832260 2897 828032 192 0 0 192.168.157.250 CH - [2015-05-23 12:37:37.657776] "GET /EMail/scripts/tinymce/plugins/visualchars/plugin.min.js HTTP/1.1" 200 608 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3880_62&folderId=2885_96&showPics=false" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioN8awxQzZrjD9c6bIAAABy TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 527 1108 54% 855969 2793 852283 142 0 0 192.168.157.250 CH - [2015-05-23 12:37:37.960168] "GET /EMail/scripts/tinymce/plugins/image/plugin.min.js HTTP/1.1" 200 2136 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3880_62&folderId=2885_96&showPics=false" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioN8awxQzZrjD9c6bMAAABw TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 521 2666 42% 728652 3397 724095 138 0 0 192.168.157.250 CH - [2015-05-23 12:37:38.049949] "GET /EMail/scripts/tinymce/plugins/table/plugin.min.js HTTP/1.1" 200 9166 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3880_62&folderId=2885_96&showPics=false" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioN8qwxQzZrjD9bYigAAAAf TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 521 9726 32% 887725 2660 882177 158 0 0 192.168.157.250 CH - [2015-05-23 12:37:39.173868] "GET /EMail/scripts/tinymce/skins/lightgray/content.min.css HTTP/1.1" 200 588 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3880_62&folderId=2885_96&showPics=false" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioN86wxQzZrjD9bYikAAAAg TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 540 1081 38% 751304 3352 746982 126 0 0 192.168.157.250 CH - [2015-05-23 12:37:39.169959] "GET /EMail/scripts/tinymce/skins/lightgray/skin.min.css HTTP/1.1" 200 6063 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3880_62&folderId=2885_96&showPics=false" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioN86wxQzZrjD9c6bQAAABu TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 537 6764 17% 968836 2136 962245 164 0 0 192.168.157.250 CH - [2015-05-23 12:37:39.173529] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5887 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3880_62&folderId=2885_96&showPics=false" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioN86wxQzZrjD9c6bUAAABx TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 515 7539 -% 1016560 2288 0 0 0 0 192.168.157.250 CH - [2015-05-23 12:37:40.271379] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce-small.woff HTTP/1.1" 200 7848 "https://www.example.com/EMail/scripts/tinymce/skins/lightgray/skin.min.css" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioN9KwxQzZrjD9c6bYAAAB0 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 562 8276 -% 899395 1901 896644 210 0 0 192.168.157.250 CH - [2015-05-23 12:39:20.439674] "GET /EMail/attachost.aspx HTTP/1.1" 200 4977 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3880_62&folderId=2885_96&showPics=false" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioOWKwxQzZrjD9c6cYAAABE TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1120 5531 -% 1006546 2239 1051 2587 0 0 192.168.157.250 CH - [2015-05-23 12:39:31.986312] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/attachost.aspx" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioOY6wxQzZrjD9c6ckAAABG TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 12490 476 -% 931963 6009 924797 178 0 0 192.168.157.250 CH - [2015-05-23 12:39:32.945394] "GET /EMail/attachost.aspx HTTP/1.1" 200 6441 "https://www.example.com/EMail/attachments.aspx" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioOZKwxQzZrjD9c6coAAABI TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 494 6857 -% 1002593 3049 995314 3425 0 0 192.168.157.250 CH - [2015-05-23 12:40:57.684379] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3880_62&folderId=2885_96&showPics=false" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioOuawxQzZrjD9c6dUAAABW TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 16887 562 -% 2750888 1851442 0 135 83 0 192.168.157.250 CH - [2015-05-23 12:41:00.438667] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4034 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3880_62&folderId=2885_96&showPics=false" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "57e6c122.522c2a80c5953" VioOvKwxQzZrjD9c6dYAAABU TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 639 4456 -% 716058 5092 703459 6834 0 0 192.168.186.76 CH - [2015-05-23 12:54:47.670025] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7359 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cb4b696b.522c370a96509" VioR96wxQzZrjD9c6lAAAABO TLSv1.2 ECDHE-RSA-AES256-SHA384 759 12118 -% 871258 1364 867059 2239 0 0 192.168.186.76 CH - [2015-05-23 12:54:48.640231] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cb4b696b.522c370a96509" VioR@KwxQzZrjD9c6lEAAABT TLSv1.2 ECDHE-RSA-AES256-SHA384 486 2575 14% 1380614 3126 375702 203 0 0 192.168.186.76 CH - [2015-05-23 12:54:48.712414] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cb4b696b.522c370a96509" VioR@KwxQzZrjD9c6lIAAABW TLSv1.2 ECDHE-RSA-AES256-SHA384 1004 896 56% 1428647 3425 423933 291 0 0 192.168.186.76 CH - [2015-05-23 12:54:48.716919] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cb4b696b.522c370a96509" VioR@KwxQzZrjD9c6lMAAABU TLSv1.2 ECDHE-RSA-AES256-SHA384 1036 4756 23% 1466825 2822 462185 159 0 0 192.168.186.76 CH - [2015-05-23 12:54:51.220047] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cb4b696b.522c370a96509" VioR@6wxQzZrjD9c6lQAAABX TLSv1.2 ECDHE-RSA-AES256-SHA384 534 2186 -% 1224610 3251 220506 201 0 0 192.168.186.76 CH - [2015-05-23 12:55:01.147098] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cb4b696b.522c370a96509" VioSBawxQzZrjD9c6lcAAABa TLSv1.2 ECDHE-RSA-AES256-SHA384 1111 13742 -% 2361618 2600 352091 2844 0 0 192.168.186.76 CH - [2015-05-23 12:55:03.532775] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cb4b696b.522c370a96509" VioSB6wxQzZrjD9c6lkAAABg TLSv1.2 ECDHE-RSA-AES256-SHA384 566 1370 -% 1552723 3236 548542 197 0 0 192.168.186.76 CH - [2015-05-23 12:55:06.457050] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cb4b696b.522c370a96509" VioSCqwxQzZrjD9c6loAAABY TLSv1.2 ECDHE-RSA-AES256-SHA384 518 634 -% 2769744 3044 765761 151 0 0 192.168.186.76 CH - [2015-05-23 12:55:09.672374] "GET /EMail/message.aspx?&mailId=3892_94&folderId=947_65&mailPos=0 HTTP/1.1" 200 16253 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cb4b696b.522c370a96509" VioSDawxQzZrjD9c6l0AAABf TLSv1.2 ECDHE-RSA-AES256-SHA384 534 16932 -% 2016722 3341 976506 35389 0 0 192.168.186.76 CH - [2015-05-23 12:59:01.256313] "GET /EMail/main.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "48e6fe1a.522c37fc6d079" VioS9awxQzZrjD9c6n4AAABA TLSv1.2 ECDHE-RSA-AES256-SHA384 823 12118 -% 1066094 3060 59408 2210 3 0 192.168.186.76 CH - [2015-05-23 12:59:02.444217] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "48e6fe1a.522c37fc6d079" VioS9qwxQzZrjD9c6oEAAABG TLSv1.2 ECDHE-RSA-AES256-SHA384 1068 161 56% 794792 4087 788948 240 3 0 192.168.186.76 CH - [2015-05-23 12:59:02.368523] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "48e6fe1a.522c37fc6d079" VioS9qwxQzZrjD9c6oAAAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 550 0 14% 917254 5335 909232 151 3 0 192.168.186.76 CH - [2015-05-23 12:59:02.448341] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "48e6fe1a.522c37fc6d079" VioS9qwxQzZrjD9c6oMAAABF TLSv1.2 ECDHE-RSA-AES256-SHA384 1100 161 23% 999977 5750 991700 160 3 0 192.168.186.76 CH - [2015-05-23 12:59:02.445310] "GET /EMail/scripts/shost.js HTTP/1.1" 200 2305 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "48e6fe1a.522c37fc6d079" VioS9qwxQzZrjD9c6oIAAABD TLSv1.2 ECDHE-RSA-AES256-SHA384 1100 161 26% 1053026 3901 46489 187 3 0 192.168.186.76 CH - [2015-05-23 14:31:19.980031] "GET /EMail/overview.aspx HTTP/1.1" 200 5537 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" Viool6wxQzZrjD9bY9cAAAAi TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 10134 -% 1523690 4245 511888 4761 3 0 192.168.186.76 CH - [2015-05-23 14:31:19.978199] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" Viool6wxQzZrjD9bY9YAAAAj TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1698986 4824 686006 3215 3 0 192.168.186.76 CH - [2015-05-23 14:31:51.704490] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5471 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ad652eca.522bedce394e2" Vioot6wxQzZrjD9c7aoAAABD TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 13326 -% 1061330 6207 0 0 3 0 192.168.120.130 CH - [2015-05-23 14:52:00.296954] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3918 "-" "Microsoft-CryptoAPI/6.3" www.example.com 192.168.34.16 443 proxy-server - + "74272077.522c513d6c3fa" ViotcKwxQzZrjD9c7mQAAABI TLSv1.2 ECDHE-RSA-AES256-SHA384 653 8901 -% 965786 1864 962035 201 0 0 192.168.146.78 CH - [2015-05-23 15:49:15.911697] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7350 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c88b0d76.522bf3741fcff" Vio626wxQzZrjD9c8KAAAABZ TLSv1.2 ECDHE-RSA-AES128-SHA256 751 11795 -% 648125 2662 642232 2476 0 0 192.168.146.78 CH - [2015-05-23 15:49:26.975192] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c88b0d76.522bf3741fcff" Vio65qwxQzZrjD9c8KIAAABU TLSv1.2 ECDHE-RSA-AES128-SHA256 964 630 -% 2125575 5298 119443 171 0 0 192.168.146.78 CH - [2015-05-23 15:49:29.156728] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c88b0d76.522bf3741fcff" Vio66awxQzZrjD9c8KMAAABO TLSv1.2 ECDHE-RSA-AES128-SHA256 534 3882 -% 928294 3656 922599 1144 0 0 192.168.146.78 CH - [2015-05-23 15:49:30.211788] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c88b0d76.522bf3741fcff" Vio66qwxQzZrjD9c8KQAAABS TLSv1.2 ECDHE-RSA-AES128-SHA256 486 4202 -% 881089 3237 870557 6543 0 0 192.168.146.78 CH - [2015-05-23 15:49:30.319296] "GET /EMail/overview.aspx HTTP/1.1" 200 5307 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c88b0d76.522bf3741fcff" Vio66qwxQzZrjD9c8KUAAABc TLSv1.2 ECDHE-RSA-AES128-SHA256 772 5963 -% 1116495 2249 111237 2174 0 0 192.168.146.78 CH - [2015-05-23 15:49:30.287028] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c88b0d76.522bf3741fcff" Vio66qwxQzZrjD9bZPoAAAAW TLSv1.2 ECDHE-RSA-AES128-SHA256 804 9683 -% 1961452 2916 949906 4139 0 0 192.168.146.78 CH - [2015-05-23 15:49:36.686723] "GET /EMail/inbox.aspx HTTP/1.1" 200 52175 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c88b0d76.522bf3741fcff" Vio68KwxQzZrjD9bZPwAAAAZ TLSv1.2 ECDHE-RSA-AES128-SHA256 486 53329 -% 2164128 3007 655454 18634 0 0 192.168.146.78 CH - [2015-05-23 15:49:40.970722] "GET /EMail/message.aspx?&mailId=3891_83&folderId=2634_79&mailPos=0 HTTP/1.1" 200 24460 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c88b0d76.522bf3741fcff" Vio69KwxQzZrjD9bZP0AAAAc TLSv1.2 ECDHE-RSA-AES128-SHA256 534 25198 -% 1329257 3291 271621 49846 0 0 192.168.213.22 CH - [2015-05-23 16:02:59.822904] "GET /EMail/main.aspx HTTP/1.1" 200 3415 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" Vio@E6wxQzZrjD9c8RYAAABJ TLSv1 ECDHE-RSA-AES256-SHA 872 7670 -% 857222 2000 852728 1844 0 0 192.168.213.22 CH - [2015-05-23 16:03:00.928083] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" Vio@FKwxQzZrjD9c8RcAAABK TLSv1 ECDHE-RSA-AES256-SHA 840 7990 -% 954991 2912 940115 11038 0 0 192.168.213.22 CH - [2015-05-23 16:05:23.515836] "GET /EMail/message.aspx?&mailId=3891_76&folderId=1001_9&mailPos=4 HTTP/1.1" 200 11495 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" Vio@o6wxQzZrjD9c8SsAAABm TLSv1 ECDHE-RSA-AES256-SHA 888 15803 -% 1293174 3479 254255 34636 0 0 192.168.213.22 CH - [2015-05-23 16:05:48.572248] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 15075 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" Vio@vKwxQzZrjD9bZUIAAAAg TLSv1 ECDHE-RSA-AES256-SHA 840 19424 -% 1433763 2024 423585 6955 0 0 192.168.213.22 CH - [2015-05-23 16:05:48.571722] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" Vio@vKwxQzZrjD9bZUEAAAAh TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1570289 2480 559083 4609 0 0 192.168.213.22 CH - [2015-05-23 16:05:52.572763] "GET /EMail/message.aspx?&mailId=3892_95&folderId=1001_9&mailPos=3 HTTP/1.1" 200 11488 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" Vio@wKwxQzZrjD9c8S8AAABt TLSv1 ECDHE-RSA-AES256-SHA 888 15824 -% 1477531 5687 447947 22714 0 0 192.168.213.22 CH - [2015-05-23 16:06:16.767248] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" Vio@2KwxQzZrjD9bZUUAAAAk TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1639318 2667 628305 4191 0 0 192.168.213.22 CH - [2015-05-23 16:06:49.914790] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 15059 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" Vio@@awxQzZrjD9c8TcAAABu TLSv1 ECDHE-RSA-AES256-SHA 840 19408 -% 1761212 2664 752181 5238 0 0 192.168.213.22 CH - [2015-05-23 16:06:53.316379] "GET /EMail/message.aspx?&mailId=3891_78&folderId=1001_9&mailPos=1 HTTP/1.1" 200 11495 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" Vio@-awxQzZrjD9c8TgAAAB3 TLSv1 ECDHE-RSA-AES256-SHA 888 15840 -% 1184972 4936 152799 25869 0 0 192.168.213.22 CH - [2015-05-23 16:06:56.415631] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3891_78&folderId=1001_9&attachmentId=2&token=158063687204940262E18 HTTP/1.1" 200 55726 "https://www.example.com/EMail/message.aspx?&mailId=3891_78&folderId=1001_9&mailPos=1" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" Vio-AKwxQzZrjD9bZUoAAAAr TLSv1 ECDHE-RSA-AES256-SHA 984 61216 -% 1116606 4062 90362 235 0 0 192.168.213.22 CH - [2015-05-23 16:07:20.323701] "GET /EMail/message.aspx?&mailId=3892_97&folderId=1001_9&mailPos=0 HTTP/1.1" 200 11361 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" Vio-GKwxQzZrjD9c8T0AAAB9 TLSv1 ECDHE-RSA-AES256-SHA 888 15675 -% 1177450 5070 149674 21672 0 0 192.168.213.22 CH - [2015-05-23 16:07:22.723294] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3892_97&folderId=1001_9&attachmentId=2&token=170820470777811763E18 HTTP/1.1" 200 54374 "https://www.example.com/EMail/message.aspx?&mailId=3892_97&folderId=1001_9&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" Vio-GqwxQzZrjD9c8T4AAAB- TLSv1 ECDHE-RSA-AES256-SHA 984 59856 -% 1094476 7557 65189 201 0 0 192.168.213.22 CH - [2015-05-23 16:07:49.221417] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 15043 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" Vio-NawxQzZrjD9c8UIAAABA TLSv1 ECDHE-RSA-AES256-SHA 840 19392 -% 1338546 2464 328579 6469 0 0 192.168.213.22 CH - [2015-05-23 16:08:03.871537] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7290 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" Vio-Q6wxQzZrjD9c8UUAAABH TLSv1 ECDHE-RSA-AES256-SHA 840 11558 -% 1077863 2209 69227 5634 0 0 192.168.213.22 CH - [2015-05-23 16:08:05.175990] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" Vio-RawxQzZrjD9c8UYAAABE TLSv1 ECDHE-RSA-AES256-SHA 904 4049 -% 1197363 3376 193030 199 0 0 192.168.213.22 CH - [2015-05-23 16:08:21.317545] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7290 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" Vio-VawxQzZrjD9c8UwAAABK TLSv1 ECDHE-RSA-AES256-SHA 840 11558 -% 1136429 2243 129536 4162 0 0 192.168.213.22 CH - [2015-05-23 16:08:21.317023] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" Vio-VawxQzZrjD9c8UsAAABP TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1566539 2707 557135 2821 0 0 192.168.213.22 CH - [2015-05-23 16:08:23.617785] "GET /EMail/sent.aspx?dir=desc HTTP/1.1" 200 50851 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" Vio-V6wxQzZrjD9c8U0AAABV TLSv1 ECDHE-RSA-AES256-SHA 840 55453 -% 2271031 2311 779492 24007 0 0 192.168.213.22 CH - [2015-05-23 16:08:26.117423] "GET /EMail/images/Highprio.gif HTTP/1.1" 200 91 "https://www.example.com/EMail/sent.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" Vio-WqwxQzZrjD9c8U4AAABX TLSv1 ECDHE-RSA-AES256-SHA 856 4342 -% 953132 2064 950342 167 0 0 192.168.213.22 CH - [2015-05-23 16:08:38.470839] "GET /EMail/sent.aspx?dir=desc HTTP/1.1" 200 50852 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" Vio-ZqwxQzZrjD9c8VEAAABS TLSv1 ECDHE-RSA-AES256-SHA 840 55453 -% 2249885 2161 662754 16029 0 0 192.168.213.22 CH - [2015-05-23 16:08:48.622959] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" Vio-cKwxQzZrjD9c8VMAAABb TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1734837 3910 722310 4538 0 0 192.168.213.22 CH - [2015-05-23 16:08:51.773281] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" Vio-c6wxQzZrjD9bZVMAAAA4 TLSv1 ECDHE-RSA-AES256-SHA 856 4257 -% 890718 2356 887679 150 0 0 192.168.213.22 CH - [2015-05-23 16:08:55.124275] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" Vio-d6wxQzZrjD9bZVQAAAA5 TLSv1 ECDHE-RSA-AES256-SHA 904 4049 -% 855044 3236 850659 362 0 0 192.168.213.22 CH - [2015-05-23 16:08:55.126653] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" Vio-d6wxQzZrjD9bZVUAAAA3 TLSv1 ECDHE-RSA-AES256-SHA 904 4049 -% 1040891 2839 37211 192 0 0 192.168.213.22 CH - [2015-05-23 16:08:55.126755] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" Vio-d6wxQzZrjD9c8VQAAABj TLSv1 ECDHE-RSA-AES256-SHA 904 4049 -% 1347918 3231 343707 268 0 0 192.168.213.22 CH - [2015-05-23 16:08:56.664593] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" Vio-eKwxQzZrjD9bZVYAAAA8 TLSv1 ECDHE-RSA-AES256-SHA 952 4049 -% 916923 3223 912670 220 0 0 192.168.202.178 CH - [2015-05-23 16:17:45.749434] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@advo-net.com HTTP/1.1" 200 7918 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "88ebc983.522c6468823ba" VipBiawxQzZrjD9c8ZwAAABo TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 709 12518 -% 916417 1839 909959 3887 0 0 192.168.202.178 CH - [2015-05-23 16:17:46.801978] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@advo-net.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "88ebc983.522c6468823ba" VipBiqwxQzZrjD9c8Z0AAABv TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 497 2421 13% 676798 2552 672500 228 0 0 192.168.202.178 CH - [2015-05-23 16:17:48.431286] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@advo-net.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "88ebc983.522c6468823ba" VipBjKwxQzZrjD9c8Z4AAABt TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 512 1685 -% 681737 1974 678793 346 0 0 192.168.202.178 CH - [2015-05-23 16:19:00.284764] "GET /EMail/registerRecipientWithCertInstall.aspx?emailAddress=john.smith@advo-net.com HTTP/1.1" 200 6897 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "88ebc983.522c6468823ba" VipB1KwxQzZrjD9c8awAAABz TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1143 11334 -% 912958 2571 905237 4495 0 0 192.168.202.178 CH - [2015-05-23 16:19:01.293707] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/registerRecipientWithCertInstall.aspx?emailAddress=john.smith@advo-net.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "88ebc983.522c6468823ba" VipB1awxQzZrjD9c8a0AAAB6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 505 4096 23% 846356 2163 841314 377 0 0 192.168.202.178 CH - [2015-05-23 16:19:10.041769] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/css/NNstyle.css" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "88ebc983.522c6468823ba" VipB3qwxQzZrjD9c8a8AAAB- TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1041 2226 -% 870444 2941 866510 174 0 0 192.168.202.178 CH - [2015-05-23 16:19:15.376280] "POST /EMail/selectMailNS.aspx HTTP/1.1" 200 9408 "https://www.example.com/EMail/registerRecipientWithCertInstall.aspx?emailAddress=john.smith@advo-net.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "88ebc983.522c6468823ba" VipB46wxQzZrjD9c8bAAAAB@ TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 738 9859 -% 759817 6277 747688 4604 0 0 192.168.202.178 CH - [2015-05-23 16:19:41.193796] "POST /EMail/certificatesManualP12Outlook.aspx HTTP/1.1" 200 7165 "https://www.example.com/EMail/selectMailNS.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "88ebc983.522c6468823ba" VipB-awxQzZrjD9c8bcAAABD TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1251 7725 -% 1086177 6205 75424 3805 0 0 192.168.202.178 CH - [2015-05-23 16:20:04.149879] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/certificatesManualP12Outlook.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "88ebc983.522c6468823ba" VipCFKwxQzZrjD9c8bwAAABL TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1323 470 -% 967987 8319 958467 266 0 0 192.168.202.178 CH - [2015-05-23 16:20:05.142505] "GET /EMail/error.aspx HTTP/1.1" 200 3732 "https://www.example.com/EMail/certificatesManualP12Outlook.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "88ebc983.522c6468823ba" VipCFawxQzZrjD9c8b0AAABJ TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 513 4154 -% 1034918 2299 18543 13588 0 0 192.168.202.178 CH - [2015-05-23 16:20:31.400125] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@advo-net.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "88ebc983.522c6468823ba" VipCL6wxQzZrjD9c8cEAAABP TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1366 470 -% 1021672 9031 11777 181 0 0 192.168.202.178 CH - [2015-05-23 16:20:32.447409] "GET /EMail/error.aspx HTTP/1.1" 200 3744 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@advo-net.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "88ebc983.522c6468823ba" VipCMKwxQzZrjD9c8cIAAABT TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 536 4166 -% 921501 2956 907010 10918 0 0 192.168.213.22 CH - [2015-05-23 16:37:40.958244] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" VipGNKwxQzZrjD9bZbcAAAAk TLSv1 ECDHE-RSA-AES256-SHA 1032 4257 -% 1081329 3540 76952 200 0 0 192.168.213.22 CH - [2015-05-23 16:38:47.414205] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" VipGd6wxQzZrjD9c8ngAAABN TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1576065 3870 563860 4289 0 0 192.168.213.22 CH - [2015-05-23 16:38:52.663218] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3891_88&folderId=1001_9&attachmentId=2&token=45866775265508397E17 HTTP/1.1" 200 54989 "https://www.example.com/EMail/message.aspx?&mailId=3891_88&folderId=1001_9&mailPos=1" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" VipGfKwxQzZrjD9c8nkAAABQ TLSv1 ECDHE-RSA-AES256-SHA 984 60480 -% 1147438 4472 120996 259 0 0 192.168.213.22 CH - [2015-05-23 16:39:32.014097] "GET /EMail/message.aspx?&mailId=3891_89&folderId=1001_9&mailPos=0 HTTP/1.1" 200 11359 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" VipGpKwxQzZrjD9c8oEAAABS TLSv1 ECDHE-RSA-AES256-SHA 888 15696 -% 1268651 4724 243749 19190 0 0 192.168.213.22 CH - [2015-05-23 16:39:34.466121] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3891_89&folderId=1001_9&attachmentId=2&token=30816714601762355E17 HTTP/1.1" 200 56329 "https://www.example.com/EMail/message.aspx?&mailId=3891_89&folderId=1001_9&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6213881e.522c2254e8564" VipGpqwxQzZrjD9c8oIAAABa TLSv1 ECDHE-RSA-AES256-SHA 984 61919 -% 1113154 4257 86516 243 0 0 192.168.213.22 CH - [2015-05-23 16:51:54.013686] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 15236 "-" "Mozilla/4.0 (compatible;)" www.example.com 192.168.34.16 443 proxy-server - + "6cb80586.522c6c09e2bf6" VipJiqwxQzZrjD9c8uYAAABD TLSv1.2 AES256-SHA256 839 19551 -% 664253 511 662767 145 0 0 192.168.146.78 CH - [2015-05-23 17:19:29.012634] "GET /EMail/tree.aspx?sNode-sharedTree=treeDrafts HTTP/1.1" 200 7335 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c88b0d76.522bf3741fcff" VipQAawxQzZrjD9c8@AAAABE TLSv1.2 ECDHE-RSA-AES128-SHA256 879 11779 -% 855428 3891 846955 3675 0 0 192.168.146.78 CH - [2015-05-23 17:19:29.037828] "GET /EMail/draftsExternal.aspx?dir=desc HTTP/1.1" 200 7335 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c88b0d76.522bf3741fcff" VipQAawxQzZrjD9c8@EAAABH TLSv1.2 ECDHE-RSA-AES128-SHA256 863 11779 -% 1062669 3897 53996 3702 0 0 192.168.146.78 CH - [2015-05-23 17:19:29.378831] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7335 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c88b0d76.522bf3741fcff" VipQAawxQzZrjD9c8@IAAABF TLSv1.2 ECDHE-RSA-AES128-SHA256 788 8091 -% 1138390 3664 129998 3877 0 0 192.168.146.78 CH - [2015-05-23 17:19:29.418050] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 7335 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c88b0d76.522bf3741fcff" VipQAawxQzZrjD9c8@MAAABR TLSv1.2 ECDHE-RSA-AES128-SHA256 804 8091 -% 1124418 3552 116802 3411 0 0 192.168.146.78 CH - [2015-05-23 17:19:30.644437] "GET /EMail/login.aspx HTTP/1.1" 200 7335 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c88b0d76.522bf3741fcff" VipQAqwxQzZrjD9c8@QAAABJ TLSv1.2 ECDHE-RSA-AES128-SHA256 486 7818 -% 844566 4034 836045 3639 0 0 192.168.146.78 CH - [2015-05-23 17:19:30.771818] "GET /EMail/login.aspx HTTP/1.1" 200 7335 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c88b0d76.522bf3741fcff" VipQAqwxQzZrjD9c8@UAAABN TLSv1.2 ECDHE-RSA-AES128-SHA256 486 7818 -% 994984 3251 987120 3719 0 0 192.168.146.78 CH - [2015-05-23 17:19:33.658136] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c88b0d76.522bf3741fcff" VipQBawxQzZrjD9c8@YAAABQ TLSv1.2 ECDHE-RSA-AES128-SHA256 646 453 -% 956344 3687 951936 219 0 0 192.168.146.78 CH - [2015-05-23 17:19:34.639487] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c88b0d76.522bf3741fcff" VipQBqwxQzZrjD9c8@cAAABP TLSv1.2 ECDHE-RSA-AES128-SHA256 518 3882 -% 862490 3447 857242 1094 0 0 192.168.146.78 CH - [2015-05-23 17:19:35.629387] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c88b0d76.522bf3741fcff" VipQB6wxQzZrjD9c8@kAAABV TLSv1.2 ECDHE-RSA-AES128-SHA256 486 4202 -% 927440 1850 914375 10548 0 0 192.168.146.78 CH - [2015-05-23 17:19:35.694869] "GET /EMail/overview.aspx HTTP/1.1" 200 5305 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c88b0d76.522bf3741fcff" VipQB6wxQzZrjD9bZlsAAAAV TLSv1.2 ECDHE-RSA-AES128-SHA256 772 5963 -% 1031642 2019 25204 3790 0 0 192.168.146.78 CH - [2015-05-23 17:19:35.689226] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c88b0d76.522bf3741fcff" VipQB6wxQzZrjD9c8@oAAABZ TLSv1.2 ECDHE-RSA-AES128-SHA256 804 9683 -% 1863100 2505 851715 4971 0 0 192.168.146.78 CH - [2015-05-23 17:19:44.329619] "GET /EMail/inbox.aspx HTTP/1.1" 200 52165 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c88b0d76.522bf3741fcff" VipQEKwxQzZrjD9c8@wAAABU TLSv1.2 ECDHE-RSA-AES128-SHA256 772 53506 -% 2160915 2653 655151 17906 0 0 192.168.146.78 CH - [2015-05-23 17:21:05.754785] "GET /EMail/message.aspx?&mailId=3880_30&folderId=2634_79&mailPos=19 HTTP/1.1" 200 32139 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c88b0d76.522bf3741fcff" VipQYawxQzZrjD9c8-kAAABk TLSv1.2 ECDHE-RSA-AES128-SHA256 820 33177 -% 1501770 3495 407960 80261 0 0 192.168.9.152 CH - [2015-05-23 17:53:03.334642] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3918 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "67b1403b.522c79b5390f2" VipX36wxQzZrjD9c9R4AAABT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 572 8400 -% 956022 1511 953229 224 0 0 192.168.227.145 CH - [2015-05-23 21:18:15.860881] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7356 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "5d9a1259.522ca7935ce91" ViqH96wxQzZrjD9c-AUAAABr TLSv1.2 ECDHE-RSA-AES256-SHA384 915 11923 -% 1661950 3860 652338 3686 3 0 192.168.227.145 CH - [2015-05-23 21:18:17.958818] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "5d9a1259.522ca7935ce91" ViqH@awxQzZrjD9c-AYAAABy TLSv1.2 ECDHE-RSA-AES256-SHA384 646 2559 13% 1858497 5049 849998 238 3 0 192.168.227.145 CH - [2015-05-23 21:18:18.118635] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "5d9a1259.522ca7935ce91" ViqH@qwxQzZrjD9c-AgAAABq TLSv1.2 ECDHE-RSA-AES256-SHA384 964 4485 23% 2232593 4737 224241 234 3 0 192.168.227.145 CH - [2015-05-23 21:18:18.092668] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "5d9a1259.522ca7935ce91" ViqH@qwxQzZrjD9c-AcAAABs TLSv1.2 ECDHE-RSA-AES256-SHA384 964 2208 22% 2325334 5039 317761 179 3 0 192.168.227.145 CH - [2015-05-23 21:18:18.132817] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "5d9a1259.522ca7935ce91" ViqH@qwxQzZrjD9c-AkAAABw TLSv1.2 ECDHE-RSA-AES256-SHA384 964 928 56% 2708427 4815 701488 159 3 0 192.168.227.145 CH - [2015-05-23 21:18:18.166560] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "5d9a1259.522ca7935ce91" ViqH@qwxQzZrjD9c-AsAAAB0 TLSv1.2 ECDHE-RSA-AES256-SHA384 948 1979 -% 3327062 5255 319648 181 3 0 192.168.227.145 CH - [2015-05-23 21:18:18.144853] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "5d9a1259.522ca7935ce91" ViqH@qwxQzZrjD9c-AoAAABx TLSv1.2 ECDHE-RSA-AES256-SHA384 948 8781 22% 3674549 4725 664524 175 3 0 192.168.227.145 CH - [2015-05-23 21:18:22.494832] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "5d9a1259.522ca7935ce91" ViqH-qwxQzZrjD9c-AwAAAB3 TLSv1.2 ECDHE-RSA-AES256-SHA384 630 1898 -% 948835 5903 940822 175 3 0 192.168.227.145 CH - [2015-05-23 21:18:37.874855] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "5d9a1259.522ca7935ce91" ViqIDawxQzZrjD9c-BAAAAB9 TLSv1.2 ECDHE-RSA-AES256-SHA384 1261 662 -% 2043048 7282 32421 186 3 0 192.168.227.145 CH - [2015-05-23 21:18:40.126823] "GET /EMail/main.aspx HTTP/1.1" 200 3388 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "5d9a1259.522ca7935ce91" ViqIEKwxQzZrjD9c-BEAAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 710 3898 -% 1149443 5017 140555 1806 3 0 192.168.227.145 CH - [2015-05-23 21:18:41.699157] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "5d9a1259.522ca7935ce91" ViqIEawxQzZrjD9c-BIAAABB TLSv1.2 ECDHE-RSA-AES256-SHA384 662 4218 -% 3099985 5365 81475 10711 3 0 192.168.227.145 CH - [2015-05-23 21:18:41.866618] "GET /EMail/overview.aspx HTTP/1.1" 200 5288 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "5d9a1259.522ca7935ce91" ViqIEawxQzZrjD9c-BMAAABC TLSv1.2 ECDHE-RSA-AES256-SHA384 980 5995 -% 3112276 3134 104462 2864 3 0 192.168.227.145 CH - [2015-05-23 21:18:41.884864] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "5d9a1259.522ca7935ce91" ViqIEawxQzZrjD9c-BQAAAB@ TLSv1.2 ECDHE-RSA-AES256-SHA384 996 9843 -% 4712565 3583 700401 3855 3 0 192.168.227.145 CH - [2015-05-23 21:18:45.149081] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "5d9a1259.522ca7935ce91" ViqIFawxQzZrjD9c-BcAAABD TLSv1.2 ECDHE-RSA-AES256-SHA384 614 1354 -% 1592282 5084 585135 184 3 0 192.168.227.145 CH - [2015-05-23 21:18:46.796816] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "5d9a1259.522ca7935ce91" ViqIFqwxQzZrjD9c-BgAAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 662 1370 -% 1932686 4996 925607 231 3 0 192.168.227.145 CH - [2015-05-23 21:18:50.816629] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "5d9a1259.522ca7935ce91" ViqIGqwxQzZrjD9bacEAAAAd TLSv1.2 ECDHE-RSA-AES256-SHA384 996 646 -% 1365709 5562 358141 140 3 0 192.168.227.145 CH - [2015-05-23 21:18:50.634740] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "5d9a1259.522ca7935ce91" ViqIGqwxQzZrjD9c-BkAAABL TLSv1.2 ECDHE-RSA-AES256-SHA384 598 2266 -% 1899951 5047 892700 188 3 0 192.168.227.145 CH - [2015-05-23 21:18:52.372833] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "5d9a1259.522ca7935ce91" ViqIHKwxQzZrjD9bacIAAAAf TLSv1.2 ECDHE-RSA-AES256-SHA384 662 815 75% 1429491 3392 424025 205 3 0 192.168.227.145 CH - [2015-05-23 21:18:54.104772] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "https://www.example.com/EMail/index.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "5d9a1259.522ca7935ce91" ViqIHqwxQzZrjD9bacMAAAAe TLSv1.2 ECDHE-RSA-AES256-SHA384 678 373 -% 1742471 5372 734478 175 3 0 192.168.227.145 CH - [2015-05-23 21:18:56.032755] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "https://www.example.com/EMail/index.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "5d9a1259.522ca7935ce91" ViqIIKwxQzZrjD9bacUAAAAg TLSv1.2 ECDHE-RSA-AES256-SHA384 662 7850 -% 2028440 3465 19078 3988 3 0 192.168.131.224 CH - [2015-05-23 21:57:43.846502] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3918 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "2a36e659.522cb065a6666" ViqRN6wxQzZrjD9c-YcAAABB TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 572 8400 -% 914091 1852 911230 169 0 0 192.168.131.224 CH - [2015-05-23 21:59:26.898760] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3918 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "5c5181e7.522cb0c7eda48" ViqRnqwxQzZrjD9c-ZQAAABN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 572 8400 -% 1060492 1840 57363 143 0 0 192.168.131.224 CH - [2015-05-23 21:59:27.999421] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3918 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "5c5181e7.522cb0c7eda48" ViqRn6wxQzZrjD9c-ZUAAABQ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 328 4411 -% 830965 2364 827614 137 0 0 192.168.65.131 CH - [2015-05-23 22:13:04.691835] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "e8a0c6d9.522cb3d229db5" ViqU0KwxQzZrjD9c-gwAAABR TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1498 11682 22% 861817 9139 847730 165 6 0 192.168.65.131 CH - [2015-05-23 22:13:04.611341] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "e8a0c6d9.522cb3d229db5" ViqU0KwxQzZrjD9c-gsAAABH TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1508 5897 22% 963186 8356 952510 125 6 0 192.168.65.131 CH - [2015-05-23 22:13:04.692650] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "e8a0c6d9.522cb3d229db5" ViqU0KwxQzZrjD9c-g4AAABJ TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1507 5588 -% 894536 8799 883922 118 6 0 192.168.65.131 CH - [2015-05-23 22:13:04.691632] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "e8a0c6d9.522cb3d229db5" ViqU0KwxQzZrjD9banIAAAAX TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1503 8117 23% 908757 9251 896245 201 6 0 192.168.65.131 CH - [2015-05-23 22:13:04.692230] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "e8a0c6d9.522cb3d229db5" ViqU0KwxQzZrjD9c-g0AAABF TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1508 4615 56% 1166744 9010 154714 246 6 0 192.168.65.131 CH - [2015-05-23 22:13:06.545106] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/css/NNstyle.css" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "e8a0c6d9.522cb3d229db5" ViqU0qwxQzZrjD9c-hAAAABN TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 893 1792 -% 1018212 10191 5142 232 6 0 192.168.65.131 CH - [2015-05-23 22:13:34.154471] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/css/NNstyle.css" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "e8a0c6d9.522cb3d229db5" ViqU7qwxQzZrjD9c-hQAAABT TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1533 6109 -% 929137 9392 917557 174 6 0 192.168.65.131 CH - [2015-05-23 22:13:36.259540] "GET /EMail/main.aspx HTTP/1.1" 200 3392 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "e8a0c6d9.522cb3d229db5" ViqU8KwxQzZrjD9c-hYAAABX TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 939 3808 -% 848275 8890 835323 1818 6 0 192.168.65.131 CH - [2015-05-23 22:13:38.197258] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "e8a0c6d9.522cb3d229db5" ViqU8qwxQzZrjD9c-hcAAABO TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 907 4128 -% 952110 10502 932257 7796 6 0 192.168.9.208 CH - [2015-05-24 10:15:56.760982] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3918 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "fd2d7d28.522d5566aa396" Vis@PKwxQzZrjCIdMEwAAAAU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 572 8400 -% 856644 1892 853684 169 0 0 192.168.65.131 CH - [2015-05-24 17:50:35.007248] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "e8a0c6d9.522cb3d229db5" Viuoy6wxQzZrjCIdQxQzZrjl TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 857 7848 -% 985952 10075 970078 3767 6 0 192.168.65.131 CH - [2015-05-24 17:51:00.232619] "GET /EMail/overview.aspx HTTP/1.1" 200 5288 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "e8a0c6d9.522cb3d229db5" Viuo5KwxQzZrjCIdQR8AAAAr TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1551 9731 -% 1209326 9111 194962 3302 6 0 192.168.65.131 CH - [2015-05-24 17:55:27.281378] "GET /EMail/message.aspx?&mailId=3866_99&folderId=3337_53&mailPos=0 HTTP/1.1" 200 14457 "https://www.example.com/EMail/sent.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "e8a0c6d9.522cb3d229db5" Viup76wxQzZrjCIdQUgAAAAV TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1593 18959 -% 1327814 7767 293878 24105 6 0 192.168.65.131 CH - [2015-05-24 17:56:37.792740] "GET /EMail/downloadPDF.aspx HTTP/1.1" 200 4280 "https://www.example.com/EMail/message.aspx?&mailId=3867_22&folderId=3337_52&mailPos=2" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "e8a0c6d9.522cb3d229db5" ViuqNawxQzZrjCIeWSIAAABr TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1600 8723 -% 983840 7157 973906 1391 6 0 192.168.65.131 CH - [2015-05-24 17:56:46.108416] "POST /EMail/MailHandler HTTP/1.1" 200 5161 "https://www.example.com/EMail/message.aspx?&mailId=3867_22&folderId=3337_52&mailPos=2" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "e8a0c6d9.522cb3d229db5" ViuqPqwxQzZrjCIeWSQAAABt TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1703 5802 -% 1379567 15359 361697 135 6 0 192.168.189.117 CH - [2015-05-25 06:48:20.759568] "GET /EMail/login.aspx HTTP/1.1" 200 7335 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; .NET CLR 0.14.88786; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET CLR 1.1.4322; .NET4.0C)" www.example.com 192.168.34.16 443 proxy-server - - "3a6df34c.522e764662810" VixtJKwxQzZrjCzI@28AAABp TLSv1.2 ECDHE-RSA-AES128-SHA256 810 12011 -% 914433 885 908279 4550 0 0 192.168.16.33 CH - [2015-05-25 08:27:14.827016] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3918 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "408802d7.522e8c618d708" ViyEUqwxQzZrjCzI-voAAABR TLSv1.2 ECDHE-RSA-AES256-SHA384 659 8706 -% 959626 2082 956305 195 0 0 192.168.100.68 CH - [2015-05-25 12:54:11.884751] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "19a3789b.522ec80c9becf" VizC46wxQzZrjCzICCoAAABI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 572 8359 -% 960765 1221 958484 192 0 0 192.168.141.7 CH - [2015-05-25 16:48:00.050883] "GET /EMail/main.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko)" www.example.com 192.168.34.16 443 proxy-server - + "2c2194d7.522efc4ee92c3" Viz5sKwxQzZrjCzIEBYAAABv TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 701 11747 -% 990175 721 985010 3693 0 0 192.168.141.7 CH - [2015-05-25 16:48:01.236482] "GET /apple-touch-icon-precomposed.png HTTP/1.1" 404 5087 "-" "Safari/11601.2.7.2 CFNetwork/760.1.2 Darwin/15.0.0 (x86_64)" www.example.com 192.168.34.16 443 - - + "2fe8f0c3.522efc500aa02" Viz5sawxQzZrjCzIEBcAAABw TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 621 10710 -% 1540 543 0 0 0 0 192.168.141.7 CH - [2015-05-25 16:48:01.296772] "GET /apple-touch-icon.png HTTP/1.1" 404 5087 "-" "Safari/11601.2.7.2 CFNetwork/760.1.2 Darwin/15.0.0 (x86_64)" www.example.com 192.168.34.16 443 - - + "2fe8f0c3.522efc500aa02" Viz5sawxQzZrjCzIEBgAAABz TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 299 6738 -% 2135 1196 0 0 0 0 192.168.141.7 CH - [2015-05-25 16:48:01.346955] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Safari/11601.2.7.2 CFNetwork/760.1.2 Darwin/15.0.0 (x86_64)" www.example.com 192.168.34.16 443 proxy-server - + "f5b44367.522efc502598b" Viz5sawxQzZrjCzIEBkAAABx TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 515 1868 -% 1085878 408 84666 162 0 0 192.168.141.7 CH - [2015-05-25 16:48:02.561331] "GET /EMail/main.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B410 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "b6e4ab89.522efc514e133" Viz5sqwxQzZrjCzIEBoAAAB0 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 394 7921 -% 988325 715 984112 2805 0 0 192.168.141.7 CH - [2015-05-25 16:48:03.675023] "GET /apple-touch-icon-precomposed.png HTTP/1.1" 404 5087 "-" "Safari/11601.2.7.2 CFNetwork/760.1.2 Darwin/15.0.0 (x86_64)" www.example.com 192.168.34.16 443 - - + "f5b44367.522efc502598b" Viz5s6wxQzZrjCzIEBsAAABy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 311 6738 -% 2897 1628 0 0 0 0 192.168.141.7 CH - [2015-05-25 16:48:03.770498] "GET /apple-touch-icon.png HTTP/1.1" 404 5087 "-" "Safari/11601.2.7.2 CFNetwork/760.1.2 Darwin/15.0.0 (x86_64)" www.example.com 192.168.34.16 443 - - + "f5b44367.522efc502598b" Viz5s6wxQzZrjCzIEBwAAAB1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 299 6738 -% 3170 1774 0 0 0 0 192.168.32.132 CH - [2015-05-25 17:33:39.462980] "GET /EMail/login.aspx?username=john.smith@businesscampaigning.com HTTP/1.1" 200 7375 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "b9064253.522f06836af44" Vi0EY6wxQzZrjCzIEacAAABP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1049 11786 -% 1277128 7423 265880 2224 6 0 192.168.32.132 CH - [2015-05-25 17:33:40.959135] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@businesscampaigning.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "b9064253.522f06836af44" Vi0EZKwxQzZrjCzIEawAAABU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1035 4234 23% 942971 9988 929476 255 6 0 192.168.32.132 CH - [2015-05-25 17:33:40.947918] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@businesscampaigning.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "b9064253.522f06836af44" Vi0EZKwxQzZrjCzIEaoAAABW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1040 2014 22% 976046 9939 964337 93 6 0 192.168.32.132 CH - [2015-05-25 17:33:40.897169] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/login.aspx?username=john.smith@businesscampaigning.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "b9064253.522f06836af44" Vi0EZKwxQzZrjCzIEagAAABR TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 787 2545 14% 1030336 10998 16731 90 6 0 192.168.32.132 CH - [2015-05-25 17:33:40.943796] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@businesscampaigning.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "b9064253.522f06836af44" Vi0EZKwxQzZrjCzIEakAAABQ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1040 732 56% 1011956 9763 444 89 6 0 192.168.32.132 CH - [2015-05-25 17:33:40.950156] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7239 "https://www.example.com/EMail/login.aspx?username=john.smith@businesscampaigning.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "b9064253.522f06836af44" Vi0EZKwxQzZrjCzIEasAAABV TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1030 8179 22% 1006072 10312 0 95 6 0 192.168.32.132 CH - [2015-05-25 17:33:42.001501] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@businesscampaigning.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "b9064253.522f06836af44" Vi0EZqwxQzZrjCzIEa0AAABS TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 772 1685 -% 919267 9789 907462 222 6 0 192.168.32.132 CH - [2015-05-25 17:33:42.014856] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@businesscampaigning.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "b9064253.522f06836af44" Vi0EZqwxQzZrjCzIEa4AAABT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 776 1792 -% 910357 9520 898772 315 6 0 192.168.32.132 CH - [2015-05-25 17:33:43.243915] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "https://www.example.com/EMail/login.aspx?username=john.smith@businesscampaigning.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "b9064253.522f06836af44" Vi0EZ6wxQzZrjCzHR14AAAAP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1341 1705 -% 893737 8656 882633 171 6 0 192.168.32.132 CH - [2015-05-25 17:33:46.522445] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@businesscampaigning.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "b9064253.522f06836af44" Vi0EaqwxQzZrjCzIEa8AAABX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 774 2088 -% 891092 9951 879312 180 6 0 192.168.32.132 CH - [2015-05-25 17:33:47.311818] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@businesscampaigning.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "b9064253.522f06836af44" Vi0Ea6wxQzZrjCzIEbAAAABa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1047 421 -% 1311683 12390 296803 194 6 0 192.168.32.132 CH - [2015-05-25 17:33:48.990677] "GET /EMail/main.aspx HTTP/1.1" 200 3407 "https://www.example.com/EMail/login.aspx?username=john.smith@businesscampaigning.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "b9064253.522f06836af44" Vi0EbKwxQzZrjCzIEbEAAABZ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 856 3823 -% 967276 8586 956077 1097 6 0 192.168.32.132 CH - [2015-05-25 17:33:50.466124] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "b9064253.522f06836af44" Vi0EbqwxQzZrjCzIEbIAAABc TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 777 4128 -% 948054 10008 926662 9911 6 0 192.168.32.132 CH - [2015-05-25 17:33:50.501002] "GET /EMail/overview.aspx HTTP/1.1" 200 5286 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "b9064253.522f06836af44" Vi0EbqwxQzZrjCzIEbQAAABe TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1034 5846 -% 1549355 9851 536383 1713 6 0 192.168.32.132 CH - [2015-05-25 17:33:50.495850] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "b9064253.522f06836af44" Vi0EbqwxQzZrjCzIEbMAAABb TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1060 9317 -% 1673482 10730 653068 4498 6 0 192.168.32.132 CH - [2015-05-25 17:33:52.489801] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "b9064253.522f06836af44" Vi0EcKwxQzZrjCzIEbUAAABf TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 733 1248 -% 901790 7140 892208 170 6 0 192.168.32.132 CH - [2015-05-25 17:33:52.598655] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "b9064253.522f06836af44" Vi0EcKwxQzZrjCzIEbYAAABg TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 775 1260 -% 821646 10246 809407 123 6 0 192.168.32.132 CH - [2015-05-25 17:34:19.540614] "GET /EMail/overview.aspx HTTP/1.1" 200 5286 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "b9064253.522f06836af44" Vi0Ei6wxQzZrjCzIEbsAAABm TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1376 5846 -% 1107670 5927 97783 1985 6 0 192.168.32.132 CH - [2015-05-25 17:34:19.571373] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "b9064253.522f06836af44" Vi0Ei6wxQzZrjCzIEbwAAABj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1090 9317 -% 1338749 10491 320978 2720 6 0 192.168.32.132 CH - [2015-05-25 17:34:23.756584] "GET /EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle HTTP/1.1" 200 9400 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "b9064253.522f06836af44" Vi0Ej6wxQzZrjCzIEb4AAABn TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 879 10083 -% 1345184 11957 323109 4863 6 0 192.168.32.132 CH - [2015-05-25 17:34:25.377428] "GET /EMail/images/tree/folder/pixel.gif HTTP/1.1" 200 807 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "b9064253.522f06836af44" Vi0EkawxQzZrjCzIEcAAAABo TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 809 1219 -% 780142 9713 768290 229 6 0 192.168.32.132 CH - [2015-05-25 17:34:25.413169] "GET /EMail/images/tree/folder/vertical-sign.gif HTTP/1.1" 200 811 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "b9064253.522f06836af44" Vi0EkawxQzZrjCzIEcEAAABq TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1072 1361 -% 802769 9810 791085 125 6 0 192.168.32.132 CH - [2015-05-25 17:34:25.377371] "GET /EMail/images/tree/folder/minus-first-node.gif HTTP/1.1" 200 842 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "b9064253.522f06836af44" Vi0EkawxQzZrjCzIEb8AAABp TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 820 1254 -% 996977 6946 987932 181 6 0 192.168.32.132 CH - [2015-05-25 17:34:27.002512] "GET /EMail/tree.aspx?oNode-sharedTree=treePreferences&sNode-sharedTree=treePreferences HTTP/1.1" 200 11742 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "b9064253.522f06836af44" Vi0Ek6wxQzZrjCzIEcMAAABs TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 915 12513 -% 1389150 11757 363788 6113 6 0 192.168.32.132 CH - [2015-05-25 17:34:27.913236] "GET /EMail/tree.aspx?oNode-sharedTree=treePreferences&sNode-sharedTree=treePreferences HTTP/1.1" 200 11742 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "b9064253.522f06836af44" Vi0Ek6wxQzZrjCzIEcQAAABt TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 915 12513 -% 1364582 12480 338796 6229 6 0 192.168.32.132 CH - [2015-05-25 17:34:29.456494] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "b9064253.522f06836af44" Vi0ElawxQzZrjCzIEcUAAABv TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 726 2088 -% 969703 5791 962273 190 6 0 192.168.32.132 CH - [2015-05-25 17:34:32.407519] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "b9064253.522f06836af44" Vi0EmKwxQzZrjCzIEcYAAABw TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 798 409 -% 980762 10350 968301 200 6 0 192.168.32.132 CH - [2015-05-25 17:34:33.536761] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "b9064253.522f06836af44" Vi0EmawxQzZrjCzIEcgAAABx TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 779 676 75% 880217 9778 868009 293 6 0 192.168.32.132 CH - [2015-05-25 17:34:34.656629] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "https://www.example.com/EMail/index.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "b9064253.522f06836af44" Vi0EmqwxQzZrjCzIEckAAAB0 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 796 318 -% 1188278 15954 170095 181 6 0 192.168.32.132 CH - [2015-05-25 17:34:35.869459] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "https://www.example.com/EMail/index.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "b9064253.522f06836af44" Vi0Em6wxQzZrjCzIEcoAAABy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 778 7758 -% 821643 9806 806237 3614 6 0 192.168.14.106 CH - [2015-05-25 19:02:28.240801] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "Microsoft-CryptoAPI/6.1" www.example.com 192.168.34.16 443 proxy-server - + "bc231374.522f1a5d561a1" Vi0ZNKwxQzZrjCzIFMYAAABK TLSv1 ECDHE-RSA-AES256-SHA 533 8384 -% 884990 1209 882826 211 0 0 192.168.233.185 CH - [2015-05-25 20:24:00.132134] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_0 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A344 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "2751737a.522f2c969b826" Vi0sUKwxQzZrjCzIF4cAAABm TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 712 7921 -% 1137096 7756 123725 3649 6 0 192.168.176.131 CH - [2015-05-25 20:55:56.918337] "GET /EMail/MailHandler?service=createCRL HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "fae1df98.522f33ba98e41" Vi0zzKwxQzZrjCzIGKUAAABP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 560 8359 -% 897595 1381 894985 228 0 0 192.168.144.21 CH - [2015-05-26 06:12:53.335892] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7369 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a18b890.522fb036f9f54" Vi22VawxQzZrjFreDBIAAABz TLSv1.2 ECDHE-RSA-AES256-SHA384 726 11939 -% 1526510 1477 520590 3696 0 0 192.168.144.21 CH - [2015-05-26 06:12:54.937490] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a18b890.522fb036f9f54" Vi22VqwxQzZrjFreDBMAAAB1 TLSv1.2 ECDHE-RSA-AES256-SHA384 486 2575 14% 970958 1966 967218 206 0 0 192.168.144.21 CH - [2015-05-26 06:12:54.985406] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a18b890.522fb036f9f54" Vi22VqwxQzZrjFreDBYAAAB3 TLSv1.2 ECDHE-RSA-AES256-SHA384 795 928 56% 1115623 1708 113105 139 0 0 192.168.144.21 CH - [2015-05-26 06:12:54.983823] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a18b890.522fb036f9f54" Vi22VqwxQzZrjFreDBUAAAB2 TLSv1.2 ECDHE-RSA-AES256-SHA384 827 8781 22% 1163958 2376 157804 152 0 0 192.168.144.21 CH - [2015-05-26 06:12:54.985589] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a18b890.522fb036f9f54" Vi22VqwxQzZrjFrdQVAAAAAf TLSv1.2 ECDHE-RSA-AES256-SHA384 827 4485 23% 1168526 1674 164888 198 0 0 192.168.144.21 CH - [2015-05-26 06:12:54.983003] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a18b890.522fb036f9f54" Vi22VqwxQzZrjFreDBQAAAB0 TLSv1.2 ECDHE-RSA-AES256-SHA384 795 2208 22% 1201979 3464 197164 155 0 0 192.168.144.21 CH - [2015-05-26 06:12:55.004064] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a18b890.522fb036f9f54" Vi22V6wxQzZrjFreDBcAAAB4 TLSv1.2 ECDHE-RSA-AES256-SHA384 827 1979 -% 1638639 1675 636336 141 0 0 192.168.144.21 CH - [2015-05-26 06:12:56.299546] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a18b890.522fb036f9f54" Vi22WKwxQzZrjFreDBgAAAB5 TLSv1.2 ECDHE-RSA-AES256-SHA384 534 1898 -% 1139733 3259 135622 147 0 0 192.168.144.21 CH - [2015-05-26 06:12:57.171960] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "4a18b890.522fb036f9f54" Vi22WawxQzZrjFreDBkAAAB6 TLSv1.2 ECDHE-RSA-AES256-SHA384 534 0 -% 978039 3046 974194 141 0 0 192.168.144.21 CH - [2015-05-26 06:12:57.650515] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a18b890.522fb036f9f54" Vi22WawxQzZrjFreDBoAAAB9 TLSv1.2 ECDHE-RSA-AES256-SHA384 662 469 -% 1770197 5586 763652 203 0 0 192.168.144.21 CH - [2015-05-26 06:12:59.434626] "GET /EMail/main.aspx HTTP/1.1" 200 3401 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a18b890.522fb036f9f54" Vi22W6wxQzZrjFreDBsAAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 534 3914 -% 954089 3032 948427 1824 0 0 192.168.144.21 CH - [2015-05-26 06:13:00.461990] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a18b890.522fb036f9f54" Vi22XKwxQzZrjFreDBwAAAB8 TLSv1.2 ECDHE-RSA-AES256-SHA384 470 4234 -% 1246812 3115 236805 6216 0 0 192.168.144.21 CH - [2015-05-26 06:13:00.466112] "GET /EMail/overview.aspx HTTP/1.1" 200 5300 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a18b890.522fb036f9f54" Vi22XKwxQzZrjFreDB0AAAB@ TLSv1.2 ECDHE-RSA-AES256-SHA384 470 5818 -% 1731185 2722 726057 1739 0 0 192.168.144.21 CH - [2015-05-26 06:13:00.464207] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a18b890.522fb036f9f54" Vi22XKwxQzZrjFrdQVEAAAAg TLSv1.2 ECDHE-RSA-AES256-SHA384 502 9666 -% 2158710 3821 147759 3132 0 0 192.168.144.21 CH - [2015-05-26 06:13:02.234636] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a18b890.522fb036f9f54" Vi22XqwxQzZrjFreDB8AAABA TLSv1.2 ECDHE-RSA-AES256-SHA384 502 1354 -% 1416160 2773 412394 260 0 0 192.168.144.21 CH - [2015-05-26 06:13:02.668683] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a18b890.522fb036f9f54" Vi22XqwxQzZrjFrdQVIAAAAh TLSv1.2 ECDHE-RSA-AES256-SHA384 550 1370 -% 1404187 2758 400666 146 0 0 192.168.144.21 CH - [2015-05-26 06:13:03.739695] "GET /EMail/inbox.aspx HTTP/1.1" 200 8595 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a18b890.522fb036f9f54" Vi22X6wxQzZrjFreDCEAAABC TLSv1.2 ECDHE-RSA-AES256-SHA384 486 9199 -% 1385239 3023 374916 6202 0 0 192.168.144.21 CH - [2015-05-26 06:13:05.191423] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a18b890.522fb036f9f54" Vi22YawxQzZrjFreDCMAAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 502 1914 -% 1112247 1973 109557 198 0 0 192.168.144.21 CH - [2015-05-26 06:13:05.190244] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a18b890.522fb036f9f54" Vi22YawxQzZrjFreDCIAAABD TLSv1.2 ECDHE-RSA-AES256-SHA384 502 634 -% 1240468 2318 237467 161 0 0 192.168.144.21 CH - [2015-05-26 06:13:05.190847] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a18b890.522fb036f9f54" Vi22YawxQzZrjFrdQVMAAAAj TLSv1.2 ECDHE-RSA-AES256-SHA384 502 634 -% 1263520 2903 259338 157 0 0 192.168.144.21 CH - [2015-05-26 06:13:07.660008] "GET /EMail/message.aspx?&mailId=3891_94&folderId=1094_6&mailPos=0 HTTP/1.1" 200 13016 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a18b890.522fb036f9f54" Vi22Y6wxQzZrjFrdQVQAAAAi TLSv1.2 ECDHE-RSA-AES256-SHA384 518 13700 -% 1823630 5001 813116 4091 0 0 192.168.144.21 CH - [2015-05-26 06:13:11.047300] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3891_94&folderId=1094_6&attachmentId=2&token=25979506800035246E18 HTTP/1.1" 200 3584 "https://www.example.com/EMail/message.aspx?&mailId=3891_94&folderId=1094_6&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a18b890.522fb036f9f54" Vi22Z6wxQzZrjFrdQVUAAAAk TLSv1.2 ECDHE-RSA-AES256-SHA384 630 4345 -% 1057610 6305 47392 193 0 0 192.168.144.21 CH - [2015-05-26 06:13:41.134227] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/message.aspx?&mailId=3891_94&folderId=1094_6&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a18b890.522fb036f9f54" Vi22hawxQzZrjFreDCoAAABK TLSv1.2 ECDHE-RSA-AES256-SHA384 843 2379 -% 1059236 4060 54099 126 0 0 192.168.144.21 CH - [2015-05-26 06:13:42.134492] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3891_94&folderId=1094_6&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a18b890.522fb036f9f54" Vi22hqwxQzZrjFreDCsAAABM TLSv1.2 ECDHE-RSA-AES256-SHA384 1035 598 -% 1672281 6424 665020 175 0 0 192.168.144.21 CH - [2015-05-26 06:13:43.819734] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7290 "https://www.example.com/EMail/message.aspx?&mailId=3891_94&folderId=1094_6&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a18b890.522fb036f9f54" Vi22h6wxQzZrjFreDC0AAABO TLSv1.2 ECDHE-RSA-AES256-SHA384 566 7802 -% 1733265 2414 727849 2459 0 0 192.168.151.242 CH - [2015-05-26 07:15:06.139608] "GET /EMail/MailHandler?service=createCRL HTTP/1.1" 200 3877 "-" "Microsoft-CryptoAPI/6.1" www.example.com 192.168.34.16 443 proxy-server - + "b2dc5b19.522fbe1edafd8" Vi3E6qwxQzZrjFreDnUAAABk TLSv1.2 DHE-RSA-AES256-GCM-SHA384 734 9001 -% 910836 1494 907994 194 0 0 192.168.146.78 CH - [2015-05-26 07:17:10.216918] "GET /EMail/main.aspx HTTP/1.1" 200 7335 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "de4cad78.522fbe952f4d6" Vi3FZqwxQzZrjFreDo0AAAB@ TLSv1.2 ECDHE-RSA-AES128-SHA256 687 11859 -% 868666 629 863490 3838 0 0 192.168.146.78 CH - [2015-05-26 07:17:11.108903] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "de4cad78.522fbe952f4d6" Vi3FZ6wxQzZrjFreDo4AAABA TLSv1.2 ECDHE-RSA-AES128-SHA256 470 2527 14% 991248 2749 986713 194 0 0 192.168.146.78 CH - [2015-05-26 07:17:13.353171] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d7e275ef.522fbe982cfd3" Vi3FaawxQzZrjFreDo8AAABC TLSv1.2 ECDHE-RSA-AES128-SHA256 623 5651 -% 1080028 783 78307 157 0 0 192.168.146.78 CH - [2015-05-26 07:22:40.109410] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "d7e275ef.522fbe982cfd3" Vi3GsKwxQzZrjFreDrwAAABw TLSv1.2 ECDHE-RSA-AES128-SHA256 687 5475 -% 2952 2103 56 119 0 0 192.168.186.76 CH - [2015-05-26 07:29:31.927038] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3818c790.522fc1575cb09" Vi3IS6wxQzZrjFreDvgAAABt TLSv1.2 ECDHE-RSA-AES256-SHA384 1063 8368 23% 858661 4585 850897 204 3 0 192.168.186.76 CH - [2015-05-26 07:29:31.926391] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3818c790.522fc1575cb09" Vi3IS6wxQzZrjFreDvcAAABs TLSv1.2 ECDHE-RSA-AES256-SHA384 1031 4811 56% 964891 5065 957845 134 3 0 192.168.186.76 CH - [2015-05-26 07:29:38.639250] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3818c790.522fc1575cb09" Vi3IUqwxQzZrjFreDvsAAABw TLSv1.2 ECDHE-RSA-AES256-SHA384 1196 2059 -% 944440 4185 938106 180 3 0 192.168.186.76 CH - [2015-05-26 07:29:41.254323] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "fdff5c7a.522fc1616e0b3" Vi3IVawxQzZrjFreDvwAAABx TLSv1.2 ECDHE-RSA-AES256-SHA384 711 5894 -% 853065 642 851661 170 0 0 192.168.206.223 CH - [2015-05-26 07:35:40.444902] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "81518155.522fc2b7fb0e6" Vi3JvKwxQzZrjFreDzIAAABr TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 572 8359 -% 914720 3271 909619 159 0 0 192.168.169.43 CH - [2015-05-26 07:36:23.031385] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7368 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a49d67c2.522fc2e098259" Vi3J56wxQzZrjFrdQk4AAAAr TLSv1.2 ECDHE-RSA-AES256-SHA384 733 11939 -% 841067 1797 835764 2642 0 0 192.168.169.43 CH - [2015-05-26 07:36:24.033349] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a49d67c2.522fc2e098259" Vi3J6KwxQzZrjFrdQk8AAAAs TLSv1.2 ECDHE-RSA-AES256-SHA384 502 2793 14% 1030986 2232 27098 387 0 0 192.168.169.43 CH - [2015-05-26 07:36:26.640011] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ee0a6b00.522fc2e40928b" Vi3J6qwxQzZrjFrdQlAAAAAt TLSv1.2 ECDHE-RSA-AES256-SHA384 653 5699 -% 939053 634 937578 203 0 0 192.168.169.43 CH - [2015-05-26 07:40:41.762116] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "ee0a6b00.522fc2e40928b" Vi3K6awxQzZrjFreD18AAABa TLSv1.2 ECDHE-RSA-AES256-SHA384 642 1835 -% 2148 1467 43 99 0 0 192.168.146.78 CH - [2015-05-26 08:08:49.636560] "GET /EMail/login.aspx HTTP/1.1" 200 7322 "-" "Microsoft Windows Network Diagnostics" www.example.com 192.168.34.16 443 proxy-server - + "568cc13b.522fca21058d0" Vi3RgawxQzZrjFrdQr8AAAAh TLSv1 ECDHE-RSA-AES256-SHA 203 7914 -% 991788 629 986085 4311 0 0 192.168.32.7 CH - [2015-05-26 08:37:03.646516] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3YH6wxQzZrjFreEVoAAABm TLSv1.2 ECDHE-RSA-AES128-SHA256 755 11875 -% 1066350 1974 59825 2566 3 0 192.168.32.7 CH - [2015-05-26 08:37:04.817816] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3YIKwxQzZrjFreEVsAAABn TLSv1.2 ECDHE-RSA-AES128-SHA256 534 2527 14% 951479 5666 943414 150 3 0 192.168.32.7 CH - [2015-05-26 08:37:04.851030] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3YIKwxQzZrjFreEVwAAABp TLSv1.2 ECDHE-RSA-AES128-SHA256 856 4660 23% 965023 3752 958597 144 3 0 192.168.32.7 CH - [2015-05-26 08:37:04.857162] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3YIKwxQzZrjFreEV4AAABo TLSv1.2 ECDHE-RSA-AES128-SHA256 824 864 56% 994871 3281 989510 163 3 0 192.168.32.7 CH - [2015-05-26 08:37:04.858580] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3YIKwxQzZrjFrdQyIAAAAJ TLSv1.2 ECDHE-RSA-AES128-SHA256 856 1931 -% 1124707 3268 120045 133 3 0 192.168.32.7 CH - [2015-05-26 08:37:04.855871] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3YIKwxQzZrjFreEV0AAABq TLSv1.2 ECDHE-RSA-AES128-SHA256 840 8573 22% 1160408 4988 148611 210 3 0 192.168.32.7 CH - [2015-05-26 08:37:04.861881] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3YIKwxQzZrjFreEV8AAABk TLSv1.2 ECDHE-RSA-AES128-SHA256 824 2144 22% 1345321 3155 339614 181 3 0 192.168.32.7 CH - [2015-05-26 08:37:06.314837] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3YIqwxQzZrjFreEWAAAABr TLSv1.2 ECDHE-RSA-AES128-SHA256 566 1866 -% 901398 3160 895600 263 3 0 192.168.32.7 CH - [2015-05-26 08:37:25.567097] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3YNawxQzZrjFreEWIAAABs TLSv1.2 ECDHE-RSA-AES128-SHA256 856 2331 -% 904652 4484 898472 144 3 0 192.168.32.7 CH - [2015-05-26 08:37:28.952297] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3YOKwxQzZrjFreEWMAAABv TLSv1.2 ECDHE-RSA-AES128-SHA256 710 485 -% 905495 7793 894039 295 3 0 192.168.32.7 CH - [2015-05-26 08:37:29.867839] "GET /EMail/login.aspx?username=%20%20john.smith@example.com HTTP/1.1" 200 7522 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3YOawxQzZrjFreEWQAAABu TLSv1.2 ECDHE-RSA-AES128-SHA256 614 8010 -% 909997 4099 887673 16751 3 0 192.168.32.7 CH - [2015-05-26 08:38:01.421034] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=%20%20john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3YWawxQzZrjFreEWoAAAB2 TLSv1.2 ECDHE-RSA-AES128-SHA256 1048 630 -% 1110161 7420 100951 145 3 0 192.168.32.7 CH - [2015-05-26 08:38:02.540692] "GET /EMail/main.aspx HTTP/1.1" 200 3407 "https://www.example.com/EMail/login.aspx?username=%20%20john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3YWqwxQzZrjFreEWsAAAB1 TLSv1.2 ECDHE-RSA-AES128-SHA256 614 3882 -% 1024717 4002 17241 1625 3 0 192.168.32.7 CH - [2015-05-26 08:38:03.632459] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3YW6wxQzZrjFreEWwAAAB4 TLSv1.2 ECDHE-RSA-AES128-SHA256 550 4202 -% 1130923 5401 113286 10334 3 0 192.168.32.7 CH - [2015-05-26 08:38:03.657865] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3YW6wxQzZrjFreEW4AAAB5 TLSv1.2 ECDHE-RSA-AES128-SHA256 840 5963 -% 1189865 3588 182452 1679 3 0 192.168.32.7 CH - [2015-05-26 08:38:03.657369] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3YW6wxQzZrjFreEW0AAAB0 TLSv1.2 ECDHE-RSA-AES128-SHA256 872 9683 -% 1706744 5636 690798 4313 3 0 192.168.32.7 CH - [2015-05-26 08:38:04.886886] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3YXKwxQzZrjFreEW8AAAB6 TLSv1.2 ECDHE-RSA-AES128-SHA256 582 1322 -% 847208 3267 841947 375 3 0 192.168.32.7 CH - [2015-05-26 08:38:05.412089] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3YXawxQzZrjFreEXAAAAB9 TLSv1.2 ECDHE-RSA-AES128-SHA256 614 1338 -% 824461 5164 817401 138 3 0 192.168.32.7 CH - [2015-05-26 08:38:19.013588] "GET /EMail/inbox.aspx HTTP/1.1" 200 12472 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3Ya6wxQzZrjFreEXIAAAB8 TLSv1.2 ECDHE-RSA-AES128-SHA256 840 13200 -% 1313133 4340 296626 9554 3 0 192.168.32.7 CH - [2015-05-26 08:38:20.367322] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3YbKwxQzZrjFreEXMAAAB- TLSv1.2 ECDHE-RSA-AES128-SHA256 566 602 -% 899722 5580 892084 190 3 0 192.168.32.7 CH - [2015-05-26 08:38:20.395959] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3YbKwxQzZrjFrdQyoAAAAT TLSv1.2 ECDHE-RSA-AES128-SHA256 856 2059 -% 1050591 3340 45727 186 3 0 192.168.32.7 CH - [2015-05-26 08:38:20.400070] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3YbKwxQzZrjFrdQysAAAAU TLSv1.2 ECDHE-RSA-AES128-SHA256 856 2123 -% 1279150 5543 272030 132 3 0 192.168.32.7 CH - [2015-05-26 08:38:20.399420] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3YbKwxQzZrjFreEXQAAABB TLSv1.2 ECDHE-RSA-AES128-SHA256 856 779 -% 1307148 3386 301943 223 3 0 192.168.32.7 CH - [2015-05-26 08:38:26.711194] "GET /EMail/message.aspx?&mailId=3891_99&folderId=3481_21&mailPos=0 HTTP/1.1" 200 11361 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3YcqwxQzZrjFreEXcAAABC TLSv1.2 ECDHE-RSA-AES128-SHA256 888 12149 -% 1366504 5979 337225 21197 3 0 192.168.32.7 CH - [2015-05-26 08:38:58.582790] "GET /EMail/downloadPDF.aspx HTTP/1.1" 200 4294 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3YkqwxQzZrjFrdQy0AAAAW TLSv1.2 ECDHE-RSA-AES128-SHA256 792 4955 -% 987339 5382 979163 1347 3 0 192.168.32.7 CH - [2015-05-26 08:39:30.736658] "POST /EMail/MailHandler HTTP/1.1" 200 52235 "https://www.example.com/EMail/message.aspx?&mailId=3891_99&folderId=3481_21&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3YsqwxQzZrjFreEYIAAABM TLSv1.2 ECDHE-RSA-AES128-SHA256 1096 55205 -% 1689484 9424 649868 199 3 0 192.168.32.7 CH - [2015-05-26 08:43:20.371279] "GET /EMail/inbox.aspx HTTP/1.1" 200 12464 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3ZmKwxQzZrjFreEaMAAABw TLSv1.2 ECDHE-RSA-AES128-SHA256 915 16941 -% 877427 5067 864154 6140 3 0 192.168.32.7 CH - [2015-05-26 08:43:28.780530] "GET /EMail/message.aspx?&mailId=3890_1&folderId=3481_21&mailPos=1 HTTP/1.1" 200 11482 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3ZoKwxQzZrjFrdQ0EAAAAq TLSv1.2 ECDHE-RSA-AES128-SHA256 888 12277 -% 1329462 6958 295772 24430 3 0 192.168.32.7 CH - [2015-05-26 08:43:49.197846] "GET /EMail/message.aspx?&mailId=3890_1&folderId=3481_21&getFromPOP3=N&showPics=true HTTP/1.1" 200 11283 "https://www.example.com/EMail/message.aspx?&mailId=3890_1&folderId=3481_21&mailPos=1" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3ZtawxQzZrjFrdQ0QAAAAt TLSv1.2 ECDHE-RSA-AES128-SHA256 952 12069 -% 1175085 4735 149177 19229 3 0 192.168.32.7 CH - [2015-05-26 08:43:59.018042] "GET /EMail/message.aspx?&mailId=3890_1&folderId=3481_21&getFromPOP3=N&showPics=false HTTP/1.1" 200 11351 "https://www.example.com/EMail/message.aspx?&mailId=3890_1&folderId=3481_21&getFromPOP3=N&showPics=true" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3Zv6wxQzZrjFrdQ0UAAAAu TLSv1.2 ECDHE-RSA-AES128-SHA256 968 12080 -% 1322077 7852 293651 18734 3 0 192.168.192.35 CH - [2015-05-26 08:44:26.898818] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f4d67ed0.522fd21639c5f" Vi3Z2qwxQzZrjFreEa4AAAB7 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1127 8122 23% 870370 2345 866193 214 0 0 192.168.192.35 CH - [2015-05-26 08:44:26.889434] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f4d67ed0.522fd21639c5f" Vi3Z2qwxQzZrjFreEawAAAB0 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1132 5902 22% 1134157 2433 130532 154 0 0 192.168.192.35 CH - [2015-05-26 08:44:26.900761] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f4d67ed0.522fd21639c5f" Vi3Z2qwxQzZrjFreEa8AAAB8 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1090 5593 -% 1284640 2341 281455 159 0 0 192.168.192.35 CH - [2015-05-26 08:44:26.897960] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f4d67ed0.522fd21639c5f" Vi3Z2qwxQzZrjFreEa0AAAB9 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1122 11687 22% 1309608 2305 304391 115 0 0 192.168.192.35 CH - [2015-05-26 08:44:27.214826] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f4d67ed0.522fd21639c5f" Vi3Z26wxQzZrjFreEbAAAAB6 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1132 4620 56% 1045325 2717 41976 112 0 0 192.168.192.35 CH - [2015-05-26 08:44:28.276388] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f4d67ed0.522fd21639c5f" Vi3Z3KwxQzZrjFreEbIAAAB@ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 507 1685 -% 532404 3024 528451 180 0 0 192.168.192.35 CH - [2015-05-26 08:44:28.357647] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/css/NNstyle.css" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP35" www.example.com 192.168.34.16 443 proxy-server - + "f4d67ed0.522fd21639c5f" Vi3Z3KwxQzZrjFreEbMAAABA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 476 1792 -% 815672 1941 813129 129 0 0 192.168.32.7 CH - [2015-05-26 08:44:31.060958] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3890_1&folderId=3481_21&attachmentId=2&token=30037482765614623E18 HTTP/1.1" 200 129347 "https://www.example.com/EMail/message.aspx?&mailId=3890_1&folderId=3481_21&getFromPOP3=N&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3Z36wxQzZrjFrdQ0gAAAAx TLSv1.2 ECDHE-RSA-AES128-SHA256 1000 135387 -% 1198326 10105 132247 178 3 0 192.168.32.7 CH - [2015-05-26 08:45:37.806969] "GET /EMail/message.aspx?folderId=3481_21&mailPos=1&isNextOrPrevious=true HTTP/1.1" 200 11483 "https://www.example.com/EMail/message.aspx?&mailId=3890_1&folderId=3481_21&getFromPOP3=N&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3aIawxQzZrjFreEb0AAABK TLSv1.2 ECDHE-RSA-AES128-SHA256 952 12208 -% 1444618 6210 416520 19471 3 0 192.168.32.7 CH - [2015-05-26 08:45:49.784860] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3890_1&folderId=3481_21&attachmentId=2&token=32536340447516365E18 HTTP/1.1" 200 129347 "https://www.example.com/EMail/message.aspx?folderId=3481_21&mailPos=1&isNextOrPrevious=true" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3aLawxQzZrjFreEcEAAABM TLSv1.2 ECDHE-RSA-AES128-SHA256 1000 135594 -% 1211786 8464 146349 186 3 0 192.168.186.76 CH - [2015-05-26 08:46:11.172294] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "6f4b898b.522fc9d202483" Vi3aQ6wxQzZrjFreEcYAAABV TLSv1.2 ECDHE-RSA-AES256-SHA384 1271 4076 -% 1071875 3901 65713 225 3 0 192.168.186.76 CH - [2015-05-26 08:46:11.420585] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3aQ6wxQzZrjFreEccAAABW TLSv1.2 ECDHE-RSA-AES256-SHA384 1399 4545 -% 909915 6416 901253 192 3 0 192.168.186.76 CH - [2015-05-26 08:46:12.343111] "GET /EMail/main.aspx HTTP/1.1" 200 3391 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3aRKwxQzZrjFreEcgAAABX TLSv1.2 ECDHE-RSA-AES256-SHA384 678 3898 -% 1074432 4392 65193 2286 3 0 192.168.186.76 CH - [2015-05-26 08:46:13.468772] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3aRawxQzZrjFreEcoAAABa TLSv1.2 ECDHE-RSA-AES256-SHA384 662 4234 -% 1490618 6651 475734 6333 3 0 192.168.186.76 CH - [2015-05-26 08:46:13.468605] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3aRawxQzZrjFreEckAAABU TLSv1.2 ECDHE-RSA-AES256-SHA384 1212 9827 -% 1870051 5079 853802 4522 3 0 192.168.186.76 CH - [2015-05-26 08:46:15.361236] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3aR6wxQzZrjFreEcsAAABb TLSv1.2 ECDHE-RSA-AES256-SHA384 726 1370 -% 867508 7311 857600 318 3 0 192.168.186.76 CH - [2015-05-26 08:46:16.351510] "GET /EMail/inbox.aspx HTTP/1.1" 200 8482 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3aSKwxQzZrjFreEcwAAABc TLSv1.2 ECDHE-RSA-AES256-SHA384 662 9087 -% 1030258 3949 18888 5074 3 0 192.168.186.76 CH - [2015-05-26 08:46:17.405279] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3aSawxQzZrjFreEc4AAABY TLSv1.2 ECDHE-RSA-AES256-SHA384 678 1914 -% 889941 5768 881870 176 3 0 192.168.186.76 CH - [2015-05-26 08:46:17.404033] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3aSawxQzZrjFreEc0AAABd TLSv1.2 ECDHE-RSA-AES256-SHA384 678 634 -% 1136762 6184 128913 137 3 0 192.168.186.76 CH - [2015-05-26 08:46:19.014927] "GET /EMail/message.aspx?&mailId=3893_12&folderId=947_65&mailPos=0 HTTP/1.1" 200 16344 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3aS6wxQzZrjFreEdAAAABe TLSv1.2 ECDHE-RSA-AES256-SHA384 710 17028 -% 1376891 8318 335551 29977 3 0 192.168.186.76 CH - [2015-05-26 08:46:24.689054] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3893_12&folderId=947_65&attachmentId=3&token=33158146082517791E18 HTTP/1.1" 200 627197 "https://www.example.com/EMail/message.aspx?&mailId=3893_12&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3aUKwxQzZrjFreEdEAAABf TLSv1.2 ECDHE-RSA-AES256-SHA384 806 661550 -% 1458259 9927 162986 157 3 0 192.168.186.76 CH - [2015-05-26 08:46:39.126409] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/message.aspx?&mailId=3893_12&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3aX6wxQzZrjFreEdUAAABi TLSv1.2 ECDHE-RSA-AES256-SHA384 1319 6262 -% 961849 4233 955805 189 3 0 192.168.186.76 CH - [2015-05-26 08:46:39.512533] "GET /EMail/newMessage.aspx?action=reply&mailId=3893_12&folderId=947_65&showPics=false HTTP/1.1" 200 23794 "https://www.example.com/EMail/message.aspx?&mailId=3893_12&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3aX6wxQzZrjFreEdcAAABm TLSv1.2 ECDHE-RSA-AES256-SHA384 1292 24783 -% 1014026 7692 922785 51811 6 3 192.168.186.76 CH - [2015-05-26 08:46:40.526468] "GET /EMail/scripts/tinymce/tinymce.min.js HTTP/1.1" 200 102072 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3893_12&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3aYKwxQzZrjFreEdgAAABn TLSv1.2 ECDHE-RSA-AES256-SHA384 742 105338 33% 1062399 7097 5414 170 3 0 192.168.186.76 CH - [2015-05-26 08:46:41.693073] "GET /EMail/scripts/tinymce/langs/de.js HTTP/1.1" 200 2969 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3893_12&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3aYawxQzZrjFreEdoAAABo TLSv1.2 ECDHE-RSA-AES256-SHA384 742 3684 38% 1277381 4314 269790 216 3 0 192.168.186.76 CH - [2015-05-26 08:46:41.681452] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3893_12&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3aYawxQzZrjFreEdkAAABp TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 1810077 4369 795915 7880 3 0 192.168.186.76 CH - [2015-05-26 08:46:42.259354] "GET /EMail/scripts/tinymce/plugins/searchreplace/plugin.min.js HTTP/1.1" 200 2586 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3893_12&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3aYqwxQzZrjFreEdsAAABq TLSv1.2 ECDHE-RSA-AES256-SHA384 1351 7376 40% 1566183 4276 559563 349 3 0 192.168.186.76 CH - [2015-05-26 08:46:42.259633] "GET /EMail/scripts/tinymce/plugins/fullpage/plugin.min.js HTTP/1.1" 200 2325 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3893_12&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3aYqwxQzZrjFreEdwAAABk TLSv1.2 ECDHE-RSA-AES256-SHA384 1351 7120 36% 1588295 4359 582261 130 3 0 192.168.186.76 CH - [2015-05-26 08:46:42.764340] "GET /EMail/scripts/tinymce/plugins/charmap/plugin.min.js HTTP/1.1" 200 2698 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3893_12&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3aYqwxQzZrjFreEd0AAABr TLSv1.2 ECDHE-RSA-AES256-SHA384 1276 3573 38% 1833419 8503 822329 141 3 0 192.168.186.76 CH - [2015-05-26 08:46:42.984339] "GET /EMail/scripts/tinymce/plugins/visualblocks/plugin.min.js HTTP/1.1" 200 525 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3893_12&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3aYqwxQzZrjFreEd4AAABt TLSv1.2 ECDHE-RSA-AES256-SHA384 758 1167 43% 2463202 6294 455182 177 3 0 192.168.186.76 CH - [2015-05-26 08:46:43.505566] "GET /EMail/scripts/tinymce/plugins/textcolor/plugin.min.js HTTP/1.1" 200 1647 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3893_12&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3aY6wxQzZrjFreEd8AAABs TLSv1.2 ECDHE-RSA-AES256-SHA384 758 2287 44% 2616956 6140 608913 150 3 0 192.168.186.76 CH - [2015-05-26 08:46:43.840662] "GET /EMail/scripts/tinymce/plugins/image/plugin.min.js HTTP/1.1" 200 2136 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3893_12&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3aY6wxQzZrjFreEeAAAABv TLSv1.2 ECDHE-RSA-AES256-SHA384 758 2852 42% 2420414 4241 414436 149 3 0 192.168.186.76 CH - [2015-05-26 08:46:43.863223] "GET /EMail/scripts/tinymce/plugins/table/plugin.min.js HTTP/1.1" 200 9166 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3893_12&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3aY6wxQzZrjFreEeEAAABu TLSv1.2 ECDHE-RSA-AES256-SHA384 758 9961 32% 2732605 8604 719683 156 3 0 192.168.186.76 CH - [2015-05-26 08:46:46.635208] "GET /EMail/scripts/tinymce/skins/lightgray/skin.min.css HTTP/1.1" 200 6020 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3893_12&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3aZqwxQzZrjFreEeIAAABy TLSv1.2 ECDHE-RSA-AES256-SHA384 742 6740 17% 663488 6138 652111 181 3 0 192.168.186.76 CH - [2015-05-26 08:46:46.681396] "GET /EMail/scripts/tinymce/skins/lightgray/content.min.css HTTP/1.1" 200 588 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3893_12&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3aZqwxQzZrjFreEeMAAABz TLSv1.2 ECDHE-RSA-AES256-SHA384 742 1231 38% 1076729 6843 67733 193 3 0 192.168.186.76 CH - [2015-05-26 08:46:47.346708] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce-small.eot? HTTP/1.1" 200 10316 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3893_12&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3aZ6wxQzZrjFreEeUAAAB2 TLSv1.2 ECDHE-RSA-AES256-SHA384 774 11012 -% 531058 4532 524367 142 3 0 192.168.186.76 CH - [2015-05-26 08:46:47.346009] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce.eot? HTTP/1.1" 200 10024 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3893_12&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3aZ6wxQzZrjFreEeQAAAB3 TLSv1.2 ECDHE-RSA-AES256-SHA384 758 10724 -% 687577 6275 679273 221 3 0 192.168.32.7 CH - [2015-05-26 08:46:57.300706] "GET /EMail/message.aspx?folderId=3481_21&mailPos=2&isNextOrPrevious=true HTTP/1.1" 200 11497 "https://www.example.com/EMail/message.aspx?folderId=3481_21&mailPos=1&isNextOrPrevious=true" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3acawxQzZrjFreEecAAAB4 TLSv1.2 ECDHE-RSA-AES128-SHA256 936 12224 -% 1524093 4424 490031 27961 3 0 192.168.32.7 CH - [2015-05-26 08:47:01.843294] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3887_95&folderId=3481_21&attachmentId=2&token=137707654096764621E18 HTTP/1.1" 200 47933 "https://www.example.com/EMail/message.aspx?folderId=3481_21&mailPos=2&isNextOrPrevious=true" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3adawxQzZrjFreEeoAAAB7 TLSv1.2 ECDHE-RSA-AES128-SHA256 710 50278 -% 1103921 8538 74770 154 3 0 192.168.186.76 CH - [2015-05-26 08:47:35.136701] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3al6wxQzZrjFrdQ1IAAAA8 TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1718273 7851 701317 3876 3 0 192.168.32.7 CH - [2015-05-26 08:47:54.379854] "GET /EMail/message.aspx?folderId=3481_21&mailPos=1&isNextOrPrevious=true HTTP/1.1" 200 11482 "https://www.example.com/EMail/message.aspx?&mailId=3890_1&folderId=3481_21&getFromPOP3=N&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3aqqwxQzZrjFreEfIAAABC TLSv1.2 ECDHE-RSA-AES128-SHA256 952 12277 -% 1282383 4805 256813 19031 3 0 192.168.32.7 CH - [2015-05-26 08:48:05.608563] "GET /EMail/message.aspx?&mailId=3890_1&folderId=3481_21&getFromPOP3=N&showPics=false HTTP/1.1" 200 11345 "https://www.example.com/EMail/message.aspx?&mailId=3890_1&folderId=3481_21&getFromPOP3=N&showPics=true" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3atawxQzZrjFreEfUAAABF TLSv1.2 ECDHE-RSA-AES128-SHA256 968 12080 -% 1328597 8773 291096 26594 3 0 192.168.32.7 CH - [2015-05-26 08:48:08.590018] "GET /EMail/message.aspx?&mailId=3890_1&folderId=3481_21&getFromPOP3=N&showPics=true HTTP/1.1" 200 11289 "https://www.example.com/EMail/message.aspx?&mailId=3890_1&folderId=3481_21&mailPos=1" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3auKwxQzZrjFreEfYAAABH TLSv1.2 ECDHE-RSA-AES128-SHA256 662 11908 -% 1276759 5488 247561 21642 3 0 192.168.32.7 CH - [2015-05-26 08:48:13.038068] "GET /EMail/message.aspx?&mailId=3890_1&folderId=3481_21&mailPos=1 HTTP/1.1" 200 11489 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3avawxQzZrjFreEfcAAABG TLSv1.2 ECDHE-RSA-AES128-SHA256 598 12100 -% 1332669 6934 290726 32377 3 0 192.168.32.7 CH - [2015-05-26 08:49:36.730557] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 12464 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3bEKwxQzZrjFreEgQAAABV TLSv1.2 ECDHE-RSA-AES128-SHA256 915 16888 -% 1380808 5097 366950 6575 3 0 192.168.32.7 CH - [2015-05-26 08:49:36.726920] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3bEKwxQzZrjFrdQ1wAAAAH TLSv1.2 ECDHE-RSA-AES128-SHA256 931 13371 -% 1408233 5600 392726 5055 3 0 192.168.32.7 CH - [2015-05-26 08:49:54.010375] "GET /EMail/message.aspx?&mailId=3888_63&folderId=3481_21&mailPos=3 HTTP/1.1" 200 11552 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3bIqwxQzZrjFrdQ14AAAAK TLSv1.2 ECDHE-RSA-AES128-SHA256 888 12341 -% 1324898 4369 299208 19367 3 0 192.168.32.7 CH - [2015-05-26 08:50:05.132034] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3888_63&folderId=3481_21&attachmentId=2&token=303109596486782E18 HTTP/1.1" 200 47384 "https://www.example.com/EMail/message.aspx?&mailId=3888_63&folderId=3481_21&mailPos=3" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3bLawxQzZrjFreEgwAAABe TLSv1.2 ECDHE-RSA-AES128-SHA256 984 49927 -% 1037234 5360 21414 174 3 0 192.168.32.7 CH - [2015-05-26 08:50:20.763910] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 12465 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3bPKwxQzZrjFrdQ18AAAAL TLSv1.2 ECDHE-RSA-AES128-SHA256 840 13253 -% 1531660 3849 522314 3700 3 0 192.168.32.7 CH - [2015-05-26 08:50:20.764341] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3bPKwxQzZrjFreEg8AAABg TLSv1.2 ECDHE-RSA-AES128-SHA256 856 9683 -% 1930596 3964 917522 4174 3 0 192.168.32.7 CH - [2015-05-26 08:50:33.578228] "GET /EMail/message.aspx?&mailId=3887_95&folderId=3481_21&mailPos=2 HTTP/1.1" 200 11490 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3bSawxQzZrjFreEhMAAABm TLSv1.2 ECDHE-RSA-AES128-SHA256 888 12277 -% 1328330 6876 293631 25810 3 0 192.168.32.7 CH - [2015-05-26 08:50:41.963415] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3887_95&folderId=3481_21&attachmentId=2&token=77660358177897754E17 HTTP/1.1" 200 47933 "https://www.example.com/EMail/message.aspx?&mailId=3887_95&folderId=3481_21&mailPos=2" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3bUawxQzZrjFreEhUAAABo TLSv1.2 ECDHE-RSA-AES128-SHA256 984 50678 -% 1185840 5480 159841 202 3 0 192.168.32.7 CH - [2015-05-26 08:50:52.685910] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 12464 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3bXKwxQzZrjFreEhcAAABq TLSv1.2 ECDHE-RSA-AES128-SHA256 840 13253 -% 1162342 5695 147519 6573 3 0 192.168.32.7 CH - [2015-05-26 08:50:52.691580] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3bXKwxQzZrjFreEhgAAABk TLSv1.2 ECDHE-RSA-AES128-SHA256 856 9683 -% 1455006 7022 439638 3145 3 0 192.168.32.7 CH - [2015-05-26 08:50:56.151349] "GET /EMail/message.aspx?&mailId=3890_1&folderId=3481_21&mailPos=1 HTTP/1.1" 200 11483 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3bYKwxQzZrjFreEhoAAABw TLSv1.2 ECDHE-RSA-AES128-SHA256 598 12031 -% 1421771 5787 386738 27348 3 0 192.168.32.7 CH - [2015-05-26 08:51:01.362733] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3890_1&folderId=3481_21&attachmentId=2&token=23719965008826199E18 HTTP/1.1" 200 129347 "https://www.example.com/EMail/message.aspx?&mailId=3890_1&folderId=3481_21&mailPos=1" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3bZawxQzZrjFreEhsAAABt TLSv1.2 ECDHE-RSA-AES128-SHA256 694 135401 -% 1406941 6356 339126 198 3 0 192.168.32.7 CH - [2015-05-26 08:51:18.531562] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 12464 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3bdqwxQzZrjFreEh4AAABv TLSv1.2 ECDHE-RSA-AES128-SHA256 840 13253 -% 1241405 9414 224840 3931 3 0 192.168.32.7 CH - [2015-05-26 08:51:18.531743] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3bdqwxQzZrjFreEh8AAABu TLSv1.2 ECDHE-RSA-AES128-SHA256 856 9683 -% 1717857 9778 700315 2812 3 0 192.168.32.7 CH - [2015-05-26 08:51:22.471253] "GET /EMail/message.aspx?&mailId=3891_99&folderId=3481_21&mailPos=0 HTTP/1.1" 200 11361 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3beqwxQzZrjFreEiEAAABz TLSv1.2 ECDHE-RSA-AES128-SHA256 598 11972 -% 1252775 5582 220652 24288 3 0 192.168.32.7 CH - [2015-05-26 08:51:28.059861] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3891_99&folderId=3481_21&attachmentId=2&token=33536657025055606E18 HTTP/1.1" 200 47823 "https://www.example.com/EMail/message.aspx?&mailId=3891_99&folderId=3481_21&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3bgKwxQzZrjFreEiMAAAB3 TLSv1.2 ECDHE-RSA-AES128-SHA256 694 50166 -% 1091164 5575 75301 198 3 0 192.168.32.7 CH - [2015-05-26 08:51:47.793989] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 12464 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3bk6wxQzZrjFreEicAAAB4 TLSv1.2 ECDHE-RSA-AES128-SHA256 840 13253 -% 1290268 5576 275483 6703 3 0 192.168.32.7 CH - [2015-05-26 08:51:47.793806] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3bk6wxQzZrjFreEiYAAAB- TLSv1.2 ECDHE-RSA-AES128-SHA256 856 9683 -% 1388738 5857 373169 4553 3 0 192.168.32.7 CH - [2015-05-26 08:52:03.546255] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3bo6wxQzZrjFrdQ2cAAAAS TLSv1.2 ECDHE-RSA-AES128-SHA256 1160 566 -% 1400189 10603 387917 139 3 0 192.168.32.7 CH - [2015-05-26 08:52:04.955878] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 9878 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3bpKwxQzZrjFrdQ2kAAAAU TLSv1.2 ECDHE-RSA-AES128-SHA256 614 10431 -% 981010 5273 968550 5170 3 0 192.168.1.78 CH - [2015-05-26 09:02:20.757563] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eDKwxQzZrjFreEqUAAAB- TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1106 5902 22% 1047158 3013 42779 375 0 0 192.168.1.78 CH - [2015-05-26 09:02:20.761828] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eDKwxQzZrjFreEqYAAAB7 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1136 11687 22% 1067401 2851 60587 204 0 0 192.168.1.78 CH - [2015-05-26 09:02:20.770294] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eDKwxQzZrjFreEqcAAAB0 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1141 8122 23% 1197061 3203 191694 211 0 0 192.168.1.78 CH - [2015-05-26 09:02:20.933418] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eDKwxQzZrjFrdQ44AAAA7 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1150 5711 -% 1061335 1769 58941 141 0 0 192.168.1.78 CH - [2015-05-26 09:02:20.925707] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eDKwxQzZrjFreEqgAAAB8 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1106 4620 56% 1088335 2429 85012 150 0 0 192.168.1.78 CH - [2015-05-26 09:02:22.132328] "GET /EMail/scripts/csshover.htc HTTP/1.1" 200 4255 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eDqwxQzZrjFreEqoAAAB6 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 360 4676 -% 956517 2475 953152 221 0 0 192.168.1.78 CH - [2015-05-26 09:02:22.193628] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eDqwxQzZrjFrdQ48AAAA9 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 506 1792 -% 1014537 4692 8752 185 0 0 192.168.1.78 CH - [2015-05-26 09:02:23.334143] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Win64; x64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "a57411b0.522fd619d7aff" Vi3eD6wxQzZrjFrdQ5AAAAA8 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 936 5756 -% 1014366 723 12864 208 0 0 192.168.1.78 CH - [2015-05-26 09:02:27.227039] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eE6wxQzZrjFrdQ5IAAAA- TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 672 421 -% 1124427 5443 118133 166 0 0 192.168.1.78 CH - [2015-05-26 09:02:28.368250] "GET /EMail/main.aspx HTTP/1.1" 200 3397 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eFKwxQzZrjFrdQ5MAAAAA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 507 3813 -% 922790 3077 917096 1728 0 0 192.168.1.78 CH - [2015-05-26 09:02:29.386019] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eFawxQzZrjFrdQ5UAAAAD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1173 5902 22% 877659 2457 873744 198 0 0 192.168.1.78 CH - [2015-05-26 09:02:29.388383] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eFawxQzZrjFreEqsAAAB@ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1209 8122 23% 993290 2592 988504 193 0 0 192.168.1.78 CH - [2015-05-26 09:02:29.349178] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eFawxQzZrjFrdQ5QAAAAB TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 528 2427 14% 1056059 3402 50941 197 0 0 192.168.1.78 CH - [2015-05-26 09:02:29.389016] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eFawxQzZrjFreEqwAAABA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1172 4620 56% 1116478 1855 113743 243 0 0 192.168.1.78 CH - [2015-05-26 09:02:29.390195] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eFawxQzZrjFreEq0AAABB TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1204 12018 22% 1145045 1844 140346 183 0 0 192.168.1.78 CH - [2015-05-26 09:02:30.631369] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eFqwxQzZrjFreEq4AAABC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 457 4141 -% 865272 3766 850201 10636 0 0 192.168.1.78 CH - [2015-05-26 09:02:30.633134] "GET /EMail/overview.aspx HTTP/1.1" 200 5302 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eFqwxQzZrjFrdQ5YAAAAE TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 459 5724 -% 1564445 3547 558480 1706 0 0 192.168.1.78 CH - [2015-05-26 09:02:31.562086] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eF6wxQzZrjFreErEAAABF TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 2427 14% 814561 2085 810924 196 0 0 192.168.1.78 CH - [2015-05-26 09:02:30.632206] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eFqwxQzZrjFreEq8AAABE TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 485 9192 -% 1819695 3098 808431 4333 0 0 192.168.1.78 CH - [2015-05-26 09:02:31.563755] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eF6wxQzZrjFreErIAAABH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 527 1876 22% 1055983 2293 52847 162 0 0 192.168.1.78 CH - [2015-05-26 09:02:31.639861] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eF6wxQzZrjFreErQAAABI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1214 4232 -% 1046913 3971 42014 179 0 0 192.168.1.78 CH - [2015-05-26 09:02:31.567244] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eF6wxQzZrjFrdQ5cAAAAF TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 526 594 56% 1168692 3285 164089 177 0 0 192.168.1.78 CH - [2015-05-26 09:02:31.610790] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/header.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eF6wxQzZrjFreErMAAABG TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1206 12018 22% 1174008 2884 167317 140 0 0 192.168.1.78 CH - [2015-05-26 09:02:32.261993] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eGKwxQzZrjFrdQ5gAAAAC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 486 1248 -% 936902 3586 932163 166 0 0 192.168.1.78 CH - [2015-05-26 09:02:32.521396] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eGKwxQzZrjFreErUAAABL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 528 1260 -% 744726 2920 740886 137 0 0 192.168.1.78 CH - [2015-05-26 09:02:32.886861] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eGKwxQzZrjFrdQ5kAAAAG TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 206 -% 818777 3784 814028 138 0 0 192.168.1.78 CH - [2015-05-26 09:02:32.892294] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eGKwxQzZrjFreErcAAABN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 206 -% 870107 2173 867128 135 0 0 192.168.1.78 CH - [2015-05-26 09:02:32.874139] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eGKwxQzZrjFreErYAAABJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 206 -% 949404 3585 944585 192 0 0 192.168.1.78 CH - [2015-05-26 09:02:32.971388] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eGKwxQzZrjFreErgAAABK TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 570 206 -% 1028067 2501 24775 140 0 0 192.168.1.78 CH - [2015-05-26 09:02:34.054320] "GET /EMail/images/icon10.ico HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Win64; x64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "a57411b0.522fd619d7aff" Vi3eGqwxQzZrjFreErkAAABM TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1114 4232 -% 928239 2013 925471 204 0 0 192.168.1.78 CH - [2015-05-26 09:02:34.296631] "GET /EMail/inbox.aspx HTTP/1.1" 200 8593 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eGqwxQzZrjFreEroAAABP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 460 9044 -% 1126581 2591 120406 2971 0 0 192.168.1.78 CH - [2015-05-26 09:02:35.509905] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eG6wxQzZrjFrdQ5sAAAAI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 557 7661 22% 1058046 2558 51423 224 0 0 192.168.1.78 CH - [2015-05-26 09:02:35.509714] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eG6wxQzZrjFreErwAAABQ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 478 539 -% 1075586 2917 71705 210 0 0 192.168.1.78 CH - [2015-05-26 09:02:35.512007] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eG6wxQzZrjFreEr4AAABT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 481 1813 -% 1198712 1796 195973 155 0 0 192.168.1.78 CH - [2015-05-26 09:02:35.509339] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eG6wxQzZrjFreErsAAABO TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 526 1876 22% 1236302 3136 232131 95 0 0 192.168.1.78 CH - [2015-05-26 09:02:35.509828] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eG6wxQzZrjFreEr0AAABR TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 525 594 56% 1304460 3387 299990 133 0 0 192.168.1.78 CH - [2015-05-26 09:02:35.512363] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eG6wxQzZrjFreEr8AAABS TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 529 2427 14% 1343379 2686 339329 172 0 0 192.168.1.78 CH - [2015-05-26 09:02:35.551477] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eG6wxQzZrjFrdQ5wAAAAK TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 481 527 -% 1566170 2907 562470 208 0 0 192.168.1.78 CH - [2015-05-26 09:02:36.647321] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eHKwxQzZrjFrdQ50AAAAJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 206 -% 887249 1961 884516 202 0 0 192.168.1.78 CH - [2015-05-26 09:02:38.035648] "GET /EMail/message.aspx?&mailId=3893_11&folderId=2582_34&mailPos=0 HTTP/1.1" 200 11201 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eHqwxQzZrjFrdQ54AAAAL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 502 11682 -% 1294831 4736 269746 19317 0 0 192.168.1.78 CH - [2015-05-26 09:02:39.439250] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7160 "https://www.example.com/EMail/message.aspx?&mailId=3893_11&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eH6wxQzZrjFreEsEAAABU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 602 7890 22% 901912 1960 896792 179 0 0 192.168.1.78 CH - [2015-05-26 09:02:39.437865] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/message.aspx?&mailId=3893_11&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eH6wxQzZrjFreEsAAAABW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 570 594 56% 1074143 3064 69919 254 0 0 192.168.1.78 CH - [2015-05-26 09:02:39.436600] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/message.aspx?&mailId=3893_11&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eH6wxQzZrjFrdQ58AAAAN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 574 2551 14% 1159345 2510 154828 211 0 0 192.168.1.78 CH - [2015-05-26 09:02:39.436837] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/message.aspx?&mailId=3893_11&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eH6wxQzZrjFrdQ6AAAAAM TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 571 1876 22% 1159497 1972 156367 172 0 0 192.168.1.78 CH - [2015-05-26 09:02:40.437242] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eIKwxQzZrjFreEsIAAABc TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 206 -% 846833 2239 843920 183 0 0 192.168.1.78 CH - [2015-05-26 09:02:42.063408] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3893_11&folderId=2582_34&attachmentId=2&token=89769036792172966E17 HTTP/1.1" 200 55074 "https://www.example.com/EMail/message.aspx?&mailId=3893_11&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eIqwxQzZrjFreEsQAAABZ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 608 56646 -% 1416598 4729 381114 182 0 0 192.168.1.78 CH - [2015-05-26 09:02:52.369377] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/message.aspx?&mailId=3893_11&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eLKwxQzZrjFreEsYAAABf TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1171 6114 -% 911196 2036 908301 270 0 0 192.168.1.78 CH - [2015-05-26 09:02:54.221103] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3893_11&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eLqwxQzZrjFreEscAAABh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 734 356 -% 1083826 4467 78534 219 0 0 192.168.1.78 CH - [2015-05-26 09:02:55.320124] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7291 "https://www.example.com/EMail/message.aspx?&mailId=3893_11&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eL6wxQzZrjFreEsgAAABe TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 551 7713 -% 981714 2423 974693 3840 0 0 192.168.1.78 CH - [2015-05-26 09:02:56.392386] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eMKwxQzZrjFreEskAAABg TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 553 2427 14% 622026 3999 616675 152 0 0 192.168.1.78 CH - [2015-05-26 09:02:56.462496] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eMKwxQzZrjFreEsoAAABj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1197 4620 56% 753891 2870 750059 201 0 0 192.168.1.78 CH - [2015-05-26 09:02:56.469147] "GET /EMail/images/Highost.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eMKwxQzZrjFrdQ6QAAAAS TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1241 4231 -% 773856 3005 769967 113 0 0 192.168.1.78 CH - [2015-05-26 09:02:56.462112] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eMKwxQzZrjFrdQ6MAAAAT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1198 5902 22% 796774 4263 791565 98 0 0 192.168.1.78 CH - [2015-05-26 09:02:56.469147] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eMKwxQzZrjFreEssAAABl TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1229 11687 22% 817058 2802 811184 134 0 0 192.168.1.78 CH - [2015-05-26 09:02:57.368694] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eMawxQzZrjFreEswAAABi TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 206 -% 749201 2528 745994 186 0 0 192.168.1.78 CH - [2015-05-26 09:02:58.413916] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eMqwxQzZrjFreEs0AAABm TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 478 409 -% 875167 2524 871613 333 0 0 192.168.1.78 CH - [2015-05-26 09:02:59.302673] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eM6wxQzZrjFreEs4AAABp TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 459 676 75% 996771 2329 993278 473 0 0 192.168.1.78 CH - [2015-05-26 09:03:00.468660] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Win64; x64; Trident/6.0)" www.example.com 192.168.34.16 443 - - + "a57411b0.522fd619d7aff" Vi3eNKwxQzZrjFreEtAAAABo TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 966 5580 -% 1832 1231 40 99 0 0 192.168.1.78 CH - [2015-05-26 09:03:00.424606] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eNKwxQzZrjFreEs8AAABn TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 425 318 -% 860759 2775 857061 380 0 0 192.168.1.78 CH - [2015-05-26 09:03:01.301667] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eNawxQzZrjFreEtEAAABr TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 407 7771 -% 687664 2890 680689 3319 0 0 192.168.1.78 CH - [2015-05-26 09:03:02.091596] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eNqwxQzZrjFreEtMAAABk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 529 2427 14% 731052 2656 726807 434 0 0 192.168.1.78 CH - [2015-05-26 09:03:02.092006] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eNqwxQzZrjFrdQ6UAAAAU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 526 1876 22% 1004476 2364 1232 128 0 0 192.168.1.78 CH - [2015-05-26 09:03:02.129542] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eNqwxQzZrjFreEtUAAABt TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1210 8122 23% 1089816 1964 85879 199 0 0 192.168.1.78 CH - [2015-05-26 09:03:02.093695] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eNqwxQzZrjFreEtQAAABw TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 557 7992 22% 1145261 2374 139557 355 0 0 192.168.1.78 CH - [2015-05-26 09:03:02.156009] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eNqwxQzZrjFrdQ6cAAAAW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1213 4232 -% 1333021 1797 330490 145 0 0 192.168.1.78 CH - [2015-05-26 09:03:02.092762] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "d676334c.522fd6162fe80" Vi3eNqwxQzZrjFrdQ6YAAAAV TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 525 594 56% 1404510 3355 400265 103 0 0 192.168.81.38 CH - [2015-05-26 09:09:16.679916] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "919e79c9.522fd7a30eb81" Vi3frKwxQzZrjFrdQ8YAAAA9 TLSv1 ECDHE-RSA-AES256-SHA 815 4638 56% 820601 2349 817369 194 0 0 192.168.81.38 CH - [2015-05-26 09:09:16.682802] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "919e79c9.522fd7a30eb81" Vi3frKwxQzZrjFrdQ8cAAAA6 TLSv1 ECDHE-RSA-AES256-SHA 815 5918 22% 870954 2826 867137 93 0 0 192.168.81.38 CH - [2015-05-26 09:09:16.683753] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "919e79c9.522fd7a30eb81" Vi3frKwxQzZrjFrdQ8gAAAA4 TLSv1 ECDHE-RSA-AES256-SHA 847 8131 23% 1102869 2766 97852 194 0 0 192.168.81.38 CH - [2015-05-26 09:09:16.684528] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "919e79c9.522fd7a30eb81" Vi3frKwxQzZrjFrdQ8kAAAA7 TLSv1 ECDHE-RSA-AES256-SHA 863 5721 -% 1313169 2318 310232 157 0 0 192.168.81.38 CH - [2015-05-26 09:09:17.932827] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "919e79c9.522fd7a30eb81" Vi3frawxQzZrjFrdQ8oAAAA@ TLSv1 ECDHE-RSA-AES256-SHA 502 1802 -% 851509 3017 847678 142 0 0 192.168.81.38 CH - [2015-05-26 09:09:18.641280] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "919e79c9.522fd7a30eb81" Vi3frqwxQzZrjFrdQ8sAAAA8 TLSv1 ECDHE-RSA-AES256-SHA 502 2090 -% 886500 4186 881185 189 0 0 192.168.81.38 CH - [2015-05-26 09:09:19.644771] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "919e79c9.522fd7a30eb81" Vi3fr6wxQzZrjFrdQ80AAAAA TLSv1 ECDHE-RSA-AES256-SHA 342 1578 -% 691532 2955 687310 187 0 0 192.168.81.38 CH - [2015-05-26 09:09:21.599828] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "919e79c9.522fd7a30eb81" Vi3fsawxQzZrjFrdQ84AAAAD TLSv1 ECDHE-RSA-AES256-SHA 646 421 -% 1110963 6534 103618 175 0 0 192.168.81.38 CH - [2015-05-26 09:09:22.875925] "GET /EMail/main.aspx HTTP/1.1" 200 3404 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "919e79c9.522fd7a30eb81" Vi3fsqwxQzZrjFrdQ88AAAAB TLSv1 ECDHE-RSA-AES256-SHA 502 3834 -% 947090 2985 941549 1815 0 0 192.168.81.38 CH - [2015-05-26 09:09:24.094775] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "919e79c9.522fd7a30eb81" Vi3ftKwxQzZrjFrdQ9AAAAAE TLSv1 ECDHE-RSA-AES256-SHA 438 4154 -% 972357 3056 957044 11499 0 0 192.168.81.38 CH - [2015-05-26 09:09:29.764399] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "919e79c9.522fd7a30eb81" Vi3fuawxQzZrjFrdQ9IAAAAC TLSv1 ECDHE-RSA-AES256-SHA 470 1818 -% 1020908 2980 16990 229 0 0 192.168.81.38 CH - [2015-05-26 09:09:32.034723] "GET /EMail/message.aspx?&mailId=3893_14&folderId=587_1&mailPos=0 HTTP/1.1" 200 11197 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "919e79c9.522fd7a30eb81" Vi3fvKwxQzZrjFrdQ9QAAAAG TLSv1 ECDHE-RSA-AES256-SHA 486 11700 -% 1322811 5039 298180 18519 0 0 192.168.81.38 CH - [2015-05-26 09:09:35.221426] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3893_14&folderId=587_1&attachmentId=2&token=116532355197332941E18 HTTP/1.1" 200 55651 "https://www.example.com/EMail/message.aspx?&mailId=3893_14&folderId=587_1&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "919e79c9.522fd7a30eb81" Vi3fv6wxQzZrjFrdQ9UAAAAI TLSv1 ECDHE-RSA-AES256-SHA 598 57300 -% 1021288 6838 4259 223 0 0 192.168.206.215 CH - [2015-05-26 09:09:48.324919] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "2ce40981.522fd7c238037" Vi3fzKwxQzZrjFreEwUAAABe TLSv1.2 ECDHE-RSA-AES256-SHA384 659 8674 -% 678425 1232 676003 161 0 0 192.168.81.38 CH - [2015-05-26 09:10:15.529079] "GET /EMail/trash.aspx?dir=desc HTTP/1.1" 200 10070 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "919e79c9.522fd7a30eb81" Vi3f56wxQzZrjFrdQ9wAAAAR TLSv1 ECDHE-RSA-AES256-SHA 847 14574 -% 1121005 3477 112883 3779 0 0 192.168.81.38 CH - [2015-05-26 09:10:16.909208] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/trash.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "919e79c9.522fd7a30eb81" Vi3f6KwxQzZrjFrdQ90AAAAS TLSv1 ECDHE-RSA-AES256-SHA 470 1882 -% 885135 3220 880959 180 0 0 192.168.81.38 CH - [2015-05-26 09:10:20.213937] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/trash.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "919e79c9.522fd7a30eb81" Vi3f7KwxQzZrjFrdQ94AAAAT TLSv1 ECDHE-RSA-AES256-SHA 774 357 -% 1245122 10864 233362 193 0 0 192.168.81.38 CH - [2015-05-26 09:10:21.588774] "GET /EMail/trash.aspx?returnedFromDelete=true HTTP/1.1" 200 7278 "https://www.example.com/EMail/trash.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "919e79c9.522fd7a30eb81" Vi3f7awxQzZrjFrdQ@AAAAAX TLSv1 ECDHE-RSA-AES256-SHA 502 7722 -% 802134 2480 795246 3741 0 0 192.168.24.161 CH - [2015-05-26 09:11:10.833180] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7367 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "267d56b3.522fd810e7a1c" Vi3gHqwxQzZrjFreExIAAABx TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1004 11973 -% 1026411 7947 13180 3283 6 0 192.168.24.161 CH - [2015-05-26 09:11:13.392179] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "267d56b3.522fd810e7a1c" Vi3gIawxQzZrjFreExQAAABs TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 988 421 -% 1038937 6898 30358 129 6 0 192.168.24.161 CH - [2015-05-26 09:11:14.459078] "GET /EMail/main.aspx HTTP/1.1" 200 3399 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "267d56b3.522fd810e7a1c" Vi3gIqwxQzZrjFreExUAAABv TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 830 3815 -% 856142 8869 844712 1149 6 0 192.168.24.161 CH - [2015-05-26 09:11:15.402947] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "267d56b3.522fd810e7a1c" Vi3gI6wxQzZrjFreExYAAABu TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 765 4128 -% 899991 6045 885461 6475 6 0 192.168.24.161 CH - [2015-05-26 09:11:15.454918] "GET /EMail/overview.aspx HTTP/1.1" 200 5285 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "267d56b3.522fd810e7a1c" Vi3gI6wxQzZrjFreExcAAABy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1229 5813 -% 1493679 8496 480544 2677 6 0 192.168.24.161 CH - [2015-05-26 09:12:00.886912] "GET /EMail/downloadPDF.aspx HTTP/1.1" 200 4281 "https://www.example.com/EMail/message.aspx?&mailId=3894_3&folderId=2846_92&mailPos=0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "267d56b3.522fd810e7a1c" Vi3gUKwxQzZrjFrdQ@MAAAAV TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1352 8724 -% 953689 5556 945273 1402 6 0 192.168.24.161 CH - [2015-05-26 09:12:05.748898] "POST /EMail/MailHandler HTTP/1.1" 200 5509 "https://www.example.com/EMail/message.aspx?&mailId=3894_3&folderId=2846_92&mailPos=0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "267d56b3.522fd810e7a1c" Vi3gVawxQzZrjFrdQ@UAAAAa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1022 6031 -% 1300755 9960 287876 175 6 0 192.168.24.161 CH - [2015-05-26 09:13:48.096060] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "267d56b3.522fd810e7a1c" Vi3gvKwxQzZrjFreEzMAAABM TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1323 4430 -% 944437 10477 931512 244 6 0 192.168.24.161 CH - [2015-05-26 09:13:49.126322] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "267d56b3.522fd810e7a1c" Vi3gvawxQzZrjFreEzQAAABT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 733 318 -% 936772 9063 925762 228 6 0 192.168.24.161 CH - [2015-05-26 09:13:50.085994] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "267d56b3.522fd810e7a1c" Vi3gvqwxQzZrjFreEzUAAABO TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 715 7758 -% 939634 8454 926632 2827 6 0 192.168.24.161 CH - [2015-05-26 09:13:51.058342] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "267d56b3.522fd810e7a1c" Vi3gv6wxQzZrjFreEzcAAABR TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 831 2421 13% 1005826 9900 0 127 6 0 192.168.24.161 CH - [2015-05-26 09:13:51.115838] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "267d56b3.522fd810e7a1c" Vi3gv6wxQzZrjFreEzgAAABX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1290 1982 22% 951605 8692 941051 80 6 0 192.168.24.161 CH - [2015-05-26 09:13:51.137959] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "267d56b3.522fd810e7a1c" Vi3gv6wxQzZrjFreEzoAAABa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1316 7767 22% 1005916 5363 0 120 6 0 192.168.24.161 CH - [2015-05-26 09:13:51.127443] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "267d56b3.522fd810e7a1c" Vi3gv6wxQzZrjFreEzkAAABS TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1289 700 56% 1153196 8417 143105 123 6 0 192.168.186.76 CH - [2015-05-26 09:25:43.329200] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3jh6wxQzZrjFreE6UAAABF TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 12038 -% 1227666 6563 214999 3933 3 0 192.168.186.76 CH - [2015-05-26 09:25:44.615445] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "6f4b898b.522fc9d202483" Vi3jiKwxQzZrjFreE6YAAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 662 0 -% 997744 6434 985404 3902 3 0 192.168.186.76 CH - [2015-05-26 09:26:49.972632] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3jyawxQzZrjFrdRBYAAAAP TLSv1.2 ECDHE-RSA-AES256-SHA384 1261 13742 -% 1377226 7515 361674 3196 3 0 192.168.186.76 CH - [2015-05-26 09:26:54.733431] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3jzqwxQzZrjFrdRBgAAAAQ TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1144650 12965 129614 147 3 0 192.168.186.76 CH - [2015-05-26 09:26:55.889802] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 9511 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3jz6wxQzZrjFrdRBkAAAAR TLSv1.2 ECDHE-RSA-AES256-SHA384 726 10111 -% 1180994 7646 164274 6738 3 0 192.168.32.7 CH - [2015-05-26 09:30:55.417647] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3kv6wxQzZrjFreE9oAAAB6 TLSv1.2 ECDHE-RSA-AES128-SHA256 1251 4318 -% 915580 10156 902212 349 3 0 192.168.32.7 CH - [2015-05-26 09:30:56.343267] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3kwKwxQzZrjFreE9sAAAB8 TLSv1.2 ECDHE-RSA-AES128-SHA256 598 7834 -% 962040 3386 954520 2584 3 0 192.168.32.7 CH - [2015-05-26 09:30:57.371756] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi3kwawxQzZrjFreE9wAAAB@ TLSv1.2 ECDHE-RSA-AES128-SHA256 550 7834 -% 980148 4031 970584 3397 3 0 192.168.186.76 CH - [2015-05-26 09:31:02.544923] "GET /EMail/message.aspx?&mailId=3894_7&folderId=947_65&mailPos=0 HTTP/1.1" 200 16996 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3kxqwxQzZrjFrdRCIAAAAb TLSv1.2 ECDHE-RSA-AES256-SHA384 1244 17914 -% 2723592 11468 673757 35026 3 0 192.168.186.76 CH - [2015-05-26 09:31:12.527620] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9504 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3k0KwxQzZrjFreE98AAABB TLSv1.2 ECDHE-RSA-AES256-SHA384 1180 10272 -% 1525104 4125 516466 2862 3 0 192.168.186.76 CH - [2015-05-26 09:31:14.082554] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3k0qwxQzZrjFreE@EAAABF TLSv1.2 ECDHE-RSA-AES256-SHA384 694 1978 -% 1013807 6021 5945 164 3 0 192.168.186.76 CH - [2015-05-26 09:31:15.294441] "GET /EMail/message.aspx?&mailId=3894_6&folderId=947_65&mailPos=1 HTTP/1.1" 200 16959 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3k06wxQzZrjFreE@IAAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 710 17705 -% 1239290 5563 189306 40611 3 0 192.168.186.76 CH - [2015-05-26 09:31:24.431786] "GET /EMail/newMessage.aspx?action=reply&mailId=3894_6&folderId=947_65&showPics=false HTTP/1.1" 200 25589 "https://www.example.com/EMail/message.aspx?&mailId=3894_6&folderId=947_65&mailPos=1" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3k3KwxQzZrjFreE@UAAABJ TLSv1.2 ECDHE-RSA-AES256-SHA384 1367 30575 -% 1168157 6435 108062 49325 6 3 192.168.186.76 CH - [2015-05-26 09:31:25.769119] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5871 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3894_6&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3k3awxQzZrjFreE@YAAABK TLSv1.2 ECDHE-RSA-AES256-SHA384 710 9650 -% 871162 4237 0 0 3 0 192.168.186.76 CH - [2015-05-26 09:31:25.685593] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3894_6&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3k3awxQzZrjFrdRCQAAAAe TLSv1.2 ECDHE-RSA-AES256-SHA384 1319 7526 -% 968518 4499 955689 6441 3 0 192.168.186.76 CH - [2015-05-26 09:39:29.536569] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9504 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3mwawxQzZrjFreFDgAAABh TLSv1.2 ECDHE-RSA-AES256-SHA384 1154 10272 -% 1363521 4477 351345 4862 3 0 192.168.186.76 CH - [2015-05-26 09:39:29.532696] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3mwawxQzZrjFreFDcAAABf TLSv1.2 ECDHE-RSA-AES256-SHA384 1212 9827 -% 1557936 5350 542597 4769 3 0 192.168.186.76 CH - [2015-05-26 09:39:32.881278] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3mxKwxQzZrjFreFDoAAABj TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1228783 15790 211073 180 3 0 192.168.186.76 CH - [2015-05-26 09:39:34.123136] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8381 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "6f4b898b.522fc9d202483" Vi3mxqwxQzZrjFreFDsAAABl TLSv1.2 ECDHE-RSA-AES256-SHA384 726 0 -% 1138079 5372 127016 4015 3 0 192.168.186.76 CH - [2015-05-26 09:39:35.291822] "GET /EMail/sent.aspx?dir=desc HTTP/1.1" 200 47693 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3mx6wxQzZrjFreFD0AAABi TLSv1.2 ECDHE-RSA-AES256-SHA384 1180 49149 -% 2587809 4594 123706 16889 3 0 192.168.24.76 CH - [2015-05-26 09:41:03.060903] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@regis-sa.com" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "9550008f.522fdebcb431e" Vi3nH6wxQzZrjFreFE4AAAB1 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1115 737 56% 866412 1901 863862 127 0 0 192.168.24.76 CH - [2015-05-26 09:41:03.069952] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7160 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@regis-sa.com" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "9550008f.522fdebcb431e" Vi3nH6wxQzZrjFreFE8AAAB5 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1105 8033 22% 1028411 2864 22059 170 0 0 192.168.24.76 CH - [2015-05-26 09:41:03.028090] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@regis-sa.com" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "9550008f.522fdebcb431e" Vi3nH6wxQzZrjFreFE0AAABz TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 882 5902 22% 1115004 3244 110502 168 0 0 192.168.24.76 CH - [2015-05-26 09:41:03.073950] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@regis-sa.com" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "9550008f.522fdebcb431e" Vi3nH6wxQzZrjFrdRDoAAAA1 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1127 1828 -% 1282181 1724 279672 179 0 0 192.168.24.76 CH - [2015-05-26 09:41:04.289761] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/css/NNstyle.css" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "9550008f.522fdebcb431e" Vi3nIKwxQzZrjFreFFAAAAB4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 517 1792 -% 817335 2460 814211 130 0 0 192.168.24.76 CH - [2015-05-26 09:41:05.152728] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@regis-sa.com" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "9550008f.522fdebcb431e" Vi3nIawxQzZrjFreFFEAAAB9 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 537 1567 -% 913789 2074 910888 161 0 0 192.168.147.214 CH - [2015-05-26 09:41:31.711147] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "d4e7a66d.522fded85940e" Vi3nO6wxQzZrjFrdRD4AAAA5 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 844 5706 -% 894658 1957 892075 121 0 0 192.168.147.214 CH - [2015-05-26 09:41:31.709931] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "d4e7a66d.522fded85940e" Vi3nO6wxQzZrjFrdRD0AAAA9 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 832 4615 56% 1086225 2691 82462 125 0 0 192.168.147.214 CH - [2015-05-26 09:41:33.142565] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/css/NNstyle.css" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "d4e7a66d.522fded85940e" Vi3nPawxQzZrjFrdRD8AAAA6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 517 1792 -% 961113 3138 957187 142 0 0 192.168.147.214 CH - [2015-05-26 09:41:33.766975] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/css/NNstyle.css" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "d4e7a66d.522fded85940e" Vi3nPawxQzZrjFrdREAAAAA4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 515 2088 -% 811961 2038 809052 166 0 0 192.168.147.214 CH - [2015-05-26 09:41:35.542618] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "d4e7a66d.522fded85940e" Vi3nP6wxQzZrjFrdREEAAAA7 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 774 421 -% 927726 3463 923626 133 0 0 192.168.147.214 CH - [2015-05-26 09:41:36.497966] "GET /EMail/main.aspx HTTP/1.1" 200 3393 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "d4e7a66d.522fded85940e" Vi3nQKwxQzZrjFrdREIAAAA@ TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 601 3809 -% 867510 2466 863306 1268 0 0 192.168.147.214 CH - [2015-05-26 09:41:37.431665] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "d4e7a66d.522fded85940e" Vi3nQawxQzZrjFrdREMAAAA- TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 577 4128 -% 942362 2385 931556 7743 0 0 192.168.147.214 CH - [2015-05-26 09:41:37.432916] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8532 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "d4e7a66d.522fded85940e" Vi3nQawxQzZrjFrdREQAAAA8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 605 9186 -% 1852640 2287 842225 4455 0 0 192.168.147.214 CH - [2015-05-26 09:41:39.722778] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "d4e7a66d.522fded85940e" Vi3nQ6wxQzZrjFrdREUAAAAA TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 559 1260 -% 860545 2876 856779 121 0 0 192.168.147.214 CH - [2015-05-26 09:41:40.755964] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 26387 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "d4e7a66d.522fded85940e" Vi3nRKwxQzZrjFrdREYAAAAD TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 615 26955 -% 1206780 3152 70344 12300 0 0 192.168.147.214 CH - [2015-05-26 09:41:42.183673] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "d4e7a66d.522fded85940e" Vi3nRqwxQzZrjFrdREgAAAAE TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 518 539 -% 946868 1905 944223 185 0 0 192.168.147.214 CH - [2015-05-26 09:41:42.382450] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "d4e7a66d.522fded85940e" Vi3nRqwxQzZrjFrdREkAAAAH TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 521 1878 -% 938191 3252 933836 124 0 0 192.168.147.214 CH - [2015-05-26 09:41:46.615047] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "d4e7a66d.522fded85940e" Vi3nSqwxQzZrjFrdREoAAAAC TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 598 409 -% 956599 3574 952141 120 0 0 192.168.147.214 CH - [2015-05-26 09:41:47.664616] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "d4e7a66d.522fded85940e" Vi3nS6wxQzZrjFrdREwAAAAI TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 579 676 75% 654015 2830 650043 275 0 0 192.168.147.214 CH - [2015-05-26 09:41:48.433010] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "https://www.example.com/EMail/index.html" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "d4e7a66d.522fded85940e" Vi3nTKwxQzZrjFrdRE0AAAAK TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 596 318 -% 716787 2209 713851 151 0 0 192.168.147.214 CH - [2015-05-26 09:41:49.261051] "GET /EMail/login.aspx HTTP/1.1" 200 7343 "https://www.example.com/EMail/index.html" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "d4e7a66d.522fded85940e" Vi3nTawxQzZrjFrdRE4AAAAJ TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 578 7765 -% 855958 2586 849787 2783 0 0 192.168.104.36 CH - [2015-05-26 09:42:48.664541] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1aacecd.522fda9492aa5" Vi3niKwxQzZrjFreFF8AAABJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1296 4447 -% 1048816 4993 43019 153 0 0 192.168.104.36 CH - [2015-05-26 09:42:49.731615] "GET /EMail/main.aspx HTTP/1.1" 200 3394 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1aacecd.522fda9492aa5" Vi3niawxQzZrjFreFGAAAABK TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 483 3810 -% 959064 3101 954237 1118 0 0 192.168.104.36 CH - [2015-05-26 09:42:50.851542] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1aacecd.522fda9492aa5" Vi3niqwxQzZrjFreFGEAAABI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 436 4141 -% 1017776 3277 6369 7506 0 0 192.168.104.36 CH - [2015-05-26 09:42:50.920862] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1aacecd.522fda9492aa5" Vi3niqwxQzZrjFreFGMAAABH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1088 9749 -% 1354939 2236 350282 1889 0 0 192.168.104.36 CH - [2015-05-26 09:42:50.917850] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1aacecd.522fda9492aa5" Vi3niqwxQzZrjFreFGIAAABG TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1114 13218 -% 1963942 3500 953727 2809 0 0 192.168.24.76 CH - [2015-05-26 09:42:52.822277] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/css/NNstyle.css" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "9550008f.522fdebcb431e" Vi3njKwxQzZrjFreFGUAAABQ TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1082 2231 -% 1044590 2926 40765 183 0 0 192.168.24.76 CH - [2015-05-26 09:42:55.163997] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@regis-sa.com" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "9550008f.522fdebcb431e" Vi3nj6wxQzZrjFreFGYAAABM TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 944 332 -% 1111894 9014 101849 159 0 0 192.168.24.76 CH - [2015-05-26 09:42:56.308358] "GET /EMail/error.aspx HTTP/1.1" 200 3739 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@regis-sa.com" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "9550008f.522fdebcb431e" Vi3nkKwxQzZrjFreFGgAAABV TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 656 4161 -% 824406 2447 814307 7165 0 0 192.168.104.36 CH - [2015-05-26 09:42:56.063590] "GET /EMail/inbox.aspx HTTP/1.1" 200 53024 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1aacecd.522fda9492aa5" Vi3nkKwxQzZrjFreFGcAAABT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 439 53766 -% 2034422 3061 537691 25946 0 0 192.168.104.36 CH - [2015-05-26 09:43:07.585831] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1aacecd.522fda9492aa5" Vi3nm6wxQzZrjFreFGsAAABa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1107 4435 -% 723855 2358 720718 190 0 0 192.168.104.36 CH - [2015-05-26 09:43:08.428815] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1aacecd.522fda9492aa5" Vi3nnKwxQzZrjFreFG0AAABU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 404 318 -% 918419 3364 913843 187 0 0 192.168.104.36 CH - [2015-05-26 09:43:09.399675] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1aacecd.522fda9492aa5" Vi3nnawxQzZrjFreFG4AAABX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 386 7771 -% 923556 2887 917633 2406 0 0 192.168.104.36 CH - [2015-05-26 09:43:10.496843] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1aacecd.522fda9492aa5" Vi3nnqwxQzZrjFreFHQAAABZ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1191 8122 23% 892551 2814 888157 148 0 0 192.168.104.36 CH - [2015-05-26 09:43:10.371856] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1aacecd.522fda9492aa5" Vi3nnqwxQzZrjFreFG8AAABW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 508 2551 14% 1041606 2579 37497 170 0 0 192.168.104.36 CH - [2015-05-26 09:43:10.482992] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1aacecd.522fda9492aa5" Vi3nnqwxQzZrjFreFHIAAABY TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1186 11687 22% 952168 2366 946887 142 0 0 192.168.104.36 CH - [2015-05-26 09:43:10.413057] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1aacecd.522fda9492aa5" Vi3nnqwxQzZrjFreFHAAAABb TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1155 5902 22% 1068457 2938 64373 160 0 0 192.168.104.36 CH - [2015-05-26 09:43:10.486323] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1aacecd.522fda9492aa5" Vi3nnqwxQzZrjFreFHMAAABd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1194 4232 -% 1101937 1733 99303 162 0 0 192.168.104.36 CH - [2015-05-26 09:43:10.426692] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1aacecd.522fda9492aa5" Vi3nnqwxQzZrjFreFHEAAABc TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1154 4620 56% 1213478 1744 211062 143 0 0 192.168.104.36 CH - [2015-05-26 09:43:11.697536] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1aacecd.522fda9492aa5" Vi3nn6wxQzZrjFreFHUAAABe TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 548 206 -% 883363 2002 880588 182 0 0 192.168.104.36 CH - [2015-05-26 09:43:16.119485] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1aacecd.522fda9492aa5" Vi3npKwxQzZrjFrdRFMAAAAP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1107 4435 -% 954718 2257 951693 206 0 0 192.168.104.36 CH - [2015-05-26 09:43:17.145540] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1aacecd.522fda9492aa5" Vi3npawxQzZrjFrdRFQAAAAQ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 404 318 -% 952629 3322 948688 146 0 0 192.168.104.36 CH - [2015-05-26 09:43:18.110260] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1aacecd.522fda9492aa5" Vi3npqwxQzZrjFrdRFUAAAAR TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 386 7771 -% 959702 1977 953228 3905 0 0 192.168.104.36 CH - [2015-05-26 09:43:19.203600] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1aacecd.522fda9492aa5" Vi3np6wxQzZrjFreFHgAAABj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1154 4620 56% 838282 2651 834859 153 0 0 192.168.104.36 CH - [2015-05-26 09:43:19.216560] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1aacecd.522fda9492aa5" Vi3np6wxQzZrjFrdRFgAAAAU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1186 11687 22% 828357 2847 822897 115 0 0 192.168.104.36 CH - [2015-05-26 09:43:19.208079] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1aacecd.522fda9492aa5" Vi3np6wxQzZrjFreFHkAAABf TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1155 5902 22% 973309 3105 969105 135 0 0 192.168.104.36 CH - [2015-05-26 09:43:19.121171] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1aacecd.522fda9492aa5" Vi3np6wxQzZrjFrdRFYAAAAS TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 508 2427 14% 1060662 3046 56027 185 0 0 192.168.104.36 CH - [2015-05-26 09:43:19.225746] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1aacecd.522fda9492aa5" Vi3np6wxQzZrjFreFHoAAABl TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1194 4232 -% 1115643 2567 112344 135 0 0 192.168.104.36 CH - [2015-05-26 09:43:19.212781] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1aacecd.522fda9492aa5" Vi3np6wxQzZrjFrdRFcAAAAT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1191 8122 23% 1141415 2899 136975 114 0 0 192.168.104.36 CH - [2015-05-26 09:43:20.426782] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1aacecd.522fda9492aa5" Vi3nqKwxQzZrjFrdRFkAAAAX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 548 206 -% 785941 1977 783273 138 0 0 192.168.186.76 CH - [2015-05-26 10:00:28.884189] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3rrKwxQzZrjFrdRJAAAAAO TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1556603 8975 539819 2767 3 0 192.168.186.76 CH - [2015-05-26 10:00:31.213923] "GET /EMail/message.aspx?&mailId=3894_7&folderId=947_65&mailPos=0 HTTP/1.1" 200 16847 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3rr6wxQzZrjFrdRJEAAAAP TLSv1.2 ECDHE-RSA-AES256-SHA384 710 17593 -% 1334924 5178 286950 38107 3 0 192.168.186.76 CH - [2015-05-26 10:00:34.196687] "GET /EMail/newMessage.aspx?action=reply&mailId=3894_7&folderId=947_65&showPics=false HTTP/1.1" 200 25394 "https://www.example.com/EMail/message.aspx?&mailId=3894_7&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3rsqwxQzZrjFrdRJMAAAAR TLSv1.2 ECDHE-RSA-AES256-SHA384 774 26307 -% 1209378 8223 135795 61174 6 3 192.168.186.76 CH - [2015-05-26 10:00:35.488467] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3894_7&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3rs6wxQzZrjFrdRJQAAAAU TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 920446 4651 902970 11446 3 0 192.168.186.76 CH - [2015-05-26 10:00:35.643574] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5871 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3894_7&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3rs6wxQzZrjFreFRkAAABJ TLSv1.2 ECDHE-RSA-AES256-SHA384 1303 13726 -% 996406 5324 0 0 3 0 192.168.186.76 CH - [2015-05-26 10:02:16.330059] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3894_7&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3sGKwxQzZrjFrdRJsAAAAV TLSv1.2 ECDHE-RSA-AES256-SHA384 9879 630 -% 1954457 582013 352124 218 86 0 192.168.186.76 CH - [2015-05-26 10:02:18.297058] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3894_7&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3sGqwxQzZrjFrdRJwAAAAa TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 874036 6307 850385 15598 3 0 192.168.186.76 CH - [2015-05-26 10:02:22.670387] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8388 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3sHqwxQzZrjFrdRJ4AAAAb TLSv1.2 ECDHE-RSA-AES256-SHA384 662 8991 -% 1187783 4807 176599 4341 3 0 192.168.186.76 CH - [2015-05-26 10:14:27.047370] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3u86wxQzZrjFreFZsAAABQ TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1372295 8998 353853 4183 3 0 192.168.186.76 CH - [2015-05-26 10:15:28.168328] "GET /EMail/message.aspx?&mailId=3894_9&folderId=947_65&mailPos=0 HTTP/1.1" 200 16485 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3vMKwxQzZrjFrdRMIAAAAD TLSv1.2 ECDHE-RSA-AES256-SHA384 1228 17402 -% 3035949 7423 990883 35001 3 0 192.168.186.76 CH - [2015-05-26 10:15:53.259617] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5871 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3894_9&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3vSawxQzZrjFreFaoAAABh TLSv1.2 ECDHE-RSA-AES256-SHA384 1303 13726 -% 901719 7335 0 0 3 0 192.168.186.76 CH - [2015-05-26 10:16:06.171605] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3894_9&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3vVqwxQzZrjFreFawAAABf TLSv1.2 ECDHE-RSA-AES256-SHA384 8785 630 -% 2221151 442610 0 201 81 0 192.168.186.76 CH - [2015-05-26 10:16:08.407419] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3894_9&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3vWKwxQzZrjFreFa0AAABl TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 857600 6377 841006 8504 3 0 192.168.186.76 CH - [2015-05-26 10:16:10.977440] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9733 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3vWqwxQzZrjFreFa8AAABi TLSv1.2 ECDHE-RSA-AES256-SHA384 662 10335 -% 1399486 4401 388314 4813 3 0 192.168.186.76 CH - [2015-05-26 10:16:27.300378] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3va6wxQzZrjFreFbMAAABq TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1144290 7637 128879 2741 3 0 192.168.186.76 CH - [2015-05-26 10:16:30.577611] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3vbqwxQzZrjFreFbUAAABk TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1385810 15052 368562 157 3 0 192.168.186.76 CH - [2015-05-26 10:16:31.975424] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8546 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3vb6wxQzZrjFreFbYAAABt TLSv1.2 ECDHE-RSA-AES256-SHA384 726 9151 -% 1078549 5471 67515 4026 3 0 192.168.186.76 CH - [2015-05-26 10:16:33.582880] "GET /EMail/message.aspx?&mailId=3894_10&folderId=947_65&mailPos=0 HTTP/1.1" 200 16227 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3vcawxQzZrjFreFbcAAABw TLSv1.2 ECDHE-RSA-AES256-SHA384 726 16900 -% 4422130 5248 376965 37239 3 0 192.168.186.76 CH - [2015-05-26 10:16:40.391800] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3894_10&folderId=947_65&attachmentId=3&token=26990362478012652E18 HTTP/1.1" 200 1237465 "https://www.example.com/EMail/message.aspx?&mailId=3894_10&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3veKwxQzZrjFreFboAAABv TLSv1.2 ECDHE-RSA-AES256-SHA384 806 1299998 -% 1484415 9093 39769 173 3 0 192.168.186.76 CH - [2015-05-26 10:17:04.804383] "GET /EMail/newMessage.aspx?action=reply&mailId=3894_10&folderId=947_65&showPics=false HTTP/1.1" 200 23494 "https://www.example.com/EMail/message.aspx?&mailId=3894_10&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3vkKwxQzZrjFreFb8AAAB1 TLSv1.2 ECDHE-RSA-AES256-SHA384 1292 24495 -% 1401352 7113 314587 64663 6 3 192.168.186.76 CH - [2015-05-26 10:17:06.279340] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3894_10&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3vkqwxQzZrjFreFcEAAABz TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 910781 6005 884949 7660 3 0 192.168.186.76 CH - [2015-05-26 10:17:27.815516] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3vp6wxQzZrjFreFcYAAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1672371 4563 656325 4815 3 0 192.168.186.76 CH - [2015-05-26 10:17:31.636153] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3vq6wxQzZrjFreFccAAAB6 TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1150541 8264 140523 164 3 0 192.168.186.76 CH - [2015-05-26 10:17:32.800062] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7290 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3vrKwxQzZrjFreFcgAAAB8 TLSv1.2 ECDHE-RSA-AES256-SHA384 726 7802 -% 977743 7589 966076 2528 3 0 192.168.212.2 CH - [2015-05-26 10:20:59.062200] "GET /EMail/images/icon10.ico HTTP/1.1" 304 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c080348a.522fe7ab1c7b8" Vi3we6wxQzZrjFreFekAAABj TLSv1 ECDHE-RSA-AES256-SHA 816 4204 -% 879703 3729 873501 246 3 0 192.168.186.76 CH - [2015-05-26 10:22:32.249411] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7291 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3w2KwxQzZrjFreFfgAAABv TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 11878 -% 1099263 5038 90336 2394 3 0 192.168.186.76 CH - [2015-05-26 10:22:38.218430] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3w3qwxQzZrjFreFfoAAABy TLSv1.2 ECDHE-RSA-AES256-SHA384 694 9666 -% 1530237 7364 492988 3848 3 0 192.168.212.2 CH - [2015-05-26 10:23:57.179300] "GET /EMail/inbox.aspx HTTP/1.1" 200 26795 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi3xLawxQzZrjFreFgIAAAB- TLSv1 ECDHE-RSA-AES256-SHA 840 31215 -% 1648850 3091 494899 13610 0 0 192.168.212.2 CH - [2015-05-26 10:23:59.133709] "GET /EMail/images/Highost.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi3xL6wxQzZrjFreFgQAAAB6 TLSv1 ECDHE-RSA-AES256-SHA 952 4049 -% 954582 3138 950617 173 0 0 192.168.212.2 CH - [2015-05-26 10:23:59.439411] "GET /EMail/images/attach.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi3xL6wxQzZrjFreFgUAAAB8 TLSv1 ECDHE-RSA-AES256-SHA 936 4049 -% 925531 4544 920095 162 0 0 192.168.212.2 CH - [2015-05-26 10:24:08.742352] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3893_6&folderId=1001_9&attachmentId=2&token=26240343707336212E18 HTTP/1.1" 200 55844 "https://www.example.com/EMail/message.aspx?&mailId=3893_6&folderId=1001_9&mailPos=14" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi3xOKwxQzZrjFreFgcAAABC TLSv1 ECDHE-RSA-AES256-SHA 984 61439 -% 1093244 5690 66096 221 0 0 192.168.212.2 CH - [2015-05-26 10:24:44.783766] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 28088 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi3xXKwxQzZrjFreFg4AAABI TLSv1 ECDHE-RSA-AES256-SHA 840 32548 -% 1445882 5495 269430 13908 0 0 192.168.212.2 CH - [2015-05-26 10:24:48.182911] "GET /EMail/message.aspx?&mailId=3891_96&folderId=1001_9&mailPos=14 HTTP/1.1" 200 11490 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi3xYKwxQzZrjFreFhAAAABG TLSv1 ECDHE-RSA-AES256-SHA 888 15840 -% 1351380 3660 326466 20152 0 0 192.168.212.2 CH - [2015-05-26 10:24:50.983156] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3891_96&folderId=1001_9&attachmentId=2&token=34427948893764403E17 HTTP/1.1" 200 55014 "https://www.example.com/EMail/message.aspx?&mailId=3891_96&folderId=1001_9&mailPos=14" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi3xYqwxQzZrjFreFhEAAABQ TLSv1 ECDHE-RSA-AES256-SHA 984 60570 -% 1216622 6401 47078 226 0 0 192.168.212.2 CH - [2015-05-26 10:25:17.827585] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 28080 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi3xfawxQzZrjFreFhkAAABY TLSv1 ECDHE-RSA-AES256-SHA 840 32511 -% 1304298 2469 140057 9600 0 0 192.168.212.2 CH - [2015-05-26 10:25:53.775526] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi3xoawxQzZrjFreFh8AAABj TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1628245 3172 616468 4429 0 0 192.168.212.2 CH - [2015-05-26 10:25:57.076630] "GET /EMail/message.aspx?&mailId=3891_97&folderId=1001_9&mailPos=12 HTTP/1.1" 200 11491 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi3xpawxQzZrjFreFiAAAABm TLSv1 ECDHE-RSA-AES256-SHA 888 15840 -% 1257386 3021 229723 23359 0 0 192.168.212.2 CH - [2015-05-26 10:26:00.230948] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3891_97&folderId=1001_9&attachmentId=2&token=64121686447071066E17 HTTP/1.1" 200 55475 "https://www.example.com/EMail/message.aspx?&mailId=3891_97&folderId=1001_9&mailPos=12" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi3xqKwxQzZrjFrdROYAAAAm TLSv1 ECDHE-RSA-AES256-SHA 984 60960 -% 1085119 5023 58192 438 0 0 192.168.212.2 CH - [2015-05-26 10:26:24.836876] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi3xwKwxQzZrjFreFicAAABk TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1815085 3452 805069 2850 0 0 192.168.212.2 CH - [2015-05-26 10:26:28.987676] "GET /EMail/message.aspx?&mailId=3891_98&folderId=1001_9&mailPos=12 HTTP/1.1" 200 11490 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi3xxKwxQzZrjFreFigAAABx TLSv1 ECDHE-RSA-AES256-SHA 888 15840 -% 1392996 4815 359712 27085 0 0 192.168.212.2 CH - [2015-05-26 10:26:58.682526] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 29358 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi3x4qwxQzZrjFreFiwAAABy TLSv1 ECDHE-RSA-AES256-SHA 840 33791 -% 1635681 2249 336607 9465 0 0 192.168.79.137 CH - [2015-05-26 10:27:03.739075] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3x56wxQzZrjFreFi8AAAB5 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1095 5897 22% 809109 3068 804628 166 0 0 192.168.79.137 CH - [2015-05-26 10:27:03.753163] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3x56wxQzZrjFreFjMAAABz TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1085 11682 22% 1085786 2808 79025 178 0 0 192.168.79.137 CH - [2015-05-26 10:27:03.748621] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3x56wxQzZrjFreFjAAAAB1 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1095 4615 56% 1159186 2632 155805 130 0 0 192.168.79.137 CH - [2015-05-26 10:27:03.752661] "GET /EMail/scripts/variables_fr.js HTTP/1.1" 200 1679 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3x56wxQzZrjFreFjIAAAB4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1090 6201 27% 1203343 2604 199704 115 0 0 192.168.79.137 CH - [2015-05-26 10:27:03.749821] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3x56wxQzZrjFreFjEAAAB9 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1094 5588 -% 1210465 2702 207113 78 0 0 192.168.79.137 CH - [2015-05-26 10:27:05.040935] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/css/NNstyle.css" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3x6awxQzZrjFreFjQAAAB- TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 480 1792 -% 908856 3186 904842 119 0 0 192.168.79.137 CH - [2015-05-26 10:27:23.592362] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/css/NNstyle.css" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3x@6wxQzZrjFreFjYAAAB6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1045 2226 -% 975980 3804 970749 145 0 0 192.168.79.137 CH - [2015-05-26 10:27:24.217018] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3x-KwxQzZrjFrdROwAAAAt TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1206 559 -% 994928 5202 988783 177 0 0 192.168.79.137 CH - [2015-05-26 10:27:25.251620] "GET /EMail/main.aspx HTTP/1.1" 200 3393 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3x-awxQzZrjFreFjgAAAB8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 493 3809 -% 663618 1795 659634 1613 0 0 192.168.79.137 CH - [2015-05-26 10:27:26.052704] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3x-qwxQzZrjFreFjkAAAB@ TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 494 4128 -% 852576 2958 842590 6171 0 0 192.168.79.137 CH - [2015-05-26 10:27:26.126421] "GET /EMail/overview.aspx HTTP/1.1" 200 5296 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3x-qwxQzZrjFreFjoAAABD TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1063 5856 -% 1419514 2935 413142 2699 0 0 192.168.79.137 CH - [2015-05-26 10:27:26.051726] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8532 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3x-qwxQzZrjFrdRO0AAAAu TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 522 9186 -% 1804600 3542 791291 4455 0 0 192.168.79.137 CH - [2015-05-26 10:27:27.607344] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3x-6wxQzZrjFreFjsAAABC TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 480 1248 -% 856489 3893 851033 163 0 0 192.168.79.137 CH - [2015-05-26 10:27:27.977095] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3x-6wxQzZrjFrdRO4AAAAv TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 522 1260 -% 993512 2922 989682 172 0 0 192.168.79.137 CH - [2015-05-26 10:27:29.826542] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8532 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3yAawxQzZrjFreFjwAAABB TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 549 9186 -% 1462466 2575 453296 2620 0 0 192.168.79.137 CH - [2015-05-26 10:27:29.825485] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 23523 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3yAawxQzZrjFrdRO8AAAAw TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 532 24062 -% 1587427 3708 476311 7540 0 0 192.168.79.137 CH - [2015-05-26 10:27:31.558707] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3yA6wxQzZrjFreFj4AAABE TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 484 527 -% 842486 2437 839292 162 0 0 192.168.79.137 CH - [2015-05-26 10:27:31.636120] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3yA6wxQzZrjFreFj8AAABL TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1051 2016 -% 777614 3551 773272 100 0 0 192.168.79.137 CH - [2015-05-26 10:27:31.671287] "GET /EMail/images/msgOpenedReplied.png HTTP/1.1" 200 717 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3yA6wxQzZrjFreFkAAAABN TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1058 1267 -% 794307 3124 790368 160 0 0 192.168.79.137 CH - [2015-05-26 10:27:31.558275] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3yA6wxQzZrjFreFj0AAABF TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 481 539 -% 963087 1904 960372 160 0 0 192.168.79.137 CH - [2015-05-26 10:27:31.674151] "GET /EMail/images/Highprio.gif HTTP/1.1" 200 91 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3yA6wxQzZrjFreFkEAAABK TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1050 639 -% 1082749 2589 79451 127 0 0 192.168.79.137 CH - [2015-05-26 10:27:34.703845] "GET /EMail/newMessage.aspx?msg=new HTTP/1.1" 200 12062 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3yBqwxQzZrjFrdRPEAAAAy TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 533 12543 -% 1158360 4535 119911 31782 3 3 192.168.79.137 CH - [2015-05-26 10:27:34.704961] "GET /EMail/tree.aspx?sNode-sharedTree=treeNewMsg HTTP/1.1" 200 8532 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3yBqwxQzZrjFreFkMAAABI TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 547 9186 -% 1532052 2404 521448 4131 0 0 192.168.79.137 CH - [2015-05-26 10:27:36.036323] "GET /EMail/scripts/tinymce/tinymce.min.js HTTP/1.1" 200 101964 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3yCKwxQzZrjFrdRPIAAAA0 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 468 103440 33% 1446537 2917 883044 172 0 0 192.168.79.137 CH - [2015-05-26 10:27:37.659143] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2907 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3yCawxQzZrjFrdRPMAAAAz TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 515 3300 -% 775605 1831 765764 7493 0 0 192.168.79.137 CH - [2015-05-26 10:27:37.703338] "GET /EMail/scripts/tinymce/langs/fr.js HTTP/1.1" 200 2883 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3yCawxQzZrjFreFkQAAABH TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 465 3413 38% 881043 2802 876648 166 0 0 192.168.79.137 CH - [2015-05-26 10:27:37.779914] "GET /EMail/scripts/tinymce/plugins/preview/plugin.min.js HTTP/1.1" 200 737 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3yCawxQzZrjFreFkYAAABG TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1050 1375 51% 920382 1668 917619 216 0 0 192.168.79.137 CH - [2015-05-26 10:27:37.795304] "GET /EMail/scripts/tinymce/plugins/searchreplace/plugin.min.js HTTP/1.1" 200 2586 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3yCawxQzZrjFreFkgAAABV TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1056 3254 40% 944899 2706 940957 103 0 0 192.168.79.137 CH - [2015-05-26 10:27:37.778174] "GET /EMail/scripts/tinymce/plugins/print/plugin.min.js HTTP/1.1" 200 182 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3yCawxQzZrjFreFkUAAABP TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1048 819 55% 964992 2314 961783 124 0 0 192.168.79.137 CH - [2015-05-26 10:27:37.780948] "GET /EMail/scripts/tinymce/plugins/paste/plugin.min.js HTTP/1.1" 200 6239 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3yCawxQzZrjFreFkcAAABM TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1048 6908 40% 1191989 1634 188883 133 0 0 192.168.79.137 CH - [2015-05-26 10:27:38.473882] "GET /EMail/scripts/tinymce/plugins/fullpage/plugin.min.js HTTP/1.1" 200 2325 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3yCqwxQzZrjFrdRPQAAAA1 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 484 2855 36% 699657 2335 696166 169 0 0 192.168.79.137 CH - [2015-05-26 10:27:38.622484] "GET /EMail/scripts/tinymce/plugins/charmap/plugin.min.js HTTP/1.1" 200 2698 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3yCqwxQzZrjFreFkkAAABQ TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 483 3228 38% 570140 3044 565448 142 0 0 192.168.79.137 CH - [2015-05-26 10:27:38.780948] "GET /EMail/scripts/tinymce/plugins/visualblocks/plugin.min.js HTTP/1.1" 200 525 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3yCqwxQzZrjFreFksAAABT TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 488 1025 43% 753400 2889 749424 162 0 0 192.168.79.137 CH - [2015-05-26 10:27:38.737847] "GET /EMail/scripts/tinymce/plugins/insertdatetime/plugin.min.js HTTP/1.1" 200 867 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3yCqwxQzZrjFreFkoAAABO TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 490 1367 42% 821092 2452 817832 121 0 0 192.168.79.137 CH - [2015-05-26 10:27:38.785772] "GET /EMail/scripts/tinymce/plugins/hr/plugin.min.js HTTP/1.1" 200 191 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3yCqwxQzZrjFreFkwAAABR TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 478 690 53% 881868 2625 878344 151 0 0 192.168.79.137 CH - [2015-05-26 10:27:39.013751] "GET /EMail/scripts/tinymce/plugins/link/plugin.min.js HTTP/1.1" 200 1835 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3yC6wxQzZrjFreFk0AAABS TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 480 2336 41% 668796 2267 665609 133 0 0 192.168.79.137 CH - [2015-05-26 10:27:39.230986] "GET /EMail/scripts/tinymce/plugins/textcolor/plugin.min.js HTTP/1.1" 200 1647 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3yC6wxQzZrjFreFk4AAABa TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 485 2148 44% 548307 2661 544757 122 0 0 192.168.79.137 CH - [2015-05-26 10:27:39.211997] "GET /EMail/scripts/tinymce/plugins/anchor/plugin.min.js HTTP/1.1" 200 339 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3yC6wxQzZrjFrdRPUAAAA2 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 482 838 63% 749540 1826 746874 164 0 0 192.168.79.137 CH - [2015-05-26 10:27:39.571832] "GET /EMail/scripts/tinymce/plugins/visualchars/plugin.min.js HTTP/1.1" 200 608 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3yC6wxQzZrjFreFk8AAABU TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 487 1108 54% 856403 2038 853433 169 0 0 192.168.79.137 CH - [2015-05-26 10:27:39.613516] "GET /EMail/scripts/tinymce/plugins/image/plugin.min.js HTTP/1.1" 200 2136 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3yC6wxQzZrjFreFlAAAABX TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 481 2666 42% 854788 2709 850827 131 0 0 192.168.79.137 CH - [2015-05-26 10:27:39.721643] "GET /EMail/scripts/tinymce/themes/modern/theme.min.js HTTP/1.1" 200 2651 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3yC6wxQzZrjFreFlEAAABZ TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 480 3181 41% 798867 4273 792212 497 0 0 192.168.79.137 CH - [2015-05-26 10:27:39.723498] "GET /EMail/scripts/tinymce/plugins/table/plugin.min.js HTTP/1.1" 200 9181 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3yC6wxQzZrjFreFlIAAABW TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 481 10005 32% 980092 2695 973768 138 0 0 192.168.79.137 CH - [2015-05-26 10:27:40.909561] "GET /EMail/scripts/tinymce/skins/lightgray/skin.min.css HTTP/1.1" 200 6071 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3yDKwxQzZrjFrdRPcAAAA5 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 497 6837 17% 1014130 2749 7496 168 0 0 192.168.79.137 CH - [2015-05-26 10:27:40.916544] "GET /EMail/scripts/tinymce/skins/lightgray/content.min.css HTTP/1.1" 200 588 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3yDKwxQzZrjFreFlMAAABY TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 500 1081 38% 1032455 2680 28977 104 0 0 192.168.79.137 CH - [2015-05-26 10:27:40.917544] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5471 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3yDKwxQzZrjFreFlQAAABb TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 475 7122 -% 1080341 1648 0 0 0 0 192.168.79.137 CH - [2015-05-26 10:27:42.056471] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce-small.woff HTTP/1.1" 200 7848 "https://www.example.com/EMail/scripts/tinymce/skins/lightgray/skin.min.css" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3yDqwxQzZrjFrdRPgAAAA9 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 574 8276 -% 892208 1916 889518 160 0 0 192.168.212.2 CH - [2015-05-26 10:27:49.136563] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi3yFawxQzZrjFrdRPoAAAA4 TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1955689 3906 942354 4718 0 0 192.168.24.161 CH - [2015-05-26 10:28:34.278608] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7367 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "61319516.522fe95d3d4d0" Vi3yQqwxQzZrjFreFl0AAABl TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1004 11973 -% 920019 5018 911438 2233 6 0 192.168.24.161 CH - [2015-05-26 10:28:36.570520] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "61319516.522fe95d3d4d0" Vi3yRKwxQzZrjFreFl8AAABp TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 988 421 -% 986242 9375 974922 360 6 0 192.168.24.161 CH - [2015-05-26 10:28:37.583552] "GET /EMail/main.aspx HTTP/1.1" 200 3399 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "61319516.522fe95d3d4d0" Vi3yRawxQzZrjFreFmAAAABn TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 830 3815 -% 876288 9176 863232 1825 6 0 192.168.24.161 CH - [2015-05-26 10:28:38.544584] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "61319516.522fe95d3d4d0" Vi3yRqwxQzZrjFreFmEAAABq TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 765 4128 -% 958579 11017 939334 6769 6 0 192.168.24.161 CH - [2015-05-26 10:28:38.552480] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "61319516.522fe95d3d4d0" Vi3yRqwxQzZrjFreFmIAAABo TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1255 9285 -% 1735095 15295 710025 4586 6 0 192.168.24.161 CH - [2015-05-26 10:28:44.760334] "GET /EMail/inbox.aspx HTTP/1.1" 200 9637 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "61319516.522fe95d3d4d0" Vi3yTKwxQzZrjFreFmQAAABk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 768 10088 -% 1251041 6270 240285 3015 6 0 192.168.24.161 CH - [2015-05-26 10:28:46.057997] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "61319516.522fe95d3d4d0" Vi3yTqwxQzZrjFreFmYAAABw TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 789 1878 -% 889849 7401 880100 162 6 0 192.168.24.161 CH - [2015-05-26 10:28:48.797599] "GET /EMail/message.aspx?&mailId=3894_3&folderId=2846_92&mailPos=0 HTTP/1.1" 200 15235 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "61319516.522fe95d3d4d0" Vi3yUKwxQzZrjFreFmcAAABs TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 809 15687 -% 1278984 10962 234911 31185 6 0 192.168.24.161 CH - [2015-05-26 10:28:52.152384] "GET /EMail/newMessage.aspx?action=reply&mailId=3894_3&folderId=2846_92&showPics=false HTTP/1.1" 200 16662 "https://www.example.com/EMail/message.aspx?&mailId=3894_3&folderId=2846_92&mailPos=0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "61319516.522fe95d3d4d0" Vi3yVKwxQzZrjFreFmkAAABu TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 873 17172 -% 1044285 11424 846 29508 9 3 192.168.24.161 CH - [2015-05-26 10:28:53.342404] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2942 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3894_3&folderId=2846_92&showPics=false" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "61319516.522fe95d3d4d0" Vi3yVawxQzZrjFreFmoAAAB2 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 837 3335 -% 918431 7148 900225 8564 6 0 192.168.24.161 CH - [2015-05-26 10:28:53.447962] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5879 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3894_3&folderId=2846_92&showPics=false" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "61319516.522fe95d3d4d0" Vi3yVawxQzZrjFreFmsAAABx TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1344 11552 -% 949882 5485 0 0 6 0 192.168.79.137 CH - [2015-05-26 10:29:27.806126] "GET /EMail/attachost.aspx HTTP/1.1" 200 4956 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3yd6wxQzZrjFreFnEAAAB4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1080 5510 -% 932207 1877 927204 2527 0 0 192.168.212.2 CH - [2015-05-26 10:29:43.431912] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi3yh6wxQzZrjFreFnUAAABA TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1901927 3624 889910 4497 0 0 192.168.212.2 CH - [2015-05-26 10:29:47.137955] "GET /EMail/message.aspx?&mailId=3894_11&folderId=1001_9&mailPos=9 HTTP/1.1" 200 11489 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi3yi6wxQzZrjFrdRP4AAAAA TLSv1 ECDHE-RSA-AES256-SHA 888 15824 -% 1236104 4343 207809 22302 0 0 192.168.79.137 CH - [2015-05-26 10:29:48.452034] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/attachost.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3yjKwxQzZrjFrdRP8AAAAB TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 85062 476 -% 767004 4603 618344 170 0 0 192.168.79.137 CH - [2015-05-26 10:29:49.257510] "GET /EMail/attachost.aspx HTTP/1.1" 200 6421 "https://www.example.com/EMail/attachments.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3yjawxQzZrjFrdRQAAAAAE TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 506 6837 -% 548212 2925 540619 3884 0 0 192.168.79.137 CH - [2015-05-26 10:29:56.158042] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3ylKwxQzZrjFreFngAAABD TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1798 535 -% 1023518 16169 5211 134 18 0 192.168.79.137 CH - [2015-05-26 10:29:57.221477] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc= HTTP/1.1" 200 3902 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3ylawxQzZrjFreFnkAAABC TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 572 4324 -% 965162 6720 950471 7292 0 0 192.168.79.137 CH - [2015-05-26 10:30:01.642556] "GET /EMail/newMessage.aspx?msg=new HTTP/1.1" 200 12063 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeNewMsg" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3ymawxQzZrjFreFnoAAABB TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 534 12515 -% 936650 2394 907058 25475 3 3 192.168.79.137 CH - [2015-05-26 10:30:01.724815] "GET /EMail/tree.aspx?sNode-sharedTree=treeNewMsg HTTP/1.1" 200 8532 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeNewMsg" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3ymawxQzZrjFreFnsAAABE TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1115 9324 -% 1560219 4099 551209 2878 0 0 192.168.79.137 CH - [2015-05-26 10:30:02.764376] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2907 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3ymqwxQzZrjFreFn0AAABN TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 515 3300 -% 933015 3498 922718 5981 0 0 192.168.79.137 CH - [2015-05-26 10:30:02.975610] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5471 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3ymqwxQzZrjFrdRQIAAAAG TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1042 7260 -% 936757 1854 0 0 0 0 192.168.212.2 CH - [2015-05-26 10:30:32.001318] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 30628 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi3yuKwxQzZrjFreFoMAAABQ TLSv1 ECDHE-RSA-AES256-SHA 840 35092 -% 1741205 2538 457602 9697 0 0 192.168.212.2 CH - [2015-05-26 10:30:32.003143] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi3yuKwxQzZrjFreFoQAAABT TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1845958 2556 837096 2831 0 0 192.168.212.2 CH - [2015-05-26 10:30:35.792471] "GET /EMail/message.aspx?&mailId=3894_12&folderId=1001_9&mailPos=8 HTTP/1.1" 200 11488 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi3yu6wxQzZrjFrdRQUAAAAJ TLSv1 ECDHE-RSA-AES256-SHA 888 15824 -% 1255435 5153 226029 23124 0 0 192.168.212.2 CH - [2015-05-26 10:31:08.637755] "GET /EMail/message.aspx?&mailId=3894_13&folderId=1001_9&mailPos=8 HTTP/1.1" 200 11488 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi3y3KwxQzZrjFreFosAAABY TLSv1 ECDHE-RSA-AES256-SHA 888 15803 -% 1200677 4921 172579 22120 0 0 192.168.79.137 CH - [2015-05-26 10:31:11.201700] "GET /EMail/attachost.aspx HTTP/1.1" 200 4955 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3y36wxQzZrjFreFowAAABd TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1080 5509 -% 966056 2170 961430 1890 0 0 192.168.212.2 CH - [2015-05-26 10:31:11.332256] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3894_13&folderId=1001_9&attachmentId=2&token=31376539489681889E18 HTTP/1.1" 200 56076 "https://www.example.com/EMail/message.aspx?&mailId=3894_13&folderId=1001_9&mailPos=8" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi3y36wxQzZrjFreFo0AAABc TLSv1 ECDHE-RSA-AES256-SHA 984 61663 -% 1065895 5006 38212 177 0 0 192.168.79.137 CH - [2015-05-26 10:31:20.102917] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/attachost.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3y6KwxQzZrjFrdRQgAAAAM TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 125134 476 -% 1136398 3493 0 478 0 0 192.168.79.137 CH - [2015-05-26 10:31:21.278707] "GET /EMail/attachost.aspx HTTP/1.1" 200 6421 "https://www.example.com/EMail/attachments.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3y6awxQzZrjFrdRQkAAAAO TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 506 6837 -% 978346 2588 971772 3214 0 0 192.168.79.137 CH - [2015-05-26 10:31:30.334562] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3y8qwxQzZrjFreFpEAAABf TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1662 535 -% 1225694 13341 210405 134 23 0 192.168.79.137 CH - [2015-05-26 10:31:31.599887] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc= HTTP/1.1" 200 3902 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3y86wxQzZrjFreFpIAAABm TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 572 4324 -% 874462 5408 856246 12089 0 0 192.168.79.137 CH - [2015-05-26 10:31:34.549373] "GET /EMail/newMessage.aspx?msg=new HTTP/1.1" 200 12064 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeNewMsg" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3y9qwxQzZrjFreFpQAAABl TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 534 12545 -% 1207131 3095 172435 29035 3 3 192.168.79.137 CH - [2015-05-26 10:31:34.623353] "GET /EMail/tree.aspx?sNode-sharedTree=treeNewMsg HTTP/1.1" 200 8532 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeNewMsg" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3y9qwxQzZrjFreFpUAAABp TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1115 9324 -% 1586795 2354 577444 3661 0 0 192.168.79.137 CH - [2015-05-26 10:31:35.997514] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2907 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3y96wxQzZrjFreFpYAAABo TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 515 3300 -% 928449 2469 918059 7343 0 0 192.168.79.137 CH - [2015-05-26 10:31:36.191169] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5471 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3y@KwxQzZrjFrdRQsAAAAP TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1042 7260 -% 980683 2571 0 0 0 0 192.168.79.137 CH - [2015-05-26 10:32:04.962734] "GET /EMail/attachost.aspx HTTP/1.1" 200 4955 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3zFKwxQzZrjFreFpkAAABk TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 857 9392 -% 1029014 3177 22196 2716 0 0 192.168.79.137 CH - [2015-05-26 10:32:16.998108] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/attachost.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3zIKwxQzZrjFreFpwAAABv TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 85410 4359 -% 1004208 4900 0 210 0 0 192.168.79.137 CH - [2015-05-26 10:32:18.041767] "GET /EMail/attachost.aspx HTTP/1.1" 200 6428 "https://www.example.com/EMail/attachments.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3zIqwxQzZrjFreFp0AAABu TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 506 6844 -% 1071557 1813 66977 2212 0 0 192.168.79.137 CH - [2015-05-26 10:32:52.842731] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3zRKwxQzZrjFrdRREAAAAZ TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1606 4418 -% 1055596 10837 42661 145 18 0 192.168.79.137 CH - [2015-05-26 10:32:53.937852] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc= HTTP/1.1" 200 3902 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3zRawxQzZrjFrdRRIAAAAY TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 572 4324 -% 994060 4984 974609 13498 0 0 192.168.79.137 CH - [2015-05-26 10:32:56.631134] "GET /EMail/sent.aspx?dir=desc HTTP/1.1" 200 44793 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeNewMsg" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3zSKwxQzZrjFrdRRQAAAAa TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 529 45477 -% 1964641 3160 495875 13986 0 0 192.168.212.2 CH - [2015-05-26 10:33:07.192372] "GET /EMail/message.aspx?&mailId=3894_15&folderId=1001_9&mailPos=8 HTTP/1.1" 200 11488 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi3zU6wxQzZrjFreFqQAAAB1 TLSv1 ECDHE-RSA-AES256-SHA 888 15824 -% 1097573 3689 69643 23184 0 0 192.168.212.2 CH - [2015-05-26 10:33:48.491204] "GET /EMail/message.aspx?&mailId=3894_16&folderId=1001_9&mailPos=7 HTTP/1.1" 200 11494 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi3zfKwxQzZrjFreFqwAAABD TLSv1 ECDHE-RSA-AES256-SHA 888 15840 -% 1305137 4253 273661 26014 0 0 192.168.212.2 CH - [2015-05-26 10:33:51.446515] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3894_16&folderId=1001_9&attachmentId=2&token=159221802275481504E17 HTTP/1.1" 200 56875 "https://www.example.com/EMail/message.aspx?&mailId=3894_16&folderId=1001_9&mailPos=7" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi3zf6wxQzZrjFreFq0AAABL TLSv1 ECDHE-RSA-AES256-SHA 984 62463 -% 1197770 5582 165455 214 0 0 192.168.24.161 CH - [2015-05-26 10:34:05.956789] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/attachost.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "61319516.522fe95d3d4d0" Vi3zjawxQzZrjFreFq8AAABI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 572552 4359 -% 7283535 6436 0 126 6 0 192.168.24.161 CH - [2015-05-26 10:34:13.265479] "GET /EMail/attachost.aspx HTTP/1.1" 200 6447 "https://www.example.com/EMail/attachments.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "61319516.522fe95d3d4d0" Vi3zlawxQzZrjFreFrIAAABN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 802 6863 -% 943931 9103 928484 4301 6 0 192.168.79.137 CH - [2015-05-26 10:34:19.183648] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3zm6wxQzZrjFrdRRwAAAAl TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1082 547 -% 1259085 3467 254785 178 0 0 192.168.79.137 CH - [2015-05-26 10:34:20.494163] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3znKwxQzZrjFrdRR0AAAAm TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 496 676 75% 936068 3036 932004 269 0 0 192.168.79.137 CH - [2015-05-26 10:34:21.507232] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 - - + "7631c7d2.522fe90593942" Vi3znawxQzZrjFrdRR4AAAAn TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 393 1554 -% 2694 1769 54 122 0 0 192.168.79.137 CH - [2015-05-26 10:34:21.580104] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3znawxQzZrjFreFrUAAABV TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1029 456 -% 882741 2748 879356 158 0 0 192.168.79.137 CH - [2015-05-26 10:34:22.502094] "GET /EMail/login.aspx HTTP/1.1" 200 7343 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "7631c7d2.522fe90593942" Vi3znqwxQzZrjFrdRR8AAAAo TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 444 7765 -% 914903 1832 910312 2206 0 0 192.168.212.2 CH - [2015-05-26 10:34:25.745378] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi3zoawxQzZrjFreFrYAAABM TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1596557 4786 583148 4583 0 0 192.168.212.2 CH - [2015-05-26 10:34:32.488577] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3894_17&folderId=1001_9&attachmentId=2&token=23788250952526991E18 HTTP/1.1" 200 53998 "https://www.example.com/EMail/message.aspx?&mailId=3894_17&folderId=1001_9&mailPos=6" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi3zqKwxQzZrjFreFrgAAABR TLSv1 ECDHE-RSA-AES256-SHA 984 59488 -% 1129698 6592 101522 195 0 0 192.168.24.161 CH - [2015-05-26 10:34:49.704663] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3894_3&folderId=2846_92&showPics=false" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "61319516.522fe95d3d4d0" Vi3zuawxQzZrjFrdRSMAAAAs TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 8334 525 -% 1804079 417226 315091 161 79 0 192.168.24.161 CH - [2015-05-26 10:34:51.534719] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4029 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3894_3&folderId=2846_92&showPics=false" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "61319516.522fe95d3d4d0" Vi3zu6wxQzZrjFrdRSUAAAAu TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 941 4451 -% 982603 9901 945304 10471 6 0 192.168.24.161 CH - [2015-05-26 10:34:55.391052] "POST /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 9645 "https://www.example.com/EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "61319516.522fe95d3d4d0" Vi3zv6wxQzZrjFrdRSYAAAAv TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 994 10096 -% 1064240 6373 50764 4765 6 0 192.168.24.161 CH - [2015-05-26 10:34:58.885757] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "61319516.522fe95d3d4d0" Vi3zwqwxQzZrjFrdRSgAAAAw TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 786 409 -% 1031643 9483 20395 182 6 0 192.168.24.161 CH - [2015-05-26 10:35:00.018143] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "61319516.522fe95d3d4d0" Vi3zxKwxQzZrjFrdRSkAAAAy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 733 318 -% 924944 11974 910938 125 6 0 192.168.24.161 CH - [2015-05-26 10:35:00.967954] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "61319516.522fe95d3d4d0" Vi3zxKwxQzZrjFrdRSoAAAAz TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 715 7758 -% 984813 6516 973739 3090 6 0 192.168.24.161 CH - [2015-05-26 10:35:01.982695] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "61319516.522fe95d3d4d0" Vi3zxawxQzZrjFrdRSsAAAA1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 831 2421 13% 992742 8058 982204 170 6 0 192.168.24.161 CH - [2015-05-26 10:35:02.030454] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "61319516.522fe95d3d4d0" Vi3zxqwxQzZrjFreFrsAAABa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1202 4227 -% 1123227 6841 114597 162 6 0 192.168.24.161 CH - [2015-05-26 10:35:02.018534] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "61319516.522fe95d3d4d0" Vi3zxqwxQzZrjFrdRSwAAAA0 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1188 8117 23% 1393933 5997 384281 368 6 0 192.168.24.161 CH - [2015-05-26 10:35:03.459855] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "61319516.522fe95d3d4d0" Vi3zx6wxQzZrjFrdRS8AAAA5 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 877 206 -% 952003 9278 940329 171 6 0 192.168.212.2 CH - [2015-05-26 10:35:13.838825] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi3z0awxQzZrjFrdRTIAAAA@ TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1752669 3258 742455 2983 0 0 192.168.212.2 CH - [2015-05-26 10:35:20.303552] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3894_18&folderId=1001_9&attachmentId=2&token=25335392950340577E18 HTTP/1.1" 200 61176 "https://www.example.com/EMail/message.aspx?&mailId=3894_18&folderId=1001_9&mailPos=5" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi3z2KwxQzZrjFreFr0AAABZ TLSv1 ECDHE-RSA-AES256-SHA 984 66862 -% 1093060 4309 63507 367 0 0 192.168.212.2 CH - [2015-05-26 10:35:53.744387] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi3z@awxQzZrjFrdRTUAAAAD TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1617247 2470 606063 4495 0 0 192.168.212.2 CH - [2015-05-26 10:35:57.542039] "GET /EMail/message.aspx?&mailId=3894_19&folderId=1001_9&mailPos=4 HTTP/1.1" 200 11489 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi3z-awxQzZrjFrdRTYAAAAE TLSv1 ECDHE-RSA-AES256-SHA 888 15824 -% 1054824 4952 27597 21198 0 0 192.168.212.2 CH - [2015-05-26 10:36:00.345991] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3894_19&folderId=1001_9&attachmentId=2&token=31435529346965069E17 HTTP/1.1" 200 55160 "https://www.example.com/EMail/message.aspx?&mailId=3894_19&folderId=1001_9&mailPos=4" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi30AKwxQzZrjFreFsQAAABg TLSv1 ECDHE-RSA-AES256-SHA 984 60714 -% 1025699 4375 0 219 0 0 192.168.212.2 CH - [2015-05-26 10:36:23.497851] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi30F6wxQzZrjFrdRTkAAAAC TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 2008793 6818 991217 6418 0 0 192.168.212.2 CH - [2015-05-26 10:36:23.498618] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 34470 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi30F6wxQzZrjFreFsgAAABl TLSv1 ECDHE-RSA-AES256-SHA 840 38953 -% 2118500 5322 854229 12550 0 0 192.168.212.2 CH - [2015-05-26 10:36:30.236210] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3894_20&folderId=1001_9&attachmentId=2&token=22145514582463808E18 HTTP/1.1" 200 55857 "https://www.example.com/EMail/message.aspx?&mailId=3894_20&folderId=1001_9&mailPos=3" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi30HqwxQzZrjFreFsoAAABr TLSv1 ECDHE-RSA-AES256-SHA 984 61439 -% 1357717 4733 330773 171 0 0 192.168.212.2 CH - [2015-05-26 10:36:58.293363] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi30OqwxQzZrjFreFs4AAABw TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1840336 2883 830990 3065 0 0 192.168.212.2 CH - [2015-05-26 10:37:05.246537] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3894_24&folderId=1001_9&attachmentId=2&token=29906823385277061E18 HTTP/1.1" 200 53188 "https://www.example.com/EMail/message.aspx?&mailId=3894_24&folderId=1001_9&mailPos=2" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi30QawxQzZrjFreFtAAAAB2 TLSv1 ECDHE-RSA-AES256-SHA 984 58672 -% 1142315 5862 115359 199 0 0 192.168.212.2 CH - [2015-05-26 10:37:27.592218] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 34454 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi30V6wxQzZrjFreFtUAAAB5 TLSv1 ECDHE-RSA-AES256-SHA 840 38937 -% 1933795 3831 682612 10273 0 0 192.168.212.2 CH - [2015-05-26 10:37:49.898169] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi30bawxQzZrjFreFtgAAAB- TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1662889 3058 651500 4641 0 0 192.168.212.2 CH - [2015-05-26 10:37:49.899195] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 34445 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi30bawxQzZrjFreFtkAAAB9 TLSv1 ECDHE-RSA-AES256-SHA 840 38937 -% 1778960 2635 572125 15927 0 0 192.168.212.2 CH - [2015-05-26 10:37:57.045981] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3894_23&folderId=1001_9&attachmentId=2&token=100792165376329552E17 HTTP/1.1" 200 59601 "https://www.example.com/EMail/message.aspx?&mailId=3894_23&folderId=1001_9&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi30dawxQzZrjFrdRUAAAAAQ TLSv1 ECDHE-RSA-AES256-SHA 984 65294 -% 1127694 4139 112115 172 0 0 192.168.24.161 CH - [2015-05-26 10:38:39.391094] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "3c2d21fc.522feb9e51d76" Vi30n6wxQzZrjFreFuQAAABN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 963 11942 -% 882347 6666 869730 3969 6 0 192.168.212.2 CH - [2015-05-26 10:38:38.501485] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/moveToFolder.aspx?folderName=Inbox&mailId=3894_23&mailId=3894_22&mailId=3894_24&mailId=3894_20&mailId=3894_19&mailId=3894_18&mailId=3894_17&mailId=3894_16&mailId=3894_15&mailId=3894_14&mailId=3894_13&mailId=3894_12&mailId=3894_11&mailId=3893_10&mailId=3893_9&mailId=3891_100&mailId=3891_98&mailId=3891_97&mailId=3893_7&mailId=3891_96&mailId=3893_6" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi30nqwxQzZrjFreFuMAAABG TLSv1 ECDHE-RSA-AES256-SHA 1762 4177 -% 2495692 14009 438531 142 0 0 192.168.212.2 CH - [2015-05-26 10:38:42.426927] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "c080348a.522fe7ab1c7b8" Vi30oqwxQzZrjFrdRUEAAAAR TLSv1 ECDHE-RSA-AES256-SHA 768 5393 -% 4291 2683 45 100 3 0 192.168.212.2 CH - [2015-05-26 10:38:42.252624] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7290 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi30oqwxQzZrjFreFuYAAABV TLSv1 ECDHE-RSA-AES256-SHA 840 11558 -% 1054034 3238 46001 4246 0 0 192.168.212.2 CH - [2015-05-26 10:38:43.549433] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi30o6wxQzZrjFreFucAAABP TLSv1 ECDHE-RSA-AES256-SHA 904 4049 -% 1050173 2729 46394 373 0 0 192.168.212.2 CH - [2015-05-26 10:38:53.545133] "GET /EMail/images/tree/folder/minus-first-node.gif HTTP/1.1" 200 842 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi30rawxQzZrjFrdRUMAAAAS TLSv1 ECDHE-RSA-AES256-SHA 952 5094 -% 874986 1982 872354 149 0 0 192.168.212.2 CH - [2015-05-26 10:39:05.193216] "GET /EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle HTTP/1.1" 200 12819 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi30uawxQzZrjFreFuoAAABR TLSv1 ECDHE-RSA-AES256-SHA 904 17527 -% 1281305 4289 265155 5061 0 0 192.168.212.2 CH - [2015-05-26 10:39:08.508614] "GET /EMail/folderOverview.aspx HTTP/1.1" 200 5658 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi30vKwxQzZrjFreFuwAAABS TLSv1 ECDHE-RSA-AES256-SHA 840 9926 -% 2237108 1845 232833 1935 0 0 192.168.212.2 CH - [2015-05-26 10:39:08.507708] "GET /EMail/tree.aspx?sNode-sharedTree=treePerFolderOverView HTTP/1.1" 200 12828 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi30vKwxQzZrjFreFusAAABU TLSv1 ECDHE-RSA-AES256-SHA 872 17527 -% 2515019 2778 501288 4970 0 0 192.168.212.2 CH - [2015-05-26 10:40:03.045985] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi3086wxQzZrjFreFvcAAABf TLSv1 ECDHE-RSA-AES256-SHA 856 4257 -% 939766 2657 936265 200 0 0 192.168.212.2 CH - [2015-05-26 10:40:04.147004] "GET /EMail/index.html HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi309KwxQzZrjFrdRUcAAAAY TLSv1 ECDHE-RSA-AES256-SHA 920 4049 -% 833566 2373 830080 189 0 0 192.168.212.2 CH - [2015-05-26 10:40:06.399198] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi309qwxQzZrjFreFvsAAABn TLSv1 ECDHE-RSA-AES256-SHA 776 11622 -% 841050 3086 835008 2271 0 0 192.168.212.2 CH - [2015-05-26 10:40:07.507089] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi3096wxQzZrjFrdRUgAAAAa TLSv1 ECDHE-RSA-AES256-SHA 904 4049 -% 1091241 3062 87387 174 0 0 192.168.192.35 CH - [2015-05-26 10:49:44.612967] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e1497f6c.522fee17b7a39" Vi33OKwxQzZrjFreF1AAAAB@ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1090 5902 22% 848042 3019 843413 217 0 0 192.168.192.35 CH - [2015-05-26 10:49:44.615064] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e1497f6c.522fee17b7a39" Vi33OKwxQzZrjFrdRWsAAAA- TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1090 4620 56% 975881 1894 973080 194 0 0 192.168.192.35 CH - [2015-05-26 10:49:44.617030] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e1497f6c.522fee17b7a39" Vi33OKwxQzZrjFreF1EAAABC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1120 8122 23% 1097819 1997 93848 147 0 0 192.168.192.35 CH - [2015-05-26 10:49:44.612921] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7239 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e1497f6c.522fee17b7a39" Vi33OKwxQzZrjFreF08AAABD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1115 12067 22% 1105002 2407 98744 114 0 0 192.168.192.35 CH - [2015-05-26 10:49:44.617058] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e1497f6c.522fee17b7a39" Vi33OKwxQzZrjFrdRWwAAAA8 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1129 5711 -% 1338052 2051 335190 177 0 0 192.168.192.35 CH - [2015-05-26 10:49:45.804868] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e1497f6c.522fee17b7a39" Vi33OawxQzZrjFreF1IAAABL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 491 1792 -% 962498 1952 959879 146 0 0 192.168.192.35 CH - [2015-05-26 10:49:46.877160] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f8b671c.522fee1ae24e8" Vi33OqwxQzZrjFrdRW0AAAAA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 880 5756 -% 686185 717 684334 220 0 0 192.168.192.35 CH - [2015-05-26 10:49:52.320966] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e1497f6c.522fee17b7a39" Vi33QKwxQzZrjFrdRW8AAAAB TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1298 4447 -% 1021073 4712 15445 151 0 0 192.168.192.35 CH - [2015-05-26 10:49:53.351970] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e1497f6c.522fee17b7a39" Vi33QawxQzZrjFrdRXEAAAAH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 492 3812 -% 872565 1860 868309 1825 0 0 192.168.192.35 CH - [2015-05-26 10:49:53.797902] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e1497f6c.522fee17b7a39" Vi33QawxQzZrjFreF1MAAABB TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1131 6114 -% 944944 1943 942171 187 0 0 192.168.192.35 CH - [2015-05-26 10:49:54.305512] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e1497f6c.522fee17b7a39" Vi33QqwxQzZrjFrdRXIAAAAG TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 427 4141 -% 901315 2973 887355 10279 0 0 192.168.192.35 CH - [2015-05-26 10:49:54.347592] "GET /EMail/overview.aspx HTTP/1.1" 200 5303 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e1497f6c.522fee17b7a39" Vi33QqwxQzZrjFreF1QAAABJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1071 9751 -% 1259775 2164 253823 2712 0 0 192.168.192.35 CH - [2015-05-26 10:49:54.341193] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e1497f6c.522fee17b7a39" Vi33QqwxQzZrjFrdRXMAAAAI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1097 13218 -% 1453021 3106 441935 4220 0 0 192.168.192.35 CH - [2015-05-26 10:49:55.636807] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e1497f6c.522fee17b7a39" Vi33Q6wxQzZrjFreF1UAAABK TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 456 1248 -% 610341 2123 607259 268 0 0 192.168.192.35 CH - [2015-05-26 10:49:55.836680] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e1497f6c.522fee17b7a39" Vi33Q6wxQzZrjFrdRXQAAAAC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 498 1260 -% 1023817 2992 19769 263 0 0 192.168.192.35 CH - [2015-05-26 10:49:56.803593] "GET /EMail/inbox.aspx HTTP/1.1" 200 9889 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e1497f6c.522fee17b7a39" Vi33RKwxQzZrjFreF1YAAABN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 430 10340 -% 1091142 3284 81951 4959 0 0 192.168.192.35 CH - [2015-05-26 10:49:57.936282] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e1497f6c.522fee17b7a39" Vi33RawxQzZrjFrdRXUAAAAK TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 451 527 -% 791915 2968 788131 149 0 0 192.168.192.35 CH - [2015-05-26 10:49:57.936111] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e1497f6c.522fee17b7a39" Vi33RawxQzZrjFreF1cAAABG TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 448 539 -% 1012703 2969 8851 193 0 0 192.168.192.35 CH - [2015-05-26 10:49:57.936461] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e1497f6c.522fee17b7a39" Vi33RawxQzZrjFrdRXYAAAAF TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 451 1813 -% 1059901 3785 55068 166 0 0 192.168.192.35 CH - [2015-05-26 10:49:59.909093] "GET /EMail/message.aspx?&mailId=3894_27&folderId=540_81&mailPos=0 HTTP/1.1" 200 11346 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e1497f6c.522fee17b7a39" Vi33R6wxQzZrjFrdRXcAAAAJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 471 11827 -% 1202822 4804 171980 24889 0 0 192.168.192.35 CH - [2015-05-26 10:50:03.058654] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3894_27&folderId=540_81&attachmentId=2&token=184143283677353408E17 HTTP/1.1" 200 54923 "https://www.example.com/EMail/message.aspx?&mailId=3894_27&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e1497f6c.522fee17b7a39" Vi33S6wxQzZrjFrdRXgAAAAL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 577 56495 -% 1243342 6245 214984 376 0 0 192.168.192.35 CH - [2015-05-26 10:50:13.694282] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/message.aspx?&mailId=3894_27&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e1497f6c.522fee17b7a39" Vi33VawxQzZrjFreF14AAABR TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1134 6114 -% 809161 1947 806513 152 0 0 192.168.192.35 CH - [2015-05-26 10:50:21.301226] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3894_27&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e1497f6c.522fee17b7a39" Vi33XawxQzZrjFreF2AAAABS TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1346 4382 -% 1182074 6451 174798 157 0 0 192.168.192.35 CH - [2015-05-26 10:50:22.493456] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8590 "https://www.example.com/EMail/message.aspx?&mailId=3894_27&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e1497f6c.522fee17b7a39" Vi33XqwxQzZrjFreF2EAAABa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 520 9041 -% 1104097 4183 94139 4484 0 0 192.168.192.35 CH - [2015-05-26 10:50:25.092442] "GET /EMail/message.aspx?&mailId=3894_26&folderId=540_81&mailPos=0 HTTP/1.1" 200 11192 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e1497f6c.522fee17b7a39" Vi33YawxQzZrjFreF2MAAABX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 495 11644 -% 1389526 4885 360746 22779 0 0 192.168.192.35 CH - [2015-05-26 10:50:28.683605] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3894_26&folderId=540_81&attachmentId=2&token=49365084550631552E17 HTTP/1.1" 200 54345 "https://www.example.com/EMail/message.aspx?&mailId=3894_26&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e1497f6c.522fee17b7a39" Vi33ZKwxQzZrjFreF2QAAABW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 576 55917 -% 1000830 6160 973023 182 0 0 192.168.192.35 CH - [2015-05-26 10:51:00.842330] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3894_26&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e1497f6c.522fee17b7a39" Vi33hKwxQzZrjFreF2oAAABe TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1346 4382 -% 1158859 4038 154100 146 0 0 192.168.192.35 CH - [2015-05-26 10:51:02.012434] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7290 "https://www.example.com/EMail/message.aspx?&mailId=3894_26&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e1497f6c.522fee17b7a39" Vi33hqwxQzZrjFreF2sAAABh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 520 7712 -% 1113913 4715 105174 3316 0 0 192.168.192.35 CH - [2015-05-26 10:51:02.492585] "GET /EMail/tree.aspx?sNode-sharedTree=treeTrash HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e1497f6c.522fee17b7a39" Vi33hqwxQzZrjFreF2wAAABj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1094 13218 -% 1595595 2628 584116 4555 0 0 192.168.192.35 CH - [2015-05-26 10:51:02.492582] "GET /EMail/trash.aspx?dir=desc HTTP/1.1" 200 56674 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e1497f6c.522fee17b7a39" Vi33hqwxQzZrjFreF2wAAABg TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1077 61471 -% 2072105 3239 579938 20777 0 0 192.168.192.35 CH - [2015-05-26 10:51:04.617924] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/trash.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e1497f6c.522fee17b7a39" Vi33iKwxQzZrjFreF24AAABl TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 460 1878 -% 871706 3258 867521 191 0 0 192.168.192.35 CH - [2015-05-26 10:51:07.543317] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e1497f6c.522fee17b7a39" Vi33i6wxQzZrjFreF28AAABp TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 429 5723 -% 1093742 2223 88394 2260 0 0 192.168.192.35 CH - [2015-05-26 10:51:07.551458] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e1497f6c.522fee17b7a39" Vi33i6wxQzZrjFreF3AAAABf TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 455 9192 -% 1437384 4303 423688 5307 0 0 192.168.145.72 CH - [2015-05-26 10:53:12.693351] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "958aeb03.522feedd448ef" Vi34CKwxQzZrjFreF4MAAAB4 TLSv1 AES256-SHA 949 4094 56% 1044694 2670 41213 205 0 0 192.168.145.72 CH - [2015-05-26 10:53:12.797866] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "958aeb03.522feedd448ef" Vi34CKwxQzZrjFreF4QAAAB- TLSv1 AES256-SHA 1077 3700 -% 1217342 4052 212360 170 0 0 192.168.145.72 CH - [2015-05-26 10:53:14.115635] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "958aeb03.522feedd448ef" Vi34CqwxQzZrjFreF4UAAAB7 TLSv1 AES256-SHA 582 1802 -% 848004 2055 845162 335 0 0 192.168.145.72 CH - [2015-05-26 10:53:15.048440] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "958aeb03.522feedd448ef" Vi34C6wxQzZrjFreF4YAAAB9 TLSv1 AES256-SHA 422 1578 -% 656255 2603 652763 180 0 0 192.168.145.72 CH - [2015-05-26 10:53:21.478407] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "958aeb03.522feedd448ef" Vi34EawxQzZrjFreF4gAAAB6 TLSv1 AES256-SHA 1085 3904 -% 949681 6552 941075 911 0 0 192.168.145.72 CH - [2015-05-26 10:53:22.594707] "GET /EMail/main.aspx HTTP/1.1" 200 3412 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "958aeb03.522feedd448ef" Vi34EqwxQzZrjFreF4kAAAB@ TLSv1 AES256-SHA 925 7317 -% 915699 3751 910028 1234 0 0 192.168.145.72 CH - [2015-05-26 10:53:23.676168] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "958aeb03.522feedd448ef" Vi34E6wxQzZrjFreF4oAAABD TLSv1 AES256-SHA 909 7637 -% 836182 2126 827130 6399 0 0 192.168.145.72 CH - [2015-05-26 10:53:23.761861] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "958aeb03.522feedd448ef" Vi34E6wxQzZrjFreF4sAAABL TLSv1 AES256-SHA 909 9221 -% 1358194 3121 352388 1994 0 0 192.168.145.72 CH - [2015-05-26 10:53:25.866905] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "958aeb03.522feedd448ef" Vi34FawxQzZrjFreF40AAABK TLSv1 AES256-SHA 973 4757 -% 834565 4419 828887 198 0 0 192.168.145.72 CH - [2015-05-26 10:53:29.537419] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "958aeb03.522feedd448ef" Vi34GawxQzZrjFreF44AAABG TLSv1 AES256-SHA 941 5301 -% 994439 3085 990365 254 0 0 192.168.145.72 CH - [2015-05-26 10:53:32.371099] "GET /EMail/message.aspx?&mailId=3893_4&folderId=2828_57&mailPos=0 HTTP/1.1" 200 11355 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "958aeb03.522feedd448ef" Vi34HKwxQzZrjFreF48AAABV TLSv1 AES256-SHA 957 15306 -% 1307429 3549 276959 26146 0 0 192.168.145.72 CH - [2015-05-26 10:53:35.819271] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3893_4&folderId=2828_57&attachmentId=2&token=33425484240242248E18 HTTP/1.1" 200 48708 "https://www.example.com/EMail/message.aspx?&mailId=3893_4&folderId=2828_57&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "958aeb03.522feedd448ef" Vi34H6wxQzZrjFreF5IAAABO TLSv1 AES256-SHA 1053 53728 -% 1096369 4825 72501 159 0 0 192.168.145.72 CH - [2015-05-26 10:53:46.172745] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "958aeb03.522feedd448ef" Vi34KqwxQzZrjFreF5QAAABR TLSv1 AES256-SHA 925 3904 -% 940971 2571 937568 230 0 0 192.168.145.72 CH - [2015-05-26 10:53:48.410093] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "958aeb03.522feedd448ef" Vi34LKwxQzZrjFreF5UAAABS TLSv1 AES256-SHA 877 3808 -% 938366 2369 935337 142 0 0 192.168.145.72 CH - [2015-05-26 10:53:50.534767] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "958aeb03.522feedd448ef" Vi34LqwxQzZrjFreF5YAAABW TLSv1 AES256-SHA 1021 3696 -% 1024182 2120 21424 149 0 0 192.168.145.72 CH - [2015-05-26 10:53:50.534934] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "958aeb03.522feedd448ef" Vi34LqwxQzZrjFrdRYQAAAAY TLSv1 AES256-SHA 989 4090 56% 1186978 1924 184055 203 0 0 192.168.145.72 CH - [2015-05-26 10:53:50.535759] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "958aeb03.522feedd448ef" Vi34LqwxQzZrjFreF5gAAABa TLSv1 AES256-SHA 989 5370 22% 1201619 2100 198652 130 0 0 192.168.145.72 CH - [2015-05-26 10:53:50.535418] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "958aeb03.522feedd448ef" Vi34LqwxQzZrjFreF5cAAABX TLSv1 AES256-SHA 1005 3696 -% 1453964 2730 450355 407 0 0 192.168.186.76 CH - [2015-05-26 11:01:06.558401] "GET /EMail/overview.aspx HTTP/1.1" 200 5537 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi354qwxQzZrjFreGCsAAABG TLSv1.2 ECDHE-RSA-AES256-SHA384 1229 10134 -% 1492405 4044 482680 3526 3 0 192.168.186.76 CH - [2015-05-26 11:01:19.072706] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi3576wxQzZrjFrdRbkAAAAi TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1553481 7530 536647 4139 3 0 192.168.186.76 CH - [2015-05-26 11:01:21.838482] "GET /EMail/message.aspx?&mailId=3894_31&folderId=947_65&mailPos=1 HTTP/1.1" 200 16199 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi358awxQzZrjFrdRboAAAAm TLSv1.2 ECDHE-RSA-AES256-SHA384 710 16884 -% 1302702 6565 256839 36092 3 0 192.168.186.76 CH - [2015-05-26 11:01:54.112208] "GET /EMail/newMessage.aspx?action=reply&mailId=3894_31&folderId=947_65&showPics=false HTTP/1.1" 200 23999 "https://www.example.com/EMail/message.aspx?&mailId=3894_31&folderId=947_65&mailPos=1" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi36EqwxQzZrjFreGDMAAABV TLSv1.2 ECDHE-RSA-AES256-SHA384 1292 24991 -% 1405502 8982 338631 44387 6 3 192.168.186.76 CH - [2015-05-26 11:01:55.606971] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3894_31&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi36E6wxQzZrjFreGDQAAABM TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 1004515 6438 987874 8198 3 0 192.168.186.76 CH - [2015-05-26 11:02:16.735315] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi36KKwxQzZrjFreGDkAAABQ TLSv1.2 ECDHE-RSA-AES256-SHA384 1261 13742 -% 1445292 7300 427514 4827 3 0 192.168.186.76 CH - [2015-05-26 11:03:33.877288] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3894_32&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi36dawxQzZrjFrdRcMAAAAt TLSv1.2 ECDHE-RSA-AES256-SHA384 8044 4545 -% 1551911 345065 186798 200 86 0 192.168.186.76 CH - [2015-05-26 11:03:35.440899] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3894_32&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi36d6wxQzZrjFrdRcQAAAAx TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 893450 5930 877228 8729 3 0 192.168.186.76 CH - [2015-05-26 11:03:37.701293] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8392 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi36eawxQzZrjFrdRcUAAAAw TLSv1.2 ECDHE-RSA-AES256-SHA384 662 8991 -% 1402087 4726 393212 2625 3 0 192.168.186.76 CH - [2015-05-26 11:03:37.702530] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi36eawxQzZrjFreGEQAAABe TLSv1.2 ECDHE-RSA-AES256-SHA384 1261 13742 -% 1500458 5318 487513 2836 3 0 192.168.186.76 CH - [2015-05-26 11:03:41.742224] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi36fawxQzZrjFreGEUAAABd TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1288157 9875 275639 207 3 0 192.168.186.76 CH - [2015-05-26 11:03:43.044610] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7289 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi36f6wxQzZrjFreGEYAAABc TLSv1.2 ECDHE-RSA-AES256-SHA384 726 7802 -% 1128218 7836 115576 2284 3 0 192.168.186.76 CH - [2015-05-26 11:04:30.712150] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7289 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi36rqwxQzZrjFrdRcoAAAA5 TLSv1.2 ECDHE-RSA-AES256-SHA384 1180 7963 -% 918472 4261 908422 3835 3 0 192.168.212.2 CH - [2015-05-26 11:11:15.882799] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi38Q6wxQzZrjFreGIYAAABc TLSv1 ECDHE-RSA-AES256-SHA 1032 4257 -% 1113975 3935 109177 191 0 0 192.168.212.2 CH - [2015-05-26 11:11:17.129938] "GET /EMail/main.aspx HTTP/1.1" 200 3415 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi38RawxQzZrjFreGIgAAABt TLSv1 ECDHE-RSA-AES256-SHA 872 7670 -% 950316 2603 944754 2271 0 0 192.168.212.2 CH - [2015-05-26 11:11:29.382710] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7291 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi38UawxQzZrjFreGIsAAABp TLSv1 ECDHE-RSA-AES256-SHA 840 11558 -% 1257903 2962 251074 3145 0 0 192.168.212.2 CH - [2015-05-26 11:11:42.926669] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi38XqwxQzZrjFreGI8AAABw TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1374120 4167 362308 3960 0 0 192.168.212.2 CH - [2015-05-26 11:11:45.930209] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7290 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi38YawxQzZrjFreGJEAAAB2 TLSv1 ECDHE-RSA-AES256-SHA 840 11558 -% 1283474 3424 275544 3796 0 0 192.168.212.2 CH - [2015-05-26 11:11:45.926075] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi38YawxQzZrjFreGJAAAABv TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1824555 4043 813849 2889 0 0 192.168.212.2 CH - [2015-05-26 11:12:18.685193] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi38gqwxQzZrjFrdRegAAAAZ TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1365847 6192 352635 2673 0 0 192.168.212.2 CH - [2015-05-26 11:12:25.985121] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3894_34&folderId=1001_9&attachmentId=2&token=27156209683482122E18 HTTP/1.1" 200 59915 "https://www.example.com/EMail/message.aspx?&mailId=3894_34&folderId=1001_9&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi38iawxQzZrjFreGJcAAAB1 TLSv1 ECDHE-RSA-AES256-SHA 984 65598 -% 1020052 6431 989697 243 0 0 192.168.212.2 CH - [2015-05-26 11:12:57.883739] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/moveToFolder.aspx?folderName=Inbox&mailId=3894_34" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi38qawxQzZrjFreGJ0AAABC TLSv1 ECDHE-RSA-AES256-SHA 1064 4177 -% 1281299 4821 275804 171 0 0 192.168.212.2 CH - [2015-05-26 11:12:59.435733] "GET /EMail/host.html HTTP/1.1" 200 199 "https://www.example.com/EMail/moveToFolder.aspx?folderName=Inbox&mailId=3894_34" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi38q6wxQzZrjFreGJ4AAABD TLSv1 ECDHE-RSA-AES256-SHA 872 4539 76% 857566 3073 852999 382 0 0 192.168.212.2 CH - [2015-05-26 11:13:00.684020] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7291 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi38rKwxQzZrjFreGJ8AAABB TLSv1 ECDHE-RSA-AES256-SHA 840 11558 -% 976573 3516 970034 2331 0 0 192.168.212.2 CH - [2015-05-26 11:13:11.241039] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi38t6wxQzZrjFreGKQAAABN TLSv1 ECDHE-RSA-AES256-SHA 936 4049 -% 768936 1767 766578 136 0 0 192.168.212.2 CH - [2015-05-26 11:13:11.237699] "GET /EMail/scripts/variables_de.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ea0fd4a0.522fe7a734cd5" Vi38t6wxQzZrjFreGKMAAABK TLSv1 ECDHE-RSA-AES256-SHA 936 4049 -% 1019931 2183 17039 229 0 0 192.168.24.161 CH - [2015-05-26 11:13:27.422844] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7367 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "13dc1338.522ff3659f37c" Vi38x6wxQzZrjFreGKcAAABM TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1004 11973 -% 721542 5742 711789 2459 6 0 192.168.24.161 CH - [2015-05-26 11:13:29.571407] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "13dc1338.522ff3659f37c" Vi38yawxQzZrjFreGKkAAABa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 988 421 -% 1051278 7977 40778 206 6 0 192.168.24.161 CH - [2015-05-26 11:13:30.647760] "GET /EMail/main.aspx HTTP/1.1" 200 3399 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "13dc1338.522ff3659f37c" Vi38yqwxQzZrjFreGKoAAABZ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 830 3815 -% 921027 8458 908978 1810 6 0 192.168.24.161 CH - [2015-05-26 11:13:31.633787] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "13dc1338.522ff3659f37c" Vi38y6wxQzZrjFreGKsAAABR TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 765 4128 -% 916954 12562 889498 12709 6 0 192.168.24.161 CH - [2015-05-26 11:13:31.689919] "GET /EMail/overview.aspx HTTP/1.1" 200 5286 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "13dc1338.522ff3659f37c" Vi38y6wxQzZrjFreGKwAAABQ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1229 5814 -% 1020708 11306 4559 2998 6 0 192.168.24.161 CH - [2015-05-26 11:13:53.285176] "GET /EMail/newMessage.aspx?action=reply&mailId=3894_30&folderId=2846_92&showPics=false HTTP/1.1" 200 18657 "https://www.example.com/EMail/message.aspx?&mailId=3894_30&folderId=2846_92&mailPos=0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "13dc1338.522ff3659f37c" Vi384awxQzZrjFreGK8AAABU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1412 23188 -% 1235422 11119 175853 46243 9 3 192.168.24.161 CH - [2015-05-26 11:13:54.630730] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2942 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3894_30&folderId=2846_92&showPics=false" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "13dc1338.522ff3659f37c" Vi384qwxQzZrjFreGLAAAABO TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 838 3335 -% 1062823 8176 47942 4998 6 0 192.168.24.161 CH - [2015-05-26 11:14:33.574024] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3894_30&folderId=2846_92&showPics=false" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "13dc1338.522ff3659f37c" Vi39CawxQzZrjFreGLkAAABj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 11050 4440 -% 1984062 677116 208419 217 89 0 192.168.24.161 CH - [2015-05-26 11:14:35.584952] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4029 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3894_30&folderId=2846_92&showPics=false" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "13dc1338.522ff3659f37c" Vi39C6wxQzZrjFreGLoAAABr TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 942 4451 -% 949215 7730 927879 11488 6 0 192.168.24.161 CH - [2015-05-26 11:15:21.660227] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "13dc1338.522ff3659f37c" Vi39OawxQzZrjFreGMMAAABs TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1396 8117 23% 1013748 5170 5748 176 6 0 192.168.24.161 CH - [2015-05-26 11:15:21.649754] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7239 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "13dc1338.522ff3659f37c" Vi39OawxQzZrjFreGMIAAABf TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1391 12062 22% 1187727 9186 173492 145 6 0 192.168.24.161 CH - [2015-05-26 11:15:21.674612] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "13dc1338.522ff3659f37c" Vi39OawxQzZrjFreGMQAAABm TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1410 4227 -% 1198417 9119 187247 139 6 0 192.168.24.161 CH - [2015-05-26 11:15:22.883911] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "13dc1338.522ff3659f37c" Vi39OqwxQzZrjFreGMUAAABo TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 877 206 -% 686509 8497 674624 219 6 0 192.168.96.45 CH - [2015-05-26 11:23:57.768764] "GET /EMail/scripts/variables_de.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1218086d.522ff5bd5d8b4" Vi3-PawxQzZrjFrdRhAAAAAE TLSv1 AES256-SHA 1125 3700 -% 1279139 3199 275164 148 0 0 192.168.96.45 CH - [2015-05-26 11:23:59.129541] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1218086d.522ff5bd5d8b4" Vi3-P6wxQzZrjFrdRhEAAAAA TLSv1 AES256-SHA 582 213 -% 928356 2038 925705 138 0 0 192.168.96.45 CH - [2015-05-26 11:24:00.707135] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "79f25895.522ff5c191a3f" Vi3-QKwxQzZrjFreGRMAAAB6 TLSv1 AES256-SHA 837 5225 -% 910994 690 909280 235 0 0 192.168.96.45 CH - [2015-05-26 11:24:06.561832] "GET /EMail/overview.aspx HTTP/1.1" 200 5302 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1218086d.522ff5bd5d8b4" Vi3-RqwxQzZrjFreGRQAAABC TLSv1 AES256-SHA 989 9221 -% 1411028 2023 406519 1834 0 0 192.168.96.45 CH - [2015-05-26 11:24:06.561895] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1218086d.522ff5bd5d8b4" Vi3-RqwxQzZrjFrdRhIAAAAB TLSv1 AES256-SHA 1005 12717 -% 1721839 2469 712721 2811 0 0 192.168.96.45 CH - [2015-05-26 11:24:08.456842] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1218086d.522ff5bd5d8b4" Vi3-SKwxQzZrjFreGRYAAAB@ TLSv1 AES256-SHA 1133 3696 -% 936591 2220 933573 236 0 0 192.168.96.45 CH - [2015-05-26 11:24:14.613568] "GET /EMail/message.aspx?&mailId=3894_25&folderId=1157_50&mailPos=0 HTTP/1.1" 200 11357 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1218086d.522ff5bd5d8b4" Vi3-TqwxQzZrjFreGRkAAABF TLSv1 AES256-SHA 1021 15343 -% 1363555 4892 333073 24020 0 0 192.168.96.45 CH - [2015-05-26 11:24:17.922626] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3894_25&folderId=1157_50&attachmentId=2&token=225770536417791309E18 HTTP/1.1" 200 56385 "https://www.example.com/EMail/message.aspx?&mailId=3894_25&folderId=1157_50&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1218086d.522ff5bd5d8b4" Vi3-UawxQzZrjFreGRsAAABK TLSv1 AES256-SHA 1133 61614 -% 1034951 7163 5411 241 0 0 192.168.96.45 CH - [2015-05-26 11:24:34.662833] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8584 "https://www.example.com/EMail/message.aspx?&mailId=3894_25&folderId=1157_50&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1218086d.522ff5bd5d8b4" Vi3-YqwxQzZrjFreGR4AAABM TLSv1 AES256-SHA 1053 12538 -% 1117829 2980 110337 3832 0 0 192.168.96.45 CH - [2015-05-26 11:24:38.673845] "GET /EMail/message.aspx?&mailId=3892_57&folderId=1157_50&mailPos=0 HTTP/1.1" 200 11203 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1218086d.522ff5bd5d8b4" Vi3-ZqwxQzZrjFrdRhQAAAAC TLSv1 AES256-SHA 1053 15162 -% 1145858 3961 103050 37839 0 0 192.168.96.45 CH - [2015-05-26 11:25:09.270305] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7290 "https://www.example.com/EMail/message.aspx?&mailId=3892_57&folderId=1157_50&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1218086d.522ff5bd5d8b4" Vi3-hawxQzZrjFrdRhYAAAAJ TLSv1 AES256-SHA 1053 11205 -% 940166 2770 932916 3822 0 0 192.168.96.45 CH - [2015-05-26 11:25:18.865856] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1218086d.522ff5bd5d8b4" Vi3-jqwxQzZrjFreGScAAABb TLSv1 AES256-SHA 1005 3904 -% 1026307 2321 23074 218 0 0 192.168.96.45 CH - [2015-05-26 11:25:21.216157] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1218086d.522ff5bd5d8b4" Vi3-kawxQzZrjFreGSkAAABh TLSv1 AES256-SHA 941 3808 -% 859360 2191 856431 209 0 0 192.168.96.45 CH - [2015-05-26 11:25:23.579307] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1218086d.522ff5bd5d8b4" Vi3-k6wxQzZrjFreGSoAAABj TLSv1 AES256-SHA 1093 3700 -% 766956 2029 763940 189 0 0 192.168.96.45 CH - [2015-05-26 11:25:23.579411] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1218086d.522ff5bd5d8b4" Vi3-k6wxQzZrjFreGSsAAABr TLSv1 AES256-SHA 1061 3700 -% 998759 1956 996019 139 0 0 192.168.96.45 CH - [2015-05-26 11:25:23.580082] "GET /EMail/scripts/variables_de.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1218086d.522ff5bd5d8b4" Vi3-k6wxQzZrjFreGSwAAABd TLSv1 AES256-SHA 1109 3700 -% 1016431 1809 14010 137 0 0 192.168.32.7 CH - [2015-05-26 11:48:19.504631] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi4E86wxQzZrjFrdRlcAAAAQ TLSv1.2 ECDHE-RSA-AES128-SHA256 1075 4318 -% 1220964 10465 208641 196 3 0 192.168.32.7 CH - [2015-05-26 11:48:20.736078] "GET /EMail/main.aspx HTTP/1.1" 200 3407 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi4E9KwxQzZrjFrdRlkAAAAP TLSv1.2 ECDHE-RSA-AES128-SHA256 566 3882 -% 1157811 5201 148887 1877 3 0 192.168.32.7 CH - [2015-05-26 11:48:21.965003] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi4E9awxQzZrjFrdRloAAAAR TLSv1.2 ECDHE-RSA-AES128-SHA256 550 4202 -% 1162568 6069 145413 9158 3 0 192.168.32.7 CH - [2015-05-26 11:48:21.993490] "GET /EMail/overview.aspx HTTP/1.1" 200 5302 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi4E9awxQzZrjFreGggAAABB TLSv1.2 ECDHE-RSA-AES128-SHA256 840 5963 -% 1359307 5170 349585 2933 3 0 192.168.32.7 CH - [2015-05-26 11:48:21.992962] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi4E9awxQzZrjFreGgcAAABH TLSv1.2 ECDHE-RSA-AES128-SHA256 872 9683 -% 1894667 6431 880546 2944 3 0 192.168.32.7 CH - [2015-05-26 11:48:31.872808] "GET /EMail/inbox.aspx HTTP/1.1" 200 9878 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi4E-6wxQzZrjFreGgwAAABJ TLSv1.2 ECDHE-RSA-AES128-SHA256 840 10608 -% 1417524 3382 409323 3340 3 0 192.168.32.7 CH - [2015-05-26 11:48:40.736325] "GET /EMail/message.aspx?&mailId=3887_95&folderId=3481_21&mailPos=0 HTTP/1.1" 200 11367 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi4FCKwxQzZrjFreGg8AAABP TLSv1.2 ECDHE-RSA-AES128-SHA256 888 12165 -% 1317959 6831 284747 24264 3 0 192.168.32.7 CH - [2015-05-26 11:48:45.345215] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3887_95&folderId=3481_21&attachmentId=2&token=106833146839583898E18 HTTP/1.1" 200 47933 "https://www.example.com/EMail/message.aspx?&mailId=3887_95&folderId=3481_21&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi4FDawxQzZrjFreGhAAAABV TLSv1.2 ECDHE-RSA-AES128-SHA256 694 50485 -% 1171909 8516 143560 222 3 0 192.168.32.7 CH - [2015-05-26 11:49:01.636159] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9878 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi4FHawxQzZrjFreGhMAAABS TLSv1.2 ECDHE-RSA-AES128-SHA256 840 10608 -% 1783888 7053 769190 4918 3 0 192.168.32.7 CH - [2015-05-26 11:49:01.643107] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi4FHawxQzZrjFreGhQAAABa TLSv1.2 ECDHE-RSA-AES128-SHA256 856 9683 -% 1969645 5774 955847 3018 3 0 192.168.32.7 CH - [2015-05-26 11:49:12.879967] "GET /EMail/message.aspx?&mailId=3887_95&folderId=3481_21&mailPos=0 HTTP/1.1" 200 11360 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi4FKKwxQzZrjFreGhcAAABQ TLSv1.2 ECDHE-RSA-AES128-SHA256 888 12096 -% 1085139 7205 53281 22729 3 0 192.168.32.7 CH - [2015-05-26 11:49:15.975526] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3887_95&folderId=3481_21&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi4FK6wxQzZrjFreGhgAAABT TLSv1.2 ECDHE-RSA-AES128-SHA256 790 389 -% 1486491 8952 475631 140 3 0 192.168.32.7 CH - [2015-05-26 11:49:17.472042] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8584 "https://www.example.com/EMail/message.aspx?&mailId=3887_95&folderId=3481_21&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi4FLawxQzZrjFreGhoAAABU TLSv1.2 ECDHE-RSA-AES128-SHA256 646 9135 -% 1316045 4008 303440 5959 3 0 192.168.32.7 CH - [2015-05-26 11:49:22.140936] "GET /EMail/message.aspx?&mailId=3888_63&folderId=3481_21&mailPos=0 HTTP/1.1" 200 11432 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi4FMqwxQzZrjFreGhwAAABX TLSv1.2 ECDHE-RSA-AES128-SHA256 614 11983 -% 1415878 7128 383408 23415 3 0 192.168.32.7 CH - [2015-05-26 11:49:25.149685] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3888_63&folderId=3481_21&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi4FNawxQzZrjFreGh0AAABW TLSv1.2 ECDHE-RSA-AES128-SHA256 790 389 -% 1013218 8770 2583 167 3 0 192.168.32.7 CH - [2015-05-26 11:49:26.172703] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7291 "https://www.example.com/EMail/message.aspx?&mailId=3888_63&folderId=3481_21&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi4FNqwxQzZrjFreGh4AAABb TLSv1.2 ECDHE-RSA-AES128-SHA256 646 7770 -% 1117566 3704 107711 4103 3 0 192.168.32.7 CH - [2015-05-26 11:49:29.174026] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7290 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi4FOawxQzZrjFreGiAAAABY TLSv1.2 ECDHE-RSA-AES128-SHA256 550 7770 -% 1101042 3488 93238 2585 3 0 192.168.32.7 CH - [2015-05-26 11:49:29.214488] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi4FOawxQzZrjFreGiEAAABh TLSv1.2 ECDHE-RSA-AES128-SHA256 856 9683 -% 1601531 5950 588044 2699 3 0 192.168.32.7 CH - [2015-05-26 11:49:42.186157] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi4FRqwxQzZrjFreGiIAAABe TLSv1.2 ECDHE-RSA-AES128-SHA256 840 5963 -% 1094056 3427 85980 2370 3 0 192.168.32.7 CH - [2015-05-26 11:49:42.186047] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8dfc00c8.522fd0708e334" Vi4FRqwxQzZrjFrdRmEAAAAY TLSv1.2 ECDHE-RSA-AES128-SHA256 872 9683 -% 1372508 4651 359114 3839 3 0 192.168.151.242 CH - [2015-05-26 11:56:40.033500] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "Microsoft-CryptoAPI/6.1" www.example.com 192.168.34.16 443 proxy-server - + "ee52baee.522ffd0e20cdc" Vi4G6KwxQzZrjFreGmEAAABr TLSv1.2 DHE-RSA-AES256-GCM-SHA384 746 9001 -% 1272014 2941 267603 198 0 0 192.168.186.76 CH - [2015-05-26 12:02:00.873423] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4IKKwxQzZrjFreGo8AAABa TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 12038 -% 881231 4345 872512 2773 3 0 192.168.186.76 CH - [2015-05-26 12:02:01.785986] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "6f4b898b.522fc9d202483" Vi4IKawxQzZrjFreGpAAAABZ TLSv1.2 ECDHE-RSA-AES256-SHA384 662 0 -% 742984 4276 734795 2600 3 0 192.168.186.76 CH - [2015-05-26 12:02:43.580642] "GET /EMail/newMessage.aspx?action=reply&mailId=3894_37&folderId=947_65&showPics=false HTTP/1.1" 200 28335 "https://www.example.com/EMail/message.aspx?&mailId=3894_37&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4IU6wxQzZrjFreGpcAAABX TLSv1.2 ECDHE-RSA-AES256-SHA384 1367 33396 -% 1127622 8862 46858 66674 6 3 192.168.186.76 CH - [2015-05-26 12:02:44.809832] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3894_37&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4IVKwxQzZrjFreGpgAAABW TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 1033620 8074 15832 7560 3 0 192.168.186.76 CH - [2015-05-26 12:02:44.980426] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5879 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3894_37&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4IVKwxQzZrjFreGpkAAABb TLSv1.2 ECDHE-RSA-AES256-SHA384 1228 9827 -% 911269 5405 0 0 3 0 192.168.186.76 CH - [2015-05-26 12:04:35.371557] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4Iw6wxQzZrjFreGqsAAABm TLSv1.2 ECDHE-RSA-AES256-SHA384 1212 9827 -% 1507002 12038 483958 5290 3 0 192.168.186.76 CH - [2015-05-26 12:04:38.870400] "GET /EMail/message.aspx?&mailId=3894_37&folderId=947_65&mailPos=0 HTTP/1.1" 200 18481 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4IxqwxQzZrjFreGqwAAABo TLSv1.2 ECDHE-RSA-AES256-SHA384 710 19310 -% 1534496 8876 472690 41017 3 0 192.168.186.76 CH - [2015-05-26 12:04:42.223411] "GET /EMail/newMessage.aspx?action=reply&mailId=3894_37&folderId=947_65&showPics=false HTTP/1.1" 200 28335 "https://www.example.com/EMail/message.aspx?&mailId=3894_37&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4IyqwxQzZrjFreGq4AAAB2 TLSv1.2 ECDHE-RSA-AES256-SHA384 774 29235 -% 1217042 6826 143683 61933 6 3 192.168.186.76 CH - [2015-05-26 12:04:43.535932] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3894_37&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4Iy6wxQzZrjFreGrAAAABv TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 888898 4952 873115 9038 3 0 192.168.186.76 CH - [2015-05-26 12:04:43.678129] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5879 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3894_37&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4Iy6wxQzZrjFreGrEAAAB3 TLSv1.2 ECDHE-RSA-AES256-SHA384 1303 13742 -% 999569 9638 0 0 3 0 192.168.219.126 CH - [2015-05-26 12:05:00.557460] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "8e6e076.522ffeeb77094" Vi4I3KwxQzZrjFrdRpgAAAAR TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 572 8358 -% 1535319 1215 532983 188 0 0 192.168.186.76 CH - [2015-05-26 12:06:23.778884] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4JL6wxQzZrjFreGsUAAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1295769 8303 279314 2866 3 0 192.168.186.76 CH - [2015-05-26 12:06:25.861345] "GET /EMail/message.aspx?&mailId=3894_35&folderId=947_65&mailPos=0 HTTP/1.1" 200 15796 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4JMawxQzZrjFreGscAAABV TLSv1.2 ECDHE-RSA-AES256-SHA384 710 16468 -% 1183273 6968 142579 31547 3 0 192.168.186.76 CH - [2015-05-26 12:06:28.021015] "GET /EMail/newMessage.aspx?action=reply&mailId=3894_35&folderId=947_65&showPics=false HTTP/1.1" 200 22909 "https://www.example.com/EMail/message.aspx?&mailId=3894_35&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4JNKwxQzZrjFreGsgAAABL TLSv1.2 ECDHE-RSA-AES256-SHA384 774 23742 -% 1118153 5382 43014 64926 6 3 192.168.186.76 CH - [2015-05-26 12:06:29.215933] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3894_35&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4JNawxQzZrjFreGskAAABM TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 969465 4355 958545 5189 3 0 192.168.186.76 CH - [2015-05-26 12:06:40.663999] "GET /imagesCPR/Background-gradient-169.jpg HTTP/1.1" 404 5879 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3894_35&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "6f4b898b.522fc9d202483" Vi4JQKwxQzZrjFreGsoAAABS TLSv1.2 ECDHE-RSA-AES256-SHA384 1228 9827 -% 7180 4297 0 0 3 0 192.168.186.76 CH - [2015-05-26 12:06:47.953668] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4JR6wxQzZrjFreGs0AAABQ TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1202464 5398 187753 4596 3 0 192.168.186.76 CH - [2015-05-26 12:07:12.581114] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4JYKwxQzZrjFreGtMAAABW TLSv1.2 ECDHE-RSA-AES256-SHA384 1484 566 -% 1172120 8674 161678 151 3 0 192.168.186.76 CH - [2015-05-26 12:07:13.765708] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7291 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4JYawxQzZrjFreGtQAAABb TLSv1.2 ECDHE-RSA-AES256-SHA384 726 7802 -% 998565 4652 989422 3013 3 0 192.168.27.78 CH - [2015-05-26 12:48:11.252579] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "e1a67e18.5230089224f63" Vi4S@6wxQzZrjFreHE0AAABj TLSv1.2 ECDHE-RSA-AES256-SHA384 659 8674 -% 2355103 1258 352740 194 0 0 192.168.99.153 CH - [2015-05-26 12:48:40.833244] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7353 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0" www.example.com 192.168.34.16 443 proxy-server - + "543adf53.523008ae5acdc" Vi4TGKwxQzZrjFrdRx8AAAAb TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 700 11959 -% 3590556 1643 585755 2512 0 0 192.168.99.153 CH - [2015-05-26 12:48:44.525305] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0" www.example.com 192.168.34.16 443 proxy-server - + "543adf53.523008ae5acdc" Vi4THKwxQzZrjFrdRyAAAAAc TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 470 2545 14% 9985606 3523 980245 229 0 0 192.168.186.76 CH - [2015-05-26 13:08:21.256211] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "6f4b898b.522fc9d202483" Vi4XtawxQzZrjFreHPkAAABR TLSv1.2 ECDHE-RSA-AES256-SHA384 1047 4076 -% 7429066 4407 409387 4516 3 0 192.168.186.76 CH - [2015-05-26 13:08:21.271731] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "6f4b898b.522fc9d202483" Vi4XtawxQzZrjFreHPoAAABQ TLSv1.2 ECDHE-RSA-AES256-SHA384 1079 4076 -% 7438270 6916 427806 2201 3 0 192.168.186.76 CH - [2015-05-26 13:09:43.003879] "GET /EMail/main.aspx HTTP/1.1" 200 3391 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4YB6wxQzZrjFreHQYAAABj TLSv1.2 ECDHE-RSA-AES256-SHA384 1106 4059 -% 38505671 6364 496736 1138 3 0 192.168.186.76 CH - [2015-05-26 13:10:21.561301] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4YLawxQzZrjFreHQoAAABg TLSv1.2 ECDHE-RSA-AES256-SHA384 662 4234 -% 9693039 6430 678528 6535 3 0 192.168.186.76 CH - [2015-05-26 13:20:06.230402] "GET /EMail/inbox.aspx HTTP/1.1" 200 8389 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4adqwxQzZrjFrdR54AAAAk TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 13067 -% 18467717 6530 455434 3711 3 0 192.168.186.76 CH - [2015-05-26 13:20:30.320931] "GET /EMail/message.aspx?&mailId=3895_2&folderId=947_65&mailPos=0 HTTP/1.1" 200 15663 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "6f4b898b.522fc9d202483" Vi4ajqwxQzZrjFrdR6AAAAAi TLSv1.2 ECDHE-RSA-AES256-SHA384 1228 161 -% 45023128 5238 975882 39407 3 0 192.168.186.76 CH - [2015-05-26 13:23:48.070289] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3895_2&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "6f4b898b.522fc9d202483" Vi4bVKwxQzZrjFreHYAAAABt TLSv1.2 ECDHE-RSA-AES256-SHA384 1319 4076 -% 27804553 4081 790161 8430 3 0 192.168.186.76 CH - [2015-05-26 13:23:48.140877] "GET /EMail/css/editor_content.css HTTP/1.1" 404 3382 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3895_2&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "6f4b898b.522fc9d202483" Vi4bVKwxQzZrjFreHYIAAABn TLSv1.2 ECDHE-RSA-AES256-SHA384 1069 4076 -% 28128359 4302 0 0 3 0 192.168.186.76 CH - [2015-05-26 13:23:48.137057] "GET /EMail/css/editor_content.css HTTP/1.1" 404 3382 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3895_2&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "6f4b898b.522fc9d202483" Vi4bVKwxQzZrjFreHYEAAABj TLSv1.2 ECDHE-RSA-AES256-SHA384 1303 4076 -% 28132796 6256 0 0 3 0 192.168.186.76 CH - [2015-05-26 13:28:25.512709] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 502 4086 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4caawxQzZrjFreHaUAAABF TLSv1.2 ECDHE-RSA-AES256-SHA384 1261 9124 -% 30035721 4538 0 0 3 0 192.168.186.76 CH - [2015-05-26 13:28:55.592912] "GET /errordocuments/logo_d.png HTTP/1.1" 200 7515 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - X "6f4b898b.522fc9d202483" Vi4ch6wxQzZrjFreHaoAAABM TLSv1.2 ECDHE-RSA-AES256-SHA384 662 0 -% 8774 6454 58 242 3 0 192.168.186.76 CH - [2015-05-26 13:28:22.735440] "GET /EMail/overview.aspx HTTP/1.1" 200 5536 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "6f4b898b.522fc9d202483" Vi4cZqwxQzZrjFreHaQAAABJ TLSv1.2 ECDHE-RSA-AES256-SHA384 1229 4076 -% 37474184 4515 466367 1882 3 0 192.168.186.76 CH - [2015-05-26 13:28:55.652628] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 502 4086 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4ch6wxQzZrjFreHasAAABL TLSv1.2 ECDHE-RSA-AES256-SHA384 1186 5209 -% 30038180 4652 0 0 3 0 192.168.186.76 CH - [2015-05-26 13:29:25.709560] "GET /errordocuments/logo_d.png HTTP/1.1" 200 7515 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "6f4b898b.522fc9d202483" Vi4cpawxQzZrjFreHa8AAABI TLSv1.2 ECDHE-RSA-AES256-SHA384 662 8010 -% 7541 5472 59 153 3 0 192.168.186.76 CH - [2015-05-26 13:29:56.490753] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "6ef6af33.523011ca1400d" Vi4cxKwxQzZrjFreHbUAAABW TLSv1.2 ECDHE-RSA-AES256-SHA384 951 5718 -% 2979 1931 58 142 0 0 192.168.186.76 CH - [2015-05-26 13:38:42.672017] "POST /EMail/MailHandler HTTP/1.1" 502 4086 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4e0qwxQzZrjFreHgMAAABm TLSv1.2 ECDHE-RSA-AES256-SHA384 1330 5209 -% 30041302 8781 0 0 3 0 192.168.186.76 CH - [2015-05-26 13:59:12.111742] "GET /EMail/main.aspx HTTP/1.1" 200 3391 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4joKwxQzZrjFreHrsAAABx TLSv1.2 ECDHE-RSA-AES256-SHA384 1207 7974 -% 1149558 5507 141126 1528 3 0 192.168.186.76 CH - [2015-05-26 13:59:13.325913] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4joawxQzZrjFreHrwAAABu TLSv1.2 ECDHE-RSA-AES256-SHA384 662 4234 -% 1013811 6585 0 6745 3 0 192.168.186.76 CH - [2015-05-26 13:59:13.384604] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4joawxQzZrjFreHr0AAABo TLSv1.2 ECDHE-RSA-AES256-SHA384 1212 9827 -% 2470805 4511 454524 4625 3 0 192.168.186.76 CH - [2015-05-26 13:59:16.854278] "GET /EMail/inbox.aspx HTTP/1.1" 200 10710 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4jpKwxQzZrjFreHr8AAABv TLSv1.2 ECDHE-RSA-AES256-SHA384 662 11396 -% 2129510 6758 114474 5121 3 0 192.168.186.76 CH - [2015-05-26 13:59:48.349386] "GET /EMail/newMessage.aspx?action=reply&mailId=3895_6&folderId=947_65&showPics=false HTTP/1.1" 200 24439 "https://www.example.com/EMail/message.aspx?&mailId=3895_6&folderId=947_65&mailPos=1" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4jxKwxQzZrjFreHsMAAAB- TLSv1.2 ECDHE-RSA-AES256-SHA384 1367 29354 -% 1532370 5150 476186 46908 6 3 192.168.186.76 CH - [2015-05-26 13:59:49.961815] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3895_6&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4jxawxQzZrjFreHsQAAABy TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 1888471 6601 870423 9360 3 0 192.168.186.76 CH - [2015-05-26 14:00:11.353030] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3895_6&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4j26wxQzZrjFreHskAAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 7634 4545 -% 2187980 348027 0 159 81 0 192.168.186.76 CH - [2015-05-26 14:00:13.553869] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3895_6&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4j3awxQzZrjFreHssAAAB6 TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 1193859 9223 175961 6788 3 0 192.168.186.76 CH - [2015-05-26 14:00:15.630015] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9611 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4j36wxQzZrjFreHs0AAABD TLSv1.2 ECDHE-RSA-AES256-SHA384 662 10292 -% 1622091 6801 607096 5363 3 0 192.168.186.76 CH - [2015-05-26 14:00:15.708304] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4j36wxQzZrjFreHs4AAAB@ TLSv1.2 ECDHE-RSA-AES256-SHA384 1212 9827 -% 2640031 4796 622392 3169 3 0 192.168.186.76 CH - [2015-05-26 14:00:19.048209] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4j46wxQzZrjFreHs8AAABB TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1337030 7734 327258 368 3 0 192.168.186.76 CH - [2015-05-26 14:00:20.398206] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8497 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4j5KwxQzZrjFreHtAAAABC TLSv1.2 ECDHE-RSA-AES256-SHA384 726 9103 -% 1010522 7538 0 2953 3 0 192.168.186.76 CH - [2015-05-26 14:00:22.069938] "GET /EMail/message.aspx?&mailId=3893_42&folderId=947_65&mailPos=0 HTTP/1.1" 200 16122 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4j5qwxQzZrjFreHtEAAABH TLSv1.2 ECDHE-RSA-AES256-SHA384 726 16804 -% 3085948 8486 46846 28156 3 0 192.168.186.76 CH - [2015-05-26 14:00:29.527730] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3893_42&folderId=947_65&attachmentId=3&token=25395207229260052E18 HTTP/1.1" 200 773409 "https://www.example.com/EMail/message.aspx?&mailId=3893_42&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4j7awxQzZrjFreHtMAAABN TLSv1.2 ECDHE-RSA-AES256-SHA384 806 815434 -% 2781861 9595 348083 183 3 0 192.168.146.78 CH - [2015-05-26 14:00:39.169105] "GET /EMail/images/icon10.ico HTTP/1.1" 304 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f42a0efa.523018c4a4051" Vi4j96wxQzZrjFreHtYAAABE TLSv1.2 ECDHE-RSA-AES128-SHA256 719 4270 -% 1109578 659 108261 153 0 0 192.168.186.76 CH - [2015-05-26 14:05:00.116740] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3893_42&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4k-KwxQzZrjFreHvoAAABx TLSv1.2 ECDHE-RSA-AES256-SHA384 8322 4545 -% 1465988 401573 44120 226 81 0 192.168.186.76 CH - [2015-05-26 14:05:01.594148] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3893_42&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4k-awxQzZrjFreHvsAAABu TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 983584 10133 963779 7838 3 0 192.168.186.76 CH - [2015-05-26 14:05:16.553972] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9671 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4lDKwxQzZrjFreHwAAAAB2 TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 14432 -% 1243922 4411 232290 5054 3 0 192.168.186.76 CH - [2015-05-26 14:08:54.345860] "GET /EMail/message.aspx?&mailId=3896_2&folderId=947_65&mailPos=0 HTTP/1.1" 200 16493 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4l5qwxQzZrjFreHyMAAABb TLSv1.2 ECDHE-RSA-AES256-SHA384 1319 21317 -% 2957358 7518 908006 38815 3 0 192.168.186.76 CH - [2015-05-26 14:09:07.023763] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3896_2&folderId=947_65&attachmentId=3&token=103687851214350003E18 HTTP/1.1" 200 639513 "https://www.example.com/EMail/message.aspx?&mailId=3896_2&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4l86wxQzZrjFreHyUAAABW TLSv1.2 ECDHE-RSA-AES256-SHA384 1399 678711 -% 1431126 13440 41790 212 3 0 192.168.186.76 CH - [2015-05-26 14:11:01.909646] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3896_2&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4mZawxQzZrjFreHzgAAABu TLSv1.2 ECDHE-RSA-AES256-SHA384 8850 4545 -% 3789401 465670 301626 152 81 0 192.168.186.76 CH - [2015-05-26 14:11:05.711552] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3896_2&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4maawxQzZrjFreHzoAAABv TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 1366473 9099 346674 8918 3 0 192.168.186.76 CH - [2015-05-26 14:11:07.708387] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8464 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4ma6wxQzZrjFreHzsAAAB3 TLSv1.2 ECDHE-RSA-AES256-SHA384 662 9071 -% 1234163 7258 221871 2871 3 0 192.168.186.76 CH - [2015-05-26 14:11:07.709745] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4ma6wxQzZrjFreHzwAAABx TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1648240 7831 629447 4775 3 0 192.168.186.76 CH - [2015-05-26 14:11:10.244138] "GET /EMail/message.aspx?&mailId=3896_2&folderId=947_65&mailPos=0 HTTP/1.1" 200 16601 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4mbqwxQzZrjFreHz0AAABm TLSv1.2 ECDHE-RSA-AES256-SHA384 710 17353 -% 1635820 5176 590931 36549 3 0 192.168.186.76 CH - [2015-05-26 14:11:13.677428] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3896_2&folderId=947_65&attachmentId=3&token=36807487237241395E18 HTTP/1.1" 200 639513 "https://www.example.com/EMail/message.aspx?&mailId=3896_2&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6f4b898b.522fc9d202483" Vi4mcawxQzZrjFreH0AAAABy TLSv1.2 ECDHE-RSA-AES256-SHA384 806 674635 -% 1499073 6097 194890 324 3 0 192.168.40.161 CH - [2015-05-26 15:31:34.800340] "GET /EMail/login.aspx?username=john.smith@pssprojects.com HTTP/1.1" 200 7374 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "86ad423e.52302d17893d4" Vi45RqwxQzZrjFreIhoAAABl TLSv1.2 ECDHE-RSA-AES256-SHA384 1069 11939 -% 24508162 5624 497272 3429 6 0 192.168.40.161 CH - [2015-05-26 15:31:59.340695] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@pssprojects.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "86ad423e.52302d17893d4" Vi45X6wxQzZrjFreIh4AAABs TLSv1.2 ECDHE-RSA-AES256-SHA384 822 2575 14% 25418469 8575 406720 201 6 0 192.168.40.161 CH - [2015-05-26 15:31:59.415572] "GET /EMail/css/utils.css HTTP/1.1" 502 4086 "https://www.example.com/EMail/login.aspx?username=john.smith@pssprojects.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "86ad423e.52302d17893d4" Vi45X6wxQzZrjFreIiAAAABn TLSv1.2 ECDHE-RSA-AES256-SHA384 1138 5241 -% 30037640 7265 0 0 6 0 192.168.40.161 CH - [2015-05-26 15:31:59.420476] "GET /EMail/scripts/shost.js HTTP/1.1" 502 4086 "https://www.example.com/EMail/login.aspx?username=john.smith@pssprojects.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "86ad423e.52302d17893d4" Vi45X6wxQzZrjFreIiIAAABo TLSv1.2 ECDHE-RSA-AES256-SHA384 1170 5241 -% 30041883 7806 0 0 6 0 192.168.40.161 CH - [2015-05-26 15:31:59.420400] "GET /EMail/scripts/variables_de.js HTTP/1.1" 502 4086 "https://www.example.com/EMail/login.aspx?username=john.smith@pssprojects.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "86ad423e.52302d17893d4" Vi45X6wxQzZrjFreIiEAAABf TLSv1.2 ECDHE-RSA-AES256-SHA384 1170 5241 -% 30042161 7851 0 0 6 0 192.168.40.161 CH - [2015-05-26 15:31:59.422180] "GET /EMail/images/logo.gif HTTP/1.1" 502 4086 "https://www.example.com/EMail/login.aspx?username=john.smith@pssprojects.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "86ad423e.52302d17893d4" Vi45X6wxQzZrjFreIiMAAABu TLSv1.2 ECDHE-RSA-AES256-SHA384 1170 5241 -% 30043109 10575 0 0 6 0 192.168.40.161 CH - [2015-05-26 15:31:59.408734] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@pssprojects.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "86ad423e.52302d17893d4" Vi45X6wxQzZrjFreIh8AAABp TLSv1.2 ECDHE-RSA-AES256-SHA384 1138 2208 22% 33638881 7636 628892 171 6 0 192.168.40.161 CH - [2015-05-26 15:32:33.087736] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@pssprojects.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "86ad423e.52302d17893d4" Vi45gawxQzZrjFreIisAAAB5 TLSv1.2 ECDHE-RSA-AES256-SHA384 870 1898 -% 33779760 6060 771414 244 6 0 192.168.40.161 CH - [2015-05-26 15:33:06.904416] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "86ad423e.52302d17893d4" Vi45oqwxQzZrjFreIjIAAABD TLSv1.2 ECDHE-RSA-AES256-SHA384 710 1658 -% 16852828 10150 841170 147 6 0 192.168.40.161 CH - [2015-05-26 15:33:22.556640] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@pssprojects.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "86ad423e.52302d17893d4" Vi45sqwxQzZrjFreIjcAAABH TLSv1.2 ECDHE-RSA-AES256-SHA384 1186 2379 -% 10578993 7458 569444 141 6 0 192.168.40.161 CH - [2015-05-26 15:34:59.621183] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@pssprojects.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "86ad423e.52302d17893d4" Vi46E6wxQzZrjFrdSWkAAAAA TLSv1.2 ECDHE-RSA-AES256-SHA384 1330 662 -% 6830792 9264 819111 205 6 0 192.168.40.161 CH - [2015-05-26 15:35:06.462605] "GET /EMail/main.aspx HTTP/1.1" 200 3406 "https://www.example.com/EMail/login.aspx?username=john.smith@pssprojects.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "86ad423e.52302d17893d4" Vi46GqwxQzZrjFrdSWsAAAAG TLSv1.2 ECDHE-RSA-AES256-SHA384 870 3914 -% 8348133 7906 336765 2136 6 0 192.168.40.161 CH - [2015-05-26 15:35:14.845113] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "86ad423e.52302d17893d4" Vi46IqwxQzZrjFrdSW4AAAAH TLSv1.2 ECDHE-RSA-AES256-SHA384 1122 8781 22% 7589255 6926 576443 185 6 0 192.168.40.161 CH - [2015-05-26 15:35:14.918969] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "86ad423e.52302d17893d4" Vi46IqwxQzZrjFrdSW8AAAAK TLSv1.2 ECDHE-RSA-AES256-SHA384 1138 4485 23% 7535405 9586 522268 177 6 0 192.168.40.161 CH - [2015-05-26 15:35:14.845077] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "86ad423e.52302d17893d4" Vi46IqwxQzZrjFrdSW0AAAAC TLSv1.2 ECDHE-RSA-AES256-SHA384 790 735 56% 7706764 6780 697893 191 6 0 192.168.40.161 CH - [2015-05-26 15:35:22.587106] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "86ad423e.52302d17893d4" Vi46KqwxQzZrjFrdSXEAAAAJ TLSv1.2 ECDHE-RSA-AES256-SHA384 806 4234 -% 7931966 7026 915427 7559 6 0 192.168.40.161 CH - [2015-05-26 15:35:22.591924] "GET /EMail/overview.aspx HTTP/1.1" 200 5300 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "86ad423e.52302d17893d4" Vi46KqwxQzZrjFrdSXMAAAAO TLSv1.2 ECDHE-RSA-AES256-SHA384 806 5818 -% 8284750 11742 268556 2721 6 0 192.168.40.161 CH - [2015-05-26 15:35:22.589537] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "86ad423e.52302d17893d4" Vi46KqwxQzZrjFrdSXIAAAAN TLSv1.2 ECDHE-RSA-AES256-SHA384 838 9666 -% 8622021 11544 600929 3109 6 0 192.168.40.161 CH - [2015-05-26 15:35:30.548126] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "86ad423e.52302d17893d4" Vi46MqwxQzZrjFrdSXQAAAAM TLSv1.2 ECDHE-RSA-AES256-SHA384 822 1786 -% 19434610 7365 425611 146 6 0 192.168.40.161 CH - [2015-05-26 15:35:31.232039] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "86ad423e.52302d17893d4" Vi46M6wxQzZrjFrdSXYAAAAQ TLSv1.2 ECDHE-RSA-AES256-SHA384 886 1370 -% 18884171 6727 875142 230 6 0 192.168.40.161 CH - [2015-05-26 15:35:30.898748] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "86ad423e.52302d17893d4" Vi46MqwxQzZrjFrdSXUAAAAL TLSv1.2 ECDHE-RSA-AES256-SHA384 838 1354 -% 19242047 10596 229880 111 6 0 192.168.77.203 CH - [2015-05-26 15:35:32.835463] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 502 4086 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "68e74bf8.52302dfa8b487" Vi46NKwxQzZrjFrdSXcAAAAP TLSv1.2 ECDHE-RSA-AES256-SHA384 659 9073 -% 30033832 1252 0 0 0 0 192.168.40.161 CH - [2015-05-26 15:36:00.361206] "GET /EMail/tree.aspx?sNode-sharedTree=treeNewMsg HTTP/1.1" 502 4086 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "86ad423e.52302d17893d4" Vi46UKwxQzZrjFreIkwAAABe TLSv1.2 ECDHE-RSA-AES256-SHA384 1154 5241 -% 6744408 7567 0 0 6 0 192.168.40.161 CH - [2015-05-26 15:35:42.480399] "GET /EMail/inbox.aspx HTTP/1.1" 502 4086 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "86ad423e.52302d17893d4" Vi46PqwxQzZrjFreIkkAAABY TLSv1.2 ECDHE-RSA-AES256-SHA384 1122 5241 -% 24625705 7336 0 0 6 0 192.168.40.161 CH - [2015-05-26 15:36:00.361409] "GET /EMail/newMessage.aspx?msg=new HTTP/1.1" 502 4086 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "86ad423e.52302d17893d4" Vi46UKwxQzZrjFreIk0AAABh TLSv1.2 ECDHE-RSA-AES256-SHA384 1138 5241 -% 6744737 9899 0 0 6 0 192.168.40.161 CH - [2015-05-26 15:36:07.121516] "GET /errordocuments/logo_d.png HTTP/1.1" 200 7515 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "86ad423e.52302d17893d4" Vi46V6wxQzZrjFreIk8AAABc TLSv1.2 ECDHE-RSA-AES256-SHA384 790 8010 -% 12777 10598 53 157 6 0 192.168.40.161 CH - [2015-05-26 15:36:07.136295] "GET /EMail/newMessage.aspx?msg=new HTTP/1.1" 503 4504 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - - "86ad423e.52302d17893d4" Vi46V6wxQzZrjFreIlAAAABk TLSv1.2 ECDHE-RSA-AES256-SHA384 822 5214 -% 13638 10312 0 0 6 0 192.168.40.161 CH - [2015-05-26 15:36:07.160530] "GET /errordocuments/logo_d.png HTTP/1.1" 200 7515 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeNewMsg" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "86ad423e.52302d17893d4" Vi46V6wxQzZrjFrdSXsAAAAW TLSv1.2 ECDHE-RSA-AES256-SHA384 1122 8203 -% 8200 6382 45 96 6 0 192.168.40.161 CH - [2015-05-26 15:36:07.216793] "GET /EMail/tree.aspx?sNode-sharedTree=treeNewMsg HTTP/1.1" 503 4504 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - - "86ad423e.52302d17893d4" Vi46V6wxQzZrjFreIlEAAABg TLSv1.2 ECDHE-RSA-AES256-SHA384 1154 5407 -% 11290 8437 0 0 6 0 192.168.40.161 CH - [2015-05-26 15:36:07.363751] "GET /errordocuments/logo_d.png HTTP/1.1" 200 7515 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeNewMsg" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "86ad423e.52302d17893d4" Vi46V6wxQzZrjFreIlIAAABt TLSv1.2 ECDHE-RSA-AES256-SHA384 1122 8203 -% 7649 6016 44 103 6 0 192.168.40.161 CH - [2015-05-26 15:36:07.554245] "GET /EMail/favicon.ico HTTP/1.1" 503 4504 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - - "86ad423e.52302d17893d4" Vi46V6wxQzZrjFreIlMAAABj TLSv1.2 ECDHE-RSA-AES256-SHA384 694 5214 -% 12757 8992 0 0 6 0 192.168.40.161 CH - [2015-05-26 15:36:07.648614] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "86ad423e.52302d17893d4" Vi46V6wxQzZrjFreIlQAAABq TLSv1.2 ECDHE-RSA-AES256-SHA384 962 1835 -% 10330 8397 45 112 6 0 192.168.40.161 CH - [2015-05-26 15:36:22.830068] "GET /EMail/login.aspx?username=john.smith@pssprojects.com HTTP/1.1" 503 4504 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - - "86ad423e.52302d17893d4" Vi46ZqwxQzZrjFreIloAAABw TLSv1.2 ECDHE-RSA-AES256-SHA384 1106 5407 -% 12941 10057 0 0 6 0 192.168.40.161 CH - [2015-05-26 15:36:22.892861] "GET /EMail/favicon.ico HTTP/1.1" 503 4504 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - - "86ad423e.52302d17893d4" Vi46ZqwxQzZrjFreIlsAAAB- TLSv1.2 ECDHE-RSA-AES256-SHA384 1010 5407 -% 11059 7797 0 0 6 0 192.168.40.161 CH - [2015-05-26 15:47:52.037433] "GET /EMail/message.aspx?mailId=3894_21&folderId=2944_41&print=true&showPics=false HTTP/1.1" 200 9774 "https://www.example.com/EMail/message.aspx?&mailId=3894_21&folderId=2944_41&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "5c9a1669.52302fcdfb880" Vi49GKwxQzZrjFrdSaIAAAAA TLSv1.2 ECDHE-RSA-AES256-SHA384 1277 14248 -% 3623576 12245 584994 24539 6 0 192.168.199.134 CH - [2015-05-26 15:52:53.184696] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "73host.523031dab2cb8" Vi4@RawxQzZrjFrdSbUAAAAW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 572 8359 -% 4188865 1861 185430 192 0 0 192.168.108.242 CH - [2015-05-26 16:07:39.187455] "GET /EMail/MailHandler?service=createCRL HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "efda431d.52303527a80ff" Vi5Bu6wxQzZrjFreI3AAAABM TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 560 8359 -% 5516071 1332 513089 227 0 0 192.168.108.242 CH - [2015-05-26 16:08:38.655891] "GET /EMail/MailHandler?service=createCRL HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "efda431d.52303527a80ff" Vi5B9qwxQzZrjFreI3gAAABQ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 606 4508 -% 5897879 3796 892485 127 0 0 192.168.186.76 CH - [2015-05-26 16:11:20.349651] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7359 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b4host.523035fa92bd3" Vi5CmKwxQzZrjFreI5QAAABs TLSv1.2 ECDHE-RSA-AES256-SHA384 759 12118 -% 1654389 2132 647556 3339 0 0 192.168.186.76 CH - [2015-05-26 16:11:22.025532] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b4host.523035fa92bd3" Vi5CmqwxQzZrjFreI5UAAABm TLSv1.2 ECDHE-RSA-AES256-SHA384 486 2575 14% 1059352 2951 55010 167 0 0 192.168.186.76 CH - [2015-05-26 16:11:22.097589] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b4host.523035fa92bd3" Vi5CmqwxQzZrjFreI5YAAABu TLSv1.2 ECDHE-RSA-AES256-SHA384 1111 8671 23% 1954552 2524 950119 200 0 0 192.168.186.76 CH - [2015-05-26 16:11:37.159851] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "b4host.523035fa92bd3" Vi5CqawxQzZrjFreI5oAAABp TLSv1.2 ECDHE-RSA-AES256-SHA384 1052 161 -% 2668759 2343 665403 232 0 0 192.168.186.76 CH - [2015-05-26 16:11:43.163480] "GET /EMail/overview.aspx HTTP/1.1" 200 5537 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b4host.523035fa92bd3" Vi5Cr6wxQzZrjFreI5wAAAB9 TLSv1.2 ECDHE-RSA-AES256-SHA384 1079 10134 -% 3060953 1973 56300 2129 0 0 192.168.186.76 CH - [2015-05-26 16:11:43.166585] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b4host.523035fa92bd3" Vi5Cr6wxQzZrjFreI50AAABA TLSv1.2 ECDHE-RSA-AES256-SHA384 1111 13742 -% 5005442 3446 991733 2770 0 0 192.168.186.76 CH - [2015-05-26 16:11:48.203434] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b4host.523035fa92bd3" Vi5CtKwxQzZrjFreI6AAAAB6 TLSv1.2 ECDHE-RSA-AES256-SHA384 566 1370 -% 3178980 3023 175114 173 0 0 192.168.186.76 CH - [2015-05-26 16:11:46.249748] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b4host.523035fa92bd3" Vi5CsqwxQzZrjFreI58AAAB8 TLSv1.2 ECDHE-RSA-AES256-SHA384 518 1354 -% 5194617 2446 191252 170 0 0 192.168.186.76 CH - [2015-05-26 16:12:39.062576] "GET /EMail/tree.aspx?sNode-sharedTree=treeNewMsg HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b4host.523035fa92bd3" Vi5C56wxQzZrjFreI6gAAABH TLSv1.2 ECDHE-RSA-AES256-SHA384 1111 13742 -% 4027323 2450 16245 3237 0 0 192.168.186.76 CH - [2015-05-26 16:12:44.783982] "GET /EMail/scripts/tinymce/plugins/print/plugin.min.js HTTP/1.1" 200 182 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b4host.523035fa92bd3" Vi5C7KwxQzZrjFreI60AAABP TLSv1.2 ECDHE-RSA-AES256-SHA384 1052 976 55% 5836221 1799 833599 149 0 0 192.168.186.76 CH - [2015-05-26 16:12:44.780343] "GET /EMail/scripts/tinymce/plugins/paste/plugin.min.js HTTP/1.1" 200 6256 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b4host.523035fa92bd3" Vi5C7KwxQzZrjFreI6wAAABF TLSv1.2 ECDHE-RSA-AES256-SHA384 1052 7651 40% 5980446 2895 975436 153 0 0 192.168.186.76 CH - [2015-05-26 16:12:44.779968] "GET /EMail/scripts/tinymce/themes/modern/theme.min.js HTTP/1.1" 200 2651 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b4host.523035fa92bd3" Vi5C7KwxQzZrjFreI6sAAABV TLSv1.2 ECDHE-RSA-AES256-SHA384 1052 3525 41% 6282718 2132 279408 144 0 0 192.168.186.76 CH - [2015-05-26 16:12:44.704197] "GET /EMail/scripts/tinymce/langs/de.js HTTP/1.1" 200 2969 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b4host.523035fa92bd3" Vi5C7KwxQzZrjFreI6oAAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 518 3684 38% 6428220 3267 422811 248 0 0 192.168.186.76 CH - [2015-05-26 16:12:46.312433] "GET /EMail/scripts/tinymce/plugins/visualblocks/plugin.min.js HTTP/1.1" 200 525 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b4host.523035fa92bd3" Vi5C7qwxQzZrjFrdSf0AAAAc TLSv1.2 ECDHE-RSA-AES256-SHA384 1052 1328 43% 9236536 3515 231827 189 0 0 192.168.186.76 CH - [2015-05-26 16:12:45.809739] "GET /EMail/scripts/tinymce/plugins/charmap/plugin.min.js HTTP/1.1" 200 2698 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b4host.523035fa92bd3" Vi5C7awxQzZrjFreI68AAABM TLSv1.2 ECDHE-RSA-AES256-SHA384 1127 7488 38% 9778214 3620 773177 120 0 0 192.168.186.76 CH - [2015-05-26 16:12:46.308420] "GET /EMail/scripts/tinymce/plugins/link/plugin.min.js HTTP/1.1" 200 1835 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b4host.523035fa92bd3" Vi5C7qwxQzZrjFrdSfwAAAAf TLSv1.2 ECDHE-RSA-AES256-SHA384 1052 2640 41% 9404217 2339 400606 369 0 0 192.168.186.76 CH - [2015-05-26 16:12:50.633185] "GET /EMail/scripts/tinymce/plugins/visualchars/plugin.min.js HTTP/1.1" 200 608 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b4host.523035fa92bd3" Vi5C8qwxQzZrjFreI7EAAABa TLSv1.2 ECDHE-RSA-AES256-SHA384 534 1247 54% 6416193 3026 412114 142 0 0 192.168.186.76 CH - [2015-05-26 16:12:50.784247] "GET /EMail/scripts/tinymce/plugins/image/plugin.min.js HTTP/1.1" 200 2136 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b4host.523035fa92bd3" Vi5C8qwxQzZrjFreI7IAAABZ TLSv1.2 ECDHE-RSA-AES256-SHA384 534 2852 42% 7845080 1620 842319 203 0 0 192.168.186.76 CH - [2015-05-26 16:12:51.079446] "GET /EMail/scripts/tinymce/plugins/table/plugin.min.js HTTP/1.1" 200 9181 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b4host.523035fa92bd3" Vi5C86wxQzZrjFreI7MAAABL TLSv1.2 ECDHE-RSA-AES256-SHA384 534 10657 32% 8294974 3450 287689 149 0 0 192.168.186.76 CH - [2015-05-26 16:12:51.148029] "GET /EMail/scripts/tinymce/plugins/hr/plugin.min.js HTTP/1.1" 200 191 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b4host.523035fa92bd3" Vi5C86wxQzZrjFreI7QAAABI TLSv1.2 ECDHE-RSA-AES256-SHA384 534 831 53% 8392247 2372 388905 149 0 0 192.168.186.76 CH - [2015-05-26 16:12:57.427214] "GET /EMail/attachost.aspx HTTP/1.1" 200 4989 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b4c0f9f1.523035fa92bd3" Vi5C@awxQzZrjFreI7UAAABQ TLSv1.2 ECDHE-RSA-AES256-SHA384 454 5498 -% 7413713 2134 408192 2518 0 0 192.168.186.76 CH - [2015-05-26 16:12:59.568811] "GET /EMail/scripts/tinymce/skins/lightgray/skin.min.css HTTP/1.1" 200 6042 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b4host.523035fa92bd3" Vi5C@6wxQzZrjFreI7YAAABU TLSv1.2 ECDHE-RSA-AES256-SHA384 518 7420 17% 5537115 1942 530774 175 0 0 192.168.186.76 CH - [2015-05-26 16:12:59.613734] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5471 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b4host.523035fa92bd3" Vi5C@6wxQzZrjFreI7cAAABO TLSv1.2 ECDHE-RSA-AES256-SHA384 486 9250 -% 5931297 2378 0 0 0 0 192.168.186.76 CH - [2015-05-26 16:13:04.866258] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/attachost.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b4c0f9f1.523035fa92bd3" Vi5DAKwxQzZrjFreI7kAAABb TLSv1.2 ECDHE-RSA-AES256-SHA384 518 634 -% 3152017 3800 147260 190 0 0 192.168.186.76 CH - [2015-05-26 16:13:05.139501] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce-small.eot? HTTP/1.1" 200 10316 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b4host.523035fa92bd3" Vi5DAawxQzZrjFreI7oAAABW TLSv1.2 ECDHE-RSA-AES256-SHA384 550 11012 -% 4412410 2024 409075 201 0 0 192.168.186.76 CH - [2015-05-26 16:22:10.171197] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b4c0f9f1.523035fa92bd3" Vi5FIqwxQzZrjFrdSh8AAAAI TLSv1.2 ECDHE-RSA-AES256-SHA384 903 4529 -% 2572822 2481 569340 324 0 0 192.168.186.76 CH - [2015-05-26 16:22:12.760623] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "b4c0f9f1.523035fa92bd3" Vi5FJKwxQzZrjFrdSiAAAAAG TLSv1.2 ECDHE-RSA-AES256-SHA384 486 0 75% 3265506 3210 261349 215 0 0 192.168.186.76 CH - [2015-05-26 16:22:16.916296] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b4c0f9f1.523035fa92bd3" Vi5FKKwxQzZrjFrdSiEAAAAF TLSv1.2 ECDHE-RSA-AES256-SHA384 1036 614 -% 3326491 2529 323110 203 0 0 192.168.186.76 CH - [2015-05-26 16:22:20.256784] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "b4c0f9f1.523035fa92bd3" Vi5FLKwxQzZrjFrdSiIAAAAK TLSv1.2 ECDHE-RSA-AES256-SHA384 486 0 75% 4972379 3079 968307 259 0 0 192.168.186.76 CH - [2015-05-26 16:22:22.757066] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "b4c0f9f1.523035fa92bd3" Vi5FLqwxQzZrjFrdSiMAAAAH TLSv1.2 ECDHE-RSA-AES256-SHA384 1036 161 -% 4838516 2590 835097 270 0 0 192.168.186.76 CH - [2015-05-26 16:22:26.892375] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "b4c0f9f1.523035fa92bd3" Vi5FMqwxQzZrjFreJBEAAAB2 TLSv1.2 ECDHE-RSA-AES256-SHA384 1036 161 -% 6493950 2361 490751 149 0 0 192.168.152.92 CH - [2015-05-26 17:22:05.876013] "GET /EMail/scripts/variables_en.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "fa0aa86d.523045ca1bea4" Vi5TLawxQzZrjFreJi4AAABY TLSv1.2 ECDHE-RSA-AES256-SHA384 1291 4337 -% 958607 1854 955974 185 0 0 192.168.152.92 CH - [2015-05-26 17:22:05.869177] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "fa0aa86d.523045ca1bea4" Vi5TLawxQzZrjFreJi0AAABh TLSv1.2 ECDHE-RSA-AES256-SHA384 1291 4337 -% 971676 2011 969080 117 0 0 192.168.152.92 CH - [2015-05-26 17:22:24.950490] "GET /EMail/images/active.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "fa0aa86d.523045ca1bea4" Vi5TQKwxQzZrjFrdSvYAAAAk TLSv1.2 ECDHE-RSA-AES256-SHA384 1232 161 -% 855285 3297 851162 141 0 0 192.168.152.92 CH - [2015-05-26 17:22:27.326420] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "fa0aa86d.523045ca1bea4" Vi5TQ6wxQzZrjFreJjMAAABg TLSv1.2 ECDHE-RSA-AES256-SHA384 1227 4337 -% 1021632 2088 18599 200 0 0 192.168.152.92 CH - [2015-05-26 17:22:27.342614] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "fa0aa86d.523045ca1bea4" Vi5TQ6wxQzZrjFrdSvcAAAAi TLSv1.2 ECDHE-RSA-AES256-SHA384 1259 4337 -% 1013957 2989 9800 148 0 0 192.168.152.92 CH - [2015-05-26 17:22:28.381783] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "fa0aa86d.523045ca1bea4" Vi5TRKwxQzZrjFrdSvgAAAAp TLSv1.2 ECDHE-RSA-AES256-SHA384 566 4234 -% 599163 3030 588893 6573 0 0 192.168.152.92 CH - [2015-05-26 17:22:29.015887] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "fa0aa86d.523045ca1bea4" Vi5TRawxQzZrjFrdSvkAAAAr TLSv1.2 ECDHE-RSA-AES256-SHA384 630 261 -% 874189 3082 870349 143 0 0 192.168.152.92 CH - [2015-05-26 17:22:29.052160] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "fa0aa86d.523045ca1bea4" Vi5TRawxQzZrjFreJjUAAABj TLSv1.2 ECDHE-RSA-AES256-SHA384 1184 422 -% 931680 3142 927779 166 0 0 192.168.152.92 CH - [2015-05-26 17:22:28.383539] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "fa0aa86d.523045ca1bea4" Vi5TRKwxQzZrjFreJjQAAABt TLSv1.2 ECDHE-RSA-AES256-SHA384 582 9666 -% 1742706 3645 732427 4119 0 0 192.168.152.92 CH - [2015-05-26 17:22:30.205109] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "fa0aa86d.523045ca1bea4" Vi5TRqwxQzZrjFreJjYAAABq TLSv1.2 ECDHE-RSA-AES256-SHA384 662 261 -% 876140 3120 872159 137 0 0 192.168.152.92 CH - [2015-05-26 17:22:30.205843] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "fa0aa86d.523045ca1bea4" Vi5TRqwxQzZrjFrdSvoAAAAu TLSv1.2 ECDHE-RSA-AES256-SHA384 662 261 -% 953058 2668 949427 235 0 0 192.168.152.92 CH - [2015-05-26 17:22:30.222992] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "fa0aa86d.523045ca1bea4" Vi5TRqwxQzZrjFreJjcAAAB3 TLSv1.2 ECDHE-RSA-AES256-SHA384 726 261 -% 1248260 2768 244360 148 0 0 192.168.152.92 CH - [2015-05-26 17:22:31.842516] "GET /EMail/inbox.aspx HTTP/1.1" 200 8496 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "fa0aa86d.523045ca1bea4" Vi5TR6wxQzZrjFreJjgAAABl TLSv1.2 ECDHE-RSA-AES256-SHA384 566 9103 -% 1452989 3236 446144 2560 0 0 192.168.152.92 CH - [2015-05-26 17:22:33.444105] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "fa0aa86d.523045ca1bea4" Vi5TSawxQzZrjFrdSvsAAAAs TLSv1.2 ECDHE-RSA-AES256-SHA384 630 261 -% 898673 2929 894970 140 0 0 192.168.152.92 CH - [2015-05-26 17:22:33.443526] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "fa0aa86d.523045ca1bea4" Vi5TSawxQzZrjFreJjoAAABx TLSv1.2 ECDHE-RSA-AES256-SHA384 630 261 -% 972552 4324 967084 173 0 0 192.168.152.92 CH - [2015-05-26 17:22:33.445206] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "fa0aa86d.523045ca1bea4" Vi5TSawxQzZrjFreJjsAAAB- TLSv1.2 ECDHE-RSA-AES256-SHA384 662 261 -% 1129123 4107 123914 186 0 0 192.168.152.92 CH - [2015-05-26 17:22:40.008879] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/message.aspx?&mailId=3897_2&folderId=3397_26&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "fa0aa86d.523045ca1bea4" Vi5TUKwxQzZrjFreJjwAAABz TLSv1.2 ECDHE-RSA-AES256-SHA384 1275 4337 -% 801634 3086 797695 139 0 0 192.168.152.92 CH - [2015-05-26 17:22:40.008926] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/message.aspx?&mailId=3897_2&folderId=3397_26&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "fa0aa86d.523045ca1bea4" Vi5TUKwxQzZrjFreJj0AAABw TLSv1.2 ECDHE-RSA-AES256-SHA384 1275 4337 -% 822550 3028 818675 102 0 0 192.168.152.92 CH - [2015-05-26 17:22:40.019639] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/message.aspx?&mailId=3897_2&folderId=3397_26&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "fa0aa86d.523045ca1bea4" Vi5TUKwxQzZrjFreJj4AAABn TLSv1.2 ECDHE-RSA-AES256-SHA384 1291 4337 -% 1021878 2859 18328 139 0 0 192.168.152.92 CH - [2015-05-26 17:26:34.578762] "GET /EMail/images/active.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "fa0aa86d.523045ca1bea4" Vi5UOqwxQzZrjFreJmMAAABQ TLSv1.2 ECDHE-RSA-AES256-SHA384 1275 4337 -% 930919 2969 926427 250 0 0 192.168.77.203 CH - [2015-05-26 18:20:21.374059] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "7b35c547.523052d0fd46b" Vi5g1awxQzZrjFreKFUAAABQ TLSv1.2 ECDHE-RSA-AES256-SHA384 659 8674 -% 1217240 1244 215132 155 0 0 192.168.146.78 CH - [2015-05-26 19:12:09.110701] "GET /EMail/tree.aspx?sNode-sharedTree=treeNewMsg HTTP/1.1" 200 7335 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi5s@awxQzZrjFreKjgAAABD TLSv1.2 ECDHE-RSA-AES128-SHA256 847 11779 -% 25082790 3891 74196 3765 0 0 192.168.146.78 CH - [2015-05-26 19:12:13.173886] "GET /EMail/message.aspx?&mailId=3888_73&folderId=3466_7&mailPos=0 HTTP/1.1" 200 7335 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi5s-awxQzZrjFreKjoAAABN TLSv1.2 ECDHE-RSA-AES128-SHA256 836 8091 -% 21020380 3336 14105 2345 0 0 192.168.146.78 CH - [2015-05-26 19:12:09.136641] "GET /EMail/newMessage.aspx?msg=new HTTP/1.1" 200 7335 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi5s@awxQzZrjFreKjkAAABB TLSv1.2 ECDHE-RSA-AES128-SHA256 831 11779 -% 25077600 2877 71067 2807 0 0 192.168.146.78 CH - [2015-05-26 19:12:34.312482] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeNewMsg" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi5tEqwxQzZrjFreKkAAAABE TLSv1.2 ECDHE-RSA-AES128-SHA256 614 245 -% 24980054 3439 975705 191 0 0 192.168.146.78 CH - [2015-05-26 19:12:28.947596] "GET /EMail/message.aspx?&mailId=3875_85&folderId=3466_7&mailPos=2 HTTP/1.1" 502 4086 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi5tDKwxQzZrjFreKj4AAABJ TLSv1.2 ECDHE-RSA-AES128-SHA256 836 5097 -% 53349303 3885 0 0 0 0 192.168.146.78 CH - [2015-05-26 19:13:22.354568] "GET /errordocuments/logo_d.png HTTP/1.1" 200 7515 "https://www.example.com/EMail/message.aspx?&mailId=3875_85&folderId=3466_7&mailPos=2" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "71db8a78.52278b80cfbdd" Vi5tQqwxQzZrjFreKkkAAABU TLSv1.2 ECDHE-RSA-AES128-SHA256 518 7978 -% 3113 1978 66 152 0 0 192.168.146.78 CH - [2015-05-26 19:12:59.593168] "GET /EMail/login.aspx HTTP/1.1" 200 7335 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi5tK6wxQzZrjFreKkQAAABZ TLSv1.2 ECDHE-RSA-AES128-SHA256 486 7818 -% 33358485 1984 350736 5065 0 0 192.168.146.78 CH - [2015-05-26 19:13:22.532984] "GET /EMail/message.aspx?&mailId=3875_85&folderId=3466_7&mailPos=2 HTTP/1.1" 200 7335 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi5tQqwxQzZrjFreKkoAAABi TLSv1.2 ECDHE-RSA-AES128-SHA256 820 7995 -% 13291004 6738 279701 3703 0 0 192.168.146.78 CH - [2015-05-26 21:48:53.236007] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6RtawxQzZrjFreMBYAAABJ TLSv1.2 ECDHE-RSA-AES128-SHA256 799 11795 -% 939527 3808 931160 3722 0 0 192.168.146.78 CH - [2015-05-26 21:49:27.890608] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6R16wxQzZrjFreMB0AAABe TLSv1.2 ECDHE-RSA-AES128-SHA256 964 630 -% 1053738 6754 45769 202 0 0 192.168.146.78 CH - [2015-05-26 21:49:28.974236] "GET /EMail/main.aspx HTTP/1.1" 200 3397 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6R2KwxQzZrjFreMB4AAABi TLSv1.2 ECDHE-RSA-AES128-SHA256 534 3882 -% 897511 4225 890774 1334 0 0 192.168.146.78 CH - [2015-05-26 21:49:29.906796] "GET /EMail/scripts/variables_de.js HTTP/1.1" 304 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6R2awxQzZrjFreMB8AAABd TLSv1.2 ECDHE-RSA-AES128-SHA256 582 245 -% 958993 2949 955049 184 0 0 192.168.146.78 CH - [2015-05-26 21:49:30.898352] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6R2qwxQzZrjFreMCAAAABh TLSv1.2 ECDHE-RSA-AES128-SHA256 486 4202 -% 910884 3074 901044 6029 0 0 192.168.146.78 CH - [2015-05-26 21:49:31.080256] "GET /EMail/overview.aspx HTTP/1.1" 200 5299 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6R26wxQzZrjFreMCIAAABT TLSv1.2 ECDHE-RSA-AES128-SHA256 772 5963 -% 1467099 2719 462002 1752 0 0 192.168.146.78 CH - [2015-05-26 21:49:31.062814] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6R26wxQzZrjFreMCEAAABc TLSv1.2 ECDHE-RSA-AES128-SHA256 804 9683 -% 1891080 3889 878728 3481 0 0 192.168.146.78 CH - [2015-05-26 21:49:36.400056] "GET /EMail/inbox.aspx HTTP/1.1" 200 11780 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6R4KwxQzZrjFreMCQAAABg TLSv1.2 ECDHE-RSA-AES128-SHA256 486 12388 -% 1373630 2245 365913 4483 0 0 192.168.146.78 CH - [2015-05-26 21:49:41.408722] "GET /EMail/message.aspx?&mailId=3888_73&folderId=3466_7&mailPos=0 HTTP/1.1" 200 36894 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6R5awxQzZrjFreMCYAAABY TLSv1.2 ECDHE-RSA-AES128-SHA256 534 37874 -% 1865846 5192 763985 89389 0 0 192.168.146.78 CH - [2015-05-26 21:49:47.750849] "GET /EMail/newMessage.aspx?action=reply&mailId=3888_73&folderId=3466_7&showPics=false HTTP/1.1" 200 65838 "https://www.example.com/EMail/message.aspx?&mailId=3888_73&folderId=3466_7&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6R66wxQzZrjFreMCgAAABq TLSv1.2 ECDHE-RSA-AES128-SHA256 598 67131 -% 1871692 5297 730107 127190 3 3 192.168.146.78 CH - [2015-05-26 21:49:49.834961] "GET /EMail/scripts/tinymce/tinymce.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3888_73&folderId=3466_7&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6R7awxQzZrjFreMCoAAABv TLSv1.2 ECDHE-RSA-AES128-SHA256 948 422 -% 811539 3089 807468 189 0 0 192.168.146.78 CH - [2015-05-26 21:49:50.747598] "GET /EMail/scripts/tinymce/langs/de.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3888_73&folderId=3466_7&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6R7qwxQzZrjFreMCwAAAB- TLSv1.2 ECDHE-RSA-AES128-SHA256 662 245 -% 854570 2969 850738 164 0 0 192.168.146.78 CH - [2015-05-26 21:49:51.227450] "GET /EMail/scripts/tinymce/themes/modern/theme.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3888_73&folderId=3466_7&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6R76wxQzZrjFreMC0AAABz TLSv1.2 ECDHE-RSA-AES128-SHA256 964 422 -% 896366 3274 892067 179 0 0 192.168.146.78 CH - [2015-05-26 21:49:50.724516] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3888_73&folderId=3466_7&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6R7qwxQzZrjFreMCsAAABl TLSv1.2 ECDHE-RSA-AES128-SHA256 566 3402 -% 1648334 1880 637421 8380 0 0 192.168.146.78 CH - [2015-05-26 21:49:51.256085] "GET /EMail/scripts/tinymce/plugins/preview/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3888_73&folderId=3466_7&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6R76wxQzZrjFreMDAAAABn TLSv1.2 ECDHE-RSA-AES128-SHA256 964 422 -% 1232294 3428 227995 203 0 0 192.168.146.78 CH - [2015-05-26 21:49:51.250241] "GET /EMail/scripts/tinymce/plugins/searchreplace/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3888_73&folderId=3466_7&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6R76wxQzZrjFreMC8AAABf TLSv1.2 ECDHE-RSA-AES128-SHA256 964 422 -% 1240183 3027 236290 201 0 0 192.168.146.78 CH - [2015-05-26 21:49:51.244123] "GET /EMail/scripts/tinymce/plugins/print/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3888_73&folderId=3466_7&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6R76wxQzZrjFreMC4AAABw TLSv1.2 ECDHE-RSA-AES128-SHA256 964 422 -% 1247077 2791 243385 193 0 0 192.168.146.78 CH - [2015-05-26 21:49:51.265490] "GET /EMail/scripts/tinymce/plugins/paste/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3888_73&folderId=3466_7&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6R76wxQzZrjFreMDEAAABo TLSv1.2 ECDHE-RSA-AES128-SHA256 964 422 -% 1391368 2194 388182 195 0 0 192.168.146.78 CH - [2015-05-26 21:49:51.274207] "GET /EMail/scripts/tinymce/plugins/charmap/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3888_73&folderId=3466_7&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6R76wxQzZrjFreMDIAAABy TLSv1.2 ECDHE-RSA-AES128-SHA256 964 422 -% 1388607 2375 385470 94 0 0 192.168.146.78 CH - [2015-05-26 21:49:51.287988] "GET /EMail/scripts/tinymce/plugins/insertdatetime/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3888_73&folderId=3466_7&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6R76wxQzZrjFreMDQAAABs TLSv1.2 ECDHE-RSA-AES128-SHA256 964 422 -% 1645528 2924 641634 185 0 0 192.168.146.78 CH - [2015-05-26 21:49:51.301491] "GET /EMail/scripts/tinymce/plugins/hr/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3888_73&folderId=3466_7&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6R76wxQzZrjFrdTgMAAAAW TLSv1.2 ECDHE-RSA-AES128-SHA256 948 422 -% 1632051 1641 629626 200 0 0 192.168.146.78 CH - [2015-05-26 21:49:51.280549] "GET /EMail/scripts/tinymce/plugins/fullpage/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3888_73&folderId=3466_7&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6R76wxQzZrjFreMDMAAABx TLSv1.2 ECDHE-RSA-AES128-SHA256 964 422 -% 1653227 2715 649927 139 0 0 192.168.146.78 CH - [2015-05-26 21:49:52.406526] "GET /EMail/scripts/tinymce/plugins/image/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3888_73&folderId=3466_7&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6R8KwxQzZrjFreMDcAAAB1 TLSv1.2 ECDHE-RSA-AES128-SHA256 678 245 -% 531279 2938 527642 89 0 0 192.168.146.78 CH - [2015-05-26 21:49:51.657506] "GET /EMail/scripts/tinymce/plugins/textcolor/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3888_73&folderId=3466_7&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6R76wxQzZrjFreMDUAAABm TLSv1.2 ECDHE-RSA-AES128-SHA256 678 245 -% 1297859 3246 293908 97 0 0 192.168.146.78 CH - [2015-05-26 21:49:51.293847] "GET /EMail/scripts/tinymce/plugins/visualblocks/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3888_73&folderId=3466_7&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6R76wxQzZrjFrdTgIAAAAX TLSv1.2 ECDHE-RSA-AES128-SHA256 964 422 -% 1742372 2281 739392 127 0 0 192.168.146.78 CH - [2015-05-26 21:49:52.152192] "GET /EMail/scripts/tinymce/plugins/visualchars/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3888_73&folderId=3466_7&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6R8KwxQzZrjFreMDYAAABu TLSv1.2 ECDHE-RSA-AES128-SHA256 678 245 -% 927747 2035 925096 98 0 0 192.168.146.78 CH - [2015-05-26 21:49:52.518775] "GET /EMail/scripts/tinymce/plugins/table/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3888_73&folderId=3466_7&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6R8KwxQzZrjFreMDgAAAB2 TLSv1.2 ECDHE-RSA-AES128-SHA256 678 245 -% 584134 2955 580430 132 0 0 192.168.146.78 CH - [2015-05-26 21:49:52.737704] "GET /EMail/scripts/tinymce/plugins/anchor/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3888_73&folderId=3466_7&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6R8KwxQzZrjFreMDkAAABp TLSv1.2 ECDHE-RSA-AES128-SHA256 964 422 -% 478401 2974 474505 261 0 0 192.168.146.78 CH - [2015-05-26 21:49:52.750089] "GET /EMail/scripts/tinymce/plugins/link/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3888_73&folderId=3466_7&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6R8KwxQzZrjFreMDoAAAB7 TLSv1.2 ECDHE-RSA-AES128-SHA256 964 422 -% 715376 2821 711680 256 0 0 192.168.146.78 CH - [2015-05-26 21:49:53.526396] "GET /EMail/scripts/tinymce/skins/lightgray/skin.min.css HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3888_73&folderId=3466_7&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6R8awxQzZrjFreMDsAAAB9 TLSv1.2 ECDHE-RSA-AES128-SHA256 662 245 -% 859588 3290 855338 185 0 0 192.168.146.78 CH - [2015-05-26 21:49:53.540149] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5879 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3888_73&folderId=3466_7&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6R8awxQzZrjFreMD0AAAB5 TLSv1.2 ECDHE-RSA-AES128-SHA256 550 8994 -% 1039565 2917 0 0 0 0 192.168.146.78 CH - [2015-05-26 21:49:53.534981] "GET /EMail/scripts/tinymce/skins/lightgray/content.min.css HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3888_73&folderId=3466_7&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6R8awxQzZrjFreMDwAAABA TLSv1.2 ECDHE-RSA-AES128-SHA256 662 245 -% 1138325 2786 134361 324 0 0 192.168.146.78 CH - [2015-05-26 21:49:54.432312] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce-small.eot? HTTP/1.1" 200 10316 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3888_73&folderId=3466_7&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6R8qwxQzZrjFreMD8AAAB8 TLSv1.2 ECDHE-RSA-AES128-SHA256 598 10948 -% 717017 2939 712792 200 0 0 192.168.146.78 CH - [2015-05-26 21:49:54.427101] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce.eot? HTTP/1.1" 200 10024 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3888_73&folderId=3466_7&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6R8qwxQzZrjFreMD4AAAB6 TLSv1.2 ECDHE-RSA-AES128-SHA256 598 10660 -% 987554 3046 983175 237 0 0 192.168.146.78 CH - [2015-05-26 21:52:42.176989] "GET /EMail/newMessage.aspx?msg=new HTTP/1.1" 200 12035 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6SmqwxQzZrjFreMF0AAABT TLSv1.2 ECDHE-RSA-AES128-SHA256 788 12821 -% 1094379 3426 67009 22185 3 3 192.168.146.78 CH - [2015-05-26 21:52:42.190883] "GET /EMail/tree.aspx?sNode-sharedTree=treeNewMsg HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6SmqwxQzZrjFreMF4AAABc TLSv1.2 ECDHE-RSA-AES128-SHA256 804 9683 -% 1251844 3543 238955 4693 0 0 192.168.146.78 CH - [2015-05-26 21:52:43.465057] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6Sm6wxQzZrjFreMF8AAABk TLSv1.2 ECDHE-RSA-AES128-SHA256 518 3402 -% 928060 3112 915798 8330 0 0 192.168.146.78 CH - [2015-05-26 21:52:43.745526] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5471 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6Sm6wxQzZrjFreMGAAAABg TLSv1.2 ECDHE-RSA-AES128-SHA256 772 8755 -% 921215 2317 0 0 0 0 192.168.146.78 CH - [2015-05-26 21:52:46.931586] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 11779 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6SnqwxQzZrjFreMGEAAABY TLSv1.2 ECDHE-RSA-AES128-SHA256 502 12388 -% 1495066 3980 486437 3607 0 0 192.168.146.78 CH - [2015-05-26 21:52:46.938380] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6SnqwxQzZrjFreMGIAAABt TLSv1.2 ECDHE-RSA-AES128-SHA256 518 9506 -% 1664069 3608 650723 4556 0 0 192.168.146.78 CH - [2015-05-26 21:52:50.073750] "GET /EMail/message.aspx?&mailId=3888_73&folderId=3466_7&mailPos=0 HTTP/1.1" 200 36900 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6SoqwxQzZrjFreMGQAAABq TLSv1.2 ECDHE-RSA-AES128-SHA256 550 37874 -% 1333122 4626 256099 65785 0 0 192.168.146.78 CH - [2015-05-26 21:52:53.674648] "GET /EMail/newMessage.aspx?action=reply&mailId=3888_73&folderId=3466_7&showPics=false HTTP/1.1" 200 65837 "https://www.example.com/EMail/message.aspx?&mailId=3888_73&folderId=3466_7&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6SpawxQzZrjFreMGUAAABv TLSv1.2 ECDHE-RSA-AES128-SHA256 598 67237 -% 1313427 5210 167706 130387 3 3 192.168.146.78 CH - [2015-05-26 21:52:55.201027] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5879 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3888_73&folderId=3466_7&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6Sp6wxQzZrjFreMGYAAAB- TLSv1.2 ECDHE-RSA-AES128-SHA256 550 8994 -% 939164 4591 0 0 0 0 192.168.146.78 CH - [2015-05-26 21:52:55.250215] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3888_73&folderId=3466_7&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6Sp6wxQzZrjFreMGcAAABz TLSv1.2 ECDHE-RSA-AES128-SHA256 852 3595 -% 940725 1814 933487 4887 0 0 192.168.146.78 CH - [2015-05-26 22:13:36.470412] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3888_73&folderId=3466_7&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6XgKwxQzZrjFreMRsAAAB3 TLSv1.2 ECDHE-RSA-AES128-SHA256 40638 4318 -% 11640036 9901079 423849 203 86 0 192.168.146.78 CH - [2015-05-26 22:13:48.140861] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4045 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3888_73&folderId=3466_7&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6XjKwxQzZrjFreMRwAAABY TLSv1.2 ECDHE-RSA-AES128-SHA256 662 4522 -% 829712 5804 813200 9994 0 0 192.168.146.78 CH - [2015-05-26 22:13:52.203492] "GET /EMail/sent.aspx?dir=desc HTTP/1.1" 200 9838 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6XkKwxQzZrjFreMR0AAABt TLSv1.2 ECDHE-RSA-AES128-SHA256 502 10383 -% 1162586 2159 154367 5040 0 0 192.168.146.78 CH - [2015-05-26 22:13:52.368654] "GET /EMail/tree.aspx?sNode-sharedTree=treeSent HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6XkKwxQzZrjFreMR4AAABq TLSv1.2 ECDHE-RSA-AES128-SHA256 804 9683 -% 1391869 3741 378795 4607 0 0 192.168.146.78 CH - [2015-05-26 22:13:55.547655] "GET /EMail/message.aspx?&mailId=3875_86&folderId=3466_8&mailPos=1 HTTP/1.1" 200 28240 "https://www.example.com/EMail/sent.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6Xk6wxQzZrjFreMR8AAABv TLSv1.2 ECDHE-RSA-AES128-SHA256 550 29043 -% 1603675 3009 547094 50228 0 0 192.168.146.78 CH - [2015-05-26 22:14:03.876074] "GET /EMail/message.aspx?mailId=3875_86&folderId=3466_8&print=true&showPics=false HTTP/1.1" 200 23484 "https://www.example.com/EMail/message.aspx?&mailId=3875_86&folderId=3466_8&mailPos=1" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6Xm6wxQzZrjFreMSAAAAB- TLSv1.2 ECDHE-RSA-AES128-SHA256 884 24399 -% 1455768 5207 401221 46638 0 0 192.168.146.78 CH - [2015-05-26 22:14:28.483363] "GET /EMail/sent.aspx?dir=desc HTTP/1.1" 200 9837 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6XtKwxQzZrjFreMSUAAABw TLSv1.2 ECDHE-RSA-AES128-SHA256 788 10560 -% 1306129 3640 296144 4994 0 0 192.168.146.78 CH - [2015-05-26 22:14:28.499371] "GET /EMail/tree.aspx?sNode-sharedTree=treeSent HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6XtKwxQzZrjFreMSYAAAB4 TLSv1.2 ECDHE-RSA-AES128-SHA256 804 9683 -% 1502755 3583 489484 4777 0 0 192.168.146.78 CH - [2015-05-26 22:14:31.088312] "GET /EMail/message.aspx?&mailId=3900_3&folderId=3466_8&mailPos=0 HTTP/1.1" 200 42700 "https://www.example.com/EMail/sent.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6Xt6wxQzZrjFreMScAAAB0 TLSv1.2 ECDHE-RSA-AES128-SHA256 534 43735 -% 1465284 4781 373470 81779 0 0 192.168.146.78 CH - [2015-05-26 22:14:35.219191] "GET /EMail/message.aspx?mailId=3900_3&folderId=3466_8&print=true&showPics=false HTTP/1.1" 200 37930 "https://www.example.com/EMail/message.aspx?&mailId=3900_3&folderId=3466_8&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "71db8a78.52278b80cfbdd" Vi6Xu6wxQzZrjFreMSgAAABo TLSv1.2 ECDHE-RSA-AES128-SHA256 598 38914 -% 1490595 3211 396897 86225 0 0 192.168.156.57 CH - [2015-05-27 00:03:36.496202] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "63287f03.522b276319694" Vi6xSKwxQzZrjFreNOQAAABN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 661 8286 -% 20587849 2451 584471 172 0 0 192.168.32.7 CH - [2015-05-27 07:19:18.887809] "GET /EMail/login.aspx HTTP/1.1" 502 4087 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8XZqwxQzZrjFeGOMkAAAA0 TLSv1.2 ECDHE-RSA-AES128-SHA256 899 8929 -% 72941899 4819 0 0 6 0 192.168.32.7 CH - [2015-05-27 07:20:31.878675] "GET /errordocuments/logo_d.png HTTP/1.1" 200 7515 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "9725d213.523100ed5b181" Vi8Xr6wxQzZrjFeGONgAAAAJ TLSv1.2 ECDHE-RSA-AES128-SHA256 678 7978 -% 6648 5145 41 111 6 0 192.168.32.7 CH - [2015-05-27 07:23:16.619968] "GET /EMail/login.aspx HTTP/1.1" 502 4087 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8YVKwxQzZrjFeGOPMAAAAu TLSv1.2 ECDHE-RSA-AES128-SHA256 888 5097 -% 30036654 4995 0 0 6 0 192.168.186.76 CH - [2015-05-27 07:24:48.667113] "GET /EMail/main.aspx HTTP/1.1" 502 4087 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8YsKwxQzZrjFeGOQMAAAA5 TLSv1.2 ECDHE-RSA-AES256-SHA384 919 9268 -% 30034049 2941 0 0 3 0 192.168.186.76 CH - [2015-05-27 07:25:18.785229] "GET /errordocuments/logo_d.png HTTP/1.1" 200 7515 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "8e2ac2ca.52310227db9e9" Vi8YzqwxQzZrjFeGOQsAAAAG TLSv1.2 ECDHE-RSA-AES256-SHA384 630 8010 -% 7775 5615 63 145 3 0 192.168.169.43 CH - [2015-05-27 07:34:59.750876] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4d827f3b.5231046ea1fdc" Vi8bE6wxQzZrjFeGOZYAAAA8 TLSv1.2 ECDHE-RSA-AES256-SHA384 653 5699 -% 883159 935 881099 297 0 0 192.168.32.7 CH - [2015-05-27 07:37:10.803513] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8blqwxQzZrjFeGOa0AAAAQ TLSv1.2 ECDHE-RSA-AES128-SHA256 931 11795 -% 1003670 8398 990249 3169 6 0 192.168.32.7 CH - [2015-05-27 07:37:12.003057] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8bmKwxQzZrjFeGObMAAAAh TLSv1.2 ECDHE-RSA-AES128-SHA256 984 7973 22% 869504 5822 860064 175 6 0 192.168.32.7 CH - [2015-05-27 07:37:12.000139] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8bmKwxQzZrjFeGObAAAAAd TLSv1.2 ECDHE-RSA-AES128-SHA256 1000 1931 -% 914441 5319 907522 237 6 0 192.168.32.7 CH - [2015-05-27 07:37:11.962066] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8bl6wxQzZrjFeGOa8AAAAe TLSv1.2 ECDHE-RSA-AES128-SHA256 678 2527 14% 953705 7772 943324 160 6 0 192.168.32.7 CH - [2015-05-27 07:37:12.002388] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8bmKwxQzZrjFeGObIAAAAa TLSv1.2 ECDHE-RSA-AES128-SHA256 1000 4405 23% 1099486 5845 91266 168 6 0 192.168.32.7 CH - [2015-05-27 07:37:12.000876] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8bmKwxQzZrjFeGObEAAAAb TLSv1.2 ECDHE-RSA-AES128-SHA256 968 2144 22% 1102967 5714 95413 132 6 0 192.168.32.7 CH - [2015-05-27 07:37:12.005527] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8bmKwxQzZrjFeHNcMAAABe TLSv1.2 ECDHE-RSA-AES128-SHA256 968 864 56% 1163870 8115 154008 147 6 0 192.168.32.7 CH - [2015-05-27 07:37:13.266731] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8bmawxQzZrjFeHNcQAAABf TLSv1.2 ECDHE-RSA-AES128-SHA256 726 1866 -% 839969 6737 831604 164 6 0 192.168.32.7 CH - [2015-05-27 07:37:23.593122] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8bo6wxQzZrjFeHNcUAAABg TLSv1.2 ECDHE-RSA-AES128-SHA256 1000 2331 -% 795691 8578 784956 193 6 0 192.168.32.7 CH - [2015-05-27 07:37:24.105320] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8bpKwxQzZrjFeHNcYAAABi TLSv1.2 ECDHE-RSA-AES128-SHA256 1160 662 -% 963786 10768 950397 216 6 0 192.168.32.7 CH - [2015-05-27 07:37:25.079697] "GET /EMail/login.aspx?username=%20john.smith@example.com HTTP/1.1" 200 7522 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8bpawxQzZrjFeHNccAAABj TLSv1.2 ECDHE-RSA-AES128-SHA256 758 8010 -% 1029791 9919 0 20418 6 0 192.168.32.7 CH - [2015-05-27 07:37:26.235160] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=%20john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8bpqwxQzZrjFeHNckAAABn TLSv1.2 ECDHE-RSA-AES128-SHA256 758 2154 -% 893086 9134 881118 241 6 0 192.168.32.7 CH - [2015-05-27 07:37:50.426818] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=%20john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8bvqwxQzZrjFeHNcsAAABl TLSv1.2 ECDHE-RSA-AES128-SHA256 1192 662 -% 990294 9385 978477 369 6 0 192.168.32.7 CH - [2015-05-27 07:37:51.432770] "GET /EMail/login.aspx?username=%20john.smith@example.com HTTP/1.1" 200 7522 "https://www.example.com/EMail/login.aspx?username=%20john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8bv6wxQzZrjFeHNcwAAABo TLSv1.2 ECDHE-RSA-AES128-SHA256 806 8010 -% 955037 10434 926499 16153 6 0 192.168.32.7 CH - [2015-05-27 07:38:13.918349] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=%20john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8b1awxQzZrjFeGObwAAAAk TLSv1.2 ECDHE-RSA-AES128-SHA256 1192 630 -% 1025780 7702 15641 163 6 0 192.168.32.7 CH - [2015-05-27 07:38:14.957050] "GET /EMail/main.aspx HTTP/1.1" 200 3407 "https://www.example.com/EMail/login.aspx?username=%20john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8b1qwxQzZrjFeGOb0AAAAl TLSv1.2 ECDHE-RSA-AES128-SHA256 758 3882 -% 1378117 6558 366452 3030 6 0 192.168.32.7 CH - [2015-05-27 07:38:15.589362] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=%20john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8b16wxQzZrjFeHNc8AAABr TLSv1.2 ECDHE-RSA-AES128-SHA256 1192 630 -% 1083482 9533 71469 264 6 0 192.168.32.7 CH - [2015-05-27 07:38:16.682504] "GET /EMail/main.aspx HTTP/1.1" 200 3407 "https://www.example.com/EMail/login.aspx?username=%20john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8b2KwxQzZrjFeHNdAAAABs TLSv1.2 ECDHE-RSA-AES128-SHA256 758 3882 -% 967317 9438 953618 2124 6 0 192.168.32.7 CH - [2015-05-27 07:38:17.721722] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8b2awxQzZrjFeHNdEAAABt TLSv1.2 ECDHE-RSA-AES128-SHA256 694 4202 -% 1025373 9259 7198 7414 6 0 192.168.32.7 CH - [2015-05-27 07:38:17.747178] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8b2awxQzZrjFeGOcAAAAAs TLSv1.2 ECDHE-RSA-AES128-SHA256 984 5963 -% 1236537 9007 223638 2059 6 0 192.168.32.7 CH - [2015-05-27 07:38:17.747020] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8b2awxQzZrjFeGOb8AAAAc TLSv1.2 ECDHE-RSA-AES128-SHA256 1016 9683 -% 2013362 6201 0 2831 6 0 192.168.32.7 CH - [2015-05-27 07:38:19.026612] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8b26wxQzZrjFeGOcEAAAAo TLSv1.2 ECDHE-RSA-AES128-SHA256 726 1322 -% 898512 7888 888505 200 6 0 192.168.32.7 CH - [2015-05-27 07:38:19.799955] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8b26wxQzZrjFeGOcIAAAAp TLSv1.2 ECDHE-RSA-AES128-SHA256 774 1338 -% 824026 11863 809343 203 6 0 192.168.32.7 CH - [2015-05-27 07:38:23.240053] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7290 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8b36wxQzZrjFeGOcQAAAAr TLSv1.2 ECDHE-RSA-AES128-SHA256 710 7770 -% 1228292 9085 213371 3693 6 0 192.168.32.7 CH - [2015-05-27 07:38:23.244172] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8b36wxQzZrjFeGOcUAAAAw TLSv1.2 ECDHE-RSA-AES128-SHA256 726 9506 -% 1398072 9606 379567 2790 6 0 192.168.32.7 CH - [2015-05-27 07:38:24.508746] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8b4KwxQzZrjFeGOcYAAAAx TLSv1.2 ECDHE-RSA-AES128-SHA256 726 602 -% 952563 6037 944347 396 6 0 192.168.32.7 CH - [2015-05-27 07:38:24.535342] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8b4KwxQzZrjFeHNdIAAABu TLSv1.2 ECDHE-RSA-AES128-SHA256 1016 779 -% 1017247 6838 8340 199 6 0 192.168.32.7 CH - [2015-05-27 07:38:29.257400] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8b5awxQzZrjFeHNdQAAABw TLSv1.2 ECDHE-RSA-AES128-SHA256 710 437 -% 909213 9735 897861 163 6 0 192.168.32.7 CH - [2015-05-27 07:38:30.179835] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8b5qwxQzZrjFeHNdUAAABy TLSv1.2 ECDHE-RSA-AES128-SHA256 694 767 75% 895664 7590 885413 316 6 0 192.168.32.7 CH - [2015-05-27 07:38:31.138220] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8b56wxQzZrjFeHNdYAAABz TLSv1.2 ECDHE-RSA-AES128-SHA256 662 357 -% 951630 8448 941601 160 6 0 192.168.32.7 CH - [2015-05-27 07:38:32.100732] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8b6KwxQzZrjFeHNdcAAABx TLSv1.2 ECDHE-RSA-AES128-SHA256 646 7834 -% 864641 9328 849200 3810 6 0 192.168.32.7 CH - [2015-05-27 07:38:33.031483] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7160 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8b6awxQzZrjFeGOckAAAAz TLSv1.2 ECDHE-RSA-AES128-SHA256 1080 8403 22% 859901 5635 848966 215 6 0 192.168.32.7 CH - [2015-05-27 07:38:33.001932] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8b6awxQzZrjFeHNdgAAAB0 TLSv1.2 ECDHE-RSA-AES128-SHA256 774 2527 14% 901065 9332 888819 179 6 0 192.168.32.7 CH - [2015-05-27 07:38:33.028179] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8b6awxQzZrjFeHNdkAAAB1 TLSv1.2 ECDHE-RSA-AES128-SHA256 1064 2144 22% 1052975 7263 43092 217 6 0 192.168.32.7 CH - [2015-05-27 07:38:33.034846] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8b6awxQzZrjFeHNdoAAAB2 TLSv1.2 ECDHE-RSA-AES128-SHA256 1096 422 -% 1113576 7039 103627 173 6 0 192.168.32.7 CH - [2015-05-27 07:38:33.030308] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8b6awxQzZrjFeGOcgAAAAy TLSv1.2 ECDHE-RSA-AES128-SHA256 1064 864 56% 1118691 5838 110369 175 6 0 192.168.32.7 CH - [2015-05-27 07:38:33.034513] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8b6awxQzZrjFeGOcoAAAAt TLSv1.2 ECDHE-RSA-AES128-SHA256 1096 4660 23% 1134696 7980 123431 154 6 0 192.168.32.7 CH - [2015-05-27 07:38:34.220141] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8b6qwxQzZrjFeGOcsAAAA2 TLSv1.2 ECDHE-RSA-AES128-SHA256 806 245 -% 680701 8580 670521 216 6 0 192.168.144.21 CH - [2015-05-27 07:47:10.195854] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7369 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0baedb7.523107273d48e" Vi8d7qwxQzZrjFeGOhoAAAAG TLSv1.2 ECDHE-RSA-AES256-SHA384 950 11939 -% 969045 8393 953705 4949 6 0 192.168.144.21 CH - [2015-05-27 07:47:11.353655] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0baedb7.523107273d48e" Vi8d76wxQzZrjFeGOhsAAAAH TLSv1.2 ECDHE-RSA-AES256-SHA384 710 2575 14% 815125 6738 805439 178 6 0 192.168.144.21 CH - [2015-05-27 07:47:11.413203] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0baedb7.523107273d48e" Vi8d76wxQzZrjFeGOh4AAAAK TLSv1.2 ECDHE-RSA-AES256-SHA384 1051 8053 22% 870771 7746 857789 217 6 0 192.168.144.21 CH - [2015-05-27 07:47:11.428838] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0baedb7.523107273d48e" Vi8d76wxQzZrjFeGOiAAAAAD TLSv1.2 ECDHE-RSA-AES256-SHA384 1067 1979 -% 985580 5653 978311 178 6 0 192.168.144.21 CH - [2015-05-27 07:47:11.403277] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0baedb7.523107273d48e" Vi8d76wxQzZrjFeGOhwAAAAN TLSv1.2 ECDHE-RSA-AES256-SHA384 1019 2208 22% 1061008 5776 52137 204 6 0 192.168.144.21 CH - [2015-05-27 07:47:11.412126] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0baedb7.523107273d48e" Vi8d76wxQzZrjFeGOh0AAAAL TLSv1.2 ECDHE-RSA-AES256-SHA384 1051 4788 23% 1157697 6312 148327 221 6 0 192.168.144.21 CH - [2015-05-27 07:47:11.413412] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0baedb7.523107273d48e" Vi8d76wxQzZrjFeGOh8AAAAI TLSv1.2 ECDHE-RSA-AES256-SHA384 1019 928 56% 1176407 5767 168701 135 6 0 192.168.144.21 CH - [2015-05-27 07:47:13.612907] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0baedb7.523107273d48e" Vi8d8awxQzZrjFeGOiEAAAAO TLSv1.2 ECDHE-RSA-AES256-SHA384 758 1898 -% 796639 7143 787346 206 6 0 192.168.144.21 CH - [2015-05-27 07:47:15.517871] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0baedb7.523107273d48e" Vi8d86wxQzZrjFeGOiIAAAAP TLSv1.2 ECDHE-RSA-AES256-SHA384 758 2186 -% 619632 9392 607966 161 6 0 192.168.144.21 CH - [2015-05-27 07:47:16.434457] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0baedb7.523107273d48e" Vi8d9KwxQzZrjFeGOiMAAAAS TLSv1.2 ECDHE-RSA-AES256-SHA384 902 469 -% 1059098 7096 50043 231 6 0 192.168.144.21 CH - [2015-05-27 07:47:17.507573] "GET /EMail/main.aspx HTTP/1.1" 200 3401 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0baedb7.523107273d48e" Vi8d9awxQzZrjFeGOiQAAAA0 TLSv1.2 ECDHE-RSA-AES256-SHA384 758 3914 -% 889686 7431 879278 1314 6 0 192.168.144.21 CH - [2015-05-27 07:47:18.550311] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0baedb7.523107273d48e" Vi8d9qwxQzZrjFeGOiUAAAAR TLSv1.2 ECDHE-RSA-AES256-SHA384 710 4234 -% 979850 5360 964107 8279 6 0 192.168.144.21 CH - [2015-05-27 07:47:18.664242] "GET /EMail/overview.aspx HTTP/1.1" 200 5303 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0baedb7.523107273d48e" Vi8d9qwxQzZrjFeGOicAAAAU TLSv1.2 ECDHE-RSA-AES256-SHA384 1019 6011 -% 1066177 6789 55333 2060 6 0 192.168.144.21 CH - [2015-05-27 07:47:18.653014] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0baedb7.523107273d48e" Vi8d9qwxQzZrjFeGOiYAAAAJ TLSv1.2 ECDHE-RSA-AES256-SHA384 1035 9859 -% 1877200 6485 861972 3112 6 0 192.168.144.21 CH - [2015-05-27 07:47:19.864546] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0baedb7.523107273d48e" Vi8d96wxQzZrjFeGOigAAAAT TLSv1.2 ECDHE-RSA-AES256-SHA384 726 1354 -% 716128 9074 704701 223 6 0 192.168.144.21 CH - [2015-05-27 07:47:20.702157] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0baedb7.523107273d48e" Vi8d@KwxQzZrjFeGOioAAAAQ TLSv1.2 ECDHE-RSA-AES256-SHA384 774 1370 -% 817370 6803 808897 153 6 0 192.168.144.21 CH - [2015-05-27 07:47:21.455422] "GET /EMail/inbox.aspx HTTP/1.1" 200 8593 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0baedb7.523107273d48e" Vi8d@awxQzZrjFeGOisAAAAW TLSv1.2 ECDHE-RSA-AES256-SHA384 710 9199 -% 1161304 8794 148071 2686 6 0 192.168.144.21 CH - [2015-05-27 07:47:22.703752] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0baedb7.523107273d48e" Vi8d@qwxQzZrjFeGOiwAAAAh TLSv1.2 ECDHE-RSA-AES256-SHA384 726 634 -% 967993 7229 958794 194 6 0 192.168.144.21 CH - [2015-05-27 07:47:22.703938] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0baedb7.523107273d48e" Vi8d@qwxQzZrjFeGOi0AAAAd TLSv1.2 ECDHE-RSA-AES256-SHA384 726 634 -% 1164167 8154 154296 152 6 0 192.168.144.21 CH - [2015-05-27 07:47:22.708145] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0baedb7.523107273d48e" Vi8d@qwxQzZrjFeGOi4AAAAe TLSv1.2 ECDHE-RSA-AES256-SHA384 726 1914 -% 1162990 7096 154480 123 6 0 192.168.144.21 CH - [2015-05-27 07:47:25.679483] "GET /EMail/message.aspx?&mailId=3900_2&folderId=1094_6&mailPos=0 HTTP/1.1" 200 13007 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0baedb7.523107273d48e" Vi8d-awxQzZrjFeGOjAAAAAb TLSv1.2 ECDHE-RSA-AES256-SHA384 742 13684 -% 1357603 18553 329215 6978 6 0 192.168.144.21 CH - [2015-05-27 07:47:29.863322] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3900_2&folderId=1094_6&attachmentId=2&token=41326781669802092E18 HTTP/1.1" 200 18944 "https://www.example.com/EMail/message.aspx?&mailId=3900_2&folderId=1094_6&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0baedb7.523107273d48e" Vi8eAawxQzZrjFeGOjEAAAAY TLSv1.2 ECDHE-RSA-AES256-SHA384 854 20369 -% 1298804 7345 285385 165 6 0 192.168.144.21 CH - [2015-05-27 07:47:58.685657] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3900_2&folderId=1094_6&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0baedb7.523107273d48e" Vi8eHqwxQzZrjFeHNfoAAABX TLSv1.2 ECDHE-RSA-AES256-SHA384 1259 598 -% 1175991 7945 165183 193 6 0 192.168.144.21 CH - [2015-05-27 07:47:59.872858] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7290 "https://www.example.com/EMail/message.aspx?&mailId=3900_2&folderId=1094_6&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0baedb7.523107273d48e" Vi8eH6wxQzZrjFeHNfsAAABY TLSv1.2 ECDHE-RSA-AES256-SHA384 790 7802 -% 1070519 7613 57433 3512 6 0 192.168.144.21 CH - [2015-05-27 07:48:02.267271] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0baedb7.523107273d48e" Vi8eIqwxQzZrjFeHNf0AAABd TLSv1.2 ECDHE-RSA-AES256-SHA384 726 453 -% 874028 9317 862566 402 6 0 192.168.144.21 CH - [2015-05-27 07:48:03.152725] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0baedb7.523107273d48e" Vi8eI6wxQzZrjFeHNf4AAABa TLSv1.2 ECDHE-RSA-AES256-SHA384 710 815 75% 1001689 8718 990620 372 6 0 192.168.144.21 CH - [2015-05-27 07:48:04.190150] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0baedb7.523107273d48e" Vi8eJKwxQzZrjFeHNf8AAABb TLSv1.2 ECDHE-RSA-AES256-SHA384 678 373 -% 919581 5820 911721 395 6 0 192.168.144.21 CH - [2015-05-27 07:48:05.142059] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0baedb7.523107273d48e" Vi8eJawxQzZrjFeHNgAAAABe TLSv1.2 ECDHE-RSA-AES256-SHA384 662 7866 -% 843087 5759 833112 2789 6 0 192.168.144.21 CH - [2015-05-27 07:48:06.083153] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0baedb7.523107273d48e" Vi8eJqwxQzZrjFeGOjcAAAAm TLSv1.2 ECDHE-RSA-AES256-SHA384 1115 8053 22% 773339 8644 760033 256 6 0 192.168.144.21 CH - [2015-05-27 07:48:06.013199] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0baedb7.523107273d48e" Vi8eJqwxQzZrjFeHNgEAAABf TLSv1.2 ECDHE-RSA-AES256-SHA384 774 2793 14% 995773 5411 988235 167 6 0 192.168.144.21 CH - [2015-05-27 07:48:06.087534] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0baedb7.523107273d48e" Vi8eJqwxQzZrjFeGOjgAAAAj TLSv1.2 ECDHE-RSA-AES256-SHA384 1115 454 -% 1043410 8964 32625 229 6 0 192.168.144.21 CH - [2015-05-27 07:48:06.091152] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0baedb7.523107273d48e" Vi8eJqwxQzZrjFeGOjkAAAAl TLSv1.2 ECDHE-RSA-AES256-SHA384 1115 4485 23% 1073622 8112 62645 132 6 0 192.168.144.21 CH - [2015-05-27 07:48:06.092198] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0baedb7.523107273d48e" Vi8eJqwxQzZrjFeGOjsAAAAk TLSv1.2 ECDHE-RSA-AES256-SHA384 1083 928 56% 1158256 9359 147210 207 6 0 192.168.144.21 CH - [2015-05-27 07:48:06.091545] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0baedb7.523107273d48e" Vi8eJqwxQzZrjFeGOjoAAAAn TLSv1.2 ECDHE-RSA-AES256-SHA384 1083 2208 22% 1206309 9307 194311 202 6 0 192.168.144.21 CH - [2015-05-27 07:48:07.405064] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0baedb7.523107273d48e" Vi8eJ6wxQzZrjFeGOjwAAAAq TLSv1.2 ECDHE-RSA-AES256-SHA384 822 261 -% 937458 9086 926079 265 6 0 192.168.186.76 CH - [2015-05-27 07:53:11.715465] "GET /EMail/main.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8fV6wxQzZrjFeGOmIAAAA0 TLSv1.2 ECDHE-RSA-AES256-SHA384 951 12038 -% 1136284 5739 126616 2218 3 0 192.168.186.76 CH - [2015-05-27 07:53:12.872380] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8fWKwxQzZrjFeGOmMAAAAR TLSv1.2 ECDHE-RSA-AES256-SHA384 646 2575 14% 824367 6552 815456 200 3 0 192.168.186.76 CH - [2015-05-27 07:53:12.944974] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8fWKwxQzZrjFeGOmUAAAAU TLSv1.2 ECDHE-RSA-AES256-SHA384 1164 2176 22% 953528 6370 945411 184 3 0 192.168.186.76 CH - [2015-05-27 07:53:12.944163] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8fWKwxQzZrjFeGOmQAAAAV TLSv1.2 ECDHE-RSA-AES256-SHA384 1196 4756 23% 1430928 4989 422696 208 3 0 192.168.186.76 CH - [2015-05-27 07:53:12.944753] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8fWKwxQzZrjFeHNhwAAAB6 TLSv1.2 ECDHE-RSA-AES256-SHA384 1164 896 56% 1443542 6865 434649 227 3 0 192.168.186.76 CH - [2015-05-27 07:53:14.461550] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8fWqwxQzZrjFeHNh0AAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 678 1898 -% 1169015 6731 160293 216 3 0 192.168.186.76 CH - [2015-05-27 07:53:15.535672] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8fW6wxQzZrjFeGOmcAAAAT TLSv1.2 ECDHE-RSA-AES256-SHA384 678 2186 -% 990746 5133 983480 194 3 0 192.168.186.76 CH - [2015-05-27 07:53:16.641897] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "258a13b1.52310884b5a69" Vi8fXKwxQzZrjFeGOmgAAAAQ TLSv1.2 ECDHE-RSA-AES256-SHA384 711 5894 -% 1067522 1598 64809 170 0 0 192.168.186.76 CH - [2015-05-27 07:53:17.808696] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8fXawxQzZrjFeGOmkAAAAW TLSv1.2 ECDHE-RSA-AES256-SHA384 806 469 -% 1249768 9422 238480 153 3 0 192.168.186.76 CH - [2015-05-27 07:53:19.072368] "GET /EMail/main.aspx HTTP/1.1" 200 3391 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8fX6wxQzZrjFeGOmsAAAAa TLSv1.2 ECDHE-RSA-AES256-SHA384 678 3898 -% 841153 4148 833914 1817 3 0 192.168.186.76 CH - [2015-05-27 07:53:19.987955] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8fX6wxQzZrjFeGOmwAAAAd TLSv1.2 ECDHE-RSA-AES256-SHA384 662 4234 -% 1163979 6783 145545 9395 3 0 192.168.186.76 CH - [2015-05-27 07:53:19.988031] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8fX6wxQzZrjFeHNh4AAAB9 TLSv1.2 ECDHE-RSA-AES256-SHA384 694 9666 -% 1723127 4677 707359 4743 3 0 192.168.186.76 CH - [2015-05-27 07:53:21.732928] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8fYawxQzZrjFeHNh8AAAB@ TLSv1.2 ECDHE-RSA-AES256-SHA384 726 1370 -% 896013 6423 887679 193 3 0 192.168.186.76 CH - [2015-05-27 07:53:38.791279] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8fcqwxQzZrjFeGOm8AAAAY TLSv1.2 ECDHE-RSA-AES256-SHA384 1271 5990 -% 943123 6356 934798 203 3 0 192.168.186.76 CH - [2015-05-27 07:54:16.620010] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3904_3&folderId=947_65&attachmentId=3&token=170301672103445606E18 HTTP/1.1" 200 492238 "https://www.example.com/EMail/message.aspx?&mailId=3904_3&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8fmKwxQzZrjFeGOncAAAAl TLSv1.2 ECDHE-RSA-AES256-SHA384 1324 519298 -% 1150496 10130 918085 281 3 0 192.168.186.76 CH - [2015-05-27 07:54:33.277102] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3904_3&folderId=947_65&attachmentId=6&token=170301672103445606E18 HTTP/1.1" 200 1770422 "https://www.example.com/EMail/message.aspx?&mailId=3904_3&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8fqawxQzZrjFeHNiIAAABC TLSv1.2 ECDHE-RSA-AES256-SHA384 1324 1865847 -% 1589062 7879 45842 315 3 0 192.168.186.76 CH - [2015-05-27 07:55:29.620972] "GET /EMail/scripts/tinymce/tinymce.min.js HTTP/1.1" 200 101940 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3904_3&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8f4awxQzZrjFeHNiUAAABD TLSv1.2 ECDHE-RSA-AES256-SHA384 1335 109270 33% 940149 4651 890200 198 3 0 192.168.186.76 CH - [2015-05-27 07:55:30.640373] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3904_3&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8f4qwxQzZrjFeHNiYAAABF TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 1112296 6762 94371 8714 3 0 192.168.186.76 CH - [2015-05-27 07:55:30.724020] "GET /EMail/scripts/tinymce/plugins/preview/plugin.min.js HTTP/1.1" 200 737 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3904_3&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8f4qwxQzZrjFeHNicAAABH TLSv1.2 ECDHE-RSA-AES256-SHA384 1276 1536 51% 2443870 9984 431350 154 3 0 192.168.186.76 CH - [2015-05-27 07:55:30.724145] "GET /EMail/scripts/tinymce/plugins/paste/plugin.min.js HTTP/1.1" 200 6239 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3904_3&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8f4qwxQzZrjFeHNigAAABG TLSv1.2 ECDHE-RSA-AES256-SHA384 1276 7125 40% 2461909 9941 449069 118 3 0 192.168.186.76 CH - [2015-05-27 07:55:31.221709] "GET /EMail/scripts/tinymce/plugins/fullpage/plugin.min.js HTTP/1.1" 200 2325 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3904_3&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8f46wxQzZrjFeGOocAAAA7 TLSv1.2 ECDHE-RSA-AES256-SHA384 1351 7120 36% 2345833 4671 338608 205 3 0 192.168.186.76 CH - [2015-05-27 07:55:31.766863] "GET /EMail/scripts/tinymce/plugins/insertdatetime/plugin.min.js HTTP/1.1" 200 867 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3904_3&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8f46wxQzZrjFeHNikAAABJ TLSv1.2 ECDHE-RSA-AES256-SHA384 758 1503 42% 1935120 4199 928440 199 3 0 192.168.186.76 CH - [2015-05-27 07:55:32.352256] "GET /EMail/scripts/tinymce/plugins/hr/plugin.min.js HTTP/1.1" 200 191 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3904_3&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8f5KwxQzZrjFeHNioAAABI TLSv1.2 ECDHE-RSA-AES256-SHA384 1276 992 53% 1897523 8203 872948 213 3 0 192.168.186.76 CH - [2015-05-27 07:55:33.179648] "GET /EMail/scripts/tinymce/plugins/visualchars/plugin.min.js HTTP/1.1" 200 608 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3904_3&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8f5awxQzZrjFeHNisAAABK TLSv1.2 ECDHE-RSA-AES256-SHA384 758 1247 54% 1071462 6398 62673 180 3 0 192.168.186.76 CH - [2015-05-27 07:55:32.820643] "GET /EMail/scripts/tinymce/plugins/textcolor/plugin.min.js HTTP/1.1" 200 1647 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3904_3&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8f5KwxQzZrjFeGOogAAAA1 TLSv1.2 ECDHE-RSA-AES256-SHA384 1351 6363 44% 1704225 5590 695925 225 3 0 192.168.186.76 CH - [2015-05-27 07:55:33.206664] "GET /EMail/scripts/tinymce/plugins/image/plugin.min.js HTTP/1.1" 200 2136 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3904_3&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8f5awxQzZrjFeHNiwAAABL TLSv1.2 ECDHE-RSA-AES256-SHA384 758 2852 42% 1731855 6862 722625 281 3 0 192.168.186.76 CH - [2015-05-27 07:55:35.145407] "GET /EMail/scripts/tinymce/skins/lightgray/content.min.css HTTP/1.1" 200 588 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3904_3&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8f56wxQzZrjFeHNi0AAABN TLSv1.2 ECDHE-RSA-AES256-SHA384 742 1231 38% 755436 7002 746290 226 3 0 192.168.186.76 CH - [2015-05-27 07:55:35.139175] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5872 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3904_3&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8f56wxQzZrjFeGOokAAAA9 TLSv1.2 ECDHE-RSA-AES256-SHA384 710 9650 -% 798219 6575 0 0 3 0 192.168.186.76 CH - [2015-05-27 07:55:36.005072] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce-small.eot? HTTP/1.1" 200 10316 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3904_3&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8f6KwxQzZrjFeHNi4AAABO TLSv1.2 ECDHE-RSA-AES256-SHA384 774 11012 -% 881460 6438 872274 437 3 0 192.168.186.76 CH - [2015-05-27 07:58:25.492110] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3904_3&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8gkawxQzZrjFeGOqAAAAAV TLSv1.2 ECDHE-RSA-AES256-SHA384 7607 630 -% 1539556 370670 148280 217 81 0 192.168.186.76 CH - [2015-05-27 07:58:27.041738] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3904_3&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8gk6wxQzZrjFeGOqEAAAAJ TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 651467 9130 633917 6937 3 0 192.168.186.76 CH - [2015-05-27 07:58:28.944559] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8482 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8glKwxQzZrjFeGOqIAAAAT TLSv1.2 ECDHE-RSA-AES256-SHA384 662 9087 -% 1210857 4524 201049 3325 3 0 192.168.186.76 CH - [2015-05-27 07:58:30.179145] "GET /EMail/images/msgOpenedReplied.png HTTP/1.1" 200 717 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8glqwxQzZrjFeGOqMAAAAQ TLSv1.2 ECDHE-RSA-AES256-SHA384 694 1226 -% 951310 4644 945185 178 3 0 192.168.186.76 CH - [2015-05-27 07:58:32.017856] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8gmKwxQzZrjFeGOqQAAAAh TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1178219 10321 165221 200 3 0 192.168.186.76 CH - [2015-05-27 07:58:33.207769] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7290 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8gmawxQzZrjFeGOqUAAAAW TLSv1.2 ECDHE-RSA-AES256-SHA384 726 7802 -% 779512 11280 764109 2328 3 0 192.168.237.179 CH - [2015-05-27 08:07:09.719262] "GET /EMail/login.aspx?username=john.smith@ufamed.com HTTP/1.1" 200 7375 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2ef8070a.52310b9f31ade" Vi8inawxQzZrjFeGOvEAAAAc TLSv1.2 ECDHE-RSA-AES256-SHA384 735 11939 -% 1005895 2132 995402 7406 0 0 192.168.237.179 CH - [2015-05-27 08:07:10.828529] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@ufamed.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2ef8070a.52310b9f31ade" Vi8inqwxQzZrjFeGOvQAAAAv TLSv1.2 ECDHE-RSA-AES256-SHA384 852 1979 -% 699080 1784 696637 315 0 0 192.168.237.179 CH - [2015-05-27 08:07:10.766981] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@ufamed.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2ef8070a.52310b9f31ade" Vi8inqwxQzZrjFeGOvIAAAAo TLSv1.2 ECDHE-RSA-AES256-SHA384 502 2575 14% 887931 3145 882888 240 0 0 192.168.237.179 CH - [2015-05-27 08:07:10.822429] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@ufamed.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2ef8070a.52310b9f31ade" Vi8inqwxQzZrjFeGOvMAAAAp TLSv1.2 ECDHE-RSA-AES256-SHA384 820 2208 22% 908904 2197 905366 175 0 0 192.168.237.179 CH - [2015-05-27 08:07:10.834965] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@ufamed.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2ef8070a.52310b9f31ade" Vi8inqwxQzZrjFeGOvYAAAAw TLSv1.2 ECDHE-RSA-AES256-SHA384 852 4485 23% 1141530 2801 136664 230 0 0 192.168.237.179 CH - [2015-05-27 08:07:10.833974] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx?username=john.smith@ufamed.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2ef8070a.52310b9f31ade" Vi8inqwxQzZrjFeGOvUAAAAr TLSv1.2 ECDHE-RSA-AES256-SHA384 836 8781 22% 1179154 2389 173181 200 0 0 192.168.237.179 CH - [2015-05-27 08:07:10.838882] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@ufamed.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2ef8070a.52310b9f31ade" Vi8inqwxQzZrjFeGOvcAAAAx TLSv1.2 ECDHE-RSA-AES256-SHA384 820 928 56% 1196602 1865 193821 284 0 0 192.168.237.179 CH - [2015-05-27 08:07:12.077584] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@ufamed.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2ef8070a.52310b9f31ade" Vi8ioKwxQzZrjFeGOvgAAAAu TLSv1.2 ECDHE-RSA-AES256-SHA384 550 1898 -% 838272 3231 834035 214 0 0 192.168.240.35 CH - [2015-05-27 08:07:58.147996] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "a7e10139.52310bcd6119c" Vi8izqwxQzZrjFeGOv4AAAA7 TLSv1.2 ECDHE-RSA-AES256-SHA384 659 8674 -% 1057772 1905 54441 185 0 0 192.168.186.76 CH - [2015-05-27 08:19:42.967330] "GET /EMail/newMessage.aspx?action=reply&mailId=3905_2&folderId=947_65&showPics=false HTTP/1.1" 200 24494 "https://www.example.com/EMail/message.aspx?&mailId=3905_2&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8ljqwxQzZrjFeHNooAAABr TLSv1.2 ECDHE-RSA-AES256-SHA384 1367 29402 -% 1349619 8666 279352 57790 6 3 192.168.186.76 CH - [2015-05-27 08:19:44.388686] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3905_2&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8lkKwxQzZrjFeHNosAAABs TLSv1.2 ECDHE-RSA-AES256-SHA384 1319 7526 -% 888684 6762 873835 6596 3 0 192.168.186.76 CH - [2015-05-27 08:19:44.468194] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5872 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3905_2&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8lkKwxQzZrjFeHNowAAABt TLSv1.2 ECDHE-RSA-AES256-SHA384 710 9650 -% 970139 4624 0 0 3 0 192.168.186.76 CH - [2015-05-27 08:22:12.004258] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 10667 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8mJKwxQzZrjFeHNpwAAAB- TLSv1.2 ECDHE-RSA-AES256-SHA384 1229 15339 -% 1157174 7018 144622 3840 3 0 192.168.186.76 CH - [2015-05-27 08:22:12.003765] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8mJKwxQzZrjFeGO3kAAAA1 TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1523223 8595 506364 2681 3 0 192.168.186.76 CH - [2015-05-27 08:22:15.447403] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8mJ6wxQzZrjFeGO3oAAAA9 TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1261863 9750 249538 247 3 0 192.168.186.76 CH - [2015-05-27 08:22:16.727422] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 9570 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8mKKwxQzZrjFeGO3sAAAA@ TLSv1.2 ECDHE-RSA-AES256-SHA384 726 10175 -% 1138028 7222 122946 6190 3 0 192.168.186.76 CH - [2015-05-27 08:22:32.907717] "GET /EMail/message.aspx?&mailId=3905_3&folderId=947_65&mailPos=0 HTTP/1.1" 200 17286 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8mOKwxQzZrjFeGO4AAAAAB TLSv1.2 ECDHE-RSA-AES256-SHA384 1218 18202 -% 1468161 8319 417413 37065 3 0 192.168.186.76 CH - [2015-05-27 08:22:36.268858] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3905_3&folderId=947_65&attachmentId=3&token=9071653001636279E17 HTTP/1.1" 200 130684 "https://www.example.com/EMail/message.aspx?&mailId=3905_3&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8mPKwxQzZrjFeGO4EAAAAE TLSv1.2 ECDHE-RSA-AES256-SHA384 806 138100 -% 1193761 9493 126313 249 3 0 192.168.186.76 CH - [2015-05-27 08:22:57.592772] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8mUawxQzZrjFeGO4UAAAAM TLSv1.2 ECDHE-RSA-AES256-SHA384 1261 13742 -% 1665701 6146 649383 4081 3 0 192.168.186.76 CH - [2015-05-27 08:23:04.621369] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5872 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3905_3&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8mWKwxQzZrjFeGO4gAAAAH TLSv1.2 ECDHE-RSA-AES256-SHA384 1277 13726 -% 1256486 8178 0 0 3 0 192.168.186.76 CH - [2015-05-27 08:23:14.865048] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3905_3&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8mYqwxQzZrjFeGO4kAAAAN TLSv1.2 ECDHE-RSA-AES256-SHA384 8423 630 -% 2043901 401379 0 209 86 0 192.168.186.76 CH - [2015-05-27 08:23:16.935705] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3905_3&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8mZKwxQzZrjFeGO4oAAAAL TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 2208853 10651 182868 13824 3 0 192.168.186.76 CH - [2015-05-27 08:23:20.451630] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9568 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8maKwxQzZrjFeGO4wAAAAO TLSv1.2 ECDHE-RSA-AES256-SHA384 662 10244 -% 1908174 7138 896023 3167 3 0 192.168.186.76 CH - [2015-05-27 08:23:25.044828] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8mbawxQzZrjFeGO44AAAA0 TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1192624 12309 178355 181 3 0 192.168.186.76 CH - [2015-05-27 08:23:26.265924] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8390 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8mbqwxQzZrjFeGO48AAAAR TLSv1.2 ECDHE-RSA-AES256-SHA384 726 8991 -% 1065237 4678 56409 2546 3 0 192.168.186.76 CH - [2015-05-27 08:23:56.711654] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5872 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3904_5&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8mjKwxQzZrjFeHNqAAAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 1277 13726 -% 959508 4262 0 0 3 0 192.168.186.76 CH - [2015-05-27 08:24:46.810707] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8mvqwxQzZrjFeGO5wAAAAY TLSv1.2 ECDHE-RSA-AES256-SHA384 1261 13742 -% 1566562 4826 551513 4359 3 0 192.168.186.76 CH - [2015-05-27 08:24:49.482930] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8mwawxQzZrjFeGO50AAAAX TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1008567 9350 0 159 3 0 192.168.186.76 CH - [2015-05-27 08:24:50.504670] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7290 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8mwqwxQzZrjFeGO54AAAAZ TLSv1.2 ECDHE-RSA-AES256-SHA384 726 7802 -% 1026913 7765 14079 3104 3 0 192.168.186.76 CH - [2015-05-27 08:42:25.061639] "GET /EMail/message.aspx?&mailId=3904_9&folderId=947_65&mailPos=0 HTTP/1.1" 200 15656 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8q4awxQzZrjFeGPE0AAAAh TLSv1.2 ECDHE-RSA-AES256-SHA384 1303 20416 -% 4855401 5925 808316 38474 3 0 192.168.186.76 CH - [2015-05-27 08:42:37.976850] "GET /EMail/newMessage.aspx?action=reply&mailId=3904_9&folderId=947_65&showPics=false HTTP/1.1" 200 22897 "https://www.example.com/EMail/message.aspx?&mailId=3904_9&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8q7awxQzZrjFeGPE8AAAAQ TLSv1.2 ECDHE-RSA-AES256-SHA384 1367 27802 -% 2043227 5442 993975 39757 6 3 192.168.186.76 CH - [2015-05-27 08:42:40.111167] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3904_9&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8q8KwxQzZrjFeGPFAAAAAa TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 982314 4556 968103 7433 3 0 192.168.186.76 CH - [2015-05-27 08:42:40.263935] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5872 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3904_9&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8q8KwxQzZrjFeGPFEAAAAd TLSv1.2 ECDHE-RSA-AES256-SHA384 1228 9811 -% 981653 6444 0 0 3 0 192.168.186.76 CH - [2015-05-27 08:43:47.363527] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3904_9&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8rM6wxQzZrjFeGPFsAAAAl TLSv1.2 ECDHE-RSA-AES256-SHA384 7985 630 -% 1413745 303533 90351 179 91 0 192.168.186.76 CH - [2015-05-27 08:43:48.789696] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3904_9&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8rNKwxQzZrjFeGPFwAAAAk TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 734312 9484 712991 9064 3 0 192.168.186.76 CH - [2015-05-27 08:43:51.640445] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8389 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8rN6wxQzZrjFeGPF0AAAAn TLSv1.2 ECDHE-RSA-AES256-SHA384 662 8991 -% 2658964 7520 646957 2949 3 0 192.168.9.152 CH - [2015-05-27 08:44:40.382317] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "af053896.5231140197f6d" Vi8raKwxQzZrjFeGPG4AAAA4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 572 8359 -% 4375230 1818 371494 199 0 0 192.168.9.152 CH - [2015-05-27 08:44:47.671129] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "af053896.5231140197f6d" Vi8rb6wxQzZrjFeGPG8AAAA1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 328 4370 -% 4370696 2971 366390 267 0 0 192.168.196.112 CH - [2015-05-27 08:47:05.847471] "GET /EMail/login.aspx?username=john.smith@caritas.com HTTP/1.1" 200 7367 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8r@awxQzZrjFeGPIYAAAAU TLSv1.2 ECDHE-RSA-AES256-SHA384 735 11939 -% 962235 1316 956600 3602 0 0 192.168.196.112 CH - [2015-05-27 08:47:07.003474] "GET /EMail/scripts/variables_de.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@caritas.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8r@6wxQzZrjFeGPIgAAAAJ TLSv1.2 ECDHE-RSA-AES256-SHA384 975 4142 -% 709059 2822 704821 216 0 0 192.168.196.112 CH - [2015-05-27 08:47:06.985668] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@caritas.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8r@qwxQzZrjFeGPIcAAAAT TLSv1.2 ECDHE-RSA-AES256-SHA384 614 261 -% 995282 2682 991673 198 0 0 192.168.196.112 CH - [2015-05-27 08:47:17.182543] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@caritas.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8sBawxQzZrjFeHNwwAAABx TLSv1.2 ECDHE-RSA-AES256-SHA384 852 2379 -% 5365927 2093 362649 297 0 0 192.168.196.112 CH - [2015-05-27 08:47:18.640793] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@caritas.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8sBqwxQzZrjFeGPIoAAAAQ TLSv1.2 ECDHE-RSA-AES256-SHA384 996 662 -% 4299861 3973 294596 514 0 0 192.168.196.112 CH - [2015-05-27 08:47:22.969813] "GET /EMail/main.aspx HTTP/1.1" 200 3399 "https://www.example.com/EMail/login.aspx?username=john.smith@caritas.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8sCqwxQzZrjFeGPIsAAAAd TLSv1.2 ECDHE-RSA-AES256-SHA384 534 3914 -% 6166316 2085 161634 2050 0 0 192.168.196.112 CH - [2015-05-27 08:47:29.286944] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8sEawxQzZrjFeGPIwAAAAe TLSv1.2 ECDHE-RSA-AES256-SHA384 486 4234 -% 6325821 3035 315219 6866 0 0 192.168.196.112 CH - [2015-05-27 08:47:29.306497] "GET /EMail/overview.aspx HTTP/1.1" 200 5303 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8sEawxQzZrjFeGPI4AAAAa TLSv1.2 ECDHE-RSA-AES256-SHA384 804 6011 -% 7075568 2467 67529 4776 0 0 192.168.196.112 CH - [2015-05-27 08:47:29.304508] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8sEawxQzZrjFeGPI0AAAAh TLSv1.2 ECDHE-RSA-AES256-SHA384 836 9859 -% 7604268 2225 593232 3676 0 0 192.168.196.112 CH - [2015-05-27 08:47:36.424748] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8sGKwxQzZrjFeGPJEAAAAX TLSv1.2 ECDHE-RSA-AES256-SHA384 518 1354 -% 6906948 3785 902283 220 0 0 192.168.196.112 CH - [2015-05-27 08:47:36.965870] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8sGKwxQzZrjFeGPJIAAAAg TLSv1.2 ECDHE-RSA-AES256-SHA384 550 1370 -% 6726452 2711 722200 620 0 0 192.168.196.112 CH - [2015-05-27 08:48:00.092246] "GET /EMail/inbox.aspx HTTP/1.1" 200 18643 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8sMKwxQzZrjFeGPJcAAAAj TLSv1.2 ECDHE-RSA-AES256-SHA384 804 19594 -% 15480307 2865 440733 9880 0 0 192.168.196.112 CH - [2015-05-27 08:48:14.975997] "GET /EMail/inbox.aspx HTTP/1.1" 200 18643 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8sPqwxQzZrjFeGPJ0AAAAs TLSv1.2 ECDHE-RSA-AES256-SHA384 804 19594 -% 13683339 3161 644749 8900 0 0 192.168.196.112 CH - [2015-05-27 08:48:25.981186] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8sSawxQzZrjFeGPJ4AAAAv TLSv1.2 ECDHE-RSA-AES256-SHA384 820 9859 -% 15240678 2388 230222 3128 0 0 192.168.196.112 CH - [2015-05-27 08:48:25.981565] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 18644 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8sSawxQzZrjFeGPJ8AAAAo TLSv1.2 ECDHE-RSA-AES256-SHA384 804 19663 -% 19951632 2092 908042 9703 0 0 192.168.196.112 CH - [2015-05-27 08:48:28.048228] "GET /EMail/inbox.aspx HTTP/1.1" 200 18641 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8sTKwxQzZrjFeGPKAAAAAr TLSv1.2 ECDHE-RSA-AES256-SHA384 804 19594 -% 24467700 2026 434934 5798 0 0 192.168.196.112 CH - [2015-05-27 08:48:43.017185] "GET /EMail/inbox.aspx HTTP/1.1" 200 18644 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8sW6wxQzZrjFeGPKMAAAAt TLSv1.2 ECDHE-RSA-AES256-SHA384 486 19401 -% 15753618 2180 725483 5688 0 0 192.168.196.112 CH - [2015-05-27 08:48:48.016897] "GET /EMail/inbox.aspx HTTP/1.1" 200 18643 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8sYKwxQzZrjFeGPKQAAAAy TLSv1.2 ECDHE-RSA-AES256-SHA384 804 19594 -% 24698049 2032 671158 6779 0 0 192.168.196.112 CH - [2015-05-27 08:48:57.904028] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8saawxQzZrjFeGPKcAAAA7 TLSv1.2 ECDHE-RSA-AES256-SHA384 820 9859 -% 15035175 3788 21751 4522 0 0 192.168.196.112 CH - [2015-05-27 08:48:52.247720] "GET /EMail/inbox.aspx HTTP/1.1" 200 18643 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8sZKwxQzZrjFeGPKYAAAA2 TLSv1.2 ECDHE-RSA-AES256-SHA384 804 19663 -% 27670407 2027 630897 9266 0 0 192.168.196.112 CH - [2015-05-27 08:48:57.904187] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 18643 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8saawxQzZrjFeGPKgAAAA4 TLSv1.2 ECDHE-RSA-AES256-SHA384 804 19594 -% 28155703 2276 118945 9378 0 0 192.168.196.112 CH - [2015-05-27 08:49:10.413704] "GET /EMail/MailHandler?service=downloadCert&type=root&token=229160863049813811E18 HTTP/1.1" 303 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8sdqwxQzZrjFeGPKsAAAAA TLSv1.2 ECDHE-RSA-AES256-SHA384 868 566 -% 16412515 3998 407747 140 0 0 192.168.196.112 CH - [2015-05-27 08:49:08.936906] "GET /EMail/inbox.aspx HTTP/1.1" 200 18643 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8sdKwxQzZrjFeHNxgAAABC TLSv1.2 ECDHE-RSA-AES256-SHA384 804 19663 -% 17908870 3390 876027 5771 0 0 192.168.196.112 CH - [2015-05-27 08:49:02.760340] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8sbqwxQzZrjFeGPKkAAAA1 TLSv1.2 ECDHE-RSA-AES256-SHA384 820 9859 -% 30019844 2561 11969 2789 0 0 192.168.196.112 CH - [2015-05-27 08:49:02.766192] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 18642 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8sbqwxQzZrjFeGPKoAAAA8 TLSv1.2 ECDHE-RSA-AES256-SHA384 804 19594 -% 30228736 2436 197654 10132 0 0 192.168.196.112 CH - [2015-05-27 08:49:20.620102] "GET /EMail/inbox.aspx HTTP/1.1" 200 18643 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8sgKwxQzZrjFeGPK0AAAAF TLSv1.2 ECDHE-RSA-AES256-SHA384 804 19594 -% 15518616 3043 489247 5651 0 0 192.168.196.112 CH - [2015-05-27 08:49:36.183479] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8skKwxQzZrjFeGPLEAAAAD TLSv1.2 ECDHE-RSA-AES256-SHA384 502 634 -% 3786517 2139 783550 194 0 0 192.168.196.112 CH - [2015-05-27 08:49:36.246723] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8skKwxQzZrjFeGPLMAAAAL TLSv1.2 ECDHE-RSA-AES256-SHA384 820 2171 -% 3725391 2192 722375 146 0 0 192.168.196.112 CH - [2015-05-27 08:49:36.201007] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8skKwxQzZrjFeGPLIAAAAN TLSv1.2 ECDHE-RSA-AES256-SHA384 502 634 -% 3771721 1931 769028 170 0 0 192.168.196.112 CH - [2015-05-27 08:49:36.246814] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8skKwxQzZrjFeHNxsAAABF TLSv1.2 ECDHE-RSA-AES256-SHA384 820 2107 -% 3729415 2135 726508 160 0 0 192.168.196.112 CH - [2015-05-27 08:49:49.887034] "GET /EMail/message.aspx?&mailId=3898_1&folderId=2982_39&mailPos=3 HTTP/1.1" 200 11473 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8snawxQzZrjFeGPLUAAAAI TLSv1.2 ECDHE-RSA-AES256-SHA384 852 12341 -% 1250072 4295 224883 19915 0 0 192.168.196.112 CH - [2015-05-27 08:49:53.766373] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3898_1&folderId=2982_39&attachmentId=2&token=40016429107164165E18 HTTP/1.1" 200 46493 "https://www.example.com/EMail/message.aspx?&mailId=3898_1&folderId=2982_39&mailPos=3" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "ec7e4df4.5231148c51eaf" Vi8soawxQzZrjFeGPLcAAAA0 TLSv1.2 ECDHE-RSA-AES256-SHA384 630 43800 -% 6847115 6659 813929 171 0 0 192.168.196.112 CH - [2015-05-27 08:49:57.858526] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3898_1&folderId=2982_39&attachmentId=2&token=40016429107164165E18 HTTP/1.1" 200 46493 "https://www.example.com/EMail/message.aspx?&mailId=3898_1&folderId=2982_39&mailPos=3" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8spawxQzZrjFeHNx4AAABJ TLSv1.2 ECDHE-RSA-AES256-SHA384 948 49511 -% 3121505 4819 88571 196 0 0 192.168.196.112 CH - [2015-05-27 08:50:29.148496] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 18635 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8sxawxQzZrjFeGPL0AAAAW TLSv1.2 ECDHE-RSA-AES256-SHA384 804 19578 -% 4885283 2325 854901 6861 0 0 192.168.196.112 CH - [2015-05-27 08:50:29.150513] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8sxawxQzZrjFeHNyIAAABN TLSv1.2 ECDHE-RSA-AES256-SHA384 820 9859 -% 5192241 3787 178758 4462 0 0 192.168.196.112 CH - [2015-05-27 08:50:36.960110] "GET /EMail/message.aspx?&mailId=3899_1&folderId=2982_39&mailPos=2 HTTP/1.1" 200 11479 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8szKwxQzZrjFeHNyMAAABO TLSv1.2 ECDHE-RSA-AES256-SHA384 534 12164 -% 5973059 3125 945439 23220 0 0 192.168.196.112 CH - [2015-05-27 08:50:40.428058] "GET /EMail/message.aspx?&mailId=3899_1&folderId=2982_39&mailPos=2 HTTP/1.1" 200 11411 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8s0KwxQzZrjFeGPMAAAAAY TLSv1.2 ECDHE-RSA-AES256-SHA384 852 12208 -% 7742605 5785 711072 24545 0 0 192.168.196.112 CH - [2015-05-27 08:50:50.550495] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3899_1&folderId=2982_39&attachmentId=2&token=170610650129079808E18 HTTP/1.1" 200 46601 "https://www.example.com/EMail/message.aspx?&mailId=3899_1&folderId=2982_39&mailPos=2" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8s2qwxQzZrjFeGPMMAAAAh TLSv1.2 ECDHE-RSA-AES256-SHA384 630 49430 -% 4113256 4952 28975 228 0 0 192.168.186.76 CH - [2015-05-27 08:52:31.805818] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8tP6wxQzZrjFeGPNQAAAAv TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 3669201 6585 652530 4126 3 0 192.168.186.76 CH - [2015-05-27 08:52:50.804910] "GET /EMail/message.aspx?&mailId=3904_12&folderId=947_65&mailPos=0 HTTP/1.1" 200 17273 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8tUqwxQzZrjFeHNywAAABX TLSv1.2 ECDHE-RSA-AES256-SHA384 1228 18186 -% 12556962 6903 506916 36637 3 0 192.168.196.112 CH - [2015-05-27 08:53:14.740011] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/message.aspx?&mailId=3899_1&folderId=2982_39&mailPos=2" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8taqwxQzZrjFeGPNkAAAA6 TLSv1.2 ECDHE-RSA-AES256-SHA384 943 6067 -% 2342927 2413 339513 218 0 0 192.168.186.76 CH - [2015-05-27 08:53:25.917059] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3904_12&folderId=947_65&attachmentId=4&token=126442480257814016E18 HTTP/1.1" 200 719487 "https://www.example.com/EMail/message.aspx?&mailId=3904_12&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8tdawxQzZrjFeGPNwAAAA3 TLSv1.2 ECDHE-RSA-AES256-SHA384 1399 760101 -% 4959848 6043 729986 185 3 0 192.168.196.112 CH - [2015-05-27 08:53:34.283012] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 18628 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8tfqwxQzZrjFeGPN0AAAAr TLSv1.2 ECDHE-RSA-AES256-SHA384 879 23266 -% 9681106 3553 643083 9987 0 0 192.168.196.112 CH - [2015-05-27 08:53:34.345664] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8tfqwxQzZrjFeGPN4AAAAy TLSv1.2 ECDHE-RSA-AES256-SHA384 820 9859 -% 22855437 2584 845513 4763 0 0 192.168.196.112 CH - [2015-05-27 08:53:40.316493] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 18628 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8thKwxQzZrjFeGPOAAAAA7 TLSv1.2 ECDHE-RSA-AES256-SHA384 804 19647 -% 17692937 3719 658884 5836 0 0 192.168.196.112 CH - [2015-05-27 08:53:40.317632] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8thKwxQzZrjFeGPOEAAAAB TLSv1.2 ECDHE-RSA-AES256-SHA384 820 9859 -% 17813663 2633 802829 3004 0 0 192.168.186.76 CH - [2015-05-27 08:53:43.681248] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3904_12&folderId=947_65&attachmentId=3&token=126442480257814016E18 HTTP/1.1" 200 8192 "https://www.example.com/EMail/message.aspx?&mailId=3904_12&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "8e2ac2ca.52310227db9e9" Vi8th6wxQzZrjFeHNzEAAABa TLSv1.2 ECDHE-RSA-AES256-SHA384 1399 4076 -% 14509763 5967 501631 175 3 0 192.168.196.112 CH - [2015-05-27 08:53:50.080896] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 18627 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8tjqwxQzZrjFeHNzQAAABg TLSv1.2 ECDHE-RSA-AES256-SHA384 804 19647 -% 8130543 4524 90307 10405 0 0 192.168.196.112 CH - [2015-05-27 08:53:40.612384] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 18627 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8thKwxQzZrjFeGPOIAAAA2 TLSv1.2 ECDHE-RSA-AES256-SHA384 804 19647 -% 17613765 3424 569815 10990 0 0 192.168.196.112 CH - [2015-05-27 08:53:40.615548] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8thKwxQzZrjFeGPOMAAAA- TLSv1.2 ECDHE-RSA-AES256-SHA384 820 9859 -% 17684220 2933 673676 2933 0 0 192.168.196.112 CH - [2015-05-27 08:53:50.082781] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8tjqwxQzZrjFeHNzUAAABh TLSv1.2 ECDHE-RSA-AES256-SHA384 820 9859 -% 14663838 4869 649519 3381 0 0 192.168.196.112 CH - [2015-05-27 08:53:55.777890] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 18627 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8tk6wxQzZrjFeGPOQAAAA4 TLSv1.2 ECDHE-RSA-AES256-SHA384 804 19578 -% 24204432 2545 163593 13606 0 0 192.168.196.112 CH - [2015-05-27 08:53:56.074105] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 18625 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8tlKwxQzZrjFeHNzcAAABk TLSv1.2 ECDHE-RSA-AES256-SHA384 804 19578 -% 23935092 3526 900802 6761 0 0 192.168.186.76 CH - [2015-05-27 08:53:56.416550] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3904_12&folderId=947_65&attachmentId=3&token=126442480257814016E18 HTTP/1.1" 200 8192 "https://www.example.com/EMail/message.aspx?&mailId=3904_12&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "8e2ac2ca.52310227db9e9" Vi8tlKwxQzZrjFeGPOcAAAAM TLSv1.2 ECDHE-RSA-AES256-SHA384 1324 161 -% 23989705 11014 976218 206 3 0 192.168.196.112 CH - [2015-05-27 08:53:55.780063] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8tk6wxQzZrjFeGPOUAAAA5 TLSv1.2 ECDHE-RSA-AES256-SHA384 820 9859 -% 24919338 3061 907554 3956 0 0 192.168.196.112 CH - [2015-05-27 08:54:06.027500] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 18628 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8tnqwxQzZrjFeGPOgAAAAF TLSv1.2 ECDHE-RSA-AES256-SHA384 804 19578 -% 31673721 3437 636084 8644 0 0 192.168.196.112 CH - [2015-05-27 08:54:06.028152] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8tnqwxQzZrjFeGPOkAAAAD TLSv1.2 ECDHE-RSA-AES256-SHA384 820 9859 -% 32704343 4120 691339 4280 0 0 192.168.196.112 CH - [2015-05-27 08:53:56.077567] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8tlKwxQzZrjFeGPOYAAAAA TLSv1.2 ECDHE-RSA-AES256-SHA384 820 9859 -% 46018638 6062 2090 5001 0 0 192.168.196.112 CH - [2015-05-27 08:54:06.335269] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8tnqwxQzZrjFeHNzsAAABp TLSv1.2 ECDHE-RSA-AES256-SHA384 820 9859 -% 36447367 2385 435992 4596 0 0 192.168.196.112 CH - [2015-05-27 08:54:14.126790] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 18627 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8tpqwxQzZrjFeGPOsAAAAN TLSv1.2 ECDHE-RSA-AES256-SHA384 804 19647 -% 28718819 2984 682601 8719 0 0 192.168.196.112 CH - [2015-05-27 08:54:14.128453] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 502 4087 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8tpqwxQzZrjFeGPOwAAAAP TLSv1.2 ECDHE-RSA-AES256-SHA384 820 5241 -% 30032623 2693 0 0 0 0 192.168.196.112 CH - [2015-05-27 08:54:14.342793] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 502 4087 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8tpqwxQzZrjFeGPO0AAAAI TLSv1.2 ECDHE-RSA-AES256-SHA384 804 5241 -% 30034498 2512 0 0 0 0 192.168.196.112 CH - [2015-05-27 08:54:14.344069] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 502 4087 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8tpqwxQzZrjFeGPO4AAAAO TLSv1.2 ECDHE-RSA-AES256-SHA384 820 5241 -% 30035948 3769 0 0 0 0 192.168.196.112 CH - [2015-05-27 08:54:15.099977] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 502 4087 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8tp6wxQzZrjFeHNzwAAABr TLSv1.2 ECDHE-RSA-AES256-SHA384 804 5241 -% 30032966 2400 0 0 0 0 192.168.196.112 CH - [2015-05-27 08:54:15.102246] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 502 4087 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8tp6wxQzZrjFeGPO8AAAA0 TLSv1.2 ECDHE-RSA-AES256-SHA384 820 5241 -% 30034976 2473 0 0 0 0 192.168.196.112 CH - [2015-05-27 08:54:15.419621] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 502 4087 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8tp6wxQzZrjFeGPPAAAAAR TLSv1.2 ECDHE-RSA-AES256-SHA384 820 5241 -% 30034450 3048 0 0 0 0 192.168.196.112 CH - [2015-05-27 08:54:16.415568] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 502 4087 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8tqKwxQzZrjFeGPPEAAAAS TLSv1.2 ECDHE-RSA-AES256-SHA384 804 5241 -% 30036800 5519 0 0 0 0 192.168.196.112 CH - [2015-05-27 08:54:06.331540] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 18628 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8tnqwxQzZrjFeGPOoAAAAL TLSv1.2 ECDHE-RSA-AES256-SHA384 804 19647 -% 49778192 3602 737947 11885 0 0 192.168.196.112 CH - [2015-05-27 08:54:32.753457] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 502 4087 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8tuKwxQzZrjFeHN0EAAABw TLSv1.2 ECDHE-RSA-AES256-SHA384 804 5241 -% 30035054 2872 0 0 0 0 192.168.196.112 CH - [2015-05-27 08:54:33.007333] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 502 4087 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8tuawxQzZrjFeGPPIAAAAJ TLSv1.2 ECDHE-RSA-AES256-SHA384 820 5241 -% 30033917 3292 0 0 0 0 192.168.186.76 CH - [2015-05-27 08:55:07.957417] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "258a13b1.52310884b5a69" Vi8t26wxQzZrjFeHN0gAAAB@ TLSv1.2 ECDHE-RSA-AES256-SHA384 951 5718 -% 2692 1726 45 108 0 0 192.168.196.112 CH - [2015-05-27 08:54:54.313490] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 502 4087 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8tzqwxQzZrjFeHN0QAAABx TLSv1.2 ECDHE-RSA-AES256-SHA384 820 5241 -% 30035457 2551 0 0 0 0 192.168.196.112 CH - [2015-05-27 08:54:49.002862] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 18627 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8tyawxQzZrjFeGPPUAAAAg TLSv1.2 ECDHE-RSA-AES256-SHA384 804 19578 -% 37146092 3027 106980 8528 0 0 192.168.196.112 CH - [2015-05-27 08:54:54.313529] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 18627 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8tzqwxQzZrjFeGPPcAAAAm TLSv1.2 ECDHE-RSA-AES256-SHA384 804 19578 -% 31861008 2444 820565 10035 0 0 192.168.196.112 CH - [2015-05-27 08:54:49.004873] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8tyawxQzZrjFeGPPYAAAAf TLSv1.2 ECDHE-RSA-AES256-SHA384 820 9859 -% 37278903 3300 268277 2725 0 0 192.168.196.112 CH - [2015-05-27 08:55:09.063749] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 18628 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8t3awxQzZrjFeHN0kAAAB- TLSv1.2 ECDHE-RSA-AES256-SHA384 804 19578 -% 24374258 2233 341717 6824 0 0 192.168.196.112 CH - [2015-05-27 08:55:09.066618] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8t3awxQzZrjFeHN0oAAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 820 9859 -% 24379753 2617 369488 2721 0 0 192.168.196.112 CH - [2015-05-27 08:55:42.685515] "GET /EMail/message.aspx?&mailId=3898_2&folderId=2982_39&mailPos=1 HTTP/1.1" 200 11479 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8t-qwxQzZrjFeHN04AAABD TLSv1.2 ECDHE-RSA-AES256-SHA384 852 12357 -% 1226821 4911 195457 25344 0 0 192.168.196.112 CH - [2015-05-27 08:55:50.912031] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3898_2&folderId=2982_39&attachmentId=2&token=254809409950938144E17 HTTP/1.1" 200 46763 "https://www.example.com/EMail/message.aspx?&mailId=3898_2&folderId=2982_39&mailPos=1" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8uBqwxQzZrjFeHN1IAAABC TLSv1.2 ECDHE-RSA-AES256-SHA384 948 49783 -% 6129287 6363 94031 195 0 0 192.168.196.112 CH - [2015-05-27 08:55:46.157123] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3898_2&folderId=2982_39&attachmentId=2&token=254809409950938144E17 HTTP/1.1" 200 46763 "https://www.example.com/EMail/message.aspx?&mailId=3898_2&folderId=2982_39&mailPos=1" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8uAqwxQzZrjFeHN08AAABF TLSv1.2 ECDHE-RSA-AES256-SHA384 630 49845 -% 10974589 4690 952738 207 0 0 192.168.196.112 CH - [2015-05-27 08:56:17.630389] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 18619 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8uIawxQzZrjFeHN1YAAABL TLSv1.2 ECDHE-RSA-AES256-SHA384 804 19647 -% 1559282 3536 526608 5739 0 0 192.168.196.112 CH - [2015-05-27 08:56:17.631078] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8uIawxQzZrjFeGPQAAAAAz TLSv1.2 ECDHE-RSA-AES256-SHA384 820 9859 -% 1663886 3658 652411 2971 0 0 192.168.196.112 CH - [2015-05-27 08:56:22.443247] "GET /EMail/message.aspx?&mailId=3899_2&folderId=2982_39&mailPos=0 HTTP/1.1" 200 11348 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8uJqwxQzZrjFeGPQIAAAA6 TLSv1.2 ECDHE-RSA-AES256-SHA384 534 12020 -% 1202835 5517 174633 21598 0 0 192.168.196.112 CH - [2015-05-27 08:56:26.492821] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3899_2&folderId=2982_39&attachmentId=2&token=219923607162736947E18 HTTP/1.1" 200 47798 "https://www.example.com/EMail/message.aspx?&mailId=3899_2&folderId=2982_39&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8uKqwxQzZrjFeGPQMAAAAt TLSv1.2 ECDHE-RSA-AES256-SHA384 630 50869 -% 3049728 5469 25974 192 0 0 192.168.196.112 CH - [2015-05-27 08:56:29.637887] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3899_2&folderId=2982_39&attachmentId=2&token=219923607162736947E18 HTTP/1.1" 200 47798 "https://www.example.com/EMail/message.aspx?&mailId=3899_2&folderId=2982_39&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8uLawxQzZrjFeGPQQAAAA9 TLSv1.2 ECDHE-RSA-AES256-SHA384 630 50869 -% 1070123 6559 44666 225 0 0 192.168.196.112 CH - [2015-05-27 08:56:49.531053] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8uQawxQzZrjFeHN1oAAABQ TLSv1.2 ECDHE-RSA-AES256-SHA384 820 646 -% 852259 2770 848760 182 0 0 192.168.196.112 CH - [2015-05-27 08:56:50.412427] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8uQqwxQzZrjFeHN1sAAABR TLSv1.2 ECDHE-RSA-AES256-SHA384 486 815 75% 988425 3048 984343 221 0 0 192.168.196.112 CH - [2015-05-27 08:56:51.553482] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8uQ6wxQzZrjFeHN1wAAABS TLSv1.2 ECDHE-RSA-AES256-SHA384 454 373 -% 831439 2202 828498 198 0 0 192.168.196.112 CH - [2015-05-27 08:56:52.413616] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8uRKwxQzZrjFeHN10AAABT TLSv1.2 ECDHE-RSA-AES256-SHA384 438 7866 -% 5350262 3062 341455 4728 0 0 192.168.196.112 CH - [2015-05-27 08:56:57.810411] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8uSawxQzZrjFeGPQgAAAAy TLSv1.2 ECDHE-RSA-AES256-SHA384 868 454 -% 4029052 3497 24405 226 0 0 192.168.196.112 CH - [2015-05-27 08:56:57.812479] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8uSawxQzZrjFeHN14AAABU TLSv1.2 ECDHE-RSA-AES256-SHA384 550 261 -% 4097884 3019 93874 228 0 0 192.168.196.112 CH - [2015-05-27 08:56:57.875777] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8uSawxQzZrjFeHN18AAABW TLSv1.2 ECDHE-RSA-AES256-SHA384 916 454 -% 4149479 2799 145816 148 0 0 192.168.196.112 CH - [2015-05-27 08:56:57.877022] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8uSawxQzZrjFeHN2AAAABV TLSv1.2 ECDHE-RSA-AES256-SHA384 900 454 -% 4212426 2509 209090 198 0 0 192.168.196.112 CH - [2015-05-27 08:56:57.877033] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8uSawxQzZrjFeGPQoAAAA7 TLSv1.2 ECDHE-RSA-AES256-SHA384 868 454 -% 4372718 2889 368951 273 0 0 192.168.196.112 CH - [2015-05-27 08:56:57.876108] "GET /EMail/scripts/variables_de.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8uSawxQzZrjFeGPQkAAAAG TLSv1.2 ECDHE-RSA-AES256-SHA384 900 454 -% 4473277 2823 469668 215 0 0 192.168.196.112 CH - [2015-05-27 08:57:02.395513] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ec7e4df4.5231148c51eaf" Vi8uTqwxQzZrjFeGPQwAAAAB TLSv1.2 ECDHE-RSA-AES256-SHA384 598 261 -% 6864402 3051 860522 169 0 0 192.168.32.7 CH - [2015-05-27 08:58:12.503776] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8ulKwxQzZrjFeGPRcAAAAT TLSv1.2 ECDHE-RSA-AES128-SHA256 1011 11795 -% 2122201 8996 108263 2774 6 0 192.168.32.7 CH - [2015-05-27 08:58:24.598345] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8uoKwxQzZrjFeGPRoAAAAD TLSv1.2 ECDHE-RSA-AES128-SHA256 1160 630 -% 1004134 10330 0 246 6 0 192.168.32.7 CH - [2015-05-27 08:58:25.613140] "GET /EMail/main.aspx HTTP/1.1" 200 3407 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8uoawxQzZrjFeGPRsAAAAd TLSv1.2 ECDHE-RSA-AES128-SHA256 726 3882 -% 3128935 5736 120310 1220 6 0 192.168.32.7 CH - [2015-05-27 08:58:28.820157] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8upKwxQzZrjFeGPRwAAAAA TLSv1.2 ECDHE-RSA-AES128-SHA256 694 4202 -% 960742 7844 944169 6875 6 0 192.168.32.7 CH - [2015-05-27 08:58:28.849441] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8upKwxQzZrjFeGPR4AAAAN TLSv1.2 ECDHE-RSA-AES128-SHA256 984 5963 -% 1324576 8486 312957 1870 6 0 192.168.32.7 CH - [2015-05-27 08:58:28.847638] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8upKwxQzZrjFeGPR0AAAAW TLSv1.2 ECDHE-RSA-AES128-SHA256 1016 9683 -% 2039094 10070 18134 4773 6 0 192.168.32.7 CH - [2015-05-27 08:58:32.320678] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7290 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8uqKwxQzZrjFeGPSAAAAAP TLSv1.2 ECDHE-RSA-AES128-SHA256 710 7770 -% 4975942 6226 965932 2394 6 0 192.168.32.7 CH - [2015-05-27 08:58:32.325220] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8uqKwxQzZrjFeGPSEAAAAa TLSv1.2 ECDHE-RSA-AES128-SHA256 726 9506 -% 5369871 6014 353343 4506 6 0 192.168.32.7 CH - [2015-05-27 08:58:37.338853] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7291 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8urawxQzZrjFeGPSIAAAAY TLSv1.2 ECDHE-RSA-AES128-SHA256 1000 7947 -% 1053717 9340 39139 3247 6 0 192.168.32.7 CH - [2015-05-27 08:58:37.344044] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8urawxQzZrjFeGPSMAAAAO TLSv1.2 ECDHE-RSA-AES128-SHA256 1016 9683 -% 1133276 6538 118291 2971 6 0 192.168.32.7 CH - [2015-05-27 08:59:09.240076] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8uzawxQzZrjFeGPSkAAAAS TLSv1.2 ECDHE-RSA-AES128-SHA256 1000 614 -% 821534 5801 814313 162 6 0 192.168.32.7 CH - [2015-05-27 08:59:10.120736] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8uzqwxQzZrjFeGPSoAAAAX TLSv1.2 ECDHE-RSA-AES128-SHA256 662 357 -% 691581 8746 681127 220 6 0 192.168.32.7 CH - [2015-05-27 08:59:10.822484] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi8uzqwxQzZrjFeGPSsAAAAL TLSv1.2 ECDHE-RSA-AES128-SHA256 646 7834 -% 1001373 6865 988038 4123 6 0 192.168.152.92 CH - [2015-05-27 08:59:31.359925] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "5275422d.52311751a339a" Vi8u46wxQzZrjFeGPS8AAAAj TLSv1.2 ECDHE-RSA-AES256-SHA384 1259 4337 -% 2719493 2032 716745 154 0 0 192.168.152.92 CH - [2015-05-27 08:59:31.368325] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "5275422d.52311751a339a" Vi8u46wxQzZrjFeGPTAAAAAx TLSv1.2 ECDHE-RSA-AES256-SHA384 1291 4337 -% 2887728 1762 884992 292 0 0 192.168.152.92 CH - [2015-05-27 08:59:31.368146] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "5275422d.52311751a339a" Vi8u46wxQzZrjFeHN2sAAABa TLSv1.2 ECDHE-RSA-AES256-SHA384 1259 4337 -% 2950318 3289 946102 198 0 0 192.168.152.92 CH - [2015-05-27 08:59:31.387954] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "5275422d.52311751a339a" Vi8u46wxQzZrjFeGPTEAAAAg TLSv1.2 ECDHE-RSA-AES256-SHA384 1291 4337 -% 2995295 1777 992888 157 0 0 192.168.152.92 CH - [2015-05-27 08:59:34.462159] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "5275422d.52311751a339a" Vi8u5qwxQzZrjFeHN2wAAABg TLSv1.2 ECDHE-RSA-AES256-SHA384 710 261 -% 6907857 2423 904611 219 0 0 192.168.186.76 CH - [2015-05-27 08:59:42.019373] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8u7qwxQzZrjFeGPTMAAAAk TLSv1.2 ECDHE-RSA-AES256-SHA384 1079 13742 -% 19541641 4644 530212 3133 3 0 192.168.152.92 CH - [2015-05-27 08:59:53.707845] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "5275422d.52311751a339a" Vi8u@awxQzZrjFeGPTYAAAAp TLSv1.2 ECDHE-RSA-AES256-SHA384 1121 4076 -% 8284551 6136 277357 229 0 0 192.168.152.92 CH - [2015-05-27 08:59:59.357364] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "5275422d.52311751a339a" Vi8u-6wxQzZrjFeGPTcAAAAw TLSv1.2 ECDHE-RSA-AES256-SHA384 1254 630 -% 8435727 5524 429130 290 0 0 192.168.152.92 CH - [2015-05-27 09:00:07.878599] "GET /EMail/main.aspx HTTP/1.1" 200 3403 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "5275422d.52311751a339a" Vi8vB6wxQzZrjFeGPToAAAA@ TLSv1.2 ECDHE-RSA-AES256-SHA384 614 3914 -% 665418 3304 659402 1652 0 0 192.168.152.92 CH - [2015-05-27 09:00:08.806339] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "5275422d.52311751a339a" Vi8vCKwxQzZrjFeGPTsAAAAz TLSv1.2 ECDHE-RSA-AES256-SHA384 630 261 -% 12639926 3109 635881 229 0 0 192.168.152.92 CH - [2015-05-27 09:00:09.035353] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "5275422d.52311751a339a" Vi8vCawxQzZrjFeGPTwAAAA6 TLSv1.2 ECDHE-RSA-AES256-SHA384 1152 422 -% 19415671 3121 411336 197 0 0 192.168.152.92 CH - [2015-05-27 09:00:09.036793] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "5275422d.52311751a339a" Vi8vCawxQzZrjFeHN3AAAABq TLSv1.2 ECDHE-RSA-AES256-SHA384 1152 422 -% 19486904 1945 484180 196 0 0 192.168.152.92 CH - [2015-05-27 09:00:36.008298] "GET /EMail/overview.aspx HTTP/1.1" 200 5300 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "5275422d.52311751a339a" Vi8vJKwxQzZrjFeGPUIAAAAE TLSv1.2 ECDHE-RSA-AES256-SHA384 1163 9894 -% 13276046 2123 270685 2688 0 0 192.168.152.92 CH - [2015-05-27 09:00:36.009232] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "5275422d.52311751a339a" Vi8vJKwxQzZrjFeGPUMAAAAK TLSv1.2 ECDHE-RSA-AES256-SHA384 1179 13742 -% 19243234 3618 233662 3288 0 0 192.168.152.92 CH - [2015-05-27 09:00:49.475139] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "5275422d.52311751a339a" Vi8vMawxQzZrjFeGPUYAAAAG TLSv1.2 ECDHE-RSA-AES256-SHA384 678 261 -% 6389823 3310 385335 273 0 0 192.168.152.92 CH - [2015-05-27 09:00:49.589331] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "5275422d.52311751a339a" Vi8vMawxQzZrjFeGPUcAAAA1 TLSv1.2 ECDHE-RSA-AES256-SHA384 1152 422 -% 6309223 2304 306160 147 0 0 192.168.152.92 CH - [2015-05-27 09:00:55.757599] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "5275422d.52311751a339a" Vi8vN6wxQzZrjFeGPUoAAAA8 TLSv1.2 ECDHE-RSA-AES256-SHA384 726 261 -% 14605099 3367 600927 165 0 0 192.168.152.92 CH - [2015-05-27 09:01:30.303354] "GET /EMail/inbox.aspx HTTP/1.1" 200 8487 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "5275422d.52311751a339a" Vi8vWqwxQzZrjFeHN3QAAABu TLSv1.2 ECDHE-RSA-AES256-SHA384 1163 13163 -% 2916218 2987 907845 4337 0 0 192.168.152.92 CH - [2015-05-27 09:01:33.300939] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "5275422d.52311751a339a" Vi8vXawxQzZrjFeHN3YAAABy TLSv1.2 ECDHE-RSA-AES256-SHA384 630 261 -% 6708487 2965 704682 156 0 0 192.168.152.92 CH - [2015-05-27 09:01:33.382672] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "5275422d.52311751a339a" Vi8vXawxQzZrjFeGPVAAAAA5 TLSv1.2 ECDHE-RSA-AES256-SHA384 1152 422 -% 6849330 2135 846063 218 0 0 192.168.152.92 CH - [2015-05-27 09:01:33.382489] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "5275422d.52311751a339a" Vi8vXawxQzZrjFeHN3cAAABp TLSv1.2 ECDHE-RSA-AES256-SHA384 1184 422 -% 6851869 2311 848788 173 0 0 192.168.152.92 CH - [2015-05-27 09:01:33.386711] "GET /EMail/images/attach.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "5275422d.52311751a339a" Vi8vXawxQzZrjFeHN3gAAABz TLSv1.2 ECDHE-RSA-AES256-SHA384 1184 161 -% 11370852 1663 368539 196 0 0 192.168.152.92 CH - [2015-05-27 09:01:40.639368] "GET /EMail/images/active.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "5275422d.52311751a339a" Vi8vZKwxQzZrjFeHN3kAAABr TLSv1.2 ECDHE-RSA-AES256-SHA384 678 261 -% 4921048 2002 918027 447 0 0 192.168.152.92 CH - [2015-05-27 09:01:54.850579] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/message.aspx?&mailId=3897_2&folderId=3397_26&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "5275422d.52311751a339a" Vi8vcqwxQzZrjFeGPVUAAAAD TLSv1.2 ECDHE-RSA-AES256-SHA384 1275 4337 -% 13510519 2685 506874 149 0 0 192.168.152.92 CH - [2015-05-27 09:01:54.851261] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/message.aspx?&mailId=3897_2&folderId=3397_26&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "5275422d.52311751a339a" Vi8vcqwxQzZrjFeGPVYAAAAd TLSv1.2 ECDHE-RSA-AES256-SHA384 1275 4337 -% 13511079 3485 507003 92 0 0 192.168.152.92 CH - [2015-05-27 09:02:18.304203] "GET /EMail/MailHandler?service=downloadAllAttachments&mailId=3897_2&folderId=3397_26&token=143140733501043942E18 HTTP/1.1" 200 8192 "https://www.example.com/EMail/message.aspx?&mailId=3897_2&folderId=3397_26&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "5275422d.52311751a339a" Vi8viqwxQzZrjFeHN3wAAAB3 TLSv1.2 ECDHE-RSA-AES256-SHA384 1216 161 -% 6983422 4190 978377 181 0 0 192.168.186.76 CH - [2015-05-27 09:20:45.652883] "GET /EMail/newMessage.aspx?action=reply&mailId=3904_12&folderId=947_65&showPics=false HTTP/1.1" 200 23931 "https://www.example.com/EMail/message.aspx?&mailId=3904_12&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8z3awxQzZrjFeHN80AAABK TLSv1.2 ECDHE-RSA-AES256-SHA384 1367 28842 -% 1296908 6947 238621 47390 6 3 192.168.186.76 CH - [2015-05-27 09:20:47.013131] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3904_12&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi8z36wxQzZrjFeHN84AAABL TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 767286 4153 755973 5124 3 0 192.168.1.78 CH - [2015-05-27 09:23:15.669399] "GET /EMail/images/active.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "7791ea1c.52311755d2782" Vi80c6wxQzZrjFeGPgIAAAAE TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1235 4232 -% 885383 2330 882266 198 0 0 192.168.186.76 CH - [2015-05-27 09:23:19.173028] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3904_12&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi80d6wxQzZrjFeGPgMAAAAB TLSv1.2 ECDHE-RSA-AES256-SHA384 8977 630 -% 3483911 495516 0 165 86 0 192.168.186.76 CH - [2015-05-27 09:23:22.670684] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3904_12&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi80eqwxQzZrjFeGPgYAAAA1 TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 6768106 7352 751942 7249 3 0 192.168.186.76 CH - [2015-05-27 09:23:47.862045] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi80k6wxQzZrjFeGPgkAAAAH TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1472054 6397 456720 3985 3 0 192.168.186.76 CH - [2015-05-27 09:23:51.270962] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi80l6wxQzZrjFeGPgwAAAAM TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 2963487 10163 950721 228 3 0 192.168.186.76 CH - [2015-05-27 09:23:54.246764] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 9751 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi80mqwxQzZrjFeGPg0AAAA5 TLSv1.2 ECDHE-RSA-AES256-SHA384 726 10351 -% 6814226 4724 804658 3123 3 0 192.168.186.76 CH - [2015-05-27 09:24:21.367980] "GET /EMail/message.aspx?&mailId=3904_13&folderId=947_65&mailPos=1 HTTP/1.1" 200 17074 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi80tawxQzZrjFeGPg8AAAAU TLSv1.2 ECDHE-RSA-AES256-SHA384 1244 17994 -% 9536975 5524 490943 33909 3 0 192.168.32.7 CH - [2015-05-27 09:29:09.337275] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "90host.52311df2e84bb" Vi811awxQzZrjFeGPjkAAAA6 TLSv1.2 ECDHE-RSA-AES128-SHA256 899 11875 -% 860490 5109 850313 3342 6 0 192.168.32.7 CH - [2015-05-27 09:29:09.405246] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "883f8bba.52311df2f8e3e" Vi811awxQzZrjFeGPjoAAAAz TLSv1.2 ECDHE-RSA-AES128-SHA256 899 11875 -% 925463 4635 916520 2772 6 0 192.168.32.7 CH - [2015-05-27 09:29:10.375501] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "883f8bba.52311df2f8e3e" Vi811qwxQzZrjFeGPjwAAAAy TLSv1.2 ECDHE-RSA-AES128-SHA256 678 1967 22% 3819960 9075 808270 164 6 0 192.168.32.7 CH - [2015-05-27 09:29:10.408557] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "883f8bba.52311df2f8e3e" Vi811qwxQzZrjFeGPj0AAAA7 TLSv1.2 ECDHE-RSA-AES128-SHA256 968 864 56% 3817631 8631 806854 211 6 0 192.168.32.7 CH - [2015-05-27 09:29:10.372565] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "883f8bba.52311df2f8e3e" Vi811qwxQzZrjFeGPjsAAAAr TLSv1.2 ECDHE-RSA-AES128-SHA256 678 2713 14% 3920322 6836 910884 167 6 0 192.168.32.7 CH - [2015-05-27 09:29:10.421518] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "883f8bba.52311df2f8e3e" Vi811qwxQzZrjFeHN-EAAABz TLSv1.2 ECDHE-RSA-AES128-SHA256 1000 4405 23% 3891289 13153 873875 240 6 0 192.168.32.7 CH - [2015-05-27 09:29:10.482354] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "883f8bba.52311df2f8e3e" Vi811qwxQzZrjFeGPj8AAAA2 TLSv1.2 ECDHE-RSA-AES128-SHA256 968 2890 14% 10203761 10919 190018 167 6 0 192.168.32.7 CH - [2015-05-27 09:29:10.425935] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "883f8bba.52311df2f8e3e" Vi811qwxQzZrjFeGPj4AAAAE TLSv1.2 ECDHE-RSA-AES128-SHA256 1000 1931 -% 10306435 6073 298026 119 6 0 192.168.32.7 CH - [2015-05-27 09:29:10.488197] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "883f8bba.52311df2f8e3e" Vi811qwxQzZrjFeGPkIAAAA1 TLSv1.2 ECDHE-RSA-AES128-SHA256 1000 1931 -% 10244178 9625 231884 115 6 0 192.168.32.7 CH - [2015-05-27 09:29:10.424730] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "883f8bba.52311df2f8e3e" Vi811qwxQzZrjFeHN-IAAAB1 TLSv1.2 ECDHE-RSA-AES128-SHA256 984 8573 22% 10332556 13076 313479 143 6 0 192.168.32.7 CH - [2015-05-27 09:29:10.485878] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "883f8bba.52311df2f8e3e" Vi811qwxQzZrjFeGPkAAAAAK TLSv1.2 ECDHE-RSA-AES128-SHA256 968 2144 22% 10286402 10787 272806 347 6 0 192.168.32.7 CH - [2015-05-27 09:29:10.492895] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "883f8bba.52311df2f8e3e" Vi811qwxQzZrjFeGPkMAAAA- TLSv1.2 ECDHE-RSA-AES128-SHA256 984 8573 22% 10286708 6474 269339 177 6 0 192.168.32.7 CH - [2015-05-27 09:29:10.505492] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "883f8bba.52311df2f8e3e" Vi811qwxQzZrjFeGPkQAAAAG TLSv1.2 ECDHE-RSA-AES128-SHA256 968 864 56% 10643742 6437 635309 239 6 0 192.168.32.7 CH - [2015-05-27 09:29:10.487855] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "883f8bba.52311df2f8e3e" Vi811qwxQzZrjFeGPkEAAAAB TLSv1.2 ECDHE-RSA-AES128-SHA256 1000 4405 23% 10825890 11503 811441 173 6 0 192.168.32.7 CH - [2015-05-27 09:29:20.852314] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "883f8bba.52311df2f8e3e" Vi814KwxQzZrjFeGPkcAAAA4 TLSv1.2 ECDHE-RSA-AES128-SHA256 726 1866 -% 940696 8962 930162 154 6 0 192.168.32.7 CH - [2015-05-27 09:29:21.362712] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "883f8bba.52311df2f8e3e" Vi814awxQzZrjFeGPkgAAAAV TLSv1.2 ECDHE-RSA-AES128-SHA256 726 1866 -% 4340100 6958 331183 230 6 0 192.168.186.76 CH - [2015-05-27 09:30:03.751688] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9750 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi82C6wxQzZrjFeGPlIAAAAF TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 14427 -% 1050943 6524 37816 4432 3 0 192.168.186.76 CH - [2015-05-27 09:30:03.824555] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi82C6wxQzZrjFeGPlMAAAAW TLSv1.2 ECDHE-RSA-AES256-SHA384 1212 9827 -% 6580058 5250 565952 4707 3 0 192.168.186.76 CH - [2015-05-27 09:30:07.728890] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi82D6wxQzZrjFeGPlUAAAAe TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 3330905 9121 319215 201 3 0 192.168.186.76 CH - [2015-05-27 09:30:11.071026] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8520 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi82E6wxQzZrjFeGPlYAAAAZ TLSv1.2 ECDHE-RSA-AES256-SHA384 726 9119 -% 3875023 7618 859998 4536 3 0 192.168.186.76 CH - [2015-05-27 09:30:15.927411] "GET /EMail/message.aspx?&mailId=3904_14&folderId=947_65&mailPos=0 HTTP/1.1" 200 16107 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi82F6wxQzZrjFeGPlgAAAAO TLSv1.2 ECDHE-RSA-AES256-SHA384 726 16788 -% 8367383 8772 306448 49412 3 0 192.168.186.76 CH - [2015-05-27 09:31:04.592344] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3904_14&folderId=947_65&attachmentId=3&token=185903004809041818E18 HTTP/1.1" 200 745112 "https://www.example.com/EMail/message.aspx?&mailId=3904_14&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi82SKwxQzZrjFeHN-gAAAB4 TLSv1.2 ECDHE-RSA-AES256-SHA384 1324 775859 -% 1877964 9709 688170 220 3 0 192.168.186.76 CH - [2015-05-27 09:31:29.964975] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3904_14&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi82YawxQzZrjFeGPmIAAAAl TLSv1.2 ECDHE-RSA-AES256-SHA384 1319 7526 -% 924521 4525 913386 5257 3 0 192.168.186.76 CH - [2015-05-27 09:31:30.132810] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5880 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3904_14&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi82YqwxQzZrjFeGPmMAAAAJ TLSv1.2 ECDHE-RSA-AES256-SHA384 1202 9827 -% 939259 3932 0 0 3 0 192.168.186.76 CH - [2015-05-27 09:34:12.530700] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi83BKwxQzZrjFeGPnUAAAAC TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1226622 5166 210468 4691 3 0 192.168.186.76 CH - [2015-05-27 09:34:15.492150] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi83B6wxQzZrjFeGPnYAAAA6 TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1172000 8159 162023 179 3 0 192.168.186.76 CH - [2015-05-27 09:34:16.676922] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7291 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi83CKwxQzZrjFeGPncAAAAz TLSv1.2 ECDHE-RSA-AES256-SHA384 726 7802 -% 1143967 4710 135542 2292 3 0 192.168.212.3 CH - [2015-05-27 10:11:58.642863] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7383 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi8-3qwxQzZrjFeGP7sAAAAQ TLSv1 ECDHE-RSA-AES256-SHA 704 11809 -% 22928042 3021 922069 2167 0 0 192.168.212.3 CH - [2015-05-27 10:12:21.825797] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi8-9awxQzZrjFeHOJ0AAABi TLSv1 ECDHE-RSA-AES256-SHA 869 358 -% 17098531 2105 95228 414 0 0 192.168.212.3 CH - [2015-05-27 10:12:21.830360] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi8-9awxQzZrjFeGP8AAAAAN TLSv1 ECDHE-RSA-AES256-SHA 869 358 -% 25125550 1763 122999 238 0 0 192.168.212.3 CH - [2015-05-27 10:12:21.827452] "GET /EMail/scripts/variables_de.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi8-9awxQzZrjFeGP78AAAAP TLSv1 ECDHE-RSA-AES256-SHA 901 358 -% 28254576 1860 251935 237 0 0 192.168.212.3 CH - [2015-05-27 10:12:21.827766] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi8-9awxQzZrjFeHOJ4AAABa TLSv1 ECDHE-RSA-AES256-SHA 901 358 -% 28288801 1843 286377 163 0 0 192.168.212.3 CH - [2015-05-27 10:12:21.945808] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi8-9awxQzZrjFeGP8EAAAAI TLSv1 ECDHE-RSA-AES256-SHA 662 213 -% 39785809 2020 782942 233 0 0 192.168.212.3 CH - [2015-05-27 10:12:21.946207] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi8-9awxQzZrjFeHOJ8AAABj TLSv1 ECDHE-RSA-AES256-SHA 885 358 -% 39881362 2537 878096 136 0 0 192.168.212.3 CH - [2015-05-27 10:13:02.081349] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9AHqwxQzZrjFeGP8cAAAAZ TLSv1 ECDHE-RSA-AES256-SHA 984 4049 -% 19485452 2035 482530 212 0 0 192.168.192.35 CH - [2015-05-27 10:17:22.978240] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7364 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9BIqwxQzZrjFeGP@oAAAAr TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 697 11975 -% 25859913 2770 853364 2837 0 0 192.168.192.35 CH - [2015-05-27 10:17:48.913282] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - - "ffhost.523128ba7f9c0" Vi9BPKwxQzZrjFeGP@0AAAAE - - 450 31 -% 30034668 2520 31251 149 0 0 192.168.192.35 CH - [2015-05-27 10:17:48.936360] "GET /EMail/css/utils.css HTTP/1.1" 502 4087 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9BPKwxQzZrjFeGP@4AAAA1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1015 4794 -% 30032910 2537 0 0 0 0 192.168.192.35 CH - [2015-05-27 10:17:48.937858] "GET /EMail/scripts/shost.js HTTP/1.1" 502 4087 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffceb433.523128ba7f9c0" Vi9BPKwxQzZrjFeGP@8AAAAK TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1040 4794 -% 30034981 2662 0 0 0 0 192.168.192.35 CH - [2015-05-27 10:17:48.937738] "GET /EMail/css/basic.css HTTP/1.1" 502 4087 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9BPKwxQzZrjFeHOLkAAABB TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1015 4794 -% 30036474 3032 0 0 0 0 192.168.192.35 CH - [2015-05-27 10:17:48.938309] "GET /EMail/images/logo.gif HTTP/1.1" 502 4087 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9BPKwxQzZrjFeHOLoAAAB8 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1054 4794 -% 30036248 2737 0 0 0 0 192.168.192.35 CH - [2015-05-27 10:17:48.939815] "GET /EMail/scripts/variables_de.js HTTP/1.1" 502 4087 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9BPKwxQzZrjFeGP-AAAAA- TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1045 4794 -% 30035726 3094 0 0 0 0 192.168.192.35 CH - [2015-05-27 10:18:18.963224] "GET /EMail/css/IEstyle.css HTTP/1.1" 502 4087 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9BWqwxQzZrjFeGP-UAAAAV TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1017 4794 -% 30033930 2093 0 0 0 0 192.168.192.35 CH - [2015-05-27 10:18:49.160691] "GET /EMail/images/icon10.ico HTTP/1.1" 502 4087 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68969ec7.5231290cb03f3" Vi9BeawxQzZrjFeGP-oAAAAF TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 805 4940 -% 30032902 952 0 0 0 0 192.168.192.35 CH - [2015-05-27 10:19:03.834259] "POST /EMail/MailHandler HTTP/1.1" 502 4087 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9Bh6wxQzZrjFeGP-0AAAAP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1223 4794 -% 30039580 5959 0 0 0 0 192.168.192.35 CH - [2015-05-27 10:19:33.893248] "GET /errordocuments/logo_d.png HTTP/1.1" 200 7515 "https://www.example.com/EMail/MailHandler" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "ffhost.523128ba7f9c0" Vi9BpawxQzZrjFeGQAMAAAAR TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 408 7917 -% 2659 1502 46 320 0 0 192.168.192.35 CH - [2015-05-27 10:19:33.950686] "GET /EMail/favicon.ico HTTP/1.1" 502 4087 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68969ec7.5231290cb03f3" Vi9BpawxQzZrjFeGQAQAAAA0 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 843 4794 -% 30030458 1325 0 0 0 0 192.168.192.35 CH - [2015-05-27 10:20:04.021068] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "68969ec7.5231290cb03f3" Vi9BxKwxQzZrjFeHOMcAAABL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 835 1697 -% 3199 2174 62 155 0 0 192.168.212.3 CH - [2015-05-27 10:21:00.943666] "POST /EMail/MailHandler HTTP/1.1" 502 4087 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9B-KwxQzZrjFeGQBMAAAAv TLSv1 ECDHE-RSA-AES256-SHA 949 4841 -% 30038245 5198 0 0 0 0 192.168.192.35 CH - [2015-05-27 10:21:01.959236] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 502 4087 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9B-awxQzZrjFeGQBQAAAAk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 985 4794 -% 30035668 3833 0 0 0 0 192.168.212.3 CH - [2015-05-27 10:21:00.738661] "GET /EMail/images/active.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9B-KwxQzZrjFeHOMgAAABN TLSv1 ECDHE-RSA-AES256-SHA 976 4044 -% 37677660 2328 674260 198 0 0 192.168.212.3 CH - [2015-05-27 10:21:14.747704] "POST /EMail/MailHandler HTTP/1.1" 502 4087 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9CCqwxQzZrjFeGQBgAAAAw TLSv1 ECDHE-RSA-AES256-SHA 949 4841 -% 30038594 5769 0 0 0 0 192.168.212.3 CH - [2015-05-27 10:21:44.838045] "GET /errordocuments/logo_d.png HTTP/1.1" 200 7515 "https://www.example.com/EMail/MailHandler" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "78061c89.52312785302af" Vi9CKKwxQzZrjFeGQB4AAAA6 TLSv1 ECDHE-RSA-AES256-SHA 518 7914 -% 3296 2229 61 154 0 0 192.168.212.3 CH - [2015-05-27 10:21:57.703505] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 502 4087 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9CNawxQzZrjFeGQCAAAAAy TLSv1 ECDHE-RSA-AES256-SHA 834 8532 -% 30039093 5876 0 0 0 0 192.168.192.35 CH - [2015-05-27 10:23:27.695579] "GET /EMail/css/utils.css HTTP/1.1" 502 4087 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9Cj6wxQzZrjFeGQDAAAAAU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1090 8677 -% 30027764 2092 0 0 0 0 192.168.192.35 CH - [2015-05-27 10:23:27.693558] "GET /EMail/css/basic.css HTTP/1.1" 502 4087 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9Cj6wxQzZrjFeGQC4AAAAA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1090 8677 -% 30036615 3393 0 0 0 0 192.168.192.35 CH - [2015-05-27 10:23:27.694775] "GET /EMail/images/logo.gif HTTP/1.1" 502 4087 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9Cj6wxQzZrjFeGQC8AAAAd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1129 8677 -% 30035790 3107 0 0 0 0 192.168.192.35 CH - [2015-05-27 10:23:27.699210] "GET /EMail/scripts/shost.js HTTP/1.1" 502 4087 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffceb433.523128ba7f9c0" Vi9Cj6wxQzZrjFeHONAAAABW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1115 8677 -% 30033187 3071 0 0 0 0 192.168.192.35 CH - [2015-05-27 10:23:27.698667] "GET /EMail/scripts/variables_de.js HTTP/1.1" 502 4087 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9Cj6wxQzZrjFeGQDEAAAAD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1120 8677 -% 30034025 2442 0 0 0 0 192.168.192.35 CH - [2015-05-27 10:23:57.725858] "GET /EMail/css/IEstyle.css HTTP/1.1" 502 4087 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9CrawxQzZrjFeGQDcAAAAe TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1092 8677 -% 30035656 3430 0 0 0 0 192.168.192.35 CH - [2015-05-27 10:24:27.881039] "GET /EMail/images/icon10.ico HTTP/1.1" 502 4087 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68969ec7.5231290cb03f3" Vi9Cy6wxQzZrjFeGQDoAAAAP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 924 8677 -% 30032100 1528 0 0 0 0 192.168.192.35 CH - [2015-05-27 10:25:29.481530] "POST /EMail/MailHandler HTTP/1.1" 502 4087 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9DCawxQzZrjFeGQEQAAAAj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1298 8677 -% 30019789 3687 0 0 0 0 192.168.192.35 CH - [2015-05-27 10:25:59.575745] "GET /EMail/favicon.ico HTTP/1.1" 502 4087 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68969ec7.5231290cb03f3" Vi9DJ6wxQzZrjFeGQEgAAAAf TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 918 8677 -% 30033958 1396 0 0 0 0 192.168.192.35 CH - [2015-05-27 10:29:44.515457] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7364 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9ECKwxQzZrjFeGQGgAAAAV TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 985 8019 -% 4127035 2842 119614 3750 0 0 192.168.192.35 CH - [2015-05-27 10:29:48.765687] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9EDKwxQzZrjFeGQGsAAAAU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1015 737 56% 1708755 4066 703883 166 0 0 192.168.192.35 CH - [2015-05-27 10:29:48.766799] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9EDKwxQzZrjFeGQGwAAAAD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1045 4386 23% 1760313 3853 753846 325 0 0 192.168.192.35 CH - [2015-05-27 10:29:48.710984] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9EDKwxQzZrjFeGQGoAAAAW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 450 2427 14% 1830467 2900 825727 165 0 0 192.168.192.35 CH - [2015-05-27 10:29:48.768243] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9EDKwxQzZrjFeGQG4AAAAd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1054 1828 -% 2008472 3682 3667 212 0 0 192.168.192.35 CH - [2015-05-27 10:29:48.768661] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9EDKwxQzZrjFeGQG8AAAAN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1015 2019 22% 2043496 3564 38945 147 0 0 192.168.192.35 CH - [2015-05-27 10:29:48.766953] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7239 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffceb433.523128ba7f9c0" Vi9EDKwxQzZrjFeGQG0AAAAA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1040 8184 22% 2051027 3670 42849 110 0 0 192.168.192.35 CH - [2015-05-27 10:29:50.878390] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9EDqwxQzZrjFeGQHAAAAAY TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 491 1792 -% 979552 1997 976736 201 0 0 192.168.192.35 CH - [2015-05-27 10:29:51.920357] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "68969ec7.5231290cb03f3" Vi9ED6wxQzZrjFeGQHEAAAAI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 849 1800 -% 1253391 1237 251320 212 0 0 192.168.192.35 CH - [2015-05-27 10:29:57.140451] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9EFawxQzZrjFeHOOwAAAB3 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1056 2231 -% 1077168 3376 72743 164 0 0 192.168.192.35 CH - [2015-05-27 10:29:57.905711] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9EFawxQzZrjFeGQHMAAAAi TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1223 564 -% 1559171 5019 553413 190 0 0 192.168.192.35 CH - [2015-05-27 10:29:59.475053] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9EF6wxQzZrjFeGQHQAAAAZ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 492 3812 -% 1247290 2252 242261 1862 0 0 192.168.192.35 CH - [2015-05-27 10:30:00.797541] "GET /EMail/overview.aspx HTTP/1.1" 200 5303 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9EGKwxQzZrjFeGQHYAAAAO TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 996 5868 -% 1223768 2876 218153 2056 0 0 192.168.192.35 CH - [2015-05-27 10:30:00.777094] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffceb433.523128ba7f9c0" Vi9EGKwxQzZrjFeGQHUAAAAe TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 427 4141 -% 1785499 3055 772881 8788 0 0 192.168.192.35 CH - [2015-05-27 10:30:00.803192] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9EGKwxQzZrjFeGQHcAAAAR TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1022 9335 -% 2270258 2193 261590 3507 0 0 192.168.192.35 CH - [2015-05-27 10:30:02.066175] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9EGqwxQzZrjFeGQHgAAAAh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 456 1248 -% 1336603 2160 333685 171 0 0 192.168.192.35 CH - [2015-05-27 10:30:03.131425] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9EG6wxQzZrjFeGQHkAAAAb TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 498 1260 -% 1565409 3002 561611 157 0 0 192.168.192.35 CH - [2015-05-27 10:30:03.426651] "GET /EMail/inbox.aspx HTTP/1.1" 200 12484 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9EG6wxQzZrjFeGQHwAAAAX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 430 12965 -% 1592536 3013 581782 6481 0 0 192.168.192.35 CH - [2015-05-27 10:30:05.061792] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9EHawxQzZrjFeGQH0AAAAq TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 448 539 -% 1208685 3191 204634 212 0 0 192.168.192.35 CH - [2015-05-27 10:30:05.062187] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffceb433.523128ba7f9c0" Vi9EHawxQzZrjFeGQH4AAAAl TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 451 527 -% 1263289 3038 259122 149 0 0 192.168.192.35 CH - [2015-05-27 10:30:05.062963] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9EHawxQzZrjFeGQH8AAAAc TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 451 1813 -% 1318814 2735 315109 164 0 0 192.168.192.35 CH - [2015-05-27 10:30:07.146025] "GET /EMail/message.aspx?&mailId=3904_19&folderId=540_81&mailPos=0 HTTP/1.1" 200 11333 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9EH6wxQzZrjFeGQIEAAAAx TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 471 11814 -% 2163585 4821 135342 22129 0 0 192.168.192.35 CH - [2015-05-27 10:30:10.378493] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/message.aspx?&mailId=3904_19&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9EIqwxQzZrjFeGQIMAAAAn TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 492 2088 -% 1736227 3177 732224 151 0 0 192.168.192.35 CH - [2015-05-27 10:30:11.945575] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3904_19&folderId=540_81&attachmentId=2&token=2553118044696639E18 HTTP/1.1" 200 59980 "https://www.example.com/EMail/message.aspx?&mailId=3904_19&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9EI6wxQzZrjFeGQIQAAAAj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1142 61818 -% 1852118 3867 811029 230 0 0 192.168.192.35 CH - [2015-05-27 10:30:31.270058] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3904_19&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9EN6wxQzZrjFeGQIgAAAAf TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1270 499 -% 1220747 7564 212080 159 0 0 192.168.192.35 CH - [2015-05-27 10:30:32.511056] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 11185 "https://www.example.com/EMail/message.aspx?&mailId=3904_19&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9EOKwxQzZrjFeGQIkAAAAu TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 520 11666 -% 1575009 2440 567037 4496 0 0 192.168.192.35 CH - [2015-05-27 10:30:36.560000] "GET /EMail/message.aspx?&mailId=3904_18&folderId=540_81&mailPos=0 HTTP/1.1" 200 11345 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9EPKwxQzZrjFeGQIsAAAA@ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 495 11826 -% 1514792 4771 489945 19074 0 0 192.168.192.35 CH - [2015-05-27 10:30:39.853474] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3904_18&folderId=540_81&attachmentId=2&token=185355930254494336E18 HTTP/1.1" 200 54991 "https://www.example.com/EMail/message.aspx?&mailId=3904_18&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9EP6wxQzZrjFeGQI0AAAA9 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 577 56498 -% 1666376 6125 636777 208 0 0 192.168.192.35 CH - [2015-05-27 10:30:55.369420] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3904_18&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9ET6wxQzZrjFeGQI4AAAAv TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1270 499 -% 1618546 4924 612671 157 0 0 192.168.192.35 CH - [2015-05-27 10:30:57.002994] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 9885 "https://www.example.com/EMail/message.aspx?&mailId=3904_18&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9EUawxQzZrjFeGQI8AAAA3 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 520 10336 -% 1455278 3957 445968 4328 0 0 192.168.192.35 CH - [2015-05-27 10:31:00.438139] "GET /EMail/message.aspx?&mailId=3906_2&folderId=540_81&mailPos=0 HTTP/1.1" 200 11330 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9EVKwxQzZrjFeGQJEAAAAC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 494 11811 -% 3054544 4700 22780 25765 0 0 192.168.192.35 CH - [2015-05-27 10:31:04.924605] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3906_2&folderId=540_81&attachmentId=2&token=49138705295924838E18 HTTP/1.1" 200 56863 "https://www.example.com/EMail/message.aspx?&mailId=3906_2&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ffhost.523128ba7f9c0" Vi9EWKwxQzZrjFeGQJIAAAA8 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 574 58464 -% 2185219 6723 150827 233 0 0 192.168.1.78 CH - [2015-05-27 10:33:33.008218] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7365 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "7791ea1c.52311755d2782" Vi9E7awxQzZrjFeGQKsAAAAd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1075 11903 -% 714706 3898 707914 2212 0 0 192.168.1.78 CH - [2015-05-27 10:33:33.897501] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "7791ea1c.52311755d2782" Vi9E7awxQzZrjFeGQKwAAAAN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 555 2551 14% 961458 2374 957397 212 0 0 192.168.186.76 CH - [2015-05-27 10:49:19.476883] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f6190874.52312fdd419ce" Vi9In6wxQzZrjFeGQTEAAAAR TLSv1.2 ECDHE-RSA-AES256-SHA384 1191 5862 -% 922832 5197 915728 167 3 0 192.168.186.76 CH - [2015-05-27 10:49:19.479814] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f6190874.52312fdd419ce" Vi9In6wxQzZrjFeHOTkAAABF TLSv1.2 ECDHE-RSA-AES256-SHA384 1175 11936 22% 1097047 5652 87037 179 3 0 192.168.186.76 CH - [2015-05-27 10:49:19.486915] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f6190874.52312fdd419ce" Vi9In6wxQzZrjFeHOToAAABG TLSv1.2 ECDHE-RSA-AES256-SHA384 1143 4811 56% 1273192 3079 267984 204 3 0 192.168.186.76 CH - [2015-05-27 10:49:19.497655] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f6190874.52312fdd419ce" Vi9In6wxQzZrjFeHOTsAAABC TLSv1.2 ECDHE-RSA-AES256-SHA384 1175 8671 23% 1313301 7644 302462 163 3 0 192.168.186.76 CH - [2015-05-27 10:49:20.843339] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f6190874.52312fdd419ce" Vi9IoKwxQzZrjFeHOTwAAABJ TLSv1.2 ECDHE-RSA-AES256-SHA384 598 1898 -% 988802 5635 980790 182 3 0 192.168.186.76 CH - [2015-05-27 10:49:21.773180] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "f6190874.52312fdd419ce" Vi9IoawxQzZrjFeHOT0AAABM TLSv1.2 ECDHE-RSA-AES256-SHA384 598 0 -% 1010971 5060 3656 148 3 0 192.168.186.76 CH - [2015-05-27 10:49:22.641710] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f6190874.52312fdd419ce" Vi9IoqwxQzZrjFeHOT4AAABI TLSv1.2 ECDHE-RSA-AES256-SHA384 726 469 -% 885058 7103 876087 165 3 0 192.168.186.76 CH - [2015-05-27 10:49:23.540070] "GET /EMail/main.aspx HTTP/1.1" 200 3391 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f6190874.52312fdd419ce" Vi9Io6wxQzZrjFeHOT8AAABK TLSv1.2 ECDHE-RSA-AES256-SHA384 598 3898 -% 1002687 3423 0 1166 3 0 192.168.186.76 CH - [2015-05-27 10:49:24.612858] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f6190874.52312fdd419ce" Vi9IpKwxQzZrjFeHOUAAAABL TLSv1.2 ECDHE-RSA-AES256-SHA384 566 4234 -% 697397 4846 681470 8961 3 0 192.168.186.76 CH - [2015-05-27 10:49:24.623578] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f6190874.52312fdd419ce" Vi9IpKwxQzZrjFeHOUEAAABN TLSv1.2 ECDHE-RSA-AES256-SHA384 598 9666 -% 1592543 4752 576395 4615 3 0 192.168.186.76 CH - [2015-05-27 10:49:26.236518] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f6190874.52312fdd419ce" Vi9IpqwxQzZrjFeHOUMAAABP TLSv1.2 ECDHE-RSA-AES256-SHA384 646 1370 -% 882183 5456 874556 222 3 0 192.168.186.76 CH - [2015-05-27 10:52:06.077103] "GET /EMail/tree.aspx?sNode-sharedTree=treeNewMsg HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f6190874.52312fdd419ce" Vi9JRqwxQzZrjFeHOUsAAABW TLSv1.2 ECDHE-RSA-AES256-SHA384 1116 9827 -% 1743191 5449 728880 2734 3 0 192.168.186.76 CH - [2015-05-27 10:52:09.006627] "GET /EMail/scripts/tinymce/plugins/preview/plugin.min.js HTTP/1.1" 200 737 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f6190874.52312fdd419ce" Vi9JSawxQzZrjFeHOU4AAABd TLSv1.2 ECDHE-RSA-AES256-SHA384 1207 5451 51% 1361861 4156 356008 156 3 0 192.168.186.76 CH - [2015-05-27 10:52:08.891594] "GET /EMail/scripts/tinymce/langs/de.js HTTP/1.1" 200 2969 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f6190874.52312fdd419ce" Vi9JSKwxQzZrjFeHOU0AAABY TLSv1.2 ECDHE-RSA-AES256-SHA384 598 3684 38% 1571435 3501 565253 189 3 0 192.168.186.76 CH - [2015-05-27 10:52:08.981806] "GET /EMail/scripts/tinymce/plugins/print/plugin.min.js HTTP/1.1" 200 182 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f6190874.52312fdd419ce" Vi9JSKwxQzZrjFeGQU0AAAA8 TLSv1.2 ECDHE-RSA-AES256-SHA384 1207 4891 55% 1500178 3678 494446 232 3 0 192.168.186.76 CH - [2015-05-27 10:52:09.518027] "GET /EMail/scripts/tinymce/plugins/searchreplace/plugin.min.js HTTP/1.1" 200 2586 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f6190874.52312fdd419ce" Vi9JSawxQzZrjFeGQU4AAAA6 TLSv1.2 ECDHE-RSA-AES256-SHA384 1148 3461 40% 1094200 3283 89009 172 3 0 192.168.186.76 CH - [2015-05-27 10:52:10.519547] "GET /EMail/scripts/tinymce/plugins/textcolor/plugin.min.js HTTP/1.1" 200 1647 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f6190874.52312fdd419ce" Vi9JSqwxQzZrjFeGQVAAAAA7 TLSv1.2 ECDHE-RSA-AES256-SHA384 614 2287 44% 574667 5065 566840 239 3 0 192.168.186.76 CH - [2015-05-27 10:52:10.071651] "GET /EMail/scripts/tinymce/plugins/insertdatetime/plugin.min.js HTTP/1.1" 200 867 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f6190874.52312fdd419ce" Vi9JSqwxQzZrjFeGQU8AAAAz TLSv1.2 ECDHE-RSA-AES256-SHA384 1223 5579 42% 1024221 5365 16588 153 3 0 192.168.186.76 CH - [2015-05-27 10:52:10.401416] "GET /EMail/scripts/tinymce/plugins/link/plugin.min.js HTTP/1.1" 200 1835 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f6190874.52312fdd419ce" Vi9JSqwxQzZrjFeHOU8AAABX TLSv1.2 ECDHE-RSA-AES256-SHA384 614 2479 41% 798209 5071 790583 224 3 0 192.168.186.76 CH - [2015-05-27 10:52:10.647844] "GET /EMail/scripts/tinymce/plugins/visualchars/plugin.min.js HTTP/1.1" 200 608 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f6190874.52312fdd419ce" Vi9JSqwxQzZrjFeGQVEAAAAH TLSv1.2 ECDHE-RSA-AES256-SHA384 614 1247 54% 695186 3681 689262 255 3 0 192.168.186.76 CH - [2015-05-27 10:52:10.496761] "GET /EMail/scripts/tinymce/plugins/anchor/plugin.min.js HTTP/1.1" 200 339 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f6190874.52312fdd419ce" Vi9JSqwxQzZrjFeHOVAAAABb TLSv1.2 ECDHE-RSA-AES256-SHA384 614 975 63% 969145 5074 961785 201 3 0 192.168.186.76 CH - [2015-05-27 10:52:11.859607] "GET /EMail/scripts/tinymce/skins/lightgray/content.min.css HTTP/1.1" 200 588 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f6190874.52312fdd419ce" Vi9JS6wxQzZrjFeHOVEAAABe TLSv1.2 ECDHE-RSA-AES256-SHA384 598 1231 38% 818390 5317 811402 171 3 0 192.168.186.76 CH - [2015-05-27 10:52:11.844418] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5472 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f6190874.52312fdd419ce" Vi9JS6wxQzZrjFeGQVIAAAAr TLSv1.2 ECDHE-RSA-AES256-SHA384 582 9250 -% 1059992 3215 0 0 3 0 192.168.186.76 CH - [2015-05-27 10:52:13.194387] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce-small.eot? HTTP/1.1" 200 10316 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f6190874.52312fdd419ce" Vi9JTawxQzZrjFeHOVIAAABf TLSv1.2 ECDHE-RSA-AES256-SHA384 630 11012 -% 835604 3621 830109 161 3 0 192.168.186.76 CH - [2015-05-27 10:53:41.275836] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f6190874.52312fdd419ce" Vi9JpawxQzZrjFeGQWAAAAAU TLSv1.2 ECDHE-RSA-AES256-SHA384 1132 2347 -% 851441 3882 846077 165 3 0 192.168.186.76 CH - [2015-05-27 10:53:43.188272] "GET /EMail/attachost.aspx HTTP/1.1" 200 4989 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f6190874.52312fdd419ce" Vi9Jp6wxQzZrjFeGQWEAAAAD TLSv1.2 ECDHE-RSA-AES256-SHA384 534 5498 -% 1109411 4356 101565 2085 3 0 192.168.186.76 CH - [2015-05-27 10:53:44.319581] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/attachost.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f6190874.52312fdd419ce" Vi9JqKwxQzZrjFeGQWIAAAAW TLSv1.2 ECDHE-RSA-AES256-SHA384 598 634 -% 1060369 3239 54952 188 3 0 192.168.186.76 CH - [2015-05-27 10:55:18.614085] "GET /EMail/attachost.aspx HTTP/1.1" 200 4989 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f6190874.52312fdd419ce" Vi9KBqwxQzZrjFeGQW8AAAAh TLSv1.2 ECDHE-RSA-AES256-SHA384 1127 9574 -% 959326 3290 952902 1621 3 0 192.168.186.76 CH - [2015-05-27 10:55:48.650355] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/attachost.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f6190874.52312fdd419ce" Vi9KJKwxQzZrjFeGQXQAAAAJ TLSv1.2 ECDHE-RSA-AES256-SHA384 171630 550 -% 2281823 4481 197327 237 3 0 192.168.186.76 CH - [2015-05-27 10:55:50.945210] "GET /EMail/attachost.aspx HTTP/1.1" 200 6467 "https://www.example.com/EMail/attachments.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f6190874.52312fdd419ce" Vi9KJqwxQzZrjFeGQXUAAAAq TLSv1.2 ECDHE-RSA-AES256-SHA384 614 6986 -% 866705 5664 856252 2850 3 0 192.168.186.76 CH - [2015-05-27 10:55:59.136579] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f6190874.52312fdd419ce" Vi9KL6wxQzZrjFeGQXcAAAAc TLSv1.2 ECDHE-RSA-AES256-SHA384 1943 646 -% 1106819 16864 87974 156 21 0 192.168.186.76 CH - [2015-05-27 10:56:00.256272] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=john.smith@ourindustry.com&bcc= HTTP/1.1" 200 4125 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f6190874.52312fdd419ce" Vi9KMKwxQzZrjFeGQXgAAAAg TLSv1.2 ECDHE-RSA-AES256-SHA384 710 4634 -% 1336355 7543 314235 11993 3 0 192.168.96.45 CH - [2015-05-27 11:13:20.279577] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7366 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9OQKwxQzZrjFeGQgcAAAA2 TLSv1 AES256-SHA 885 11449 -% 832724 1296 828622 2271 0 0 192.168.96.45 CH - [2015-05-27 11:13:21.216657] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9OQawxQzZrjFeGQggAAAAH TLSv1 AES256-SHA 598 2431 14% 881018 2110 877310 223 0 0 192.168.96.45 CH - [2015-05-27 11:13:21.648638] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9OQawxQzZrjFeGQgkAAAAy TLSv1 AES256-SHA 1125 3700 -% 960401 3231 956269 201 0 0 192.168.96.45 CH - [2015-05-27 11:13:21.773981] "GET /EMail/scripts/variables_de.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9OQawxQzZrjFeHOasAAABx TLSv1 AES256-SHA 1125 3700 -% 3021359 3432 17135 143 0 0 192.168.96.45 CH - [2015-05-27 11:13:24.889520] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9ORKwxQzZrjFeHOa0AAABB TLSv1 AES256-SHA 582 213 -% 946472 3089 942589 151 0 0 192.168.96.45 CH - [2015-05-27 11:13:24.904298] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9ORKwxQzZrjFeGQgoAAAAB TLSv1 AES256-SHA 726 213 -% 952050 3011 947782 432 0 0 192.168.96.45 CH - [2015-05-27 11:13:39.529176] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9OU6wxQzZrjFeGQgwAAAA4 TLSv1 AES256-SHA 1021 3904 -% 1073649 3330 69467 242 0 0 192.168.96.45 CH - [2015-05-27 11:13:40.726980] "GET /EMail/main.aspx HTTP/1.1" 200 3398 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9OVKwxQzZrjFeGQg0AAAA1 TLSv1 AES256-SHA 1005 7301 -% 884737 2110 880595 1207 0 0 192.168.96.45 CH - [2015-05-27 11:13:41.833006] "GET /EMail/overview.aspx HTTP/1.1" 200 5303 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9OVawxQzZrjFeGQg8AAAA5 TLSv1 AES256-SHA 989 9221 -% 911855 3134 905945 2051 0 0 192.168.96.45 CH - [2015-05-27 11:13:42.932376] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9OVqwxQzZrjFeHOa8AAAB- TLSv1 AES256-SHA 1101 3696 -% 923272 2114 920320 304 0 0 192.168.96.45 CH - [2015-05-27 11:13:43.888158] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9OV6wxQzZrjFeHObAAAAB7 TLSv1 AES256-SHA 1133 3696 -% 731425 2234 728327 245 0 0 192.168.96.45 CH - [2015-05-27 11:13:54.990208] "GET /EMail/images/attach.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9OYqwxQzZrjFeGQhMAAAAU TLSv1 AES256-SHA 1085 3696 -% 815792 2513 812376 186 0 0 192.168.96.45 CH - [2015-05-27 11:13:54.991853] "GET /EMail/images/msgClosed.png HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9OYqwxQzZrjFeGQhQAAAAD TLSv1 AES256-SHA 1085 3696 -% 1061627 1716 59152 185 0 0 192.168.96.45 CH - [2015-05-27 11:14:00.977717] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3906_12&folderId=1157_50&attachmentId=2&token=40395613938278103E18 HTTP/1.1" 200 55305 "https://www.example.com/EMail/message.aspx?&mailId=3906_12&folderId=1157_50&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9OaKwxQzZrjFeGQhUAAAAN TLSv1 AES256-SHA 1133 60505 -% 1000119 4064 971150 196 0 0 192.168.96.45 CH - [2015-05-27 11:14:16.484421] "GET /EMail/images/msgOpened.png HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9OeKwxQzZrjFeGQhcAAAAI TLSv1 AES256-SHA 1085 3696 -% 853652 3321 849611 143 0 0 192.168.96.45 CH - [2015-05-27 11:14:20.948825] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3907_6&folderId=1157_50&attachmentId=2&token=25587522121038024E18 HTTP/1.1" 200 58392 "https://www.example.com/EMail/message.aspx?&mailId=3907_6&folderId=1157_50&mailPos=1" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9OfKwxQzZrjFeGQhgAAAAi TLSv1 AES256-SHA 1133 63704 -% 1081959 3994 54059 189 0 0 192.168.96.45 CH - [2015-05-27 11:14:34.737904] "GET /EMail/inbox.aspx HTTP/1.1" 200 9875 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9OiqwxQzZrjFeGQhsAAAAR TLSv1 AES256-SHA 989 13834 -% 1083366 3324 76002 3202 0 0 192.168.96.45 CH - [2015-05-27 11:14:46.025088] "GET /EMail/index.html HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9OlqwxQzZrjFeGQh4AAAA0 TLSv1 AES256-SHA 1069 3696 -% 939568 3220 935530 157 0 0 192.168.96.45 CH - [2015-05-27 11:14:47.479861] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0)" www.example.com 192.168.34.16 443 - - + "7e4a6667.52313541de827" Vi9Ol6wxQzZrjFeGQh8AAAAb TLSv1 AES256-SHA 949 5049 -% 3124 2109 66 145 0 0 192.168.96.45 CH - [2015-05-27 11:14:49.328535] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9OmawxQzZrjFeGQiAAAAAX TLSv1 AES256-SHA 1037 3696 -% 1092141 2580 88775 209 0 0 192.168.96.45 CH - [2015-05-27 11:14:49.582502] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9OmawxQzZrjFeHObYAAABM TLSv1 AES256-SHA 1093 3700 -% 1087911 3355 83655 168 0 0 192.168.96.45 CH - [2015-05-27 11:14:49.540840] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9OmawxQzZrjFeGQiEAAAAc TLSv1 AES256-SHA 1109 3700 -% 1293858 4375 288432 202 0 0 192.168.96.45 CH - [2015-05-27 11:14:50.696621] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9OmqwxQzZrjFeHObcAAABI TLSv1 AES256-SHA 694 213 -% 955523 3887 950664 185 0 0 192.168.96.45 CH - [2015-05-27 11:22:50.145539] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9QeqwxQzZrjFeGQmEAAAAn TLSv1 AES256-SHA 1021 3904 -% 1065708 5426 59468 161 0 0 192.168.96.45 CH - [2015-05-27 11:22:52.741373] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9QfKwxQzZrjFeGQmIAAAAs TLSv1 AES256-SHA 1013 9225 -% 1179659 2315 173551 3058 0 0 192.168.96.45 CH - [2015-05-27 11:23:47.388320] "GET /EMail/inbox.aspx HTTP/1.1" 200 8584 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9Qs6wxQzZrjFeGQmoAAAA9 TLSv1 AES256-SHA 989 12538 -% 1250817 2119 245310 2681 0 0 192.168.96.45 CH - [2015-05-27 11:24:00.582358] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9QwKwxQzZrjFeGQm0AAAAC TLSv1 AES256-SHA 1157 3844 -% 8156032 9699 145240 261 0 0 192.168.212.3 CH - [2015-05-27 11:24:05.099895] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7383 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9QxawxQzZrjFeHOeMAAAB9 TLSv1 ECDHE-RSA-AES256-SHA 784 11729 -% 10567657 5904 557046 3702 0 0 192.168.96.45 CH - [2015-05-27 11:24:09.392787] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7289 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9QyawxQzZrjFeGQm8AAAA8 TLSv1 AES256-SHA 614 7722 -% 12404586 3852 396515 3399 0 0 192.168.96.45 CH - [2015-05-27 11:24:15.224847] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9Qz6wxQzZrjFeGQnEAAAAz TLSv1 AES256-SHA 1157 3844 -% 7209638 6798 201991 155 0 0 192.168.212.3 CH - [2015-05-27 11:24:23.026457] "GET /EMail/images/active.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9Q16wxQzZrjFeHOeYAAABB TLSv1 ECDHE-RSA-AES256-SHA 994 4049 -% 21756163 2264 752954 237 0 0 192.168.96.45 CH - [2015-05-27 11:24:19.910098] "GET /EMail/message.aspx?&mailId=3907_17&folderId=1157_50&mailPos=0 HTTP/1.1" 200 3743 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9Q06wxQzZrjFeHOeUAAABx TLSv1 AES256-SHA 1045 7673 -% 25166655 3119 156794 6203 0 0 192.168.212.3 CH - [2015-05-27 11:24:23.681858] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9Q16wxQzZrjFeGQnMAAAAH TLSv1 ECDHE-RSA-AES256-SHA 949 566 -% 34451993 4270 446808 167 0 0 192.168.96.45 CH - [2015-05-27 11:24:44.731306] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7471 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9Q7KwxQzZrjFeGQngAAAAQ TLSv1 AES256-SHA 981 11401 -% 13664437 3008 642599 18114 0 0 192.168.212.3 CH - [2015-05-27 11:24:30.578682] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9Q3qwxQzZrjFeHOegAAAB- TLSv1 ECDHE-RSA-AES256-SHA 949 566 -% 34182040 5868 175329 165 0 0 192.168.96.45 CH - [2015-05-27 11:24:45.087467] "GET /EMail/message.aspx?&mailId=3907_17&folderId=1157_50&mailPos=0 HTTP/1.1" 200 3743 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9Q7awxQzZrjFeHOekAAABD TLSv1 AES256-SHA 1045 7673 -% 27061922 2989 50065 8213 0 0 192.168.212.3 CH - [2015-05-27 11:25:04.784856] "GET /EMail/main.aspx HTTP/1.1" 200 3415 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9RAKwxQzZrjFeHOe4AAABI TLSv1 ECDHE-RSA-AES256-SHA 582 3834 -% 16100399 2162 96336 1306 0 0 192.168.96.45 CH - [2015-05-27 11:24:56.355627] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9Q@KwxQzZrjFeGQnsAAAA- TLSv1 AES256-SHA 1029 3908 -% 24633527 2391 630462 164 0 0 192.168.96.45 CH - [2015-05-27 11:25:11.038163] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7366 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9RB6wxQzZrjFeHOe8AAABK TLSv1 AES256-SHA 957 11365 -% 24695963 2604 690005 2755 0 0 192.168.212.3 CH - [2015-05-27 11:25:21.086354] "GET /EMail/overview.aspx HTTP/1.1" 200 6213 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9REawxQzZrjFeGQoAAAAAA TLSv1 ECDHE-RSA-AES256-SHA 757 6795 -% 15621259 1896 616784 2062 0 0 192.168.212.3 CH - [2015-05-27 11:25:21.086151] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 502 4087 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9REawxQzZrjFeGQn8AAAAN TLSv1 ECDHE-RSA-AES256-SHA 773 4841 -% 30034761 2456 0 0 0 0 192.168.212.3 CH - [2015-05-27 11:25:21.052974] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9REawxQzZrjFeHOfAAAABO TLSv1 ECDHE-RSA-AES256-SHA 550 4154 -% 35014480 1988 4976 6823 0 0 192.168.212.3 CH - [2015-05-27 11:25:36.833510] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9RIKwxQzZrjFeGQoEAAAAI TLSv1 ECDHE-RSA-AES256-SHA 662 213 -% 26225978 3128 221815 194 0 0 192.168.96.45 CH - [2015-05-27 11:25:47.233484] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9RK6wxQzZrjFeGQoQAAAAi TLSv1 AES256-SHA 1021 3904 -% 16299413 4667 293670 319 0 0 192.168.96.45 CH - [2015-05-27 11:26:01.501912] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9ROawxQzZrjFeGQogAAAAR TLSv1 AES256-SHA 1045 3908 -% 23460183 4151 455090 203 0 0 192.168.212.3 CH - [2015-05-27 11:25:51.187042] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9RL6wxQzZrjFeGQoYAAAAe TLSv1 ECDHE-RSA-AES256-SHA 566 9234 -% 34137385 3979 123302 4371 0 0 192.168.212.3 CH - [2015-05-27 11:26:25.470145] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9RUawxQzZrjFeGQo4AAAAx TLSv1 ECDHE-RSA-AES256-SHA 694 213 -% 13273443 3559 268856 210 0 0 192.168.96.45 CH - [2015-05-27 11:26:59.582408] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9Rc6wxQzZrjFeGQpUAAAAp TLSv1 AES256-SHA 1021 3904 -% 19485690 5814 478825 266 0 0 192.168.96.45 CH - [2015-05-27 11:27:07.936463] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9Re6wxQzZrjFeGQpgAAAA@ TLSv1 AES256-SHA 1045 3908 -% 17415513 3555 410881 238 0 0 192.168.186.76 CH - [2015-05-27 11:28:12.075485] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "f6190874.52312fdd419ce" Vi9RvKwxQzZrjFeGQqMAAAAG TLSv1.2 ECDHE-RSA-AES256-SHA384 983 4076 -% 10739262 6457 730402 222 3 0 192.168.244.197 CH - [2015-05-27 11:31:54.957322] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd (unknown version) CFNetwork/520.5.3 Darwin/11.4.2 (i386) (MacBook2%2C1)" www.example.com 192.168.34.16 443 proxy-server - - "89faeffa.523139634f60a" Vi9SmqwxQzZrjFeGQsAAAAAh TLSv1 ECDHE-RSA-AES256-SHA 507 8347 -% 8143022 1844 139848 175 0 0 192.168.244.197 CH - [2015-05-27 11:32:09.088493] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd (unknown version) CFNetwork/520.5.3 Darwin/11.4.2 (i386) (MacBook2%2C1)" www.example.com 192.168.34.16 443 proxy-server - - "ae2bd286.52313970c95ed" Vi9SqawxQzZrjFeHOgoAAABt TLSv1 ECDHE-RSA-AES256-SHA 464 4659 -% 1861160 1822 858054 250 0 0 192.168.96.45 CH - [2015-05-27 11:34:13.531467] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9TJawxQzZrjFeGQtYAAAA9 TLSv1 AES256-SHA 1045 3908 -% 21730463 3222 726430 202 0 0 192.168.32.7 CH - [2015-05-27 11:36:12.618301] "GET /EMail/images/icon10.ico HTTP/1.1" 502 4087 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "10982ba5.52313a5908e3d" Vi9TnKwxQzZrjFeGQuYAAAAE TLSv1.2 ECDHE-RSA-AES128-SHA256 627 8929 -% 30031225 885 0 0 0 0 192.168.131.224 CH - [2015-05-27 11:46:23.866809] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "9e7ac713.52313c9ff77b9" Vi9V-6wxQzZrjFeGQ0AAAAAq TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 572 8359 -% 19177910 1475 172545 170 0 0 192.168.14.154 CH - [2015-05-27 11:51:40.619483] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "89d19c8b.52313dce0badb" Vi9XPKwxQzZrjFeGQ3EAAAAF TLSv1.2 ECDHE-RSA-AES256-SHA384 659 8674 -% 36550732 2142 547431 155 0 0 192.168.213.21 CH - [2015-05-27 11:55:02.266940] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7383 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9YBqwxQzZrjFeGQ4wAAAAt TLSv1 ECDHE-RSA-AES256-SHA 784 11649 -% 47907021 3312 898202 4300 0 0 192.168.213.21 CH - [2015-05-27 11:56:04.944096] "GET /EMail/images/active.gif HTTP/1.1" 502 4087 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9YRKwxQzZrjFeGQ5kAAAAz TLSv1 ECDHE-RSA-AES256-SHA 984 8532 -% 30032977 2186 0 0 0 0 192.168.213.21 CH - [2015-05-27 11:56:05.490788] "POST /EMail/MailHandler HTTP/1.1" 502 4087 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9YRawxQzZrjFeHOmIAAABD TLSv1 ECDHE-RSA-AES256-SHA 949 4841 -% 30039393 7149 0 0 0 0 192.168.213.21 CH - [2015-05-27 11:56:17.965770] "POST /EMail/MailHandler HTTP/1.1" 502 4087 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9YUawxQzZrjFeHOmMAAABL TLSv1 ECDHE-RSA-AES256-SHA 949 4841 -% 30038899 5546 0 0 0 0 192.168.213.23 CH - [2015-05-27 11:58:10.332097] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 502 4087 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "52d68f31.52313f41b45c1" Vi9YwqwxQzZrjFeGQ6gAAAAQ TLSv1 ECDHE-RSA-AES256-SHA 704 8671 -% 30036681 3434 0 0 0 0 192.168.213.23 CH - [2015-05-27 11:58:40.416557] "GET /errordocuments/logo_d.png HTTP/1.1" 200 7515 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "52d68f31.52313f41b45c1" Vi9Y4KwxQzZrjFeGQ60AAAAY TLSv1 ECDHE-RSA-AES256-SHA 566 7914 -% 2084 1376 45 106 0 0 192.168.225.6 CH - [2015-05-27 12:05:27.686405] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "3de12490.523140e2cc505" Vi9ad6wxQzZrjFeGQ@0AAAAA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 572 8359 -% 3946759 1319 943772 205 0 0 192.168.131.224 CH - [2015-05-27 12:16:33.761242] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "d789a376.5231435e043da" Vi9dEawxQzZrjFeGRE0AAAAt TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 572 8359 -% 1069518 1266 67145 156 0 0 192.168.81.38 CH - [2015-05-27 12:28:42.354972] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7372 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ac7aeb09.52314614db91c" Vi9f6qwxQzZrjFeGRLAAAAAb TLSv1 ECDHE-RSA-AES256-SHA 703 12009 -% 959841 1371 951755 5698 0 0 192.168.81.38 CH - [2015-05-27 12:28:43.561887] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ac7aeb09.52314614db91c" Vi9f66wxQzZrjFeGRLEAAAAJ TLSv1 ECDHE-RSA-AES256-SHA 454 2431 14% 907566 3020 902700 215 0 0 192.168.81.38 CH - [2015-05-27 12:28:43.612420] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ac7aeb09.52314614db91c" Vi9f66wxQzZrjFeGRLIAAAAq TLSv1 ECDHE-RSA-AES256-SHA 847 8290 23% 1146614 1937 142950 167 0 0 192.168.81.38 CH - [2015-05-27 12:28:43.613701] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ac7aeb09.52314614db91c" Vi9f66wxQzZrjFeGRLMAAAAR TLSv1 ECDHE-RSA-AES256-SHA 815 5918 22% 1226587 2551 223242 145 0 0 192.168.81.38 CH - [2015-05-27 12:28:53.221097] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ac7aeb09.52314614db91c" Vi9f9awxQzZrjFeGRLUAAAAX TLSv1 ECDHE-RSA-AES256-SHA 831 13265 -% 2000504 2588 987991 4520 0 0 192.168.81.38 CH - [2015-05-27 12:28:55.461573] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ac7aeb09.52314614db91c" Vi9f96wxQzZrjFeGRLYAAAAe TLSv1 ECDHE-RSA-AES256-SHA 518 1274 -% 959364 3736 954669 198 0 0 192.168.81.38 CH - [2015-05-27 12:28:58.596337] "GET /EMail/inbox.aspx HTTP/1.1" 200 9883 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ac7aeb09.52314614db91c" Vi9f@qwxQzZrjFeGRLgAAAAg TLSv1 ECDHE-RSA-AES256-SHA 454 10351 -% 1063277 2677 56698 2989 0 0 192.168.81.38 CH - [2015-05-27 12:28:59.866678] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ac7aeb09.52314614db91c" Vi9f@6wxQzZrjFeGRLkAAAAx TLSv1 ECDHE-RSA-AES256-SHA 470 554 -% 1123082 3197 119045 247 0 0 192.168.81.38 CH - [2015-05-27 12:28:59.921263] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ac7aeb09.52314614db91c" Vi9f@6wxQzZrjFeGRLoAAAAn TLSv1 ECDHE-RSA-AES256-SHA 831 5849 -% 1135305 1992 132467 183 0 0 192.168.81.38 CH - [2015-05-27 12:29:02.206720] "GET /EMail/message.aspx?&mailId=3906_11&folderId=587_1&mailPos=0 HTTP/1.1" 200 11337 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ac7aeb09.52314614db91c" Vi9f-qwxQzZrjFeGRLwAAAAs TLSv1 ECDHE-RSA-AES256-SHA 486 11844 -% 1195553 3332 167480 23834 0 0 192.168.32.7 CH - [2015-05-27 12:32:33.563265] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi9g0awxQzZrjFeGROQAAAAO TLSv1.2 ECDHE-RSA-AES128-SHA256 1011 11795 -% 722705 8002 709848 3314 6 0 192.168.32.7 CH - [2015-05-27 12:32:48.049199] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi9g4KwxQzZrjFeGROgAAAAP TLSv1.2 ECDHE-RSA-AES128-SHA256 1160 630 -% 908109 7606 897819 284 6 0 192.168.32.7 CH - [2015-05-27 12:32:48.966935] "GET /EMail/main.aspx HTTP/1.1" 200 3407 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi9g4KwxQzZrjFeGROkAAAAF TLSv1.2 ECDHE-RSA-AES128-SHA256 726 3882 -% 791446 8625 780194 1130 6 0 192.168.32.7 CH - [2015-05-27 12:32:49.815992] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi9g4awxQzZrjFeGROoAAAAi TLSv1.2 ECDHE-RSA-AES128-SHA256 694 4202 -% 960604 8883 939339 10107 6 0 192.168.32.7 CH - [2015-05-27 12:32:49.843516] "GET /EMail/overview.aspx HTTP/1.1" 200 5304 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi9g4awxQzZrjFeGROsAAAAh TLSv1.2 ECDHE-RSA-AES128-SHA256 984 5963 -% 1360566 6255 349081 3064 6 0 192.168.32.7 CH - [2015-05-27 12:32:49.845627] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi9g4awxQzZrjFeGROwAAAA0 TLSv1.2 ECDHE-RSA-AES128-SHA256 1016 9683 -% 1927201 11749 905494 3300 6 0 192.168.32.7 CH - [2015-05-27 12:32:53.760033] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9891 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi9g5awxQzZrjFeGRO4AAAAb TLSv1.2 ECDHE-RSA-AES128-SHA256 710 10447 -% 1028776 7279 14093 5136 6 0 192.168.32.7 CH - [2015-05-27 12:32:53.764160] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi9g5awxQzZrjFeGRO8AAAAJ TLSv1.2 ECDHE-RSA-AES128-SHA256 726 9506 -% 1529443 8512 511336 3347 6 0 192.168.32.7 CH - [2015-05-27 12:32:54.831376] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi9g5qwxQzZrjFeGRPEAAAAR TLSv1.2 ECDHE-RSA-AES128-SHA256 726 1882 -% 948624 8722 938215 163 6 0 192.168.32.7 CH - [2015-05-27 12:33:03.700379] "GET /EMail/message.aspx?&mailId=3910_5&folderId=3481_21&mailPos=0 HTTP/1.1" 200 11350 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi9g76wxQzZrjFeGRPMAAAAX TLSv1.2 ECDHE-RSA-AES128-SHA256 1032 12080 -% 1352539 6158 322918 21775 6 0 192.168.32.7 CH - [2015-05-27 12:33:07.908308] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3910_5&folderId=3481_21&attachmentId=2&token=33079939868649375E18 HTTP/1.1" 200 48449 "https://www.example.com/EMail/message.aspx?&mailId=3910_5&folderId=3481_21&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi9g86wxQzZrjFeGRPUAAAAc TLSv1.2 ECDHE-RSA-AES128-SHA256 838 50997 -% 1104716 11745 72218 210 6 0 192.168.32.7 CH - [2015-05-27 12:33:37.545594] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9883 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi9hEawxQzZrjFeGRPsAAAAm TLSv1.2 ECDHE-RSA-AES128-SHA256 1000 10608 -% 1499237 9268 482614 5129 6 0 192.168.32.7 CH - [2015-05-27 12:33:37.548378] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi9hEawxQzZrjFeGRPwAAAAf TLSv1.2 ECDHE-RSA-AES128-SHA256 1016 9683 -% 1649498 9413 631569 2674 6 0 192.168.32.7 CH - [2015-05-27 12:33:39.092077] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi9hE6wxQzZrjFeGRP0AAAAo TLSv1.2 ECDHE-RSA-AES128-SHA256 726 1946 -% 1220638 8591 209486 219 6 0 192.168.32.7 CH - [2015-05-27 12:33:44.015850] "GET /EMail/message.aspx?&mailId=3907_19&folderId=3481_21&mailPos=1 HTTP/1.1" 200 11342 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi9hGKwxQzZrjFeGRP8AAAAp TLSv1.2 ECDHE-RSA-AES128-SHA256 742 11887 -% 1217903 6604 188283 21273 6 0 192.168.32.7 CH - [2015-05-27 12:33:52.051088] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3907_19&folderId=3481_21&attachmentId=2&token=28709543524124672E18 HTTP/1.1" 200 48868 "https://www.example.com/EMail/message.aspx?&mailId=3907_19&folderId=3481_21&mailPos=1" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi9hIKwxQzZrjFeHOvMAAABh TLSv1.2 ECDHE-RSA-AES128-SHA256 1144 51606 -% 1104764 8777 74223 241 6 0 192.168.32.7 CH - [2015-05-27 12:34:24.456369] "GET /EMail/message.aspx?&mailId=3907_19&folderId=3481_21&getFromPOP3=N&showPics=true HTTP/1.1" 200 11290 "https://www.example.com/EMail/message.aspx?&mailId=3907_19&folderId=3481_21&mailPos=1" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi9hQKwxQzZrjFeGRQUAAAAC TLSv1.2 ECDHE-RSA-AES128-SHA256 1096 12016 -% 1396756 6644 364272 23860 6 0 192.168.32.7 CH - [2015-05-27 12:34:27.772056] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9875 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi9hQ6wxQzZrjFeGRQcAAAAw TLSv1.2 ECDHE-RSA-AES128-SHA256 710 10431 -% 1199959 5743 186764 5069 6 0 192.168.32.7 CH - [2015-05-27 12:34:27.811160] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi9hQ6wxQzZrjFeGRQgAAAAt TLSv1.2 ECDHE-RSA-AES128-SHA256 1016 9683 -% 1462686 5881 445048 5100 6 0 192.168.32.7 CH - [2015-05-27 12:34:42.946608] "GET /EMail/trash.aspx?dir=desc HTTP/1.1" 200 12876 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi9hUqwxQzZrjFeGRQsAAAAM TLSv1.2 ECDHE-RSA-AES128-SHA256 1000 13669 -% 1469480 6226 454941 5738 6 0 192.168.32.7 CH - [2015-05-27 12:34:42.947429] "GET /EMail/tree.aspx?sNode-sharedTree=treeTrash HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi9hUqwxQzZrjFeGRQwAAAA8 TLSv1.2 ECDHE-RSA-AES128-SHA256 1016 9683 -% 1786138 5826 769290 4346 6 0 192.168.32.7 CH - [2015-05-27 12:34:48.116249] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9876 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi9hWKwxQzZrjFeGRQ4AAAAy TLSv1.2 ECDHE-RSA-AES128-SHA256 710 10431 -% 1461738 7926 448231 3237 6 0 192.168.32.7 CH - [2015-05-27 12:34:48.121415] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi9hWKwxQzZrjFeGRQ8AAAA4 TLSv1.2 ECDHE-RSA-AES128-SHA256 726 9506 -% 1920879 6397 904603 4135 6 0 192.168.32.7 CH - [2015-05-27 12:34:52.062899] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi9hXKwxQzZrjFeGRRAAAAAz TLSv1.2 ECDHE-RSA-AES128-SHA256 1014 389 -% 1579878 14682 562448 386 6 0 192.168.32.7 CH - [2015-05-27 12:34:53.652044] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7290 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi9hXawxQzZrjFeGRRIAAAAr TLSv1.2 ECDHE-RSA-AES128-SHA256 758 7770 -% 988078 8831 975670 2240 6 0 192.168.32.7 CH - [2015-05-27 12:34:54.096578] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi9hXqwxQzZrjFeGRRMAAAA5 TLSv1.2 ECDHE-RSA-AES128-SHA256 1014 389 -% 1441224 15967 422691 216 6 0 192.168.32.7 CH - [2015-05-27 12:34:55.546310] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7290 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi9hX6wxQzZrjFeGRRQAAAAT TLSv1.2 ECDHE-RSA-AES128-SHA256 758 7770 -% 1073842 9502 59974 2873 6 0 192.168.32.7 CH - [2015-05-27 12:34:56.008053] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi9hYKwxQzZrjFeGRRYAAAA1 TLSv1.2 ECDHE-RSA-AES128-SHA256 1304 566 -% 1422315 12085 407558 274 6 0 192.168.32.7 CH - [2015-05-27 12:34:57.439492] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7290 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi9hYawxQzZrjFeGRRcAAAAV TLSv1.2 ECDHE-RSA-AES128-SHA256 758 7770 -% 946053 9892 931944 2409 6 0 192.168.32.7 CH - [2015-05-27 12:34:58.522080] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7291 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi9hYqwxQzZrjFeGRRgAAAAH TLSv1.2 ECDHE-RSA-AES128-SHA256 710 7770 -% 1109195 9556 95815 2284 6 0 192.168.32.7 CH - [2015-05-27 12:34:58.552251] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9725d213.523100ed5b181" Vi9hYqwxQzZrjFeGRxQzZrjU TLSv1.2 ECDHE-RSA-AES128-SHA256 1016 9683 -% 1511407 6853 496034 2781 6 0 192.168.213.23 CH - [2015-05-27 12:52:14.448605] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7383 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9lbqwxQzZrjFeGRaAAAAAI TLSv1 ECDHE-RSA-AES256-SHA 784 11729 -% 859293 2855 853639 2197 0 0 192.168.213.23 CH - [2015-05-27 12:52:21.836302] "GET /EMail/images/active.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9ldawxQzZrjFeGRaIAAAAF TLSv1 ECDHE-RSA-AES256-SHA 984 4049 -% 934154 2293 931135 155 0 0 192.168.213.23 CH - [2015-05-27 12:52:22.510868] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9ldqwxQzZrjFeHO0kAAAB6 TLSv1 ECDHE-RSA-AES256-SHA 949 566 -% 903247 3445 898922 223 0 0 192.168.213.23 CH - [2015-05-27 12:52:23.437364] "GET /EMail/main.aspx HTTP/1.1" 200 3415 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9ld6wxQzZrjFeHO0oAAAB@ TLSv1 ECDHE-RSA-AES256-SHA 582 3834 -% 713833 2734 708422 1930 0 0 192.168.213.23 CH - [2015-05-27 12:52:24.336186] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9leKwxQzZrjFeHO0sAAAB9 TLSv1 ECDHE-RSA-AES256-SHA 550 4154 -% 982146 2211 966469 12862 0 0 192.168.213.23 CH - [2015-05-27 12:52:24.386823] "GET /EMail/overview.aspx HTTP/1.1" 200 6213 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9leKwxQzZrjFeGRaQAAAAh TLSv1 ECDHE-RSA-AES256-SHA 757 6795 -% 1326267 2391 320606 2834 0 0 192.168.213.23 CH - [2015-05-27 12:52:24.377671] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9leKwxQzZrjFeGRaMAAAAL TLSv1 ECDHE-RSA-AES256-SHA 773 9379 -% 2086746 2724 76118 2701 0 0 192.168.213.23 CH - [2015-05-27 12:52:25.836457] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9leawxQzZrjFeGRaUAAAA0 TLSv1 ECDHE-RSA-AES256-SHA 662 213 -% 909418 3139 905302 268 0 0 192.168.213.23 CH - [2015-05-27 12:52:28.083560] "GET /EMail/inbox.aspx HTTP/1.1" 200 50173 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9lfKwxQzZrjFeGRaYAAAAq TLSv1 ECDHE-RSA-AES256-SHA 550 50945 -% 2264797 2048 721181 19163 0 0 192.168.213.23 CH - [2015-05-27 12:52:30.486697] "GET /EMail/images/attach.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9lfqwxQzZrjFeGRagAAAAJ TLSv1 ECDHE-RSA-AES256-SHA 646 213 -% 775327 3627 770976 208 0 0 192.168.213.23 CH - [2015-05-27 12:52:30.490076] "GET /EMail/images/Highost.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9lfqwxQzZrjFeGRakAAAAR TLSv1 ECDHE-RSA-AES256-SHA 662 213 -% 899025 2963 895303 159 0 0 192.168.213.23 CH - [2015-05-27 12:52:34.333197] "GET /EMail/message.aspx?&mailId=3903_1&folderId=1001_9&mailPos=32 HTTP/1.1" 200 11331 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9lgqwxQzZrjFeGRaoAAAAl TLSv1 ECDHE-RSA-AES256-SHA 582 11844 -% 1325881 4812 296508 23334 0 0 192.168.213.23 CH - [2015-05-27 12:52:37.143385] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3903_1&folderId=1001_9&attachmentId=2&token=84391317665687718E17 HTTP/1.1" 200 55271 "https://www.example.com/EMail/message.aspx?&mailId=3903_1&folderId=1001_9&mailPos=32" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9lhawxQzZrjFeGRasAAAAe TLSv1 ECDHE-RSA-AES256-SHA 694 56990 -% 1084168 6411 55327 199 0 0 192.168.213.23 CH - [2015-05-27 12:52:46.391377] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9ljqwxQzZrjFeGRa0AAAAc TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1537999 3969 524111 4472 0 0 192.168.213.23 CH - [2015-05-27 12:53:26.342555] "GET /EMail/images/active.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9ltqwxQzZrjFeHO08AAAB7 TLSv1 ECDHE-RSA-AES256-SHA 952 4049 -% 954146 2057 951389 153 0 0 192.168.213.23 CH - [2015-05-27 12:53:31.343629] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3903_2&folderId=1001_9&attachmentId=2&token=48242057832278989E18 HTTP/1.1" 200 56102 "https://www.example.com/EMail/message.aspx?&mailId=3903_2&folderId=1001_9&mailPos=31" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9lu6wxQzZrjFeGRbUAAAAu TLSv1 ECDHE-RSA-AES256-SHA 984 61695 -% 1097468 4171 70314 249 0 0 192.168.213.23 CH - [2015-05-27 12:54:17.683134] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9l6awxQzZrjFeGRb0AAAAC TLSv1 ECDHE-RSA-AES256-SHA 773 9379 -% 1562368 2802 551638 3031 0 0 192.168.213.23 CH - [2015-05-27 12:54:21.597930] "GET /EMail/message.aspx?&mailId=3904_21&folderId=1001_9&mailPos=30 HTTP/1.1" 200 11490 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9l7awxQzZrjFeGRb8AAAA7 TLSv1 ECDHE-RSA-AES256-SHA 888 15840 -% 1352772 4999 327016 19728 0 0 192.168.213.23 CH - [2015-05-27 12:54:24.596300] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3904_21&folderId=1001_9&attachmentId=2&token=37868302228109932E18 HTTP/1.1" 200 56376 "https://www.example.com/EMail/message.aspx?&mailId=3904_21&folderId=1001_9&mailPos=30" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9l8KwxQzZrjFeHO1QAAABC TLSv1 ECDHE-RSA-AES256-SHA 984 61967 -% 1097596 6116 68386 233 0 0 192.168.213.23 CH - [2015-05-27 12:55:05.645211] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9mGawxQzZrjFeHO1gAAABD TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1610307 2683 595326 5733 0 0 192.168.213.23 CH - [2015-05-27 12:56:59.436475] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9mi6wxQzZrjFeHO1wAAABK TLSv1 ECDHE-RSA-AES256-SHA 773 9379 -% 1497666 3962 482984 5100 0 0 192.168.213.23 CH - [2015-05-27 12:56:59.491387] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 50142 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9mi6wxQzZrjFeGRdoAAAAI TLSv1 ECDHE-RSA-AES256-SHA 840 54749 -% 2061456 3339 578518 17519 0 0 192.168.213.23 CH - [2015-05-27 12:58:00.894271] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9myKwxQzZrjFeGReUAAAAX TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1634274 2500 622804 3790 0 0 192.168.213.23 CH - [2015-05-27 12:58:03.790351] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 50134 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9my6wxQzZrjFeGReYAAAAe TLSv1 ECDHE-RSA-AES256-SHA 840 54733 -% 2199768 2282 720325 19446 0 0 192.168.213.23 CH - [2015-05-27 12:58:12.496879] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3906_6&folderId=1001_9&attachmentId=2&token=36837699505723259E18 HTTP/1.1" 200 54630 "https://www.example.com/EMail/message.aspx?&mailId=3906_6&folderId=1001_9&mailPos=27" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9m1KwxQzZrjFeGRegAAAAj TLSv1 ECDHE-RSA-AES256-SHA 984 60112 -% 1007570 5364 979677 192 0 0 192.168.213.23 CH - [2015-05-27 12:58:55.261977] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 50125 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9m-6wxQzZrjFeGRe8AAAAp TLSv1 ECDHE-RSA-AES256-SHA 840 54733 -% 2069004 2347 591017 16460 0 0 192.168.213.23 CH - [2015-05-27 12:59:02.998119] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3907_2&folderId=1001_9&attachmentId=2&token=26233118646166252E18 HTTP/1.1" 200 57966 "https://www.example.com/EMail/message.aspx?&mailId=3907_2&folderId=1001_9&mailPos=26" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9nBqwxQzZrjFeHO2QAAABc TLSv1 ECDHE-RSA-AES256-SHA 984 63625 -% 1005976 4140 978462 173 0 0 192.168.213.23 CH - [2015-05-27 12:59:08.600238] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 50117 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9nDKwxQzZrjFeGRfEAAAA9 TLSv1 ECDHE-RSA-AES256-SHA 840 54717 -% 2071278 2256 594760 17775 0 0 192.168.213.23 CH - [2015-05-27 12:59:33.696359] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3906_7&folderId=1001_9&attachmentId=2&token=29820504244899292E18 HTTP/1.1" 200 53345 "https://www.example.com/EMail/message.aspx?&mailId=3906_7&folderId=1001_9&mailPos=25" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9nJawxQzZrjFeHO2oAAABf TLSv1 ECDHE-RSA-AES256-SHA 984 58832 -% 1090156 4344 64339 200 0 0 192.168.213.23 CH - [2015-05-27 12:59:57.902498] "GET /EMail/message.aspx?&mailId=3907_3&folderId=1001_9&mailPos=24 HTTP/1.1" 200 11480 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9nPawxQzZrjFeGRfcAAAAG TLSv1 ECDHE-RSA-AES256-SHA 888 15824 -% 2628967 3151 599773 24702 0 0 192.168.213.23 CH - [2015-05-27 13:00:02.452265] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3907_3&folderId=1001_9&attachmentId=2&token=19365612239499625E18 HTTP/1.1" 200 56355 "https://www.example.com/EMail/message.aspx?&mailId=3907_3&folderId=1001_9&mailPos=24" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9nQqwxQzZrjFeHO2wAAABg TLSv1 ECDHE-RSA-AES256-SHA 984 61935 -% 1239703 4324 213216 180 0 0 192.168.213.23 CH - [2015-05-27 13:00:32.798347] "GET /EMail/message.aspx?&mailId=3906_8&folderId=1001_9&mailPos=23 HTTP/1.1" 200 11480 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9nYKwxQzZrjFeGRf4AAAA5 TLSv1 ECDHE-RSA-AES256-SHA 888 15824 -% 1212970 4823 185640 21255 0 0 192.168.213.23 CH - [2015-05-27 13:00:35.552713] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3906_8&folderId=1001_9&attachmentId=2&token=30121950062996134E17 HTTP/1.1" 200 59861 "https://www.example.com/EMail/message.aspx?&mailId=3906_8&folderId=1001_9&mailPos=23" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9nY6wxQzZrjFeGRgAAAAAB TLSv1 ECDHE-RSA-AES256-SHA 984 65550 -% 1131171 4552 101872 172 0 0 192.168.213.23 CH - [2015-05-27 13:00:39.307480] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9nZ6wxQzZrjFeGRgEAAAAV TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1884123 3274 872681 3222 0 0 192.168.213.23 CH - [2015-05-27 13:01:08.396728] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 50084 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9nhKwxQzZrjFeGRggAAAAY TLSv1 ECDHE-RSA-AES256-SHA 840 54685 -% 2160528 5596 704258 16645 0 0 192.168.213.23 CH - [2015-05-27 13:01:31.503581] "GET /EMail/message.aspx?&mailId=3907_7&folderId=1001_9&mailPos=21 HTTP/1.1" 200 11487 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9nm6wxQzZrjFeGRg0AAAAP TLSv1 ECDHE-RSA-AES256-SHA 888 15824 -% 1231909 5050 205825 19866 0 0 192.168.213.23 CH - [2015-05-27 13:01:38.843597] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9noqwxQzZrjFeGRg8AAAAh TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1632731 3837 620894 3145 0 0 192.168.213.23 CH - [2015-05-27 13:01:38.844093] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 50076 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9noqwxQzZrjFeGRhAAAAAi TLSv1 ECDHE-RSA-AES256-SHA 840 54685 -% 2181226 3340 750301 14896 0 0 192.168.213.23 CH - [2015-05-27 13:02:00.999814] "GET /EMail/message.aspx?&mailId=3907_8&folderId=1001_9&mailPos=20 HTTP/1.1" 200 11480 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9nuKwxQzZrjFeGRhUAAAAl TLSv1 ECDHE-RSA-AES256-SHA 888 15824 -% 1266323 5287 229674 30139 0 0 192.168.213.23 CH - [2015-05-27 13:02:15.853060] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 50069 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9nx6wxQzZrjFeGRhgAAAAe TLSv1 ECDHE-RSA-AES256-SHA 840 54669 -% 2210950 2260 734443 22188 0 0 192.168.213.23 CH - [2015-05-27 13:02:48.500548] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9n6KwxQzZrjFeHO3QAAABk TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1563358 3543 550103 4660 0 0 192.168.213.23 CH - [2015-05-27 13:02:48.500163] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 50062 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9n6KwxQzZrjFeHO3MAAABs TLSv1 ECDHE-RSA-AES256-SHA 840 54669 -% 2305041 3582 824052 15054 0 0 192.168.213.23 CH - [2015-05-27 13:03:14.046693] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3907_9&folderId=1001_9&attachmentId=2&token=120055086840810035E18 HTTP/1.1" 200 58104 "https://www.example.com/EMail/message.aspx?&mailId=3907_9&folderId=1001_9&mailPos=18" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9oAqwxQzZrjFeGRiMAAAA3 TLSv1 ECDHE-RSA-AES256-SHA 984 63674 -% 1012732 4116 0 217 0 0 192.168.213.23 CH - [2015-05-27 13:03:18.646969] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9oBqwxQzZrjFeGRiYAAAAw TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1308382 2779 296064 4519 0 0 192.168.213.23 CH - [2015-05-27 13:04:17.801653] "GET /EMail/message.aspx?&mailId=3907_10&folderId=1001_9&mailPos=17 HTTP/1.1" 200 11491 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9oQawxQzZrjFeGRjEAAAAr TLSv1 ECDHE-RSA-AES256-SHA 888 15840 -% 1260028 3497 232850 22628 0 0 192.168.213.23 CH - [2015-05-27 13:04:21.152411] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3907_10&folderId=1001_9&attachmentId=2&token=31670175520438189E17 HTTP/1.1" 200 56337 "https://www.example.com/EMail/message.aspx?&mailId=3907_10&folderId=1001_9&mailPos=17" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9oRawxQzZrjFeGRjMAAAA5 TLSv1 ECDHE-RSA-AES256-SHA 984 61824 -% 1071872 4461 40753 205 0 0 192.168.213.23 CH - [2015-05-27 13:04:25.783692] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9oSawxQzZrjFeGRjQAAAAB TLSv1 ECDHE-RSA-AES256-SHA 848 13065 -% 1820422 2463 810708 2874 0 0 192.168.213.23 CH - [2015-05-27 13:04:49.848590] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3906_14&folderId=1001_9&attachmentId=2&token=45427360655492675E18 HTTP/1.1" 200 55130 "https://www.example.com/EMail/message.aspx?&mailId=3906_14&folderId=1001_9&mailPos=16" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9oYawxQzZrjFeHO3gAAABz TLSv1 ECDHE-RSA-AES256-SHA 984 60682 -% 1075709 4925 47629 619 0 0 192.168.213.23 CH - [2015-05-27 13:04:54.150557] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9oZqwxQzZrjFeHO3kAAABr TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1936294 4512 922740 3692 0 0 192.168.213.23 CH - [2015-05-27 13:05:15.655858] "GET /EMail/message.aspx?&mailId=3906_15&folderId=1001_9&mailPos=15 HTTP/1.1" 200 11496 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9oe6wxQzZrjFeGRj4AAAAZ TLSv1 ECDHE-RSA-AES256-SHA 888 15803 -% 1480928 4944 444728 30233 0 0 192.168.213.23 CH - [2015-05-27 13:05:23.106685] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9og6wxQzZrjFeGxQzZrjAO TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1659280 4351 647109 2899 0 0 192.168.213.23 CH - [2015-05-27 13:05:59.104371] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3907_11&folderId=1001_9&attachmentId=2&token=226261418016821568E17 HTTP/1.1" 200 59056 "https://www.example.com/EMail/message.aspx?&mailId=3907_11&folderId=1001_9&mailPos=14" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9op6wxQzZrjFeGxQzZrjAc TLSv1 ECDHE-RSA-AES256-SHA 984 64713 -% 1193343 5891 162806 186 0 0 192.168.213.23 CH - [2015-05-27 13:06:08.007223] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 50021 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9osKwxQzZrjFeGRlEAAAAj TLSv1 ECDHE-RSA-AES256-SHA 840 54621 -% 2222662 2256 755846 19141 0 0 192.168.213.23 CH - [2015-05-27 13:06:30.551552] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3907_12&folderId=1001_9&attachmentId=2&token=113597412874226611E18 HTTP/1.1" 200 54694 "https://www.example.com/EMail/message.aspx?&mailId=3907_12&folderId=1001_9&mailPos=13" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9oxqwxQzZrjFeGRlYAAAAu TLSv1 ECDHE-RSA-AES256-SHA 984 60176 -% 978250 4020 951891 215 0 0 192.168.213.23 CH - [2015-05-27 13:06:37.561336] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9ozawxQzZrjFeGRlcAAAAp TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1889841 3910 878264 2836 0 0 192.168.213.23 CH - [2015-05-27 13:07:04.210192] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3908_1&folderId=1001_9&attachmentId=2&token=38234561347412531E18 HTTP/1.1" 200 57144 "https://www.example.com/EMail/message.aspx?&mailId=3908_1&folderId=1001_9&mailPos=12" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9o6KwxQzZrjFeGRloAAAAk TLSv1 ECDHE-RSA-AES256-SHA 984 62735 -% 1080401 5757 51890 244 0 0 192.168.213.23 CH - [2015-05-27 13:07:07.999909] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9o66wxQzZrjFeGRlsAAAAC TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1900527 3664 886490 4946 0 0 192.168.213.23 CH - [2015-05-27 13:07:08.002659] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 50005 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9o7KwxQzZrjFeGRlwAAAAw TLSv1 ECDHE-RSA-AES256-SHA 840 54605 -% 2255492 2312 901174 20404 0 0 192.168.213.23 CH - [2015-05-27 13:07:47.562322] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 49997 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9pE6wxQzZrjFeGRmUAAAAE TLSv1 ECDHE-RSA-AES256-SHA 840 54605 -% 2201081 2418 747177 15446 0 0 192.168.213.23 CH - [2015-05-27 13:08:18.667210] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3907_18&folderId=1001_9&attachmentId=2&token=42511215284224169E18 HTTP/1.1" 200 56610 "https://www.example.com/EMail/message.aspx?&mailId=3907_18&folderId=1001_9&mailPos=10" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9pMqwxQzZrjFeGRmwAAAAH TLSv1 ECDHE-RSA-AES256-SHA 984 62191 -% 1068434 3919 41325 188 0 0 192.168.213.23 CH - [2015-05-27 13:08:23.258425] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9pN6wxQzZrjFeGRm4AAAAD TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1723774 2788 711325 4460 0 0 192.168.213.23 CH - [2015-05-27 13:09:03.264703] "GET /EMail/message.aspx?&mailId=3909_3&folderId=1001_9&mailPos=9 HTTP/1.1" 200 11485 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9pX6wxQzZrjFeGRnUAAAAO TLSv1 ECDHE-RSA-AES256-SHA 888 15824 -% 1278546 3109 250346 24205 0 0 192.168.213.23 CH - [2015-05-27 13:09:06.109760] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3909_3&folderId=1001_9&attachmentId=2&token=106111618479510118E18 HTTP/1.1" 200 53655 "https://www.example.com/EMail/message.aspx?&mailId=3909_3&folderId=1001_9&mailPos=9" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9pYqwxQzZrjFeGRncAAAAI TLSv1 ECDHE-RSA-AES256-SHA 984 59136 -% 1443821 4049 418431 165 0 0 192.168.213.23 CH - [2015-05-27 13:09:36.604072] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3909_4&folderId=1001_9&attachmentId=2&token=36669697241628211E18 HTTP/1.1" 200 55059 "https://www.example.com/EMail/message.aspx?&mailId=3909_4&folderId=1001_9&mailPos=8" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9pgKwxQzZrjFeGRn4AAAAJ TLSv1 ECDHE-RSA-AES256-SHA 984 60544 -% 1169693 5279 153793 203 0 0 192.168.213.23 CH - [2015-05-27 13:09:40.957127] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9phKwxQzZrjFeGRoAAAAAX TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1787845 2420 776681 3892 0 0 192.168.213.23 CH - [2015-05-27 13:10:03.662750] "GET /EMail/message.aspx?&mailId=3910_1&folderId=1001_9&mailPos=7 HTTP/1.1" 200 11478 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9pm6wxQzZrjFeGRoQAAAAj TLSv1 ECDHE-RSA-AES256-SHA 888 15824 -% 1213175 3324 187705 21354 0 0 192.168.213.23 CH - [2015-05-27 13:10:11.161172] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9po6wxQzZrjFeHO4kAAABM TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1695127 4066 682947 2977 0 0 192.168.213.23 CH - [2015-05-27 13:10:46.960622] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3910_2&folderId=1001_9&attachmentId=2&token=76570429632540736E16 HTTP/1.1" 200 57644 "https://www.example.com/EMail/message.aspx?&mailId=3910_2&folderId=1001_9&mailPos=6" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9pxqwxQzZrjFeGRooAAAA@ TLSv1 ECDHE-RSA-AES256-SHA 984 63305 -% 1097995 3910 70842 242 0 0 192.168.213.23 CH - [2015-05-27 13:10:53.861415] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9pzawxQzZrjFeGRowAAAA3 TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1674161 2653 662096 4499 0 0 192.168.213.23 CH - [2015-05-27 13:10:53.861519] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 49957 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9pzawxQzZrjFeGRo0AAAA9 TLSv1 ECDHE-RSA-AES256-SHA 840 54557 -% 1921458 3098 467691 22204 0 0 192.168.213.23 CH - [2015-05-27 13:11:35.760344] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3909_8&folderId=1001_9&attachmentId=2&token=4531692522608672E17 HTTP/1.1" 200 53779 "https://www.example.com/EMail/message.aspx?&mailId=3909_8&folderId=1001_9&mailPos=5" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9p96wxQzZrjFeGRpUAAAA2 TLSv1 ECDHE-RSA-AES256-SHA 984 59264 -% 1008794 4136 983295 164 0 0 192.168.213.23 CH - [2015-05-27 13:12:11.360071] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3910_3&folderId=1001_9&attachmentId=2&token=31324798230834903E18 HTTP/1.1" 200 54566 "https://www.example.com/EMail/message.aspx?&mailId=3910_3&folderId=1001_9&mailPos=4" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9qG6wxQzZrjFeGRpwAAAA5 TLSv1 ECDHE-RSA-AES256-SHA 984 60048 -% 1135910 4033 110039 162 0 0 192.168.213.23 CH - [2015-05-27 13:12:41.507120] "GET /EMail/message.aspx?&mailId=3909_9&folderId=1001_9&mailPos=3 HTTP/1.1" 200 11478 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9qOawxQzZrjFeGRqEAAAAH TLSv1 ECDHE-RSA-AES256-SHA 888 15824 -% 1348132 3207 324122 19672 0 0 192.168.213.23 CH - [2015-05-27 13:12:44.511451] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3909_9&folderId=1001_9&attachmentId=2&token=29020849643415885E18 HTTP/1.1" 200 54177 "https://www.example.com/EMail/message.aspx?&mailId=3909_9&folderId=1001_9&mailPos=3" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9qPKwxQzZrjFeHO5EAAABK TLSv1 ECDHE-RSA-AES256-SHA 984 59738 -% 1143366 5445 115460 203 0 0 192.168.213.23 CH - [2015-05-27 13:12:55.412502] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9qR6wxQzZrjFeHO5MAAABT TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1624615 3494 612944 3206 0 0 192.168.213.23 CH - [2015-05-27 13:12:55.411481] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 49933 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9qR6wxQzZrjFeGRqMAAAAD TLSv1 ECDHE-RSA-AES256-SHA 840 54541 -% 1902558 2335 587261 17813 0 0 192.168.213.23 CH - [2015-05-27 13:13:26.606925] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3910_4&folderId=1001_9&attachmentId=2&token=207799574509364378E18 HTTP/1.1" 200 55872 "https://www.example.com/EMail/message.aspx?&mailId=3910_4&folderId=1001_9&mailPos=2" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9qZqwxQzZrjFeGRqgAAAAN TLSv1 ECDHE-RSA-AES256-SHA 984 61455 -% 1077179 4173 50267 244 0 0 192.168.213.23 CH - [2015-05-27 13:13:33.359439] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9qbawxQzZrjFeGRqoAAAAP TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1408471 4006 396331 3398 0 0 192.168.213.23 CH - [2015-05-27 13:14:28.060768] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9qpKwxQzZrjFeGRrEAAAAq TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1442520 4136 428480 4534 0 0 192.168.213.23 CH - [2015-05-27 13:15:08.561454] "GET /EMail/message.aspx?&mailId=3910_6&folderId=1001_9&mailPos=0 HTTP/1.1" 200 11348 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9qzKwxQzZrjFeGRroAAAAm TLSv1 ECDHE-RSA-AES256-SHA 888 15696 -% 1164972 3031 139761 21308 0 0 192.168.213.23 CH - [2015-05-27 13:15:16.718699] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 49910 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9q1KwxQzZrjFeGRr0AAAA@ TLSv1 ECDHE-RSA-AES256-SHA 840 54509 -% 2165731 2348 721036 15456 0 0 192.168.213.23 CH - [2015-05-27 13:16:18.768626] "GET /EMail/moveToFolder.aspx?folderName=Inbox&mailId=3910_6&mailId=3909_10&mailId=3910_4&mailId=3909_9&mailId=3910_3&mailId=3909_8&mailId=3910_2&mailId=3910_1&mailId=3909_4&mailId=3909_3&mailId=3907_18&mailId=3907_13&mailId=3908_1&mailId=3907_12&mailId=3907_11&mailId=3906_15&mailId=3906_14&mailId=3907_10&mailId=3907_9&mailId=3906_13&mailId=3907_8&mailId=3907_7&mailId=3906_10&mailId=3906_8&mailId=3907_3&mailId=3906_7&mailId=3907_2&mailId=3906_6&mailId=3906_3&mailId=3904_22&mailId=3904_21&mailId=3903_2&mailId=3903_1 HTTP/1.1" 200 6424 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9rEqwxQzZrjFeGRsYAAAAw TLSv1 ECDHE-RSA-AES256-SHA 1288 10694 -% 1537461 12239 521533 3045 0 0 192.168.213.23 CH - [2015-05-27 13:16:25.268166] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/moveToFolder.aspx?folderName=Inbox&mailId=3910_6&mailId=3909_10&mailId=3910_4&mailId=3909_9&mailId=3910_3&mailId=3909_8&mailId=3910_2&mailId=3910_1&mailId=3909_4&mailId=3909_3&mailId=3907_18&mailId=3907_13&mailId=3908_1&mailId=3907_12&mailId=3907_11&mailId=3906_15&mailId=3906_14&mailId=3907_10&mailId=3907_9&mailId=3906_13&mailId=3907_8&mailId=3907_7&mailId=3906_10&mailId=3906_8&mailId=3907_3&mailId=3906_7&mailId=3907_2&mailId=3906_6&mailId=3906_3&mailId=3904_22&mailId=3904_21&mailId=3903_2&mailId=3903_1" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9rGawxQzZrjFeGRsgAAAA8 TLSv1 ECDHE-RSA-AES256-SHA 2114 4177 -% 2983190 16555 918679 252 0 0 192.168.213.23 CH - [2015-05-27 13:16:29.508464] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7290 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9rHawxQzZrjFeGRskAAAAy TLSv1 ECDHE-RSA-AES256-SHA 840 11558 -% 943181 2226 938040 2381 0 0 192.168.213.23 CH - [2015-05-27 13:16:30.860253] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9rHqwxQzZrjFeGRswAAAAz TLSv1 ECDHE-RSA-AES256-SHA 928 4044 -% 699322 1737 696963 207 0 0 192.168.213.23 CH - [2015-05-27 13:16:30.847137] "GET /EMail/images/Highost.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9rHqwxQzZrjFeGRssAAAAr TLSv1 ECDHE-RSA-AES256-SHA 944 4044 -% 774464 1842 771950 191 0 0 192.168.213.23 CH - [2015-05-27 13:16:30.842412] "GET /EMail/images/attach.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9rHqwxQzZrjFeHO6IAAABn TLSv1 ECDHE-RSA-AES256-SHA 944 4044 -% 806477 2442 803402 132 0 0 192.168.213.23 CH - [2015-05-27 13:16:30.864449] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9rHqwxQzZrjFeGRs0AAAAK TLSv1 ECDHE-RSA-AES256-SHA 896 4044 -% 984585 1796 982082 217 0 0 192.168.213.23 CH - [2015-05-27 13:16:30.857084] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9rHqwxQzZrjFeHO6MAAABg TLSv1 ECDHE-RSA-AES256-SHA 896 4044 -% 1039008 1791 36632 165 0 0 192.168.213.23 CH - [2015-05-27 13:16:32.870144] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7290 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9rIKwxQzZrjFeHO6QAAABj TLSv1 ECDHE-RSA-AES256-SHA 550 7722 -% 1260840 2395 254187 3621 0 0 192.168.213.23 CH - [2015-05-27 13:16:32.872450] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9rIKwxQzZrjFeGRs4AAAAa TLSv1 ECDHE-RSA-AES256-SHA 566 9234 -% 1656533 2778 644348 4600 0 0 192.168.213.23 CH - [2015-05-27 13:16:36.126681] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9rJKwxQzZrjFeGRs8AAAA5 TLSv1 ECDHE-RSA-AES256-SHA 566 421 -% 1031948 3595 27555 170 0 0 192.168.213.23 CH - [2015-05-27 13:16:37.188425] "GET /EMail/index.html HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9rJawxQzZrjFeGRtAAAAAT TLSv1 ECDHE-RSA-AES256-SHA 630 213 -% 965555 4319 959963 260 0 0 192.168.213.23 CH - [2015-05-27 13:16:38.303272] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9rJqwxQzZrjFeGRtEAAAAB TLSv1 ECDHE-RSA-AES256-SHA 518 325 -% 804487 3462 799898 219 0 0 192.168.213.23 CH - [2015-05-27 13:16:39.125813] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9rJ6wxQzZrjFeGRtIAAAA1 TLSv1 ECDHE-RSA-AES256-SHA 486 7786 -% 924460 2518 919227 2172 0 0 192.168.213.23 CH - [2015-05-27 13:16:41.561075] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9rKawxQzZrjFeGRtQAAAAU TLSv1 ECDHE-RSA-AES256-SHA 952 4049 -% 841075 2903 837228 155 0 0 192.168.212.2 CH - [2015-05-27 13:22:22.003913] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7383 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9sfqwxQzZrjFeHO8AAAAB7 TLSv1 ECDHE-RSA-AES256-SHA 816 11649 -% 942191 4314 933427 3662 0 0 192.168.212.2 CH - [2015-05-27 13:22:34.566585] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9siqwxQzZrjFeHO8IAAABE TLSv1 ECDHE-RSA-AES256-SHA 1032 4257 -% 988023 5378 981328 409 0 0 192.168.212.2 CH - [2015-05-27 13:22:36.846553] "GET /EMail/overview.aspx HTTP/1.1" 200 6208 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9sjKwxQzZrjFeHO8QAAABC TLSv1 ECDHE-RSA-AES256-SHA 757 6795 -% 1425976 1803 421355 2045 0 0 192.168.212.2 CH - [2015-05-27 13:22:36.841102] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9sjKwxQzZrjFeGRwMAAAA8 TLSv1 ECDHE-RSA-AES256-SHA 773 9379 -% 2159906 2777 149657 2772 0 0 192.168.212.2 CH - [2015-05-27 13:22:54.269518] "GET /EMail/newMessage.aspx?msg=new HTTP/1.1" 200 12054 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9snqwxQzZrjFeGRwQAAAA2 TLSv1 ECDHE-RSA-AES256-SHA 840 16400 -% 1058946 4011 14618 37427 3 3 192.168.212.2 CH - [2015-05-27 13:22:55.621441] "GET /EMail/scripts/tinymce/tinymce.min.js HTTP/1.1" 200 102824 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9sn6wxQzZrjFeHO8gAAABI TLSv1 ECDHE-RSA-AES256-SHA 856 110154 34% 956075 3083 919645 162 0 0 192.168.212.2 CH - [2015-05-27 13:22:56.868476] "GET /EMail/scripts/tinymce/plugins/image/plugin.min.js HTTP/1.1" 200 2136 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9soKwxQzZrjFeHO8sAAABL TLSv1 ECDHE-RSA-AES256-SHA 789 2821 42% 745622 2132 742405 152 0 0 192.168.212.2 CH - [2015-05-27 13:22:56.858732] "GET /EMail/scripts/tinymce/plugins/textcolor/plugin.min.js HTTP/1.1" 200 1647 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9soKwxQzZrjFeHO8oAAABR TLSv1 ECDHE-RSA-AES256-SHA 789 2304 44% 762599 1885 759687 152 0 0 192.168.212.2 CH - [2015-05-27 13:22:56.872976] "GET /EMail/scripts/tinymce/plugins/table/plugin.min.js HTTP/1.1" 200 9166 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9soKwxQzZrjFeGRwYAAAAE TLSv1 ECDHE-RSA-AES256-SHA 789 9898 32% 1002524 3304 995701 200 0 0 192.168.212.2 CH - [2015-05-27 13:22:56.833900] "GET /EMail/scripts/tinymce/plugins/fullpage/plugin.min.js HTTP/1.1" 200 2325 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9soKwxQzZrjFeHO8kAAABQ TLSv1 ECDHE-RSA-AES256-SHA 789 3013 36% 1045089 3249 40494 165 0 0 192.168.212.2 CH - [2015-05-27 13:22:58.376834] "GET /EMail/scripts/tinymce/skins/lightgray/content.min.css HTTP/1.1" 200 588 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9soqwxQzZrjFeGRwgAAAAK TLSv1 ECDHE-RSA-AES256-SHA 856 4923 38% 879925 3449 875387 158 0 0 192.168.212.2 CH - [2015-05-27 13:22:58.372601] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5472 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9soqwxQzZrjFeGRwcAAAAr TLSv1 ECDHE-RSA-AES256-SHA 840 11150 -% 943173 3496 0 0 0 0 192.168.212.2 CH - [2015-05-27 13:22:59.586751] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce-small.eot? HTTP/1.1" 200 10316 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9so6wxQzZrjFeGRwkAAAAT TLSv1 ECDHE-RSA-AES256-SHA 888 14656 -% 573098 1981 570149 177 0 0 192.168.212.2 CH - [2015-05-27 13:27:26.085920] "GET /EMail/attachost.aspx HTTP/1.1" 200 4989 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9trqwxQzZrjFeGRyoAAAAs TLSv1 ECDHE-RSA-AES256-SHA 784 9249 -% 891896 3141 886448 1627 0 0 192.168.212.2 CH - [2015-05-27 13:27:45.782191] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/attachost.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9twawxQzZrjFeGRywAAAAm TLSv1 ECDHE-RSA-AES256-SHA 15351 4177 -% 1261529 5069 202870 267 0 0 192.168.212.2 CH - [2015-05-27 13:27:47.178500] "GET /EMail/attachost.aspx HTTP/1.1" 200 6473 "https://www.example.com/EMail/attachments.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9tw6wxQzZrjFeGRy0AAAAu TLSv1 ECDHE-RSA-AES256-SHA 840 10726 -% 934325 2399 928990 2125 0 0 192.168.212.2 CH - [2015-05-27 13:28:24.381268] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc= HTTP/1.1" 200 3928 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9t6KwxQzZrjFeHO@kAAABp TLSv1 ECDHE-RSA-AES256-SHA 920 8198 -% 943037 4078 927559 10748 0 0 192.168.212.2 CH - [2015-05-27 13:28:39.443167] "GET /EMail/tree.aspx?sNode-sharedTree=treeSent HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9t96wxQzZrjFeHO@0AAAB3 TLSv1 ECDHE-RSA-AES256-SHA 773 9363 -% 1721934 3959 707479 5055 0 0 192.168.96.45 CH - [2015-05-27 13:28:49.937887] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7366 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9uAawxQzZrjFeGRzUAAAAt TLSv1 AES256-SHA 981 11369 -% 942743 2531 937236 2364 0 0 192.168.96.45 CH - [2015-05-27 13:28:54.401972] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9uBqwxQzZrjFeGRzYAAAA7 TLSv1 AES256-SHA 630 421 -% 1015780 3788 11008 308 0 0 192.168.96.45 CH - [2015-05-27 13:28:55.439224] "GET /EMail/main.aspx HTTP/1.1" 200 3398 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9uB6wxQzZrjFeGRzcAAAAw TLSv1 AES256-SHA 614 3818 -% 910074 3112 904141 2057 0 0 192.168.96.45 CH - [2015-05-27 13:28:56.435052] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9uCKwxQzZrjFeGRzgAAAAG TLSv1 AES256-SHA 582 4154 -% 1117910 3326 102667 11116 0 0 192.168.96.45 CH - [2015-05-27 13:28:56.826274] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9uCKwxQzZrjFeGRzsAAAA2 TLSv1 AES256-SHA 1013 9225 -% 1219188 1866 215016 1798 0 0 192.168.96.45 CH - [2015-05-27 13:28:56.825190] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9uCKwxQzZrjFeGRzoAAAAy TLSv1 AES256-SHA 1029 12721 -% 2148043 2614 136803 3925 0 0 192.168.96.45 CH - [2015-05-27 13:29:00.963283] "GET /EMail/inbox.aspx HTTP/1.1" 200 7290 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9uDKwxQzZrjFeGRz0AAAAK TLSv1 AES256-SHA 598 7722 -% 1073912 2394 68423 2532 0 0 192.168.96.45 CH - [2015-05-27 13:29:04.425713] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9uEKwxQzZrjFeGRz4AAAAa TLSv1 AES256-SHA 614 421 -% 982537 2567 978810 283 0 0 192.168.96.45 CH - [2015-05-27 13:29:05.488192] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9uEawxQzZrjFeGRz8AAAAr TLSv1 AES256-SHA 550 325 -% 714312 2392 711228 153 0 0 192.168.96.45 CH - [2015-05-27 13:29:06.242202] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "30e8d78f.5231353c45419" Vi9uEqwxQzZrjFeGR0AAAAA5 TLSv1 AES256-SHA 534 7786 -% 898664 3085 892561 2407 0 0 192.168.186.76 CH - [2015-05-27 13:29:11.538296] "GET /EMail/overview.aspx HTTP/1.1" 200 5536 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi9uF6wxQzZrjFeGR0IAAAAB TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 10134 -% 4037294 4420 27675 3178 3 0 192.168.186.76 CH - [2015-05-27 13:30:13.353222] "GET /EMail/newMessage.aspx?action=reply&mailId=3911_1&folderId=947_65&showPics=false HTTP/1.1" 200 22858 "https://www.example.com/EMail/message.aspx?&mailId=3911_1&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi9uVawxQzZrjFeGR00AAAAN TLSv1.2 ECDHE-RSA-AES256-SHA384 1292 23855 -% 1149407 6723 86316 42789 6 3 192.168.186.76 CH - [2015-05-27 13:30:14.579554] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3911_1&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi9uVqwxQzZrjFeGR04AAAAS TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 951574 4787 939647 5544 3 0 192.168.186.76 CH - [2015-05-27 13:30:28.786697] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3911_1&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi9uZKwxQzZrjFeHO-UAAABB TLSv1.2 ECDHE-RSA-AES256-SHA384 8018 4545 -% 1681589 344788 316758 173 86 0 192.168.186.76 CH - [2015-05-27 13:30:30.480099] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3911_1&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi9uZqwxQzZrjFeHO-YAAABx TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 895110 9010 875711 8801 3 0 192.168.186.76 CH - [2015-05-27 13:30:31.990838] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9487 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi9uZ6wxQzZrjFeHO-cAAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 662 10079 -% 1398389 9719 381317 4938 3 0 192.168.186.76 CH - [2015-05-27 13:30:31.992158] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi9uZ6wxQzZrjFeGR1EAAAAP TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1529497 6810 511189 5264 3 0 192.168.186.76 CH - [2015-05-27 13:30:35.513090] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi9ua6wxQzZrjFeGR1IAAAAF TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1104993 9293 93389 220 3 0 192.168.186.76 CH - [2015-05-27 13:30:36.630592] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8390 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi9ubKwxQzZrjFeGR1MAAAAh TLSv1.2 ECDHE-RSA-AES256-SHA384 726 8991 -% 1154791 8769 141510 2850 3 0 192.168.186.76 CH - [2015-05-27 13:30:38.638244] "GET /EMail/message.aspx?&mailId=3910_7&folderId=947_65&mailPos=0 HTTP/1.1" 200 15551 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi9ubqwxQzZrjFeGR1UAAAA0 TLSv1.2 ECDHE-RSA-AES256-SHA384 726 16228 -% 2233071 8081 194473 28252 3 0 192.168.186.76 CH - [2015-05-27 13:30:45.494433] "GET /EMail/newMessage.aspx?action=reply&mailId=3910_7&folderId=947_65&showPics=false HTTP/1.1" 200 22653 "https://www.example.com/EMail/message.aspx?&mailId=3910_7&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi9udawxQzZrjFeGR1cAAAAb TLSv1.2 ECDHE-RSA-AES256-SHA384 774 23486 -% 1185248 8002 129836 43665 6 3 192.168.186.76 CH - [2015-05-27 13:30:46.758384] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3910_7&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi9udqwxQzZrjFeGR1gAAAAq TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 1023099 3999 7590 9762 3 0 192.168.32.7 CH - [2015-05-27 13:39:27.972001] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7375 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ba24d3ae.523155e5cb2a1" Vi9wf6wxQzZrjFeHPCEAAABv TLSv1.2 ECDHE-RSA-AES128-SHA256 691 11891 -% 28346250 1995 339753 3629 0 0 192.168.212.2 CH - [2015-05-27 13:40:22.900158] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7290 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9wtqwxQzZrjFeGR6QAAAAm TLSv1 ECDHE-RSA-AES256-SHA 832 11553 -% 7465720 2291 459352 3309 0 0 192.168.212.2 CH - [2015-05-27 13:40:22.901341] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9wtqwxQzZrjFeGR6UAAAAf TLSv1 ECDHE-RSA-AES256-SHA 848 13065 -% 24260766 3829 249281 2982 0 0 192.168.212.2 CH - [2015-05-27 13:40:30.377523] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7291 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9wvqwxQzZrjFeGR6gAAAAo TLSv1 ECDHE-RSA-AES256-SHA 757 7867 -% 19753834 4214 745253 3727 0 0 192.168.212.2 CH - [2015-05-27 13:40:34.915849] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7290 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9wwqwxQzZrjFeGR6kAAAA3 TLSv1 ECDHE-RSA-AES256-SHA 757 7867 -% 15294736 2188 288001 3833 0 0 192.168.212.2 CH - [2015-05-27 13:40:42.090675] "GET /EMail/draftsExternal.aspx?dir=desc HTTP/1.1" 200 7262 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9wyqwxQzZrjFeHPCYAAAB3 TLSv1 ECDHE-RSA-AES256-SHA 773 7851 -% 8311723 3627 303294 4020 0 0 192.168.212.2 CH - [2015-05-27 13:40:42.098968] "GET /EMail/tree.aspx?sNode-sharedTree=treeDrafts HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9wyqwxQzZrjFeGR6wAAAA7 TLSv1 ECDHE-RSA-AES256-SHA 773 9379 -% 13340238 2166 329385 3879 0 0 192.168.212.2 CH - [2015-05-27 13:40:50.219772] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7289 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9w0qwxQzZrjFeGR7QAAAAw TLSv1 ECDHE-RSA-AES256-SHA 757 7867 -% 16290036 2168 283424 3807 0 0 192.168.212.2 CH - [2015-05-27 13:40:50.219227] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7290 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9w0qwxQzZrjFeGR7MAAAAt TLSv1 ECDHE-RSA-AES256-SHA 757 7867 -% 22003248 2541 995856 3832 0 0 192.168.212.2 CH - [2015-05-27 13:40:47.169400] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9wz6wxQzZrjFeGR68AAAAC TLSv1 ECDHE-RSA-AES256-SHA 773 9379 -% 25307245 2753 296154 3210 0 0 192.168.212.2 CH - [2015-05-27 13:40:51.645146] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9w06wxQzZrjFeGR7UAAAAE TLSv1 ECDHE-RSA-AES256-SHA 773 566 -% 20845005 3678 840588 128 0 0 192.168.212.2 CH - [2015-05-27 13:40:47.169205] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 500 4528 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - - "78061c89.52312785302af" Vi9wz6wxQzZrjFeGR60AAAAu TLSv1 ECDHE-RSA-AES256-SHA 773 5135 -% 25347528 3833 0 0 0 0 192.168.212.2 CH - [2015-05-27 13:40:47.169214] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 500 4528 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - - "78061c89.52312785302af" Vi9wz6wxQzZrjFeGR64AAAAk TLSv1 ECDHE-RSA-AES256-SHA 773 5135 -% 25445252 2874 0 0 0 0 192.168.212.2 CH - [2015-05-27 13:40:47.170008] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 500 4528 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - - "78061c89.52312785302af" Vi9wz6wxQzZrjFeGR7AAAAAM TLSv1 ECDHE-RSA-AES256-SHA 773 5135 -% 34807617 3897 0 0 0 0 192.168.212.2 CH - [2015-05-27 13:40:59.471700] "GET /EMail/overview.aspx HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9w26wxQzZrjFeGR7kAAAA5 TLSv1 ECDHE-RSA-AES256-SHA 757 8011 -% 28465481 1959 459266 3614 0 0 192.168.212.2 CH - [2015-05-27 13:41:12.611773] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9w6KwxQzZrjFeGR7sAAAAD TLSv1 ECDHE-RSA-AES256-SHA 518 325 -% 15364549 3890 359622 117 0 0 192.168.212.2 CH - [2015-05-27 13:40:59.471531] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9w26wxQzZrjFeGR7gAAAAT TLSv1 ECDHE-RSA-AES256-SHA 773 8011 -% 29032420 2394 27237 2172 0 0 192.168.212.2 CH - [2015-05-27 13:41:27.994452] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9w96wxQzZrjFeGR70AAAAY TLSv1 ECDHE-RSA-AES256-SHA 486 7786 -% 33857314 2034 852290 2359 0 0 192.168.212.2 CH - [2015-05-27 13:41:28.595791] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "78061c89.52312785302af" Vi9w@KwxQzZrjFeGR78AAAAZ TLSv1 ECDHE-RSA-AES256-SHA 856 11702 -% 33403500 2497 395924 3718 0 0 192.168.146.78 CH - [2015-05-27 13:55:41.780447] "GET /EMail/main.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3db55bc4.52314ac567df7" Vi90TawxQzZrjFeHPGoAAAB8 TLSv1.2 ECDHE-RSA-AES128-SHA256 703 11795 -% 27802812 1937 796338 3657 0 0 192.168.146.78 CH - [2015-05-27 13:56:24.598450] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3db55bc4.52314ac567df7" Vi90eKwxQzZrjFeGSDMAAAAU TLSv1.2 ECDHE-RSA-AES128-SHA256 916 662 -% 40318860 3611 314283 272 0 0 192.168.146.78 CH - [2015-05-27 13:56:42.134209] "POST /EMail/MailHandler HTTP/1.1" 502 4087 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3db55bc4.52314ac567df7" Vi90iqwxQzZrjFeHPG8AAABE TLSv1.2 ECDHE-RSA-AES128-SHA256 916 5097 -% 30034821 3460 0 0 0 0 192.168.146.78 CH - [2015-05-27 13:56:44.038922] "POST /EMail/MailHandler HTTP/1.1" 502 4087 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3db55bc4.52314ac567df7" Vi90jKwxQzZrjFeGSDcAAAAT TLSv1.2 ECDHE-RSA-AES128-SHA256 916 5097 -% 30034974 3366 0 0 0 0 192.168.146.78 CH - [2015-05-27 13:57:14.089416] "GET /errordocuments/logo_d.png HTTP/1.1" 200 7515 "https://www.example.com/EMail/MailHandler" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "3db55bc4.52314ac567df7" Vi90qqwxQzZrjFeGSD4AAAAZ TLSv1.2 ECDHE-RSA-AES128-SHA256 454 7978 -% 3718 2213 55 159 0 0 192.168.146.78 CH - [2015-05-27 13:57:19.853581] "GET /EMail/main.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3db55bc4.52314ac567df7" Vi90r6wxQzZrjFeGSD8AAAAh TLSv1.2 ECDHE-RSA-AES128-SHA256 708 8107 -% 37259326 3134 249633 5436 0 0 192.168.146.78 CH - [2015-05-27 13:57:32.253314] "GET /EMail/main.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3db55bc4.52314ac567df7" Vi90vKwxQzZrjFeGSEMAAAAb TLSv1.2 ECDHE-RSA-AES128-SHA256 708 8107 -% 30654089 2289 648947 2221 0 0 192.168.146.78 CH - [2015-05-27 13:58:35.287654] "POST /EMail/MailHandler HTTP/1.1" 502 4087 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3db55bc4.52314ac567df7" Vi90@6wxQzZrjFeGSE8AAAAp TLSv1.2 ECDHE-RSA-AES128-SHA256 916 5097 -% 30038360 5540 0 0 0 0 192.168.146.78 CH - [2015-05-27 14:01:11.965043] "POST /EMail/MailHandler HTTP/1.1" 502 4087 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3db55bc4.52314ac567df7" Vi91l6wxQzZrjFeGSF8AAAAr TLSv1.2 ECDHE-RSA-AES128-SHA256 991 8785 -% 30036168 5335 0 0 0 0 192.168.146.78 CH - [2015-05-27 14:01:42.024387] "GET /errordocuments/logo_d.png HTTP/1.1" 304 - "https://www.example.com/EMail/MailHandler" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "3db55bc4.52314ac567df7" Vi91tqwxQzZrjFeGSGQAAAA1 TLSv1.2 ECDHE-RSA-AES128-SHA256 534 229 -% 2199 1459 47 105 0 0 192.168.146.78 CH - [2015-05-27 14:01:57.415803] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 502 4087 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3db55bc4.52314ac567df7" Vi91xawxQzZrjFeGSGgAAAAd TLSv1.2 ECDHE-RSA-AES128-SHA256 740 5097 -% 30037494 4636 0 0 0 0 192.168.146.78 CH - [2015-05-27 14:03:33.017587] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 502 4087 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cf301a11.52315b47e57f3" Vi92JawxQzZrjFeGSH0AAAAq TLSv1.2 ECDHE-RSA-AES128-SHA256 687 8929 -% 30031788 2130 0 0 0 0 192.168.146.78 CH - [2015-05-27 14:04:03.390207] "GET /EMail/favicon.ico HTTP/1.1" 502 4087 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e54b2ebb.52315b64dcaff" Vi92Q6wxQzZrjFeGSIQAAAAc TLSv1.2 ECDHE-RSA-AES128-SHA256 623 8929 -% 30031218 860 0 0 0 0 192.168.146.78 CH - [2015-05-27 14:04:22.187784] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 502 4087 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1ed08e3.52315b76c9f08" Vi92VqwxQzZrjFeGSIUAAAAx TLSv1.2 ECDHE-RSA-AES128-SHA256 687 8929 -% 30033549 1315 0 0 0 0 192.168.186.76 CH - [2015-05-27 14:05:30.755333] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 502 4087 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi92mqwxQzZrjFeHPJQAAABu TLSv1.2 ECDHE-RSA-AES256-SHA384 1261 9124 -% 30041536 6966 0 0 3 0 192.168.146.78 CH - [2015-05-27 14:05:31.182675] "GET /EMail/login HTTP/1.1" 502 4087 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1ed08e3.52315b76c9f08" Vi92m6wxQzZrjFeGSJQAAAA3 TLSv1.2 ECDHE-RSA-AES128-SHA256 660 5097 -% 30033837 1878 0 0 0 0 192.168.186.76 CH - [2015-05-27 14:05:30.755181] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi92mqwxQzZrjFeHPJMAAABv TLSv1.2 ECDHE-RSA-AES256-SHA384 1229 12038 -% 40615010 6831 604264 2392 3 0 192.168.186.76 CH - [2015-05-27 14:06:00.820824] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "8e2ac2ca.52310227db9e9" Vi92uKwxQzZrjFeHPJgAAAB1 - - 694 0 -% 30040497 7467 30505 246 3 0 192.168.186.76 CH - [2015-05-27 14:06:11.405401] "GET /EMail/login.aspx HTTP/1.1" 200 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - - "8e2ac2ca.52310227db9e9" Vi92w6wxQzZrjFeHPJoAAAB2 - - 662 85 -% 30040363 6755 31200 213 3 0 192.168.186.76 CH - [2015-05-27 14:12:45.306748] "GET /EMail/main.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi94TawxQzZrjFeGSNUAAAAH TLSv1.2 ECDHE-RSA-AES256-SHA384 1207 11942 -% 911201 4679 901762 3295 3 0 192.168.186.76 CH - [2015-05-27 14:12:47.741281] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi94T6wxQzZrjFeGSNYAAAAt TLSv1.2 ECDHE-RSA-AES256-SHA384 806 469 -% 1045314 5208 37714 292 3 0 192.168.186.76 CH - [2015-05-27 14:12:48.812093] "GET /EMail/main.aspx HTTP/1.1" 200 3391 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi94UKwxQzZrjFeGSNcAAAAr TLSv1.2 ECDHE-RSA-AES256-SHA384 678 3898 -% 968961 7618 958593 1291 3 0 192.168.186.76 CH - [2015-05-27 14:12:49.851297] "GET /EMail/overview.aspx HTTP/1.1" 200 5538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi94UawxQzZrjFeGSNoAAAAw TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 10134 -% 947849 4103 938848 3082 3 0 192.168.186.76 CH - [2015-05-27 14:12:49.849944] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi94UawxQzZrjFeGSNgAAAA1 TLSv1.2 ECDHE-RSA-AES256-SHA384 662 4234 -% 1051187 6541 33094 10082 3 0 192.168.186.76 CH - [2015-05-27 14:12:49.850866] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi94UawxQzZrjFeGSNkAAAAW TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 2279792 7011 262875 2831 3 0 192.168.186.76 CH - [2015-05-27 14:13:46.268007] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5880 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3909_15&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi94iqwxQzZrjFeGSOMAAAAz TLSv1.2 ECDHE-RSA-AES256-SHA384 1303 13742 -% 1038781 5499 0 0 3 0 192.168.186.76 CH - [2015-05-27 14:13:57.345865] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3909_15&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi94lawxQzZrjFeHPLQAAABQ TLSv1.2 ECDHE-RSA-AES256-SHA384 8695 630 -% 1643767 433223 190760 170 81 0 192.168.186.76 CH - [2015-05-27 14:13:59.142785] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3909_15&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi94l6wxQzZrjFeHPLUAAABT TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 921206 8534 903308 7813 3 0 192.168.186.76 CH - [2015-05-27 14:14:01.048410] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9638 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi94mawxQzZrjFeHPLYAAABO TLSv1.2 ECDHE-RSA-AES256-SHA384 662 10239 -% 1402078 4547 392676 3212 3 0 192.168.186.76 CH - [2015-05-27 14:14:04.433279] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi94nKwxQzZrjFeHPLcAAABN TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1099055 13294 83211 205 3 0 192.168.186.76 CH - [2015-05-27 14:14:05.544492] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8419 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi94nawxQzZrjFeHPLgAAABP TLSv1.2 ECDHE-RSA-AES256-SHA384 726 9023 -% 1067747 5627 55375 4684 3 0 192.168.186.76 CH - [2015-05-27 14:14:53.567543] "GET /EMail/newMessage.aspx?action=reply&mailId=3912_1&folderId=947_65&showPics=false HTTP/1.1" 200 24680 "https://www.example.com/EMail/message.aspx?&mailId=3912_1&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi94zawxQzZrjFeGSO0AAAAT TLSv1.2 ECDHE-RSA-AES256-SHA384 1367 29663 -% 1360356 5418 300721 50054 6 3 192.168.186.76 CH - [2015-05-27 14:14:54.998016] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3912_1&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi94zqwxQzZrjFeGSO4AAAAU TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 969902 6482 956969 4932 3 0 192.168.186.76 CH - [2015-05-27 14:14:55.082670] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5872 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3912_1&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi94z6wxQzZrjFeGSO8AAAAO TLSv1.2 ECDHE-RSA-AES256-SHA384 1228 9811 -% 910144 6512 0 0 3 0 192.168.186.76 CH - [2015-05-27 14:15:02.892793] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3912_1&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi941qwxQzZrjFeGSPIAAAA0 TLSv1.2 ECDHE-RSA-AES256-SHA384 7703 630 -% 1698515 411419 266778 277 86 0 192.168.186.76 CH - [2015-05-27 14:15:04.602948] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3912_1&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e2ac2ca.52310227db9e9" Vi942KwxQzZrjFeGSPUAAAAX TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 629807 7188 611240 9357 3 0 192.168.229.29 CH - [2015-05-27 14:18:09.512512] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7914 "-" "Mozilla/5.0 (Linux; Android 5.0.1; HTC_One_M8/4.19.166.3 Build/LRX22C) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/33.0.0.0 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8746765a.52315e8bc9840" Vi95kawxQzZrjFeGSRIAAAAt TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1197 12514 -% 1068429 8043 54613 3782 6 0 192.168.229.29 CH - [2015-05-27 14:18:10.715513] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Linux; Android 5.0.1; HTC_One_M8/4.19.166.3 Build/LRX22C) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/33.0.0.0 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8746765a.52315e8bc9840" Vi95kqwxQzZrjFeGSRQAAAA1 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 961 2545 14% 1018798 8819 7125 164 6 0 192.168.229.29 CH - [2015-05-27 14:18:10.811432] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Linux; Android 5.0.1; HTC_One_M8/4.19.166.3 Build/LRX22C) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/33.0.0.0 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8746765a.52315e8bc9840" Vi95kqwxQzZrjFeGSRYAAAAW TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1526 732 56% 982945 5909 974711 182 6 0 192.168.229.29 CH - [2015-05-27 14:18:10.756260] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Linux; Android 5.0.1; HTC_One_M8/4.19.166.3 Build/LRX22C) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/33.0.0.0 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8746765a.52315e8bc9840" Vi95kqwxQzZrjFeGSRUAAAAw TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1526 2014 22% 1174774 9452 163409 193 6 0 192.168.229.29 CH - [2015-05-27 14:18:10.815551] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Linux; Android 5.0.1; HTC_One_M8/4.19.166.3 Build/LRX22C) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/33.0.0.0 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8746765a.52315e8bc9840" Vi95kqwxQzZrjFeGSRcAAAAC TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1516 8130 22% 1214825 8541 201356 168 6 0 192.168.229.29 CH - [2015-05-27 14:18:10.820355] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Linux; Android 5.0.1; HTC_One_M8/4.19.166.3 Build/LRX22C) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/33.0.0.0 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8746765a.52315e8bc9840" Vi95kqwxQzZrjFeGSRgAAAAE TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1530 1823 -% 1245789 8010 236116 115 6 0 192.168.229.29 CH - [2015-05-27 14:18:12.165338] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Linux; Android 5.0.1; HTC_One_M8/4.19.166.3 Build/LRX22C) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/33.0.0.0 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8746765a.52315e8bc9840" Vi95lKwxQzZrjFeGSxQzZrju TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 967 1792 -% 850859 10352 837225 237 6 0 192.168.229.29 CH - [2015-05-27 14:18:13.228649] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Linux; Android 5.0.1; HTC One_M8 Build/LRX22C) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/33.0.0.0 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8746765a.52315e8bc9840" Vi95lawxQzZrjFeGSRoAAAAk TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 843 1567 -% 1027915 9709 15800 200 6 0 192.168.229.29 CH - [2015-05-27 14:18:53.472251] "GET /EMail/registerRecipientWithCertInstall.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 6894 "-" "Mozilla/5.0 (Linux; Android 5.0.1; HTC_One_M8/4.19.166.3 Build/LRX22C) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/33.0.0.0 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8746765a.52315e8bc9840" Vi95vawxQzZrjFeGSSIAAAAQ TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1543 7448 -% 1038800 10577 24502 2114 6 0 192.168.229.29 CH - [2015-05-27 14:18:54.632393] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/registerRecipientWithCertInstall.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Linux; Android 5.0.1; HTC_One_M8/4.19.166.3 Build/LRX22C) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/33.0.0.0 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8746765a.52315e8bc9840" Vi95vqwxQzZrjFeGSSMAAAAD TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 969 4243 23% 1067450 13373 50696 176 6 0 192.168.32.7 CH - [2015-05-27 14:28:13.312242] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8a4e253.523160cb9d8f2" Vi977awxQzZrjFeGSXQAAAAq TLSv1.2 ECDHE-RSA-AES128-SHA256 627 5651 -% 942680 868 940943 163 0 0 192.168.32.7 CH - [2015-05-27 14:29:45.702605] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7375 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "64387df0.52313a066fd01" Vi98SawxQzZrjFeHPO8AAABI TLSv1.2 ECDHE-RSA-AES128-SHA256 787 11811 -% 859659 2551 851360 4509 0 0 192.168.32.7 CH - [2015-05-27 14:29:46.653314] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "64387df0.52313a066fd01" Vi98SqwxQzZrjFeHPPAAAABD TLSv1.2 ECDHE-RSA-AES128-SHA256 486 2527 14% 905564 3379 900327 268 0 0 192.168.32.7 CH - [2015-05-27 14:29:46.682570] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "64387df0.52313a066fd01" Vi98SqwxQzZrjFeGSYAAAAA6 TLSv1.2 ECDHE-RSA-AES128-SHA256 776 864 56% 876975 1806 874447 121 0 0 192.168.32.7 CH - [2015-05-27 14:29:46.688272] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "64387df0.52313a066fd01" Vi98SqwxQzZrjFeGSYEAAAA8 TLSv1.2 ECDHE-RSA-AES128-SHA256 808 1931 -% 1094939 1701 92457 226 0 0 192.168.32.7 CH - [2015-05-27 14:29:46.693948] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7160 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "64387df0.52313a066fd01" Vi98SqwxQzZrjFeGSYMAAAAp TLSv1.2 ECDHE-RSA-AES128-SHA256 792 8403 22% 1102872 1714 97273 157 0 0 192.168.32.7 CH - [2015-05-27 14:29:46.692606] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "64387df0.52313a066fd01" Vi98SqwxQzZrjFeGSYIAAAAf TLSv1.2 ECDHE-RSA-AES128-SHA256 808 4405 23% 1152212 1685 148941 176 0 0 192.168.32.7 CH - [2015-05-27 14:29:46.696801] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "64387df0.52313a066fd01" Vi98SqwxQzZrjFeGSYQAAAA9 TLSv1.2 ECDHE-RSA-AES128-SHA256 776 2144 22% 1220440 1748 217552 225 0 0 192.168.32.7 CH - [2015-05-27 14:29:48.018136] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "64387df0.52313a066fd01" Vi98TKwxQzZrjFeGSYYAAAAG TLSv1.2 ECDHE-RSA-AES128-SHA256 518 1866 -% 779074 3267 774800 222 0 0 192.168.32.7 CH - [2015-05-27 14:29:48.917312] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "10982ba5.52313a5908e3d" Vi98TKwxQzZrjFeHPPEAAABL TLSv1.2 ECDHE-RSA-AES128-SHA256 707 5587 -% 918980 1414 916703 196 0 0 192.168.32.7 CH - [2015-05-27 14:30:19.016909] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "64387df0.52313a066fd01" Vi98a6wxQzZrjFeGSYkAAAA7 TLSv1.2 ECDHE-RSA-AES128-SHA256 808 2331 -% 826004 3372 821681 201 0 0 192.168.32.7 CH - [2015-05-27 14:31:21.096685] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "b8a4e253.523160cb9d8f2" Vi98qawxQzZrjFeGSZEAAAAW TLSv1.2 ECDHE-RSA-AES128-SHA256 616 1787 -% 3309 2194 61 164 0 0 192.168.224.59 CH - [2015-05-27 15:00:39.841535] "GET /EMail/registerRecipientWithCertInstall.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 6894 "-" "Mozilla/5.0 (Linux; Android 5.0.1; HTC_One_M8/4.19.166.3 Build/LRX22C) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/33.0.0.0 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8746765a.52315e8bc9840" Vi@Dh6wxQzZrjFeGSocAAAAt TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1293 11421 -% 957263 13488 939345 2771 6 0 192.168.28.30 CH - [2015-05-27 15:28:48.323960] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Win64; x64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "dc3647f4.52316e563b978" Vi@KIKwxQzZrjFeGS3cAAAA3 TLSv1 AES256-SHA 773 5225 -% 781013 724 779415 248 0 0 192.168.215.195 CH - [2015-05-27 15:47:39.639960] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd (unknown version) CFNetwork/520.5.3 Darwin/11.4.2 (x86_64) (iMac11%2C2)" www.example.com 192.168.34.16 443 proxy-server - - "896ebd5d.5231728d23c98" Vi@Oi6wxQzZrjFeGTBoAAAAq TLSv1 ECDHE-RSA-AES256-SHA 507 8347 -% 995134 1907 992014 227 0 0 192.168.28.30 CH - [2015-05-27 15:48:35.797997] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "42730f72.52316e5215686" Vi@Ow6wxQzZrjFeGTCYAAAA4 TLSv1 AES256-SHA 909 3696 -% 859740 2082 856799 213 0 0 192.168.28.30 CH - [2015-05-27 15:48:36.815572] "GET /EMail/images/active.gif HTTP/1.1" 304 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "42730f72.52316e5215686" Vi@OxKwxQzZrjFeGTCcAAAA8 TLSv1 AES256-SHA 1085 3696 -% 851255 4283 845904 194 0 0 192.168.28.30 CH - [2015-05-27 15:50:12.257126] "GET /EMail/main.aspx HTTP/1.1" 200 3406 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "42730f72.52316e5215686" Vi@PJKwxQzZrjFeGTDQAAAA1 TLSv1 AES256-SHA 941 7317 -% 888005 3060 883204 1109 0 0 192.168.28.30 CH - [2015-05-27 15:50:24.281364] "GET /EMail/inbox.aspx HTTP/1.1" 200 8469 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "42730f72.52316e5215686" Vi@PMKwxQzZrjFeHPioAAABS TLSv1 AES256-SHA 925 12426 -% 1198222 2588 190462 4329 0 0 192.168.28.30 CH - [2015-05-27 15:50:26.205011] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "42730f72.52316e5215686" Vi@PMqwxQzZrjFeGTDgAAAAu TLSv1 AES256-SHA 989 4090 56% 866104 2454 862721 154 0 0 192.168.28.30 CH - [2015-05-27 15:50:25.756189] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "42730f72.52316e5215686" Vi@PMawxQzZrjFeGTDcAAAAE TLSv1 AES256-SHA 1021 11151 22% 1467948 3326 460631 205 0 0 192.168.28.30 CH - [2015-05-27 15:50:34.111307] "GET /EMail/message.aspx?&mailId=3912_7&folderId=3499_10&mailPos=0 HTTP/1.1" 200 20488 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "42730f72.52316e5215686" Vi@POqwxQzZrjFeGTDoAAAAB TLSv1 AES256-SHA 957 24537 -% 1334957 5048 290935 36653 0 0 192.168.28.30 CH - [2015-05-27 15:50:35.684912] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/message.aspx?&mailId=3912_7&folderId=3499_10&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "42730f72.52316e5215686" Vi@PO6wxQzZrjFeGTDsAAAAz TLSv1 AES256-SHA 1037 5914 14% 957477 2164 953564 209 0 0 192.168.28.30 CH - [2015-05-27 16:02:58.210325] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Win64; x64; Trident/6.0)" www.example.com 192.168.34.16 443 - - + "dc3647f4.52316e563b978" Vi@SIqwxQzZrjFeGTKAAAAAf TLSv1 AES256-SHA 837 5049 -% 2705 1679 40 92 0 0 192.168.72.50 CH - [2015-05-27 16:25:49.539413] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7368 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@XfawxQzZrjFeGTW4AAAAV TLSv1.2 ECDHE-RSA-AES256-SHA384 1133 11939 -% 968555 7689 955070 3671 6 0 192.168.72.50 CH - [2015-05-27 16:25:50.669432] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@XfqwxQzZrjFeHPrAAAABY TLSv1.2 ECDHE-RSA-AES256-SHA384 1218 4485 23% 697015 9835 683228 248 6 0 192.168.72.50 CH - [2015-05-27 16:25:50.626957] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@XfqwxQzZrjFeHPqwAAABd TLSv1.2 ECDHE-RSA-AES256-SHA384 1245 5896 22% 747537 9332 735681 160 6 0 192.168.72.50 CH - [2015-05-27 16:25:50.668566] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@XfqwxQzZrjFeHPq4AAABe TLSv1.2 ECDHE-RSA-AES256-SHA384 1218 8053 22% 865909 7435 849670 254 6 0 192.168.72.50 CH - [2015-05-27 16:25:50.627124] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@XfqwxQzZrjFeGTW8AAAAz TLSv1.2 ECDHE-RSA-AES256-SHA384 886 2793 14% 942821 10233 930275 161 6 0 192.168.72.50 CH - [2015-05-27 16:25:50.669344] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@XfqwxQzZrjFeHPq8AAABX TLSv1.2 ECDHE-RSA-AES256-SHA384 1202 928 56% 1030564 11496 16693 157 6 0 192.168.72.50 CH - [2015-05-27 16:25:50.668487] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@XfqwxQzZrjFeHPq0AAABb TLSv1.2 ECDHE-RSA-AES256-SHA384 1234 1979 -% 1271247 11912 257541 157 6 0 192.168.72.50 CH - [2015-05-27 16:25:51.777019] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@Xf6wxQzZrjFeHPrEAAABf TLSv1.2 ECDHE-RSA-AES256-SHA384 918 1898 -% 744884 9307 733308 186 6 0 192.168.72.50 CH - [2015-05-27 16:25:52.575324] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@XgKwxQzZrjFeHPrIAAABh TLSv1.2 ECDHE-RSA-AES256-SHA384 774 1658 -% 890746 9227 879959 151 6 0 192.168.72.50 CH - [2015-05-27 16:28:55.720057] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@YN6wxQzZrjFeGTYkAAAAc TLSv1.2 ECDHE-RSA-AES256-SHA384 1378 662 -% 907168 12095 892235 297 6 0 192.168.72.50 CH - [2015-05-27 16:28:56.643837] "GET /EMail/main.aspx HTTP/1.1" 200 3400 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@YOKwxQzZrjFeGTYoAAAAn TLSv1.2 ECDHE-RSA-AES256-SHA384 918 3914 -% 848097 10046 834780 1259 6 0 192.168.72.50 CH - [2015-05-27 16:28:57.970250] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@YOawxQzZrjFeGTYsAAAAs TLSv1.2 ECDHE-RSA-AES256-SHA384 870 4234 -% 890957 5802 874279 9019 6 0 192.168.72.50 CH - [2015-05-27 16:28:58.312782] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@YOqwxQzZrjFeGTYwAAAAj TLSv1.2 ECDHE-RSA-AES256-SHA384 1218 9859 -% 1594232 11171 572521 4495 6 0 192.168.72.50 CH - [2015-05-27 16:28:58.712489] "GET /EMail/overview.aspx HTTP/1.1" 200 5303 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@YOqwxQzZrjFeGTY0AAAA@ TLSv1.2 ECDHE-RSA-AES256-SHA384 1186 6011 -% 1202195 8596 190472 1626 6 0 192.168.72.50 CH - [2015-05-27 16:28:59.960118] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@YO6wxQzZrjFeGTY8AAAAx TLSv1.2 ECDHE-RSA-AES256-SHA384 902 1354 -% 773229 5717 765355 218 6 0 192.168.72.50 CH - [2015-05-27 16:28:59.959819] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@YO6wxQzZrjFeGTY4AAAAm TLSv1.2 ECDHE-RSA-AES256-SHA384 934 1370 -% 1009110 9247 0 170 6 0 192.168.72.50 CH - [2015-05-27 16:29:04.861212] "GET /EMail/inbox.aspx HTTP/1.1" 200 15447 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@YQKwxQzZrjFeGTZEAAAA4 TLSv1.2 ECDHE-RSA-AES256-SHA384 870 16132 -% 1591395 9512 571319 7598 6 0 192.168.72.50 CH - [2015-05-27 16:29:06.536068] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@YQqwxQzZrjFeGTZQAAAA8 TLSv1.2 ECDHE-RSA-AES256-SHA384 1202 827 -% 761997 9646 750171 185 6 0 192.168.72.50 CH - [2015-05-27 16:29:06.498678] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@YQqwxQzZrjFeGTZIAAAA6 TLSv1.2 ECDHE-RSA-AES256-SHA384 886 634 -% 982873 13894 966831 157 6 0 192.168.72.50 CH - [2015-05-27 16:29:06.535948] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@YQqwxQzZrjFeGTZMAAAAp TLSv1.2 ECDHE-RSA-AES256-SHA384 1202 2107 -% 1037715 9035 27084 154 6 0 192.168.72.50 CH - [2015-05-27 16:29:13.413058] "GET /EMail/message.aspx?&mailId=3890_37&folderId=1175_93&mailPos=5 HTTP/1.1" 200 11336 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@YSawxQzZrjFeGTZUAAAAf TLSv1.2 ECDHE-RSA-AES256-SHA384 1234 12213 -% 1243842 11136 207603 22740 6 0 192.168.72.50 CH - [2015-05-27 16:29:18.365273] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3890_37&folderId=1175_93&attachmentId=2&token=39591158631549455E18 HTTP/1.1" 200 47260 "https://www.example.com/EMail/message.aspx?&mailId=3890_37&folderId=1175_93&mailPos=5" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@YTqwxQzZrjFeGTZcAAAAo TLSv1.2 ECDHE-RSA-AES256-SHA384 1014 50341 -% 1508985 16653 260878 195 6 0 192.168.72.50 CH - [2015-05-27 16:30:14.071698] "GET /EMail/inbox.aspx HTTP/1.1" 200 15439 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@YhqwxQzZrjFeGTaEAAAAw TLSv1.2 ECDHE-RSA-AES256-SHA384 1186 16309 -% 1475499 5853 460069 6802 6 0 192.168.72.50 CH - [2015-05-27 16:30:15.593337] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@Yh6wxQzZrjFeGTaMAAAAk TLSv1.2 ECDHE-RSA-AES256-SHA384 886 1978 -% 932010 9384 920887 165 6 0 192.168.72.50 CH - [2015-05-27 16:30:17.934635] "GET /EMail/message.aspx?&mailId=3890_49&folderId=1175_93&mailPos=4 HTTP/1.1" 200 13272 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@YiawxQzZrjFeGTaQAAAAE TLSv1.2 ECDHE-RSA-AES256-SHA384 918 13956 -% 1519360 7800 505754 4006 6 0 192.168.72.50 CH - [2015-05-27 16:30:24.440771] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/message.aspx?&mailId=3890_49&folderId=1175_93&mailPos=4" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@YkKwxQzZrjFeGTaYAAAAM TLSv1.2 ECDHE-RSA-AES256-SHA384 934 2186 -% 877196 9849 865750 160 6 0 192.168.72.50 CH - [2015-05-27 16:30:26.750311] "GET /EMail/message.aspx?&mailId=3890_49&folderId=1175_93&getFromPOP3=N&showPics=true HTTP/1.1" 200 13071 "https://www.example.com/EMail/message.aspx?&mailId=3890_49&folderId=1175_93&mailPos=4" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@YkqwxQzZrjFeGTagAAAAV TLSv1.2 ECDHE-RSA-AES256-SHA384 982 13748 -% 1659067 10678 640023 5981 6 0 192.168.72.50 CH - [2015-05-27 16:30:29.251745] "GET /EMail/message.aspx?&mailId=3890_49&folderId=1175_93&mailPos=4 HTTP/1.1" 200 13272 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@YlawxQzZrjFeGTakAAAAz TLSv1.2 ECDHE-RSA-AES256-SHA384 918 13956 -% 1370312 8776 355559 4074 6 0 192.168.72.50 CH - [2015-05-27 16:30:36.102383] "GET /EMail/inbox.aspx HTTP/1.1" 200 15432 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@YnKwxQzZrjFeGTasAAAA5 TLSv1.2 ECDHE-RSA-AES256-SHA384 1186 16309 -% 1065354 12928 39903 9313 6 0 192.168.72.50 CH - [2015-05-27 16:30:39.277593] "GET /EMail/message.aspx?&mailId=3892_70&folderId=1175_93&mailPos=3 HTTP/1.1" 200 11484 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@Yn6wxQzZrjFeGTawAAAAD TLSv1.2 ECDHE-RSA-AES256-SHA384 918 12079 -% 1488096 7016 452073 27074 6 0 192.168.72.50 CH - [2015-05-27 16:30:43.042590] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3892_70&folderId=1175_93&attachmentId=2&token=44835376049423432E18 HTTP/1.1" 200 47611 "https://www.example.com/EMail/message.aspx?&mailId=3892_70&folderId=1175_93&mailPos=3" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@Yo6wxQzZrjFeGTa0AAAAI TLSv1.2 ECDHE-RSA-AES256-SHA384 1014 50438 -% 1161031 13080 127638 206 6 0 192.168.72.50 CH - [2015-05-27 16:31:04.818819] "GET /EMail/inbox.aspx HTTP/1.1" 200 15423 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@YuKwxQzZrjFeGTbIAAAAT TLSv1.2 ECDHE-RSA-AES256-SHA384 1261 19981 -% 1410868 9247 390945 7726 6 0 192.168.72.50 CH - [2015-05-27 16:31:11.990826] "GET /EMail/message.aspx?&mailId=3892_71&folderId=1175_93&mailPos=2 HTTP/1.1" 200 13278 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@Yv6wxQzZrjFeGTbQAAAAi TLSv1.2 ECDHE-RSA-AES256-SHA384 1309 17752 -% 1358700 7217 341617 7326 6 0 192.168.72.50 CH - [2015-05-27 16:31:15.946400] "GET /EMail/inbox.aspx HTTP/1.1" 200 15416 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@Yw6wxQzZrjFeGTbUAAAAU TLSv1.2 ECDHE-RSA-AES256-SHA384 870 16100 -% 1180119 9871 162641 5411 6 0 192.168.72.50 CH - [2015-05-27 16:31:19.611993] "GET /EMail/message.aspx?&mailId=3891_93&folderId=1175_93&mailPos=1 HTTP/1.1" 200 11483 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@Yx6wxQzZrjFeGTbcAAAAL TLSv1.2 ECDHE-RSA-AES256-SHA384 918 12164 -% 1420930 11312 385277 22281 6 0 192.168.72.50 CH - [2015-05-27 16:31:23.405746] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3891_93&folderId=1175_93&attachmentId=2&token=41208903275871754E18 HTTP/1.1" 200 46797 "https://www.example.com/EMail/message.aspx?&mailId=3891_93&folderId=1175_93&mailPos=1" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@Yy6wxQzZrjFeGTbkAAAAF TLSv1.2 ECDHE-RSA-AES256-SHA384 1014 49622 -% 1049946 12715 11398 249 6 0 192.168.72.50 CH - [2015-05-27 16:31:46.085518] "GET /EMail/inbox.aspx HTTP/1.1" 200 15406 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@Y4qwxQzZrjFeHPssAAAB4 TLSv1.2 ECDHE-RSA-AES256-SHA384 1186 16277 -% 1446531 7396 428948 7434 6 0 192.168.72.50 CH - [2015-05-27 16:31:51.489749] "GET /EMail/message.aspx?&mailId=3893_5&folderId=1175_93&mailPos=0 HTTP/1.1" 200 13131 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@Y56wxQzZrjFeHPs0AAAB@ TLSv1.2 ECDHE-RSA-AES256-SHA384 918 13812 -% 1357812 11384 336644 6841 6 0 192.168.72.50 CH - [2015-05-27 16:31:55.426213] "GET /EMail/inbox.aspx HTTP/1.1" 200 15400 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@Y66wxQzZrjFeHPs4AAAB9 TLSv1.2 ECDHE-RSA-AES256-SHA384 870 16084 -% 1338568 9723 321355 5090 6 0 192.168.72.50 CH - [2015-05-27 16:32:00.613358] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@Y8KwxQzZrjFeHPs8AAABA TLSv1.2 ECDHE-RSA-AES256-SHA384 886 453 -% 939574 10474 927415 174 6 0 192.168.72.50 CH - [2015-05-27 16:32:01.569222] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@Y8awxQzZrjFeHPtAAAABB TLSv1.2 ECDHE-RSA-AES256-SHA384 870 815 75% 908075 11083 895219 283 6 0 192.168.72.50 CH - [2015-05-27 16:32:02.538366] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "7cbd2a4b.52317b14f5455" Vi@Y8qwxQzZrjFeHPtEAAABx TLSv1.2 ECDHE-RSA-AES256-SHA384 710 1642 -% 11790 8854 57 320 6 0 192.168.72.50 CH - [2015-05-27 16:32:02.915438] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7cbd2a4b.52317b14f5455" Vi@Y8qwxQzZrjFeHPtIAAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 838 373 -% 880251 9862 868441 177 6 0 192.168.72.50 CH - [2015-05-27 16:32:03.809055] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "7cbd2a4b.52317b14f5455" Vi@Y86wxQzZrjFeHPtMAAAB8 TLSv1.2 ECDHE-RSA-AES256-SHA384 822 0 -% 967831 5814 956127 4092 6 0 192.168.185.77 CH - [2015-05-27 16:45:37.143239] "GET /EMail/login.aspx?username=john.smith@rj.sg.com HTTP/1.1" 200 7369 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "1f43e89d.52317f818b9c7" Vi@cIawxQzZrjFeGTj4AAAAe TLSv1 ECDHE-RSA-AES256-SHA 624 11793 -% 904584 1853 897773 4006 0 0 192.168.185.77 CH - [2015-05-27 16:45:38.081987] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@rj.sg.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "1f43e89d.52317f818b9c7" Vi@cIqwxQzZrjFeGTkAAAAAc TLSv1 ECDHE-RSA-AES256-SHA 475 1887 22% 1013305 2274 9525 204 0 0 192.168.146.78 CH - [2015-05-27 16:47:47.818233] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7350 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8a4c75fc.52317ffe2aaf9" Vi@co6wxQzZrjFeGTlQAAAA3 TLSv1.2 ECDHE-RSA-AES128-SHA256 703 11875 -% 802856 1220 796800 4105 0 0 192.168.146.78 CH - [2015-05-27 16:47:53.188723] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8a4c75fc.52317ffe2aaf9" Vi@cqawxQzZrjFeGTlUAAAAH TLSv1.2 ECDHE-RSA-AES128-SHA256 678 453 -% 905321 3136 901483 157 0 0 192.168.146.78 CH - [2015-05-27 16:47:54.117072] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8a4c75fc.52317ffe2aaf9" Vi@cqqwxQzZrjFeGTlYAAAAr TLSv1.2 ECDHE-RSA-AES128-SHA256 534 3882 -% 890719 1971 887096 1123 0 0 192.168.146.78 CH - [2015-05-27 16:47:55.156714] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8a4c75fc.52317ffe2aaf9" Vi@cq6wxQzZrjFeGTlcAAAAt TLSv1.2 ECDHE-RSA-AES128-SHA256 486 4202 -% 879125 3430 868554 6285 0 0 192.168.146.78 CH - [2015-05-27 16:47:55.307861] "GET /EMail/overview.aspx HTTP/1.1" 200 5305 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8a4c75fc.52317ffe2aaf9" Vi@cq6wxQzZrjFeHPw4AAABx TLSv1.2 ECDHE-RSA-AES128-SHA256 772 5963 -% 1356208 2957 350255 2283 0 0 192.168.146.78 CH - [2015-05-27 16:47:55.295483] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8a4c75fc.52317ffe2aaf9" Vi@cq6wxQzZrjFeGTlgAAAA1 TLSv1.2 ECDHE-RSA-AES128-SHA256 804 9683 -% 1970127 3904 955960 5031 0 0 192.168.185.77 CH - [2015-05-27 16:48:23.260186] "GET /EMail/message.aspx?mailId=3911_10&folderId=1754_41&print=true&showPics=false HTTP/1.1" 200 10444 "https://www.example.com/EMail/message.aspx?&mailId=3911_10&folderId=1754_41&mailPos=0" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "1f43e89d.52317f818b9c7" Vi@cx6wxQzZrjFeGTl0AAAAE TLSv1 ECDHE-RSA-AES256-SHA 832 14779 -% 1206345 5372 171842 28133 0 0 192.168.146.78 CH - [2015-05-27 16:51:44.697318] "GET /EMail/inbox.aspx HTTP/1.1" 200 52123 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8a4c75fc.52317ffe2aaf9" Vi@dkKwxQzZrjFeHPx8AAABO TLSv1.2 ECDHE-RSA-AES128-SHA256 772 53458 -% 2389132 1957 773778 20818 0 0 192.168.146.78 CH - [2015-05-27 16:51:50.536897] "GET /EMail/message.aspx?&mailId=3912_9&folderId=2634_79&mailPos=0 HTTP/1.1" 200 47661 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8a4c75fc.52317ffe2aaf9" Vi@dlqwxQzZrjFeHPyAAAABN TLSv1.2 ECDHE-RSA-AES128-SHA256 534 48764 -% 1694717 4006 600630 84376 0 0 192.168.159.198 CH - [2015-05-27 16:53:23.879665] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0" www.example.com 192.168.34.16 443 proxy-server - - "f64c4797.5231813ea8ef1" Vi@d86wxQzZrjFeGTocAAAA6 TLSv1 ECDHE-RSA-AES256-SHA 439 8352 -% 928483 1814 925421 210 0 0 192.168.254.143 CH - [2015-05-27 17:12:23.022408] "GET /EMail/registerRecipientWithCertInstall.aspx?emailAddress=john.smith@zulaufpartner.com HTTP/1.1" 200 6902 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@iZ6wxQzZrjFeHP4AAAAB1 TLSv1.2 ECDHE-RSA-AES256-SHA384 851 11459 -% 668109 1362 663303 2398 0 0 192.168.254.143 CH - [2015-05-27 17:12:23.795565] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/registerRecipientWithCertInstall.aspx?emailAddress=john.smith@zulaufpartner.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@iZ6wxQzZrjFeHP4EAAAB2 TLSv1.2 ECDHE-RSA-AES256-SHA384 582 2777 14% 921772 2897 917102 179 0 0 192.168.254.143 CH - [2015-05-27 17:12:24.116026] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/registerRecipientWithCertInstall.aspx?emailAddress=john.smith@zulaufpartner.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@iaKwxQzZrjFeGTxkAAAAV TLSv1.2 ECDHE-RSA-AES256-SHA384 900 928 56% 628556 3279 624266 140 0 0 192.168.254.143 CH - [2015-05-27 17:12:24.176409] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/registerRecipientWithCertInstall.aspx?emailAddress=john.smith@zulaufpartner.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@iaKwxQzZrjFeGTxsAAAAd TLSv1.2 ECDHE-RSA-AES256-SHA384 900 4485 23% 876266 2029 872689 142 0 0 192.168.254.143 CH - [2015-05-27 17:12:24.140531] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/registerRecipientWithCertInstall.aspx?emailAddress=john.smith@zulaufpartner.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@iaKwxQzZrjFeGTxoAAAAz TLSv1.2 ECDHE-RSA-AES256-SHA384 900 2208 22% 951274 2808 947338 290 0 0 192.168.254.143 CH - [2015-05-27 17:12:24.202365] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/registerRecipientWithCertInstall.aspx?emailAddress=john.smith@zulaufpartner.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@iaKwxQzZrjFeGTxwAAAAC TLSv1.2 ECDHE-RSA-AES256-SHA384 884 8053 22% 890717 1771 886209 100 0 0 192.168.254.143 CH - [2015-05-27 17:12:25.189386] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/registerRecipientWithCertInstall.aspx?emailAddress=john.smith@zulaufpartner.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@iaawxQzZrjFeHP4IAAAB3 TLSv1.2 ECDHE-RSA-AES256-SHA384 566 1786 -% 876234 3673 871248 247 0 0 192.168.254.143 CH - [2015-05-27 17:12:25.259584] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/registerRecipientWithCertInstall.aspx?emailAddress=john.smith@zulaufpartner.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@iaawxQzZrjFeGTx0AAAA5 TLSv1.2 ECDHE-RSA-AES256-SHA384 566 1898 -% 874631 1838 872018 184 0 0 192.168.254.143 CH - [2015-05-27 17:12:26.396841] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "https://www.example.com/EMail/registerRecipientWithCertInstall.aspx?emailAddress=john.smith@zulaufpartner.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@iaqwxQzZrjFeGTx4AAAAD TLSv1.2 ECDHE-RSA-AES256-SHA384 888 1851 -% 947843 2369 944612 211 0 0 192.168.254.143 CH - [2015-05-27 17:12:40.911197] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/registerRecipientWithCertInstall.aspx?emailAddress=john.smith@zulaufpartner.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@ieKwxQzZrjFeGTyEAAAAY TLSv1.2 ECDHE-RSA-AES256-SHA384 884 2379 -% 955096 1955 952304 175 0 0 192.168.254.143 CH - [2015-05-27 17:12:41.141905] "POST /EMail/selectMailNS.aspx HTTP/1.1" 200 9429 "https://www.example.com/EMail/registerRecipientWithCertInstall.aspx?emailAddress=john.smith@zulaufpartner.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@ieawxQzZrjFeGTyIAAAAZ TLSv1.2 ECDHE-RSA-AES256-SHA384 1241 10224 -% 935249 3970 927689 2815 0 0 192.168.254.143 CH - [2015-05-27 17:13:28.806002] "POST /EMail/certificatesManualP12Outlook.aspx HTTP/1.1" 200 7353 "https://www.example.com/EMail/selectMailNS.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@iqKwxQzZrjFeGTygAAAAU TLSv1.2 ECDHE-RSA-AES256-SHA384 1197 8059 -% 1035317 6313 24452 3728 0 0 192.168.159.118 CH - [2015-05-27 17:14:03.917441] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7911 "https://mail.google.com/mail/mu/mp/615/?source=nap&hr=1&hl=fr-CH" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@iy6wxQzZrjFeGTy4AAAAh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 817 12316 -% 1185133 1302 181013 2295 0 0 192.168.159.118 CH - [2015-05-27 17:14:05.343555] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@izawxQzZrjFeGTzAAAAAb TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 762 732 56% 975469 2858 971466 177 0 0 192.168.159.118 CH - [2015-05-27 17:14:05.241501] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@izawxQzZrjFeGTy8AAAA0 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 509 2421 13% 1119357 2911 114683 178 0 0 192.168.159.118 CH - [2015-05-27 17:14:05.363868] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@izawxQzZrjFeGTzEAAAAq TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 752 8130 22% 1008440 2718 2111 196 0 0 192.168.159.118 CH - [2015-05-27 17:14:05.399379] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@izawxQzZrjFeGTzMAAAAX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 749 1823 -% 1187563 2667 184049 212 0 0 192.168.159.118 CH - [2015-05-27 17:14:05.382226] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@izawxQzZrjFeGTzIAAAAJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 762 2014 22% 1228157 2886 224315 95 0 0 192.168.159.118 CH - [2015-05-27 17:14:07.461449] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@iz6wxQzZrjFeGTzQAAAAg TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 498 1792 -% 872880 2868 869160 216 0 0 192.168.254.143 CH - [2015-05-27 17:14:16.878040] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/certificatesManualP12Outlook.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@i2KwxQzZrjFeGTzcAAAA@ TLSv1.2 ECDHE-RSA-AES256-SHA384 856 2379 -% 923757 2930 920009 130 0 0 192.168.254.143 CH - [2015-05-27 17:14:17.804738] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/certificatesManualP12Outlook.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@i2awxQzZrjFeGTzgAAAAm TLSv1.2 ECDHE-RSA-AES256-SHA384 1257 582 -% 1012877 4999 7159 168 0 0 192.168.254.143 CH - [2015-05-27 17:14:19.107151] "GET /EMail/error.aspx HTTP/1.1" 200 3792 "https://www.example.com/EMail/certificatesManualP12Outlook.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@i26wxQzZrjFeGTzkAAAA8 TLSv1.2 ECDHE-RSA-AES256-SHA384 614 4314 -% 947550 4166 934425 7884 0 0 192.168.254.143 CH - [2015-05-27 17:15:33.310355] "POST /EMail/MailHandler HTTP/1.1" 200 4349 "https://www.example.com/EMail/certificatesManualP12Outlook.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@jJawxQzZrjFeGT0YAAAAt TLSv1.2 ECDHE-RSA-AES256-SHA384 1277 5306 -% 2664309 8341 619226 166 0 0 192.168.254.143 CH - [2015-05-27 17:15:46.303385] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/certificatesManualP12Outlook.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@jMqwxQzZrjFeGT0kAAAAu TLSv1.2 ECDHE-RSA-AES256-SHA384 1273 582 -% 1045540 6643 37906 176 0 0 192.168.159.118 CH - [2015-05-27 17:15:46.317445] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@jMqwxQzZrjFeGT0oAAAAa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1147 470 -% 1332234 4966 321578 127 0 0 192.168.254.143 CH - [2015-05-27 17:15:47.576869] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "https://www.example.com/EMail/certificatesManualP12Outlook.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@jM6wxQzZrjFeGT0sAAAAw TLSv1.2 ECDHE-RSA-AES256-SHA384 614 7850 -% 800900 2997 794037 3190 0 0 192.168.159.118 CH - [2015-05-27 17:15:47.783407] "GET /EMail/error.aspx HTTP/1.1" 200 3763 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@jM6wxQzZrjFeGT0wAAAAk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 579 4185 -% 875794 2971 863771 8392 0 0 192.168.159.118 CH - [2015-05-27 17:16:09.261336] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7912 "https://mail.google.com/mail/mu/mp/615/?source=nap&hr=1&hl=fr-CH" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@jSawxQzZrjFeGT1EAAAAd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 863 8466 -% 872448 3138 866464 2265 0 0 192.168.254.143 CH - [2015-05-27 17:16:12.884441] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@jTKwxQzZrjFeGT1MAAAA5 TLSv1.2 ECDHE-RSA-AES256-SHA384 824 2379 -% 706194 1856 703525 173 0 0 192.168.254.143 CH - [2015-05-27 17:16:13.697796] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@jTawxQzZrjFeGT1QAAAAI TLSv1.2 ECDHE-RSA-AES256-SHA384 1113 678 -% 742190 3073 738341 183 0 0 192.168.254.143 CH - [2015-05-27 17:16:14.601590] "GET /EMail/login.aspx?username=hku HTTP/1.1" 200 7339 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@jTqwxQzZrjFeGT1UAAAAP TLSv1.2 ECDHE-RSA-AES256-SHA384 598 7850 -% 953092 3467 944172 4634 0 0 192.168.254.143 CH - [2015-05-27 17:16:18.507270] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=hku" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@jUqwxQzZrjFeGT1YAAAAY TLSv1.2 ECDHE-RSA-AES256-SHA384 518 2186 -% 617008 2753 613117 217 0 0 192.168.254.143 CH - [2015-05-27 17:16:21.173331] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=hku" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@jVawxQzZrjFeGT1cAAAAZ TLSv1.2 ECDHE-RSA-AES256-SHA384 1129 678 -% 974854 2911 971098 187 0 0 192.168.254.143 CH - [2015-05-27 17:16:22.377746] "GET /EMail/login.aspx?username=hku HTTP/1.1" 200 7339 "https://www.example.com/EMail/login.aspx?username=hku" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@jVqwxQzZrjFeGT1kAAAAT TLSv1.2 ECDHE-RSA-AES256-SHA384 614 7850 -% 930810 2275 925604 2362 0 0 192.168.254.143 CH - [2015-05-27 17:16:24.690873] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=hku" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@jWKwxQzZrjFeGT1sAAAAi TLSv1.2 ECDHE-RSA-AES256-SHA384 518 2186 -% 911327 2030 908181 233 0 0 192.168.254.143 CH - [2015-05-27 17:16:33.253458] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=hku" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@jYawxQzZrjFeGT10AAAAU TLSv1.2 ECDHE-RSA-AES256-SHA384 1129 662 -% 906038 4889 900054 187 0 0 192.168.254.143 CH - [2015-05-27 17:16:34.261101] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "https://www.example.com/EMail/login.aspx?username=hku" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@jYqwxQzZrjFeGT14AAAAL TLSv1.2 ECDHE-RSA-AES256-SHA384 598 7850 -% 853834 1859 847690 3574 0 0 192.168.254.143 CH - [2015-05-27 17:16:38.757843] "GET /EMail/requestKey.aspx HTTP/1.1" 200 6024 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@jZqwxQzZrjFeGT18AAAAA TLSv1.2 ECDHE-RSA-AES256-SHA384 566 6538 -% 632669 2182 619057 10851 0 0 192.168.254.143 CH - [2015-05-27 17:17:09.193036] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@jhawxQzZrjFeGT2UAAAA0 TLSv1.2 ECDHE-RSA-AES256-SHA384 1129 694 -% 1013882 5294 7245 344 0 0 192.168.159.118 CH - [2015-05-27 17:17:09.090001] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@jhawxQzZrjFeGT2QAAAAb TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1156 502 -% 1594785 8772 572416 189 0 0 192.168.254.143 CH - [2015-05-27 17:17:10.361181] "GET /EMail/login.aspx?username=john.smith@zulaufpartner.com HTTP/1.1" 200 7535 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@jhqwxQzZrjFeGT2YAAAAq TLSv1.2 ECDHE-RSA-AES256-SHA384 630 8042 -% 1025125 3593 4348 16280 0 0 192.168.159.118 CH - [2015-05-27 17:17:11.265376] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7358 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@jh6wxQzZrjFeGT2cAAAAX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 611 7780 -% 936686 4154 928331 3587 0 0 192.168.159.118 CH - [2015-05-27 17:17:12.403431] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@jiKwxQzZrjFeGT2gAAAAJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 486 4096 23% 969387 2089 965809 142 0 0 192.168.254.143 CH - [2015-05-27 17:17:30.498966] "GET /EMail/requestPassword.aspx HTTP/1.1" 200 4302 "https://www.example.com/EMail/login.aspx?username=john.smith@zulaufpartner.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@jmqwxQzZrjFeGT2sAAAAn TLSv1.2 ECDHE-RSA-AES256-SHA384 991 8691 -% 1020315 2826 0 16377 0 0 192.168.254.143 CH - [2015-05-27 17:17:56.994576] "POST /EMail/MailHandler?service=requestPassword HTTP/1.1" 303 - "https://www.example.com/EMail/requestPassword.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@jtKwxQzZrjFeHP5kAAABR TLSv1.2 ECDHE-RSA-AES256-SHA384 1165 598 -% 2451131 5166 445186 137 0 0 192.168.254.143 CH - [2015-05-27 17:17:59.661934] "GET /EMail/requestPasswordFeedback.aspx?way=email HTTP/1.1" 200 3608 "https://www.example.com/EMail/requestPassword.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@jt6wxQzZrjFeHP5oAAABQ TLSv1.2 ECDHE-RSA-AES256-SHA384 630 4122 -% 840278 3387 830117 5996 0 0 192.168.254.143 CH - [2015-05-27 17:18:00.698556] "POST /EMail/MailHandler?service=requestPassword HTTP/1.1" 303 - "https://www.example.com/EMail/requestPassword.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@juKwxQzZrjFeHP5sAAABO TLSv1.2 ECDHE-RSA-AES256-SHA384 1161 598 -% 2331567 3654 327189 147 0 0 192.168.254.143 CH - [2015-05-27 17:18:03.621567] "GET /EMail/requestPasswordFeedback.aspx?way=email HTTP/1.1" 200 3608 "https://www.example.com/EMail/requestPassword.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@ju6wxQzZrjFeHP5wAAABN TLSv1.2 ECDHE-RSA-AES256-SHA384 630 4122 -% 1065473 2708 51618 10315 0 0 192.168.254.143 CH - [2015-05-27 17:18:06.725720] "POST /EMail/MailHandler?service=requestPassword HTTP/1.1" 303 - "https://www.example.com/EMail/requestPassword.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@jvqwxQzZrjFeGT3EAAAA4 TLSv1.2 ECDHE-RSA-AES256-SHA384 1161 598 -% 3729178 4161 724153 172 0 0 192.168.254.143 CH - [2015-05-27 17:18:10.522723] "GET /EMail/requestPasswordFeedback.aspx?way=email HTTP/1.1" 200 3608 "https://www.example.com/EMail/requestPassword.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@jwqwxQzZrjFeGT3IAAAAm TLSv1.2 ECDHE-RSA-AES256-SHA384 630 4122 -% 861141 3413 846969 10136 0 0 192.168.159.118 CH - [2015-05-27 17:18:18.791293] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@jyqwxQzZrjFeGT3MAAAA8 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1026 559 -% 927581 5534 917667 462 0 0 192.168.159.118 CH - [2015-05-27 17:18:19.823624] "GET /EMail/main.aspx HTTP/1.1" 200 3390 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@jy6wxQzZrjFeGT3QAAAAp TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 562 3806 -% 811267 2937 806532 1152 0 0 192.168.159.118 CH - [2015-05-27 17:18:20.847333] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@jzKwxQzZrjFeGT3UAAAA6 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 500 4128 -% 849203 1910 838196 8469 0 0 192.168.159.118 CH - [2015-05-27 17:18:20.954284] "GET /EMail/overview.aspx HTTP/1.1" 200 5283 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@jzKwxQzZrjFeHP6EAAABV TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 757 5843 -% 1360553 1658 356645 1741 0 0 192.168.159.118 CH - [2015-05-27 17:18:20.945241] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@jzKwxQzZrjFeHP6AAAABU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 783 9317 -% 1939422 4030 927983 2829 0 0 192.168.159.118 CH - [2015-05-27 17:18:22.833444] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@jzqwxQzZrjFeGT3YAAAAf TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 456 1248 -% 796018 1939 793278 132 0 0 192.168.159.118 CH - [2015-05-27 17:18:22.971466] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@jzqwxQzZrjFeHP6IAAABc TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 498 1260 -% 842934 2922 839105 179 0 0 192.168.159.118 CH - [2015-05-27 17:18:39.815422] "GET /EMail/newMessage.aspx?msg=new HTTP/1.1" 200 12009 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@j36wxQzZrjFeGT3gAAAA2 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 832 12628 -% 1323065 2096 295818 23361 3 3 192.168.159.118 CH - [2015-05-27 17:18:39.903777] "GET /EMail/tree.aspx?sNode-sharedTree=treeNewMsg HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@j36wxQzZrjFeGT3kAAAA9 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 811 9317 -% 1538438 4258 525856 3682 0 0 192.168.159.118 CH - [2015-05-27 17:18:41.331191] "GET /EMail/scripts/tinymce/tinymce.min.js HTTP/1.1" 200 101963 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@j4awxQzZrjFeGT3oAAAAy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 729 103341 33% 1236020 4279 974801 177 0 0 192.168.159.118 CH - [2015-05-27 17:18:43.672125] "GET /EMail/scripts/tinymce/themes/modern/theme.min.js HTTP/1.1" 200 2651 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@j46wxQzZrjFeGT3wAAAAH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 741 3319 41% 952446 2814 948080 135 0 0 192.168.159.118 CH - [2015-05-27 17:18:43.603440] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2942 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@j46wxQzZrjFeGT3sAAAA3 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 521 3335 -% 1023713 2965 13408 6776 0 0 192.168.159.118 CH - [2015-05-27 17:18:43.681119] "GET /EMail/scripts/tinymce/langs/de.js HTTP/1.1" 200 2969 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@j46wxQzZrjFeGT30AAAAr TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 726 3637 38% 1129423 3612 123768 215 0 0 192.168.159.118 CH - [2015-05-27 17:18:43.701349] "GET /EMail/scripts/tinymce/plugins/print/plugin.min.js HTTP/1.1" 200 182 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@j46wxQzZrjFeGT34AAAA1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 742 819 55% 1166104 2685 162630 130 0 0 192.168.159.118 CH - [2015-05-27 17:18:43.711310] "GET /EMail/scripts/tinymce/plugins/preview/plugin.min.js HTTP/1.1" 200 737 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@j46wxQzZrjFeGT38AAAAt TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 744 1375 51% 1237171 3331 232772 131 0 0 192.168.159.118 CH - [2015-05-27 17:18:43.727754] "GET /EMail/scripts/tinymce/plugins/paste/plugin.min.js HTTP/1.1" 200 6256 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@j46wxQzZrjFeGT4AAAAAW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 742 7124 40% 1223549 2351 219324 115 0 0 192.168.159.118 CH - [2015-05-27 17:18:44.624669] "GET /EMail/scripts/tinymce/plugins/searchreplace/plugin.min.js HTTP/1.1" 200 2586 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@j5KwxQzZrjFeGT4IAAAAH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 494 3116 40% 945723 2065 942359 199 0 0 192.168.159.118 CH - [2015-05-27 17:18:44.810637] "GET /EMail/scripts/tinymce/plugins/insertdatetime/plugin.min.js HTTP/1.1" 200 867 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@j5KwxQzZrjFeGT4MAAAAr TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 495 1367 42% 871464 2989 867531 167 0 0 192.168.159.118 CH - [2015-05-27 17:18:44.948568] "GET /EMail/scripts/tinymce/plugins/visualchars/plugin.min.js HTTP/1.1" 200 608 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@j5KwxQzZrjFeGT4UAAAAt TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 492 1108 54% 877583 2393 874043 178 0 0 192.168.254.143 CH - [2015-05-27 17:18:45.870696] "GET /EMail HTTP/1.1" 302 223 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 - - + "-" Vi@j5awxQzZrjFeGT4oAAAAw TLSv1.2 ECDHE-RSA-AES256-SHA384 824 891 -% 688 176 363 157 0 0 192.168.159.118 CH - [2015-05-27 17:18:44.867522] "GET /EMail/scripts/tinymce/plugins/link/plugin.min.js HTTP/1.1" 200 1835 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@j5KwxQzZrjFeGT4QAAAA1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 485 2336 41% 1007523 2330 4129 125 0 0 192.168.159.118 CH - [2015-05-27 17:18:45.682163] "GET /EMail/scripts/tinymce/plugins/visualblocks/plugin.min.js HTTP/1.1" 200 525 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@j5awxQzZrjFeGT4gAAAAr TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 494 1025 43% 709745 2035 706521 477 0 0 192.168.159.118 CH - [2015-05-27 17:18:45.826234] "GET /EMail/scripts/tinymce/plugins/image/plugin.min.js HTTP/1.1" 200 2136 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@j5awxQzZrjFeGT4kAAAAt TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 487 2666 42% 832529 3105 828421 137 0 0 192.168.159.118 CH - [2015-05-27 17:18:45.570475] "GET /EMail/scripts/tinymce/plugins/fullpage/plugin.min.js HTTP/1.1" 200 2325 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@j5awxQzZrjFeGT4cAAAAH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 2855 36% 1089338 2836 85214 137 0 0 192.168.159.118 CH - [2015-05-27 17:18:45.875109] "GET /EMail/scripts/tinymce/plugins/anchor/plugin.min.js HTTP/1.1" 200 339 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@j5awxQzZrjFeGT4sAAAA1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 488 838 63% 980641 2698 976773 217 0 0 192.168.159.118 CH - [2015-05-27 17:18:46.391991] "GET /EMail/scripts/tinymce/plugins/hr/plugin.min.js HTTP/1.1" 200 191 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@j5qwxQzZrjFeGT40AAAAr TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 484 690 53% 518765 2696 515096 101 0 0 192.168.254.143 CH - [2015-05-27 17:18:45.944328] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@j5awxQzZrjFeGT4wAAAAk TLSv1.2 ECDHE-RSA-AES256-SHA384 502 7850 -% 1086195 2797 80344 2316 0 0 192.168.159.118 CH - [2015-05-27 17:18:46.659872] "GET /EMail/scripts/tinymce/plugins/charmap/plugin.min.js HTTP/1.1" 200 2698 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@j5qwxQzZrjFeGT48AAAAH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 489 3228 38% 775390 2656 771407 185 0 0 192.168.159.118 CH - [2015-05-27 17:18:46.658834] "GET /EMail/scripts/tinymce/plugins/table/plugin.min.js HTTP/1.1" 200 9166 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@j5qwxQzZrjFeGT44AAAAt TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 487 9726 32% 1089207 1936 83910 187 0 0 192.168.159.118 CH - [2015-05-27 17:18:46.855836] "GET /EMail/scripts/tinymce/plugins/textcolor/plugin.min.js HTTP/1.1" 200 1647 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@j5qwxQzZrjFeGT5AAAAA1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 491 2148 44% 893420 2987 889182 131 0 0 192.168.159.118 CH - [2015-05-27 17:18:47.573469] "GET /EMail/overview.aspx HTTP/1.1" 200 5284 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeNewMsg" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@j56wxQzZrjFeGT5EAAAAM TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 5706 -% 1336312 3157 330300 2172 0 0 192.168.159.118 CH - [2015-05-27 17:18:47.581489] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeNewMsg" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@j56wxQzZrjFeGT5IAAAAB TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 556 9179 -% 1575202 2693 563525 4479 0 0 192.168.254.143 CH - [2015-05-27 17:19:05.020516] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@j@awxQzZrjFeGT5QAAAAD TLSv1.2 ECDHE-RSA-AES256-SHA384 1129 662 -% 899515 3841 894885 182 0 0 192.168.254.143 CH - [2015-05-27 17:19:06.016636] "GET /EMail/main.aspx HTTP/1.1" 200 3394 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@j@qwxQzZrjFeGT5UAAAAI TLSv1.2 ECDHE-RSA-AES256-SHA384 582 3914 -% 1040521 1978 36593 1350 0 0 192.168.254.143 CH - [2015-05-27 17:19:07.143368] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@j@6wxQzZrjFeGT5YAAAAP TLSv1.2 ECDHE-RSA-AES256-SHA384 550 4218 -% 775899 2067 762794 10362 0 0 192.168.254.143 CH - [2015-05-27 17:19:07.301252] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@j@6wxQzZrjFeHP6kAAABi TLSv1.2 ECDHE-RSA-AES256-SHA384 900 9843 -% 1420020 2508 407760 4893 0 0 192.168.254.143 CH - [2015-05-27 17:19:07.324721] "GET /EMail/overview.aspx HTTP/1.1" 200 5286 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@j@6wxQzZrjFeHP6oAAABa TLSv1.2 ECDHE-RSA-AES256-SHA384 884 5995 -% 1491253 2629 485848 1970 0 0 192.168.254.143 CH - [2015-05-27 17:19:08.970065] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@j-KwxQzZrjFeHP6sAAABn TLSv1.2 ECDHE-RSA-AES256-SHA384 518 1354 -% 759233 2948 755412 173 0 0 192.168.254.143 CH - [2015-05-27 17:19:08.937703] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@j-KwxQzZrjFeGT5cAAAAY TLSv1.2 ECDHE-RSA-AES256-SHA384 550 1370 -% 940465 2425 937291 172 0 0 192.168.159.118 CH - [2015-05-27 17:19:18.793226] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8382 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@kBqwxQzZrjFeHP60AAABg TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 903 12659 -% 1212099 3358 203555 4254 0 0 192.168.159.118 CH - [2015-05-27 17:19:18.913257] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@kBqwxQzZrjFeHP64AAABm TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 810 9317 -% 1749877 3289 736807 4749 0 0 192.168.159.118 CH - [2015-05-27 17:19:20.993797] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@kCKwxQzZrjFeHP68AAABl TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 457 539 -% 1100597 3243 96544 172 0 0 192.168.159.118 CH - [2015-05-27 17:19:21.073222] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@kCawxQzZrjFeGT5kAAAAN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 715 1951 -% 1053871 3039 49954 146 0 0 192.168.159.118 CH - [2015-05-27 17:19:20.999679] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@kCKwxQzZrjFeHP7AAAABo TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 460 527 -% 1171152 3005 167159 148 0 0 192.168.159.118 CH - [2015-05-27 17:19:25.777762] "GET /EMail/message.aspx?&mailId=3912_12&folderId=2793_51&mailPos=0 HTTP/1.1" 200 14687 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "6b54e2b3.523185dd40881" Vi@kDawxQzZrjFeGT5sAAAAS TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 844 15306 -% 1237959 3169 208649 24949 0 0 192.168.254.143 CH - [2015-05-27 17:21:52.830393] "GET /EMail HTTP/1.1" 302 223 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 - - + "-" Vi@koKwxQzZrjFeGT7IAAAA4 TLSv1.2 ECDHE-RSA-AES256-SHA384 824 891 -% 1089 300 545 269 0 0 192.168.254.143 CH - [2015-05-27 17:21:53.024194] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@koawxQzZrjFeGT7MAAAA8 TLSv1.2 ECDHE-RSA-AES256-SHA384 820 8043 -% 1054481 3046 48578 2150 0 0 192.168.254.143 CH - [2015-05-27 17:22:06.101744] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@krqwxQzZrjFeGT7UAAAA6 TLSv1.2 ECDHE-RSA-AES256-SHA384 1129 662 -% 999036 5265 992898 164 0 0 192.168.254.143 CH - [2015-05-27 17:22:07.265110] "GET /EMail/main.aspx HTTP/1.1" 200 3394 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@kr6wxQzZrjFeGT7YAAAAf TLSv1.2 ECDHE-RSA-AES256-SHA384 582 3914 -% 852689 1979 848181 1911 0 0 192.168.254.143 CH - [2015-05-27 17:22:08.296517] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@ksKwxQzZrjFeGT7gAAAAo TLSv1.2 ECDHE-RSA-AES256-SHA384 550 4218 -% 846651 3185 836463 6243 0 0 192.168.254.143 CH - [2015-05-27 17:22:08.484107] "GET /EMail/overview.aspx HTTP/1.1" 200 5286 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@ksKwxQzZrjFeGT7oAAAA9 TLSv1.2 ECDHE-RSA-AES256-SHA384 884 5995 -% 1032950 2659 27759 1942 0 0 192.168.254.143 CH - [2015-05-27 17:22:08.458210] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@ksKwxQzZrjFeGT7kAAAA2 TLSv1.2 ECDHE-RSA-AES256-SHA384 900 9843 -% 1619362 2359 607718 4559 0 0 192.168.254.143 CH - [2015-05-27 17:22:15.958606] "GET /EMail/tree.aspx?oNode-sharedTree=treePreferences&sNode-sharedTree=treePreferences HTTP/1.1" 200 10858 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@kt6wxQzZrjFeGT7sAAAAy TLSv1.2 ECDHE-RSA-AES256-SHA384 964 12418 -% 1147770 4714 130650 5717 0 0 192.168.254.143 CH - [2015-05-27 17:22:16.304267] "GET /EMail/tree.aspx?oNode-sharedTree=treePreferences&sNode-sharedTree=treePreferences HTTP/1.1" 200 10858 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@kuKwxQzZrjFeGT7wAAAA7 TLSv1.2 ECDHE-RSA-AES256-SHA384 964 12418 -% 1142456 4804 125523 6039 0 0 192.168.254.143 CH - [2015-05-27 17:22:17.891500] "GET /EMail/images/tree/folder/minus-first-node.gif HTTP/1.1" 200 842 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePreferences&sNode-sharedTree=treePreferences" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@kuawxQzZrjFeGT78AAAAW TLSv1.2 ECDHE-RSA-AES256-SHA384 916 1547 -% 703945 2905 699968 226 0 0 192.168.254.143 CH - [2015-05-27 17:22:17.811810] "GET /EMail/images/tree/folder/pixel.gif HTTP/1.1" 200 807 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePreferences&sNode-sharedTree=treePreferences" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@kuawxQzZrjFeGT74AAAA3 TLSv1.2 ECDHE-RSA-AES256-SHA384 582 1322 -% 813421 2921 809596 179 0 0 192.168.254.143 CH - [2015-05-27 17:22:20.182397] "GET /EMail/changePassword.aspx HTTP/1.1" 200 5167 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePreferences&sNode-sharedTree=treePreferences" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@kvKwxQzZrjFeGT8EAAAAw TLSv1.2 ECDHE-RSA-AES256-SHA384 630 5674 -% 1166690 2928 159697 3252 0 0 192.168.254.143 CH - [2015-05-27 17:22:20.205713] "GET /EMail/tree.aspx?sNode-sharedTree=treeChangePwd HTTP/1.1" 200 10866 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePreferences&sNode-sharedTree=treePreferences" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@kvKwxQzZrjFeGT8IAAAA- TLSv1.2 ECDHE-RSA-AES256-SHA384 646 12225 -% 1882677 3588 866743 5721 0 0 192.168.254.143 CH - [2015-05-27 17:23:04.090993] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/changePassword.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@k6KwxQzZrjFeGT8cAAAAt TLSv1.2 ECDHE-RSA-AES256-SHA384 1272 4270 -% 1321599 4664 316133 140 0 0 192.168.254.143 CH - [2015-05-27 17:23:05.640199] "GET /EMail/preferences.aspx HTTP/1.1" 200 7129 "https://www.example.com/EMail/changePassword.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "d70c1fe2.5231857d07f48" Vi@k6awxQzZrjFeGT8gAAAAV TLSv1.2 ECDHE-RSA-AES256-SHA384 598 7642 -% 1457498 2962 451190 2522 0 0 192.168.146.78 CH - [2015-05-27 18:34:44.432130] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7350 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8a4c75fc.52317ffe2aaf9" Vi@1tKwxQzZrjFeHQOcAAABv TLSv1.2 ECDHE-RSA-AES128-SHA256 799 11795 -% 1062156 4404 54874 2150 0 0 192.168.146.78 CH - [2015-05-27 18:34:47.512064] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8a4c75fc.52317ffe2aaf9" Vi@1t6wxQzZrjFeHQOgAAAB1 TLSv1.2 ECDHE-RSA-AES128-SHA256 678 453 -% 1067910 3147 64004 175 0 0 192.168.146.78 CH - [2015-05-27 18:34:48.606014] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8a4c75fc.52317ffe2aaf9" Vi@1uKwxQzZrjFeHQOkAAAB2 TLSv1.2 ECDHE-RSA-AES128-SHA256 534 3882 -% 1094752 3611 88458 1932 0 0 192.168.146.78 CH - [2015-05-27 18:34:49.822594] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8a4c75fc.52317ffe2aaf9" Vi@1uawxQzZrjFeHQOoAAAB3 TLSv1.2 ECDHE-RSA-AES128-SHA256 486 4202 -% 966015 3101 954936 7303 0 0 192.168.146.78 CH - [2015-05-27 18:34:49.973809] "GET /EMail/overview.aspx HTTP/1.1" 200 5306 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8a4c75fc.52317ffe2aaf9" Vi@1uawxQzZrjFeGUhgAAAAp TLSv1.2 ECDHE-RSA-AES128-SHA256 772 5963 -% 1009989 2749 2947 3498 0 0 192.168.146.78 CH - [2015-05-27 18:34:49.958245] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8a4c75fc.52317ffe2aaf9" Vi@1uawxQzZrjFeGUhcAAAA8 TLSv1.2 ECDHE-RSA-AES128-SHA256 804 9683 -% 1767530 3924 756203 2747 0 0 192.168.146.78 CH - [2015-05-27 18:34:52.453807] "GET /EMail/inbox.aspx HTTP/1.1" 200 51713 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8a4c75fc.52317ffe2aaf9" Vi@1vKwxQzZrjFeGUhkAAAA6 TLSv1.2 ECDHE-RSA-AES128-SHA256 486 52881 -% 2325091 2141 959930 20950 0 0 192.168.146.78 CH - [2015-05-27 18:34:58.643987] "GET /EMail/message.aspx?&mailId=3912_14&folderId=2634_79&mailPos=1 HTTP/1.1" 200 16796 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8a4c75fc.52317ffe2aaf9" Vi@1wqwxQzZrjFeGUhsAAAAf TLSv1.2 ECDHE-RSA-AES128-SHA256 534 17465 -% 1327551 4872 289925 30748 0 0 192.168.146.78 CH - [2015-05-27 18:35:40.332882] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8a4c75fc.52317ffe2aaf9" Vi@17KwxQzZrjFeGUiQAAAA3 TLSv1.2 ECDHE-RSA-AES128-SHA256 804 9683 -% 1593783 2334 582149 4523 0 0 192.168.146.78 CH - [2015-05-27 18:35:40.286547] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 51705 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8a4c75fc.52317ffe2aaf9" Vi@17KwxQzZrjFeGUiMAAAAW TLSv1.2 ECDHE-RSA-AES128-SHA256 788 53042 -% 2521828 3537 973649 21768 0 0 192.168.146.78 CH - [2015-05-27 18:35:45.133798] "GET /EMail/message.aspx?&mailId=3911_24&folderId=2634_79&mailPos=0 HTTP/1.1" 200 18209 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8a4c75fc.52317ffe2aaf9" Vi@18awxQzZrjFeGUiUAAAAw TLSv1.2 ECDHE-RSA-AES128-SHA256 550 18889 -% 1292630 4857 249332 36268 0 0 192.168.146.78 CH - [2015-05-27 18:54:12.445611] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8a4c75fc.52317ffe2aaf9" Vi@6RKwxQzZrjFeGUsAAAAAh TLSv1.2 ECDHE-RSA-AES128-SHA256 879 13371 -% 2056591 3588 43598 4512 0 0 192.168.146.78 CH - [2015-05-27 18:54:12.443002] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 51696 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8a4c75fc.52317ffe2aaf9" Vi@6RKwxQzZrjFeGUr8AAAAl TLSv1.2 ECDHE-RSA-AES128-SHA256 863 56730 -% 2534439 3520 43527 27404 0 0 192.168.146.78 CH - [2015-05-27 19:05:33.540133] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8a4c75fc.52317ffe2aaf9" Vi@87awxQzZrjFeGUyYAAAAB TLSv1.2 ECDHE-RSA-AES128-SHA256 879 13371 -% 1777379 3889 762982 5253 0 0 192.168.146.78 CH - [2015-05-27 19:05:33.545780] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 51697 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8a4c75fc.52317ffe2aaf9" Vi@87awxQzZrjFeGUycAAAAz TLSv1.2 ECDHE-RSA-AES128-SHA256 863 56730 -% 2334332 3217 828890 20968 0 0 192.168.146.78 CH - [2015-05-27 19:05:39.159467] "GET /EMail/message.aspx?&mailId=3912_14&folderId=2634_79&mailPos=1 HTTP/1.1" 200 16795 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8a4c75fc.52317ffe2aaf9" Vi@886wxQzZrjFeGUykAAAA5 TLSv1.2 ECDHE-RSA-AES128-SHA256 550 17465 -% 1344750 4862 304357 33601 0 0 192.168.186.46 CH - [2015-05-27 19:19:01.787493] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@drinksystems.com HTTP/1.1" 200 7911 "-" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "564cceac.5231a1cbc7365" Vi-AFawxQzZrjFeGU5sAAAAr TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1046 12316 -% 856871 6488 845385 3586 3 0 192.168.186.46 CH - [2015-05-27 19:19:03.571915] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@drinksystems.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "564cceac.5231a1cbc7365" Vi-AF6wxQzZrjFeGU5wAAAAk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 784 2421 13% 987103 9382 974644 177 3 0 192.168.186.46 CH - [2015-05-27 19:19:04.219005] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@drinksystems.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "564cceac.5231a1cbc7365" Vi-AGKwxQzZrjFeHQZMAAABg TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1037 2014 22% 900483 9615 888263 176 3 0 192.168.186.46 CH - [2015-05-27 19:19:04.265212] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@drinksystems.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "564cceac.5231a1cbc7365" Vi-AGKwxQzZrjFeGU58AAAAV TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1027 7799 22% 889499 8930 875714 148 3 0 192.168.186.46 CH - [2015-05-27 19:19:04.249893] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@drinksystems.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "564cceac.5231a1cbc7365" Vi-AGKwxQzZrjFeGU50AAAAH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1024 1823 -% 961398 11612 947834 141 3 0 192.168.186.46 CH - [2015-05-27 19:19:04.256102] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@drinksystems.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "564cceac.5231a1cbc7365" Vi-AGKwxQzZrjFeGU54AAAAt TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1037 732 56% 1088105 11325 74933 155 3 0 192.168.186.46 CH - [2015-05-27 19:19:05.872699] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@drinksystems.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "564cceac.5231a1cbc7365" Vi-AGawxQzZrjFeGU6AAAAA1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 773 1792 -% 942010 9410 931047 143 3 0 192.168.186.46 CH - [2015-05-27 19:21:20.638386] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@drinksystems.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "564cceac.5231a1cbc7365" Vi-AoKwxQzZrjFeGU7UAAAAR TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1703 470 -% 1000671 15059 982712 192 3 0 192.168.186.46 CH - [2015-05-27 19:21:22.291697] "GET /EMail/error.aspx HTTP/1.1" 200 3763 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@drinksystems.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "564cceac.5231a1cbc7365" Vi-AoqwxQzZrjFeGU7cAAAAh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 854 4185 -% 598051 9596 578834 7929 3 0 192.168.186.46 CH - [2015-05-27 19:22:40.921320] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@drinksystems.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "564cceac.5231a1cbc7365" Vi-A8KwxQzZrjFeHQaIAAAB3 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1703 502 -% 1591518 12576 576181 147 3 0 192.168.186.46 CH - [2015-05-27 19:22:43.086724] "GET /EMail/login.aspx?username=john.smith@drinksystems.com HTTP/1.1" 200 7365 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@drinksystems.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "564cceac.5231a1cbc7365" Vi-A86wxQzZrjFeHQaQAAAB0 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 886 7787 -% 983618 10093 969187 2552 3 0 192.168.186.46 CH - [2015-05-27 19:22:45.427247] "GET /EMail/scripts/variables_fr.js HTTP/1.1" 200 1679 "https://www.example.com/EMail/login.aspx?username=john.smith@drinksystems.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "564cceac.5231a1cbc7365" Vi-A9awxQzZrjFeHQaUAAAB5 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 761 2180 27% 895918 9618 884506 135 3 0 192.168.186.46 CH - [2015-05-27 19:23:04.348038] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@drinksystems.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "564cceac.5231a1cbc7365" Vi-BCKwxQzZrjFeGU8YAAAA4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1575 559 -% 1476248 11117 462518 191 3 0 192.168.186.46 CH - [2015-05-27 19:23:06.228116] "GET /EMail/main.aspx HTTP/1.1" 200 3390 "https://www.example.com/EMail/login.aspx?username=john.smith@drinksystems.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "564cceac.5231a1cbc7365" Vi-BCqwxQzZrjFeGU8cAAAAm TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 837 3806 -% 937065 7505 927047 1184 3 0 192.168.186.46 CH - [2015-05-27 19:23:08.332242] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "564cceac.5231a1cbc7365" Vi-BDKwxQzZrjFeGU8gAAAAp TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 775 4128 -% 868670 9597 846117 11498 3 0 192.168.186.46 CH - [2015-05-27 19:23:09.702607] "GET /EMail/overview.aspx HTTP/1.1" 200 5290 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "564cceac.5231a1cbc7365" Vi-BDawxQzZrjFeGU8sAAAA6 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1032 5850 -% 1351695 6003 342732 1698 3 0 192.168.186.46 CH - [2015-05-27 19:23:09.696404] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8532 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "564cceac.5231a1cbc7365" Vi-BDawxQzZrjFeGU8oAAAA8 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1058 9324 -% 2485936 6485 471336 2792 3 0 192.168.186.46 CH - [2015-05-27 19:23:11.662278] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "564cceac.5231a1cbc7365" Vi-BD6wxQzZrjFeGU8wAAAAo TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 731 1248 -% 922401 9363 911041 234 3 0 192.168.186.46 CH - [2015-05-27 19:23:12.594308] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "564cceac.5231a1cbc7365" Vi-BEKwxQzZrjFeGU84AAAA9 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 773 1260 -% 841807 10192 829438 189 3 0 192.168.186.46 CH - [2015-05-27 19:23:24.337309] "GET /EMail/inbox.aspx HTTP/1.1" 200 8396 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "564cceac.5231a1cbc7365" Vi-BHKwxQzZrjFeHQacAAAB4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1345 8985 -% 1186297 12047 169372 2984 3 0 192.168.186.46 CH - [2015-05-27 19:23:26.110535] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "564cceac.5231a1cbc7365" Vi-BHqwxQzZrjFeHQagAAAB@ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 723 539 -% 943538 9645 931771 178 3 0 192.168.186.46 CH - [2015-05-27 19:23:26.738108] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "564cceac.5231a1cbc7365" Vi-BHqwxQzZrjFeHQakAAAB9 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 981 665 -% 884060 6075 876173 187 3 0 192.168.186.46 CH - [2015-05-27 19:23:26.743974] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "564cceac.5231a1cbc7365" Vi-BHqwxQzZrjFeHQaoAAABA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 981 1951 -% 1028662 5642 21616 129 3 0 192.168.186.46 CH - [2015-05-27 19:23:31.033915] "GET /EMail/message.aspx?&mailId=3912_15&folderId=3499_41&mailPos=0 HTTP/1.1" 200 14690 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "564cceac.5231a1cbc7365" Vi-BI6wxQzZrjFeHQasAAABB TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 820 15171 -% 1243287 11375 200710 28866 3 0 192.168.186.46 CH - [2015-05-27 19:23:48.111372] "GET /EMail/main.aspx HTTP/1.1" 200 3390 "https://www.example.com/EMail/login.aspx?username=john.smith@drinksystems.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "564cceac.5231a1cbc7365" Vi-BNKwxQzZrjFeHQa0AAABx TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1373 3944 -% 948617 9577 936481 1156 3 0 192.168.186.46 CH - [2015-05-27 19:23:49.701773] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "564cceac.5231a1cbc7365" Vi-BNawxQzZrjFeHQa4AAAB8 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 775 4128 -% 1048204 9127 30956 6642 3 0 192.168.186.46 CH - [2015-05-27 19:23:50.559235] "GET /EMail/message.aspx?&mailId=3912_15&folderId=3499_41&mailPos=0 HTTP/1.1" 200 14695 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "564cceac.5231a1cbc7365" Vi-BNqwxQzZrjFeGU9UAAAA3 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1075 15314 -% 1283952 10888 240105 30756 3 0 192.168.186.46 CH - [2015-05-27 19:23:50.552901] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8532 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "564cceac.5231a1cbc7365" Vi-BNqwxQzZrjFeGU9QAAAAa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1058 9324 -% 1560232 10568 539186 4476 3 0 192.168.186.46 CH - [2015-05-27 19:26:17.601467] "GET /EMail/inbox.aspx HTTP/1.1" 200 8385 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "564cceac.5231a1cbc7365" Vi-ByawxQzZrjFeGU-AAAAAL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1420 12662 -% 1204082 9529 188064 4273 3 0 192.168.186.46 CH - [2015-05-27 19:26:19.884365] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "564cceac.5231a1cbc7365" Vi-By6wxQzZrjFeGU-EAAAAA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 981 2016 -% 975999 5736 968771 165 3 0 192.168.234.147 CH - [2015-05-27 20:41:50.055183] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Linux; Android 5.0.1; HTC_One_M8/4.19.166.3 Build/LRX22C) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/33.0.0.0 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8746765a.52315e8bc9840" Vi-TfqwxQzZrjFeGVmAAAAAb TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1968 4381 -% 1658047 13856 641325 303 6 0 192.168.234.147 CH - [2015-05-27 20:41:51.864212] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7354 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Linux; Android 5.0.1; HTC_One_M8/4.19.166.3 Build/LRX22C) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/33.0.0.0 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8746765a.52315e8bc9840" Vi-Tf6wxQzZrjFeGVmEAAAAq TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1065 7776 -% 899749 10358 883310 3714 6 0 192.168.234.147 CH - [2015-05-27 20:41:52.992375] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Linux; Android 5.0.1; HTC_One_M8/4.19.166.3 Build/LRX22C) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/33.0.0.0 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8746765a.52315e8bc9840" Vi-TgKwxQzZrjFeGVmMAAAAe TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1066 2421 13% 997123 9884 983887 212 6 0 192.168.236.93 CH - [2015-05-27 20:54:08.636417] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7929 "https://richzhh.example.com/cp/applink/mail/LoadMessageContent?cKey=1445975631052-16157&iframeID=x-mail-msg-iframe-box-1445975653760&cw=830" "Mozilla/5.0 (Windows NT 10.0; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "3c212f6b.5231b70e40e01" Vi-WYKwxQzZrjFeGVssAAAAY TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 857 12529 -% 928936 2019 922340 3838 0 0 192.168.236.93 CH - [2015-05-27 20:54:09.662101] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 10.0; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "3c212f6b.5231b70e40e01" Vi-WYawxQzZrjFeGVswAAAAQ TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 496 2421 13% 1023209 1874 19556 183 0 0 192.168.236.93 CH - [2015-05-27 20:54:11.080445] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 10.0; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "3c212f6b.5231b70e40e01" Vi-WY6wxQzZrjFeGVs0AAAAN TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 511 1685 -% 421048 4051 415922 131 0 0 192.168.236.93 CH - [2015-05-27 20:54:11.569293] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/css/NNstyle.css" "Mozilla/5.0 (Windows NT 10.0; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "3c212f6b.5231b70e40e01" Vi-WY6wxQzZrjFeGVs4AAAAZ TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 470 1792 -% 714603 1814 711807 238 0 0 192.168.168.59 CH - [2015-05-27 21:27:12.440620] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "a694a727.5231be722812c" Vi-eIKwxQzZrjFeGV@QAAAAG TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 572 8359 -% 1118279 1844 115265 203 0 0 192.168.226.14 CH - [2015-05-27 22:10:47.305719] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 502 4087 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "4ae1430c.5231c82fe2df7" Vi-oV6wxQzZrjFeGWU4AAAAs TLSv1.2 ECDHE-RSA-AES256-SHA384 915 9073 -% 30035157 3904 0 0 3 0 192.168.226.14 CH - [2015-05-27 22:11:08.278726] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 502 4087 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "7377ac2.5231c843e33c6" Vi-obKwxQzZrjFeGWVIAAAAv TLSv1.2 ECDHE-RSA-AES256-SHA384 872 5385 -% 30035267 3868 0 0 3 0 192.168.117.184 CH - [2015-05-27 23:08:47.402211] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "c2223878.5231d526c3ce3" Vi-176wxQzZrjFeGWxoAAAA7 TLSv1.2 ECDHE-RSA-AES256-SHA384 659 8674 -% 1119021 1303 116843 154 0 0 192.168.226.14 CH - [2015-05-28 02:05:52.859215] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7356 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "253c4ab.5231fcbbfd84f" VjAfcKwxQzZrjHGWKLsAAABl TLSv1.2 ECDHE-RSA-AES256-SHA384 915 11907 -% 881014 4037 869813 5165 3 0 192.168.226.14 CH - [2015-05-28 02:05:54.281316] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "253c4ab.5231fcbbfd84f" VjAfcqwxQzZrjHGWKLwAAABm TLSv1.2 ECDHE-RSA-AES256-SHA384 646 2559 13% 949713 5068 941834 189 3 0 192.168.226.14 CH - [2015-05-28 02:05:54.499341] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "253c4ab.5231fcbbfd84f" VjAfcqwxQzZrjHGWKMEAAABr TLSv1.2 ECDHE-RSA-AES256-SHA384 948 1979 -% 918281 5177 911549 139 3 0 192.168.226.14 CH - [2015-05-28 02:05:54.475275] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "253c4ab.5231fcbbfd84f" VjAfcqwxQzZrjHGWKMAAAABq TLSv1.2 ECDHE-RSA-AES256-SHA384 948 8053 22% 958555 2888 952413 89 3 0 192.168.226.14 CH - [2015-05-28 02:05:54.409093] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "253c4ab.5231fcbbfd84f" VjAfcqwxQzZrjHGVk-EAAAA2 TLSv1.2 ECDHE-RSA-AES256-SHA384 964 2208 22% 1028159 4916 21694 97 3 0 192.168.226.14 CH - [2015-05-28 02:05:54.451132] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "253c4ab.5231fcbbfd84f" VjAfcqwxQzZrjHGWKL4AAABo TLSv1.2 ECDHE-RSA-AES256-SHA384 964 928 56% 1028350 4872 22015 128 3 0 192.168.226.14 CH - [2015-05-28 02:05:54.451558] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "253c4ab.5231fcbbfd84f" VjAfcqwxQzZrjHGWKL8AAABp TLSv1.2 ECDHE-RSA-AES256-SHA384 964 4485 23% 1032514 4852 25439 85 3 0 192.168.226.14 CH - [2015-05-28 02:05:55.943291] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "253c4ab.5231fcbbfd84f" VjAfc6wxQzZrjHGWKMIAAABs TLSv1.2 ECDHE-RSA-AES256-SHA384 630 1898 -% 1013697 4470 6993 177 3 0 192.168.226.14 CH - [2015-05-28 02:06:17.373286] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "253c4ab.5231fcbbfd84f" VjAfiawxQzZrjHGWKMUAAAB0 TLSv1.2 ECDHE-RSA-AES256-SHA384 1261 662 -% 954002 7314 943384 194 3 0 192.168.226.14 CH - [2015-05-28 02:06:18.529160] "GET /EMail/main.aspx HTTP/1.1" 200 3388 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "253c4ab.5231fcbbfd84f" VjAfiqwxQzZrjHGWKMYAAAB1 TLSv1.2 ECDHE-RSA-AES256-SHA384 710 3898 -% 949935 5034 940773 1881 3 0 192.168.226.14 CH - [2015-05-28 02:06:19.779147] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "253c4ab.5231fcbbfd84f" VjAfi6wxQzZrjHGWKMcAAAB2 TLSv1.2 ECDHE-RSA-AES256-SHA384 662 4218 -% 1061082 3347 45305 10402 3 0 192.168.226.14 CH - [2015-05-28 02:06:19.925360] "GET /EMail/overview.aspx HTTP/1.1" 200 5291 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "253c4ab.5231fcbbfd84f" VjAfi6wxQzZrjHGWKMkAAAB4 TLSv1.2 ECDHE-RSA-AES256-SHA384 980 5995 -% 1192611 2955 185036 2829 3 0 192.168.226.14 CH - [2015-05-28 02:06:19.901159] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "253c4ab.5231fcbbfd84f" VjAfi6wxQzZrjHGWKMgAAAB3 TLSv1.2 ECDHE-RSA-AES256-SHA384 996 9843 -% 2031827 5333 17064 2765 3 0 192.168.226.14 CH - [2015-05-28 02:06:21.466788] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "253c4ab.5231fcbbfd84f" VjAfjawxQzZrjHGWKMsAAAB5 TLSv1.2 ECDHE-RSA-AES256-SHA384 614 1354 -% 975972 4467 968607 223 3 0 192.168.226.14 CH - [2015-05-28 02:06:22.119426] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "253c4ab.5231fcbbfd84f" VjAfjqwxQzZrjHGWKMwAAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 646 1370 -% 851720 5034 844420 202 3 0 192.168.226.14 CH - [2015-05-28 02:06:34.264159] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "253c4ab.5231fcbbfd84f" VjAfmqwxQzZrjHGWKM8AAABC TLSv1.2 ECDHE-RSA-AES256-SHA384 1000 646 -% 955935 5581 948265 190 3 0 192.168.226.14 CH - [2015-05-28 02:06:35.402257] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "253c4ab.5231fcbbfd84f" VjAfm6wxQzZrjHGWKNEAAABA TLSv1.2 ECDHE-RSA-AES256-SHA384 662 815 75% 921100 5036 913884 331 3 0 192.168.226.14 CH - [2015-05-28 02:06:36.600586] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "https://www.example.com/EMail/index.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "253c4ab.5231fcbbfd84f" VjAfnKwxQzZrjHGWKNIAAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 678 373 -% 993860 4306 987698 178 3 0 192.168.226.14 CH - [2015-05-28 02:06:37.758169] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "https://www.example.com/EMail/index.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "253c4ab.5231fcbbfd84f" VjAfnawxQzZrjHGWKNMAAABG TLSv1.2 ECDHE-RSA-AES256-SHA384 662 7850 -% 980526 4282 970730 3655 3 0 192.168.144.21 CH - [2015-05-28 06:59:43.531436] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7369 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b431c38c.52323e69e8dac" VjBkT6wxQzZrjHGWMosAAABL TLSv1.2 ECDHE-RSA-AES256-SHA384 950 11939 -% 1282500 6036 260936 3509 6 0 192.168.144.21 CH - [2015-05-28 06:59:44.927059] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b431c38c.52323e69e8dac" VjBkUKwxQzZrjHGWMowAAABM TLSv1.2 ECDHE-RSA-AES256-SHA384 710 2575 14% 793942 5444 785551 220 6 0 192.168.144.21 CH - [2015-05-28 06:59:44.976450] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b431c38c.52323e69e8dac" VjBkUKwxQzZrjHGVmFMAAAAD TLSv1.2 ECDHE-RSA-AES256-SHA384 1051 4485 23% 820960 7103 811455 193 6 0 192.168.144.21 CH - [2015-05-28 06:59:44.987329] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b431c38c.52323e69e8dac" VjBkUKwxQzZrjHGWMo4AAABO TLSv1.2 ECDHE-RSA-AES256-SHA384 1067 1979 -% 985506 5009 978547 149 6 0 192.168.144.21 CH - [2015-05-28 06:59:44.977911] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b431c38c.52323e69e8dac" VjBkUKwxQzZrjHGWMo0AAABN TLSv1.2 ECDHE-RSA-AES256-SHA384 1019 2208 22% 1077159 5471 69116 201 6 0 192.168.144.21 CH - [2015-05-28 06:59:44.987305] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b431c38c.52323e69e8dac" VjBkUKwxQzZrjHGVmFQAAAAG TLSv1.2 ECDHE-RSA-AES256-SHA384 1019 928 56% 1247303 5781 239621 403 6 0 192.168.144.21 CH - [2015-05-28 06:59:44.987487] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b431c38c.52323e69e8dac" VjBkUKwxQzZrjHGVmFUAAAAH TLSv1.2 ECDHE-RSA-AES256-SHA384 1051 8781 22% 1320141 5294 308636 208 6 0 192.168.144.21 CH - [2015-05-28 06:59:46.453105] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b431c38c.52323e69e8dac" VjBkUqwxQzZrjHGVmFYAAAAE TLSv1.2 ECDHE-RSA-AES256-SHA384 758 1898 -% 851058 9196 839524 135 6 0 192.168.144.21 CH - [2015-05-28 06:59:47.101915] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b431c38c.52323e69e8dac" VjBkU6wxQzZrjHGVmFcAAAAI TLSv1.2 ECDHE-RSA-AES256-SHA384 758 2186 -% 918906 8865 908171 149 6 0 192.168.144.21 CH - [2015-05-28 06:59:48.128564] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b431c38c.52323e69e8dac" VjBkVKwxQzZrjHGVmFgAAAAK TLSv1.2 ECDHE-RSA-AES256-SHA384 902 469 -% 1094369 11197 80201 239 6 0 192.168.144.21 CH - [2015-05-28 06:59:49.235600] "GET /EMail/main.aspx HTTP/1.1" 200 3401 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b431c38c.52323e69e8dac" VjBkVawxQzZrjHGVmFkAAAAJ TLSv1.2 ECDHE-RSA-AES256-SHA384 758 3914 -% 812897 8104 801096 1517 6 0 192.168.144.21 CH - [2015-05-28 06:59:50.101200] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b431c38c.52323e69e8dac" VjBkVqwxQzZrjHGVmFoAAAAL TLSv1.2 ECDHE-RSA-AES256-SHA384 710 4234 -% 1068485 9996 49301 7156 6 0 192.168.144.21 CH - [2015-05-28 06:59:50.116804] "GET /EMail/overview.aspx HTTP/1.1" 200 5303 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b431c38c.52323e69e8dac" VjBkVqwxQzZrjHGWMo8AAABP TLSv1.2 ECDHE-RSA-AES256-SHA384 710 5818 -% 1191397 5465 180792 2796 6 0 192.168.144.21 CH - [2015-05-28 06:59:50.115294] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b431c38c.52323e69e8dac" VjBkVqwxQzZrjHGVmFsAAAAN TLSv1.2 ECDHE-RSA-AES256-SHA384 726 9666 -% 1867787 9806 851151 3345 6 0 192.168.144.21 CH - [2015-05-28 06:59:51.343918] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b431c38c.52323e69e8dac" VjBkV6wxQzZrjHGWMpAAAABQ TLSv1.2 ECDHE-RSA-AES256-SHA384 726 1354 -% 930621 9129 919245 267 6 0 192.168.144.21 CH - [2015-05-28 06:59:52.037346] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b431c38c.52323e69e8dac" VjBkWKwxQzZrjHGVmF0AAAAO TLSv1.2 ECDHE-RSA-AES256-SHA384 774 1370 -% 1004929 9612 0 153 6 0 192.168.144.21 CH - [2015-05-28 06:59:52.676885] "GET /EMail/inbox.aspx HTTP/1.1" 200 8596 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b431c38c.52323e69e8dac" VjBkWKwxQzZrjHGWMpEAAABR TLSv1.2 ECDHE-RSA-AES256-SHA384 710 9199 -% 1237589 8764 218980 7271 6 0 192.168.144.21 CH - [2015-05-28 06:59:53.981313] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b431c38c.52323e69e8dac" VjBkWawxQzZrjHGWMpIAAABS TLSv1.2 ECDHE-RSA-AES256-SHA384 726 634 -% 924771 13731 908779 267 6 0 192.168.144.21 CH - [2015-05-28 06:59:53.983614] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b431c38c.52323e69e8dac" VjBkWawxQzZrjHGVmF8AAAAR TLSv1.2 ECDHE-RSA-AES256-SHA384 726 634 -% 1016622 8856 5758 147 6 0 192.168.144.21 CH - [2015-05-28 06:59:53.983818] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b431c38c.52323e69e8dac" VjBkWawxQzZrjHGVmGAAAAAS TLSv1.2 ECDHE-RSA-AES256-SHA384 726 1914 -% 1097667 12996 81933 278 6 0 192.168.144.21 CH - [2015-05-28 06:59:55.716332] "GET /EMail/message.aspx?&mailId=3912_18&folderId=1094_6&mailPos=0 HTTP/1.1" 200 13016 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b431c38c.52323e69e8dac" VjBkW6wxQzZrjHGVmGEAAAAT TLSv1.2 ECDHE-RSA-AES256-SHA384 742 13700 -% 1381143 10533 361031 6581 6 0 192.168.144.21 CH - [2015-05-28 06:59:59.239570] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3912_18&folderId=1094_6&attachmentId=2&token=30634443517889843E18 HTTP/1.1" 200 13056 "https://www.example.com/EMail/message.aspx?&mailId=3912_18&folderId=1094_6&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b431c38c.52323e69e8dac" VjBkX6wxQzZrjHGVmGIAAAAQ TLSv1.2 ECDHE-RSA-AES256-SHA384 854 14226 -% 999014 7291 985100 203 6 0 192.168.144.21 CH - [2015-05-28 07:00:13.824268] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3912_18&folderId=1094_6&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b431c38c.52323e69e8dac" VjBkbawxQzZrjHGVmGYAAAAZ TLSv1.2 ECDHE-RSA-AES256-SHA384 1259 598 -% 1242338 10490 230237 153 6 0 192.168.144.21 CH - [2015-05-28 07:00:15.079059] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7290 "https://www.example.com/EMail/message.aspx?&mailId=3912_18&folderId=1094_6&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b431c38c.52323e69e8dac" VjBkb6wxQzZrjHGVmGcAAAAX TLSv1.2 ECDHE-RSA-AES256-SHA384 790 7802 -% 987093 9896 972345 2776 6 0 192.168.144.21 CH - [2015-05-28 07:00:18.151628] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b431c38c.52323e69e8dac" VjBkcqwxQzZrjHGVmGgAAAAY TLSv1.2 ECDHE-RSA-AES256-SHA384 726 453 -% 984103 5985 976466 164 6 0 192.168.144.21 CH - [2015-05-28 07:00:19.148056] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b431c38c.52323e69e8dac" VjBkc6wxQzZrjHGVmGkAAAAa TLSv1.2 ECDHE-RSA-AES256-SHA384 710 815 75% 887823 7128 878591 260 6 0 192.168.144.21 CH - [2015-05-28 07:00:20.098873] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b431c38c.52323e69e8dac" VjBkdKwxQzZrjHGVmGoAAAAb TLSv1.2 ECDHE-RSA-AES256-SHA384 678 373 -% 1002459 9808 0 189 6 0 192.168.144.21 CH - [2015-05-28 07:00:21.113348] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b431c38c.52323e69e8dac" VjBkdawxQzZrjHGVmGsAAAAc TLSv1.2 ECDHE-RSA-AES256-SHA384 662 7866 -% 967763 9413 952982 3448 6 0 192.168.144.21 CH - [2015-05-28 07:00:22.166804] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b431c38c.52323e69e8dac" VjBkdqwxQzZrjHGVmG0AAAAe TLSv1.2 ECDHE-RSA-AES256-SHA384 1083 928 56% 827143 6545 819052 158 6 0 192.168.144.21 CH - [2015-05-28 07:00:22.117975] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b431c38c.52323e69e8dac" VjBkdqwxQzZrjHGVmGwAAAAd TLSv1.2 ECDHE-RSA-AES256-SHA384 774 2575 14% 944749 8699 933860 153 6 0 192.168.144.21 CH - [2015-05-28 07:00:22.176123] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b431c38c.52323e69e8dac" VjBkdqwxQzZrjHGVmG8AAAAf TLSv1.2 ECDHE-RSA-AES256-SHA384 1115 4485 23% 1049458 5114 41701 166 6 0 192.168.144.21 CH - [2015-05-28 07:00:22.175922] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b431c38c.52323e69e8dac" VjBkdqwxQzZrjHGVmG4AAAAg TLSv1.2 ECDHE-RSA-AES256-SHA384 1115 8053 22% 1065628 9079 50034 230 6 0 192.168.144.21 CH - [2015-05-28 07:00:22.163004] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b431c38c.52323e69e8dac" VjBkdqwxQzZrjHGWMpYAAABZ TLSv1.2 ECDHE-RSA-AES256-SHA384 1083 2208 22% 1081271 5441 73811 154 6 0 192.168.144.21 CH - [2015-05-28 07:00:22.175905] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b431c38c.52323e69e8dac" VjBkdqwxQzZrjHGWMpcAAABW TLSv1.2 ECDHE-RSA-AES256-SHA384 1115 454 -% 1118486 5231 111860 156 6 0 192.168.144.21 CH - [2015-05-28 07:00:23.321890] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b431c38c.52323e69e8dac" VjBkd6wxQzZrjHGWMpgAAABa TLSv1.2 ECDHE-RSA-AES256-SHA384 822 261 -% 711743 9102 700920 194 6 0 192.168.186.76 CH - [2015-05-28 07:25:21.852397] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjBqUawxQzZrjHGWM3gAAAB- TLSv1.2 ECDHE-RSA-AES256-SHA384 1031 6651 14% 777892 6994 767684 395 3 0 192.168.186.76 CH - [2015-05-28 07:25:21.924494] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjBqUawxQzZrjHGWM3oAAABB TLSv1.2 ECDHE-RSA-AES256-SHA384 1180 8021 22% 904850 4191 897175 164 3 0 192.168.186.76 CH - [2015-05-28 07:25:21.924471] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjBqUawxQzZrjHGWM3kAAABD TLSv1.2 ECDHE-RSA-AES256-SHA384 1180 4756 23% 1207773 4924 198311 226 3 0 192.168.186.76 CH - [2015-05-28 07:25:27.816150] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjBqV6wxQzZrjHGWM3sAAABC TLSv1.2 ECDHE-RSA-AES256-SHA384 678 1898 -% 974914 4026 969168 167 3 0 192.168.32.7 CH - [2015-05-28 07:28:08.607306] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7377 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4029563c.523244c3ff24a" VjBq@KwxQzZrjHGWM5AAAABV TLSv1.2 ECDHE-RSA-AES128-SHA256 691 11907 -% 1165050 1517 160310 2354 0 0 192.168.32.7 CH - [2015-05-28 07:28:09.978873] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4029563c.523244c3ff24a" VjBq@awxQzZrjHGWM5UAAABe TLSv1.2 ECDHE-RSA-AES128-SHA256 808 1931 -% 870224 1701 867486 203 0 0 192.168.32.7 CH - [2015-05-28 07:28:09.974707] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4029563c.523244c3ff24a" VjBq@awxQzZrjHGWM5MAAABa TLSv1.2 ECDHE-RSA-AES128-SHA256 776 864 56% 883364 2906 879414 156 0 0 192.168.32.7 CH - [2015-05-28 07:28:09.921767] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4029563c.523244c3ff24a" VjBq@awxQzZrjHGWM5EAAABZ TLSv1.2 ECDHE-RSA-AES128-SHA256 486 2527 14% 939007 3308 933899 152 0 0 192.168.32.7 CH - [2015-05-28 07:28:09.974564] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4029563c.523244c3ff24a" VjBq@awxQzZrjHGWM5IAAABW TLSv1.2 ECDHE-RSA-AES128-SHA256 776 2144 22% 948224 3025 943838 176 0 0 192.168.32.7 CH - [2015-05-28 07:28:09.985708] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4029563c.523244c3ff24a" VjBq@awxQzZrjHGWM5YAAABb TLSv1.2 ECDHE-RSA-AES128-SHA256 792 7973 22% 1100286 2185 95511 192 0 0 192.168.32.7 CH - [2015-05-28 07:28:09.978539] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4029563c.523244c3ff24a" VjBq@awxQzZrjHGWM5QAAABd TLSv1.2 ECDHE-RSA-AES128-SHA256 808 4660 23% 1125242 2641 120452 110 0 0 192.168.32.7 CH - [2015-05-28 07:28:11.167437] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4029563c.523244c3ff24a" VjBq@6wxQzZrjHGWM5cAAABc TLSv1.2 ECDHE-RSA-AES128-SHA256 534 1866 -% 914541 3038 910322 203 0 0 192.168.32.7 CH - [2015-05-28 07:28:12.262526] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "255e4a0b.523244c77b87e" VjBq-KwxQzZrjHGWM5gAAABf TLSv1.2 ECDHE-RSA-AES128-SHA256 627 5651 -% 911834 865 910105 221 0 0 192.168.32.7 CH - [2015-05-28 07:28:22.186088] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4029563c.523244c3ff24a" VjBrBqwxQzZrjHGWM5oAAABh TLSv1.2 ECDHE-RSA-AES128-SHA256 968 630 -% 1050746 4912 44977 234 0 0 192.168.32.7 CH - [2015-05-28 07:28:23.249428] "GET /EMail/main.aspx HTTP/1.1" 200 3409 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4029563c.523244c3ff24a" VjBrB6wxQzZrjHGWM5sAAABi TLSv1.2 ECDHE-RSA-AES128-SHA256 534 3898 -% 862550 3074 856338 2161 0 0 192.168.32.7 CH - [2015-05-28 07:28:24.229598] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4029563c.523244c3ff24a" VjBrCKwxQzZrjHGWM54AAABl TLSv1.2 ECDHE-RSA-AES128-SHA256 760 5963 -% 964726 1771 959755 2478 0 0 192.168.32.7 CH - [2015-05-28 07:28:24.192667] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4029563c.523244c3ff24a" VjBrCKwxQzZrjHGWM5wAAABj TLSv1.2 ECDHE-RSA-AES128-SHA256 470 4202 -% 1042470 3060 27406 10870 0 0 192.168.32.7 CH - [2015-05-28 07:28:24.217925] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4029563c.523244c3ff24a" VjBrCKwxQzZrjHGWM50AAABk TLSv1.2 ECDHE-RSA-AES128-SHA256 792 9683 -% 1800393 3055 786504 4487 0 0 192.168.32.7 CH - [2015-05-28 07:28:25.235717] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4029563c.523244c3ff24a" VjBrCawxQzZrjHGWM58AAABm TLSv1.2 ECDHE-RSA-AES128-SHA256 502 1322 -% 852895 2041 849976 199 0 0 192.168.32.7 CH - [2015-05-28 07:28:26.083319] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4029563c.523244c3ff24a" VjBrCqwxQzZrjHGWM6EAAABq TLSv1.2 ECDHE-RSA-AES128-SHA256 534 1338 -% 574111 3010 569947 216 0 0 192.168.32.7 CH - [2015-05-28 07:28:26.938139] "GET /EMail/inbox.aspx HTTP/1.1" 200 8715 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4029563c.523244c3ff24a" VjBrCqwxQzZrjHGWM6IAAABo TLSv1.2 ECDHE-RSA-AES128-SHA256 470 9263 -% 1055921 2007 50129 2886 0 0 192.168.32.7 CH - [2015-05-28 07:28:28.034965] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4029563c.523244c3ff24a" VjBrDKwxQzZrjHGWM6YAAABu TLSv1.2 ECDHE-RSA-AES128-SHA256 486 602 -% 835873 1963 832889 272 0 0 192.168.32.7 CH - [2015-05-28 07:28:28.034798] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4029563c.523244c3ff24a" VjBrDKwxQzZrjHGWM6QAAABs TLSv1.2 ECDHE-RSA-AES128-SHA256 486 602 -% 897575 2004 894544 169 0 0 192.168.32.7 CH - [2015-05-28 07:28:28.034803] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4029563c.523244c3ff24a" VjBrDKwxQzZrjHGWM6UAAABt TLSv1.2 ECDHE-RSA-AES128-SHA256 486 1882 -% 1029135 2855 25287 188 0 0 192.168.169.43 CH - [2015-05-28 07:28:29.542423] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7368 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBrDawxQzZrjHGWM6cAAABn TLSv1.2 ECDHE-RSA-AES256-SHA384 733 11939 -% 907816 1929 902904 2261 0 0 192.168.32.7 CH - [2015-05-28 07:28:30.002089] "GET /EMail/message.aspx?&mailId=3912_13&folderId=3232_82&mailPos=0 HTTP/1.1" 200 11213 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4029563c.523244c3ff24a" VjBrDqwxQzZrjHGWM6gAAABv TLSv1.2 ECDHE-RSA-AES128-SHA256 518 11828 -% 1383789 4575 355467 22813 0 0 192.168.169.43 CH - [2015-05-28 07:28:30.550323] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBrDqwxQzZrjHGWM6kAAABx TLSv1.2 ECDHE-RSA-AES256-SHA384 502 2575 14% 1010344 2217 6156 444 0 0 192.168.169.43 CH - [2015-05-28 07:28:30.624379] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBrDqwxQzZrjHGVmNUAAAAN TLSv1.2 ECDHE-RSA-AES256-SHA384 802 2208 22% 937684 3054 933687 125 0 0 192.168.169.43 CH - [2015-05-28 07:28:30.624391] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBrDqwxQzZrjHGVmNYAAAAL TLSv1.2 ECDHE-RSA-AES256-SHA384 850 1979 -% 974950 1886 972284 145 0 0 192.168.169.43 CH - [2015-05-28 07:28:30.624151] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBrDqwxQzZrjHGVmNQAAAAJ TLSv1.2 ECDHE-RSA-AES256-SHA384 834 4788 23% 990741 3039 985793 97 0 0 192.168.169.43 CH - [2015-05-28 07:28:30.624238] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBrDqwxQzZrjHGWM6oAAABw TLSv1.2 ECDHE-RSA-AES256-SHA384 802 928 56% 1034478 3068 30229 171 0 0 192.168.169.43 CH - [2015-05-28 07:28:30.631527] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBrDqwxQzZrjHGWM6sAAABz TLSv1.2 ECDHE-RSA-AES256-SHA384 834 8781 22% 1227225 3477 219986 161 0 0 192.168.169.43 CH - [2015-05-28 07:28:32.019080] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBrEKwxQzZrjHGWM6wAAABy TLSv1.2 ECDHE-RSA-AES256-SHA384 534 1898 -% 861408 3022 857528 174 0 0 192.168.32.7 CH - [2015-05-28 07:28:33.094626] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3912_13&folderId=3232_82&attachmentId=2&token=34602836664133637E18 HTTP/1.1" 200 48618 "https://www.example.com/EMail/message.aspx?&mailId=3912_13&folderId=3232_82&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4029563c.523244c3ff24a" VjBrEawxQzZrjHGWM60AAAB0 TLSv1.2 ECDHE-RSA-AES128-SHA256 614 51173 -% 1170789 6459 136286 176 0 0 192.168.169.43 CH - [2015-05-28 07:28:39.773594] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBrF6wxQzZrjHGWM7AAAAB2 TLSv1.2 ECDHE-RSA-AES256-SHA384 850 2379 -% 831349 2283 828356 154 0 0 192.168.169.43 CH - [2015-05-28 07:28:42.254600] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBrGqwxQzZrjHGWM7EAAAB3 TLSv1.2 ECDHE-RSA-AES256-SHA384 678 469 -% 917412 5303 911099 272 0 0 192.168.169.43 CH - [2015-05-28 07:28:43.199703] "GET /EMail/main.aspx HTTP/1.1" 200 3400 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBrG6wxQzZrjHGWM7IAAAB5 TLSv1.2 ECDHE-RSA-AES256-SHA384 534 3914 -% 1017255 2743 12646 1198 0 0 192.168.169.43 CH - [2015-05-28 07:28:44.324832] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBrHKwxQzZrjHGWM7QAAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 486 4234 -% 1106589 3445 90809 11427 0 0 192.168.169.43 CH - [2015-05-28 07:28:44.374033] "GET /EMail/overview.aspx HTTP/1.1" 200 5299 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBrHKwxQzZrjHGWM7UAAAB8 TLSv1.2 ECDHE-RSA-AES256-SHA384 802 6011 -% 1271253 3314 265067 2218 0 0 192.168.169.43 CH - [2015-05-28 07:28:44.324750] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBrHKwxQzZrjHGWM7MAAAB4 TLSv1.2 ECDHE-RSA-AES256-SHA384 834 9859 -% 1813779 5298 800249 2860 0 0 192.168.169.43 CH - [2015-05-28 07:28:45.696405] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBrHawxQzZrjHGWM7YAAAB9 TLSv1.2 ECDHE-RSA-AES256-SHA384 518 1354 -% 703861 1923 700771 199 0 0 192.168.169.43 CH - [2015-05-28 07:28:46.195619] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBrHqwxQzZrjHGWM7cAAAB@ TLSv1.2 ECDHE-RSA-AES256-SHA384 550 1370 -% 892030 3738 887317 380 0 0 192.168.169.43 CH - [2015-05-28 07:28:52.642971] "GET /EMail/inbox.aspx HTTP/1.1" 200 8592 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBrJKwxQzZrjHGWM7kAAABD TLSv1.2 ECDHE-RSA-AES256-SHA384 802 9392 -% 1592943 3063 584262 4552 0 0 192.168.169.43 CH - [2015-05-28 07:28:54.302285] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBrJqwxQzZrjHGWM7sAAABB TLSv1.2 ECDHE-RSA-AES256-SHA384 818 827 -% 775603 1694 773127 222 0 0 192.168.169.43 CH - [2015-05-28 07:28:54.295580] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBrJqwxQzZrjHGWM7oAAABC TLSv1.2 ECDHE-RSA-AES256-SHA384 502 634 -% 1009578 2327 6573 176 0 0 192.168.169.43 CH - [2015-05-28 07:28:54.345906] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBrJqwxQzZrjHGWM7wAAABA TLSv1.2 ECDHE-RSA-AES256-SHA384 818 2107 -% 1006892 3090 2992 153 0 0 192.168.169.43 CH - [2015-05-28 07:28:56.319056] "GET /EMail/message.aspx?&mailId=3913_1&folderId=75_57&mailPos=0 HTTP/1.1" 200 12997 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBrKKwxQzZrjHGWM74AAABG TLSv1.2 ECDHE-RSA-AES256-SHA384 518 13599 -% 1868615 2950 859065 5676 0 0 192.168.32.7 CH - [2015-05-28 07:28:59.601763] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/message.aspx?&mailId=3912_13&folderId=3232_82&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4029563c.523244c3ff24a" VjBrK6wxQzZrjHGWM8AAAABH TLSv1.2 ECDHE-RSA-AES128-SHA256 824 2331 -% 953479 3337 948673 359 0 0 192.168.32.7 CH - [2015-05-28 07:29:00.247555] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3912_13&folderId=3232_82&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4029563c.523244c3ff24a" VjBrLKwxQzZrjHGWM8EAAABF TLSv1.2 ECDHE-RSA-AES128-SHA256 1000 566 -% 1396813 4460 391505 162 0 0 192.168.169.43 CH - [2015-05-28 07:29:00.625743] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3913_1&folderId=75_57&attachmentId=2&token=48433353096393359E18 HTTP/1.1" 200 33152 "https://www.example.com/EMail/message.aspx?&mailId=3913_1&folderId=75_57&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBrLKwxQzZrjHGWM8IAAABJ TLSv1.2 ECDHE-RSA-AES256-SHA384 630 35395 -% 1190446 4146 174619 179 0 0 192.168.32.7 CH - [2015-05-28 07:29:01.655111] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7291 "https://www.example.com/EMail/message.aspx?&mailId=3912_13&folderId=3232_82&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4029563c.523244c3ff24a" VjBrLawxQzZrjHGWM8MAAABK TLSv1.2 ECDHE-RSA-AES128-SHA256 566 7770 -% 1041874 3996 33397 3715 0 0 192.168.32.7 CH - [2015-05-28 07:29:04.294074] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4029563c.523244c3ff24a" VjBrMKwxQzZrjHGWM8QAAABL TLSv1.2 ECDHE-RSA-AES128-SHA256 486 437 -% 916521 2395 913340 253 0 0 192.168.32.7 CH - [2015-05-28 07:29:05.221002] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4029563c.523244c3ff24a" VjBrMawxQzZrjHGWM8UAAABM TLSv1.2 ECDHE-RSA-AES128-SHA256 470 767 75% 883353 3249 878989 249 0 0 192.168.32.7 CH - [2015-05-28 07:29:06.204704] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "255e4a0b.523244c77b87e" VjBrMqwxQzZrjHGWM8gAAABP TLSv1.2 ECDHE-RSA-AES128-SHA256 616 1787 -% 4013 2548 70 209 0 0 192.168.32.7 CH - [2015-05-28 07:29:06.185471] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4029563c.523244c3ff24a" VjBrMqwxQzZrjHGWM8cAAABO TLSv1.2 ECDHE-RSA-AES128-SHA256 438 357 -% 927719 3484 923413 194 0 0 192.168.32.7 CH - [2015-05-28 07:29:07.123218] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4029563c.523244c3ff24a" VjBrM6wxQzZrjHGWM8kAAABQ TLSv1.2 ECDHE-RSA-AES128-SHA256 422 7834 -% 1019437 2259 12964 3083 0 0 192.168.32.7 CH - [2015-05-28 07:29:08.194777] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4029563c.523244c3ff24a" VjBrNKwxQzZrjHGWM8sAAABS TLSv1.2 ECDHE-RSA-AES128-SHA256 550 2527 14% 669281 3247 663793 217 0 0 192.168.32.7 CH - [2015-05-28 07:29:08.224243] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4029563c.523244c3ff24a" VjBrNKwxQzZrjHGWM8wAAABX TLSv1.2 ECDHE-RSA-AES128-SHA256 872 422 -% 756996 1883 754388 181 0 0 192.168.32.7 CH - [2015-05-28 07:29:08.225796] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4029563c.523244c3ff24a" VjBrNKwxQzZrjHGWM80AAABY TLSv1.2 ECDHE-RSA-AES128-SHA256 856 7973 22% 865518 1949 860321 212 0 0 192.168.32.7 CH - [2015-05-28 07:29:08.227498] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4029563c.523244c3ff24a" VjBrNKwxQzZrjHGWM84AAABV TLSv1.2 ECDHE-RSA-AES128-SHA256 856 4405 23% 919371 1879 916086 156 0 0 192.168.32.7 CH - [2015-05-28 07:29:08.228020] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4029563c.523244c3ff24a" VjBrNKwxQzZrjHGWM88AAABT TLSv1.2 ECDHE-RSA-AES128-SHA256 824 2144 22% 1148770 2166 145262 214 0 0 192.168.32.7 CH - [2015-05-28 07:29:08.228755] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4029563c.523244c3ff24a" VjBrNKwxQzZrjHGWM9AAAABU TLSv1.2 ECDHE-RSA-AES128-SHA256 824 864 56% 1227492 1969 224681 198 0 0 192.168.32.7 CH - [2015-05-28 07:29:09.527895] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4029563c.523244c3ff24a" VjBrNawxQzZrjHGWM9EAAABe TLSv1.2 ECDHE-RSA-AES128-SHA256 582 245 -% 828011 2091 824384 616 0 0 192.168.169.43 CH - [2015-05-28 07:33:01.862439] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8583 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBsHawxQzZrjHGWM-YAAAB@ TLSv1.2 ECDHE-RSA-AES256-SHA384 802 9376 -% 1209466 2421 201440 4422 0 0 192.168.169.43 CH - [2015-05-28 07:33:01.857019] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBsHawxQzZrjHGWM-UAAAB9 TLSv1.2 ECDHE-RSA-AES256-SHA384 818 9859 -% 1367093 2833 352226 4032 0 0 192.168.169.43 CH - [2015-05-28 07:33:03.131474] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBsH6wxQzZrjHGWM-cAAAB- TLSv1.2 ECDHE-RSA-AES256-SHA384 518 1978 -% 1000598 2204 0 213 0 0 192.168.169.43 CH - [2015-05-28 07:33:05.113429] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBsIawxQzZrjHGWM-gAAABD TLSv1.2 ECDHE-RSA-AES256-SHA384 774 405 -% 1486749 6097 479846 240 0 0 192.168.169.43 CH - [2015-05-28 07:33:06.623426] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7290 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBsIqwxQzZrjHGWM-kAAABB TLSv1.2 ECDHE-RSA-AES256-SHA384 534 7802 -% 1070367 4227 61966 3119 0 0 192.168.169.43 CH - [2015-05-28 07:33:08.502133] "GET /EMail/trash.aspx?dir=desc HTTP/1.1" 200 8676 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBsJKwxQzZrjHGWM-oAAABC TLSv1.2 ECDHE-RSA-AES256-SHA384 486 9279 -% 1372630 3644 365483 2644 0 0 192.168.169.43 CH - [2015-05-28 07:33:08.549886] "GET /EMail/tree.aspx?sNode-sharedTree=treeTrash HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBsJKwxQzZrjHGWM-sAAABA TLSv1.2 ECDHE-RSA-AES256-SHA384 818 9859 -% 1636224 2868 625332 3121 0 0 192.168.169.43 CH - [2015-05-28 07:33:11.532149] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/trash.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBsJ6wxQzZrjHGWM-4AAABG TLSv1.2 ECDHE-RSA-AES256-SHA384 774 405 -% 1141771 10995 129762 259 0 0 192.168.169.43 CH - [2015-05-28 07:33:12.696858] "GET /EMail/trash.aspx?returnedFromDelete=true HTTP/1.1" 200 7278 "https://www.example.com/EMail/trash.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBsKKwxQzZrjHGWM-8AAABH TLSv1.2 ECDHE-RSA-AES256-SHA384 534 7786 -% 1038219 3549 30069 3802 0 0 192.168.169.43 CH - [2015-05-28 07:33:17.206951] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBsLawxQzZrjHGWNAAAAABF TLSv1.2 ECDHE-RSA-AES256-SHA384 502 453 -% 873100 2979 868884 234 0 0 192.168.169.43 CH - [2015-05-28 07:33:18.102142] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBsLqwxQzZrjHGWNAEAAABJ TLSv1.2 ECDHE-RSA-AES256-SHA384 486 815 75% 1231122 2902 226849 479 0 0 192.168.169.43 CH - [2015-05-28 07:33:19.413549] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBsL6wxQzZrjHGWNAIAAABK TLSv1.2 ECDHE-RSA-AES256-SHA384 454 373 -% 939094 3444 934852 205 0 0 192.168.169.43 CH - [2015-05-28 07:33:20.373846] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBsMKwxQzZrjHGWNAMAAABL TLSv1.2 ECDHE-RSA-AES256-SHA384 438 7866 -% 1092739 2281 85301 4439 0 0 192.168.169.43 CH - [2015-05-28 07:33:21.532253] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBsMawxQzZrjHGWNAUAAABN TLSv1.2 ECDHE-RSA-AES256-SHA384 566 2575 14% 650685 1988 647425 169 0 0 192.168.169.43 CH - [2015-05-28 07:33:21.603045] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBsMawxQzZrjHGWNAcAAABO TLSv1.2 ECDHE-RSA-AES256-SHA384 898 8053 22% 919851 2727 913167 204 0 0 192.168.169.43 CH - [2015-05-28 07:33:21.591172] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBsMawxQzZrjHGVmOgAAAAe TLSv1.2 ECDHE-RSA-AES256-SHA384 914 454 -% 1044569 1769 42185 142 0 0 192.168.169.43 CH - [2015-05-28 07:33:21.584993] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBsMawxQzZrjHGVmOcAAAAf TLSv1.2 ECDHE-RSA-AES256-SHA384 866 928 56% 1061625 1943 58789 176 0 0 192.168.169.43 CH - [2015-05-28 07:33:21.584924] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBsMawxQzZrjHGVmOYAAAAd TLSv1.2 ECDHE-RSA-AES256-SHA384 898 4788 23% 1231646 2251 227616 160 0 0 192.168.169.43 CH - [2015-05-28 07:33:21.597057] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBsMawxQzZrjHGWNAYAAABP TLSv1.2 ECDHE-RSA-AES256-SHA384 866 2208 22% 1268324 1914 265536 135 0 0 192.168.169.43 CH - [2015-05-28 07:33:22.976290] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f64bd598.523244d7f6417" VjBsMqwxQzZrjHGWNAgAAABR TLSv1.2 ECDHE-RSA-AES256-SHA384 598 261 -% 882448 3257 878267 196 0 0 192.168.126.131 CH - [2015-05-28 07:44:51.829983] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7355 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu46wxQzZrjHGVmR4AAAAa TLSv1.2 ECDHE-RSA-AES256-SHA384 735 11923 -% 825074 1455 819053 3879 0 0 192.168.126.131 CH - [2015-05-28 07:44:52.761935] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu5KwxQzZrjHGVmR8AAAAb TLSv1.2 ECDHE-RSA-AES256-SHA384 582 261 -% 1326819 2042 323994 203 0 0 192.168.126.131 CH - [2015-05-28 07:44:52.836451] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu5KwxQzZrjHGWNGsAAAB8 TLSv1.2 ECDHE-RSA-AES256-SHA384 900 454 -% 1332087 2012 329349 204 0 0 192.168.126.131 CH - [2015-05-28 07:44:52.771934] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu5KwxQzZrjHGWNGoAAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 943 4142 -% 1417442 1710 415010 159 0 0 192.168.126.131 CH - [2015-05-28 07:44:52.866537] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu5KwxQzZrjHGWNG0AAAB4 TLSv1.2 ECDHE-RSA-AES256-SHA384 932 454 -% 1330363 1822 327941 134 0 0 192.168.126.131 CH - [2015-05-28 07:44:52.865082] "GET /EMail/scripts/variables_en.js HTTP/1.1" 200 2091 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu5KwxQzZrjHGVmSAAAAAc TLSv1.2 ECDHE-RSA-AES256-SHA384 852 2997 24% 1333340 2779 328977 183 0 0 192.168.126.131 CH - [2015-05-28 07:44:52.865383] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu5KwxQzZrjHGWNGwAAAB@ TLSv1.2 ECDHE-RSA-AES256-SHA384 852 1979 -% 1370265 1725 367459 162 0 0 192.168.126.131 CH - [2015-05-28 07:44:54.291557] "GET /EMail/scripts/csshover.htc HTTP/1.1" 200 4255 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu5qwxQzZrjHGWNG4AAAB9 TLSv1.2 ECDHE-RSA-AES256-SHA384 390 4762 -% 760855 2896 757030 170 0 0 192.168.126.131 CH - [2015-05-28 07:44:54.303087] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu5qwxQzZrjHGVmSEAAAAh TLSv1.2 ECDHE-RSA-AES256-SHA384 534 1898 -% 846432 2935 842688 156 0 0 192.168.126.131 CH - [2015-05-28 07:45:00.418644] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu7KwxQzZrjHGVmSMAAAAf TLSv1.2 ECDHE-RSA-AES256-SHA384 852 2379 -% 931509 2938 927685 149 0 0 192.168.126.131 CH - [2015-05-28 07:45:02.153765] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu7qwxQzZrjHGVmSQAAAAd TLSv1.2 ECDHE-RSA-AES256-SHA384 678 469 -% 944255 5914 937426 244 0 0 192.168.126.131 CH - [2015-05-28 07:45:03.123685] "GET /EMail/main.aspx HTTP/1.1" 200 3401 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu76wxQzZrjHGVmSUAAAAg TLSv1.2 ECDHE-RSA-AES256-SHA384 534 3914 -% 1224724 3233 218764 1987 0 0 192.168.126.131 CH - [2015-05-28 07:45:04.478848] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu8KwxQzZrjHGVmSoAAAAo TLSv1.2 ECDHE-RSA-AES256-SHA384 868 454 -% 887154 2798 883463 195 0 0 192.168.126.131 CH - [2015-05-28 07:45:04.475352] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu8KwxQzZrjHGVmSkAAAAn TLSv1.2 ECDHE-RSA-AES256-SHA384 868 454 -% 973770 3299 969456 185 0 0 192.168.126.131 CH - [2015-05-28 07:45:04.414958] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu8KwxQzZrjHGVmSgAAAAm TLSv1.2 ECDHE-RSA-AES256-SHA384 550 261 -% 1034179 3025 30144 178 0 0 192.168.126.131 CH - [2015-05-28 07:45:04.478520] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu8KwxQzZrjHGWNHAAAABD TLSv1.2 ECDHE-RSA-AES256-SHA384 820 4485 23% 1119609 2103 115878 205 0 0 192.168.126.131 CH - [2015-05-28 07:45:04.479404] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu8KwxQzZrjHGWNHEAAABB TLSv1.2 ECDHE-RSA-AES256-SHA384 900 454 -% 1155579 1750 153303 146 0 0 192.168.126.131 CH - [2015-05-28 07:45:05.726785] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu8awxQzZrjHGWNHIAAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 486 4234 -% 682611 3031 669266 9618 0 0 192.168.126.131 CH - [2015-05-28 07:45:06.488078] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu8qwxQzZrjHGWNHQAAABA TLSv1.2 ECDHE-RSA-AES256-SHA384 550 261 -% 807634 3168 803605 154 0 0 192.168.126.131 CH - [2015-05-28 07:45:06.491531] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu8qwxQzZrjHGVmSwAAAAq TLSv1.2 ECDHE-RSA-AES256-SHA384 550 261 -% 866463 3005 862376 245 0 0 192.168.126.131 CH - [2015-05-28 07:45:05.737563] "GET /EMail/overview.aspx HTTP/1.1" 200 5300 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu8awxQzZrjHGVmSsAAAAp TLSv1.2 ECDHE-RSA-AES256-SHA384 486 5818 -% 1653019 1890 647223 3291 0 0 192.168.126.131 CH - [2015-05-28 07:45:06.494806] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu8qwxQzZrjHGVmS0AAAAr TLSv1.2 ECDHE-RSA-AES256-SHA384 550 261 -% 1064497 2908 60466 203 0 0 192.168.126.131 CH - [2015-05-28 07:45:06.564460] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/header.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu8qwxQzZrjHGWNHUAAABI TLSv1.2 ECDHE-RSA-AES256-SHA384 900 454 -% 1158135 3070 154221 166 0 0 192.168.126.131 CH - [2015-05-28 07:45:05.732424] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu8awxQzZrjHGWNHMAAABC TLSv1.2 ECDHE-RSA-AES256-SHA384 518 9666 -% 2285504 2341 276444 4432 0 0 192.168.126.131 CH - [2015-05-28 07:45:07.118962] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu86wxQzZrjHGWNHYAAABG TLSv1.2 ECDHE-RSA-AES256-SHA384 916 454 -% 986104 1995 983432 144 0 0 192.168.126.131 CH - [2015-05-28 07:45:07.474032] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu86wxQzZrjHGVmS4AAAAs TLSv1.2 ECDHE-RSA-AES256-SHA384 518 1354 -% 806394 3022 802421 192 0 0 192.168.126.131 CH - [2015-05-28 07:45:07.771410] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu86wxQzZrjHGVmS8AAAAt TLSv1.2 ECDHE-RSA-AES256-SHA384 486 261 -% 599191 3034 595416 141 0 0 192.168.126.131 CH - [2015-05-28 07:45:07.783884] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu86wxQzZrjHGVmTAAAAAu TLSv1.2 ECDHE-RSA-AES256-SHA384 598 261 -% 1124524 2950 120540 257 0 0 192.168.126.131 CH - [2015-05-28 07:45:07.763660] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu86wxQzZrjHGWNHcAAABF TLSv1.2 ECDHE-RSA-AES256-SHA384 486 261 -% 1163663 2268 160478 222 0 0 192.168.126.131 CH - [2015-05-28 07:45:08.311947] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu9KwxQzZrjHGVmTEAAAAv TLSv1.2 ECDHE-RSA-AES256-SHA384 582 261 -% 673370 4388 668164 151 0 0 192.168.126.131 CH - [2015-05-28 07:45:08.396365] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu9KwxQzZrjHGVmTIAAAAw TLSv1.2 ECDHE-RSA-AES256-SHA384 614 261 -% 588955 3254 584924 132 0 0 192.168.126.131 CH - [2015-05-28 07:45:08.129062] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu9KwxQzZrjHGWNHkAAABK TLSv1.2 ECDHE-RSA-AES256-SHA384 582 261 -% 856817 1823 854468 103 0 0 192.168.126.131 CH - [2015-05-28 07:45:08.112335] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu9KwxQzZrjHGWNHgAAABJ TLSv1.2 ECDHE-RSA-AES256-SHA384 582 261 -% 908452 1947 905778 144 0 0 192.168.126.131 CH - [2015-05-28 07:45:09.028769] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu9awxQzZrjHGWNHoAAABM TLSv1.2 ECDHE-RSA-AES256-SHA384 486 261 -% 651311 1999 648457 192 0 0 192.168.126.131 CH - [2015-05-28 07:45:08.932714] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu9KwxQzZrjHGVmTMAAAAx TLSv1.2 ECDHE-RSA-AES256-SHA384 550 1370 -% 921809 2042 919101 175 0 0 192.168.126.131 CH - [2015-05-28 07:45:09.744238] "GET /EMail/inbox.aspx HTTP/1.1" 200 12365 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu9awxQzZrjHGWNHwAAABO TLSv1.2 ECDHE-RSA-AES256-SHA384 486 12959 -% 975589 3063 967750 3860 0 0 192.168.126.131 CH - [2015-05-28 07:45:10.806061] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu9qwxQzZrjHGWNH0AAABP TLSv1.2 ECDHE-RSA-AES256-SHA384 550 261 -% 899453 3265 895177 260 0 0 192.168.126.131 CH - [2015-05-28 07:45:10.808215] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu9qwxQzZrjHGVmTQAAAAy TLSv1.2 ECDHE-RSA-AES256-SHA384 550 261 -% 1021985 3188 17593 445 0 0 192.168.126.131 CH - [2015-05-28 07:45:10.813835] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu9qwxQzZrjHGVmTYAAAA0 TLSv1.2 ECDHE-RSA-AES256-SHA384 582 261 -% 1062325 4542 56446 171 0 0 192.168.126.131 CH - [2015-05-28 07:45:10.810572] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu9qwxQzZrjHGVmTUAAAAz TLSv1.2 ECDHE-RSA-AES256-SHA384 550 261 -% 1099290 2757 95748 154 0 0 192.168.126.131 CH - [2015-05-28 07:45:10.880776] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu9qwxQzZrjHGWNIAAAABS TLSv1.2 ECDHE-RSA-AES256-SHA384 836 827 -% 1289535 2481 285971 221 0 0 192.168.126.131 CH - [2015-05-28 07:45:10.814373] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu9qwxQzZrjHGWNH4AAABR TLSv1.2 ECDHE-RSA-AES256-SHA384 502 634 -% 1373220 4411 367820 195 0 0 192.168.126.131 CH - [2015-05-28 07:45:11.730295] "GET /EMail/images/msgOpenedReplied.png HTTP/1.1" 200 717 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu96wxQzZrjHGWNIEAAABX TLSv1.2 ECDHE-RSA-AES256-SHA384 518 1226 -% 633230 2155 630045 232 0 0 192.168.126.131 CH - [2015-05-28 07:45:11.433073] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu96wxQzZrjHGVmTcAAAA1 TLSv1.2 ECDHE-RSA-AES256-SHA384 836 2171 -% 1147315 3147 143354 159 0 0 192.168.126.131 CH - [2015-05-28 07:45:11.436029] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu96wxQzZrjHGVmTgAAAA2 TLSv1.2 ECDHE-RSA-AES256-SHA384 836 2107 -% 1184384 2267 181533 134 0 0 192.168.126.131 CH - [2015-05-28 07:45:11.954853] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu96wxQzZrjHGVmTkAAAA5 TLSv1.2 ECDHE-RSA-AES256-SHA384 486 261 -% 964511 3018 960611 215 0 0 192.168.126.131 CH - [2015-05-28 07:45:17.855492] "GET /EMail/message.aspx?&mailId=3810_61&folderId=3375_29&mailPos=3 HTTP/1.1" 200 17486 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu-awxQzZrjHGVmToAAAA6 TLSv1.2 ECDHE-RSA-AES256-SHA384 534 18233 -% 1840126 4821 693572 30176 0 0 192.168.126.131 CH - [2015-05-28 07:45:19.746829] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/message.aspx?&mailId=3810_61&folderId=3375_29&mailPos=3" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu-6wxQzZrjHGVmTsAAAA7 TLSv1.2 ECDHE-RSA-AES256-SHA384 598 261 -% 813699 3265 809289 276 0 0 192.168.126.131 CH - [2015-05-28 07:45:19.787636] "GET /EMail/images/attach.gif HTTP/1.1" 304 - "https://www.example.com/EMail/message.aspx?&mailId=3810_61&folderId=3375_29&mailPos=3" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu-6wxQzZrjHGWNIQAAABV TLSv1.2 ECDHE-RSA-AES256-SHA384 964 454 -% 900755 1782 898342 159 0 0 192.168.126.131 CH - [2015-05-28 07:45:19.785847] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/message.aspx?&mailId=3810_61&folderId=3375_29&mailPos=3" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu-6wxQzZrjHGVmT0AAAA9 TLSv1.2 ECDHE-RSA-AES256-SHA384 948 454 -% 1056713 2255 53752 163 0 0 192.168.126.131 CH - [2015-05-28 07:45:19.782833] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/message.aspx?&mailId=3810_61&folderId=3375_29&mailPos=3" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu-6wxQzZrjHGVmTwAAAA8 TLSv1.2 ECDHE-RSA-AES256-SHA384 916 454 -% 1090215 3007 86318 206 0 0 192.168.126.131 CH - [2015-05-28 07:45:19.781319] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/message.aspx?&mailId=3810_61&folderId=3375_29&mailPos=3" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBu-6wxQzZrjHGWNIIAAABY TLSv1.2 ECDHE-RSA-AES256-SHA384 916 454 -% 1163578 2788 159850 212 0 0 192.168.126.131 CH - [2015-05-28 07:45:20.891672] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvAKwxQzZrjHGVmT4AAAA- TLSv1.2 ECDHE-RSA-AES256-SHA384 486 261 -% 941277 3192 937267 184 0 0 192.168.126.131 CH - [2015-05-28 07:46:00.833059] "GET /EMail/images/active.gif HTTP/1.1" 304 - "https://www.example.com/EMail/message.aspx?&mailId=3810_61&folderId=3375_29&mailPos=3" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvKKwxQzZrjHGWNIoAAABd TLSv1.2 ECDHE-RSA-AES256-SHA384 964 454 -% 816075 3277 811910 164 0 0 192.168.126.131 CH - [2015-05-28 07:46:02.784734] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 12365 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvKqwxQzZrjHGWNIwAAABf TLSv1.2 ECDHE-RSA-AES256-SHA384 518 13044 -% 1184541 2227 174888 6218 0 0 192.168.126.131 CH - [2015-05-28 07:46:02.859473] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvKqwxQzZrjHGVmUIAAAAF TLSv1.2 ECDHE-RSA-AES256-SHA384 852 9859 -% 1452864 2584 442490 3021 0 0 192.168.126.131 CH - [2015-05-28 07:46:04.107435] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvLKwxQzZrjHGWNI0AAABg TLSv1.2 ECDHE-RSA-AES256-SHA384 566 261 -% 838372 2037 835647 156 0 0 192.168.126.131 CH - [2015-05-28 07:46:04.166308] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvLKwxQzZrjHGVmUQAAAAD TLSv1.2 ECDHE-RSA-AES256-SHA384 884 454 -% 1049067 2585 45747 197 0 0 192.168.126.131 CH - [2015-05-28 07:46:04.165735] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvLKwxQzZrjHGVmUMAAAAG TLSv1.2 ECDHE-RSA-AES256-SHA384 884 454 -% 1050531 2657 47035 107 0 0 192.168.126.131 CH - [2015-05-28 07:46:04.170800] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvLKwxQzZrjHGWNI4AAABh TLSv1.2 ECDHE-RSA-AES256-SHA384 916 454 -% 1225515 3124 221190 319 0 0 192.168.126.131 CH - [2015-05-28 07:46:04.172203] "GET /EMail/images/Highost.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvLKwxQzZrjHGWNI8AAABi TLSv1.2 ECDHE-RSA-AES256-SHA384 932 454 -% 1464410 3429 459879 195 0 0 192.168.126.131 CH - [2015-05-28 07:46:04.374295] "GET /EMail/images/msgClosed.png HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvLKwxQzZrjHGVmUUAAAAH TLSv1.2 ECDHE-RSA-AES256-SHA384 614 261 -% 1287699 3105 283679 138 0 0 192.168.126.131 CH - [2015-05-28 07:46:05.044990] "GET /EMail/images/msgOpened.png HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvLawxQzZrjHGVmUcAAAAI TLSv1.2 ECDHE-RSA-AES256-SHA384 932 454 -% 708109 2430 704905 275 0 0 192.168.126.131 CH - [2015-05-28 07:46:04.995128] "GET /EMail/images/msgOpenedReplied.png HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvLKwxQzZrjHGVmUYAAAAE TLSv1.2 ECDHE-RSA-AES256-SHA384 932 454 -% 960779 2219 957602 151 0 0 192.168.126.131 CH - [2015-05-28 07:46:05.446291] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvLawxQzZrjHGWNJAAAABj TLSv1.2 ECDHE-RSA-AES256-SHA384 486 261 -% 729216 2154 725599 213 0 0 192.168.126.131 CH - [2015-05-28 07:46:05.459851] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvLawxQzZrjHGVmUgAAAAN TLSv1.2 ECDHE-RSA-AES256-SHA384 486 261 -% 843792 1731 841424 152 0 0 192.168.126.131 CH - [2015-05-28 07:46:08.471172] "GET /EMail/message.aspx?&mailId=3813_18&folderId=3375_29&mailPos=2 HTTP/1.1" 200 27252 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvMKwxQzZrjHGVmUkAAAAL TLSv1.2 ECDHE-RSA-AES256-SHA384 534 28232 -% 1823854 3103 680698 49213 0 0 192.168.126.131 CH - [2015-05-28 07:46:10.345005] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/message.aspx?&mailId=3813_18&folderId=3375_29&mailPos=2" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvMqwxQzZrjHGWNJEAAABr TLSv1.2 ECDHE-RSA-AES256-SHA384 598 261 -% 802358 3228 797828 371 0 0 192.168.126.131 CH - [2015-05-28 07:46:10.347575] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/message.aspx?&mailId=3813_18&folderId=3375_29&mailPos=2" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvMqwxQzZrjHGVmUsAAAAO TLSv1.2 ECDHE-RSA-AES256-SHA384 598 261 -% 979614 1760 977120 183 0 0 192.168.126.131 CH - [2015-05-28 07:46:10.345810] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/message.aspx?&mailId=3813_18&folderId=3375_29&mailPos=2" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvMqwxQzZrjHGVmUoAAAAJ TLSv1.2 ECDHE-RSA-AES256-SHA384 598 261 -% 1009914 2273 6945 165 0 0 192.168.126.131 CH - [2015-05-28 07:46:10.348956] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/message.aspx?&mailId=3813_18&folderId=3375_29&mailPos=2" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvMqwxQzZrjHGVmUwAAAAM TLSv1.2 ECDHE-RSA-AES256-SHA384 630 261 -% 1106016 2895 102026 199 0 0 192.168.126.131 CH - [2015-05-28 07:46:11.519407] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvM6wxQzZrjHGVmU0AAAAP TLSv1.2 ECDHE-RSA-AES256-SHA384 486 261 -% 851059 3052 847037 233 0 0 192.168.126.131 CH - [2015-05-28 07:46:17.521599] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 12365 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvOawxQzZrjHGVmU4AAAAR TLSv1.2 ECDHE-RSA-AES256-SHA384 836 13152 -% 1165352 2648 154830 6675 0 0 192.168.126.131 CH - [2015-05-28 07:46:17.523403] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvOawxQzZrjHGWNJQAAABq TLSv1.2 ECDHE-RSA-AES256-SHA384 852 9859 -% 1542148 2312 527947 6506 0 0 192.168.126.131 CH - [2015-05-28 07:46:18.766769] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvOqwxQzZrjHGVmU8AAAAS TLSv1.2 ECDHE-RSA-AES256-SHA384 566 261 -% 933660 2330 930569 158 0 0 192.168.126.131 CH - [2015-05-28 07:46:18.823694] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvOqwxQzZrjHGWNJUAAABp TLSv1.2 ECDHE-RSA-AES256-SHA384 884 454 -% 1130214 1776 127682 203 0 0 192.168.126.131 CH - [2015-05-28 07:46:18.831689] "GET /EMail/images/Highost.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvOqwxQzZrjHGWNJcAAABu TLSv1.2 ECDHE-RSA-AES256-SHA384 932 454 -% 1122263 1685 119961 142 0 0 192.168.126.131 CH - [2015-05-28 07:46:19.124226] "GET /EMail/images/msgClosed.png HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvO6wxQzZrjHGWNJgAAABs TLSv1.2 ECDHE-RSA-AES256-SHA384 614 261 -% 830281 3204 826291 119 0 0 192.168.126.131 CH - [2015-05-28 07:46:18.822365] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvOqwxQzZrjHGVmVAAAAAT TLSv1.2 ECDHE-RSA-AES256-SHA384 884 454 -% 1134201 1850 131763 105 0 0 192.168.126.131 CH - [2015-05-28 07:46:18.827100] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvOqwxQzZrjHGWNJYAAABo TLSv1.2 ECDHE-RSA-AES256-SHA384 916 454 -% 1155645 1717 153268 148 0 0 192.168.126.131 CH - [2015-05-28 07:46:19.749262] "GET /EMail/images/msgOpenedReplied.png HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvO6wxQzZrjHGWNJoAAABn TLSv1.2 ECDHE-RSA-AES256-SHA384 932 454 -% 842866 1762 840316 217 0 0 192.168.126.131 CH - [2015-05-28 07:46:19.748613] "GET /EMail/images/msgOpened.png HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvO6wxQzZrjHGWNJkAAABt TLSv1.2 ECDHE-RSA-AES256-SHA384 932 454 -% 898196 2077 895411 153 0 0 192.168.126.131 CH - [2015-05-28 07:46:20.059704] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvPKwxQzZrjHGVmVEAAAAV TLSv1.2 ECDHE-RSA-AES256-SHA384 486 261 -% 792606 2407 789173 424 0 0 192.168.126.131 CH - [2015-05-28 07:46:20.035915] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvPKwxQzZrjHGWNJsAAABx TLSv1.2 ECDHE-RSA-AES256-SHA384 486 261 -% 863346 2777 859671 171 0 0 192.168.126.131 CH - [2015-05-28 07:46:21.733622] "GET /EMail/message.aspx?&mailId=3897_2&folderId=3375_29&mailPos=1 HTTP/1.1" 200 39078 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvPawxQzZrjHGWNJwAAABw TLSv1.2 ECDHE-RSA-AES256-SHA384 534 40226 -% 2010794 7165 723035 75199 0 0 192.168.126.131 CH - [2015-05-28 07:46:23.753098] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/message.aspx?&mailId=3897_2&folderId=3375_29&mailPos=1" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvP6wxQzZrjHGWNJ8AAAB0 TLSv1.2 ECDHE-RSA-AES256-SHA384 598 261 -% 745002 3811 739999 198 0 0 192.168.126.131 CH - [2015-05-28 07:46:23.751761] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/message.aspx?&mailId=3897_2&folderId=3375_29&mailPos=1" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvP6wxQzZrjHGWNJ4AAABy TLSv1.2 ECDHE-RSA-AES256-SHA384 598 261 -% 893121 2830 889340 220 0 0 192.168.126.131 CH - [2015-05-28 07:46:23.749223] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/message.aspx?&mailId=3897_2&folderId=3375_29&mailPos=1" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvP6wxQzZrjHGVmVMAAAAW TLSv1.2 ECDHE-RSA-AES256-SHA384 598 261 -% 954458 4452 949196 163 0 0 192.168.126.131 CH - [2015-05-28 07:46:23.754519] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/message.aspx?&mailId=3897_2&folderId=3375_29&mailPos=1" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvP6wxQzZrjHGWNKAAAAB1 TLSv1.2 ECDHE-RSA-AES256-SHA384 630 261 -% 1050484 3336 46269 181 0 0 192.168.126.131 CH - [2015-05-28 07:46:23.797804] "GET /EMail/images/attach.gif HTTP/1.1" 304 - "https://www.example.com/EMail/message.aspx?&mailId=3897_2&folderId=3375_29&mailPos=1" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvP6wxQzZrjHGWNKEAAAB6 TLSv1.2 ECDHE-RSA-AES256-SHA384 646 261 -% 1065781 2774 62202 147 0 0 192.168.126.131 CH - [2015-05-28 07:46:24.858144] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvQKwxQzZrjHGWNKIAAAB2 TLSv1.2 ECDHE-RSA-AES256-SHA384 486 261 -% 1023363 1991 20693 194 0 0 192.168.126.131 CH - [2015-05-28 07:47:34.096826] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 12357 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvhqwxQzZrjHGVmVgAAAAb TLSv1.2 ECDHE-RSA-AES256-SHA384 836 13237 -% 1445566 3894 435967 4347 0 0 192.168.126.131 CH - [2015-05-28 07:47:34.099049] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvhqwxQzZrjHGWNK0AAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 852 9859 -% 1591617 2462 579741 2884 0 0 192.168.126.131 CH - [2015-05-28 07:47:35.758712] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvh6wxQzZrjHGWNK4AAABH TLSv1.2 ECDHE-RSA-AES256-SHA384 566 261 -% 1082376 1972 79566 200 0 0 192.168.126.131 CH - [2015-05-28 07:47:35.935865] "GET /EMail/images/msgClosed.png HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvh6wxQzZrjHGVmVwAAAAf TLSv1.2 ECDHE-RSA-AES256-SHA384 932 454 -% 905350 2175 902051 228 0 0 192.168.126.131 CH - [2015-05-28 07:47:35.779857] "GET /EMail/images/Highost.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvh6wxQzZrjHGVmVsAAAAe TLSv1.2 ECDHE-RSA-AES256-SHA384 932 454 -% 1091167 2724 87502 125 0 0 192.168.126.131 CH - [2015-05-28 07:47:35.712841] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvh6wxQzZrjHGVmVkAAAAc TLSv1.2 ECDHE-RSA-AES256-SHA384 566 261 -% 1175717 2042 172715 195 0 0 192.168.126.131 CH - [2015-05-28 07:47:35.771365] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvh6wxQzZrjHGVmVoAAAAh TLSv1.2 ECDHE-RSA-AES256-SHA384 884 454 -% 1149267 3822 144775 103 0 0 192.168.126.131 CH - [2015-05-28 07:47:35.932857] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvh6wxQzZrjHGWNK8AAABA TLSv1.2 ECDHE-RSA-AES256-SHA384 916 454 -% 1171596 2099 168461 204 0 0 192.168.126.131 CH - [2015-05-28 07:47:36.423661] "GET /EMail/images/msgOpened.png HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBviKwxQzZrjHGWNLAAAABI TLSv1.2 ECDHE-RSA-AES256-SHA384 932 454 -% 997259 2047 994455 187 0 0 192.168.126.131 CH - [2015-05-28 07:47:36.424266] "GET /EMail/images/msgOpenedReplied.png HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBviKwxQzZrjHGVmV0AAAAd TLSv1.2 ECDHE-RSA-AES256-SHA384 932 454 -% 1255877 2068 253029 202 0 0 192.168.126.131 CH - [2015-05-28 07:47:37.155870] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBviawxQzZrjHGWNLEAAABG TLSv1.2 ECDHE-RSA-AES256-SHA384 486 261 -% 718913 2042 715920 289 0 0 192.168.126.131 CH - [2015-05-28 07:47:37.170278] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBviawxQzZrjHGVmV4AAAAi TLSv1.2 ECDHE-RSA-AES256-SHA384 486 261 -% 971363 1985 968727 182 0 0 192.168.126.131 CH - [2015-05-28 07:47:38.783175] "GET /EMail/message.aspx?&mailId=3913_8&folderId=3375_29&mailPos=0 HTTP/1.1" 200 15528 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBviqwxQzZrjHGVmV8AAAAk TLSv1.2 ECDHE-RSA-AES256-SHA384 534 16212 -% 1660353 3114 613338 42494 0 0 192.168.126.131 CH - [2015-05-28 07:47:40.584768] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/message.aspx?&mailId=3913_8&folderId=3375_29&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvjKwxQzZrjHGVmWEAAAAg TLSv1.2 ECDHE-RSA-AES256-SHA384 598 261 -% 913512 1799 910993 194 0 0 192.168.126.131 CH - [2015-05-28 07:47:40.582814] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/message.aspx?&mailId=3913_8&folderId=3375_29&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvjKwxQzZrjHGVmWAAAAAl TLSv1.2 ECDHE-RSA-AES256-SHA384 598 261 -% 1018327 2974 14444 154 0 0 192.168.126.131 CH - [2015-05-28 07:47:40.585398] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/message.aspx?&mailId=3913_8&folderId=3375_29&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvjKwxQzZrjHGWNLIAAABF TLSv1.2 ECDHE-RSA-AES256-SHA384 598 261 -% 1067699 2146 64670 179 0 0 192.168.126.131 CH - [2015-05-28 07:47:40.586383] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/message.aspx?&mailId=3913_8&folderId=3375_29&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvjKwxQzZrjHGWNLMAAABK TLSv1.2 ECDHE-RSA-AES256-SHA384 630 261 -% 1119813 1862 117177 219 0 0 192.168.126.131 CH - [2015-05-28 07:47:41.753083] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "4c0eaf57.52324880be8df" VjBvjawxQzZrjHGWNLQAAABJ TLSv1.2 ECDHE-RSA-AES256-SHA384 486 261 -% 861418 3644 856809 185 0 0 192.168.186.76 CH - [2015-05-28 08:19:20.700915] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "906d646.5232442388e61" VjB2@KwxQzZrjHGVmdYAAAAh TLSv1.2 ECDHE-RSA-AES256-SHA384 1271 4076 -% 1005162 8061 0 363 3 0 192.168.186.76 CH - [2015-05-28 08:19:53.086987] "GET /EMail/inbox.aspx HTTP/1.1" 200 13359 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB3GawxQzZrjHGVmdoAAAAg TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 18112 -% 1119458 5092 105790 5958 3 0 192.168.186.76 CH - [2015-05-28 08:19:54.232103] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB3GqwxQzZrjHGWNdgAAAB6 TLSv1.2 ECDHE-RSA-AES256-SHA384 1271 4710 -% 959672 6323 951570 166 3 0 192.168.186.76 CH - [2015-05-28 08:19:54.231707] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB3GqwxQzZrjHGVmdsAAAAl TLSv1.2 ECDHE-RSA-AES256-SHA384 678 634 -% 1024586 7260 15152 158 3 0 192.168.186.76 CH - [2015-05-28 08:20:21.913027] "GET /EMail/newMessage.aspx?action=reply&mailId=3914_6&folderId=947_65&showPics=false HTTP/1.1" 200 23766 "https://www.example.com/EMail/message.aspx?&mailId=3914_6&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB3NawxQzZrjHGWNeYAAABA TLSv1.2 ECDHE-RSA-AES256-SHA384 1367 28682 -% 1230019 7223 163459 55343 6 3 192.168.186.76 CH - [2015-05-28 08:20:24.359220] "GET /EMail/scripts/tinymce/langs/de.js HTTP/1.1" 200 2969 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_6&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB3OKwxQzZrjHGWNecAAABG TLSv1.2 ECDHE-RSA-AES256-SHA384 742 3684 38% 1228277 8593 216656 217 3 0 192.168.186.76 CH - [2015-05-28 08:20:24.432080] "GET /EMail/scripts/tinymce/plugins/paste/plugin.min.js HTTP/1.1" 200 6239 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_6&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB3OKwxQzZrjHGWNegAAABF TLSv1.2 ECDHE-RSA-AES256-SHA384 1276 7125 40% 1227174 6483 216966 483 3 0 192.168.186.76 CH - [2015-05-28 08:20:24.432757] "GET /EMail/scripts/tinymce/plugins/print/plugin.min.js HTTP/1.1" 200 182 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_6&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB3OKwxQzZrjHGVmeYAAAAw TLSv1.2 ECDHE-RSA-AES256-SHA384 1276 976 55% 1356290 6098 347972 201 3 0 192.168.186.76 CH - [2015-05-28 08:20:24.921980] "GET /EMail/scripts/tinymce/plugins/fullpage/plugin.min.js HTTP/1.1" 200 2325 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_6&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB3OKwxQzZrjHGWNekAAABK TLSv1.2 ECDHE-RSA-AES256-SHA384 1351 7120 36% 1063122 4020 57224 165 3 0 192.168.186.76 CH - [2015-05-28 08:20:25.800906] "GET /EMail/scripts/tinymce/plugins/anchor/plugin.min.js HTTP/1.1" 200 339 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_6&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB3OawxQzZrjHGVmecAAAAx TLSv1.2 ECDHE-RSA-AES256-SHA384 758 975 63% 671552 4070 665913 158 3 0 192.168.186.76 CH - [2015-05-28 08:20:25.600499] "GET /EMail/scripts/tinymce/plugins/hr/plugin.min.js HTTP/1.1" 200 191 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_6&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB3OawxQzZrjHGWNeoAAABJ TLSv1.2 ECDHE-RSA-AES256-SHA384 758 831 53% 905133 4530 898510 175 3 0 192.168.186.76 CH - [2015-05-28 08:20:25.693962] "GET /EMail/scripts/tinymce/plugins/link/plugin.min.js HTTP/1.1" 200 1835 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_6&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB3OawxQzZrjHGWNesAAABL TLSv1.2 ECDHE-RSA-AES256-SHA384 758 2479 41% 948087 6534 939096 210 3 0 192.168.186.76 CH - [2015-05-28 08:20:26.000907] "GET /EMail/scripts/tinymce/plugins/visualchars/plugin.min.js HTTP/1.1" 200 608 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_6&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB3OqwxQzZrjHGWNewAAABN TLSv1.2 ECDHE-RSA-AES256-SHA384 758 1247 54% 725608 4103 718633 309 3 0 192.168.186.76 CH - [2015-05-28 08:20:26.787863] "GET /EMail/scripts/tinymce/skins/lightgray/content.min.css HTTP/1.1" 200 588 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_6&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB3OqwxQzZrjHGWNe0AAABM TLSv1.2 ECDHE-RSA-AES256-SHA384 742 1231 38% 943807 7309 934528 162 3 0 192.168.186.76 CH - [2015-05-28 08:20:27.719904] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce-small.eot? HTTP/1.1" 200 10316 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_6&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB3O6wxQzZrjHGWNe4AAABO TLSv1.2 ECDHE-RSA-AES256-SHA384 774 11012 -% 982313 6598 973475 204 3 0 192.168.186.76 CH - [2015-05-28 08:22:05.595566] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_6&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB3nawxQzZrjHGVmfEAAAA- TLSv1.2 ECDHE-RSA-AES256-SHA384 8609 630 -% 1644672 417931 206413 272 81 0 192.168.186.76 CH - [2015-05-28 08:22:07.251921] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_6&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB3n6wxQzZrjHGVmfIAAAAA TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 679975 6727 660032 10895 3 0 192.168.186.76 CH - [2015-05-28 08:22:16.311977] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 13358 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB3qKwxQzZrjHGVmfMAAAA8 TLSv1.2 ECDHE-RSA-AES256-SHA384 1154 14197 -% 1333131 4854 318895 6773 3 0 192.168.186.76 CH - [2015-05-28 08:22:17.669706] "GET /EMail/images/msgOpenedReplied.png HTTP/1.1" 200 717 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB3qawxQzZrjHGVmfQAAAAC TLSv1.2 ECDHE-RSA-AES256-SHA384 694 1226 -% 801756 6393 793204 225 3 0 192.168.186.76 CH - [2015-05-28 08:22:20.298613] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB3rKwxQzZrjHGVmfUAAAA@ TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1391645 12885 376156 210 3 0 192.168.186.76 CH - [2015-05-28 08:22:21.702896] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 12107 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB3rawxQzZrjHGVmfcAAAAF TLSv1.2 ECDHE-RSA-AES256-SHA384 726 12788 -% 1203355 7289 189746 4396 3 0 192.168.186.76 CH - [2015-05-28 08:22:24.145908] "GET /EMail/message.aspx?&mailId=3913_12&folderId=947_65&mailPos=1 HTTP/1.1" 200 16733 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB3sKwxQzZrjHGVmfgAAAAD TLSv1.2 ECDHE-RSA-AES256-SHA384 726 17481 -% 2530069 6158 485738 33038 3 0 192.168.186.76 CH - [2015-05-28 08:22:29.272596] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3913_12&folderId=947_65&attachmentId=3&token=48672220136209933E17 HTTP/1.1" 200 898894 "https://www.example.com/EMail/message.aspx?&mailId=3913_12&folderId=947_65&mailPos=1" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB3tawxQzZrjHGVmfkAAAAG TLSv1.2 ECDHE-RSA-AES256-SHA384 806 931388 -% 2500329 7012 87612 227 3 0 192.168.186.76 CH - [2015-05-28 08:22:43.970086] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5882 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3913_12&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB3w6wxQzZrjHGWNf8AAABf TLSv1.2 ECDHE-RSA-AES256-SHA384 1303 13742 -% 1015877 6529 0 0 3 0 192.168.186.76 CH - [2015-05-28 08:22:54.564302] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3913_12&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB3zqwxQzZrjHGWNgAAAABl TLSv1.2 ECDHE-RSA-AES256-SHA384 8721 630 -% 1652309 431309 201760 208 81 0 192.168.186.76 CH - [2015-05-28 08:22:56.229355] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3913_12&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB30KwxQzZrjHGWNgEAAABh TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 727240 9154 704050 11811 3 0 192.168.186.76 CH - [2015-05-28 08:22:58.398849] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 12105 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB30qwxQzZrjHGWNgIAAABi TLSv1.2 ECDHE-RSA-AES256-SHA384 662 12788 -% 1286683 7995 269231 6125 3 0 192.168.186.76 CH - [2015-05-28 08:23:53.245975] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5874 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_5&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB4CawxQzZrjHGWNgsAAABs TLSv1.2 ECDHE-RSA-AES256-SHA384 1303 13726 -% 949560 6514 0 0 3 0 192.168.186.76 CH - [2015-05-28 08:24:54.706903] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_5&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB4RqwxQzZrjHGWNhYAAAB8 TLSv1.2 ECDHE-RSA-AES256-SHA384 8407 630 -% 1770540 447127 303780 212 81 0 192.168.186.76 CH - [2015-05-28 08:24:56.492286] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_5&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB4SKwxQzZrjHGWNhgAAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 1133556 6577 118184 7375 3 0 192.168.186.76 CH - [2015-05-28 08:24:58.421236] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 10910 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB4SqwxQzZrjHGWNhkAAAB4 TLSv1.2 ECDHE-RSA-AES256-SHA384 662 11588 -% 1469129 4747 459490 3204 3 0 192.168.186.76 CH - [2015-05-28 08:24:58.422640] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB4SqwxQzZrjHGWNhoAAAB3 TLSv1.2 ECDHE-RSA-AES256-SHA384 1196 9827 -% 1743534 7718 725398 4469 3 0 192.168.186.76 CH - [2015-05-28 08:25:01.791015] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB4TawxQzZrjHGWNhsAAAB@ TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1195852 13837 179291 367 3 0 192.168.186.76 CH - [2015-05-28 08:25:02.999185] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 9717 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB4TqwxQzZrjHGWNh0AAAB- TLSv1.2 ECDHE-RSA-AES256-SHA384 726 10319 -% 891333 4640 876822 7022 3 0 192.168.186.76 CH - [2015-05-28 08:25:05.428977] "GET /EMail/message.aspx?&mailId=3914_4&folderId=947_65&mailPos=0 HTTP/1.1" 200 16361 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB4UawxQzZrjHGWNh8AAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 726 17044 -% 2910290 7864 862423 37539 3 0 192.168.186.76 CH - [2015-05-28 08:25:10.694487] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3914_4&folderId=947_65&attachmentId=3&token=9173587454316695E17 HTTP/1.1" 200 750096 "https://www.example.com/EMail/message.aspx?&mailId=3914_4&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB4VqwxQzZrjHGWNiAAAABH TLSv1.2 ECDHE-RSA-AES256-SHA384 806 789859 -% 1375623 10206 973932 239 3 0 192.168.186.76 CH - [2015-05-28 08:26:49.207395] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_4&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB4uawxQzZrjHGWNjEAAABV TLSv1.2 ECDHE-RSA-AES256-SHA384 8540 4545 -% 1507297 376319 108626 326 81 0 192.168.186.76 CH - [2015-05-28 08:26:50.725174] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_4&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB4uqwxQzZrjHGWNjIAAABY TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 1119721 9413 100860 7516 3 0 192.168.186.76 CH - [2015-05-28 08:26:53.043406] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9716 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB4vawxQzZrjHGWNjMAAABU TLSv1.2 ECDHE-RSA-AES256-SHA384 662 10319 -% 1261399 5012 251496 3027 3 0 192.168.186.76 CH - [2015-05-28 08:26:53.044779] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB4vawxQzZrjHGWNjQAAABT TLSv1.2 ECDHE-RSA-AES256-SHA384 1245 13742 -% 1620664 4938 605302 4638 3 0 192.168.186.76 CH - [2015-05-28 08:26:57.733766] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB4wawxQzZrjHGWNjYAAABa TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1632918 30887 600069 212 3 0 192.168.186.76 CH - [2015-05-28 08:26:59.384914] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8481 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB4w6wxQzZrjHGWNjcAAABZ TLSv1.2 ECDHE-RSA-AES256-SHA384 726 9087 -% 1270444 7379 256265 4373 3 0 192.168.186.76 CH - [2015-05-28 08:27:01.490753] "GET /EMail/message.aspx?&mailId=3913_9&folderId=947_65&mailPos=0 HTTP/1.1" 200 16571 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB4xawxQzZrjHGWNjgAAABb TLSv1.2 ECDHE-RSA-AES256-SHA384 726 17321 -% 2739597 7381 700294 28738 3 0 192.168.186.76 CH - [2015-05-28 08:27:19.744514] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3913_9&folderId=947_65&attachmentId=3&token=34632076130937405E18 HTTP/1.1" 200 479252 "https://www.example.com/EMail/message.aspx?&mailId=3913_9&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB416wxQzZrjHGWNj0AAABg TLSv1.2 ECDHE-RSA-AES256-SHA384 1324 503730 -% 1368389 5943 175934 227 3 0 192.168.186.76 CH - [2015-05-28 08:28:16.379555] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB5EKwxQzZrjHGVmhIAAAAj TLSv1.2 ECDHE-RSA-AES256-SHA384 1271 13742 -% 1460376 4674 444813 4531 3 0 192.168.186.76 CH - [2015-05-28 08:28:19.556529] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB5E6wxQzZrjHGVmhMAAAAh TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1353205 12359 338400 259 3 0 192.168.186.76 CH - [2015-05-28 08:28:20.921688] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7289 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB5FKwxQzZrjHGVmhQAAAAd TLSv1.2 ECDHE-RSA-AES256-SHA384 726 7802 -% 862868 7504 849649 3592 3 0 192.168.152.92 CH - [2015-05-28 08:33:46.140013] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7357 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dd1053b.5232536f1ed6d" VjB6WqwxQzZrjHGWNnQAAABa TLSv1.2 ECDHE-RSA-AES256-SHA384 843 12118 -% 1023496 1557 17705 3340 0 0 192.168.152.92 CH - [2015-05-28 08:33:47.302733] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dd1053b.5232536f1ed6d" VjB6W6wxQzZrjHGWNnYAAABb TLSv1.2 ECDHE-RSA-AES256-SHA384 1184 422 -% 738692 2643 735002 309 0 0 192.168.152.92 CH - [2015-05-28 08:33:47.336238] "GET /EMail/scripts/variables_en.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dd1053b.5232536f1ed6d" VjB6W6wxQzZrjHGWNncAAABW TLSv1.2 ECDHE-RSA-AES256-SHA384 1216 422 -% 913316 2213 910421 153 0 0 192.168.152.92 CH - [2015-05-28 08:33:47.340684] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dd1053b.5232536f1ed6d" VjB6W6wxQzZrjHGWNngAAABd TLSv1.2 ECDHE-RSA-AES256-SHA384 1216 422 -% 949861 2847 946221 141 0 0 192.168.152.92 CH - [2015-05-28 08:33:47.255901] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dd1053b.5232536f1ed6d" VjB6W6wxQzZrjHGWNnUAAABZ TLSv1.2 ECDHE-RSA-AES256-SHA384 662 261 -% 1188980 4680 183060 219 0 0 192.168.186.76 CH - [2015-05-28 08:33:50.951604] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjB6XqwxQzZrjHGWNnkAAABc TLSv1.2 ECDHE-RSA-AES256-SHA384 1271 13742 -% 1609762 5055 594996 3713 3 0 192.168.152.92 CH - [2015-05-28 08:34:12.374595] "GET /EMail/images/active.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dd1053b.5232536f1ed6d" VjB6dKwxQzZrjHGWNn0AAABh TLSv1.2 ECDHE-RSA-AES256-SHA384 1307 4337 -% 866568 2068 863733 181 0 0 192.168.152.92 CH - [2015-05-28 08:34:14.143131] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dd1053b.5232536f1ed6d" VjB6dqwxQzZrjHGWNn8AAABj TLSv1.2 ECDHE-RSA-AES256-SHA384 758 469 -% 980500 5227 974197 239 0 0 192.168.152.92 CH - [2015-05-28 08:34:15.140788] "GET /EMail/main.aspx HTTP/1.1" 200 3403 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dd1053b.5232536f1ed6d" VjB6d6wxQzZrjHGWNoAAAABk TLSv1.2 ECDHE-RSA-AES256-SHA384 614 3914 -% 919834 3060 914619 1491 0 0 192.168.152.92 CH - [2015-05-28 08:34:16.109740] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dd1053b.5232536f1ed6d" VjB6eKwxQzZrjHGWNoEAAABr TLSv1.2 ECDHE-RSA-AES256-SHA384 630 261 -% 923208 3472 918924 153 0 0 192.168.152.92 CH - [2015-05-28 08:34:16.183588] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dd1053b.5232536f1ed6d" VjB6eKwxQzZrjHGWNoIAAABq TLSv1.2 ECDHE-RSA-AES256-SHA384 1184 422 -% 1027410 2950 23435 197 0 0 192.168.152.92 CH - [2015-05-28 08:34:18.563480] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dd1053b.5232536f1ed6d" VjB6eqwxQzZrjHGWNoMAAABm TLSv1.2 ECDHE-RSA-AES256-SHA384 630 261 -% 969347 3095 965328 236 0 0 192.168.152.92 CH - [2015-05-28 08:34:18.564408] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "3dd1053b.5232536f1ed6d" VjB6eqwxQzZrjHGWNoQAAABp TLSv1.2 ECDHE-RSA-AES256-SHA384 630 0 -% 1142133 3085 138303 196 0 0 192.168.152.92 CH - [2015-05-28 08:34:18.721168] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dd1053b.5232536f1ed6d" VjB6eqwxQzZrjHGWNoUAAABu TLSv1.2 ECDHE-RSA-AES256-SHA384 1259 4337 -% 1020419 2664 17077 165 0 0 192.168.152.92 CH - [2015-05-28 08:34:23.074115] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dd1053b.5232536f1ed6d" VjB6f6wxQzZrjHGWNocAAABs TLSv1.2 ECDHE-RSA-AES256-SHA384 630 261 -% 1190063 3920 184976 197 0 0 192.168.152.92 CH - [2015-05-28 08:34:23.126832] "GET /EMail/images/msgClosed.png HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dd1053b.5232536f1ed6d" VjB6f6wxQzZrjHGWNokAAABn TLSv1.2 ECDHE-RSA-AES256-SHA384 1200 422 -% 1369825 2917 366172 148 0 0 192.168.152.92 CH - [2015-05-28 08:34:23.128758] "GET /EMail/images/msgOpened.png HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dd1053b.5232536f1ed6d" VjB6f6wxQzZrjHGWNooAAABt TLSv1.2 ECDHE-RSA-AES256-SHA384 1200 422 -% 1376984 2950 373269 136 0 0 192.168.152.92 CH - [2015-05-28 08:34:23.076189] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dd1053b.5232536f1ed6d" VjB6f6wxQzZrjHGWNogAAABo TLSv1.2 ECDHE-RSA-AES256-SHA384 662 261 -% 1439547 2602 436318 99 0 0 192.168.152.92 CH - [2015-05-28 08:34:44.173170] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/message.aspx?&mailId=3897_2&folderId=3397_26&mailPos=1" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dd1053b.5232536f1ed6d" VjB6lKwxQzZrjHGVmiwAAAA6 TLSv1.2 ECDHE-RSA-AES256-SHA384 1291 4337 -% 1041827 1680 39358 223 0 0 192.168.152.92 CH - [2015-05-28 08:34:44.157573] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/message.aspx?&mailId=3897_2&folderId=3397_26&mailPos=1" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dd1053b.5232536f1ed6d" VjB6lKwxQzZrjHGWNo4AAAB0 TLSv1.2 ECDHE-RSA-AES256-SHA384 1275 4337 -% 1071835 3016 67912 158 0 0 192.168.152.92 CH - [2015-05-28 08:35:41.113137] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dd1053b.5232536f1ed6d" VjB6zawxQzZrjHGWNpUAAAB4 TLSv1.2 ECDHE-RSA-AES256-SHA384 1179 13742 -% 1103649 2689 92741 3462 0 0 192.168.152.92 CH - [2015-05-28 08:35:42.083180] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "3dd1053b.5232536f1ed6d" VjB6zqwxQzZrjHGWNpcAAAB9 TLSv1.2 ECDHE-RSA-AES256-SHA384 1168 161 -% 959421 2389 956276 165 0 0 192.168.152.92 CH - [2015-05-28 08:35:42.097711] "GET /EMail/images/msgOpened.png HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dd1053b.5232536f1ed6d" VjB6zqwxQzZrjHGWNpgAAAB@ TLSv1.2 ECDHE-RSA-AES256-SHA384 1200 422 -% 948694 1774 946402 102 0 0 192.168.152.92 CH - [2015-05-28 08:35:42.098935] "GET /EMail/images/msgClosed.png HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dd1053b.5232536f1ed6d" VjB6zqwxQzZrjHGWNpkAAABD TLSv1.2 ECDHE-RSA-AES256-SHA384 1200 422 -% 1114079 1842 111613 158 0 0 192.168.152.92 CH - [2015-05-28 08:35:45.357696] "GET /EMail/message.aspx?&mailId=3913_8&folderId=3397_26&mailPos=0 HTTP/1.1" 200 15528 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dd1053b.5232536f1ed6d" VjB60awxQzZrjHGWNpsAAABB TLSv1.2 ECDHE-RSA-AES256-SHA384 614 16212 -% 1070593 4818 36544 27695 0 0 192.168.152.92 CH - [2015-05-28 08:35:46.483878] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/message.aspx?&mailId=3913_8&folderId=3397_26&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dd1053b.5232536f1ed6d" VjB60qwxQzZrjHGWNpwAAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 678 261 -% 1004109 2793 373 164 0 0 192.168.152.92 CH - [2015-05-28 08:35:46.484591] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/message.aspx?&mailId=3913_8&folderId=3397_26&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dd1053b.5232536f1ed6d" VjB60qwxQzZrjHGWNp0AAABH TLSv1.2 ECDHE-RSA-AES256-SHA384 678 261 -% 1004191 1928 1554 123 0 0 192.168.152.92 CH - [2015-05-28 08:36:05.083776] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3913_8&folderId=3397_26&attachmentId=4&token=43625036495476803E18 HTTP/1.1" 200 228410 "https://www.example.com/EMail/message.aspx?&mailId=3913_8&folderId=3397_26&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dd1053b.5232536f1ed6d" VjB65awxQzZrjHGVmjUAAAAK TLSv1.2 ECDHE-RSA-AES256-SHA384 1307 244934 -% 1404244 4555 273212 264 0 0 192.168.165.46 CH - [2015-05-28 09:23:23.252598] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7370 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f7538666.52325e8650f76" VjCF@6wxQzZrjHGWOHsAAABy TLSv1.2 ECDHE-RSA-AES128-SHA256 687 11891 -% 906803 1546 902334 2320 0 0 192.168.165.46 CH - [2015-05-28 09:23:24.340727] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f7538666.52325e8650f76" VjCF-KwxQzZrjHGWOH0AAAB1 TLSv1.2 ECDHE-RSA-AES128-SHA256 470 2527 14% 1168506 2067 164786 217 0 0 192.168.212.2 CH - [2015-05-28 09:36:46.135941] "GET /EMail/images/icon10.ico HTTP/1.1" 304 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c1618cf7.5232618401685" VjCJHqwxQzZrjHGWORYAAABT TLSv1 ECDHE-RSA-AES256-SHA 816 4204 -% 946440 3265 940281 219 3 0 192.168.212.2 CH - [2015-05-28 09:36:54.126264] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjCJJqwxQzZrjHGWORwAAABd TLSv1 ECDHE-RSA-AES256-SHA 840 7990 -% 1478145 2311 468789 6259 0 0 192.168.212.2 CH - [2015-05-28 09:36:54.122266] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjCJJqwxQzZrjHGWORsAAABZ TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 2242728 4063 228883 5136 0 0 192.168.212.2 CH - [2015-05-28 09:36:56.672127] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjCJKKwxQzZrjHGWOR8AAABi TLSv1 ECDHE-RSA-AES256-SHA 984 4049 -% 1007719 3214 3476 197 0 0 192.168.212.2 CH - [2015-05-28 09:36:58.288882] "GET /EMail/images/msgClosed.png HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjCJKqwxQzZrjHGVmz8AAAAa TLSv1 ECDHE-RSA-AES256-SHA 952 4049 -% 819015 1745 816315 252 0 0 192.168.212.2 CH - [2015-05-28 09:36:58.271326] "GET /EMail/images/attach.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjCJKqwxQzZrjHGWOSEAAABk TLSv1 ECDHE-RSA-AES256-SHA 936 4049 -% 1062477 2061 59579 220 0 0 192.168.212.2 CH - [2015-05-28 09:37:03.423086] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3913_11&folderId=1001_9&attachmentId=2&token=45476142781821338E18 HTTP/1.1" 200 55661 "https://www.example.com/EMail/message.aspx?&mailId=3913_11&folderId=1001_9&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjCJL6wxQzZrjHGVm0AAAAAe TLSv1 ECDHE-RSA-AES256-SHA 984 61210 -% 1121658 3848 96211 527 0 0 192.168.212.2 CH - [2015-05-28 09:38:04.041584] "GET /favicon.ico HTTP/1.1" 304 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "c1618cf7.5232618401685" VjCJbKwxQzZrjHGWOSwAAAB0 TLSv1 ECDHE-RSA-AES256-SHA 773 342 -% 5910 4047 54 109 3 0 192.168.212.2 CH - [2015-05-28 09:38:04.117829] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjCJbKwxQzZrjHGWOS0AAABw TLSv1 ECDHE-RSA-AES256-SHA 808 4161 -% 1070071 2543 66804 165 0 0 192.168.212.2 CH - [2015-05-28 09:38:05.319084] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjCJbawxQzZrjHGWOS4AAAB1 TLSv1 ECDHE-RSA-AES256-SHA 776 11622 -% 816448 4669 806538 4288 0 0 192.168.192.35 CH - [2015-05-28 09:45:18.976293] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCLHqwxQzZrjHGWOWsAAAB5 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1115 11687 22% 868815 2811 863342 176 0 0 192.168.192.35 CH - [2015-05-28 09:45:18.977461] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCLHqwxQzZrjHGWOW0AAABy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1090 5902 22% 906411 2355 903127 183 0 0 192.168.192.35 CH - [2015-05-28 09:45:18.976455] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCLHqwxQzZrjHGVm2IAAAAB TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1129 5711 -% 907444 1936 904763 182 0 0 192.168.192.35 CH - [2015-05-28 09:45:18.976419] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCLHqwxQzZrjHGVm2EAAAA@ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1120 8122 23% 1115485 2520 110801 253 0 0 192.168.192.35 CH - [2015-05-28 09:45:18.977105] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCLHqwxQzZrjHGWOWwAAAB1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1090 4620 56% 1237953 2538 234435 221 0 0 192.168.192.35 CH - [2015-05-28 09:45:20.268702] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCLIKwxQzZrjHGWOW4AAABD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 491 1792 -% 859807 2911 856244 158 0 0 192.168.192.35 CH - [2015-05-28 09:45:21.273649] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "414317ae.5232636f47731" VjCLIawxQzZrjHGVm2QAAAAD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 880 5756 -% 827989 857 826178 234 0 0 192.168.192.35 CH - [2015-05-28 09:45:26.925498] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCLJqwxQzZrjHGWOXAAAAB2 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1131 6114 -% 962532 3507 958169 157 0 0 192.168.192.35 CH - [2015-05-28 09:45:27.888354] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCLJ6wxQzZrjHGVm2UAAAAK TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1298 4447 -% 929533 5382 923129 213 0 0 192.168.192.35 CH - [2015-05-28 09:45:28.828146] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCLKKwxQzZrjHGVm2YAAAAG TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 492 3812 -% 815205 3041 809605 1851 0 0 192.168.192.35 CH - [2015-05-28 09:45:29.722045] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCLKawxQzZrjHGVm2cAAAAH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 427 4141 -% 944323 2477 929857 11412 0 0 192.168.192.35 CH - [2015-05-28 09:45:29.760949] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCLKawxQzZrjHGVm2gAAAAI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1071 9749 -% 1220779 2874 214465 2849 0 0 192.168.192.35 CH - [2015-05-28 09:45:29.763589] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCLKawxQzZrjHGWOXEAAAB8 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1097 13218 -% 1550663 3646 539703 2824 0 0 192.168.192.35 CH - [2015-05-28 09:45:31.015932] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCLK6wxQzZrjHGVm2kAAAAE TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 456 1248 -% 1123874 2995 119998 168 0 0 192.168.192.35 CH - [2015-05-28 09:45:31.368306] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCLK6wxQzZrjHGWOXMAAAB6 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 498 1260 -% 989572 2030 986881 163 0 0 192.168.32.7 CH - [2015-05-28 09:47:44.372520] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7fb61778.523263f7bfb28" VjCLsKwxQzZrjHGVm3IAAAAQ TLSv1.2 ECDHE-RSA-AES128-SHA256 627 5651 -% 965297 646 963918 195 0 0 192.168.192.35 CH - [2015-05-28 09:54:03.451182] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCNK6wxQzZrjHGWOdEAAABf TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 835 7838 -% 1016962 2326 11659 1907 0 0 192.168.192.35 CH - [2015-05-28 09:54:04.493543] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCNLKwxQzZrjHGWOdIAAABd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 503 2427 14% 1159438 3417 154476 162 0 0 192.168.192.35 CH - [2015-05-28 09:54:06.784751] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCNLqwxQzZrjHGWOdMAAABl TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 502 1876 22% 880277 2312 876965 228 0 0 192.168.32.7 CH - [2015-05-28 09:56:16.877138] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3; Microsoft Outlook 15.0.4745; ms-office; MSOffice 15)" www.example.com 192.168.34.16 443 proxy-server - + "40host.523265e082e52" VjCNsKwxQzZrjHGVm4YAAAAq TLSv1.2 ECDHE-RSA-AES128-SHA256 787 4627 -% 974057 880 972195 249 0 0 192.168.186.76 CH - [2015-05-28 10:00:12.981190] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCOnKwxQzZrjHGVm54AAAAC TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 12038 -% 871504 6866 860753 2365 3 0 192.168.186.76 CH - [2015-05-28 10:00:12.858710] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCOnKwxQzZrjHGVm50AAAAB TLSv1.2 ECDHE-RSA-AES256-SHA384 1271 12038 -% 1051625 7276 40631 2293 3 0 192.168.186.76 CH - [2015-05-28 10:00:13.893378] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "906d646.5232442388e61" VjCOnawxQzZrjHGVm6AAAAAF TLSv1.2 ECDHE-RSA-AES256-SHA384 662 0 -% 913737 6393 903305 2354 3 0 192.168.186.76 CH - [2015-05-28 10:00:13.940389] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCOnawxQzZrjHGVm6EAAAAD TLSv1.2 ECDHE-RSA-AES256-SHA384 662 7866 -% 990346 6305 978244 3870 3 0 192.168.186.76 CH - [2015-05-28 10:00:16.043448] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCOoKwxQzZrjHGVm6IAAAAK TLSv1.2 ECDHE-RSA-AES256-SHA384 806 469 -% 965460 6389 956918 171 3 0 192.168.186.76 CH - [2015-05-28 10:00:17.022349] "GET /EMail/main.aspx HTTP/1.1" 200 3391 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCOoawxQzZrjHGVm6MAAAAG TLSv1.2 ECDHE-RSA-AES256-SHA384 678 3898 -% 953280 8678 941578 1202 3 0 192.168.186.76 CH - [2015-05-28 10:00:18.023392] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCOoqwxQzZrjHGVm6UAAAAI TLSv1.2 ECDHE-RSA-AES256-SHA384 662 4234 -% 942687 4165 930499 6416 3 0 192.168.186.76 CH - [2015-05-28 10:00:20.295712] "GET /EMail/inbox.aspx HTTP/1.1" 200 8392 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCOpKwxQzZrjHGVm6YAAAAE TLSv1.2 ECDHE-RSA-AES256-SHA384 662 8991 -% 1017345 4878 8179 2665 3 0 192.168.186.76 CH - [2015-05-28 10:00:22.800954] "GET /EMail/message.aspx?&mailId=3913_13&folderId=947_65&mailPos=0 HTTP/1.1" 200 15772 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCOpqwxQzZrjHGVm6cAAAAN TLSv1.2 ECDHE-RSA-AES256-SHA384 710 16452 -% 2907670 8637 869111 27445 3 0 192.168.186.76 CH - [2015-05-28 10:00:34.725523] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5882 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3913_13&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCOsqwxQzZrjHGVm6gAAAAO TLSv1.2 ECDHE-RSA-AES256-SHA384 1303 13742 -% 919953 4062 0 0 3 0 192.168.186.76 CH - [2015-05-28 10:01:13.133406] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCO2awxQzZrjHGWOhsAAABq TLSv1.2 ECDHE-RSA-AES256-SHA384 1271 13742 -% 1414253 7392 397154 4125 3 0 192.168.186.76 CH - [2015-05-28 10:01:16.817277] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCO3KwxQzZrjHGWOh0AAABr TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1148777 13354 132689 210 3 0 192.168.186.76 CH - [2015-05-28 10:01:17.978482] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7291 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCO3awxQzZrjHGWOh4AAABs TLSv1.2 ECDHE-RSA-AES256-SHA384 726 7802 -% 1104282 6340 93886 2526 3 0 192.168.192.35 CH - [2015-05-28 10:01:18.950679] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCO3qwxQzZrjHGWOiEAAABn TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1141 4620 56% 779799 2143 776712 234 0 0 192.168.192.35 CH - [2015-05-28 10:01:18.948999] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCO3qwxQzZrjHGWOiAAAABt TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1142 5902 22% 816151 2980 811870 186 0 0 192.168.192.35 CH - [2015-05-28 10:01:18.951876] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCO3qwxQzZrjHGVm60AAAAS TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1173 8269 23% 926806 1754 923565 163 0 0 192.168.192.35 CH - [2015-05-28 10:01:18.950280] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCO3qwxQzZrjHGVm6wAAAAR TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1168 12018 22% 1183463 2791 176173 211 0 0 192.168.192.35 CH - [2015-05-28 10:01:20.181451] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCO4KwxQzZrjHGVm64AAAAQ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 427 4141 -% 1092251 2739 80390 8461 0 0 192.168.192.35 CH - [2015-05-28 10:01:20.192681] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCO4KwxQzZrjHGVm68AAAAT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 455 9192 -% 1459111 2308 449865 2985 0 0 192.168.192.35 CH - [2015-05-28 10:01:20.190603] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCO4KwxQzZrjHGWOiIAAABx TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 429 5723 -% 1657881 3131 651408 2575 0 0 192.168.192.35 CH - [2015-05-28 10:01:21.297077] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCO4awxQzZrjHGVm7AAAAAU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 505 2551 14% 736647 3229 731917 170 0 0 192.168.192.35 CH - [2015-05-28 10:01:21.338104] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/header.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCO4awxQzZrjHGWOiQAAABw TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1170 12018 22% 956073 1939 950179 190 0 0 192.168.192.35 CH - [2015-05-28 10:01:21.299364] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCO4awxQzZrjHGWOiMAAAB0 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 501 594 56% 1097601 2818 93724 181 0 0 192.168.192.35 CH - [2015-05-28 10:01:21.340165] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCO4awxQzZrjHGWOiUAAAB5 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1178 4232 -% 1123565 2768 120029 99 0 0 192.168.192.35 CH - [2015-05-28 10:01:21.873863] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCO4awxQzZrjHGWOiYAAABy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 544 205 -% 821755 3163 817402 200 0 0 192.168.192.35 CH - [2015-05-28 10:01:21.691406] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCO4awxQzZrjHGVm7EAAAAW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 586 205 -% 1075295 2172 72341 202 0 0 192.168.192.35 CH - [2015-05-28 10:01:22.342691] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCO4qwxQzZrjHGWOicAAABB TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 540 206 -% 1008790 2272 5705 203 0 0 192.168.186.76 CH - [2015-05-28 10:02:24.913281] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8407 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCPIKwxQzZrjHGWOjAAAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 1180 9168 -% 1058992 7251 47348 2684 3 0 192.168.186.76 CH - [2015-05-28 10:02:24.914262] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCPIKwxQzZrjHGWOjEAAAB@ TLSv1.2 ECDHE-RSA-AES256-SHA384 1196 9827 -% 1177966 7316 159518 5164 3 0 192.168.186.76 CH - [2015-05-28 10:02:26.957607] "GET /EMail/message.aspx?&mailId=3913_14&folderId=947_65&mailPos=0 HTTP/1.1" 200 16592 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCPIqwxQzZrjHGWOjIAAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 710 17353 -% 1320267 8890 273675 34384 3 0 192.168.186.76 CH - [2015-05-28 10:02:35.292965] "GET /EMail/newMessage.aspx?action=reply&mailId=3913_14&folderId=947_65&showPics=false HTTP/1.1" 200 25077 "https://www.example.com/EMail/message.aspx?&mailId=3913_14&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCPK6wxQzZrjHGWOjUAAABH TLSv1.2 ECDHE-RSA-AES256-SHA384 1292 26148 -% 1476476 11803 402681 47946 6 3 192.168.186.76 CH - [2015-05-28 10:02:36.931455] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5882 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3913_14&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCPLKwxQzZrjHGWOjYAAABC TLSv1.2 ECDHE-RSA-AES256-SHA384 710 9666 -% 952688 4274 0 0 3 0 192.168.192.35 CH - [2015-05-28 10:06:02.305194] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCP@qwxQzZrjHGVm8wAAAAx TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1109 7838 -% 945647 3152 939990 1552 0 0 192.168.192.35 CH - [2015-05-28 10:06:03.323908] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCP@6wxQzZrjHGWOlAAAABh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1142 5902 22% 1138666 2028 135452 205 0 0 192.168.192.35 CH - [2015-05-28 10:06:03.323906] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCP@6wxQzZrjHGWOlAAAABi TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1141 4620 56% 1185306 3011 181074 182 0 0 192.168.192.35 CH - [2015-05-28 10:06:03.325938] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCP@6wxQzZrjHGWOlEAAABj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1173 8269 23% 1263005 1776 259276 209 0 0 192.168.192.35 CH - [2015-05-28 10:06:03.281586] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCP@6wxQzZrjHGVm80AAAAy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 503 2427 14% 1339484 4785 332334 372 0 0 192.168.192.35 CH - [2015-05-28 10:06:03.326506] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7160 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCP@6wxQzZrjHGVm84AAAA3 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1168 11916 22% 1601949 2589 596538 167 0 0 192.168.192.35 CH - [2015-05-28 10:06:04.962390] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCP-KwxQzZrjHGVm88AAAA0 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 427 4141 -% 1101357 3023 89215 8612 0 0 192.168.192.35 CH - [2015-05-28 10:06:04.971444] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCP-KwxQzZrjHGWOlIAAABo TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 429 5723 -% 1352756 2699 346182 3104 0 0 192.168.192.35 CH - [2015-05-28 10:06:04.971407] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCP-KwxQzZrjHGVm9AAAAAz TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 455 9192 -% 1603127 2241 587012 7876 0 0 192.168.192.35 CH - [2015-05-28 10:06:06.094261] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCP-qwxQzZrjHGWOlMAAABk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 502 1876 22% 886818 2035 883798 162 0 0 192.168.192.35 CH - [2015-05-28 10:06:06.089589] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCP-qwxQzZrjHGVm9EAAAA4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 505 2427 14% 903465 3387 898884 109 0 0 192.168.192.35 CH - [2015-05-28 10:06:06.096220] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCP-qwxQzZrjHGWOlQAAABz TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 501 594 56% 1097085 2338 93842 210 0 0 192.168.192.35 CH - [2015-05-28 10:06:06.138794] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCP-qwxQzZrjHGWOlUAAABm TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1178 4232 -% 1079041 3379 74887 145 0 0 192.168.192.35 CH - [2015-05-28 10:06:06.139357] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7161 "https://www.example.com/EMail/header.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCP-qwxQzZrjHGWOlYAAABu TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1170 11918 22% 1155144 2909 148693 181 0 0 192.168.192.35 CH - [2015-05-28 10:06:06.346630] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCP-qwxQzZrjHGWOlcAAABp TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 544 205 -% 1090531 3708 86011 193 0 0 192.168.192.35 CH - [2015-05-28 10:06:06.611576] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCP-qwxQzZrjHGVm9IAAAA1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 586 205 -% 1065508 2220 62505 174 0 0 192.168.32.7 CH - [2015-05-28 10:08:40.035375] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "7fb61778.523263f7bfb28" VjCQmKwxQzZrjHGWOnIAAABH TLSv1.2 ECDHE-RSA-AES128-SHA256 691 5475 -% 2934 1909 60 149 0 0 192.168.192.35 CH - [2015-05-28 10:14:04.371258] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCR3KwxQzZrjHGWOq4AAABI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 835 7838 -% 918355 2063 913532 2125 0 0 192.168.192.35 CH - [2015-05-28 10:14:05.336944] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCR3awxQzZrjHGWOrEAAABC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1067 2019 22% 776306 2416 773053 107 0 0 192.168.192.35 CH - [2015-05-28 10:14:05.315580] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCR3awxQzZrjHGWOrAAAABH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 503 2427 14% 895473 2246 891987 160 0 0 192.168.192.35 CH - [2015-05-28 10:14:05.338216] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCR3awxQzZrjHGVm@kAAAAM TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1066 737 56% 1060917 2970 56892 199 0 0 192.168.192.35 CH - [2015-05-28 10:14:05.545816] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCR3awxQzZrjHGVm@oAAAAP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1098 4239 23% 880309 2062 876341 145 0 0 192.168.192.35 CH - [2015-05-28 10:14:05.339849] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCR3awxQzZrjHGWOrIAAABG TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1093 8135 22% 1113970 1729 108764 156 0 0 192.168.192.35 CH - [2015-05-28 10:14:06.488249] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCR3qwxQzZrjHGWOrMAAABK TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 427 4141 -% 804765 4288 793193 6592 0 0 192.168.192.35 CH - [2015-05-28 10:14:06.496897] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCR3qwxQzZrjHGVm@sAAAAS TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 429 5723 -% 923868 1699 919255 2433 0 0 192.168.192.35 CH - [2015-05-28 10:14:06.500408] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCR3qwxQzZrjHGVm@wAAAAR TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 455 9192 -% 1575326 3074 567115 3117 0 0 192.168.192.35 CH - [2015-05-28 10:14:07.315445] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCR36wxQzZrjHGWOrQAAABF TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 505 2427 14% 928537 2099 924927 164 0 0 192.168.192.35 CH - [2015-05-28 10:14:07.316918] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCR36wxQzZrjHGWOrUAAABL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 502 1876 22% 1024660 1986 21748 153 0 0 192.168.192.35 CH - [2015-05-28 10:14:07.339464] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/header.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCR36wxQzZrjHGWOrcAAABN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1095 8135 22% 1031237 2986 24350 102 0 0 192.168.192.35 CH - [2015-05-28 10:14:07.318232] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCR36wxQzZrjHGWOrYAAABJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 501 594 56% 1167368 2180 164406 184 0 0 192.168.192.35 CH - [2015-05-28 10:14:07.339775] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCR36wxQzZrjHGWOrgAAABO TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1103 349 -% 1301313 3081 297424 149 0 0 192.168.192.35 CH - [2015-05-28 10:14:07.444870] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCR36wxQzZrjHGVm@0AAAAQ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 544 205 -% 1210792 3100 206824 177 0 0 192.168.192.35 CH - [2015-05-28 10:14:08.111269] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCR4KwxQzZrjHGVm@4AAAAT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 586 205 -% 783739 2006 781051 173 0 0 192.168.192.35 CH - [2015-05-28 10:14:08.421399] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCR4KwxQzZrjHGWOrkAAABS TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 540 206 -% 966912 3088 963008 164 0 0 192.168.192.35 CH - [2015-05-28 10:17:55.124434] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCSw6wxQzZrjHGWOuIAAAB3 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1034 3955 -% 909879 2107 906147 1101 0 0 192.168.192.35 CH - [2015-05-28 10:17:56.080717] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCSxKwxQzZrjHGWOuQAAAB6 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1067 2019 22% 870861 1813 867804 175 0 0 192.168.192.35 CH - [2015-05-28 10:17:56.060242] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCSxKwxQzZrjHGWOuMAAAB8 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 503 2427 14% 1175166 3059 170739 164 0 0 192.168.192.35 CH - [2015-05-28 10:17:56.081885] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCSxKwxQzZrjHGWOuUAAAB9 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1066 737 56% 1154200 2201 151338 129 0 0 192.168.192.35 CH - [2015-05-28 10:17:56.083587] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7239 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCSxKwxQzZrjHGVm-sAAAAh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1093 8184 22% 1155991 2634 149758 142 0 0 192.168.192.35 CH - [2015-05-28 10:17:56.084275] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCSxKwxQzZrjHGWOuYAAAB7 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1098 4239 23% 1177094 2669 173029 97 0 0 192.168.192.35 CH - [2015-05-28 10:17:57.306880] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCSxawxQzZrjHGWOucAAAB4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 427 4141 -% 792602 2205 779141 10656 0 0 192.168.192.35 CH - [2015-05-28 10:17:57.313887] "GET /EMail/overview.aspx HTTP/1.1" 200 5302 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCSxawxQzZrjHGWOugAAAB@ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 429 5724 -% 800247 2161 794420 2995 0 0 192.168.192.35 CH - [2015-05-28 10:17:57.318709] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCSxawxQzZrjHGVm-wAAAAd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 455 9192 -% 1201190 2191 192013 2820 0 0 192.168.192.35 CH - [2015-05-28 10:17:58.122153] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCSxqwxQzZrjHGWOuoAAABI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 505 2427 14% 1076176 2770 71753 213 0 0 192.168.192.35 CH - [2015-05-28 10:17:58.124245] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCSxqwxQzZrjHGWOusAAABC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 502 1876 22% 1076823 1770 74304 99 0 0 192.168.192.35 CH - [2015-05-28 10:17:58.141228] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCSxqwxQzZrjHGWOu0AAABG TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 501 594 56% 1080087 2780 76623 110 0 0 192.168.192.35 CH - [2015-05-28 10:17:58.136686] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCSxqwxQzZrjHGWOuwAAABA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 544 205 -% 1089089 2595 85808 138 0 0 192.168.192.35 CH - [2015-05-28 10:17:58.225273] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/header.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCSxqwxQzZrjHGVm-0AAAAi TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1095 8135 22% 1120891 3169 114599 154 0 0 192.168.192.35 CH - [2015-05-28 10:17:58.149019] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCSxqwxQzZrjHGWOu4AAABH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1103 349 -% 1409646 2982 405940 164 0 0 192.168.192.35 CH - [2015-05-28 10:17:58.550598] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCSxqwxQzZrjHGVm-4AAAAg TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 586 205 -% 1086605 2586 83254 205 0 0 192.168.192.35 CH - [2015-05-28 10:17:59.394874] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCSx6wxQzZrjHGVm-8AAAAo TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 540 206 -% 802527 2181 799405 197 0 0 192.168.186.76 CH - [2015-05-28 10:18:01.913344] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3913_14&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCSyawxQzZrjHGWOu8AAABK TLSv1.2 ECDHE-RSA-AES256-SHA384 8268 4545 -% 1531226 412535 97323 177 81 0 192.168.186.76 CH - [2015-05-28 10:18:03.458241] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3913_14&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCSy6wxQzZrjHGWOvEAAABL TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 952188 7762 935426 7367 3 0 192.168.186.76 CH - [2015-05-28 10:19:33.196874] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCTJawxQzZrjHGWOwQAAABc TLSv1.2 ECDHE-RSA-AES256-SHA384 1196 9827 -% 1609305 5706 593480 4520 3 0 192.168.186.76 CH - [2015-05-28 10:19:36.347415] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCTKKwxQzZrjHGWOwUAAABf TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1137833 14353 121142 163 3 0 192.168.186.76 CH - [2015-05-28 10:19:37.500311] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 9601 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCTKawxQzZrjHGWOwYAAABd TLSv1.2 ECDHE-RSA-AES256-SHA384 726 10207 -% 1078584 6059 65416 4870 3 0 192.168.192.35 CH - [2015-05-28 10:27:18.023058] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCU9qwxQzZrjHGWO04AAABr TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 835 7838 -% 1066198 3028 59639 2732 0 0 192.168.192.35 CH - [2015-05-28 10:27:19.118234] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCU96wxQzZrjHGWO08AAABq TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 503 2427 14% 658155 3583 652715 251 0 0 192.168.192.35 CH - [2015-05-28 10:27:21.517111] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCU@awxQzZrjHGWO1EAAABs TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 501 594 56% 901776 2033 898959 157 0 0 192.168.186.76 CH - [2015-05-28 10:34:37.143266] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 10805 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCWrawxQzZrjHGWO5oAAAB1 TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 15483 -% 1340350 4255 328012 5954 3 0 192.168.166.38 CH - [2015-05-28 10:34:42.764496] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "884be816.52326e7793ad0" VjCWsqwxQzZrjHGWO5wAAAB- TLSv1.2 ECDHE-RSA-AES256-SHA384 659 8674 -% 1067785 1262 65354 154 0 0 192.168.186.76 CH - [2015-05-28 10:34:59.638799] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3913_16&folderId=947_65&attachmentId=5&token=54780455088150825E18 HTTP/1.1" 200 2084757 "https://www.example.com/EMail/message.aspx?&mailId=3913_16&folderId=947_65&mailPos=1" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCWw6wxQzZrjHGVnDkAAAAj TLSv1.2 ECDHE-RSA-AES256-SHA384 1324 2151692 -% 4450476 7915 154744 188 3 0 192.168.186.76 CH - [2015-05-28 10:35:08.033501] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3913_16&folderId=947_65&attachmentId=3&token=54780455088150825E18 HTTP/1.1" 200 2022691 "https://www.example.com/EMail/message.aspx?&mailId=3913_16&folderId=947_65&mailPos=1" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCWzKwxQzZrjHGVnDsAAAAi TLSv1.2 ECDHE-RSA-AES256-SHA384 806 2090072 -% 7786042 9061 151195 187 3 0 192.168.186.76 CH - [2015-05-28 10:35:19.976460] "GET /EMail/newMessage.aspx?action=reply&mailId=3913_16&folderId=947_65&showPics=false HTTP/1.1" 200 23115 "https://www.example.com/EMail/message.aspx?&mailId=3913_16&folderId=947_65&mailPos=1" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCW16wxQzZrjHGVnD4AAAAk TLSv1.2 ECDHE-RSA-AES256-SHA384 774 23950 -% 1287207 8566 227594 47239 6 3 192.168.186.76 CH - [2015-05-28 10:35:21.341243] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3913_16&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCW2awxQzZrjHGVnD8AAAAl TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 948439 3953 937755 5371 3 0 192.168.186.76 CH - [2015-05-28 10:35:37.650518] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCW6awxQzZrjHGWO6UAAABC TLSv1.2 ECDHE-RSA-AES256-SHA384 1271 13742 -% 1855460 4687 840532 4826 3 0 192.168.186.76 CH - [2015-05-28 10:35:41.738875] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCW7awxQzZrjHGWO6cAAABH TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1206797 14574 189629 221 3 0 192.168.186.76 CH - [2015-05-28 10:35:43.004021] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 10790 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCW76wxQzZrjHGWO6gAAABF TLSv1.2 ECDHE-RSA-AES256-SHA384 726 11391 -% 1206530 7216 191289 5412 3 0 192.168.186.76 CH - [2015-05-28 10:35:45.932851] "GET /EMail/message.aspx?&mailId=3913_19&folderId=947_65&mailPos=1 HTTP/1.1" 200 16216 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCW8awxQzZrjHGWO6kAAABK TLSv1.2 ECDHE-RSA-AES256-SHA384 726 16900 -% 2278188 6276 239682 30282 3 0 192.168.186.76 CH - [2015-05-28 10:35:52.615685] "GET /EMail/newMessage.aspx?action=reply&mailId=3913_19&folderId=947_65&showPics=false HTTP/1.1" 200 22957 "https://www.example.com/EMail/message.aspx?&mailId=3913_19&folderId=947_65&mailPos=1" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCW@KwxQzZrjHGWO6oAAABL TLSv1.2 ECDHE-RSA-AES256-SHA384 774 23790 -% 1171429 5486 107719 54360 6 3 192.168.186.76 CH - [2015-05-28 10:35:53.868129] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3913_19&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCW@awxQzZrjHGWO6sAAABN TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 1084586 6404 63531 12672 3 0 192.168.186.76 CH - [2015-05-28 10:35:54.017297] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5882 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3913_19&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCW@qwxQzZrjHGVnEQAAAAr TLSv1.2 ECDHE-RSA-AES256-SHA384 1228 9827 -% 966421 6534 0 0 3 0 192.168.186.76 CH - [2015-05-28 10:36:53.259156] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5882 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3913_20&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCXNawxQzZrjHGWO7IAAABP TLSv1.2 ECDHE-RSA-AES256-SHA384 1303 13742 -% 954153 4519 0 0 3 0 192.168.192.35 CH - [2015-05-28 10:37:00.281514] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCXPKwxQzZrjHGVnEwAAAA0 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1141 4620 56% 1009759 1822 7010 213 0 0 192.168.192.35 CH - [2015-05-28 10:37:00.287365] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCXPKwxQzZrjHGWO7QAAABV TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1173 8269 23% 1251642 1718 248389 170 0 0 192.168.192.35 CH - [2015-05-28 10:37:00.281232] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCXPKwxQzZrjHGVnEsAAAA3 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1142 5902 22% 1258140 2018 255231 139 0 0 192.168.192.35 CH - [2015-05-28 10:37:00.299295] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7239 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCXPKwxQzZrjHGVnE0AAAAz TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1168 12067 22% 1242413 2588 236005 113 0 0 192.168.192.35 CH - [2015-05-28 10:37:01.584890] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCXPawxQzZrjHGVnE4AAAA4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 429 5723 -% 1072177 2798 67071 1670 0 0 192.168.192.35 CH - [2015-05-28 10:37:01.576639] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCXPawxQzZrjHGWO7UAAABU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 427 4141 -% 1277814 3175 263235 10630 0 0 192.168.192.35 CH - [2015-05-28 10:37:01.588558] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCXPawxQzZrjHGVnE8AAAA2 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 455 9192 -% 1852359 3782 838697 4912 0 0 192.168.192.35 CH - [2015-05-28 10:37:02.683563] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCXPqwxQzZrjHGVnFEAAAA5 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 504 1876 22% 971766 3336 967054 269 0 0 192.168.192.35 CH - [2015-05-28 10:37:02.722910] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCXPqwxQzZrjHGVnFMAAAA6 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1186 4231 -% 1172082 1878 169270 155 0 0 192.168.192.35 CH - [2015-05-28 10:37:02.683948] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCXPqwxQzZrjHGVnFIAAAA7 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 507 2551 14% 1360353 3082 355782 163 0 0 192.168.192.35 CH - [2015-05-28 10:37:02.723029] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCXPqwxQzZrjHGWO7YAAABe TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1172 12018 22% 1325752 1805 319998 161 0 0 192.168.192.35 CH - [2015-05-28 10:37:02.877340] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCXPqwxQzZrjHGWO7cAAABT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 536 206 -% 1328772 3245 324732 163 0 0 192.168.192.35 CH - [2015-05-28 10:37:03.472978] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCXP6wxQzZrjHGVnFQAAAA- TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 586 205 -% 861538 2514 858330 194 0 0 192.168.192.35 CH - [2015-05-28 10:37:04.103770] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCXQKwxQzZrjHGWO7gAAABb TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 540 206 -% 881717 2202 878602 155 0 0 192.168.186.76 CH - [2015-05-28 10:37:08.383983] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3913_20&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCXRKwxQzZrjHGVnFYAAAA9 TLSv1.2 ECDHE-RSA-AES256-SHA384 7441 630 -% 1553625 297891 236870 184 81 0 192.168.186.76 CH - [2015-05-28 10:37:09.949709] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3913_20&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCXRawxQzZrjHGVnFcAAAAC TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 875446 5539 861492 7012 3 0 192.168.186.76 CH - [2015-05-28 10:37:12.271345] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9585 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCXSKwxQzZrjHGVnFkAAAA@ TLSv1.2 ECDHE-RSA-AES256-SHA384 662 10191 -% 1298964 6908 284680 4968 3 0 192.168.186.76 CH - [2015-05-28 10:37:12.272181] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCXSKwxQzZrjHGVnFoAAAAA TLSv1.2 ECDHE-RSA-AES256-SHA384 1170 9827 -% 1451820 5824 436853 3569 3 0 192.168.186.76 CH - [2015-05-28 10:37:16.170294] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCXTKwxQzZrjHGVnFsAAAAF TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1087233 14682 70559 158 3 0 192.168.186.76 CH - [2015-05-28 10:37:17.271327] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8393 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCXTawxQzZrjHGVnFwAAAAD TLSv1.2 ECDHE-RSA-AES256-SHA384 726 8991 -% 1125323 7518 113351 2548 3 0 192.168.186.76 CH - [2015-05-28 10:37:19.126620] "GET /EMail/message.aspx?&mailId=3913_15&folderId=947_65&mailPos=0 HTTP/1.1" 200 15675 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCXT6wxQzZrjHGVnF0AAAAK TLSv1.2 ECDHE-RSA-AES256-SHA384 726 16356 -% 2427409 5225 387738 32046 3 0 192.168.186.76 CH - [2015-05-28 10:38:27.077116] "GET /EMail/newMessage.aspx?action=reply&mailId=3913_15&folderId=947_65&showPics=false HTTP/1.1" 200 22898 "https://www.example.com/EMail/message.aspx?&mailId=3913_15&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCXk6wxQzZrjHGWO8AAAABZ TLSv1.2 ECDHE-RSA-AES256-SHA384 1292 23887 -% 1211740 5293 143174 50374 6 3 192.168.186.76 CH - [2015-05-28 10:38:28.373690] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3913_15&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCXlKwxQzZrjHGWO8IAAABj TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 941666 7068 926526 6529 3 0 192.168.186.76 CH - [2015-05-28 10:38:47.197830] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCXp6wxQzZrjHGWO8UAAABm TLSv1.2 ECDHE-RSA-AES256-SHA384 1271 13742 -% 1425000 8184 408988 2973 3 0 192.168.186.76 CH - [2015-05-28 10:38:50.247484] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCXqqwxQzZrjHGWO8cAAABu TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1234570 13110 219659 165 3 0 192.168.186.76 CH - [2015-05-28 10:38:51.495831] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7288 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "906d646.5232442388e61" VjCXq6wxQzZrjHGWO8gAAABp TLSv1.2 ECDHE-RSA-AES256-SHA384 726 7802 -% 893099 7501 881408 2532 3 0 192.168.192.35 CH - [2015-05-28 10:39:28.010571] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCX0KwxQzZrjHGWO88AAABx TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1109 7838 -% 950014 2653 944820 1828 0 0 192.168.192.35 CH - [2015-05-28 10:39:29.030266] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCX0awxQzZrjHGWO9UAAABy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1168 11687 22% 720527 2822 714241 271 0 0 192.168.192.35 CH - [2015-05-28 10:39:29.026160] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCX0awxQzZrjHGWO9IAAABD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1142 5902 22% 739008 2994 735114 107 0 0 192.168.192.35 CH - [2015-05-28 10:39:29.028507] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCX0awxQzZrjHGWO9MAAAB5 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1141 4620 56% 917976 3105 914048 159 0 0 192.168.192.35 CH - [2015-05-28 10:39:29.028540] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCX0awxQzZrjHGWO9QAAABB TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1173 8122 23% 938415 3090 933846 163 0 0 192.168.192.35 CH - [2015-05-28 10:39:28.989087] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCX0KwxQzZrjHGWO9EAAABw TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 503 2427 14% 1043847 3078 39069 182 0 0 192.168.192.35 CH - [2015-05-28 10:39:30.074521] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCX0qwxQzZrjHGWO9YAAAB1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 427 4141 -% 793684 5055 780732 6913 0 0 192.168.192.35 CH - [2015-05-28 10:39:30.103763] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCX0qwxQzZrjHGWO9gAAAB- TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 455 9192 -% 1188247 3603 177093 3077 0 0 192.168.192.35 CH - [2015-05-28 10:39:30.078870] "GET /EMail/overview.aspx HTTP/1.1" 200 5300 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCX0qwxQzZrjHGWO9cAAAB2 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 429 5722 -% 1511879 3565 504582 2852 0 0 192.168.192.35 CH - [2015-05-28 10:39:30.894978] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCX0qwxQzZrjHGWO9sAAAB8 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 501 594 56% 882172 2401 878806 267 0 0 192.168.192.35 CH - [2015-05-28 10:39:30.891855] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCX0qwxQzZrjHGWO9kAAAB3 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 505 2427 14% 913174 3035 908444 199 0 0 192.168.192.35 CH - [2015-05-28 10:39:30.893251] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCX0qwxQzZrjHGWO9oAAAB6 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 502 1876 22% 1030766 2645 26615 269 0 0 192.168.192.35 CH - [2015-05-28 10:39:30.934960] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCX0qwxQzZrjHGWO9wAAAB9 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1178 4232 -% 1002277 2905 0 97 0 0 192.168.192.35 CH - [2015-05-28 10:39:30.947898] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/header.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCX0qwxQzZrjHGVnGcAAAAP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1170 12018 22% 1082437 2339 76750 177 0 0 192.168.192.35 CH - [2015-05-28 10:39:31.330213] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCX06wxQzZrjHGWO90AAAB7 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 586 205 -% 910191 3254 905732 480 0 0 192.168.192.35 CH - [2015-05-28 10:39:31.623256] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCX06wxQzZrjHGWO94AAABE TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 544 205 -% 815789 3080 811536 286 0 0 192.168.192.35 CH - [2015-05-28 10:46:00.558727] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCZWKwxQzZrjHGWPBsAAAB4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 835 7838 -% 921540 3771 915664 1217 0 0 192.168.192.35 CH - [2015-05-28 10:46:01.506374] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCZWawxQzZrjHGWPBwAAAB@ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 503 2427 14% 995024 2061 991708 166 0 0 192.168.192.35 CH - [2015-05-28 10:46:03.646266] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCZW6wxQzZrjHGWPB0AAABI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 504 1876 22% 909015 2532 905143 211 0 0 192.168.234.147 CH - [2015-05-28 10:59:12.119515] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7354 "-" "Mozilla/5.0 (Linux; Android 5.0.1; HTC_One_M8/4.19.166.3 Build/LRX22C) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/33.0.0.0 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8746765a.52315e8bc9840" VjCccKwxQzZrjHGVnLwAAAAl TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1278 11887 -% 921885 9832 905106 4766 6 0 192.168.192.35 CH - [2015-05-28 11:05:42.951835] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7364 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCd9qwxQzZrjHGWPNIAAABI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 786 11812 -% 874182 4046 867327 2170 0 0 192.168.192.35 CH - [2015-05-28 11:11:58.754343] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCfbqwxQzZrjHGWPREAAABK TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 835 7838 -% 816716 2329 812672 1140 0 0 192.168.192.35 CH - [2015-05-28 11:11:59.595727] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCfb6wxQzZrjHGWPRIAAABL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 503 2427 14% 799648 2091 796203 178 0 0 192.168.192.35 CH - [2015-05-28 11:12:01.763681] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7161 "https://www.example.com/EMail/header.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCfcawxQzZrjHGWPRMAAABJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 528 7892 22% 987846 3162 981730 198 0 0 192.168.192.35 CH - [2015-05-28 11:12:02.802865] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCfcqwxQzZrjHGWPRQAAABN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 540 206 -% 979998 2285 977018 188 0 0 192.168.148.10 CH - [2015-05-28 11:20:06.472639] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4cee471f.52326135178eb" VjChVqwxQzZrjHGWPWQAAABc TLSv1 ECDHE-RSA-AES256-SHA 836 11674 22% 812365 2531 805934 212 0 0 192.168.148.10 CH - [2015-05-28 11:20:06.455092] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4cee471f.52326135178eb" VjChVqwxQzZrjHGVnRMAAAAF TLSv1 ECDHE-RSA-AES256-SHA 804 5893 22% 930543 2526 926542 214 0 0 192.168.148.10 CH - [2015-05-28 11:20:07.923967] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4cee471f.52326135178eb" VjChV6wxQzZrjHGVnRQAAAAD TLSv1 ECDHE-RSA-AES256-SHA 518 1802 -% 699095 3810 694383 219 0 0 192.168.148.10 CH - [2015-05-28 11:20:07.912661] "GET /EMail/scripts/csshover.htc HTTP/1.1" 200 4255 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4cee471f.52326135178eb" VjChV6wxQzZrjHGWPWYAAABf TLSv1 ECDHE-RSA-AES256-SHA 374 4682 -% 881377 3035 877481 158 0 0 192.168.148.10 CH - [2015-05-28 11:20:13.628565] "GET /EMail/main.aspx HTTP/1.1" 200 3392 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4cee471f.52326135178eb" VjChXawxQzZrjHGWPWcAAABd TLSv1 ECDHE-RSA-AES256-SHA 518 3818 -% 979338 3204 973529 1843 0 0 192.168.148.10 CH - [2015-05-28 11:20:14.925614] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8545 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4cee471f.52326135178eb" VjChXqwxQzZrjHGWPWgAAABZ TLSv1 ECDHE-RSA-AES256-SHA 502 9234 -% 1611169 4123 598130 4715 0 0 192.168.148.10 CH - [2015-05-28 11:20:17.577554] "GET /EMail/inbox.aspx HTTP/1.1" 200 9933 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4cee471f.52326135178eb" VjChYawxQzZrjHGWPWoAAABk TLSv1 ECDHE-RSA-AES256-SHA 470 10415 -% 1167866 2623 159234 5096 0 0 192.168.148.10 CH - [2015-05-28 11:20:19.140660] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4cee471f.52326135178eb" VjChY6wxQzZrjHGWPWsAAABp TLSv1 ECDHE-RSA-AES256-SHA 502 538 -% 871457 2013 868721 190 0 0 192.168.148.10 CH - [2015-05-28 11:20:20.812588] "GET /EMail/message.aspx?&mailId=3913_18&folderId=933_77&mailPos=0 HTTP/1.1" 200 11385 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4cee471f.52326135178eb" VjChZKwxQzZrjHGWPWwAAABz TLSv1 ECDHE-RSA-AES256-SHA 518 11892 -% 1329781 4840 304306 19681 0 0 192.168.213.21 CH - [2015-05-28 11:29:35.612491] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7952 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCjj6wxQzZrjHGWPbsAAABD TLSv1.2 ECDHE-RSA-AES128-SHA256 810 12467 -% 1015023 1602 8323 4153 0 0 192.168.213.21 CH - [2015-05-28 11:29:36.963622] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCjkKwxQzZrjHGWPb4AAABw TLSv1.2 ECDHE-RSA-AES128-SHA256 1023 422 -% 857176 2684 853740 167 0 0 192.168.213.21 CH - [2015-05-28 11:29:36.873745] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCjkKwxQzZrjHGWPbwAAAB5 TLSv1.2 ECDHE-RSA-AES128-SHA256 694 245 -% 1016156 3264 12020 159 0 0 192.168.213.21 CH - [2015-05-28 11:29:36.917464] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCjkKwxQzZrjHGVnTgAAAAp TLSv1.2 ECDHE-RSA-AES128-SHA256 1007 422 -% 979174 2002 976570 121 0 0 192.168.213.21 CH - [2015-05-28 11:29:36.956097] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCjkKwxQzZrjHGWPb0AAABB TLSv1.2 ECDHE-RSA-AES128-SHA256 975 422 -% 1105830 2007 103019 200 0 0 192.168.213.21 CH - [2015-05-28 11:29:38.265107] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCjkqwxQzZrjHGWPb8AAAB1 TLSv1.2 ECDHE-RSA-AES128-SHA256 742 245 -% 850028 2799 846399 151 0 0 192.168.213.21 CH - [2015-05-28 11:29:38.615254] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6438f8ec.52327abebebd6" VjCjkqwxQzZrjHGWPcEAAAB- TLSv1.2 ECDHE-RSA-AES128-SHA256 730 5651 -% 939198 907 937382 172 0 0 192.168.213.21 CH - [2015-05-28 11:30:50.309152] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCj2qwxQzZrjHGWPcsAAABC TLSv1.2 ECDHE-RSA-AES128-SHA256 927 2331 -% 1000271 3168 996277 156 0 0 192.168.213.21 CH - [2015-05-28 11:30:51.013433] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCj26wxQzZrjHGVnUAAAAA3 TLSv1.2 ECDHE-RSA-AES128-SHA256 1167 550 -% 750233 8350 740921 219 0 0 192.168.213.21 CH - [2015-05-28 11:30:51.795275] "GET /EMail/error.aspx HTTP/1.1" 200 3772 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCj26wxQzZrjHGVnUEAAAAz TLSv1.2 ECDHE-RSA-AES128-SHA256 630 4250 -% 818033 2435 805380 9635 0 0 192.168.213.21 CH - [2015-05-28 11:31:02.914573] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7953 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCj5qwxQzZrjHGWPc4AAABK TLSv1.2 ECDHE-RSA-AES128-SHA256 910 12312 -% 968274 4444 958873 4093 0 0 192.168.213.21 CH - [2015-05-28 11:31:45.766861] "GET /EMail/error.aspx HTTP/1.1" 200 3805 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCkEawxQzZrjHGVnUQAAAA2 TLSv1.2 ECDHE-RSA-AES128-SHA256 958 8152 -% 764122 2222 752278 8946 0 0 192.168.213.21 CH - [2015-05-28 11:31:54.056359] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7953 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCkGqwxQzZrjHGWPdcAAABX TLSv1.2 ECDHE-RSA-AES128-SHA256 910 12312 -% 1011365 3286 4572 2875 0 0 192.168.213.21 CH - [2015-05-28 11:32:35.866627] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7380 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCkQ6wxQzZrjHGVnUoAAAAC TLSv1.2 ECDHE-RSA-AES128-SHA256 990 11736 -% 971787 2991 964177 3735 0 0 192.168.213.21 CH - [2015-05-28 11:32:47.112863] "GET /EMail/main.aspx HTTP/1.1" 200 3412 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCkT6wxQzZrjHGWPd0AAABW TLSv1.2 ECDHE-RSA-AES128-SHA256 942 7768 -% 785720 2351 781614 1162 0 0 192.168.213.21 CH - [2015-05-28 11:32:48.209053] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCkUKwxQzZrjHGWPd4AAABg TLSv1.2 ECDHE-RSA-AES128-SHA256 894 8072 -% 1068533 2174 54576 11070 0 0 192.168.213.21 CH - [2015-05-28 11:32:48.291664] "GET /EMail/overview.aspx HTTP/1.1" 200 5303 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCkUKwxQzZrjHGWPeAAAABc TLSv1.2 ECDHE-RSA-AES128-SHA256 847 5963 -% 1127735 1695 123804 1746 0 0 192.168.213.21 CH - [2015-05-28 11:32:48.284238] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCkUKwxQzZrjHGWPd8AAABi TLSv1.2 ECDHE-RSA-AES128-SHA256 879 9683 -% 1481181 2806 470346 3724 0 0 192.168.213.21 CH - [2015-05-28 11:32:49.546583] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCkUawxQzZrjHGWPeEAAABd TLSv1.2 ECDHE-RSA-AES128-SHA256 694 245 -% 833107 2283 830015 201 0 0 192.168.213.21 CH - [2015-05-28 11:32:49.959121] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCkUawxQzZrjHGWPeIAAABZ TLSv1.2 ECDHE-RSA-AES128-SHA256 726 245 -% 876556 3112 872541 201 0 0 192.168.213.21 CH - [2015-05-28 11:33:03.663043] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCkX6wxQzZrjHGWPeUAAABp TLSv1.2 ECDHE-RSA-AES128-SHA256 926 13376 -% 1753153 2936 743241 2964 0 0 192.168.213.21 CH - [2015-05-28 11:33:05.100583] "GET /EMail/images/msgClosed.png HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCkYawxQzZrjHGWPeYAAABz TLSv1.2 ECDHE-RSA-AES128-SHA256 975 422 -% 992866 2811 989176 154 0 0 192.168.213.21 CH - [2015-05-28 11:33:21.067372] "GET /EMail/MailHandler?service=downloadAllAttachments&mailId=3914_34&folderId=3502_5&token=35603344708532475E18 HTTP/1.1" 200 117926 "https://www.example.com/EMail/message.aspx?&mailId=3914_34&folderId=3502_5&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCkcawxQzZrjHGVnU8AAAAK TLSv1.2 ECDHE-RSA-AES128-SHA256 1038 126759 -% 1524382 5634 502157 210 0 0 192.168.186.76 CH - [2015-05-28 11:38:50.526717] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjCluqwxQzZrjHGVnWEAAAAY TLSv1.2 ECDHE-RSA-AES256-SHA384 1031 6651 14% 890552 5440 882668 166 3 0 192.168.186.76 CH - [2015-05-28 11:38:50.527600] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjCluqwxQzZrjHGWPjYAAAB5 TLSv1.2 ECDHE-RSA-AES256-SHA384 1031 6091 22% 1071797 4695 64566 160 3 0 192.168.186.76 CH - [2015-05-28 11:38:55.927770] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjClv6wxQzZrjHGVnWQAAAAX TLSv1.2 ECDHE-RSA-AES256-SHA384 1063 5974 -% 890365 4436 884430 154 3 0 192.168.186.76 CH - [2015-05-28 11:38:56.922755] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e7ad7f96.52327cd330483" VjClwKwxQzZrjHGWPjkAAAB8 TLSv1.2 ECDHE-RSA-AES256-SHA384 711 5894 -% 917955 1062 915712 218 0 0 192.168.235.66 CH - [2015-05-28 11:42:45.971098] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7356 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCmpawxQzZrjHGVnXQAAAAt TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 778 11767 -% 989005 1730 984065 2240 0 0 192.168.235.66 CH - [2015-05-28 11:42:47.481203] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCmp6wxQzZrjHGWPl0AAABj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 777 732 56% 837072 2138 833992 225 0 0 192.168.235.66 CH - [2015-05-28 11:42:47.485781] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCmp6wxQzZrjHGVnXYAAAAu TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 777 2014 22% 898514 1752 895904 192 0 0 192.168.235.66 CH - [2015-05-28 11:42:47.409906] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCmp6wxQzZrjHGVnXUAAAAr TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 524 2421 13% 1174352 2954 169420 169 0 0 192.168.235.66 CH - [2015-05-28 11:42:47.490639] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCmp6wxQzZrjHGWPl4AAABZ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 764 1823 -% 1117668 2956 113961 107 0 0 192.168.235.66 CH - [2015-05-28 11:42:47.486092] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCmp6wxQzZrjHGVnXcAAAAv TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 767 8130 22% 1142534 1703 137184 101 0 0 192.168.235.66 CH - [2015-05-28 11:42:47.490947] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCmp6wxQzZrjHGWPl8AAABk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 772 4381 23% 1396630 1717 393318 190 0 0 192.168.235.66 CH - [2015-05-28 11:42:49.031971] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCmqawxQzZrjHGWPmAAAABp TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 513 1792 -% 953213 2705 949651 178 0 0 192.168.235.66 CH - [2015-05-28 11:42:49.024265] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCmqawxQzZrjHGVnXkAAAAx TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 509 2545 14% 1097374 2971 92397 199 0 0 192.168.235.66 CH - [2015-05-28 11:43:44.874983] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCm4KwxQzZrjHGVnX0AAAA2 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1330 559 -% 1106972 3299 102857 173 0 0 192.168.235.66 CH - [2015-05-28 11:43:46.050134] "GET /EMail/main.aspx HTTP/1.1" 200 3388 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCm4qwxQzZrjHGVnX4AAAA5 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 593 3804 -% 830750 2458 826694 1115 0 0 192.168.235.66 CH - [2015-05-28 11:43:47.114846] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCm46wxQzZrjHGWPmkAAABn TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 741 4381 23% 691625 3004 686421 184 0 0 192.168.235.66 CH - [2015-05-28 11:43:47.020000] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCm46wxQzZrjHGVnX8AAAA6 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 493 2421 13% 985607 2956 980447 237 0 0 192.168.235.66 CH - [2015-05-28 11:43:48.184823] "GET /EMail/overview.aspx HTTP/1.1" 200 5289 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCm5KwxQzZrjHGVnYEAAAA- TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 790 5849 -% 1028944 3024 22445 2817 0 0 192.168.235.66 CH - [2015-05-28 11:43:48.102458] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCm5KwxQzZrjHGVnYAAAAA7 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 533 4128 -% 1185412 1918 174265 8667 0 0 192.168.235.66 CH - [2015-05-28 11:43:48.098490] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCm5KwxQzZrjHGWPmoAAABx TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 561 9179 -% 2074499 2534 63295 4468 0 0 192.168.235.66 CH - [2015-05-28 11:43:49.490041] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCm5awxQzZrjHGWPmsAAAB0 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 744 1386 -% 788007 1999 785278 149 0 0 192.168.235.66 CH - [2015-05-28 11:43:49.374907] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCm5awxQzZrjHGVnYMAAAA9 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 480 2421 13% 1000228 3293 994773 263 0 0 192.168.235.66 CH - [2015-05-28 11:43:49.405024] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCm5awxQzZrjHGVnYQAAAAB TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 497 2421 13% 1010108 2969 5568 126 0 0 192.168.235.66 CH - [2015-05-28 11:43:50.384629] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCm5qwxQzZrjHGWPmwAAABy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 786 1398 -% 548677 3058 544730 130 0 0 192.168.235.66 CH - [2015-05-28 11:43:50.499920] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCm5qwxQzZrjHGVnYUAAAAC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 508 2421 13% 601260 3030 596531 177 0 0 192.168.235.66 CH - [2015-05-28 11:43:52.408906] "GET /EMail/inbox.aspx HTTP/1.1" 200 17625 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCm6KwxQzZrjHGVnYYAAAA@ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 536 18135 -% 1448667 3009 421625 5427 0 0 192.168.235.66 CH - [2015-05-28 11:43:54.051624] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCm6qwxQzZrjHGWPm4AAAB5 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 749 2559 13% 802542 2730 798521 178 0 0 192.168.235.66 CH - [2015-05-28 11:43:53.966961] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCm6awxQzZrjHGVnYcAAAAF TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 484 1878 -% 955348 2986 951595 129 0 0 192.168.235.66 CH - [2015-05-28 11:43:54.030853] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCm6qwxQzZrjHGWPm0AAAB2 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 736 677 -% 1061719 3068 57551 222 0 0 192.168.235.66 CH - [2015-05-28 11:43:54.061008] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCm6qwxQzZrjHGVnYgAAAAD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 739 1951 -% 1062534 1630 59954 165 0 0 192.168.235.66 CH - [2015-05-28 11:43:54.064858] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCm6qwxQzZrjHGWPm8AAAB1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 739 665 -% 1059782 3064 56101 81 0 0 192.168.235.66 CH - [2015-05-28 11:43:54.971400] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCm6qwxQzZrjHGWPnAAAAB- TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 479 2421 13% 679396 1945 676017 138 0 0 192.168.235.66 CH - [2015-05-28 11:44:06.876068] "GET /EMail/message.aspx?&mailId=3893_40&folderId=2634_84&mailPos=1 HTTP/1.1" 200 15198 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCm9qwxQzZrjHGWPnMAAAB7 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1145 15817 -% 1229839 3047 186074 39436 0 0 192.168.235.66 CH - [2015-05-28 11:44:08.265904] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/message.aspx?&mailId=3893_40&folderId=2634_84&mailPos=1" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCm@KwxQzZrjHGWPnQAAAB4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 539 2421 13% 905961 3071 901184 165 0 0 192.168.235.66 CH - [2015-05-28 11:44:09.300030] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/message.aspx?&mailId=3893_40&folderId=2634_84&mailPos=1" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCm@awxQzZrjHGWPnUAAAB@ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 524 2545 14% 837163 2996 832585 166 0 0 192.168.235.66 CH - [2015-05-28 11:44:22.706921] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3893_40&folderId=2634_84&attachmentId=3&token=43768909266713313E18 HTTP/1.1" 200 273627 "https://www.example.com/EMail/message.aspx?&mailId=3893_40&folderId=2634_84&mailPos=1" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCnBqwxQzZrjHGVnY0AAAAO TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1251 278498 -% 1232290 4056 990375 201 0 0 192.168.235.66 CH - [2015-05-28 11:45:01.442468] "GET /EMail/inbox.aspx HTTP/1.1" 200 17616 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCnLawxQzZrjHGWPnsAAABJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1103 18264 -% 1171595 2946 149681 6872 0 0 192.168.235.66 CH - [2015-05-28 11:45:02.809088] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCnLqwxQzZrjHGWPnwAAABF TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 484 1878 -% 948330 2999 944248 153 0 0 192.168.235.66 CH - [2015-05-28 11:45:02.906997] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCnLqwxQzZrjHGWPn0AAABL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 739 665 -% 946733 2550 943325 157 0 0 192.168.235.66 CH - [2015-05-28 11:45:02.897860] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCnLqwxQzZrjHGVnZEAAAAP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 749 2683 14% 1203579 4254 197388 142 0 0 192.168.235.66 CH - [2015-05-28 11:45:04.213781] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCnMKwxQzZrjHGWPn8AAABQ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 479 2421 13% 695368 3138 690233 357 0 0 192.168.235.66 CH - [2015-05-28 11:45:08.251955] "GET /EMail/message.aspx?&mailId=3914_32&folderId=2634_84&mailPos=0 HTTP/1.1" 200 15059 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCnNKwxQzZrjHGVnZQAAAAW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1145 15678 -% 1302883 3027 263346 35315 0 0 192.168.235.66 CH - [2015-05-28 11:45:09.693994] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/message.aspx?&mailId=3914_32&folderId=2634_84&mailPos=0" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCnNawxQzZrjHGVnZUAAAAV TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 539 2421 13% 1008375 1853 4865 228 0 0 192.168.235.66 CH - [2015-05-28 11:45:10.961351] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/message.aspx?&mailId=3914_32&folderId=2634_84&mailPos=0" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCnNqwxQzZrjHGVnZcAAAAY TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 524 2421 13% 637370 2822 632719 221 0 0 192.168.235.66 CH - [2015-05-28 11:45:19.974813] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3914_32&folderId=2634_84&attachmentId=3&token=38096039770930964E18 HTTP/1.1" 200 785224 "https://www.example.com/EMail/message.aspx?&mailId=3914_32&folderId=2634_84&mailPos=0" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "7b6b8b34.52327dada049a" VjCnP6wxQzZrjHGWPoEAAABY TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1251 795970 -% 1808669 6488 197243 205 0 0 192.168.192.35 CH - [2015-05-28 11:45:24.687587] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCnRKwxQzZrjHGVnZgAAAAb TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 816 4435 -% 935395 3560 930820 205 0 0 192.168.192.35 CH - [2015-05-28 11:45:25.631437] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCnRawxQzZrjHGVnZkAAAAX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 429 676 75% 988177 3048 984183 277 0 0 192.168.192.35 CH - [2015-05-28 11:45:26.708592] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCnRqwxQzZrjHGVnZsAAAAc TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 395 318 -% 961689 3257 957585 213 0 0 192.168.192.35 CH - [2015-05-28 11:45:27.679285] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCnR6wxQzZrjHGVnZwAAAAe TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 377 7771 -% 1181875 3486 173808 3623 0 0 192.168.192.35 CH - [2015-05-28 11:45:28.899074] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCnSKwxQzZrjHGVnZ0AAAAd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 504 2427 14% 1069551 1995 65907 236 0 0 192.168.188.104 CH - [2015-05-28 11:51:31.095936] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "Microsoft-CryptoAPI/6.1" www.example.com 192.168.34.16 443 proxy-server - + "88969003.52327fa26c980" VjCos6wxQzZrjHGVnbMAAAAz TLSv1 ECDHE-RSA-AES256-SHA 660 8376 -% 1124150 1900 73974 181 0 0 192.168.192.35 CH - [2015-05-28 11:56:46.891669] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCp7qwxQzZrjHGWPuMAAAB9 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 835 7838 -% 963253 1958 959543 1195 0 0 192.168.192.35 CH - [2015-05-28 11:56:47.887499] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCp76wxQzZrjHGWPuQAAABE TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 503 2551 14% 990276 2226 986087 214 0 0 192.168.192.35 CH - [2015-05-28 11:56:50.381342] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCp8qwxQzZrjHGWPuYAAAB7 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 501 594 56% 1366469 5224 360030 206 0 0 192.168.213.21 CH - [2015-05-28 11:58:23.816407] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7380 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCqT6wxQzZrjHGVndMAAAAV TLSv1.2 ECDHE-RSA-AES128-SHA256 938 11731 -% 848328 2850 840866 3667 0 0 192.168.213.21 CH - [2015-05-28 11:58:37.185162] "GET /EMail/main.aspx HTTP/1.1" 200 3412 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCqXawxQzZrjHGWPvEAAABM TLSv1.2 ECDHE-RSA-AES128-SHA256 958 7768 -% 953854 3121 948773 1281 0 0 192.168.213.21 CH - [2015-05-28 11:58:38.742159] "GET /EMail/overview.aspx HTTP/1.1" 200 5302 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCqXqwxQzZrjHGWPvMAAABS TLSv1.2 ECDHE-RSA-AES128-SHA256 847 5963 -% 811243 3113 804625 2773 0 0 192.168.213.21 CH - [2015-05-28 11:58:38.642528] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCqXqwxQzZrjHGWPvIAAABQ TLSv1.2 ECDHE-RSA-AES128-SHA256 894 8072 -% 977916 3434 962579 11203 0 0 192.168.213.21 CH - [2015-05-28 11:58:38.775376] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCqXqwxQzZrjHGWPvQAAABP TLSv1.2 ECDHE-RSA-AES128-SHA256 879 9683 -% 1758092 2580 746901 4392 0 0 192.168.213.21 CH - [2015-05-28 11:58:42.202380] "GET /EMail/inbox.aspx HTTP/1.1" 200 9948 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCqYqwxQzZrjHGWPvYAAABY TLSv1.2 ECDHE-RSA-AES128-SHA256 566 10495 -% 1254206 3475 246517 3278 0 0 192.168.213.21 CH - [2015-05-28 11:58:43.682353] "GET /EMail/images/msgOpened.png HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCqY6wxQzZrjHGWPvcAAABU TLSv1.2 ECDHE-RSA-AES128-SHA256 678 245 -% 931165 2211 928235 221 0 0 192.168.213.21 CH - [2015-05-28 11:58:46.685830] "GET /EMail/newMessage.aspx?msg=new HTTP/1.1" 200 12050 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCqZqwxQzZrjHGWPvgAAABX TLSv1.2 ECDHE-RSA-AES128-SHA256 582 12660 -% 752038 2548 723084 24461 3 3 192.168.213.21 CH - [2015-05-28 11:58:48.098125] "GET /EMail/scripts/tinymce/plugins/charmap/plugin.min.js HTTP/1.1" 200 2698 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCqaKwxQzZrjHGVndgAAAAf TLSv1.2 ECDHE-RSA-AES128-SHA256 895 3525 38% 1085414 2915 80396 285 0 0 192.168.213.21 CH - [2015-05-28 11:58:48.003828] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCqaKwxQzZrjHGWPvoAAABe TLSv1.2 ECDHE-RSA-AES128-SHA256 598 3402 -% 1200455 2492 189905 7423 0 0 192.168.213.21 CH - [2015-05-28 11:58:48.090592] "GET /EMail/scripts/tinymce/plugins/fullpage/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCqaKwxQzZrjHGWPvsAAABc TLSv1.2 ECDHE-RSA-AES128-SHA256 991 422 -% 1118712 2229 115591 177 0 0 192.168.213.21 CH - [2015-05-28 11:58:48.096304] "GET /EMail/scripts/tinymce/plugins/paste/plugin.min.js HTTP/1.1" 200 6239 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCqaKwxQzZrjHGWPv0AAABT TLSv1.2 ECDHE-RSA-AES128-SHA256 895 7077 40% 1131374 3053 126466 132 0 0 192.168.213.21 CH - [2015-05-28 11:58:48.093365] "GET /EMail/scripts/tinymce/plugins/preview/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCqaKwxQzZrjHGWPvwAAABW TLSv1.2 ECDHE-RSA-AES128-SHA256 991 422 -% 1140313 3519 136115 143 0 0 192.168.213.21 CH - [2015-05-28 11:58:48.091180] "GET /EMail/scripts/tinymce/plugins/print/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCqaKwxQzZrjHGVndcAAAAX TLSv1.2 ECDHE-RSA-AES128-SHA256 975 422 -% 1353318 1836 350637 210 0 0 192.168.213.21 CH - [2015-05-28 11:58:48.099886] "GET /EMail/scripts/tinymce/plugins/searchreplace/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCqaKwxQzZrjHGWPv8AAABg TLSv1.2 ECDHE-RSA-AES128-SHA256 991 422 -% 1349931 2299 346839 156 0 0 192.168.213.21 CH - [2015-05-28 11:58:48.101732] "GET /EMail/scripts/tinymce/plugins/visualblocks/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCqaKwxQzZrjHGWPwAAAABf TLSv1.2 ECDHE-RSA-AES128-SHA256 991 422 -% 1617483 2336 614210 206 0 0 192.168.213.21 CH - [2015-05-28 11:58:48.099653] "GET /EMail/scripts/tinymce/themes/modern/theme.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCqaKwxQzZrjHGWPv4AAABb TLSv1.2 ECDHE-RSA-AES128-SHA256 975 422 -% 1621639 2327 618389 141 0 0 192.168.213.21 CH - [2015-05-28 11:58:48.104083] "GET /EMail/scripts/tinymce/plugins/insertdatetime/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCqaKwxQzZrjHGWPwEAAABi TLSv1.2 ECDHE-RSA-AES128-SHA256 991 422 -% 1618998 2788 615321 130 0 0 192.168.213.21 CH - [2015-05-28 11:58:48.334030] "GET /EMail/scripts/tinymce/plugins/hr/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCqaKwxQzZrjHGWPwIAAABa TLSv1.2 ECDHE-RSA-AES128-SHA256 1022 4115 -% 1535645 3381 530961 213 0 0 192.168.213.21 CH - [2015-05-28 11:58:49.280307] "GET /EMail/scripts/tinymce/plugins/image/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCqaawxQzZrjHGVndkAAAAc TLSv1.2 ECDHE-RSA-AES128-SHA256 710 245 -% 921526 3549 917013 226 0 0 192.168.213.21 CH - [2015-05-28 11:58:49.404713] "GET /EMail/scripts/tinymce/plugins/textcolor/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCqaawxQzZrjHGWPwUAAABz TLSv1.2 ECDHE-RSA-AES128-SHA256 991 422 -% 858040 2650 854634 156 0 0 192.168.213.21 CH - [2015-05-28 11:58:49.299312] "GET /EMail/scripts/tinymce/plugins/table/plugin.min.js HTTP/1.1" 200 9166 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCqaawxQzZrjHGWPwMAAABZ TLSv1.2 ECDHE-RSA-AES128-SHA256 614 9881 32% 1103981 3008 98375 165 0 0 192.168.213.21 CH - [2015-05-28 11:58:49.386435] "GET /EMail/scripts/tinymce/plugins/link/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCqaawxQzZrjHGWPwQAAABp TLSv1.2 ECDHE-RSA-AES128-SHA256 975 422 -% 1029280 3492 24909 157 0 0 192.168.213.21 CH - [2015-05-28 11:58:49.567664] "GET /EMail/scripts/tinymce/plugins/visualchars/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCqaawxQzZrjHGWPwcAAABl TLSv1.2 ECDHE-RSA-AES128-SHA256 991 422 -% 852633 2169 849485 146 0 0 192.168.213.21 CH - [2015-05-28 11:58:49.420727] "GET /EMail/scripts/tinymce/plugins/anchor/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCqaawxQzZrjHGWPwYAAABo TLSv1.2 ECDHE-RSA-AES128-SHA256 991 422 -% 1216640 1818 214020 222 0 0 192.168.213.21 CH - [2015-05-28 11:58:50.778150] "GET /EMail/scripts/tinymce/skins/lightgray/skin.min.css HTTP/1.1" 200 6013 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCqaqwxQzZrjHGWPwgAAABv TLSv1.2 ECDHE-RSA-AES128-SHA256 598 7058 17% 972514 2438 965637 254 0 0 192.168.213.21 CH - [2015-05-28 11:58:50.849949] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5474 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCqaqwxQzZrjHGWPwkAAABm TLSv1.2 ECDHE-RSA-AES128-SHA256 566 8578 -% 1175720 3200 0 0 0 0 192.168.213.21 CH - [2015-05-28 11:58:50.868915] "GET /EMail/scripts/tinymce/skins/lightgray/content.min.css HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCqaqwxQzZrjHGWPwoAAABu TLSv1.2 ECDHE-RSA-AES128-SHA256 694 245 -% 1184202 2861 180525 184 0 0 192.168.213.21 CH - [2015-05-28 11:58:51.839471] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce-small.eot? HTTP/1.1" 200 10316 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCqa6wxQzZrjHGWPwwAAABq TLSv1.2 ECDHE-RSA-AES128-SHA256 630 10948 -% 1061273 3067 56606 305 0 0 192.168.213.21 CH - [2015-05-28 11:58:51.839942] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce.eot? HTTP/1.1" 200 10024 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCqa6wxQzZrjHGWPw0AAABs TLSv1.2 ECDHE-RSA-AES128-SHA256 614 10660 -% 1065104 2917 60968 144 0 0 192.168.213.21 CH - [2015-05-28 11:59:08.133834] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCqfKwxQzZrjHGWPw8AAABx TLSv1.2 ECDHE-RSA-AES128-SHA256 1326 4307 -% 1185626 14291 169226 155 18 0 192.168.213.21 CH - [2015-05-28 11:59:09.480976] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc= HTTP/1.1" 200 3929 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCqfawxQzZrjHGVndwAAAAj TLSv1.2 ECDHE-RSA-AES128-SHA256 974 8280 -% 914417 3386 903173 7284 0 0 192.168.213.21 CH - [2015-05-28 11:59:15.038841] "GET /EMail/tree.aspx?sNode-sharedTree=treeSent HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCqg6wxQzZrjHGVnd0AAAAi TLSv1.2 ECDHE-RSA-AES128-SHA256 926 13376 -% 1518396 3067 508185 2915 0 0 192.168.213.21 CH - [2015-05-28 11:59:24.834816] "GET /EMail/tree.aspx?sNode-sharedTree=treeNewMsg HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCqjKwxQzZrjHGWPxMAAABB TLSv1.2 ECDHE-RSA-AES128-SHA256 926 13376 -% 1379114 4147 367840 2837 0 0 192.168.213.21 CH - [2015-05-28 11:59:26.286037] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5474 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCqjqwxQzZrjHGWPxQAAAB5 TLSv1.2 ECDHE-RSA-AES128-SHA256 894 12448 -% 874905 3415 0 0 0 0 192.168.32.7 CH - [2015-05-28 12:01:24.011968] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrBKwxQzZrjHGWPysAAABY TLSv1.2 ECDHE-RSA-AES128-SHA256 659 11875 -% 903348 884 897886 3684 0 0 192.168.32.7 CH - [2015-05-28 12:01:25.086339] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrBawxQzZrjHGWPy0AAABV TLSv1.2 ECDHE-RSA-AES128-SHA256 744 864 56% 848330 3010 844331 205 0 0 192.168.32.7 CH - [2015-05-28 12:01:25.095983] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrBawxQzZrjHGWPy8AAABe TLSv1.2 ECDHE-RSA-AES128-SHA256 776 1931 -% 941785 2813 938215 160 0 0 192.168.32.7 CH - [2015-05-28 12:01:25.039976] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrBawxQzZrjHGWPywAAABU TLSv1.2 ECDHE-RSA-AES128-SHA256 454 2713 14% 1003323 3016 0 134 0 0 192.168.32.7 CH - [2015-05-28 12:01:25.094775] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrBawxQzZrjHGWPy4AAABX TLSv1.2 ECDHE-RSA-AES128-SHA256 744 2144 22% 1079539 3835 74061 208 0 0 192.168.32.7 CH - [2015-05-28 12:01:25.100555] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrBawxQzZrjHGVneQAAAAs TLSv1.2 ECDHE-RSA-AES128-SHA256 760 4405 23% 1181303 3035 176026 213 0 0 192.168.32.7 CH - [2015-05-28 12:01:25.096196] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrBawxQzZrjHGVneMAAAAp TLSv1.2 ECDHE-RSA-AES128-SHA256 760 8573 22% 1283724 3018 276308 190 0 0 192.168.32.7 CH - [2015-05-28 12:01:26.455370] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrBqwxQzZrjHGVneUAAAAt TLSv1.2 ECDHE-RSA-AES128-SHA256 486 1866 -% 921379 2234 918197 238 0 0 192.168.32.7 CH - [2015-05-28 12:01:36.203719] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrEKwxQzZrjHGWPzIAAABW TLSv1.2 ECDHE-RSA-AES128-SHA256 920 630 -% 1045416 4157 40401 188 0 0 192.168.32.7 CH - [2015-05-28 12:01:37.267648] "GET /EMail/main.aspx HTTP/1.1" 200 3407 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrEawxQzZrjHGWPzMAAABd TLSv1.2 ECDHE-RSA-AES128-SHA256 486 3882 -% 954909 3665 949316 1209 0 0 192.168.32.7 CH - [2015-05-28 12:01:38.308689] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrEqwxQzZrjHGWPzQAAABj TLSv1.2 ECDHE-RSA-AES128-SHA256 470 4202 -% 1129651 3474 116317 9132 0 0 192.168.32.7 CH - [2015-05-28 12:01:38.352731] "GET /EMail/overview.aspx HTTP/1.1" 200 5303 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrEqwxQzZrjHGWPzYAAABg TLSv1.2 ECDHE-RSA-AES128-SHA256 760 5963 -% 1300554 2877 292175 4548 0 0 192.168.32.7 CH - [2015-05-28 12:01:38.352622] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrEqwxQzZrjHGWPzUAAABk TLSv1.2 ECDHE-RSA-AES128-SHA256 792 9683 -% 2080042 3393 68862 3501 0 0 192.168.32.7 CH - [2015-05-28 12:01:39.685945] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrE6wxQzZrjHGWPzcAAABf TLSv1.2 ECDHE-RSA-AES128-SHA256 502 1322 -% 1015492 3080 11481 200 0 0 192.168.32.7 CH - [2015-05-28 12:01:40.532415] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrFKwxQzZrjHGWPzgAAABb TLSv1.2 ECDHE-RSA-AES128-SHA256 534 1338 -% 898513 1982 895704 212 0 0 192.168.32.7 CH - [2015-05-28 12:01:41.462648] "GET /EMail/inbox.aspx HTTP/1.1" 200 12488 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrFawxQzZrjHGWPzkAAABi TLSv1.2 ECDHE-RSA-AES128-SHA256 470 13108 -% 915630 2048 907130 5285 0 0 192.168.32.7 CH - [2015-05-28 12:01:42.440856] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrFqwxQzZrjHGWPzoAAABa TLSv1.2 ECDHE-RSA-AES128-SHA256 486 602 -% 967350 2089 964444 205 0 0 192.168.32.7 CH - [2015-05-28 12:01:42.443457] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrFqwxQzZrjHGWPzwAAABz TLSv1.2 ECDHE-RSA-AES128-SHA256 486 1882 -% 1177145 1701 174680 209 0 0 192.168.32.7 CH - [2015-05-28 12:01:42.442385] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrFqwxQzZrjHGWPzsAAABh TLSv1.2 ECDHE-RSA-AES128-SHA256 486 602 -% 1215599 2923 211820 147 0 0 192.168.32.7 CH - [2015-05-28 12:01:42.484411] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrFqwxQzZrjHGWPz0AAABZ TLSv1.2 ECDHE-RSA-AES128-SHA256 776 2123 -% 1174768 1740 172311 141 0 0 192.168.32.7 CH - [2015-05-28 12:01:45.785575] "GET /EMail/message.aspx?&mailId=3914_1&folderId=3481_21&mailPos=3 HTTP/1.1" 200 11326 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrGawxQzZrjHGWPz8AAABl TLSv1.2 ECDHE-RSA-AES128-SHA256 518 11871 -% 1353607 6074 318949 27475 0 0 192.168.32.7 CH - [2015-05-28 12:01:49.752904] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3914_1&folderId=3481_21&attachmentId=2&token=4619775871560234E18 HTTP/1.1" 200 55086 "https://www.example.com/EMail/message.aspx?&mailId=3914_1&folderId=3481_21&mailPos=3" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrHawxQzZrjHGWP0AAAABo TLSv1.2 ECDHE-RSA-AES128-SHA256 614 57828 -% 1065355 6184 49198 207 0 0 192.168.32.7 CH - [2015-05-28 12:02:01.545063] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/message.aspx?&mailId=3914_1&folderId=3481_21&mailPos=3" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrKawxQzZrjHGWP0IAAABv TLSv1.2 ECDHE-RSA-AES128-SHA256 824 2331 -% 863462 4797 857490 208 0 0 192.168.32.7 CH - [2015-05-28 12:02:02.129238] "GET /EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=false HTTP/1.1" 200 12953 "https://www.example.com/EMail/message.aspx?&mailId=3914_1&folderId=3481_21&mailPos=3" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrKqwxQzZrjHGWP0MAAABm TLSv1.2 ECDHE-RSA-AES128-SHA256 872 13749 -% 1050267 3584 22864 21488 3 3 192.168.32.7 CH - [2015-05-28 12:02:03.284669] "GET /EMail/scripts/tinymce/tinymce.min.js HTTP/1.1" 200 101997 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrK6wxQzZrjHGWP0QAAABu TLSv1.2 ECDHE-RSA-AES128-SHA256 550 104905 33% 907381 2333 869225 246 0 0 192.168.32.7 CH - [2015-05-28 12:02:04.403142] "GET /EMail/scripts/tinymce/langs/de.js HTTP/1.1" 200 2969 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrLKwxQzZrjHGWP0YAAABq TLSv1.2 ECDHE-RSA-AES128-SHA256 550 3620 38% 1255172 2038 251547 204 0 0 192.168.32.7 CH - [2015-05-28 12:02:04.385039] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrLKwxQzZrjHGWP0UAAABt TLSv1.2 ECDHE-RSA-AES128-SHA256 534 3402 -% 1305263 3183 295878 5486 0 0 192.168.32.7 CH - [2015-05-28 12:02:04.454097] "GET /EMail/scripts/tinymce/plugins/preview/plugin.min.js HTTP/1.1" 200 737 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrLKwxQzZrjHGWP0cAAABx TLSv1.2 ECDHE-RSA-AES128-SHA256 856 1504 51% 1403716 2234 400386 223 0 0 192.168.32.7 CH - [2015-05-28 12:02:04.458608] "GET /EMail/scripts/tinymce/themes/modern/theme.min.js HTTP/1.1" 200 2651 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrLKwxQzZrjHGWP0gAAABn TLSv1.2 ECDHE-RSA-AES128-SHA256 856 3477 41% 1400370 2792 396341 148 0 0 192.168.32.7 CH - [2015-05-28 12:02:04.469490] "GET /EMail/scripts/tinymce/plugins/paste/plugin.min.js HTTP/1.1" 200 6239 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrLKwxQzZrjHGWP0wAAABy TLSv1.2 ECDHE-RSA-AES128-SHA256 856 7077 40% 1462225 1750 458736 201 0 0 192.168.32.7 CH - [2015-05-28 12:02:04.466352] "GET /EMail/scripts/tinymce/plugins/visualblocks/plugin.min.js HTTP/1.1" 200 525 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrLKwxQzZrjHGVneoAAAAv TLSv1.2 ECDHE-RSA-AES128-SHA256 856 1296 43% 1632423 2752 628465 194 0 0 192.168.32.7 CH - [2015-05-28 12:02:04.463551] "GET /EMail/scripts/tinymce/plugins/fullpage/plugin.min.js HTTP/1.1" 200 2325 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrLKwxQzZrjHGWP0oAAABw TLSv1.2 ECDHE-RSA-AES128-SHA256 856 3157 36% 1663130 1678 660358 158 0 0 192.168.32.7 CH - [2015-05-28 12:02:04.462597] "GET /EMail/scripts/tinymce/plugins/print/plugin.min.js HTTP/1.1" 200 182 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrLKwxQzZrjHGWP0kAAABs TLSv1.2 ECDHE-RSA-AES128-SHA256 856 944 55% 1683494 3065 679361 116 0 0 192.168.32.7 CH - [2015-05-28 12:02:04.466350] "GET /EMail/scripts/tinymce/plugins/searchreplace/plugin.min.js HTTP/1.1" 200 2586 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrLKwxQzZrjHGWP0sAAAB0 TLSv1.2 ECDHE-RSA-AES128-SHA256 856 3413 40% 1747015 2747 742954 157 0 0 192.168.32.7 CH - [2015-05-28 12:02:04.473441] "GET /EMail/scripts/tinymce/plugins/hr/plugin.min.js HTTP/1.1" 200 191 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrLKwxQzZrjHGWP04AAABB TLSv1.2 ECDHE-RSA-AES128-SHA256 840 960 53% 1758753 2750 754998 147 0 0 192.168.32.7 CH - [2015-05-28 12:02:04.469728] "GET /EMail/scripts/tinymce/plugins/charmap/plugin.min.js HTTP/1.1" 200 2698 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrLKwxQzZrjHGWP00AAABD TLSv1.2 ECDHE-RSA-AES128-SHA256 856 3525 38% 1794692 3276 789837 201 0 0 192.168.32.7 CH - [2015-05-28 12:02:04.474294] "GET /EMail/scripts/tinymce/plugins/insertdatetime/plugin.min.js HTTP/1.1" 200 867 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrLKwxQzZrjHGWP08AAAB5 TLSv1.2 ECDHE-RSA-AES128-SHA256 856 1632 42% 1834503 2684 830301 213 0 0 192.168.32.7 CH - [2015-05-28 12:02:04.476407] "GET /EMail/scripts/tinymce/plugins/table/plugin.min.js HTTP/1.1" 200 9166 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrLKwxQzZrjHGWP1IAAAB3 TLSv1.2 ECDHE-RSA-AES128-SHA256 856 10074 32% 2102657 2061 97185 225 0 0 192.168.32.7 CH - [2015-05-28 12:02:04.473802] "GET /EMail/scripts/tinymce/plugins/visualchars/plugin.min.js HTTP/1.1" 200 608 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrLKwxQzZrjHGVnesAAAAy TLSv1.2 ECDHE-RSA-AES128-SHA256 856 1376 54% 2187742 3538 182999 203 0 0 192.168.32.7 CH - [2015-05-28 12:02:04.475379] "GET /EMail/scripts/tinymce/plugins/textcolor/plugin.min.js HTTP/1.1" 200 1647 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrLKwxQzZrjHGWP1AAAAB1 TLSv1.2 ECDHE-RSA-AES128-SHA256 856 2416 44% 2202943 1973 200027 128 0 0 192.168.32.7 CH - [2015-05-28 12:02:04.477324] "GET /EMail/scripts/tinymce/plugins/link/plugin.min.js HTTP/1.1" 200 1835 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrLKwxQzZrjHGWP1MAAAB2 TLSv1.2 ECDHE-RSA-AES128-SHA256 856 2608 41% 2432512 2818 428505 223 0 0 192.168.32.7 CH - [2015-05-28 12:02:04.477948] "GET /EMail/scripts/tinymce/plugins/image/plugin.min.js HTTP/1.1" 200 2136 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrLKwxQzZrjHGVnewAAAAx TLSv1.2 ECDHE-RSA-AES128-SHA256 856 2965 42% 2454127 1927 450812 386 0 0 192.168.32.7 CH - [2015-05-28 12:02:04.475751] "GET /EMail/scripts/tinymce/plugins/anchor/plugin.min.js HTTP/1.1" 200 339 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrLKwxQzZrjHGWP1EAAAB- TLSv1.2 ECDHE-RSA-AES128-SHA256 856 1104 63% 2467445 3502 462769 157 0 0 192.168.32.7 CH - [2015-05-28 12:02:07.042944] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5882 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrL6wxQzZrjHGWP1UAAAB9 TLSv1.2 ECDHE-RSA-AES128-SHA256 518 8994 -% 854675 1915 0 0 0 0 192.168.32.7 CH - [2015-05-28 12:02:07.042486] "GET /EMail/scripts/tinymce/skins/lightgray/content.min.css HTTP/1.1" 200 588 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrL6wxQzZrjHGVne0AAAA3 TLSv1.2 ECDHE-RSA-AES128-SHA256 550 1183 38% 936881 2954 932585 158 0 0 192.168.32.7 CH - [2015-05-28 12:02:07.004296] "GET /EMail/scripts/tinymce/skins/lightgray/skin.min.css HTTP/1.1" 200 6071 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrL6wxQzZrjHGWP1QAAAB8 TLSv1.2 ECDHE-RSA-AES128-SHA256 534 7191 17% 1036081 1893 30794 143 0 0 192.168.32.7 CH - [2015-05-28 12:02:08.092505] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce.eot? HTTP/1.1" 200 10024 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrMKwxQzZrjHGWP1YAAAB6 TLSv1.2 ECDHE-RSA-AES128-SHA256 566 10660 -% 1018378 3072 14205 167 0 0 192.168.32.7 CH - [2015-05-28 12:02:08.092636] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce-small.eot? HTTP/1.1" 200 10316 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrMKwxQzZrjHGVne4AAAA1 TLSv1.2 ECDHE-RSA-AES128-SHA256 582 10948 -% 1031248 2959 27049 167 0 0 192.168.32.7 CH - [2015-05-28 12:03:30.764601] "GET /EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=true HTTP/1.1" 200 12972 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrgqwxQzZrjHGWP14AAABK TLSv1.2 ECDHE-RSA-AES128-SHA256 888 13765 -% 1139377 5491 99344 32103 3 3 192.168.32.7 CH - [2015-05-28 12:03:32.078841] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=true" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrhKwxQzZrjHGWP18AAABA TLSv1.2 ECDHE-RSA-AES128-SHA256 534 3402 -% 864539 2959 855882 5013 0 0 192.168.32.7 CH - [2015-05-28 12:03:32.212266] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5874 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=true" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrhKwxQzZrjHGWP2AAAABJ TLSv1.2 ECDHE-RSA-AES128-SHA256 808 9155 -% 942131 1907 0 0 0 0 192.168.32.7 CH - [2015-05-28 12:03:35.236831] "GET /EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=false HTTP/1.1" 200 12951 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=true" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrh6wxQzZrjHGWP2EAAABF TLSv1.2 ECDHE-RSA-AES128-SHA256 598 13572 -% 1150999 3205 122953 22994 3 3 192.168.32.7 CH - [2015-05-28 12:03:36.550347] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCriKwxQzZrjHGWP2IAAABM TLSv1.2 ECDHE-RSA-AES128-SHA256 534 3402 -% 879044 3630 869456 5116 0 0 192.168.32.7 CH - [2015-05-28 12:03:36.688444] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5882 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCriKwxQzZrjHGVnfoAAAAA TLSv1.2 ECDHE-RSA-AES128-SHA256 808 9171 -% 947492 2990 0 0 0 0 192.168.32.7 CH - [2015-05-28 12:03:45.333512] "GET /EMail/overview.aspx HTTP/1.1" 200 5303 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrkawxQzZrjHGWP2MAAABL TLSv1.2 ECDHE-RSA-AES128-SHA256 760 5963 -% 979705 3097 972801 2845 0 0 192.168.32.7 CH - [2015-05-28 12:03:45.349794] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrkawxQzZrjHGWP2QAAABS TLSv1.2 ECDHE-RSA-AES128-SHA256 792 9683 -% 1608494 3347 596084 4476 0 0 192.168.32.7 CH - [2015-05-28 12:03:47.873993] "GET /EMail/inbox.aspx HTTP/1.1" 200 12487 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrk6wxQzZrjHGWP2YAAABR TLSv1.2 ECDHE-RSA-AES128-SHA256 470 13108 -% 1291637 3020 283684 3825 0 0 192.168.32.7 CH - [2015-05-28 12:03:50.401946] "GET /EMail/message.aspx?&mailId=3914_1&folderId=3481_21&mailPos=3 HTTP/1.1" 200 11332 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrlqwxQzZrjHGWP2cAAABP TLSv1.2 ECDHE-RSA-AES128-SHA256 518 11887 -% 1380315 3092 351297 25063 0 0 192.168.32.7 CH - [2015-05-28 12:03:58.804357] "GET /EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=false HTTP/1.1" 200 12952 "https://www.example.com/EMail/message.aspx?&mailId=3914_1&folderId=3481_21&mailPos=3" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrnqwxQzZrjHGWP2oAAABV TLSv1.2 ECDHE-RSA-AES128-SHA256 872 13749 -% 1064834 5238 32313 25334 3 3 192.168.32.7 CH - [2015-05-28 12:04:00.011582] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCroKwxQzZrjHGWP2sAAABe TLSv1.2 ECDHE-RSA-AES128-SHA256 534 3402 -% 831517 3019 822410 5390 0 0 192.168.32.7 CH - [2015-05-28 12:04:00.156306] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5882 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCroKwxQzZrjHGWP2wAAABU TLSv1.2 ECDHE-RSA-AES128-SHA256 808 9171 -% 965461 2653 0 0 0 0 192.168.32.7 CH - [2015-05-28 12:04:20.029240] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrtKwxQzZrjHGVnf0AAAAH TLSv1.2 ECDHE-RSA-AES128-SHA256 2381 550 -% 911166 27012 876168 207 23 0 192.168.32.7 CH - [2015-05-28 12:04:20.954717] "GET /EMail/error.aspx HTTP/1.1" 200 3825 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrtKwxQzZrjHGVnf4AAAAK TLSv1.2 ECDHE-RSA-AES128-SHA256 550 4314 -% 922338 2465 911012 8205 0 0 192.168.32.7 CH - [2015-05-28 12:04:34.280016] "GET /EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=false HTTP/1.1" 200 12999 "https://www.example.com/EMail/message.aspx?&mailId=3914_1&folderId=3481_21&mailPos=3" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrwqwxQzZrjHGWP3AAAABd TLSv1.2 ECDHE-RSA-AES128-SHA256 872 13797 -% 981909 5575 945895 28407 3 3 192.168.32.7 CH - [2015-05-28 12:04:35.402690] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrw6wxQzZrjHGWP3EAAABj TLSv1.2 ECDHE-RSA-AES128-SHA256 534 3402 -% 1007570 3191 994604 8528 0 0 192.168.32.7 CH - [2015-05-28 12:04:35.551328] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5882 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrw6wxQzZrjHGWP3IAAABg TLSv1.2 ECDHE-RSA-AES128-SHA256 808 9171 -% 885705 3242 0 0 0 0 192.168.32.7 CH - [2015-05-28 12:04:47.517590] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCrz6wxQzZrjHGWP3QAAABb TLSv1.2 ECDHE-RSA-AES128-SHA256 2349 630 -% 1317597 29881 285357 209 23 0 192.168.32.7 CH - [2015-05-28 12:04:48.849979] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4040 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_1&folderId=3481_21&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCr0KwxQzZrjHGWP3UAAABi TLSv1.2 ECDHE-RSA-AES128-SHA256 646 4522 -% 1056315 4287 43925 7528 0 0 192.168.32.7 CH - [2015-05-28 12:04:54.610582] "POST /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 12495 "https://www.example.com/EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCr1qwxQzZrjHGWP3cAAABz TLSv1.2 ECDHE-RSA-AES128-SHA256 694 13039 -% 1072157 4906 59583 6329 0 0 192.168.32.7 CH - [2015-05-28 12:04:55.735831] "GET /EMail/images/msgOpenedReplied.png HTTP/1.1" 200 717 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCr16wxQzZrjHGWP3gAAABh TLSv1.2 ECDHE-RSA-AES128-SHA256 518 1194 -% 908669 3295 904604 208 0 0 192.168.192.35 CH - [2015-05-28 12:09:24.012806] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCs5KwxQzZrjHGWP5wAAABN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 835 7838 -% 913971 2128 909334 1881 0 0 192.168.192.35 CH - [2015-05-28 12:09:24.952630] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCs5KwxQzZrjHGWP50AAABF TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 503 2427 14% 963202 3354 958043 208 0 0 192.168.192.35 CH - [2015-05-28 12:09:26.836652] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCs5qwxQzZrjHGWP58AAABQ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 501 594 56% 1165069 3344 160811 155 0 0 192.168.30.33 CH - [2015-05-28 12:09:41.693788] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "b236254a.523283b27fd5c" VjCs9awxQzZrjHGWP6MAAABP TLSv1.2 ECDHE-RSA-AES256-SHA384 659 8674 -% 1070556 1289 68229 164 0 0 192.168.213.21 CH - [2015-05-28 12:11:19.016395] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCtV6wxQzZrjHGWP7YAAABl TLSv1.2 ECDHE-RSA-AES128-SHA256 954 4302 -% 950420 4032 945386 219 0 0 192.168.213.21 CH - [2015-05-28 12:11:20.338126] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "6438f8ec.52327abebebd6" VjCtWKwxQzZrjHGWP7gAAABr TLSv1.2 ECDHE-RSA-AES128-SHA256 794 5475 -% 2509 1628 59 144 0 0 192.168.213.21 CH - [2015-05-28 12:11:20.188337] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCtWKwxQzZrjHGWP7cAAABo TLSv1.2 ECDHE-RSA-AES128-SHA256 534 357 -% 951668 3085 947893 271 0 0 192.168.213.21 CH - [2015-05-28 12:11:21.160239] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCtWawxQzZrjHGWP7kAAABv TLSv1.2 ECDHE-RSA-AES128-SHA256 518 7834 -% 974675 2200 968148 3613 0 0 192.168.213.21 CH - [2015-05-28 12:11:22.440407] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCtWqwxQzZrjHGWP74AAABn TLSv1.2 ECDHE-RSA-AES128-SHA256 959 422 -% 758581 1727 756103 208 0 0 192.168.213.21 CH - [2015-05-28 12:11:22.376035] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCtWqwxQzZrjHGWP7oAAABx TLSv1.2 ECDHE-RSA-AES128-SHA256 646 2527 14% 855558 3412 850391 164 0 0 192.168.213.21 CH - [2015-05-28 12:11:22.412920] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCtWqwxQzZrjHGWP7sAAABm TLSv1.2 ECDHE-RSA-AES128-SHA256 927 422 -% 1047880 3195 43826 159 0 0 192.168.213.21 CH - [2015-05-28 12:11:22.433481] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCtWqwxQzZrjHGWP70AAABt TLSv1.2 ECDHE-RSA-AES128-SHA256 943 422 -% 1108375 2239 105468 149 0 0 192.168.213.21 CH - [2015-05-28 12:11:22.419330] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCtWqwxQzZrjHGWP7wAAABu TLSv1.2 ECDHE-RSA-AES128-SHA256 927 422 -% 1209930 3224 205836 156 0 0 192.168.213.21 CH - [2015-05-28 12:11:23.807163] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjCtW6wxQzZrjHGWP78AAABw TLSv1.2 ECDHE-RSA-AES128-SHA256 678 245 -% 859005 2171 855973 225 0 0 192.168.192.35 CH - [2015-05-28 12:20:30.849052] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCvfqwxQzZrjHGWQA4AAAB@ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1142 5902 22% 693230 4522 687677 166 0 0 192.168.192.35 CH - [2015-05-28 12:20:30.860163] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCvfqwxQzZrjHGWQBEAAABC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1173 8122 23% 883308 1761 879734 204 0 0 192.168.192.35 CH - [2015-05-28 12:20:30.853775] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCvfqwxQzZrjHGWQA8AAABG TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1141 4620 56% 903587 2858 899725 196 0 0 192.168.192.35 CH - [2015-05-28 12:20:30.854697] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCvfqwxQzZrjHGWQBAAAABI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1168 12018 22% 953028 2131 946658 194 0 0 192.168.192.35 CH - [2015-05-28 12:20:31.869922] "GET /EMail/overview.aspx HTTP/1.1" 200 5304 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCvf6wxQzZrjHGWQBIAAABK TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 429 5726 -% 966168 3870 958288 2858 0 0 192.168.192.35 CH - [2015-05-28 12:20:31.873567] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCvf6wxQzZrjHGWQBMAAABA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 455 9192 -% 1240826 2418 231323 2752 0 0 192.168.192.35 CH - [2015-05-28 12:20:32.865952] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCvgKwxQzZrjHGWQBYAAABF TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 503 594 56% 754215 3647 749742 160 0 0 192.168.192.35 CH - [2015-05-28 12:20:32.861308] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCvgKwxQzZrjHGWQBQAAABJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 507 2427 14% 845252 2399 841625 187 0 0 192.168.192.35 CH - [2015-05-28 12:20:32.905186] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCvgKwxQzZrjHGWQBgAAABQ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1186 4231 -% 837011 2017 834129 225 0 0 192.168.192.35 CH - [2015-05-28 12:20:32.863385] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCvgKwxQzZrjHGWQBUAAABN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 504 1876 22% 961748 1929 958888 154 0 0 192.168.192.35 CH - [2015-05-28 12:20:32.904973] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCvgKwxQzZrjHGWQBcAAABM TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1172 11687 22% 1075053 2160 69107 213 0 0 192.168.192.35 CH - [2015-05-28 12:20:33.145353] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCvgawxQzZrjHGWQBkAAABL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 586 205 -% 918611 3042 914410 214 0 0 192.168.192.35 CH - [2015-05-28 12:20:43.038982] "GET /EMail/inbox.aspx HTTP/1.1" 200 12481 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCvi6wxQzZrjHGVnkIAAAAM TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1072 16988 -% 1337324 2393 329775 4186 0 0 192.168.192.35 CH - [2015-05-28 12:21:02.668786] "GET /EMail/message.aspx?&mailId=3914_47&folderId=540_81&mailPos=0 HTTP/1.1" 200 11333 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCvnqwxQzZrjHGWQBwAAABO TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1113 15811 -% 947157 3306 921654 21432 0 0 192.168.192.35 CH - [2015-05-28 12:21:08.262980] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3914_47&folderId=540_81&attachmentId=2&token=4427179315878613E18 HTTP/1.1" 200 55515 "https://www.example.com/EMail/message.aspx?&mailId=3914_47&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCvpKwxQzZrjHGWQB0AAABP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 575 57087 -% 1171542 6431 143179 224 0 0 192.168.192.35 CH - [2015-05-28 12:21:27.561557] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3914_47&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCvt6wxQzZrjHGVnkcAAAAQ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1345 4382 -% 1209506 3968 204721 203 0 0 192.168.192.35 CH - [2015-05-28 12:21:28.788655] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 11181 "https://www.example.com/EMail/message.aspx?&mailId=3914_47&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCvuKwxQzZrjHGVnkgAAAAP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 520 11662 -% 1185718 3816 177354 3503 0 0 192.168.192.35 CH - [2015-05-28 12:21:31.554644] "GET /EMail/message.aspx?&mailId=3915_8&folderId=540_81&mailPos=0 HTTP/1.1" 200 11330 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCvu6wxQzZrjHGVnkkAAAAU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 494 11811 -% 1247998 3099 225065 18948 0 0 192.168.192.35 CH - [2015-05-28 12:21:34.596927] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3915_8&folderId=540_81&attachmentId=2&token=19144311603252759E18 HTTP/1.1" 200 55695 "https://www.example.com/EMail/message.aspx?&mailId=3915_8&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCvvqwxQzZrjHGVnkoAAAAT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 574 57267 -% 1041072 3792 15480 193 0 0 192.168.192.35 CH - [2015-05-28 12:21:53.805191] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3915_8&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCv0awxQzZrjHGWQCMAAABc TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1344 4382 -% 998961 6538 991552 165 0 0 192.168.192.35 CH - [2015-05-28 12:21:54.821250] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 9884 "https://www.example.com/EMail/message.aspx?&mailId=3915_8&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCv0qwxQzZrjHGWQCQAAABT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 519 10335 -% 1100294 4300 90066 4993 0 0 192.168.192.35 CH - [2015-05-28 12:21:57.276289] "GET /EMail/message.aspx?&mailId=3915_7&folderId=540_81&mailPos=0 HTTP/1.1" 200 11336 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCv1awxQzZrjHGWQCYAAABd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 494 11788 -% 1377656 3134 352210 21586 0 0 192.168.192.35 CH - [2015-05-28 12:22:00.390218] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3915_7&folderId=540_81&attachmentId=2&token=147581254576251469E18 HTTP/1.1" 200 58022 "https://www.example.com/EMail/message.aspx?&mailId=3915_7&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCv2KwxQzZrjHGWQCcAAABj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 575 59688 -% 1007696 6607 978004 196 0 0 192.168.32.7 CH - [2015-05-28 12:22:18.623853] "GET /EMail/overview.aspx HTTP/1.1" 200 5302 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCv6qwxQzZrjHGWQDQAAABo TLSv1.2 ECDHE-RSA-AES128-SHA256 835 9651 -% 1170946 4336 164056 1731 0 0 192.168.32.7 CH - [2015-05-28 12:22:18.601684] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCv6qwxQzZrjHGWQDMAAABv TLSv1.2 ECDHE-RSA-AES128-SHA256 867 13371 -% 1534582 3112 519515 5916 0 0 192.168.32.7 CH - [2015-05-28 12:22:23.571180] "GET /EMail/inbox.aspx HTTP/1.1" 200 12493 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b8db057c.523281d7df7c0" VjCv76wxQzZrjHGWQDoAAABu TLSv1.2 ECDHE-RSA-AES128-SHA256 470 13108 -% 916818 3623 904672 6365 0 0 192.168.192.35 CH - [2015-05-28 12:22:47.887199] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3915_7&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCwB6wxQzZrjHGWQEAAAABD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1344 4382 -% 1082967 6689 75258 225 0 0 192.168.192.35 CH - [2015-05-28 12:22:48.987932] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 9888 "https://www.example.com/EMail/message.aspx?&mailId=3915_7&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCwCKwxQzZrjHGWQEEAAAB5 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 519 10339 -% 1188254 2458 180220 4922 0 0 192.168.192.35 CH - [2015-05-28 12:22:52.883935] "GET /EMail/message.aspx?&mailId=3914_48&folderId=540_81&mailPos=0 HTTP/1.1" 200 11345 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCwDKwxQzZrjHGWQEIAAAB3 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 495 11826 -% 1254888 3093 222192 28753 0 0 192.168.192.35 CH - [2015-05-28 12:23:07.177873] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3914_48&folderId=540_81&attachmentId=2&token=164657196119781837E18 HTTP/1.1" 200 56046 "https://www.example.com/EMail/message.aspx?&mailId=3914_48&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCwG6wxQzZrjHGWQEYAAAB9 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1219 61673 -% 1170039 6535 140415 228 0 0 192.168.192.35 CH - [2015-05-28 12:23:30.213996] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3914_48&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCwMqwxQzZrjHGWQEsAAAB4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1345 4382 -% 1223567 4183 218431 258 0 0 192.168.192.35 CH - [2015-05-28 12:23:31.452331] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8587 "https://www.example.com/EMail/message.aspx?&mailId=3914_48&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCwM6wxQzZrjHGWQEwAAABH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 520 9038 -% 1261272 3808 252131 4445 0 0 192.168.192.35 CH - [2015-05-28 12:23:34.422677] "GET /EMail/message.aspx?&mailId=3915_6&folderId=540_81&mailPos=0 HTTP/1.1" 200 11182 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCwNqwxQzZrjHGWQE4AAABC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 494 11634 -% 1371676 3623 331943 35022 0 0 192.168.192.35 CH - [2015-05-28 12:23:37.780841] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3915_6&folderId=540_81&attachmentId=2&token=56090140757720392E18 HTTP/1.1" 200 60462 "https://www.example.com/EMail/message.aspx?&mailId=3915_6&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCwOawxQzZrjHGWQE8AAABG TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 574 62157 -% 1094625 6470 63789 598 0 0 192.168.192.35 CH - [2015-05-28 12:24:10.971107] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3915_6&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCwWqwxQzZrjHGWQFYAAABN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1344 4382 -% 1206344 4103 201520 164 0 0 192.168.192.35 CH - [2015-05-28 12:24:12.192530] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7290 "https://www.example.com/EMail/message.aspx?&mailId=3915_6&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCwXKwxQzZrjHGWQFcAAABM TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 519 7712 -% 1177140 2533 168987 4991 0 0 192.168.192.35 CH - [2015-05-28 12:24:14.307875] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCwXqwxQzZrjHGWQFgAAABL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 467 3812 -% 898572 2007 894114 1831 0 0 192.168.192.35 CH - [2015-05-28 12:24:15.267810] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCwX6wxQzZrjHGWQFsAAABO TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1142 5902 22% 692191 2079 689057 160 0 0 192.168.192.35 CH - [2015-05-28 12:24:15.231172] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCwX6wxQzZrjHGWQFoAAABR TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 503 2427 14% 856269 2976 851535 212 0 0 192.168.192.35 CH - [2015-05-28 12:24:15.267966] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCwX6wxQzZrjHGWQF0AAABP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1141 4620 56% 1001839 3266 0 159 0 0 192.168.192.35 CH - [2015-05-28 12:24:15.268755] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCwX6wxQzZrjHGWQF4AAABV TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1173 8122 23% 1030317 2005 26331 159 0 0 192.168.192.35 CH - [2015-05-28 12:24:15.267965] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCwX6wxQzZrjHGWQFwAAABY TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1168 11687 22% 1131932 1989 127237 209 0 0 192.168.192.35 CH - [2015-05-28 12:24:16.435020] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCwYKwxQzZrjHGWQF8AAABe TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 427 4141 -% 1051308 2091 42339 6318 0 0 192.168.192.35 CH - [2015-05-28 12:24:16.443954] "GET /EMail/overview.aspx HTTP/1.1" 200 5302 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCwYKwxQzZrjHGWQGAAAABU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 429 5724 -% 1148945 1824 143547 2999 0 0 192.168.192.35 CH - [2015-05-28 12:24:16.447532] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCwYKwxQzZrjHGWQGEAAABX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 455 9192 -% 1480538 2152 470460 3752 0 0 192.168.192.35 CH - [2015-05-28 12:24:17.513186] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCwYawxQzZrjHGWQGQAAABW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 501 594 56% 686615 2125 683802 149 0 0 192.168.192.35 CH - [2015-05-28 12:24:17.620895] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCwYawxQzZrjHGWQGcAAABk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 544 205 -% 758062 1908 755483 158 0 0 192.168.192.35 CH - [2015-05-28 12:24:17.511086] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCwYawxQzZrjHGWQGMAAABT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 502 1876 22% 954769 2478 950933 225 0 0 192.168.192.35 CH - [2015-05-28 12:24:17.509746] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCwYawxQzZrjHGWQGIAAABc TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 505 2551 14% 985222 3221 980617 106 0 0 192.168.192.35 CH - [2015-05-28 12:24:17.548052] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7239 "https://www.example.com/EMail/header.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCwYawxQzZrjHGWQGUAAABd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1170 12067 22% 962128 3046 955268 106 0 0 192.168.192.35 CH - [2015-05-28 12:24:17.548700] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCwYawxQzZrjHGWQGYAAABj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1178 4232 -% 1124176 2247 121173 164 0 0 192.168.192.35 CH - [2015-05-28 12:24:17.958702] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCwYawxQzZrjHGWQGgAAABg TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 586 205 -% 714766 3205 710459 94 0 0 192.168.192.35 CH - [2015-05-28 12:24:18.557470] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ddd68909.5232636c09694" VjCwYqwxQzZrjHGWQGkAAABf TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 540 206 -% 902430 3082 898630 198 0 0 192.168.213.21 CH - [2015-05-28 12:52:42.230585] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjC3CqwxQzZrjHGWQUQAAABH TLSv1 ECDHE-RSA-AES256-SHA 1032 4257 -% 954435 5654 947801 219 0 0 192.168.213.21 CH - [2015-05-28 12:52:44.481219] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjC3DKwxQzZrjHGWQUUAAABC TLSv1 ECDHE-RSA-AES256-SHA 840 7990 -% 841984 2924 825755 12262 0 0 192.168.213.21 CH - [2015-05-28 12:54:12.630046] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/moveToFolder.aspx?folderName=Inbox&mailId=3913_21&mailId=3913_11" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjC3ZKwxQzZrjHGVnuIAAAAx TLSv1 ECDHE-RSA-AES256-SHA 1096 4177 -% 1345807 7969 336922 189 0 0 192.168.213.21 CH - [2015-05-28 12:54:16.583615] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjC3aKwxQzZrjHGWQVEAAABR TLSv1 ECDHE-RSA-AES256-SHA 904 4049 -% 982165 4728 976364 164 0 0 192.168.213.21 CH - [2015-05-28 12:54:16.585590] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjC3aKwxQzZrjHGVnuQAAAAz TLSv1 ECDHE-RSA-AES256-SHA 920 6267 14% 1115199 2953 110329 291 0 0 192.168.213.21 CH - [2015-05-28 12:54:43.091588] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjC3g6wxQzZrjHGWQVcAAABW TLSv1 ECDHE-RSA-AES256-SHA 776 11622 -% 915544 3172 908787 2731 0 0 192.168.213.21 CH - [2015-05-28 12:54:44.330879] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjC3hKwxQzZrjHGWQVoAAABj TLSv1 ECDHE-RSA-AES256-SHA 936 4049 -% 954513 2358 951230 245 0 0 192.168.213.21 CH - [2015-05-28 12:54:44.332313] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjC3hKwxQzZrjHGWQVsAAABc TLSv1 ECDHE-RSA-AES256-SHA 904 4049 -% 1143655 2641 140322 181 0 0 192.168.213.21 CH - [2015-05-28 12:54:44.330542] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjC3hKwxQzZrjHGWQVkAAABd TLSv1 ECDHE-RSA-AES256-SHA 936 7936 23% 1185868 2635 181140 195 0 0 192.168.213.21 CH - [2015-05-28 12:54:44.355670] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjC3hKwxQzZrjHGVnuUAAAA2 TLSv1 ECDHE-RSA-AES256-SHA 904 4049 -% 1353611 7842 344855 197 0 0 192.168.186.76 CH - [2015-05-28 13:02:58.056386] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "b6789691.52327ccbeae3e" VjC5cqwxQzZrjHGWQawAAABB TLSv1.2 ECDHE-RSA-AES256-SHA384 1271 4076 -% 944808 4239 939087 173 3 0 192.168.186.76 CH - [2015-05-28 13:02:58.354779] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjC5cqwxQzZrjHGWQa0AAAB0 TLSv1.2 ECDHE-RSA-AES256-SHA384 1399 4545 -% 1015421 5309 7779 209 3 0 192.168.186.76 CH - [2015-05-28 13:02:59.384409] "GET /EMail/main.aspx HTTP/1.1" 200 3391 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjC5c6wxQzZrjHGWQa8AAAB1 TLSv1.2 ECDHE-RSA-AES256-SHA384 678 3898 -% 914878 6490 904590 1821 3 0 192.168.186.76 CH - [2015-05-28 13:03:00.347834] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjC5dKwxQzZrjHGWQbAAAAB3 TLSv1.2 ECDHE-RSA-AES256-SHA384 662 4234 -% 705403 3928 689085 10638 3 0 192.168.186.76 CH - [2015-05-28 13:03:00.353715] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjC5dKwxQzZrjHGWQbEAAABD TLSv1.2 ECDHE-RSA-AES256-SHA384 1212 9827 -% 1565986 7117 551016 2778 3 0 192.168.186.76 CH - [2015-05-28 13:03:01.942785] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjC5dawxQzZrjHGWQbIAAAB2 TLSv1.2 ECDHE-RSA-AES256-SHA384 726 1370 -% 806000 4354 799965 170 3 0 192.168.186.76 CH - [2015-05-28 13:03:02.791951] "GET /EMail/inbox.aspx HTTP/1.1" 200 8392 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjC5dqwxQzZrjHGWQbMAAAB8 TLSv1.2 ECDHE-RSA-AES256-SHA384 662 8991 -% 1093522 6862 81802 2866 3 0 192.168.186.76 CH - [2015-05-28 13:03:03.909428] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjC5d6wxQzZrjHGWQbUAAAB9 TLSv1.2 ECDHE-RSA-AES256-SHA384 678 1914 -% 809867 4323 803198 248 3 0 192.168.186.76 CH - [2015-05-28 13:03:03.908443] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjC5d6wxQzZrjHGWQbQAAAB- TLSv1.2 ECDHE-RSA-AES256-SHA384 678 634 -% 1060929 4507 54954 169 3 0 192.168.186.76 CH - [2015-05-28 13:03:05.642843] "GET /EMail/message.aspx?&mailId=3915_13&folderId=947_65&mailPos=0 HTTP/1.1" 200 15571 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjC5eawxQzZrjHGWQbYAAAB6 TLSv1.2 ECDHE-RSA-AES256-SHA384 710 16244 -% 2469423 5695 434754 26566 3 0 192.168.186.76 CH - [2015-05-28 13:03:12.364781] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/message.aspx?&mailId=3915_13&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjC5gKwxQzZrjHGWQbgAAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 726 2186 -% 902842 4017 896833 274 3 0 192.168.186.76 CH - [2015-05-28 13:03:13.879464] "GET /EMail/scripts/tinymce/tinymce.min.js HTTP/1.1" 200 101967 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3915_13&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjC5gawxQzZrjHGWQbkAAAB4 TLSv1.2 ECDHE-RSA-AES256-SHA384 742 105635 33% 919644 4786 882771 201 3 0 192.168.186.76 CH - [2015-05-28 13:03:14.902759] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3915_13&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjC5gqwxQzZrjHGWQboAAABH TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 989316 10626 971913 5030 3 0 192.168.186.76 CH - [2015-05-28 13:03:14.976175] "GET /EMail/scripts/tinymce/plugins/paste/plugin.min.js HTTP/1.1" 200 6239 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3915_13&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjC5gqwxQzZrjHGWQbsAAAB@ TLSv1.2 ECDHE-RSA-AES256-SHA384 1351 11040 40% 1032896 5772 24097 164 3 0 192.168.186.76 CH - [2015-05-28 13:03:14.977049] "GET /EMail/scripts/tinymce/themes/modern/theme.min.js HTTP/1.1" 200 2651 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3915_13&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjC5gqwxQzZrjHGWQbwAAABC TLSv1.2 ECDHE-RSA-AES256-SHA384 1351 7440 41% 1307195 5198 299516 163 3 0 192.168.186.76 CH - [2015-05-28 13:03:15.476718] "GET /EMail/scripts/tinymce/plugins/searchreplace/plugin.min.js HTTP/1.1" 200 2586 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3915_13&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjC5g6wxQzZrjHGWQb0AAABI TLSv1.2 ECDHE-RSA-AES256-SHA384 1276 3461 40% 829907 4368 823538 139 3 0 192.168.186.76 CH - [2015-05-28 13:03:15.904563] "GET /EMail/scripts/tinymce/plugins/insertdatetime/plugin.min.js HTTP/1.1" 200 867 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3915_13&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjC5g6wxQzZrjHGWQb4AAABG TLSv1.2 ECDHE-RSA-AES256-SHA384 758 1503 42% 565389 6940 556005 220 3 0 192.168.186.76 CH - [2015-05-28 13:03:16.299492] "GET /EMail/scripts/tinymce/plugins/link/plugin.min.js HTTP/1.1" 200 1835 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3915_13&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjC5hKwxQzZrjHGWQcAAAABA TLSv1.2 ECDHE-RSA-AES256-SHA384 758 2479 41% 694667 4107 688268 231 3 0 192.168.186.76 CH - [2015-05-28 13:03:16.026511] "GET /EMail/scripts/tinymce/plugins/hr/plugin.min.js HTTP/1.1" 200 191 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3915_13&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjC5hKwxQzZrjHGWQb8AAABK TLSv1.2 ECDHE-RSA-AES256-SHA384 758 831 53% 989595 4812 982671 154 3 0 192.168.186.76 CH - [2015-05-28 13:03:16.330504] "GET /EMail/scripts/tinymce/plugins/textcolor/plugin.min.js HTTP/1.1" 200 1647 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3915_13&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjC5hKwxQzZrjHGWQcEAAABF TLSv1.2 ECDHE-RSA-AES256-SHA384 758 2287 44% 708868 3621 702097 147 3 0 192.168.186.76 CH - [2015-05-28 13:03:16.481873] "GET /EMail/scripts/tinymce/plugins/visualchars/plugin.min.js HTTP/1.1" 200 608 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3915_13&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjC5hKwxQzZrjHGWQcIAAABJ TLSv1.2 ECDHE-RSA-AES256-SHA384 758 1247 54% 830302 6594 821234 212 3 0 192.168.186.76 CH - [2015-05-28 13:03:17.815946] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5882 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3915_13&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjC5hawxQzZrjHGWQcMAAABN TLSv1.2 ECDHE-RSA-AES256-SHA384 710 9666 -% 979940 6105 0 0 3 0 192.168.186.76 CH - [2015-05-28 13:03:18.634385] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce-small.eot? HTTP/1.1" 200 10316 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3915_13&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjC5hqwxQzZrjHGWQcQAAABM TLSv1.2 ECDHE-RSA-AES256-SHA384 774 11012 -% 659911 3960 654200 168 3 0 192.168.186.76 CH - [2015-05-28 13:09:01.514197] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9599 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjC63awxQzZrjHGWQfoAAABA TLSv1.2 ECDHE-RSA-AES256-SHA384 1047 14267 -% 1179130 6746 164559 5417 3 0 192.168.186.76 CH - [2015-05-28 13:09:01.514977] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjC63awxQzZrjHGWQfsAAABG TLSv1.2 ECDHE-RSA-AES256-SHA384 1079 13742 -% 1521556 6440 506839 3437 3 0 192.168.186.76 CH - [2015-05-28 13:09:02.729702] "GET /EMail/images/msgOpenedReplied.png HTTP/1.1" 200 717 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjC63qwxQzZrjHGWQfwAAABQ TLSv1.2 ECDHE-RSA-AES256-SHA384 694 1226 -% 877250 6619 869022 165 3 0 192.168.186.76 CH - [2015-05-28 13:09:04.833624] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjC64KwxQzZrjHGWQf4AAABF TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 4494738 11465 481387 208 3 0 192.168.186.76 CH - [2015-05-28 13:09:09.341143] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8499 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjC65awxQzZrjHGWQgAAAABN TLSv1.2 ECDHE-RSA-AES256-SHA384 726 9103 -% 1078230 5617 65820 4373 3 0 192.168.186.76 CH - [2015-05-28 13:09:14.821634] "GET /EMail/message.aspx?&mailId=3914_56&folderId=947_65&mailPos=0 HTTP/1.1" 200 16713 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjC66qwxQzZrjHGWQgIAAABM TLSv1.2 ECDHE-RSA-AES256-SHA384 726 17465 -% 2538449 7968 493966 30725 3 0 192.168.186.76 CH - [2015-05-28 13:09:51.318624] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3914_56&folderId=947_65&attachmentId=3&token=132172943051236762E18 HTTP/1.1" 200 724212 "https://www.example.com/EMail/message.aspx?&mailId=3914_56&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjC7D6wxQzZrjHGWQggAAABV TLSv1.2 ECDHE-RSA-AES256-SHA384 1399 767381 -% 1479517 9583 152411 291 3 0 192.168.186.76 CH - [2015-05-28 13:10:00.108039] "GET /EMail/newMessage.aspx?action=reply&mailId=3914_56&folderId=947_65&showPics=false HTTP/1.1" 200 22757 "https://www.example.com/EMail/message.aspx?&mailId=3914_56&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjC7GKwxQzZrjHGVnxoAAAAv TLSv1.2 ECDHE-RSA-AES256-SHA384 1292 23759 -% 2465537 8498 394562 50055 6 3 192.168.186.76 CH - [2015-05-28 13:10:02.725258] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5882 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_56&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjC7GqwxQzZrjHGVnxwAAAAy TLSv1.2 ECDHE-RSA-AES256-SHA384 1228 9827 -% 827461 6253 0 0 3 0 192.168.186.76 CH - [2015-05-28 13:10:02.643764] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_56&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjC7GqwxQzZrjHGVnxsAAAA3 TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 909405 6370 892395 8540 3 0 192.168.186.76 CH - [2015-05-28 13:10:18.762850] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_56&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjC7KqwxQzZrjHGWQhEAAABf TLSv1.2 ECDHE-RSA-AES256-SHA384 7863 630 -% 1777129 354379 402345 265 86 0 192.168.186.76 CH - [2015-05-28 13:10:20.553050] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_56&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjC7LKwxQzZrjHGWQhIAAABb TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 1007949 10995 984010 11009 3 0 192.168.186.76 CH - [2015-05-28 13:10:23.094238] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8497 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjC7L6wxQzZrjHGWQhMAAABi TLSv1.2 ECDHE-RSA-AES256-SHA384 662 9103 -% 1284792 5394 275109 2699 3 0 192.168.186.76 CH - [2015-05-28 13:21:48.183879] "GET /EMail/tree.aspx?sNode-sharedTree=treeSent HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "b6789691.52327ccbeae3e" VjC93KwxQzZrjHGWQnYAAABQ TLSv1.2 ECDHE-RSA-AES256-SHA384 1196 161 -% 15635984 4401 625969 2809 3 0 192.168.186.76 CH - [2015-05-28 13:21:45.291601] "GET /EMail/tree.aspx?sNode-sharedTree=treeTrash HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "b6789691.52327ccbeae3e" VjC92awxQzZrjHGWQnMAAABA TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 4076 -% 18531260 5181 520721 2582 3 0 192.168.186.76 CH - [2015-05-28 13:21:48.183527] "GET /EMail/sent.aspx?dir=desc HTTP/1.1" 200 47907 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "b6789691.52327ccbeae3e" VjC93KwxQzZrjHGWQnUAAABK TLSv1.2 ECDHE-RSA-AES256-SHA384 1180 161 -% 16459422 4344 861815 17646 3 0 192.168.186.76 CH - [2015-05-28 13:21:45.289255] "GET /EMail/trash.aspx?dir=desc HTTP/1.1" 200 53922 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "b6789691.52327ccbeae3e" VjC92awxQzZrjHGWQnIAAABI TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 4076 -% 19360565 4505 754266 16885 3 0 192.168.186.76 CH - [2015-05-28 13:21:54.096014] "GET /EMail/tree.aspx?sNode-sharedTree=treeSent HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjC94qwxQzZrjHGWQncAAABJ TLSv1.2 ECDHE-RSA-AES256-SHA384 1196 9827 -% 10707856 7720 693882 2889 3 0 192.168.186.76 CH - [2015-05-28 13:22:21.399319] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5474 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjC9-awxQzZrjHGWQnsAAABL TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 13326 -% 6451819 3979 0 0 3 0 192.168.186.76 CH - [2015-05-28 13:22:48.725201] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjC@GKwxQzZrjHGWQoAAAABV TLSv1.2 ECDHE-RSA-AES256-SHA384 1873 614 -% 969769 20366 945799 238 21 0 192.168.186.76 CH - [2015-05-28 13:22:49.707439] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc= HTTP/1.1" 200 3924 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "b6789691.52327ccbeae3e" VjC@GawxQzZrjHGWQoEAAABe TLSv1.2 ECDHE-RSA-AES256-SHA384 758 0 -% 8390695 8515 368389 11603 3 0 192.168.213.21 CH - [2015-05-28 13:25:56.618906] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7380 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjC@1KwxQzZrjHGWQpgAAABm TLSv1.2 ECDHE-RSA-AES128-SHA256 906 11827 -% 12990949 4633 983346 2240 0 0 192.168.213.21 CH - [2015-05-28 13:26:35.636395] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjC@@6wxQzZrjHGWQp8AAABq TLSv1.2 ECDHE-RSA-AES128-SHA256 1102 4323 -% 8563425 6228 556325 176 0 0 192.168.213.21 CH - [2015-05-28 13:26:44.453461] "GET /EMail/main.aspx HTTP/1.1" 200 3412 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjC-BKwxQzZrjHGWQqEAAAB0 TLSv1.2 ECDHE-RSA-AES128-SHA256 958 7768 -% 7064275 3268 58309 1925 0 0 192.168.213.21 CH - [2015-05-28 13:26:52.734527] "GET /EMail/overview.aspx HTTP/1.1" 200 5304 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjC-DKwxQzZrjHGWQqIAAAB3 TLSv1.2 ECDHE-RSA-AES128-SHA256 847 5963 -% 14426890 2331 419635 4083 0 0 192.168.213.21 CH - [2015-05-28 13:26:52.738570] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjC-DKwxQzZrjHGWQqMAAABD TLSv1.2 ECDHE-RSA-AES128-SHA256 879 9683 -% 15626659 3905 613932 4746 0 0 192.168.213.22 CH - [2015-05-28 13:27:21.971786] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjC-KawxQzZrjHGWQqkAAABE TLSv1 ECDHE-RSA-AES256-SHA 840 7990 -% 8280815 3428 266520 9928 0 0 192.168.213.21 CH - [2015-05-28 13:27:23.703064] "GET /EMail/inbox.aspx HTTP/1.1" 200 9949 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjC-K6wxQzZrjHGWQqsAAAB4 TLSv1.2 ECDHE-RSA-AES128-SHA256 894 14365 -% 7318368 2108 309805 5395 0 0 192.168.213.22 CH - [2015-05-28 13:27:53.568973] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3914_64&folderId=1001_9&attachmentId=2&token=3202711570338663E17 HTTP/1.1" 200 54378 "https://www.example.com/EMail/message.aspx?&mailId=3914_64&folderId=1001_9&mailPos=5" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjC-SawxQzZrjHGVn3AAAAAO TLSv1 ECDHE-RSA-AES256-SHA 984 59856 -% 8819773 4423 793715 267 0 0 192.168.213.21 CH - [2015-05-28 13:28:02.102412] "GET /EMail/message.aspx?&mailId=3915_3&folderId=3502_5&mailPos=0 HTTP/1.1" 200 11413 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjC-UqwxQzZrjHGWQq8AAABQ TLSv1.2 ECDHE-RSA-AES128-SHA256 942 15890 -% 1366972 3356 329842 32260 0 0 192.168.213.22 CH - [2015-05-28 13:28:56.829443] "GET /EMail/message.aspx?&mailId=3915_17&folderId=1001_9&mailPos=4 HTTP/1.1" 200 11494 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjC-iKwxQzZrjHGWQrQAAABS TLSv1 ECDHE-RSA-AES256-SHA 888 15840 -% 5145839 3280 121602 19950 0 0 192.168.213.22 CH - [2015-05-28 13:29:03.626513] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3915_17&folderId=1001_9&attachmentId=2&token=110508498626866944E18 HTTP/1.1" 200 55210 "https://www.example.com/EMail/message.aspx?&mailId=3915_17&folderId=1001_9&mailPos=4" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjC-j6wxQzZrjHGVn3kAAAAW TLSv1 ECDHE-RSA-AES256-SHA 984 60762 -% 7830739 7491 801968 195 0 0 192.168.96.45 CH - [2015-05-28 13:29:19.554007] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "10022e3e.5232957d077c1" VjC-n6wxQzZrjHGWQrkAAABV TLSv1 AES256-SHA 1093 3700 -% 7306783 3169 302689 215 0 0 192.168.96.45 CH - [2015-05-28 13:29:19.556509] "GET /EMail/scripts/variables_de.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "10022e3e.5232957d077c1" VjC-n6wxQzZrjHGWQrsAAABe TLSv1 AES256-SHA 1125 3700 -% 14793994 2849 790417 160 0 0 192.168.96.45 CH - [2015-05-28 13:29:19.555074] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "10022e3e.5232957d077c1" VjC-n6wxQzZrjHGWQroAAABU TLSv1 AES256-SHA 1125 3700 -% 14834393 3356 830093 122 0 0 192.168.96.45 CH - [2015-05-28 13:29:35.342774] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "10022e3e.5232957d077c1" VjC-r6wxQzZrjHGWQr4AAABj TLSv1 AES256-SHA 1117 3696 -% 5637887 2061 634999 188 0 0 192.168.96.45 CH - [2015-05-28 13:29:40.835102] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "10022e3e.5232957d077c1" VjC-tKwxQzZrjHGWQr8AAABg TLSv1 AES256-SHA 1045 3908 -% 6759331 3318 755205 210 0 0 192.168.96.45 CH - [2015-05-28 13:29:44.038922] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "10022e3e.5232957d077c1" VjC-uKwxQzZrjHGWQsEAAABf TLSv1 AES256-SHA 1045 3908 -% 4224303 3294 220300 190 0 0 192.168.96.45 CH - [2015-05-28 13:29:48.286783] "GET /EMail/main.aspx HTTP/1.1" 200 3398 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "10022e3e.5232957d077c1" VjC-vKwxQzZrjHGWQsIAAABa TLSv1 AES256-SHA 614 3818 -% 850655 3110 845727 1191 0 0 192.168.96.45 CH - [2015-05-28 13:29:49.178686] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "10022e3e.5232957d077c1" VjC-vawxQzZrjHGWQsMAAABz TLSv1 AES256-SHA 582 4154 -% 10230680 2333 220823 6952 0 0 192.168.96.45 CH - [2015-05-28 13:29:59.475231] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "10022e3e.5232957d077c1" VjC-x6wxQzZrjHGWQsYAAABh TLSv1 AES256-SHA 582 213 -% 13356291 3234 352145 233 0 0 192.168.96.45 CH - [2015-05-28 13:30:08.158202] "GET /EMail/inbox.aspx HTTP/1.1" 200 11196 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "10022e3e.5232957d077c1" VjC-0KwxQzZrjHGWQssAAABr TLSv1 AES256-SHA 1013 15187 -% 10942701 3092 930279 8210 0 0 192.168.213.22 CH - [2015-05-28 13:30:09.521913] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 16366 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjC-0awxQzZrjHGWQswAAABy TLSv1 ECDHE-RSA-AES256-SHA 840 20704 -% 15749521 5857 735233 6450 0 0 192.168.96.45 CH - [2015-05-28 13:30:19.240655] "GET /EMail/inbox.aspx HTTP/1.1" 200 11196 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "10022e3e.5232957d077c1" VjC-26wxQzZrjHGWQs8AAABs TLSv1 AES256-SHA 989 15183 -% 7121245 2508 111759 5661 0 0 192.168.96.45 CH - [2015-05-28 13:30:26.457854] "GET /EMail/images/msgClosed.png HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "10022e3e.5232957d077c1" VjC-4qwxQzZrjHGWQtAAAABw TLSv1 AES256-SHA 1109 3700 -% 7624209 3431 619865 196 0 0 192.168.213.22 CH - [2015-05-28 13:30:33.877505] "GET /EMail/message.aspx?&mailId=3914_69&folderId=1001_9&mailPos=3 HTTP/1.1" 200 11494 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjC-6awxQzZrjHGWQtIAAAB1 TLSv1 ECDHE-RSA-AES256-SHA 888 15803 -% 15875029 3134 842518 28439 0 0 192.168.213.22 CH - [2015-05-28 13:30:54.121212] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3914_69&folderId=1001_9&attachmentId=2&token=219961143770729037E18 HTTP/1.1" 200 56277 "https://www.example.com/EMail/message.aspx?&mailId=3914_69&folderId=1001_9&mailPos=3" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjC--qwxQzZrjHGWQtoAAABH TLSv1 ECDHE-RSA-AES256-SHA 984 61760 -% 18279714 6779 255966 250 0 0 192.168.96.45 CH - [2015-05-28 13:30:57.501788] "GET /EMail/message.aspx?&mailId=3915_12&folderId=1157_50&mailPos=0 HTTP/1.1" 200 11356 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "10022e3e.5232957d077c1" VjDAAawxQzZrjHGWQtwAAAB@ TLSv1 AES256-SHA 1045 15347 -% 14984260 4828 955446 22982 0 0 192.168.96.45 CH - [2015-05-28 13:31:12.300924] "GET /EMail/message.aspx?&mailId=3914_55&folderId=1157_50&mailPos=1 HTTP/1.1" 200 11479 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "10022e3e.5232957d077c1" VjDAEKwxQzZrjHGWQuAAAABJ TLSv1 AES256-SHA 1045 15438 -% 11231688 4007 198487 28195 0 0 192.168.96.45 CH - [2015-05-28 13:31:12.495265] "GET /EMail/message.aspx?&mailId=3915_12&folderId=1157_50&mailPos=0 HTTP/1.1" 200 11285 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "10022e3e.5232957d077c1" VjDAEKwxQzZrjHGWQuEAAABA TLSv1 AES256-SHA 1045 15283 -% 11078981 4277 50252 23364 0 0 192.168.96.45 CH - [2015-05-28 13:31:20.206131] "GET /EMail/message.aspx?&mailId=3915_12&folderId=1157_50&mailPos=0 HTTP/1.1" 200 11351 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "10022e3e.5232957d077c1" VjDAGKwxQzZrjHGWQuMAAABR TLSv1 AES256-SHA 1045 15347 -% 13200562 4924 174224 20399 0 0 192.168.213.22 CH - [2015-05-28 13:31:18.777060] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjDAFqwxQzZrjHGWQuIAAABL TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 20827381 2956 810815 2779 0 0 192.168.81.38 CH - [2015-05-28 13:31:24.153796] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3362b1b3.52325ec77d3b2" VjDAHKwxQzZrjHGWQuUAAABX TLSv1 ECDHE-RSA-AES256-SHA 815 5918 22% 24137767 3208 133234 234 0 0 192.168.81.38 CH - [2015-05-28 13:31:24.156551] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3362b1b3.52325ec77d3b2" VjDAHKwxQzZrjHGVn4AAAAAg TLSv1 ECDHE-RSA-AES256-SHA 847 8290 23% 24560539 2743 555683 215 0 0 192.168.81.38 CH - [2015-05-28 13:31:24.157861] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3362b1b3.52325ec77d3b2" VjDAHKwxQzZrjHGVn4EAAAAj TLSv1 ECDHE-RSA-AES256-SHA 863 5721 -% 26130209 2389 126809 176 0 0 192.168.96.45 CH - [2015-05-28 13:31:33.459088] "GET /EMail/images/attach.gif HTTP/1.1" 304 - "https://www.example.com/EMail/message.aspx?&mailId=3915_12&folderId=1157_50&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "10022e3e.5232957d077c1" VjDAJawxQzZrjHGWQucAAABW TLSv1 AES256-SHA 742 213 -% 17786478 3224 782189 202 0 0 192.168.96.45 CH - [2015-05-28 13:31:36.799571] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3915_12&folderId=1157_50&attachmentId=2&token=93382470579295168E17 HTTP/1.1" 200 56046 "https://www.example.com/EMail/message.aspx?&mailId=3915_12&folderId=1157_50&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "10022e3e.5232957d077c1" VjDAKKwxQzZrjHGWQugAAABU TLSv1 AES256-SHA 1157 61282 -% 14634490 6375 604330 194 0 0 192.168.81.38 CH - [2015-05-28 13:31:58.793941] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3362b1b3.52325ec77d3b2" VjDAPqwxQzZrjHGVn4UAAAAn TLSv1 ECDHE-RSA-AES256-SHA 863 5721 -% 19588899 3206 584878 162 0 0 192.168.81.38 CH - [2015-05-28 13:31:58.795425] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3362b1b3.52325ec77d3b2" VjDAPqwxQzZrjHGVn4YAAAAq TLSv1 ECDHE-RSA-AES256-SHA 815 4638 56% 19783338 2826 779694 161 0 0 192.168.81.38 CH - [2015-05-28 13:31:58.796500] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3362b1b3.52325ec77d3b2" VjDAPqwxQzZrjHGWQuwAAABi TLSv1 ECDHE-RSA-AES256-SHA 847 8131 23% 33171154 2735 166485 224 0 0 192.168.213.22 CH - [2015-05-28 13:32:00.162733] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3914_70&folderId=1001_9&attachmentId=2&token=40831025003014902E18 HTTP/1.1" 200 56257 "https://www.example.com/EMail/message.aspx?&mailId=3914_70&folderId=1001_9&mailPos=3" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjDAQKwxQzZrjHGWQu0AAABf TLSv1 ECDHE-RSA-AES256-SHA 984 61744 -% 32055713 5692 32825 215 0 0 192.168.213.22 CH - [2015-05-28 13:32:37.875630] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 17651 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjDAZawxQzZrjHGWQvUAAABt TLSv1 ECDHE-RSA-AES256-SHA 840 22021 -% 22654071 2561 628941 8669 0 0 192.168.96.45 CH - [2015-05-28 13:33:14.330420] "GET /EMail/overview.aspx HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "10022e3e.5232957d077c1" VjDAiqwxQzZrjHGWQvoAAABy TLSv1 AES256-SHA 1013 11353 -% 19914652 3066 907133 3680 0 0 192.168.96.45 CH - [2015-05-28 13:33:34.288776] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "10022e3e.5232957d077c1" VjDAnqwxQzZrjHGWQwAAAAB8 TLSv1 AES256-SHA 598 7786 -% 27610416 3786 603502 2261 0 0 192.168.213.22 CH - [2015-05-28 13:33:32.678745] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjDAnKwxQzZrjHGWQv4AAABw TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 29269153 2575 258784 4471 0 0 192.168.96.45 CH - [2015-05-28 13:33:47.847811] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "10022e3e.5232957d077c1" VjDAq6wxQzZrjHGWQwMAAAB7 TLSv1 AES256-SHA 1029 3908 -% 14200927 3991 195753 393 0 0 192.168.96.45 CH - [2015-05-28 13:33:53.940490] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7366 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "10022e3e.5232957d077c1" VjDAsawxQzZrjHGWQwUAAAB4 TLSv1 AES256-SHA 981 11369 -% 20526650 4154 519619 2150 0 0 192.168.96.45 CH - [2015-05-28 13:34:32.909926] "GET /EMail/main.aspx HTTP/1.1" 200 3398 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "10022e3e.5232957d077c1" VjDA2KwxQzZrjHGWQwwAAAB@ TLSv1 AES256-SHA 1005 7301 -% 6948139 3103 943210 1159 0 0 192.168.213.22 CH - [2015-05-28 13:34:35.872396] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjDA26wxQzZrjHGWQw4AAABM TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 10698386 4218 684713 4899 0 0 192.168.96.45 CH - [2015-05-28 13:34:40.451729] "GET /EMail/overview.aspx HTTP/1.1" 200 5302 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "10022e3e.5232957d077c1" VjDA4KwxQzZrjHGWQw8AAABP TLSv1 AES256-SHA 1013 9225 -% 7134592 3102 127814 2900 0 0 192.168.96.45 CH - [2015-05-28 13:34:47.650755] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "10022e3e.5232957d077c1" VjDA56wxQzZrjHGWQxEAAABA TLSv1 AES256-SHA 710 213 -% 8111285 3201 107258 170 0 0 192.168.81.38 CH - [2015-05-28 13:35:12.772852] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3362b1b3.52325ec77d3b2" VjDBAKwxQzZrjHGWQxgAAABX TLSv1 ECDHE-RSA-AES256-SHA 1007 4452 -% 12422494 3663 417906 253 0 0 192.168.213.22 CH - [2015-05-28 13:35:11.720370] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3914_73&folderId=1001_9&attachmentId=2&token=194962252885194342E18 HTTP/1.1" 200 54365 "https://www.example.com/EMail/message.aspx?&mailId=3914_73&folderId=1001_9&mailPos=1" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjDA-6wxQzZrjHGWQxcAAABc TLSv1 ECDHE-RSA-AES256-SHA 984 59856 -% 13476865 6448 447772 173 0 0 192.168.81.38 CH - [2015-05-28 13:35:25.523747] "GET /EMail/main.aspx HTTP/1.1" 200 3404 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3362b1b3.52325ec77d3b2" VjDBDawxQzZrjHGWQxwAAABg TLSv1 ECDHE-RSA-AES256-SHA 502 3834 -% 6846844 3040 841121 1839 0 0 192.168.81.38 CH - [2015-05-28 13:35:32.560145] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3362b1b3.52325ec77d3b2" VjDBFKwxQzZrjHGWQx8AAABZ TLSv1 ECDHE-RSA-AES256-SHA 438 4154 -% 14641944 3506 630518 7199 0 0 192.168.213.22 CH - [2015-05-28 13:35:29.875657] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjDBEawxQzZrjHGWQx4AAABp TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 17346511 2573 335358 4580 0 0 192.168.81.38 CH - [2015-05-28 13:35:32.612615] "GET /EMail/overview.aspx HTTP/1.1" 200 5304 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3362b1b3.52325ec77d3b2" VjDBFKwxQzZrjHGWQyAAAABz TLSv1 ECDHE-RSA-AES256-SHA 815 9769 -% 46597654 4036 591186 1743 0 0 192.168.96.45 CH - [2015-05-28 13:35:39.949736] "GET /EMail/inbox.aspx HTTP/1.1" 200 11180 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "10022e3e.5232957d077c1" VjDBG6wxQzZrjHGWQyMAAABo TLSv1 AES256-SHA 989 15146 -% 39559651 2036 550901 5779 0 0 192.168.96.45 CH - [2015-05-28 13:36:58.113168] "GET /EMail/images/msgOpened.png HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "10022e3e.5232957d077c1" VjDBaqwxQzZrjHGWQy0AAAB0 TLSv1 AES256-SHA 1109 3700 -% 10822240 2344 819211 152 0 0 192.168.186.76 CH - [2015-05-28 13:37:45.629491] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8507 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjDBmawxQzZrjHGWQzMAAAB9 TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 13179 -% 1588829 4346 580121 2615 3 0 192.168.186.76 CH - [2015-05-28 13:37:48.548479] "GET /EMail/message.aspx?&mailId=3914_75&folderId=947_65&mailPos=0 HTTP/1.1" 200 16238 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjDBnKwxQzZrjHGWQzQAAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 710 16916 -% 5867175 4999 830003 29817 3 0 192.168.96.45 CH - [2015-05-28 13:38:02.249624] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3915_11&folderId=1157_50&attachmentId=2&token=30065144780036285E18 HTTP/1.1" 200 55213 "https://www.example.com/EMail/message.aspx?&mailId=3915_11&folderId=1157_50&mailPos=2" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "10022e3e.5232957d077c1" VjDBqqwxQzZrjHGWQzYAAABQ TLSv1 AES256-SHA 1133 60351 -% 14143297 6437 114824 190 0 0 192.168.96.45 CH - [2015-05-28 13:38:16.381562] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3915_11&folderId=1157_50&attachmentId=2&token=30065144780036285E18 HTTP/1.1" 200 55213 "https://www.example.com/EMail/message.aspx?&mailId=3915_11&folderId=1157_50&mailPos=2" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "10022e3e.5232957d077c1" VjDBuKwxQzZrjHGVn6EAAAAN TLSv1 AES256-SHA 1157 60355 -% 8078283 5307 56085 252 0 0 192.168.213.22 CH - [2015-05-28 13:38:29.977984] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/moveToFolder.aspx?folderName=Inbox&mailId=3914_74&mailId=3914_73&mailId=3914_72&mailId=3914_71&mailId=3914_70&mailId=3914_69&mailId=3915_18&mailId=3915_17&mailId=3914_64" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjDBxawxQzZrjHGVn6UAAAAS TLSv1 ECDHE-RSA-AES256-SHA 1320 4177 -% 2030058 8172 21084 190 0 0 192.168.213.22 CH - [2015-05-28 13:38:32.125138] "GET /EMail/host.html HTTP/1.1" 200 199 "https://www.example.com/EMail/moveToFolder.aspx?folderName=Inbox&mailId=3914_74&mailId=3914_73&mailId=3914_72&mailId=3914_71&mailId=3914_70&mailId=3914_69&mailId=3915_18&mailId=3915_17&mailId=3914_64" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjDByKwxQzZrjHGWQzgAAABH TLSv1 ECDHE-RSA-AES256-SHA 984 4539 76% 952675 2066 949196 485 0 0 192.168.186.76 CH - [2015-05-28 13:38:38.068916] "GET /EMail/newMessage.aspx?action=reply&mailId=3914_75&folderId=947_65&showPics=false HTTP/1.1" 200 23526 "https://www.example.com/EMail/message.aspx?&mailId=3914_75&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjDBzqwxQzZrjHGVn6cAAAAP TLSv1.2 ECDHE-RSA-AES256-SHA384 1266 24527 -% 1802306 6051 740589 42429 6 3 192.168.96.45 CH - [2015-05-28 13:38:39.249264] "GET /EMail/inbox.aspx HTTP/1.1" 200 11172 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "10022e3e.5232957d077c1" VjDBz6wxQzZrjHGWQzoAAAB- TLSv1 AES256-SHA 989 15130 -% 7234069 3149 224061 5732 0 0 192.168.186.76 CH - [2015-05-28 13:38:40.097651] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5882 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3914_75&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjDB0KwxQzZrjHGWQzsAAABS TLSv1.2 ECDHE-RSA-AES256-SHA384 1277 13742 -% 22528093 4108 0 0 3 0 192.168.213.22 CH - [2015-05-28 13:39:08.775024] "GET /EMail/images/tree/folder/pixel.gif HTTP/1.1" 200 807 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjDB7KwxQzZrjHGWQ0IAAABA TLSv1 ECDHE-RSA-AES256-SHA 936 5062 -% 2808223 2819 804521 186 0 0 192.168.213.22 CH - [2015-05-28 13:39:08.773860] "GET /EMail/images/tree/folder/minus-first-node.gif HTTP/1.1" 200 842 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjDB7KwxQzZrjHGWQ0EAAABe TLSv1 ECDHE-RSA-AES256-SHA 952 5094 -% 2810668 3161 806785 99 0 0 192.168.96.45 CH - [2015-05-28 13:39:35.200956] "GET /EMail/inbox.aspx HTTP/1.1" 200 11172 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "10022e3e.5232957d077c1" VjDCB6wxQzZrjHGWQ0gAAABc TLSv1 AES256-SHA 989 15130 -% 6441740 3050 431952 5738 0 0 192.168.213.22 CH - [2015-05-28 13:39:38.669808] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9882 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjDCCqwxQzZrjHGVn6kAAAAW TLSv1 ECDHE-RSA-AES256-SHA 840 14187 -% 9903880 2526 897390 3258 0 0 192.168.213.22 CH - [2015-05-28 13:39:48.776964] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjDCFKwxQzZrjHGWQ0wAAABl TLSv1 ECDHE-RSA-AES256-SHA 920 4049 -% 2851454 2085 848567 215 0 0 192.168.213.22 CH - [2015-05-28 13:40:07.418275] "GET /EMail/message.aspx?&mailId=3914_77&folderId=1001_9&mailPos=0 HTTP/1.1" 200 11358 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjDCJ6wxQzZrjHGWQ1MAAABo TLSv1 ECDHE-RSA-AES256-SHA 888 15696 -% 1151979 3114 127603 20508 0 0 192.168.96.45 CH - [2015-05-28 13:40:08.854155] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "10022e3e.5232957d077c1" VjDCKKwxQzZrjHGWQ1cAAABs TLSv1 AES256-SHA 1165 3840 -% 7633575 10347 622271 207 0 0 192.168.213.22 CH - [2015-05-28 13:40:17.118446] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3914_77&folderId=1001_9&attachmentId=2&token=71398126499637619E17 HTTP/1.1" 200 58011 "https://www.example.com/EMail/message.aspx?&mailId=3914_77&folderId=1001_9&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjDCMawxQzZrjHGWQ1gAAAB6 TLSv1 ECDHE-RSA-AES256-SHA 984 63673 -% 7253470 6129 223950 176 0 0 192.168.213.22 CH - [2015-05-28 13:40:29.885806] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 11174 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjDCPawxQzZrjHGVn7AAAAAc TLSv1 ECDHE-RSA-AES256-SHA 840 15483 -% 3992311 3700 982100 5523 0 0 192.168.96.45 CH - [2015-05-28 13:40:33.848408] "GET /EMail/index.html HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "10022e3e.5232957d077c1" VjDCQawxQzZrjHGWQ1kAAABy TLSv1 AES256-SHA 1069 3696 -% 6442041 1945 439313 255 0 0 192.168.96.45 CH - [2015-05-28 13:40:41.017373] "GET /favicon.ico HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0)" www.example.com 192.168.34.16 443 - - + "a4f5ed14.523296989b356" VjDCSawxQzZrjHGWQ1oAAABB TLSv1 AES256-SHA 949 3684 -% 2693 1915 50 111 0 0 192.168.96.45 CH - [2015-05-28 13:40:41.496177] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "10022e3e.5232957d077c1" VjDCSawxQzZrjHGWQ1sAAAB0 TLSv1 AES256-SHA 925 11269 -% 974036 3041 966502 3645 0 0 192.168.96.45 CH - [2015-05-28 13:40:43.023503] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "10022e3e.5232957d077c1" VjDCS6wxQzZrjHGVn7MAAAAg TLSv1 AES256-SHA 1061 3700 -% 10447586 3042 443749 147 0 0 192.168.96.45 CH - [2015-05-28 13:40:43.010057] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "10022e3e.5232957d077c1" VjDCS6wxQzZrjHGWQ1wAAAB8 TLSv1 AES256-SHA 1109 3700 -% 18890331 2190 887343 238 0 0 192.168.213.22 CH - [2015-05-28 13:40:56.572308] "GET /EMail/message.aspx?&mailId=3914_79&folderId=1001_9&mailPos=0 HTTP/1.1" 200 11365 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjDCWKwxQzZrjHGVn7QAAAAj TLSv1 ECDHE-RSA-AES256-SHA 888 15712 -% 13922683 4910 891655 24768 0 0 192.168.213.22 CH - [2015-05-28 13:41:10.771029] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/message.aspx?&mailId=3914_79&folderId=1001_9&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjDCZqwxQzZrjHGWQ2MAAABQ TLSv1 ECDHE-RSA-AES256-SHA 952 4049 -% 7175895 3653 171099 266 0 0 192.168.213.22 CH - [2015-05-28 13:41:19.673558] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3914_79&folderId=1001_9&attachmentId=2&token=103052617612896525E18 HTTP/1.1" 200 54855 "https://www.example.com/EMail/message.aspx?&mailId=3914_79&folderId=1001_9&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjDCb6wxQzZrjHGWQ2QAAABI TLSv1 ECDHE-RSA-AES256-SHA 984 60336 -% 8193251 6422 164378 316 0 0 192.168.186.76 CH - [2015-05-28 13:42:12.608031] "GET /EMail/message.aspx?&mailId=3914_68&folderId=947_66&mailPos=1 HTTP/1.1" 200 11040 "https://www.example.com/EMail/sent.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjDCpKwxQzZrjHGWQ2oAAABJ TLSv1.2 ECDHE-RSA-AES256-SHA384 1303 15792 -% 3313370 8458 298737 3884 3 0 192.168.186.76 CH - [2015-05-28 13:42:21.368824] "GET /EMail/newMessage.aspx?action=resend&mailId=3914_68&to=john.smith@ourindustry.com&folderId=947_66&showPics=false HTTP/1.1" 200 12441 "https://www.example.com/EMail/message.aspx?&mailId=3914_68&folderId=947_66&mailPos=1" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjDCrawxQzZrjHGWQ2wAAABY TLSv1.2 ECDHE-RSA-AES256-SHA384 1308 13285 -% 4188474 12211 151171 22004 6 3 192.168.186.76 CH - [2015-05-28 13:42:25.637609] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=resend&mailId=3914_68&to=john.smith@ourindustry.com&folderId=947_66&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "b6789691.52327ccbeae3e" VjDCsawxQzZrjHGWQ20AAABP TLSv1.2 ECDHE-RSA-AES256-SHA384 758 0 -% 12613193 4153 598763 8328 3 0 192.168.186.76 CH - [2015-05-28 13:42:25.724507] "GET /EMail/css/editor_content.css HTTP/1.1" 404 3382 "https://www.example.com/EMail/newMessage.aspx?action=resend&mailId=3914_68&to=john.smith@ourindustry.com&folderId=947_66&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "b6789691.52327ccbeae3e" VjDCsawxQzZrjHGVn70AAAAw TLSv1.2 ECDHE-RSA-AES256-SHA384 1234 161 -% 12664796 6360 0 0 3 0 192.168.186.76 CH - [2015-05-28 13:42:37.067892] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7290 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjDCvawxQzZrjHGVn8AAAAAv TLSv1.2 ECDHE-RSA-AES256-SHA384 1229 11878 -% 9406314 5264 395340 3949 3 0 192.168.186.76 CH - [2015-05-28 13:42:37.067914] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b6789691.52327ccbeae3e" VjDCvawxQzZrjHGWQ28AAABV TLSv1.2 ECDHE-RSA-AES256-SHA384 1261 13742 -% 15235465 5360 224632 2604 3 0 192.168.213.22 CH - [2015-05-28 13:42:38.671180] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/message.aspx?&mailId=3914_80&folderId=1001_9&mailPos=1" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjDCvqwxQzZrjHGWQ3AAAABk TLSv1 ECDHE-RSA-AES256-SHA 952 4049 -% 14105209 2288 102048 157 0 0 192.168.213.22 CH - [2015-05-28 13:46:40.367612] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 12828 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjDDsKwxQzZrjHGVn8kAAAA6 TLSv1 ECDHE-RSA-AES256-SHA 856 17527 -% 17184766 2516 171791 4038 0 0 192.168.213.22 CH - [2015-05-28 13:47:49.772873] "GET /EMail/message.aspx?&mailId=3915_19&folderId=1001_9&mailPos=0 HTTP/1.1" 200 11358 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjDD9awxQzZrjHGVn84AAAA9 TLSv1 ECDHE-RSA-AES256-SHA 888 15696 -% 7954528 3640 922456 27412 0 0 192.168.213.22 CH - [2015-05-28 13:48:00.765574] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3915_19&folderId=1001_9&attachmentId=2&token=50727277184835922E18 HTTP/1.1" 200 54272 "https://www.example.com/EMail/message.aspx?&mailId=3915_19&folderId=1001_9&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjDEAKwxQzZrjHGWQ6cAAABM TLSv1 ECDHE-RSA-AES256-SHA 984 59760 -% 1050481 4473 24528 247 0 0 192.168.213.22 CH - [2015-05-28 13:48:15.419357] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 17626 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjDED6wxQzZrjHGWQ6kAAABS TLSv1 ECDHE-RSA-AES256-SHA 840 21989 -% 4734532 3572 702724 9748 0 0 192.168.213.22 CH - [2015-05-28 13:48:20.371694] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjDEFKwxQzZrjHGVn9AAAAAF TLSv1 ECDHE-RSA-AES256-SHA 920 4049 -% 1009069 3160 5031 232 0 0 192.168.81.38 CH - [2015-05-28 13:48:30.194959] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e84e2e70.5232507eed7a7" VjDEHqwxQzZrjHGWQ6wAAABR TLSv1 ECDHE-RSA-AES256-SHA 847 8131 23% 9159409 2086 155861 167 0 0 192.168.81.38 CH - [2015-05-28 13:48:30.194606] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e84e2e70.5232507eed7a7" VjDEHqwxQzZrjHGVn9IAAAAG TLSv1 ECDHE-RSA-AES256-SHA 815 4638 56% 17351554 2165 348288 217 0 0 192.168.81.38 CH - [2015-05-28 13:49:40.068681] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7372 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e84e2e70.5232507eed7a7" VjDEZKwxQzZrjHGWQ7kAAABd TLSv1 ECDHE-RSA-AES256-SHA 783 11849 -% 4557367 3572 550868 2244 0 0 192.168.81.38 CH - [2015-05-28 13:49:50.725357] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e84e2e70.5232507eed7a7" VjDEbqwxQzZrjHGWQ7sAAABl TLSv1 ECDHE-RSA-AES256-SHA 863 6121 -% 8938499 2130 935639 171 0 0 192.168.81.38 CH - [2015-05-28 13:49:46.195897] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e84e2e70.5232507eed7a7" VjDEaqwxQzZrjHGWQ7oAAABi TLSv1 ECDHE-RSA-AES256-SHA 646 421 -% 13589175 6127 582184 171 0 0 192.168.213.22 CH - [2015-05-28 13:49:53.320853] "GET /EMail/host.html HTTP/1.1" 200 199 "https://www.example.com/EMail/moveToFolder.aspx?folderName=Inbox&mailId=3915_19&mailId=3914_83&mailId=3914_82&mailId=3914_81&mailId=3914_80&mailId=3914_79&mailId=3914_77&mailId=3914_76" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjDEcawxQzZrjHGWQ70AAABZ TLSv1 ECDHE-RSA-AES256-SHA 968 4539 76% 6483209 2714 478837 455 0 0 192.168.213.22 CH - [2015-05-28 13:50:08.514684] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjDEgKwxQzZrjHGVn9wAAAAS TLSv1 ECDHE-RSA-AES256-SHA 920 4049 -% 13234984 3128 230942 242 0 0 192.168.81.38 CH - [2015-05-28 13:50:08.491266] "GET /EMail/overview.aspx HTTP/1.1" 200 5304 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e84e2e70.5232507eed7a7" VjDEgKwxQzZrjHGVn9sAAAAQ TLSv1 ECDHE-RSA-AES256-SHA 815 9769 -% 21259346 3015 250635 4772 0 0 192.168.213.22 CH - [2015-05-28 13:51:03.721269] "GET /EMail/folderOverview.aspx HTTP/1.1" 200 5657 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjDEt6wxQzZrjHGWQ8gAAAB3 TLSv1 ECDHE-RSA-AES256-SHA 840 9926 -% 13315660 3391 308246 3163 0 0 192.168.213.22 CH - [2015-05-28 13:51:03.756725] "GET /EMail/tree.aspx?sNode-sharedTree=treePerFolderOverView HTTP/1.1" 200 12828 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjDEt6wxQzZrjHGWQ8kAAAB6 TLSv1 ECDHE-RSA-AES256-SHA 872 17527 -% 13513842 4122 498498 4303 0 0 192.168.213.22 CH - [2015-05-28 13:51:38.666814] "GET /EMail/folderOverview.aspx HTTP/1.1" 200 5409 "https://www.example.com/EMail/folderOverview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjDE2qwxQzZrjHGWQ84AAABD TLSv1 ECDHE-RSA-AES256-SHA 840 9686 -% 7605330 2113 600152 2444 0 0 192.168.213.22 CH - [2015-05-28 13:52:32.266738] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/folderOverview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjDFEKwxQzZrjHGWQ9oAAABN TLSv1 ECDHE-RSA-AES256-SHA 1016 4177 -% 10744698 4474 739521 173 0 0 192.168.81.38 CH - [2015-05-28 13:52:43.092915] "GET /EMail/message.aspx?&mailId=3915_10&folderId=587_1&mailPos=0 HTTP/1.1" 200 11344 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e84e2e70.5232507eed7a7" VjDFG6wxQzZrjHGWQ90AAABM TLSv1 ECDHE-RSA-AES256-SHA 847 15854 -% 10219410 4877 189147 24464 0 0 192.168.81.38 CH - [2015-05-28 13:52:52.416966] "GET /EMail/message.aspx?&mailId=3915_10&folderId=587_1&mailPos=0 HTTP/1.1" 200 11341 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e84e2e70.5232507eed7a7" VjDFJKwxQzZrjHGWQ@AAAABP TLSv1 ECDHE-RSA-AES256-SHA 847 15854 -% 8055466 7093 23499 23752 0 0 192.168.81.38 CH - [2015-05-28 13:52:47.006685] "GET /EMail/message.aspx?&mailId=3915_10&folderId=587_1&mailPos=0 HTTP/1.1" 200 11275 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e84e2e70.5232507eed7a7" VjDFH6wxQzZrjHGWQ94AAABJ TLSv1 ECDHE-RSA-AES256-SHA 847 15811 -% 13503325 3387 474324 24696 0 0 192.168.213.22 CH - [2015-05-28 13:52:59.614413] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/folderOverview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjDFK6wxQzZrjHGWQ@IAAABe TLSv1 ECDHE-RSA-AES256-SHA 1016 4177 -% 8907173 5901 900401 200 0 0 192.168.81.38 CH - [2015-05-28 13:53:14.502051] "GET /EMail/message.aspx?&mailId=3915_10&folderId=587_1&mailPos=0 HTTP/1.1" 200 11338 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e84e2e70.5232507eed7a7" VjDFOqwxQzZrjHGWQ@YAAABW TLSv1 ECDHE-RSA-AES256-SHA 847 15875 -% 16848356 6556 815003 25454 0 0 192.168.81.38 CH - [2015-05-28 13:53:55.118990] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3915_10&folderId=587_1&attachmentId=2&token=52047138912586557E18 HTTP/1.1" 200 59517 "https://www.example.com/EMail/message.aspx?&mailId=3915_10&folderId=587_1&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e84e2e70.5232507eed7a7" VjDFY6wxQzZrjHGWQ@0AAABd TLSv1 ECDHE-RSA-AES256-SHA 959 65409 -% 1138879 5189 109961 250 0 0 192.168.81.38 CH - [2015-05-28 13:53:56.996786] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3915_10&folderId=587_1&attachmentId=2&token=52047138912586557E18 HTTP/1.1" 200 59517 "https://www.example.com/EMail/message.aspx?&mailId=3915_10&folderId=587_1&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e84e2e70.5232507eed7a7" VjDFZKwxQzZrjHGWQ@8AAABv TLSv1 ECDHE-RSA-AES256-SHA 598 61378 -% 6575780 4356 547523 225 0 0 192.168.213.22 CH - [2015-05-28 13:54:08.670069] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3914_84&folderId=1001_9&attachmentId=2&token=33060198001195135E15 HTTP/1.1" 200 60714 "https://www.example.com/EMail/message.aspx?&mailId=3914_84&folderId=1001_9&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjDFcKwxQzZrjHGWQ-EAAABp TLSv1 ECDHE-RSA-AES256-SHA 984 66398 -% 4192632 4052 163651 258 0 0 192.168.213.22 CH - [2015-05-28 13:54:19.021585] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 12828 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "efa43840.5232617fc9cad" VjDFe6wxQzZrjHGWQ-MAAABZ TLSv1 ECDHE-RSA-AES256-SHA 856 17527 -% 8930036 3636 915769 4097 0 0 192.168.81.38 CH - [2015-05-28 13:55:19.274349] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3915_10&folderId=587_1&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e84e2e70.5232507eed7a7" VjDFt6wxQzZrjHGVn@4AAAAj TLSv1 ECDHE-RSA-AES256-SHA 1055 4388 -% 1216413 4130 211594 166 0 0 192.168.81.38 CH - [2015-05-28 13:55:36.038178] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e84e2e70.5232507eed7a7" VjDFyKwxQzZrjHGWQ-4AAAB3 TLSv1 ECDHE-RSA-AES256-SHA 863 13265 -% 21632046 3862 621178 4731 0 0 192.168.104.36 CH - [2015-05-28 13:56:12.111925] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDF7KwxQzZrjHGWRAgAAAB8 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1297 4447 -% 29432207 5160 426161 170 0 0 192.168.104.36 CH - [2015-05-28 13:56:04.967571] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDF5KwxQzZrjHGWRAUAAABw TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1297 4447 -% 43279646 5320 273448 250 0 0 192.168.104.36 CH - [2015-05-28 13:56:19.061757] "POST /EMail/MailHandler HTTP/1.1" 502 4089 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDF86wxQzZrjHGWRAkAAAB7 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1297 8679 -% 30020718 3836 0 0 0 0 192.168.104.36 CH - [2015-05-28 13:56:28.806345] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDF-KwxQzZrjHGVn-UAAAAt TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1297 4447 -% 37092963 4563 87381 165 0 0 192.168.213.22 CH - [2015-05-28 13:56:43.417291] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3914_87&folderId=1001_9&attachmentId=2&token=13814245509602519E18 HTTP/1.1" 502 4089 "https://www.example.com/EMail/message.aspx?&mailId=3914_87&folderId=1001_9&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - - "efa43840.5232617fc9cad" VjDGC6wxQzZrjHGVn-YAAAAu TLSv1 ECDHE-RSA-AES256-SHA 984 8500 -% 30035548 4419 0 0 0 0 192.168.213.22 CH - [2015-05-28 13:57:13.620313] "GET /errordocuments/logo_d.png HTTP/1.1" 200 7515 "https://www.example.com/EMail/MailHandler?service=downloadAttachment&mailId=3914_87&folderId=1001_9&attachmentId=2&token=13814245509602519E18" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "efa43840.5232617fc9cad" VjDGKawxQzZrjHGVn-gAAAA0 TLSv1 ECDHE-RSA-AES256-SHA 920 11750 -% 3409 2078 67 172 0 0 192.168.104.36 CH - [2015-05-28 13:56:54.736408] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 502 4089 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDGFqwxQzZrjHGWRBMAAABN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1060 8679 -% 30036334 3752 0 0 0 0 192.168.104.36 CH - [2015-05-28 13:57:24.894968] "GET /errordocuments/logo_d.png HTTP/1.1" 200 7515 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 - - + "5364152c.52328cfb68d51" VjDGNKwxQzZrjHGWRBsAAABk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 436 7917 -% 3220 2119 61 149 0 0 192.168.104.36 CH - [2015-05-28 13:56:56.977442] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 502 4089 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDGGKwxQzZrjHGWRBQAAABY TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1060 8679 -% 30034604 4004 0 0 0 0 192.168.213.22 CH - [2015-05-28 13:57:13.794791] "GET /EMail/favicon.ico HTTP/1.1" 502 4089 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c1618cf7.5232618401685" VjDGKawxQzZrjHGWRBgAAABP TLSv1 ECDHE-RSA-AES256-SHA 848 8527 -% 30034102 4158 0 0 3 0 192.168.104.36 CH - [2015-05-28 13:57:24.937550] "GET /EMail/favicon.ico HTTP/1.1" 404 5090 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDGNKwxQzZrjHGWRBwAAABR TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 331 6741 -% 27542056 2036 0 0 0 0 192.168.104.36 CH - [2015-05-28 13:57:27.801421] "GET /EMail/favicon.ico HTTP/1.1" 404 5090 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDGN6wxQzZrjHGWRB0AAABe TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 331 6741 -% 24681155 4446 0 0 0 0 192.168.104.36 CH - [2015-05-28 13:57:47.740168] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7362 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDGS6wxQzZrjHGWRCEAAABW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1060 11900 -% 18614430 4016 605849 3533 0 0 192.168.104.36 CH - [2015-05-28 13:57:47.876494] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7362 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDGS6wxQzZrjHGWRCIAAABX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1060 11900 -% 18877431 3541 868124 4991 0 0 192.168.81.38 CH - [2015-05-28 13:57:53.035534] "GET /EMail/overview.aspx HTTP/1.1" 200 5304 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e84e2e70.5232507eed7a7" VjDGUawxQzZrjHGWRCUAAABf TLSv1 ECDHE-RSA-AES256-SHA 815 9769 -% 20184539 4623 175762 2981 0 0 192.168.81.38 CH - [2015-05-28 13:57:53.034808] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e84e2e70.5232507eed7a7" VjDGUawxQzZrjHGWRCQAAABg TLSv1 ECDHE-RSA-AES256-SHA 831 13265 -% 20437804 4288 426441 3117 0 0 192.168.104.36 CH - [2015-05-28 13:58:17.522211] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDGaawxQzZrjHGWRCoAAABp TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1297 4447 -% 12613404 3305 609326 186 0 0 192.168.104.36 CH - [2015-05-28 13:58:30.154676] "GET /EMail/main.aspx HTTP/1.1" 200 3394 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDGdqwxQzZrjHGWRC4AAABm TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 484 3810 -% 25116385 3897 109653 1902 0 0 192.168.104.36 CH - [2015-05-28 13:58:49.026384] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDGiawxQzZrjHGWRDIAAAB5 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1297 4447 -% 10636444 5252 630224 194 0 0 192.168.104.36 CH - [2015-05-28 13:58:59.681108] "GET /EMail/main.aspx HTTP/1.1" 200 3394 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDGk6wxQzZrjHGWRDcAAAB1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 484 3810 -% 8137113 2024 132574 1876 0 0 192.168.81.38 CH - [2015-05-28 13:58:51.094166] "GET /EMail/inbox.aspx HTTP/1.1" 200 16372 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e84e2e70.5232507eed7a7" VjDGi6wxQzZrjHGWRDQAAABr TLSv1 ECDHE-RSA-AES256-SHA 815 20915 -% 16939657 2058 931250 4897 0 0 192.168.104.36 CH - [2015-05-28 13:59:07.889279] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDGm6wxQzZrjHGWRDkAAAB2 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 437 4141 -% 12257318 3025 246918 6751 0 0 192.168.104.36 CH - [2015-05-28 13:59:07.960763] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDGm6wxQzZrjHGWRDoAAABB TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1089 9749 -% 20100654 1848 96401 1768 0 0 192.168.104.36 CH - [2015-05-28 13:59:07.963825] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDGm6wxQzZrjHGWRDsAAAB6 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1115 13218 -% 37180960 3799 168525 4653 0 0 192.168.81.38 CH - [2015-05-28 13:59:13.239592] "GET /EMail/message.aspx?&mailId=3915_9&folderId=587_1&mailPos=0 HTTP/1.1" 200 11326 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e84e2e70.5232507eed7a7" VjDGoawxQzZrjHGWRD0AAAB3 TLSv1 ECDHE-RSA-AES256-SHA 847 15838 -% 40319048 4860 291393 21852 0 0 192.168.81.38 CH - [2015-05-28 13:59:31.198625] "GET /EMail/message.aspx?&mailId=3915_9&folderId=587_1&mailPos=0 HTTP/1.1" 502 4089 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e84e2e70.5232507eed7a7" VjDGs6wxQzZrjHGWREAAAABD TLSv1 ECDHE-RSA-AES256-SHA 847 8727 -% 30034429 3866 0 0 0 0 192.168.104.36 CH - [2015-05-28 13:59:31.319605] "GET /EMail/inbox.aspx HTTP/1.1" 200 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - - "5364152c.52328cfb68d51" VjDGs6wxQzZrjHGWREEAAABG - - 440 31 -% 30034550 2684 30893 178 0 0 192.168.81.38 CH - [2015-05-28 13:59:47.234923] "GET /EMail/message.aspx?&mailId=3915_9&folderId=587_1&mailPos=0 HTTP/1.1" 502 4089 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e84e2e70.5232507eed7a7" VjDGw6wxQzZrjHGWREMAAABQ TLSv1 ECDHE-RSA-AES256-SHA 847 8727 -% 30038637 5320 0 0 0 0 192.168.252.34 CH - [2015-05-28 14:00:08.469976] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 502 4089 "-" "Microsoft-CryptoAPI/6.1" www.example.com 192.168.34.16 443 proxy-server - + "a9110a62.52329c62491d8" VjDG2KwxQzZrjHGWREwAAAB4 TLSv1 ECDHE-RSA-AES256-SHA 535 8671 -% 30027771 2200 0 0 0 0 192.168.104.36 CH - [2015-05-28 14:00:18.444060] "GET /EMail/inbox.aspx HTTP/1.1" 502 4089 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDG4qwxQzZrjHGWRE4AAABN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1090 8679 -% 30037779 4251 0 0 0 0 192.168.104.36 CH - [2015-05-28 13:59:50.152042] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDGxqwxQzZrjHGWREUAAAB8 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1142 13218 -% 62432460 4802 421959 3407 0 0 192.168.104.36 CH - [2015-05-28 13:59:50.158415] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 53028 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - X "5364152c.52328cfb68d51" VjDGxqwxQzZrjHGWREYAAABH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1125 33643 -% 62900348 2447 529399 18380 0 0 192.168.104.36 CH - [2015-05-28 14:00:48.514470] "GET /EMail/inbox.aspx HTTP/1.1" 200 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - - "5364152c.52328cfb68d51" VjDHAKwxQzZrjHGWRFMAAABA - - 437 31 -% 30033704 3234 29481 144 0 0 192.168.81.38 CH - [2015-05-28 14:01:49.529119] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7372 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e84e2e70.5232507eed7a7" VjDHPawxQzZrjHGWRF0AAABl TLSv1 ECDHE-RSA-AES256-SHA 783 11849 -% 21469500 2969 462115 3745 0 0 192.168.104.36 CH - [2015-05-28 14:01:57.700089] "GET /EMail/message.aspx?&mailId=3914_85&folderId=2833_44&mailPos=0 HTTP/1.1" 200 11342 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDHRawxQzZrjHGWRGAAAABi TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1057 11937 -% 25553760 5727 524768 22186 0 0 192.168.104.36 CH - [2015-05-28 14:02:07.025196] "GET /EMail/message.aspx?&mailId=3914_85&folderId=2833_44&mailPos=0 HTTP/1.1" 200 11341 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDHT6wxQzZrjHGWRGIAAABg TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1057 11965 -% 44063295 3268 35479 22520 0 0 192.168.104.36 CH - [2015-05-28 14:02:29.573189] "GET /EMail/message.aspx?&mailId=3914_85&folderId=2833_44&mailPos=0 HTTP/1.1" 200 11347 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDHZawxQzZrjHGWRGcAAABt TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1057 11942 -% 30644677 3468 615499 24752 0 0 192.168.104.36 CH - [2015-05-28 14:02:51.081496] "GET /EMail/message.aspx?&mailId=3914_85&folderId=2833_44&mailPos=0 HTTP/1.1" 502 4089 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDHe6wxQzZrjHGWRGwAAABs TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1057 4796 -% 30035910 3587 0 0 0 0 192.168.104.36 CH - [2015-05-28 14:03:06.314473] "GET /EMail/message.aspx?&mailId=3914_85&folderId=2833_44&mailPos=0 HTTP/1.1" 502 4089 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDHiqwxQzZrjHGWRG8AAABr TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1057 4796 -% 30034863 4854 0 0 0 0 192.168.104.36 CH - [2015-05-28 14:03:12.696168] "GET /EMail/message.aspx?&mailId=3914_85&folderId=2833_44&mailPos=0 HTTP/1.1" 502 4089 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDHkKwxQzZrjHGVoAoAAAAD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1057 4796 -% 30037674 5814 0 0 0 0 192.168.104.36 CH - [2015-05-28 14:03:42.807429] "GET /EMail/favicon.ico HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - - "5364152c.52328cfb68d51" VjDHrqwxQzZrjHGVoA8AAAAI - - 331 31 -% 30035305 2944 31569 170 0 0 192.168.81.38 CH - [2015-05-28 14:05:14.695613] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7372 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e84e2e70.5232507eed7a7" VjDICqwxQzZrjHGWRIkAAABR TLSv1 ECDHE-RSA-AES256-SHA 783 11849 -% 9520324 6587 510591 2242 0 0 192.168.81.38 CH - [2015-05-28 14:05:42.133720] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7372 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e84e2e70.5232507eed7a7" VjDIJqwxQzZrjHGWRIsAAABA TLSv1 ECDHE-RSA-AES256-SHA 783 11849 -% 16477418 3344 471316 2202 0 0 192.168.81.38 CH - [2015-05-28 14:06:04.791430] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e84e2e70.5232507eed7a7" VjDIPKwxQzZrjHGVoBsAAAAW TLSv1 ECDHE-RSA-AES256-SHA 1007 4452 -% 14653363 3379 649235 162 0 0 192.168.81.38 CH - [2015-05-28 14:05:58.722976] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 502 4089 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e84e2e70.5232507eed7a7" VjDINqwxQzZrjHGWRI8AAABW TLSv1 ECDHE-RSA-AES256-SHA 422 4696 -% 44722022 2685 0 0 0 0 192.168.81.38 CH - [2015-05-28 14:06:19.587861] "GET /EMail/main.aspx HTTP/1.1" 200 3404 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e84e2e70.5232507eed7a7" VjDIS6wxQzZrjHGVoB0AAAAZ TLSv1 ECDHE-RSA-AES256-SHA 502 3834 -% 34378737 2050 373989 1852 0 0 192.168.81.38 CH - [2015-05-28 14:06:43.212784] "POST /EMail/MailHandler HTTP/1.1" 502 4089 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e84e2e70.5232507eed7a7" VjDIY6wxQzZrjHGVoCAAAAAa TLSv1 ECDHE-RSA-AES256-SHA 1007 8727 -% 30035821 4500 0 0 0 0 192.168.81.38 CH - [2015-05-28 14:07:13.523089] "GET /EMail/favicon.ico HTTP/1.1" 404 5090 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e84e2e70.5232507eed7a7" VjDIgawxQzZrjHGVoCMAAAAe TLSv1 ECDHE-RSA-AES256-SHA 342 6930 -% 29189828 2973 0 0 0 0 192.168.235.59 CH - [2015-05-28 14:10:47.510358] "GET /EMail/css/basic.css HTTP/1.1" 502 4089 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@eourindustry.com" "Mozilla/5.0 (Linux; Android 5.0; SAMSUNG SM-G900F Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "a11fb306.52329eae71081" VjDJV6wxQzZrjHGWRMEAAAB8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1235 8674 -% 30034766 2384 0 0 0 0 192.168.235.59 CH - [2015-05-28 14:10:47.510071] "GET /EMail/scripts/shost.js HTTP/1.1" 502 4089 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@eourindustry.com" "Mozilla/5.0 (Linux; Android 5.0; SAMSUNG SM-G900F Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "a11fb306.52329eae71081" VjDJV6wxQzZrjHGWRL8AAABb TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1225 8674 -% 30035337 2726 0 0 0 0 192.168.235.59 CH - [2015-05-28 14:10:47.540912] "GET /EMail/images/logo.gif HTTP/1.1" 502 4089 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@eourindustry.com" "Mozilla/5.0 (Linux; Android 5.0; SAMSUNG SM-G900F Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "a11fb306.52329eae71081" VjDJV6wxQzZrjHGWRMIAAABU TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1239 8674 -% 30032088 1871 0 0 0 0 192.168.235.59 CH - [2015-05-28 14:10:47.510316] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@eourindustry.com" "Mozilla/5.0 (Linux; Android 5.0; SAMSUNG SM-G900F Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "a11fb306.52329eae71081" VjDJV6wxQzZrjHGWRMAAAABH TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1235 4615 56% 37196407 2375 193016 156 0 0 192.168.235.59 CH - [2015-05-28 14:11:24.839178] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@eourindustry.com" "Mozilla/5.0 (Linux; Android 5.0; SAMSUNG SM-G900F Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "a11fb306.52329eae71081" VjDJfKwxQzZrjHGWRMUAAABc TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 597 1685 -% 43406332 3016 402499 160 0 0 192.168.235.59 CH - [2015-05-28 14:12:08.422176] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Linux; Android 5.0; SAMSUNG SM-G900F Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "a11fb306.52329eae71081" VjDJqKwxQzZrjHGWRMgAAABv TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 486 1567 -% 26616484 2308 613302 153 0 0 192.168.235.59 CH - [2015-05-28 14:12:47.536058] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@eourindustry.com" "Mozilla/5.0 (Linux; Android 5.0; SAMSUNG SM-G900F Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "a11fb306.52329eae71081" VjDJz6wxQzZrjHGWRM4AAABZ TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1166 2226 -% 23190245 3426 185913 155 0 0 192.168.235.59 CH - [2015-05-28 14:12:47.989259] "POST /EMail/MailHandler HTTP/1.1" 502 4089 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@eourindustry.com" "Mozilla/5.0 (Linux; Android 5.0; SAMSUNG SM-G900F Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "a11fb306.52329eae71081" VjDJz6wxQzZrjHGWRM8AAABW TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1532 4791 -% 30035873 5988 0 0 0 0 192.168.235.59 CH - [2015-05-28 14:13:17.414976] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@eourindustry.com" "Mozilla/5.0 (Linux; Android 5.0; SAMSUNG SM-G900F Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "a11fb306.52329eae71081" VjDJ7awxQzZrjHGWRNUAAABm TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1532 470 -% 7966808 6916 959184 171 0 0 192.168.235.59 CH - [2015-05-28 14:13:21.023124] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@eourindustry.com" "Mozilla/5.0 (Linux; Android 5.0; SAMSUNG SM-G900F Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "a11fb306.52329eae71081" VjDJ8awxQzZrjHGWRNcAAABu TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1532 470 -% 16942855 9127 932756 240 0 0 192.168.235.59 CH - [2015-05-28 14:13:38.131168] "GET /EMail/error.aspx HTTP/1.1" 200 3792 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@eourindustry.com" "Mozilla/5.0 (Linux; Android 5.0; SAMSUNG SM-G900F Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "a11fb306.52329eae71081" VjDKAqwxQzZrjHGWRNoAAAB0 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 671 4214 -% 16891385 3278 879081 8023 0 0 192.168.235.59 CH - [2015-05-28 14:13:55.166294] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/error.aspx" "Mozilla/5.0 (Linux; Android 5.0; SAMSUNG SM-G900F Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "a11fb306.52329eae71081" VjDKE6wxQzZrjHGWRN8AAAB3 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 670 2421 13% 18510347 3288 504879 257 0 0 192.168.235.59 CH - [2015-05-28 14:13:55.277138] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/error.aspx" "Mozilla/5.0 (Linux; Android 5.0; SAMSUNG SM-G900F Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "a11fb306.52329eae71081" VjDKE6wxQzZrjHGVoD8AAAA5 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1140 2014 22% 18589096 1997 586217 187 0 0 192.168.235.59 CH - [2015-05-28 14:13:55.281521] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7160 "https://www.example.com/EMail/error.aspx" "Mozilla/5.0 (Linux; Android 5.0; SAMSUNG SM-G900F Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "a11fb306.52329eae71081" VjDKE6wxQzZrjHGWROAAAAB2 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1130 8028 22% 18639817 2044 634190 209 0 0 192.168.235.59 CH - [2015-05-28 14:14:14.008851] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/error.aspx" "Mozilla/5.0 (Linux; Android 5.0; SAMSUNG SM-G900F Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "a11fb306.52329eae71081" VjDKJqwxQzZrjHGWROMAAAB7 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 672 2545 14% 19522128 4466 515791 228 0 0 192.168.235.59 CH - [2015-05-28 14:14:30.266741] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@eourindustry.com" "Mozilla/5.0 (Linux; Android 5.0; SAMSUNG SM-G900F Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "a11fb306.52329eae71081" VjDKNqwxQzZrjHGWROUAAAB9 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1162 2559 13% 38099851 2303 96039 171 0 0 192.168.235.59 CH - [2015-05-28 14:17:13.307147] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@eourindustry.com" "Mozilla/5.0 (Linux; Android 5.0; SAMSUNG SM-G900F Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "a11fb306.52329eae71081" VjDK2awxQzZrjHGWRPoAAABj TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1241 6109 -% 16678583 4205 673324 187 0 0 192.168.81.38 CH - [2015-05-28 14:17:44.264379] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7372 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e84e2e70.5232507eed7a7" VjDK@KwxQzZrjHGVoFIAAAAR TLSv1 ECDHE-RSA-AES256-SHA 783 11929 -% 61875460 3375 868069 3387 0 0 192.168.235.59 CH - [2015-05-28 14:18:23.317001] "GET /EMail/scripts/variables_de.js HTTP/1.1" 502 4089 "https://www.example.com/EMail/login.aspx?username=john.smith@eourindustry.com" "Mozilla/5.0 (Linux; Android 5.0; SAMSUNG SM-G900F Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "a11fb306.52329eae71081" VjDLH6wxQzZrjHGWRQYAAABx TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1240 8674 -% 30035828 3109 0 0 0 0 192.168.81.38 CH - [2015-05-28 14:19:06.459294] "GET /EMail/overview.aspx HTTP/1.1" 502 4089 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e84e2e70.5232507eed7a7" VjDLSqwxQzZrjHGVoFkAAAAY TLSv1 ECDHE-RSA-AES256-SHA 815 8727 -% 30033582 3218 0 0 0 0 192.168.235.59 CH - [2015-05-28 14:19:19.662110] "POST /EMail/MailHandler HTTP/1.1" 502 4089 "https://www.example.com/EMail/login.aspx?username=john.smith@eourindustry.com" "Mozilla/5.0 (Linux; Android 5.0; SAMSUNG SM-G900F Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "a11fb306.52329eae71081" VjDLV6wxQzZrjHGWRQ8AAABh TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1470 8674 -% 30038606 5420 0 0 0 0 192.168.235.59 CH - [2015-05-28 14:19:49.838779] "GET /errordocuments/logo_d.png HTTP/1.1" 200 7515 "https://www.example.com/EMail/MailHandler" "Mozilla/5.0 (Linux; Android 5.0; SAMSUNG SM-G900F Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 - - + "a11fb306.52329eae71081" VjDLdawxQzZrjHGWRRUAAABy TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 539 7917 -% 3013 1995 61 147 0 0 192.168.81.38 CH - [2015-05-28 14:19:36.768191] "GET /EMail/overview.aspx HTTP/1.1" 200 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - - "e84e2e70.5232507eed7a7" VjDLaKwxQzZrjHGVoFwAAAAf - - 454 37 -% 30033506 2003 30780 198 0 0 192.168.235.59 CH - [2015-05-28 14:19:50.009965] "GET /EMail/favicon.ico HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 5.0; SAMSUNG SM-G900F Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - - "a11fb306.52329eae71081" VjDLdqwxQzZrjHGWRRYAAAB1 - - 480 31 -% 30034358 2305 31052 218 0 0 192.168.235.59 CH - [2015-05-28 14:20:01.778321] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@eourindustry.com" "Mozilla/5.0 (Linux; Android 5.0; SAMSUNG SM-G900F Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "a11fb306.52329eae71081" VjDLgawxQzZrjHGWRRkAAABC TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1237 6442 13% 26848365 2422 844099 215 0 0 192.168.235.59 CH - [2015-05-28 14:20:20.236852] "GET /EMail/favicon.ico HTTP/1.1" 404 5090 "-" "Mozilla/5.0 (Linux; Android 5.0; SAMSUNG SM-G900F Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "a11fb306.52329eae71081" VjDLlKwxQzZrjHGWRRwAAAB0 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1047 6879 -% 35953377 2453 0 0 0 0 192.168.235.59 CH - [2015-05-28 14:21:09.177791] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@eourindustry.com HTTP/1.1" 502 4089 "-" "Mozilla/5.0 (Linux; Android 5.0; SAMSUNG SM-G900F Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "a11fb306.52329eae71081" VjDLxawxQzZrjHGWRSQAAAB6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1162 4791 -% 30034939 3174 0 0 0 0 192.168.235.59 CH - [2015-05-28 14:22:17.777120] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@eourindustry.com HTTP/1.1" 200 7356 "-" "Mozilla/5.0 (Linux; Android 5.0; SAMSUNG SM-G900F Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "82f641c9.5232a15602fe0" VjDMCawxQzZrjHGWRSsAAABS TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1073 8079 -% 61689594 2641 682007 3911 0 0 192.168.235.59 CH - [2015-05-28 14:23:19.583253] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@eourindustry.com" "Mozilla/5.0 (Linux; Android 5.0; SAMSUNG SM-G900F Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - - "82f641c9.5232a15602fe0" VjDMR6wxQzZrjHGWRTYAAABT - - 595 31 -% 30033537 3211 29063 187 0 0 192.168.235.59 CH - [2015-05-28 14:23:19.708726] "GET /EMail/css/utils.css HTTP/1.1" 502 4089 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@eourindustry.com" "Mozilla/5.0 (Linux; Android 5.0; SAMSUNG SM-G900F Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "82f641c9.5232a15602fe0" VjDMR6wxQzZrjHGVoG0AAAA0 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1160 4791 -% 30031478 1855 0 0 0 0 192.168.235.59 CH - [2015-05-28 14:23:19.708771] "GET /EMail/css/basic.css HTTP/1.1" 502 4089 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@eourindustry.com" "Mozilla/5.0 (Linux; Android 5.0; SAMSUNG SM-G900F Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "82f641c9.5232a15602fe0" VjDMR6wxQzZrjHGWRTcAAABN TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1160 4791 -% 30032531 1833 0 0 0 0 192.168.235.59 CH - [2015-05-28 14:23:19.715965] "GET /EMail/scripts/shost.js HTTP/1.1" 502 4089 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@eourindustry.com" "Mozilla/5.0 (Linux; Android 5.0; SAMSUNG SM-G900F Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "82f641c9.5232a15602fe0" VjDMR6wxQzZrjHGVoG4AAAAu TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1150 4791 -% 30033025 2818 0 0 0 0 192.168.235.59 CH - [2015-05-28 14:23:19.721955] "GET /EMail/scripts/variables_de.js HTTP/1.1" 502 4089 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@eourindustry.com" "Mozilla/5.0 (Linux; Android 5.0; SAMSUNG SM-G900F Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "82f641c9.5232a15602fe0" VjDMR6wxQzZrjHGVoG8AAAAt TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1155 4791 -% 30034600 2936 0 0 0 0 192.168.235.59 CH - [2015-05-28 14:23:19.731379] "GET /EMail/images/logo.gif HTTP/1.1" 502 4089 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@eourindustry.com" "Mozilla/5.0 (Linux; Android 5.0; SAMSUNG SM-G900F Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "82f641c9.5232a15602fe0" VjDMR6wxQzZrjHGWRTgAAABP TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1164 4791 -% 30032767 2757 0 0 0 0 192.168.235.59 CH - [2015-05-28 14:23:49.784954] "GET /EMail/css/NNstyle.css HTTP/1.1" 502 4089 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@eourindustry.com" "Mozilla/5.0 (Linux; Android 5.0; SAMSUNG SM-G900F Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "82f641c9.5232a15602fe0" VjDMZawxQzZrjHGVoHEAAAAv TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1162 4791 -% 30032391 2418 0 0 0 0 192.168.235.59 CH - [2015-05-28 14:24:19.934744] "GET /EMail/images/logo.gif HTTP/1.1" 200 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@eourindustry.com" "Mozilla/5.0 (Linux; Android 5.0; SAMSUNG SM-G900F Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - - "82f641c9.5232a15602fe0" VjDMg6wxQzZrjHGVoHUAAAA1 - - 597 31 -% 30033736 3097 29846 126 0 0 192.168.235.59 CH - [2015-05-28 14:24:50.138635] "GET /EMail/images/logo.gif HTTP/1.1" 502 4089 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@eourindustry.com" "Mozilla/5.0 (Linux; Android 5.0; SAMSUNG SM-G900F Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "82f641c9.5232a15602fe0" VjDMoqwxQzZrjHGWRUMAAABA TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1164 4791 -% 30033986 3003 0 0 0 0 192.168.81.38 CH - [2015-05-28 14:25:01.256722] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7372 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e84e2e70.5232507eed7a7" VjDMrawxQzZrjHGWRUUAAABf TLSv1 ECDHE-RSA-AES256-SHA 783 11849 -% 22018544 2904 12468 2450 0 0 192.168.235.59 CH - [2015-05-28 14:25:20.367269] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Linux; Android 5.0; SAMSUNG SM-G900F Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "82f641c9.5232a15602fe0" VjDMwKwxQzZrjHGWRUoAAABn TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 486 1567 -% 11851542 2979 847626 281 0 0 192.168.104.36 CH - [2015-05-28 14:25:51.756180] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 502 4089 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDM36wxQzZrjHGWRU4AAABq TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1052 8679 -% 30037034 4402 0 0 0 0 192.168.104.36 CH - [2015-05-28 14:26:22.379273] "GET /EMail/favicon.ico HTTP/1.1" 404 5090 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDM-qwxQzZrjHGWRVIAAABh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 331 6741 -% 31265041 2972 0 0 0 0 192.168.81.38 CH - [2015-05-28 14:26:41.959189] "GET /EMail/overview.aspx HTTP/1.1" 200 5304 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e84e2e70.5232507eed7a7" VjDNEawxQzZrjHGVoIQAAAAH TLSv1 ECDHE-RSA-AES256-SHA 815 9769 -% 16297755 3781 291194 1797 0 0 192.168.235.59 CH - [2015-05-28 14:28:23.218850] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@eourindustry.com" "Mozilla/5.0 (Linux; Android 5.0; SAMSUNG SM-G900F Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "82f641c9.5232a15602fe0" VjDNd6wxQzZrjHGWRWMAAABF TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1486 4442 -% 2920026 3288 915802 179 0 0 192.168.235.59 CH - [2015-05-28 14:28:26.272810] "GET /EMail/main.aspx HTTP/1.1" 200 3388 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@eourindustry.com" "Mozilla/5.0 (Linux; Android 5.0; SAMSUNG SM-G900F Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "82f641c9.5232a15602fe0" VjDNeqwxQzZrjHGWRWQAAAB6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 670 3804 -% 1358193 3486 352900 1148 0 0 192.168.235.59 CH - [2015-05-28 14:28:27.798912] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Linux; Android 5.0; SAMSUNG SM-G900F Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "82f641c9.5232a15602fe0" VjDNe6wxQzZrjHGWRWUAAABD TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 574 2545 14% 1204179 2251 200021 207 0 0 192.168.1.78 CH - [2015-05-28 14:29:38.634656] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDNwqwxQzZrjHGWRW8AAABk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1141 8269 23% 868719 1949 865163 161 0 0 192.168.1.78 CH - [2015-05-28 14:29:38.509306] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDNwqwxQzZrjHGVoJQAAAAQ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1106 5902 22% 1087689 1730 84980 198 0 0 192.168.1.78 CH - [2015-05-28 14:29:38.622767] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDNwqwxQzZrjHGWRW4AAABL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1106 4620 56% 1051596 2497 48345 154 0 0 192.168.1.78 CH - [2015-05-28 14:29:38.501430] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDNwqwxQzZrjHGWRW0AAABY TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1150 5711 -% 1192022 3319 187760 149 0 0 192.168.1.78 CH - [2015-05-28 14:29:38.641716] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDNwqwxQzZrjHGWRXAAAABM TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1136 11687 22% 1084223 2155 78420 156 0 0 192.168.1.78 CH - [2015-05-28 14:29:39.814059] "GET /EMail/scripts/csshover.htc HTTP/1.1" 200 4255 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDNw6wxQzZrjHGWRXEAAAB4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 360 4676 -% 710998 3073 706819 264 0 0 192.168.1.78 CH - [2015-05-28 14:29:39.860542] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDNw6wxQzZrjHGWRXIAAABS TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 506 1792 -% 866064 2759 862452 199 0 0 192.168.1.78 CH - [2015-05-28 14:29:40.842253] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Win64; x64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f9d9b3e9.5232a2fc8d30d" VjDNxKwxQzZrjHGWRXMAAABR TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 936 5756 -% 890184 1174 887935 196 0 0 192.168.1.78 CH - [2015-05-28 14:29:47.803243] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDNy6wxQzZrjHGWRXUAAABb TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1320 4447 -% 1079990 5400 73601 289 0 0 192.168.1.78 CH - [2015-05-28 14:29:48.899572] "GET /EMail/main.aspx HTTP/1.1" 200 3397 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDNzKwxQzZrjHGWRXYAAABj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 507 3813 -% 1099419 3057 93708 1949 0 0 192.168.1.78 CH - [2015-05-28 14:29:50.115911] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDNzqwxQzZrjHGWRXoAAABP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1204 11687 22% 1025028 2212 20015 181 0 0 192.168.1.78 CH - [2015-05-28 14:29:50.073701] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDNzqwxQzZrjHGWRXcAAABU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 528 2551 14% 1117573 2283 113272 207 0 0 192.168.1.78 CH - [2015-05-28 14:29:50.109289] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDNzqwxQzZrjHGWRXgAAABT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1173 5902 22% 1112895 2177 109873 112 0 0 192.168.1.78 CH - [2015-05-28 14:29:50.114549] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDNzqwxQzZrjHGWRXkAAABN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1172 4620 56% 1111622 1764 109212 128 0 0 192.168.1.78 CH - [2015-05-28 14:29:50.114993] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDNzqwxQzZrjHGVoJYAAAAV TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1209 8122 23% 1126782 1822 123651 120 0 0 192.168.1.78 CH - [2015-05-28 14:29:51.341728] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDNz6wxQzZrjHGVoJcAAAAb TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 457 4141 -% 1004471 2749 994870 6203 0 0 192.168.1.78 CH - [2015-05-28 14:29:51.344170] "GET /EMail/overview.aspx HTTP/1.1" 200 5300 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDNz6wxQzZrjHGWRXwAAABH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 459 5722 -% 1228998 4634 220542 2886 0 0 192.168.1.78 CH - [2015-05-28 14:29:51.343274] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDNz6wxQzZrjHGWRXsAAABe TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 485 9192 -% 1489749 5581 473074 4329 0 0 192.168.1.78 CH - [2015-05-28 14:29:52.402751] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDN0KwxQzZrjHGWRX4AAABd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 526 594 56% 846574 3194 842323 238 0 0 192.168.1.78 CH - [2015-05-28 14:29:52.399646] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDN0KwxQzZrjHGWRX0AAABa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 527 1876 22% 987895 3125 983747 160 0 0 192.168.1.78 CH - [2015-05-28 14:29:52.399284] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDN0KwxQzZrjHGVoJgAAAAZ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 2427 14% 1090395 3111 85374 199 0 0 192.168.1.78 CH - [2015-05-28 14:29:52.444959] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7161 "https://www.example.com/EMail/header.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDN0KwxQzZrjHGWRX8AAABc TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1206 11918 22% 1052135 2368 44842 244 0 0 192.168.1.78 CH - [2015-05-28 14:29:52.483562] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDN0KwxQzZrjHGVoJkAAAAY TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1214 4232 -% 1131031 3244 126847 179 0 0 192.168.1.78 CH - [2015-05-28 14:29:52.645895] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDN0KwxQzZrjHGWRYAAAABX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 486 1248 -% 1205558 2094 202465 240 0 0 192.168.1.78 CH - [2015-05-28 14:29:52.887579] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDN0KwxQzZrjHGWRYEAAABv TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 528 1260 -% 1064556 3096 60464 212 0 0 192.168.1.78 CH - [2015-05-28 14:29:53.553281] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDN0awxQzZrjHGVoJoAAAAX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 206 -% 903733 2615 900255 196 0 0 192.168.1.78 CH - [2015-05-28 14:29:53.606321] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDN0awxQzZrjHGWRYQAAABp TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 570 206 -% 852073 2942 848152 213 0 0 192.168.1.78 CH - [2015-05-28 14:29:53.551135] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDN0awxQzZrjHGWRYIAAABl TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 206 -% 987143 3106 983215 198 0 0 192.168.1.78 CH - [2015-05-28 14:29:53.563552] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDN0awxQzZrjHGWRYMAAABz TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 206 -% 1141796 1838 138989 264 0 0 192.168.1.78 CH - [2015-05-28 14:30:15.461339] "GET /EMail/inbox.aspx HTTP/1.1" 200 8592 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDN56wxQzZrjHGWRYkAAABf TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1108 13069 -% 1804090 2506 797812 3017 0 0 192.168.1.78 CH - [2015-05-28 14:30:17.379621] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDN6awxQzZrjHGWRYwAAABW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1174 5902 22% 944186 2991 939604 263 0 0 192.168.1.78 CH - [2015-05-28 14:30:17.342285] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDN6awxQzZrjHGWRYsAAABn TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 529 2551 14% 1008686 3380 3661 146 0 0 192.168.1.78 CH - [2015-05-28 14:30:17.380490] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDN6awxQzZrjHGWRY0AAABg TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1173 4620 56% 1028070 3013 24103 242 0 0 192.168.1.78 CH - [2015-05-28 14:30:17.381818] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDN6awxQzZrjHGVoJ4AAAAe TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1126 4565 -% 1068722 3076 64841 196 0 0 192.168.1.78 CH - [2015-05-28 14:30:17.383846] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7160 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDN6awxQzZrjHGVoKEAAAAi TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1205 11916 22% 1271010 3709 263389 373 0 0 192.168.1.78 CH - [2015-05-28 14:30:17.383518] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDN6awxQzZrjHGVoKAAAAAh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1129 5839 -% 1287952 2846 284186 128 0 0 192.168.1.78 CH - [2015-05-28 14:30:17.382800] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDN6awxQzZrjHGVoJ8AAAAg TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1129 4553 -% 1429823 4061 425005 143 0 0 192.168.1.78 CH - [2015-05-28 14:30:18.754941] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDN6qwxQzZrjHGVoKIAAAAj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 206 -% 932577 3063 928531 520 0 0 192.168.1.78 CH - [2015-05-28 14:30:21.617950] "GET /EMail/message.aspx?&mailId=3915_20&folderId=2582_34&mailPos=0 HTTP/1.1" 200 11201 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDN7awxQzZrjHGVoKMAAAAk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 502 11682 -% 1409760 5213 383603 19676 0 0 192.168.1.78 CH - [2015-05-28 14:30:23.139913] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/message.aspx?&mailId=3915_20&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDN76wxQzZrjHGVoKcAAAAq TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 602 7992 22% 893223 1835 887597 160 0 0 192.168.1.78 CH - [2015-05-28 14:30:23.138711] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/message.aspx?&mailId=3915_20&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDN76wxQzZrjHGVoKUAAAAs TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 570 594 56% 1073558 3007 69464 243 0 0 192.168.1.78 CH - [2015-05-28 14:30:23.139104] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/message.aspx?&mailId=3915_20&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDN76wxQzZrjHGVoKYAAAAn TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 574 2427 14% 1086311 2904 82169 111 0 0 192.168.1.78 CH - [2015-05-28 14:30:23.138281] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/message.aspx?&mailId=3915_20&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDN76wxQzZrjHGVoKQAAAAl TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 571 1876 22% 1094333 2143 91295 100 0 0 192.168.1.78 CH - [2015-05-28 14:30:24.120653] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDN8KwxQzZrjHGVoKgAAAAm TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 206 -% 869472 1986 866754 187 0 0 192.168.1.78 CH - [2015-05-28 14:30:25.874630] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3915_20&folderId=2582_34&attachmentId=2&token=54729698652799252E18 HTTP/1.1" 200 56843 "https://www.example.com/EMail/message.aspx?&mailId=3915_20&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDN8awxQzZrjHGVoKkAAAA0 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 608 58444 -% 1076500 4845 35852 204 0 0 192.168.1.78 CH - [2015-05-28 14:30:47.095576] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/message.aspx?&mailId=3915_20&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDOB6wxQzZrjHGVoKsAAAAt TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1171 6114 -% 943574 3447 939217 221 0 0 192.168.1.78 CH - [2015-05-28 14:30:48.816190] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3915_20&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDOCKwxQzZrjHGVoKwAAAAy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 734 356 -% 1170577 6439 163140 211 0 0 192.168.1.78 CH - [2015-05-28 14:30:50.002108] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7291 "https://www.example.com/EMail/message.aspx?&mailId=3915_20&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDOCqwxQzZrjHGVoK0AAAA3 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 551 7713 -% 1063620 2960 57841 2303 0 0 192.168.1.78 CH - [2015-05-28 14:30:51.146375] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDOC6wxQzZrjHGVoK4AAAAx TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 553 2427 14% 1026869 3119 21911 214 0 0 192.168.1.78 CH - [2015-05-28 14:30:51.219407] "GET /EMail/images/Highost.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDOC6wxQzZrjHGVoLAAAAAz TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1241 4231 -% 961005 2406 957866 96 0 0 192.168.1.78 CH - [2015-05-28 14:30:51.184481] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDOC6wxQzZrjHGWRZMAAABE TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1198 5902 22% 1029424 1988 26233 176 0 0 192.168.1.78 CH - [2015-05-28 14:30:51.184575] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDOC6wxQzZrjHGWRZQAAAB5 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1197 4620 56% 1128731 2586 125330 149 0 0 192.168.1.78 CH - [2015-05-28 14:30:51.186098] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDOC6wxQzZrjHGVoK8AAAAv TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1229 11687 22% 1249890 2456 244217 232 0 0 192.168.1.78 CH - [2015-05-28 14:30:52.519337] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDODKwxQzZrjHGVoLEAAAA4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 206 -% 1045968 2821 42476 153 0 0 192.168.1.78 CH - [2015-05-28 14:30:52.986349] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDODKwxQzZrjHGWRZUAAABr TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 478 409 -% 970115 2656 966735 203 0 0 192.168.1.78 CH - [2015-05-28 14:30:53.972925] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDODawxQzZrjHGWRZYAAAB1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 459 676 75% 1028456 3293 24177 286 0 0 192.168.1.78 CH - [2015-05-28 14:30:55.238945] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Win64; x64; Trident/6.0)" www.example.com 192.168.34.16 443 - - + "f9d9b3e9.5232a2fc8d30d" VjDOD6wxQzZrjHGWRZkAAAB@ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 966 5580 -% 2915 1923 58 146 0 0 192.168.1.78 CH - [2015-05-28 14:30:55.145314] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDOD6wxQzZrjHGWRZgAAABw TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 425 318 -% 855054 3578 850499 341 0 0 192.168.1.78 CH - [2015-05-28 14:30:56.015216] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDOEKwxQzZrjHGWRZoAAABC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 407 7771 -% 933584 3016 927015 2904 0 0 192.168.1.78 CH - [2015-05-28 14:30:57.078290] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDOEawxQzZrjHGWRZwAAAB2 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 529 2427 14% 1107368 3192 102139 201 0 0 192.168.1.78 CH - [2015-05-28 14:30:57.081960] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDOEawxQzZrjHGVoLIAAAA- TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 525 594 56% 1119245 3304 114948 187 0 0 192.168.1.78 CH - [2015-05-28 14:30:57.079933] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDOEawxQzZrjHGWRZ0AAABs TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 526 1876 22% 1156635 2018 153352 218 0 0 192.168.1.78 CH - [2015-05-28 14:30:57.084131] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDOEawxQzZrjHGVoLMAAAA1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 557 7661 22% 1201439 2562 195189 174 0 0 192.168.1.78 CH - [2015-05-28 14:30:57.155889] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDOEawxQzZrjHGWRZ4AAAB0 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1210 8269 23% 1251102 2961 245898 203 0 0 192.168.1.78 CH - [2015-05-28 14:30:57.157117] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDOEawxQzZrjHGWRZ8AAABK TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1213 4232 -% 1274111 2055 271228 202 0 0 192.168.1.78 CH - [2015-05-28 14:30:58.495255] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDOEqwxQzZrjHGWRaAAAAB7 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 206 -% 943196 2299 940203 159 0 0 192.168.1.78 CH - [2015-05-28 14:30:58.543131] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDOEqwxQzZrjHGWRaEAAABB TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 569 206 -% 918952 2888 915209 158 0 0 192.168.213.23 CH - [2015-05-28 14:31:54.634719] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7647cbf9.5232a37229a92" VjDOSqwxQzZrjHGWRacAAAB9 TLSv1 ECDHE-RSA-AES256-SHA 1032 4305 -% 949821 6048 942798 194 0 0 192.168.213.23 CH - [2015-05-28 14:32:05.536595] "GET /EMail/main.aspx HTTP/1.1" 200 3415 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7647cbf9.5232a37229a92" VjDOVawxQzZrjHGVoLoAAAA9 TLSv1 ECDHE-RSA-AES256-SHA 872 7670 -% 911584 2097 906994 1839 0 0 192.168.213.23 CH - [2015-05-28 14:32:06.737291] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7647cbf9.5232a37229a92" VjDOVqwxQzZrjHGWRasAAABJ TLSv1 ECDHE-RSA-AES256-SHA 840 7990 -% 754546 3435 743871 6608 0 0 192.168.213.23 CH - [2015-05-28 14:32:06.688444] "GET /EMail/overview.aspx HTTP/1.1" 200 6447 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7647cbf9.5232a37229a92" VjDOVqwxQzZrjHGWRaoAAABO TLSv1 ECDHE-RSA-AES256-SHA 840 10726 -% 1360200 3951 353051 2222 0 0 192.168.213.23 CH - [2015-05-28 14:32:08.288937] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7647cbf9.5232a37229a92" VjDOWKwxQzZrjHGWRawAAABY TLSv1 ECDHE-RSA-AES256-SHA 952 4049 -% 905227 2689 901797 160 0 0 192.168.213.21 CH - [2015-05-28 14:33:48.248200] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjDOvKwxQzZrjHGWRbYAAABN TLSv1.2 ECDHE-RSA-AES128-SHA256 954 4302 -% 987577 3238 983572 164 0 0 192.168.213.21 CH - [2015-05-28 14:33:49.396255] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjDOvawxQzZrjHGWRbcAAABH TLSv1.2 ECDHE-RSA-AES128-SHA256 534 357 -% 852914 3675 848133 250 0 0 192.168.213.21 CH - [2015-05-28 14:33:50.280783] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjDOvqwxQzZrjHGWRbgAAABe TLSv1.2 ECDHE-RSA-AES128-SHA256 518 7834 -% 924539 3087 917578 3194 0 0 192.168.213.21 CH - [2015-05-28 14:33:51.361689] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjDOv6wxQzZrjHGWRbkAAABd TLSv1.2 ECDHE-RSA-AES128-SHA256 550 2527 14% 985128 2086 981866 159 0 0 192.168.213.21 CH - [2015-05-28 14:33:51.412735] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjDOv6wxQzZrjHGWRboAAABa TLSv1.2 ECDHE-RSA-AES128-SHA256 927 422 -% 1040591 2855 36851 194 0 0 192.168.213.21 CH - [2015-05-28 14:33:51.414323] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjDOv6wxQzZrjHGWRbsAAABc TLSv1.2 ECDHE-RSA-AES128-SHA256 927 422 -% 1043193 1890 40592 135 0 0 192.168.213.21 CH - [2015-05-28 14:33:51.435309] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjDOv6wxQzZrjHGWRbwAAABv TLSv1.2 ECDHE-RSA-AES128-SHA256 959 422 -% 1314322 1847 311783 168 0 0 192.168.213.21 CH - [2015-05-28 14:33:51.509737] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjDOv6wxQzZrjHGWRb0AAABX TLSv1.2 ECDHE-RSA-AES128-SHA256 943 422 -% 1253891 1807 251398 145 0 0 192.168.213.21 CH - [2015-05-28 14:33:52.812798] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d4ca2fd.52327abbe1a4b" VjDOwKwxQzZrjHGWRb4AAABl TLSv1.2 ECDHE-RSA-AES128-SHA256 678 245 -% 907849 3518 903236 156 0 0 192.168.1.78 CH - [2015-05-28 14:47:21.921865] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7365 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDR6awxQzZrjHGWRjAAAABN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1075 11813 -% 1495562 3358 489180 2276 0 0 192.168.1.78 CH - [2015-05-28 14:47:23.580406] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDR66wxQzZrjHGWRjEAAABH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 555 2551 14% 1291166 2072 286008 228 0 0 192.168.104.36 CH - [2015-05-28 15:00:27.313543] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDU@6wxQzZrjHGWRqoAAABT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1297 4447 -% 1878905 5207 872456 287 0 0 192.168.104.36 CH - [2015-05-28 15:00:29.211266] "GET /EMail/main.aspx HTTP/1.1" 200 3394 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDU-awxQzZrjHGWRqwAAABH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 484 3810 -% 890768 3985 883551 1888 0 0 192.168.104.36 CH - [2015-05-28 15:00:30.221098] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDU-qwxQzZrjHGWRq0AAABe TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 437 4141 -% 1149261 1988 139057 7589 0 0 192.168.104.36 CH - [2015-05-28 15:00:30.295405] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDU-qwxQzZrjHGWRq4AAABd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1089 9749 -% 1418350 2097 413864 1855 0 0 192.168.104.36 CH - [2015-05-28 15:00:30.283721] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDU-qwxQzZrjHGVoScAAAAy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1115 13218 -% 2166102 2652 155556 2790 0 0 192.168.213.23 CH - [2015-05-28 15:00:35.769233] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3914_90&folderId=1001_9&attachmentId=2&token=52956653131856896E18 HTTP/1.1" 200 55007 "https://www.example.com/EMail/message.aspx?&mailId=3914_90&folderId=1001_9&mailPos=16" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7647cbf9.5232a37229a92" VjDVA6wxQzZrjHGVoSkAAAAx TLSv1 ECDHE-RSA-AES256-SHA 984 60496 -% 1204713 6365 184036 208 0 0 192.168.104.36 CH - [2015-05-28 15:00:34.819819] "GET /EMail/inbox.aspx HTTP/1.1" 200 53021 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDVAqwxQzZrjHGVoSgAAAA3 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 440 53763 -% 2800504 2025 216545 20260 0 0 192.168.104.36 CH - [2015-05-28 15:00:42.973272] "GET /EMail/message.aspx?&mailId=3914_85&folderId=2833_44&mailPos=0 HTTP/1.1" 200 11347 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDVCqwxQzZrjHGWRrAAAABa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1132 15825 -% 1925131 5237 896606 22332 0 0 192.168.104.36 CH - [2015-05-28 15:00:47.195120] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3914_85&folderId=2833_44&attachmentId=2&token=54863896094038508E18 HTTP/1.1" 200 58985 "https://www.example.com/EMail/message.aspx?&mailId=3914_85&folderId=2833_44&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDVD6wxQzZrjHGWRrEAAABc TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 588 60651 -% 1031878 8911 0 185 0 0 192.168.104.36 CH - [2015-05-28 15:01:06.142255] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDVIqwxQzZrjHGWRrUAAABz TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1108 4435 -% 1164224 3902 159532 152 0 0 192.168.104.36 CH - [2015-05-28 15:01:07.420678] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDVI6wxQzZrjHGWRrYAAABA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 405 318 -% 1161353 2268 158380 157 0 0 192.168.104.36 CH - [2015-05-28 15:01:08.592969] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDVJKwxQzZrjHGWRrcAAABx TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 387 7771 -% 1659480 3022 652361 3305 0 0 192.168.104.36 CH - [2015-05-28 15:01:10.349636] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDVJqwxQzZrjHGWRrkAAABi TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1156 5902 22% 977487 4802 971088 177 0 0 192.168.104.36 CH - [2015-05-28 15:01:10.444928] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDVJqwxQzZrjHGWRrsAAABW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1192 8269 23% 1116421 3409 110941 141 0 0 192.168.104.36 CH - [2015-05-28 15:01:10.355915] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDVJqwxQzZrjHGWRroAAABZ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1155 4620 56% 1205576 1914 202754 167 0 0 192.168.104.36 CH - [2015-05-28 15:01:10.303142] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDVJqwxQzZrjHGWRrgAAABo TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 509 2551 14% 1259173 2883 253966 117 0 0 192.168.104.36 CH - [2015-05-28 15:01:10.447772] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDVJqwxQzZrjHGWRr0AAABf TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1187 12018 22% 1114826 2717 108527 150 0 0 192.168.104.36 CH - [2015-05-28 15:01:10.445267] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDVJqwxQzZrjHGWRrwAAABn TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1195 4232 -% 1462248 3140 458198 203 0 0 192.168.104.36 CH - [2015-05-28 15:01:11.678187] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5364152c.52328cfb68d51" VjDVJ6wxQzZrjHGWRr8AAABt TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 549 206 -% 870245 3109 866060 272 0 0 192.168.146.78 CH - [2015-05-28 15:06:08.039519] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7350 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53host.5232ab226ce5f" VjDWUKwxQzZrjHGWRuwAAABe TLSv1.2 ECDHE-RSA-AES128-SHA256 703 11875 -% 961164 1731 955056 3578 0 0 192.168.146.78 CH - [2015-05-28 15:06:09.161130] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53host.5232ab226ce5f" VjDWUawxQzZrjHGWRu0AAABd TLSv1.2 ECDHE-RSA-AES128-SHA256 582 245 -% 1392400 2913 388567 201 0 0 192.168.146.78 CH - [2015-05-28 15:06:12.478267] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53host.5232ab226ce5f" VjDWVKwxQzZrjHGWRu4AAABp TLSv1.2 ECDHE-RSA-AES128-SHA256 678 453 -% 1453988 3347 449455 262 0 0 192.168.146.78 CH - [2015-05-28 15:06:13.963294] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53host.5232ab226ce5f" VjDWVawxQzZrjHGWRu8AAABa TLSv1.2 ECDHE-RSA-AES128-SHA256 534 3882 -% 1388624 1989 383125 2849 0 0 192.168.146.78 CH - [2015-05-28 15:06:15.511480] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53cc24f4.5232ab226ce5f" VjDWV6wxQzZrjHGWRvEAAABv TLSv1.2 ECDHE-RSA-AES128-SHA256 486 4202 -% 796188 2320 779808 13044 0 0 192.168.146.78 CH - [2015-05-28 15:06:15.687112] "GET /EMail/overview.aspx HTTP/1.1" 200 5305 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53host.5232ab226ce5f" VjDWV6wxQzZrjHGWRvMAAABl TLSv1.2 ECDHE-RSA-AES128-SHA256 772 5963 -% 1030509 1962 24715 3094 0 0 192.168.146.78 CH - [2015-05-28 15:06:15.656343] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53host.5232ab226ce5f" VjDWV6wxQzZrjHGWRvIAAABX TLSv1.2 ECDHE-RSA-AES128-SHA256 804 9683 -% 1992516 2810 981237 2995 0 0 192.168.146.78 CH - [2015-05-28 15:06:18.324613] "GET /EMail/inbox.aspx HTTP/1.1" 200 51719 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53host.5232ab226ce5f" VjDWWqwxQzZrjHGWRvQAAABz TLSv1.2 ECDHE-RSA-AES128-SHA256 486 52881 -% 2649297 3007 100862 19965 0 0 192.168.146.78 CH - [2015-05-28 15:06:23.385965] "GET /EMail/message.aspx?&mailId=3915_25&folderId=2634_79&mailPos=0 HTTP/1.1" 200 17645 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53host.5232ab226ce5f" VjDWX6wxQzZrjHGWRvUAAABA TLSv1.2 ECDHE-RSA-AES128-SHA256 534 18313 -% 2100823 3251 61952 33383 0 0 192.168.148.10 CH - [2015-05-28 15:17:15.472269] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8545 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4cee471f.52326135178eb" VjDY66wxQzZrjHGVoWkAAAAv TLSv1 ECDHE-RSA-AES256-SHA 836 13240 -% 1725774 4080 713904 2690 0 0 192.168.148.10 CH - [2015-05-28 15:17:21.837312] "GET /EMail/message.aspx?&mailId=3914_95&folderId=933_77&mailPos=0 HTTP/1.1" 200 11240 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4cee471f.52326135178eb" VjDY8awxQzZrjHGVoWoAAAA4 TLSv1 ECDHE-RSA-AES256-SHA 518 11748 -% 3503096 3093 478868 20054 0 0 192.168.148.10 CH - [2015-05-28 15:17:27.623244] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3914_95&folderId=933_77&attachmentId=2&token=46130311488908257E18 HTTP/1.1" 200 60395 "https://www.example.com/EMail/message.aspx?&mailId=3914_95&folderId=933_77&mailPos=0" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4cee471f.52326135178eb" VjDY96wxQzZrjHGVoWwAAAA- TLSv1 ECDHE-RSA-AES256-SHA 614 62242 -% 1242921 4661 214154 186 0 0 192.168.148.10 CH - [2015-05-28 15:17:52.413319] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3914_95&folderId=933_77&mailPos=0" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4cee471f.52326135178eb" VjDZEKwxQzZrjHGWR1UAAABQ TLSv1 ECDHE-RSA-AES256-SHA 1044 4363 -% 1707217 5642 700714 289 0 0 192.168.148.10 CH - [2015-05-28 15:17:54.320026] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7297 "https://www.example.com/EMail/message.aspx?&mailId=3914_95&folderId=933_77&mailPos=0" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4cee471f.52326135178eb" VjDZEqwxQzZrjHGWR1cAAABJ TLSv1 ECDHE-RSA-AES256-SHA 566 7738 -% 1070576 2455 63347 4103 0 0 192.168.148.10 CH - [2015-05-28 15:17:56.357640] "GET /EMail/trash.aspx?dir=desc HTTP/1.1" 200 8684 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4cee471f.52326135178eb" VjDZFKwxQzZrjHGWR1gAAABk TLSv1 ECDHE-RSA-AES256-SHA 502 9167 -% 1802975 3632 793502 4513 0 0 192.168.148.10 CH - [2015-05-28 15:18:11.217895] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/trash.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - X "4cee471f.52326135178eb" VjDZI6wxQzZrjHGWR1sAAABY TLSv1 ECDHE-RSA-AES256-SHA 1273 145 -% 2124542 7271 116237 156 0 0 192.168.148.10 CH - [2015-05-28 15:18:11.765480] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/trash.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4cee471f.52326135178eb" VjDZI6wxQzZrjHGWR1wAAABM TLSv1 ECDHE-RSA-AES256-SHA 1348 4363 -% 1576986 6369 569878 169 0 0 192.168.148.10 CH - [2015-05-28 15:18:13.521596] "GET /EMail/trash.aspx?returnedFromDelete=true HTTP/1.1" 200 7274 "https://www.example.com/EMail/trash.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4cee471f.52326135178eb" VjDZJawxQzZrjHGWR10AAAB4 TLSv1 ECDHE-RSA-AES256-SHA 534 7706 -% 2710730 3883 703420 2725 0 0 192.168.148.10 CH - [2015-05-28 15:18:17.982441] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4cee471f.52326135178eb" VjDZKawxQzZrjHGWR18AAABR TLSv1 ECDHE-RSA-AES256-SHA 486 421 -% 858968 3604 854306 204 0 0 192.168.148.10 CH - [2015-05-28 15:18:19.920476] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - X "4cee471f.52326135178eb" VjDZK6wxQzZrjHGWR2AAAAB8 TLSv1 ECDHE-RSA-AES256-SHA 438 0 -% 1710296 2562 706931 182 0 0 192.168.213.23 CH - [2015-05-28 15:21:55.881530] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 31961 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7647cbf9.5232a37229a92" VjDaA6wxQzZrjHGVoYAAAAAL TLSv1 ECDHE-RSA-AES256-SHA 872 36420 -% 2474463 2417 224921 10313 0 0 192.168.213.23 CH - [2015-05-28 15:22:57.035175] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7647cbf9.5232a37229a92" VjDaQawxQzZrjHGWR4sAAABB TLSv1 ECDHE-RSA-AES256-SHA 888 13070 -% 1620423 2540 607355 5618 0 0 192.168.213.23 CH - [2015-05-28 15:23:02.537554] "GET /EMail/message.aspx?&mailId=3914_99&folderId=1001_9&mailPos=13 HTTP/1.1" 200 11490 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7647cbf9.5232a37229a92" VjDaRqwxQzZrjHGWR40AAAB6 TLSv1 ECDHE-RSA-AES256-SHA 888 15840 -% 3815706 3804 791365 19507 0 0 192.168.213.23 CH - [2015-05-28 15:25:32.343191] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7647cbf9.5232a37229a92" VjDa3KwxQzZrjHGVoYwAAAAa TLSv1 ECDHE-RSA-AES256-SHA 888 13070 -% 1608321 2519 598290 2803 0 0 192.168.213.23 CH - [2015-05-28 15:25:35.592182] "GET /EMail/message.aspx?&mailId=3915_22&folderId=1001_9&mailPos=11 HTTP/1.1" 200 11491 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7647cbf9.5232a37229a92" VjDa36wxQzZrjHGVoY0AAAAc TLSv1 ECDHE-RSA-AES256-SHA 888 15803 -% 1499735 4961 470128 23636 0 0 192.168.213.23 CH - [2015-05-28 15:26:03.490506] "GET /EMail/message.aspx?&mailId=3915_23&folderId=1001_9&mailPos=10 HTTP/1.1" 200 11489 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7647cbf9.5232a37229a92" VjDa@6wxQzZrjHGWR7UAAABm TLSv1 ECDHE-RSA-AES256-SHA 888 15824 -% 1853959 3302 824912 24291 0 0 192.168.213.23 CH - [2015-05-28 15:26:06.788848] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3915_23&folderId=1001_9&attachmentId=2&token=36900075508787502E18 HTTP/1.1" 200 53798 "https://www.example.com/EMail/message.aspx?&mailId=3915_23&folderId=1001_9&mailPos=10" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7647cbf9.5232a37229a92" VjDa-qwxQzZrjHGVoZEAAAAh TLSv1 ECDHE-RSA-AES256-SHA 984 59280 -% 2185939 4655 157227 190 0 0 192.168.213.23 CH - [2015-05-28 15:26:30.045430] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7647cbf9.5232a37229a92" VjDbFqwxQzZrjHGWR70AAABs TLSv1 ECDHE-RSA-AES256-SHA 888 13070 -% 1456528 2584 445259 3886 0 0 192.168.213.23 CH - [2015-05-28 15:26:35.537731] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3915_24&folderId=1001_9&attachmentId=2&token=24720251628772403E18 HTTP/1.1" 200 60381 "https://www.example.com/EMail/message.aspx?&mailId=3915_24&folderId=1001_9&mailPos=9" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7647cbf9.5232a37229a92" VjDbG6wxQzZrjHGWR78AAAB7 TLSv1 ECDHE-RSA-AES256-SHA 984 66078 -% 1327036 6527 288675 185 0 0 192.168.213.23 CH - [2015-05-28 15:26:59.843696] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7647cbf9.5232a37229a92" VjDbM6wxQzZrjHGWR8EAAABF TLSv1 ECDHE-RSA-AES256-SHA 888 13070 -% 1431420 2589 421256 2753 0 0 192.168.213.23 CH - [2015-05-28 15:27:04.142996] "GET /EMail/message.aspx?&mailId=3915_26&folderId=1001_9&mailPos=8 HTTP/1.1" 200 11488 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7647cbf9.5232a37229a92" VjDbOKwxQzZrjHGWR8MAAAB- TLSv1 ECDHE-RSA-AES256-SHA 888 15824 -% 2168058 3205 138964 24970 0 0 192.168.1.78 CH - [2015-05-28 15:27:04.389012] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/trash.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbOKwxQzZrjHGWR8QAAAB9 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1123 5904 -% 2892194 2420 888922 224 0 0 192.168.1.78 CH - [2015-05-28 15:27:07.301911] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbO6wxQzZrjHGWR8UAAABI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 206 -% 1046758 3072 42899 166 0 0 192.168.1.78 CH - [2015-05-28 15:27:13.023268] "GET /EMail/message.aspx?&mailId=3915_20&folderId=2582_37&mailPos=0 HTTP/1.1" 200 11066 "https://www.example.com/EMail/trash.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbQawxQzZrjHGWR8YAAABV TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 502 11547 -% 1652714 4791 623538 23549 0 0 192.168.1.78 CH - [2015-05-28 15:27:14.789770] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/message.aspx?&mailId=3915_20&folderId=2582_37&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbQqwxQzZrjHGWR8kAAABJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1144 2019 22% 1906745 3267 902485 165 0 0 192.168.1.78 CH - [2015-05-28 15:27:14.774007] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/message.aspx?&mailId=3915_20&folderId=2582_37&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbQqwxQzZrjHGWR8gAAABk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 574 2551 14% 1965254 2469 961063 137 0 0 192.168.1.78 CH - [2015-05-28 15:27:14.790167] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/message.aspx?&mailId=3915_20&folderId=2582_37&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbQqwxQzZrjHGVoZoAAAAu TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1143 737 56% 2294845 4926 288974 230 0 0 192.168.1.78 CH - [2015-05-28 15:27:14.791305] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/message.aspx?&mailId=3915_20&folderId=2582_37&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbQqwxQzZrjHGVoZsAAAA0 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1175 7804 22% 2321533 4411 313649 126 0 0 192.168.1.78 CH - [2015-05-28 15:27:17.224146] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbRawxQzZrjHGVoZwAAAAt TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 206 -% 844670 3343 840482 196 0 0 192.168.1.78 CH - [2015-05-28 15:27:19.449824] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3915_20&folderId=2582_37&attachmentId=2&token=119261914823204352E18 HTTP/1.1" 200 56843 "https://www.example.com/EMail/message.aspx?&mailId=3915_20&folderId=2582_37&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbR6wxQzZrjHGVoZ0AAAAy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 609 58444 -% 1688476 3939 661539 175 0 0 192.168.213.23 CH - [2015-05-28 15:27:28.092480] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 31906 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7647cbf9.5232a37229a92" VjDbUKwxQzZrjHGWR8sAAABY TLSv1 ECDHE-RSA-AES256-SHA 872 36372 -% 1735930 2293 253082 10781 0 0 192.168.81.38 CH - [2015-05-28 15:27:31.306977] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3362b1b3.52325ec77d3b2" VjDbU6wxQzZrjHGWR80AAAB4 TLSv1 ECDHE-RSA-AES256-SHA 831 5849 -% 1024775 3118 20658 206 0 0 192.168.213.23 CH - [2015-05-28 15:27:31.543267] "GET /EMail/message.aspx?&mailId=3916_1&folderId=1001_9&mailPos=7 HTTP/1.1" 200 11478 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7647cbf9.5232a37229a92" VjDbU6wxQzZrjHGVoZ8AAAAz TLSv1 ECDHE-RSA-AES256-SHA 888 15824 -% 1394318 3313 370943 19025 0 0 192.168.1.78 CH - [2015-05-28 15:27:32.159943] "GET /EMail/trash.aspx HTTP/1.1" 200 56743 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbVKwxQzZrjHGWR84AAABR TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1033 57657 -% 2127982 2192 662365 19719 0 0 192.168.1.78 CH - [2015-05-28 15:27:34.389717] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbVqwxQzZrjHGWR9AAAABb TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 206 -% 2651731 3713 647209 211 0 0 192.168.213.23 CH - [2015-05-28 15:27:37.291889] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3916_1&folderId=1001_9&attachmentId=2&token=49348242692548772E18 HTTP/1.1" 200 58567 "https://www.example.com/EMail/message.aspx?&mailId=3916_1&folderId=1001_9&mailPos=7" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7647cbf9.5232a37229a92" VjDbWawxQzZrjHGWR9EAAABj TLSv1 ECDHE-RSA-AES256-SHA 984 64233 -% 1285172 6681 255177 198 0 0 192.168.1.78 CH - [2015-05-28 15:27:38.489129] "GET /EMail/message.aspx?&mailId=3904_20&folderId=2582_37&mailPos=1 HTTP/1.1" 200 11197 "https://www.example.com/EMail/trash.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbWqwxQzZrjHGWR9IAAABP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 502 11678 -% 1390547 4817 357716 26987 0 0 192.168.1.78 CH - [2015-05-28 15:27:39.256452] "GET /EMail/message.aspx?&mailId=3904_20&folderId=2582_37&mailPos=1 HTTP/1.1" 200 11186 "https://www.example.com/EMail/trash.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbW6wxQzZrjHGWR9MAAABN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1075 11781 -% 1259001 4042 230718 23320 0 0 192.168.1.78 CH - [2015-05-28 15:27:40.628251] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/message.aspx?&mailId=3904_20&folderId=2582_37&mailPos=1" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbXKwxQzZrjHGWR9YAAABd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1143 737 56% 736848 1957 734078 210 0 0 192.168.1.78 CH - [2015-05-28 15:27:40.611451] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/message.aspx?&mailId=3904_20&folderId=2582_37&mailPos=1" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbXKwxQzZrjHGWR9UAAABe TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 574 2427 14% 953077 2041 949083 221 0 0 192.168.1.78 CH - [2015-05-28 15:27:40.630674] "GET /EMail/images/attach.gif HTTP/1.1" 304 - "https://www.example.com/EMail/message.aspx?&mailId=3904_20&folderId=2582_37&mailPos=1" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbXKwxQzZrjHGWR9gAAABa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1184 348 -% 969325 2692 965505 160 0 0 192.168.1.78 CH - [2015-05-28 15:27:40.630168] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/message.aspx?&mailId=3904_20&folderId=2582_37&mailPos=1" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbXKwxQzZrjHGVoaAAAAAv TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1175 7804 22% 984900 2869 978515 175 0 0 192.168.1.78 CH - [2015-05-28 15:27:40.629908] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/message.aspx?&mailId=3904_20&folderId=2582_37&mailPos=1" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbXKwxQzZrjHGWR9cAAABp TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1144 2019 22% 1219254 1814 216582 172 0 0 192.168.1.78 CH - [2015-05-28 15:27:41.703861] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbXawxQzZrjHGVoaEAAAA2 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 206 -% 684218 2734 680649 207 0 0 192.168.1.78 CH - [2015-05-28 15:27:43.763304] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3904_20&folderId=2582_37&attachmentId=2&token=2979861755172033E18 HTTP/1.1" 200 55785 "https://www.example.com/EMail/message.aspx?&mailId=3904_20&folderId=2582_37&mailPos=1" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbX6wxQzZrjHGVoaMAAAA- TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 607 57386 -% 3690641 4280 663488 226 0 0 192.168.81.38 CH - [2015-05-28 15:27:47.703607] "GET /EMail/message.aspx?&mailId=3914_54&folderId=587_1&mailPos=1 HTTP/1.1" 200 11473 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3362b1b3.52325ec77d3b2" VjDbY6wxQzZrjHGWR9oAAABv TLSv1 ECDHE-RSA-AES256-SHA 847 16003 -% 1241727 4966 215774 19786 0 0 192.168.81.38 CH - [2015-05-28 15:27:51.726393] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3914_54&folderId=587_1&attachmentId=2&token=144982829518702054E18 HTTP/1.1" 200 56372 "https://www.example.com/EMail/message.aspx?&mailId=3914_54&folderId=587_1&mailPos=1" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3362b1b3.52325ec77d3b2" VjDbZ6wxQzZrjHGWR9sAAABl TLSv1 ECDHE-RSA-AES256-SHA 598 58020 -% 881160 4243 830812 258 0 0 192.168.1.78 CH - [2015-05-28 15:27:56.703548] "GET /EMail/trash.aspx HTTP/1.1" 200 56743 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbbKwxQzZrjHGVoaYAAAA6 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1033 57657 -% 2345077 2986 844404 22518 0 0 192.168.1.78 CH - [2015-05-28 15:27:59.181555] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbb6wxQzZrjHGVoacAAAA5 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 206 -% 2119419 3067 115378 192 0 0 192.168.81.38 CH - [2015-05-28 15:28:00.964573] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3914_54&folderId=587_1&mailPos=1" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3362b1b3.52325ec77d3b2" VjDbcKwxQzZrjHGWR9wAAABz TLSv1 ECDHE-RSA-AES256-SHA 1055 4388 -% 1291617 5476 285041 434 0 0 192.168.81.38 CH - [2015-05-28 15:28:02.372830] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 15067 "https://www.example.com/EMail/message.aspx?&mailId=3914_54&folderId=587_1&mailPos=1" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3362b1b3.52325ec77d3b2" VjDbcqwxQzZrjHGWR90AAABA TLSv1 ECDHE-RSA-AES256-SHA 534 15572 -% 1283453 3523 268473 10060 0 0 192.168.1.78 CH - [2015-05-28 15:28:05.987727] "GET /EMail/message.aspx?&mailId=3904_2&folderId=2582_37&mailPos=2 HTTP/1.1" 200 11183 "https://www.example.com/EMail/trash.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbdawxQzZrjHGVoakAAAAA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 501 11664 -% 1531872 4839 496614 29229 0 0 192.168.1.78 CH - [2015-05-28 15:28:07.652042] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/message.aspx?&mailId=3904_2&folderId=2582_37&mailPos=2" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbd6wxQzZrjHGVoasAAAA9 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1143 2019 22% 854926 2022 851656 242 0 0 192.168.1.78 CH - [2015-05-28 15:28:07.634386] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/message.aspx?&mailId=3904_2&folderId=2582_37&mailPos=2" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbd6wxQzZrjHGVoaoAAAAB TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 573 2427 14% 972105 1945 968330 259 0 0 192.168.1.78 CH - [2015-05-28 15:28:07.654482] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/message.aspx?&mailId=3904_2&folderId=2582_37&mailPos=2" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbd6wxQzZrjHGWR@MAAABf TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1174 8135 22% 1089494 2286 82290 216 0 0 192.168.1.78 CH - [2015-05-28 15:28:07.659663] "GET /EMail/images/attach.gif HTTP/1.1" 304 - "https://www.example.com/EMail/message.aspx?&mailId=3904_2&folderId=2582_37&mailPos=2" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbd6wxQzZrjHGVoawAAAAC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1183 348 -% 1328262 1701 325733 214 0 0 192.168.1.78 CH - [2015-05-28 15:28:07.653952] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/message.aspx?&mailId=3904_2&folderId=2582_37&mailPos=2" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbd6wxQzZrjHGWR@IAAABo TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1142 737 56% 1334032 2661 330513 153 0 0 192.168.1.78 CH - [2015-05-28 15:28:08.858457] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbeKwxQzZrjHGWR@QAAABn TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 206 -% 990475 3138 986483 167 0 0 192.168.1.78 CH - [2015-05-28 15:28:10.731269] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3904_2&folderId=2582_37&attachmentId=2&token=47939988534667172E18 HTTP/1.1" 200 55276 "https://www.example.com/EMail/message.aspx?&mailId=3904_2&folderId=2582_37&mailPos=2" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbeqwxQzZrjHGWR@UAAABm TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 606 56848 -% 1050218 3996 24401 340 0 0 192.168.1.78 CH - [2015-05-28 15:28:25.472618] "GET /EMail/images/active.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbiawxQzZrjHGWR-EAAAB3 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1141 349 -% 864761 3282 860510 253 0 0 192.168.1.78 CH - [2015-05-28 15:28:26.241336] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbiqwxQzZrjHGWR-MAAAB@ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1051 552 -% 848491 3788 843743 209 0 0 192.168.1.78 CH - [2015-05-28 15:28:27.106008] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbi6wxQzZrjHGWR-QAAABC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 552 676 75% 965889 3208 961407 326 0 0 192.168.1.78 CH - [2015-05-28 15:28:28.183137] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbjKwxQzZrjHGWR-UAAABK TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 425 318 -% 1114464 3543 109666 289 0 0 192.168.1.78 CH - [2015-05-28 15:28:29.313436] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbjawxQzZrjHGWR-cAAABB TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 407 7771 -% 929678 3176 922919 2804 0 0 192.168.1.78 CH - [2015-05-28 15:28:30.354810] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbjqwxQzZrjHGWR-gAAABG TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 529 2427 14% 736910 3456 731250 203 0 0 192.168.1.78 CH - [2015-05-28 15:28:30.373183] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbjqwxQzZrjHGWR-oAAAB6 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1098 737 56% 911112 1903 908533 192 0 0 192.168.1.78 CH - [2015-05-28 15:28:30.356372] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbjqwxQzZrjHGWR-kAAABF TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 526 1876 22% 962858 3113 958539 165 0 0 192.168.1.78 CH - [2015-05-28 15:28:30.408564] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbjqwxQzZrjHGWR-wAAABD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1135 4386 23% 1052363 3059 47360 141 0 0 192.168.1.78 CH - [2015-05-28 15:28:30.374602] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbjqwxQzZrjHGVoa4AAAAH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1130 7804 22% 1086409 1866 82045 166 0 0 192.168.1.78 CH - [2015-05-28 15:28:30.408126] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbjqwxQzZrjHGWR-sAAAB- TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1138 349 -% 1166577 1919 163844 243 0 0 192.168.1.78 CH - [2015-05-28 15:28:32.014937] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbkKwxQzZrjHGWR-8AAABI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 569 206 -% 1053484 3018 49499 210 0 0 192.168.1.78 CH - [2015-05-28 15:28:31.973048] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDbj6wxQzZrjHGVoa8AAAAE TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 206 -% 1106275 3329 102143 159 0 0 192.168.213.23 CH - [2015-05-28 15:28:45.650095] "GET /EMail/message.aspx?&mailId=3916_3&folderId=1001_9&mailPos=5 HTTP/1.1" 200 11478 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7647cbf9.5232a37229a92" VjDbnawxQzZrjHGWSAUAAABM TLSv1 ECDHE-RSA-AES256-SHA 888 15787 -% 1127985 3070 98085 26008 0 0 192.168.213.23 CH - [2015-05-28 15:28:48.297654] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3916_3&folderId=1001_9&attachmentId=2&token=23835296368851743E18 HTTP/1.1" 200 54611 "https://www.example.com/EMail/message.aspx?&mailId=3916_3&folderId=1001_9&mailPos=5" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7647cbf9.5232a37229a92" VjDboKwxQzZrjHGVobAAAAAD TLSv1 ECDHE-RSA-AES256-SHA 984 60170 -% 990881 6442 962225 377 0 0 192.168.213.23 CH - [2015-05-28 15:29:10.795167] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7647cbf9.5232a37229a92" VjDbtqwxQzZrjHGWSAkAAABb TLSv1 ECDHE-RSA-AES256-SHA 888 13070 -% 1876736 4624 861547 4959 0 0 192.168.213.23 CH - [2015-05-28 15:29:16.742665] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3916_4&folderId=1001_9&attachmentId=2&token=58172261167292518E18 HTTP/1.1" 200 57130 "https://www.example.com/EMail/message.aspx?&mailId=3916_4&folderId=1001_9&mailPos=4" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7647cbf9.5232a37229a92" VjDbvKwxQzZrjHGWSAwAAABT TLSv1 ECDHE-RSA-AES256-SHA 984 62719 -% 1003696 4009 977142 234 0 0 192.168.81.38 CH - [2015-05-28 15:29:24.600854] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3914_53&folderId=587_1&mailPos=1" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3362b1b3.52325ec77d3b2" VjDbxKwxQzZrjHGWSA4AAABd TLSv1 ECDHE-RSA-AES256-SHA 1055 4388 -% 1270741 6815 262831 226 0 0 192.168.81.38 CH - [2015-05-28 15:29:25.994194] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 13770 "https://www.example.com/EMail/message.aspx?&mailId=3914_53&folderId=587_1&mailPos=1" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3362b1b3.52325ec77d3b2" VjDbxawxQzZrjHGWSBAAAABa TLSv1 ECDHE-RSA-AES256-SHA 534 14276 -% 1134523 2557 123697 7015 0 0 192.168.213.23 CH - [2015-05-28 15:29:38.000494] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7647cbf9.5232a37229a92" VjDb0qwxQzZrjHGVobIAAAAI TLSv1 ECDHE-RSA-AES256-SHA 888 13070 -% 1870397 3921 858565 2973 0 0 192.168.213.23 CH - [2015-05-28 15:29:37.999274] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 31874 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7647cbf9.5232a37229a92" VjDb0awxQzZrjHGWSBMAAABX TLSv1 ECDHE-RSA-AES256-SHA 872 36340 -% 1961264 3919 749446 13238 0 0 192.168.81.38 CH - [2015-05-28 15:30:10.772997] "GET /EMail/message.aspx?&mailId=3914_52&folderId=587_1&mailPos=1 HTTP/1.1" 200 11466 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3362b1b3.52325ec77d3b2" VjDb8qwxQzZrjHGWSBsAAABf TLSv1 ECDHE-RSA-AES256-SHA 879 16003 -% 1587544 4949 561743 19806 0 0 192.168.213.23 CH - [2015-05-28 15:30:13.647511] "GET /EMail/message.aspx?&mailId=3915_28&folderId=1001_9&mailPos=2 HTTP/1.1" 200 11488 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7647cbf9.5232a37229a92" VjDb9awxQzZrjHGWSB0AAABt TLSv1 ECDHE-RSA-AES256-SHA 888 15824 -% 1326363 5095 297130 23214 0 0 192.168.81.38 CH - [2015-05-28 15:30:16.030512] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3914_52&folderId=587_1&attachmentId=2&token=28640288418631404E18 HTTP/1.1" 200 55581 "https://www.example.com/EMail/message.aspx?&mailId=3914_52&folderId=587_1&mailPos=1" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3362b1b3.52325ec77d3b2" VjDb@KwxQzZrjHGWSB8AAABm TLSv1 ECDHE-RSA-AES256-SHA 598 57236 -% 785154 4157 747404 188 0 0 192.168.81.38 CH - [2015-05-28 15:30:36.050615] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3914_52&folderId=587_1&mailPos=1" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3362b1b3.52325ec77d3b2" VjDcDKwxQzZrjHGWSCMAAABy TLSv1 ECDHE-RSA-AES256-SHA 1055 4388 -% 1085609 4504 79937 593 0 0 192.168.81.38 CH - [2015-05-28 15:30:37.249712] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 12471 "https://www.example.com/EMail/message.aspx?&mailId=3914_52&folderId=587_1&mailPos=1" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3362b1b3.52325ec77d3b2" VjDcDawxQzZrjHGWSCQAAABr TLSv1 ECDHE-RSA-AES256-SHA 534 12980 -% 1134009 3916 123490 4638 0 0 192.168.81.38 CH - [2015-05-28 15:30:40.661005] "GET /EMail/message.aspx?&mailId=3914_51&folderId=587_1&mailPos=1 HTTP/1.1" 200 11466 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3362b1b3.52325ec77d3b2" VjDcEKwxQzZrjHGWSCUAAABh TLSv1 ECDHE-RSA-AES256-SHA 518 11935 -% 1365215 5234 339620 19469 0 0 192.168.213.23 CH - [2015-05-28 15:30:41.092766] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 31857 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7647cbf9.5232a37229a92" VjDcEawxQzZrjHGWSCYAAAB1 TLSv1 ECDHE-RSA-AES256-SHA 872 36324 -% 1556919 2314 339301 9668 0 0 192.168.81.38 CH - [2015-05-28 15:30:43.991185] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3914_51&folderId=587_1&attachmentId=2&token=34006303221960136E18 HTTP/1.1" 200 55255 "https://www.example.com/EMail/message.aspx?&mailId=3914_51&folderId=587_1&mailPos=1" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3362b1b3.52325ec77d3b2" VjDcE6wxQzZrjHGWSCgAAABs TLSv1 ECDHE-RSA-AES256-SHA 598 56900 -% 1038662 4166 14975 221 0 0 192.168.213.23 CH - [2015-05-28 15:30:47.044884] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3915_29&folderId=1001_9&attachmentId=2&token=60185794940581786E17 HTTP/1.1" 200 57349 "https://www.example.com/EMail/message.aspx?&mailId=3915_29&folderId=1001_9&mailPos=1" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7647cbf9.5232a37229a92" VjDcF6wxQzZrjHGWSCoAAAB@ TLSv1 ECDHE-RSA-AES256-SHA 984 63001 -% 1067437 6356 37310 234 0 0 192.168.81.38 CH - [2015-05-28 15:30:57.896785] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3914_51&folderId=587_1&mailPos=1" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3362b1b3.52325ec77d3b2" VjDcIawxQzZrjHGWSC0AAAB7 TLSv1 ECDHE-RSA-AES256-SHA 1055 4388 -% 1427346 5729 420233 210 0 0 192.168.81.38 CH - [2015-05-28 15:30:59.444109] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 11171 "https://www.example.com/EMail/message.aspx?&mailId=3914_51&folderId=587_1&mailPos=1" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3362b1b3.52325ec77d3b2" VjDcI6wxQzZrjHGWSC4AAABB TLSv1 ECDHE-RSA-AES256-SHA 534 11647 -% 1270268 3786 261665 3850 0 0 192.168.213.23 CH - [2015-05-28 15:31:12.099471] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 31849 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7647cbf9.5232a37229a92" VjDcMKwxQzZrjHGWSDEAAAB6 TLSv1 ECDHE-RSA-AES256-SHA 872 36308 -% 1524890 2310 291372 16848 0 0 192.168.213.23 CH - [2015-05-28 15:31:44.797734] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 31841 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7647cbf9.5232a37229a92" VjDcUKwxQzZrjHGVobgAAAAU TLSv1 ECDHE-RSA-AES256-SHA 872 36308 -% 1708728 2099 330798 10048 0 0 192.168.213.23 CH - [2015-05-28 15:31:44.796254] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7647cbf9.5232a37229a92" VjDcUKwxQzZrjHGWSDYAAABO TLSv1 ECDHE-RSA-AES256-SHA 888 13070 -% 1936129 3386 925189 2748 0 0 192.168.213.23 CH - [2015-05-28 15:32:39.403601] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/moveToFolder.aspx?folderName=Inbox&mailId=3916_5&mailId=3915_29&mailId=3915_28&mailId=3915_27&mailId=3916_4&mailId=3916_3&mailId=3916_2&mailId=3916_1&mailId=3915_26&mailId=3915_24&mailId=3915_23&mailId=3915_22&mailId=3915_21&mailId=3914_99&mailId=3914_98&mailId=3914_96&mailId=3914_90&mailId=3914_87&mailId=3914_84" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7647cbf9.5232a37229a92" VjDch6wxQzZrjHGWSD8AAABR TLSv1 ECDHE-RSA-AES256-SHA 1698 4177 -% 2394076 14544 331371 191 0 0 192.168.213.23 CH - [2015-05-28 15:32:41.950183] "GET /EMail/host.html HTTP/1.1" 200 199 "https://www.example.com/EMail/moveToFolder.aspx?folderName=Inbox&mailId=3916_5&mailId=3915_29&mailId=3915_28&mailId=3915_27&mailId=3916_4&mailId=3916_3&mailId=3916_2&mailId=3916_1&mailId=3915_26&mailId=3915_24&mailId=3915_23&mailId=3915_22&mailId=3915_21&mailId=3914_99&mailId=3914_98&mailId=3914_96&mailId=3914_90&mailId=3914_87&mailId=3914_84" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7647cbf9.5232a37229a92" VjDciawxQzZrjHGWSEAAAABb TLSv1 ECDHE-RSA-AES256-SHA 1128 4539 76% 894634 3067 890375 362 0 0 192.168.81.38 CH - [2015-05-28 15:32:53.883656] "GET /EMail/message.aspx?&mailId=3914_50&folderId=587_1&mailPos=1 HTTP/1.1" 200 11466 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3362b1b3.52325ec77d3b2" VjDclawxQzZrjHGWSEIAAABT TLSv1 ECDHE-RSA-AES256-SHA 879 15966 -% 1178344 4640 145126 27370 0 0 192.168.81.38 CH - [2015-05-28 15:33:25.910405] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3914_50&folderId=587_1&mailPos=1" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3362b1b3.52325ec77d3b2" VjDctawxQzZrjHGVob4AAAAZ TLSv1 ECDHE-RSA-AES256-SHA 1055 4388 -% 1206454 6272 199314 154 0 0 192.168.81.38 CH - [2015-05-28 15:33:27.230894] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 9874 "https://www.example.com/EMail/message.aspx?&mailId=3914_50&folderId=587_1&mailPos=1" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3362b1b3.52325ec77d3b2" VjDct6wxQzZrjHGVob8AAAAY TLSv1 ECDHE-RSA-AES256-SHA 534 10351 -% 1046847 2661 40150 3170 0 0 192.168.81.38 CH - [2015-05-28 15:33:30.607544] "GET /EMail/message.aspx?&mailId=3914_49&folderId=587_1&mailPos=1 HTTP/1.1" 200 11319 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3362b1b3.52325ec77d3b2" VjDcuqwxQzZrjHGVocAAAAAX TLSv1 ECDHE-RSA-AES256-SHA 518 11828 -% 1321917 3374 297883 19395 0 0 192.168.81.38 CH - [2015-05-28 15:33:33.915658] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3914_49&folderId=587_1&attachmentId=2&token=55630019096964977E18 HTTP/1.1" 200 55272 "https://www.example.com/EMail/message.aspx?&mailId=3914_49&folderId=587_1&mailPos=1" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3362b1b3.52325ec77d3b2" VjDcvawxQzZrjHGVocEAAAAa TLSv1 ECDHE-RSA-AES256-SHA 598 56990 -% 1230838 6246 202537 205 0 0 192.168.81.38 CH - [2015-05-28 15:33:57.373649] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3914_49&folderId=587_1&mailPos=1" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3362b1b3.52325ec77d3b2" VjDc1awxQzZrjHGWSE0AAABl TLSv1 ECDHE-RSA-AES256-SHA 1055 4388 -% 1207367 8799 197473 159 0 0 192.168.81.38 CH - [2015-05-28 15:33:58.699148] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8578 "https://www.example.com/EMail/message.aspx?&mailId=3914_49&folderId=587_1&mailPos=1" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3362b1b3.52325ec77d3b2" VjDc1qwxQzZrjHGWSE8AAABA TLSv1 ECDHE-RSA-AES256-SHA 534 9055 -% 975724 4476 967757 2629 0 0 192.168.81.38 CH - [2015-05-28 15:34:03.030341] "GET /EMail/message.aspx?&mailId=3915_9&folderId=587_1&mailPos=0 HTTP/1.1" 200 11174 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3362b1b3.52325ec77d3b2" VjDc26wxQzZrjHGWSFAAAABi TLSv1 ECDHE-RSA-AES256-SHA 518 11684 -% 1275282 5163 242406 26583 0 0 192.168.81.38 CH - [2015-05-28 15:34:05.920175] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3915_9&folderId=587_1&attachmentId=2&token=8958242595269737E17 HTTP/1.1" 200 55117 "https://www.example.com/EMail/message.aspx?&mailId=3915_9&folderId=587_1&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3362b1b3.52325ec77d3b2" VjDc3awxQzZrjHGWSFIAAABW TLSv1 ECDHE-RSA-AES256-SHA 582 56772 -% 1380460 6424 221032 243 0 0 192.168.1.78 CH - [2015-05-28 15:53:11.066273] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7365 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDhV6wxQzZrjHGWSO4AAABI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1075 11813 -% 939155 4074 932021 2300 0 0 192.168.1.78 CH - [2015-05-28 15:53:12.176604] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "667d0678.5232a2f926c07" VjDhWKwxQzZrjHGWSPAAAABO TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 555 2427 14% 780168 2929 775517 257 0 0 192.168.252.34 CH - [2015-05-28 15:55:27.673330] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "Microsoft-CryptoAPI/6.1" www.example.com 192.168.34.16 443 proxy-server - + "9c5804db.5232b628f3bf2" VjDh36wxQzZrjHGWSQYAAABv TLSv1 ECDHE-RSA-AES256-SHA 535 8384 -% 1137820 1241 135775 158 0 0 192.168.32.7 CH - [2015-05-28 16:58:05.711434] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "124112ca.5232c428e584a" VjDwjawxQzZrjHGWSxcAAABI TLSv1.2 ECDHE-RSA-AES128-SHA256 659 11875 -% 849899 908 844129 3975 0 0 192.168.32.7 CH - [2015-05-28 16:58:06.724274] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "124112ca.5232c428e584a" VjDwjqwxQzZrjHGWSxoAAABY TLSv1.2 ECDHE-RSA-AES128-SHA256 776 1931 -% 874855 2950 870807 207 0 0 192.168.32.7 CH - [2015-05-28 16:58:06.665552] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "124112ca.5232c428e584a" VjDwjqwxQzZrjHGWSxgAAABJ TLSv1.2 ECDHE-RSA-AES128-SHA256 454 2527 14% 939595 2378 936005 117 0 0 192.168.32.7 CH - [2015-05-28 16:58:06.723844] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "124112ca.5232c428e584a" VjDwjqwxQzZrjHGWSxkAAABO TLSv1.2 ECDHE-RSA-AES128-SHA256 744 2144 22% 1110235 3283 105727 182 0 0 192.168.32.7 CH - [2015-05-28 16:58:06.724472] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "124112ca.5232c428e584a" VjDwjqwxQzZrjHGWSxsAAABk TLSv1.2 ECDHE-RSA-AES128-SHA256 760 4660 23% 1122711 2910 117444 149 0 0 192.168.32.7 CH - [2015-05-28 16:58:06.724634] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7239 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "124112ca.5232c428e584a" VjDwjqwxQzZrjHGWSxwAAABL TLSv1.2 ECDHE-RSA-AES128-SHA256 760 8621 22% 1303563 2838 296720 164 0 0 192.168.32.7 CH - [2015-05-28 16:58:06.725426] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "124112ca.5232c428e584a" VjDwjqwxQzZrjHGWSx0AAABV TLSv1.2 ECDHE-RSA-AES128-SHA256 744 864 56% 1303749 2521 300471 98 0 0 192.168.32.7 CH - [2015-05-28 16:58:08.147548] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "124112ca.5232c428e584a" VjDwkKwxQzZrjHGWSx4AAABM TLSv1.2 ECDHE-RSA-AES128-SHA256 486 1866 -% 506460 3210 502048 229 0 0 192.168.32.7 CH - [2015-05-28 16:58:16.837628] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "124112ca.5232c428e584a" VjDwmKwxQzZrjHGWSyEAAAB8 TLSv1.2 ECDHE-RSA-AES128-SHA256 920 630 -% 1249624 4178 244737 163 0 0 192.168.32.7 CH - [2015-05-28 16:58:18.104978] "GET /EMail/main.aspx HTTP/1.1" 200 3407 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "124112ca.5232c428e584a" VjDwmqwxQzZrjHGWSyIAAABR TLSv1.2 ECDHE-RSA-AES128-SHA256 486 3882 -% 913268 3010 907399 2056 0 0 192.168.32.7 CH - [2015-05-28 16:58:18.869780] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "124112ca.5232c428e584a" VjDwmqwxQzZrjHGVoyoAAAAR TLSv1.2 ECDHE-RSA-AES128-SHA256 776 2331 -% 750177 2803 746526 217 0 0 192.168.32.7 CH - [2015-05-28 16:58:19.099617] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "124112ca.5232c428e584a" VjDwm6wxQzZrjHGWSyMAAABj TLSv1.2 ECDHE-RSA-AES128-SHA256 470 4202 -% 922657 2445 910619 8457 0 0 192.168.32.7 CH - [2015-05-28 16:58:19.149258] "GET /EMail/overview.aspx HTTP/1.1" 200 5304 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "124112ca.5232c428e584a" VjDwm6wxQzZrjHGVoywAAAAW TLSv1.2 ECDHE-RSA-AES128-SHA256 760 5963 -% 1505371 3143 499713 1841 0 0 192.168.32.7 CH - [2015-05-28 16:58:19.176241] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "124112ca.5232c428e584a" VjDwm6wxQzZrjHGVoy0AAAAV TLSv1.2 ECDHE-RSA-AES128-SHA256 792 9683 -% 2044614 3607 33237 2775 0 0 192.168.32.7 CH - [2015-05-28 16:58:20.751990] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "124112ca.5232c428e584a" VjDwnKwxQzZrjHGVoy4AAAAZ TLSv1.2 ECDHE-RSA-AES128-SHA256 502 1322 -% 845455 3013 841377 200 0 0 192.168.32.7 CH - [2015-05-28 16:58:21.303060] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "124112ca.5232c428e584a" VjDwnawxQzZrjHGVoy8AAAAY TLSv1.2 ECDHE-RSA-AES128-SHA256 534 1338 -% 455466 2927 451750 155 0 0 192.168.32.7 CH - [2015-05-28 16:58:22.590538] "GET /EMail/inbox.aspx HTTP/1.1" 200 20309 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "124112ca.5232c428e584a" VjDwnqwxQzZrjHGVozAAAAAX TLSv1.2 ECDHE-RSA-AES128-SHA256 470 21038 -% 1400379 2255 350290 6363 0 0 192.168.32.7 CH - [2015-05-28 16:58:24.100003] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "124112ca.5232c428e584a" VjDwoKwxQzZrjHGVozEAAAAa TLSv1.2 ECDHE-RSA-AES128-SHA256 486 602 -% 917087 2149 914106 205 0 0 192.168.32.7 CH - [2015-05-28 16:58:24.296479] "GET /EMail/images/msgOpenedReplied.png HTTP/1.1" 200 717 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "124112ca.5232c428e584a" VjDwoKwxQzZrjHGVozIAAAAd TLSv1.2 ECDHE-RSA-AES128-SHA256 502 1194 -% 814713 2922 810966 160 0 0 192.168.32.7 CH - [2015-05-28 16:58:24.101274] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "124112ca.5232c428e584a" VjDwoKwxQzZrjHGWSyUAAABU TLSv1.2 ECDHE-RSA-AES128-SHA256 486 602 -% 1085348 3105 81259 213 0 0 192.168.32.7 CH - [2015-05-28 16:58:24.145256] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "124112ca.5232c428e584a" VjDwoKwxQzZrjHGWSyYAAABP TLSv1.2 ECDHE-RSA-AES128-SHA256 776 2059 -% 1131095 2052 128271 169 0 0 192.168.146.78 CH - [2015-05-28 17:20:53.656496] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7350 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53host.5232ab226ce5f" VjD15awxQzZrjHGWS@sAAABa TLSv1.2 ECDHE-RSA-AES128-SHA256 799 11795 -% 993311 4147 984610 3682 0 0 192.168.146.78 CH - [2015-05-28 17:20:58.317029] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53host.5232ab226ce5f" VjD16qwxQzZrjHGWS@wAAABv TLSv1.2 ECDHE-RSA-AES128-SHA256 678 453 -% 1204721 3244 200630 223 0 0 192.168.146.78 CH - [2015-05-28 17:20:59.572092] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53host.5232ab226ce5f" VjD166wxQzZrjHGWS@4AAABx TLSv1.2 ECDHE-RSA-AES128-SHA256 534 3882 -% 948232 3002 943353 1207 0 0 192.168.146.78 CH - [2015-05-28 17:21:00.650527] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53cc24f4.5232ab226ce5f" VjD17KwxQzZrjHGWS@8AAABX TLSv1.2 ECDHE-RSA-AES128-SHA256 486 4202 -% 1036994 3209 22606 10355 0 0 192.168.146.78 CH - [2015-05-28 17:21:00.829811] "GET /EMail/overview.aspx HTTP/1.1" 200 5305 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53host.5232ab226ce5f" VjD17KwxQzZrjHGWS-AAAABl TLSv1.2 ECDHE-RSA-AES128-SHA256 772 5963 -% 1225226 3097 216573 4506 0 0 192.168.146.78 CH - [2015-05-28 17:21:00.839809] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53host.5232ab226ce5f" VjD17KwxQzZrjHGWS-EAAABz TLSv1.2 ECDHE-RSA-AES128-SHA256 804 9683 -% 1530961 3461 519482 3064 0 0 192.168.146.78 CH - [2015-05-28 17:21:05.952772] "GET /EMail/inbox.aspx HTTP/1.1" 200 51446 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53host.5232ab226ce5f" VjD18awxQzZrjHGWS-IAAABg TLSv1.2 ECDHE-RSA-AES128-SHA256 486 52609 -% 2312022 2986 800024 16759 0 0 192.168.146.78 CH - [2015-05-28 17:21:11.571728] "GET /EMail/message.aspx?&mailId=3915_34&folderId=2634_79&mailPos=1 HTTP/1.1" 200 22110 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53host.5232ab226ce5f" VjD196wxQzZrjHGWS-QAAABW TLSv1.2 ECDHE-RSA-AES128-SHA256 534 22846 -% 1551517 5267 500458 43037 0 0 192.168.146.78 CH - [2015-05-28 17:21:43.215059] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53host.5232ab226ce5f" VjD2F6wxQzZrjHGWS-wAAABm TLSv1.2 ECDHE-RSA-AES128-SHA256 804 9683 -% 1536517 3612 524524 3300 0 0 192.168.146.78 CH - [2015-05-28 17:21:43.185469] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 51513 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53host.5232ab226ce5f" VjD2F6wxQzZrjHGWS-sAAABq TLSv1.2 ECDHE-RSA-AES128-SHA256 788 52850 -% 2378138 3462 863470 19825 0 0 192.168.146.78 CH - [2015-05-28 17:21:48.450751] "GET /EMail/message.aspx?&mailId=3915_41&folderId=2634_79&mailPos=1 HTTP/1.1" 200 15990 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53host.5232ab226ce5f" VjD2HKwxQzZrjHGWS-0AAAB5 TLSv1.2 ECDHE-RSA-AES128-SHA256 550 16612 -% 1192640 3272 146131 41802 0 0 192.168.146.78 CH - [2015-05-28 17:23:23.558127] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53host.5232ab226ce5f" VjD2e6wxQzZrjHGVo5AAAAAH TLSv1.2 ECDHE-RSA-AES128-SHA256 804 9683 -% 1769120 3614 755905 4500 0 0 192.168.146.78 CH - [2015-05-28 17:23:23.531583] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 51507 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53host.5232ab226ce5f" VjD2e6wxQzZrjHGVo48AAAA@ TLSv1.2 ECDHE-RSA-AES128-SHA256 788 52850 -% 2791032 3522 114037 22780 0 0 192.168.146.78 CH - [2015-05-28 17:29:14.467255] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53host.5232ab226ce5f" VjD32qwxQzZrjHGWTD0AAABu TLSv1.2 ECDHE-RSA-AES128-SHA256 879 13371 -% 1372475 3574 359000 4799 0 0 192.168.146.78 CH - [2015-05-28 17:29:14.436882] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 51515 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53host.5232ab226ce5f" VjD32qwxQzZrjHGWTDwAAABE TLSv1.2 ECDHE-RSA-AES128-SHA256 863 56538 -% 2392800 3547 874690 26394 0 0 192.168.146.78 CH - [2015-05-28 17:29:18.620977] "GET /EMail/message.aspx?&mailId=3916_8&folderId=2634_79&mailPos=0 HTTP/1.1" 200 11540 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53host.5232ab226ce5f" VjD33qwxQzZrjHGWTD8AAABr TLSv1.2 ECDHE-RSA-AES128-SHA256 550 12148 -% 1391890 5184 361962 23552 0 0 192.168.146.78 CH - [2015-05-28 17:29:24.103021] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3916_8&folderId=2634_79&attachmentId=3&token=89276825991034624E16 HTTP/1.1" 200 145828 "https://www.example.com/EMail/message.aspx?&mailId=3916_8&folderId=2634_79&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53host.5232ab226ce5f" VjD35KwxQzZrjHGWTEEAAAB1 TLSv1.2 ECDHE-RSA-AES128-SHA256 646 152709 -% 1296472 4317 207906 459 0 0 192.168.146.78 CH - [2015-05-28 17:36:50.159166] "GET /EMail/message.aspx?&mailId=3915_42&folderId=2634_79&mailPos=0 HTTP/1.1" 200 16171 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53host.5232ab226ce5f" VjD5oqwxQzZrjHGWTIsAAAB6 TLSv1.2 ECDHE-RSA-AES128-SHA256 911 20653 -% 1441368 3003 399292 37607 0 0 192.168.146.78 CH - [2015-05-28 17:36:54.287951] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53host.5232ab226ce5f" VjD5pqwxQzZrjHGWTI0AAABD TLSv1.2 ECDHE-RSA-AES128-SHA256 804 9683 -% 1485228 2769 472550 4721 0 0 192.168.146.78 CH - [2015-05-28 17:36:53.987016] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 51500 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53host.5232ab226ce5f" VjD5pawxQzZrjHGWTIwAAABF TLSv1.2 ECDHE-RSA-AES128-SHA256 502 52657 -% 2286680 5476 776038 19953 0 0 192.168.146.78 CH - [2015-05-28 17:36:59.577357] "GET /EMail/message.aspx?&mailId=3915_42&folderId=2634_79&mailPos=1 HTTP/1.1" 200 16301 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53host.5232ab226ce5f" VjD5q6wxQzZrjHGWTI4AAAB- TLSv1.2 ECDHE-RSA-AES128-SHA256 550 16916 -% 1285240 4760 245341 33622 0 0 192.168.146.78 CH - [2015-05-28 17:37:05.145510] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53host.5232ab226ce5f" VjD5sawxQzZrjHGWTJIAAABJ TLSv1.2 ECDHE-RSA-AES128-SHA256 804 9683 -% 1657559 2536 645541 4508 0 0 192.168.146.78 CH - [2015-05-28 17:37:05.005621] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 51500 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53host.5232ab226ce5f" VjD5sawxQzZrjHGWTJEAAABY TLSv1.2 ECDHE-RSA-AES128-SHA256 502 52657 -% 2774942 2372 900173 23296 0 0 192.168.146.78 CH - [2015-05-28 17:37:26.835250] "GET /EMail/message.aspx?&mailId=3915_34&folderId=2634_79&mailPos=3 HTTP/1.1" 200 22101 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53host.5232ab226ce5f" VjD5xqwxQzZrjHGVo74AAAAy TLSv1.2 ECDHE-RSA-AES128-SHA256 836 23023 -% 1427171 4920 367864 51781 0 0 192.168.146.78 CH - [2015-05-28 17:37:40.904445] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53host.5232ab226ce5f" VjD51KwxQzZrjHGVo78AAAAz TLSv1.2 ECDHE-RSA-AES128-SHA256 804 9683 -% 1905417 4149 891302 4490 0 0 192.168.146.78 CH - [2015-05-28 17:37:40.867541] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 51499 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "53host.5232ab226ce5f" VjD51KwxQzZrjHGWTJYAAABV TLSv1.2 ECDHE-RSA-AES128-SHA256 788 52834 -% 2496883 5284 10841 20863 0 0 192.168.167.175 CH - [2015-05-28 17:56:15.616846] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "1e0313f5.5232d1292134e" VjD@L6wxQzZrjHGVpBAAAAAD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 572 8359 -% 891595 1328 889234 219 0 0 192.168.24.161 CH - [2015-05-28 18:03:27.615528] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/8.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; Tablet PC 2.0)" www.example.com 192.168.34.16 443 proxy-server - + "55308140.5232d2b798ebb" VjD-36wxQzZrjHGWTXQAAABr TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1378 4442 -% 1126374 3764 121648 245 0 0 192.168.24.161 CH - [2015-05-28 18:03:28.771207] "GET /EMail/main.aspx HTTP/1.1" 200 3412 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/8.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; Tablet PC 2.0)" www.example.com 192.168.34.16 443 proxy-server - X "55308140.5232d2b798ebb" VjD-4KwxQzZrjHGWTXUAAABh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 703 0 -% 910459 3088 904813 1851 0 0 192.168.24.161 CH - [2015-05-28 18:03:31.484324] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/8.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; Tablet PC 2.0)" www.example.com 192.168.34.16 443 proxy-server - + "55308140.5232d2b798ebb" VjD-46wxQzZrjHGWTXYAAAB1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1110 9298 -% 1946474 3167 933866 4514 0 0 192.168.24.161 CH - [2015-05-28 18:03:33.490895] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/8.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; Tablet PC 2.0)" www.example.com 192.168.34.16 443 proxy-server - + "55308140.5232d2b798ebb" VjD-5awxQzZrjHGWTXkAAABs TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 585 1260 -% 949571 3061 945572 245 0 0 192.168.24.161 CH - [2015-05-28 18:03:36.553445] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/8.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; Tablet PC 2.0)" www.example.com 192.168.34.16 443 proxy-server - + "55308140.5232d2b798ebb" VjD-6KwxQzZrjHGWTXwAAABw TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 538 527 -% 935220 3111 931186 206 0 0 192.168.24.161 CH - [2015-05-28 18:03:37.519428] "GET /EMail/images/msgOpenedReplied.png HTTP/1.1" 200 717 "https://www.example.com/EMail/inbox.aspx" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/8.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; Tablet PC 2.0)" www.example.com 192.168.34.16 443 proxy-server - + "55308140.5232d2b798ebb" VjD-6awxQzZrjHGWTX0AAABC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 545 1129 -% 658575 3206 654433 314 0 0 192.168.24.161 CH - [2015-05-28 18:03:38.431851] "GET /EMail/message.aspx?&mailId=3894_30&folderId=2846_92&mailPos=0 HTTP/1.1" 200 17326 "https://www.example.com/EMail/inbox.aspx" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/8.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; Tablet PC 2.0)" www.example.com 192.168.34.16 443 proxy-server - + "55308140.5232d2b798ebb" VjD-6qwxQzZrjHGWTX4AAABG TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 683 17836 -% 1356126 4886 319090 29769 0 0 192.168.143.247 CH - [2015-05-28 18:11:48.021417] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0" www.example.com 192.168.34.16 443 proxy-server - - "5host.5232d4a2570a9" VjEB1KwxQzZrjHGWTcwAAABV TLSv1 ECDHE-RSA-AES256-SHA 439 8352 -% 1384193 3005 379782 183 0 0 192.168.254.46 CH - [2015-05-28 18:52:12.511969] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "2d8b387b.5232ddaa83ae1" VjELTKwxQzZrjHGWTxUAAABp TLSv1.2 ECDHE-RSA-AES256-SHA384 659 8674 -% 952470 1726 949338 234 0 0 192.168.186.46 CH - [2015-05-28 19:45:45.808725] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d557ce73.5232e9a2f3f55" VjEX2awxQzZrjHGWUPgAAAB4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 999 5867 -% 876060 7686 866082 199 3 0 192.168.186.46 CH - [2015-05-28 19:45:55.134145] "GET /EMail/trash.aspx?dir=desc HTTP/1.1" 200 7343 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d557ce73.5232e9a2f3f55" VjEX46wxQzZrjHGWUPoAAABR TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1380 7903 -% 1167322 9884 153096 2566 3 0 192.168.186.46 CH - [2015-05-28 19:45:55.193336] "GET /EMail/tree.aspx?sNode-sharedTree=treeTrash HTTP/1.1" 200 7343 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d557ce73.5232e9a2f3f55" VjEX46wxQzZrjHGWUPsAAABj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1085 7903 -% 1109949 9698 96254 2689 3 0 192.168.186.46 CH - [2015-05-28 19:45:56.459555] "GET /EMail/login.aspx HTTP/1.1" 200 7343 "https://www.example.com/EMail/trash.aspx?dir=desc" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d557ce73.5232e9a2f3f55" VjEX5KwxQzZrjHGWUPwAAABU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 784 7765 -% 801804 9345 786469 3615 3 0 192.168.186.46 CH - [2015-05-28 19:45:56.585335] "GET /EMail/sent.aspx?dir=desc HTTP/1.1" 200 7343 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d557ce73.5232e9a2f3f55" VjEX5KwxQzZrjHGWUP0AAABP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1067 7903 -% 996424 7863 982896 3626 3 0 192.168.186.46 CH - [2015-05-28 19:45:56.592723] "GET /EMail/tree.aspx?sNode-sharedTree=treeSent HTTP/1.1" 200 7343 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d557ce73.5232e9a2f3f55" VjEX5KwxQzZrjHGWUP4AAABT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1084 7903 -% 992034 6220 980225 3641 3 0 192.168.186.46 CH - [2015-05-28 19:46:23.281940] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d557ce73.5232e9a2f3f55" VjEX-6wxQzZrjHGWUQMAAABc TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1526 577 -% 895161 7030 885722 243 3 0 192.168.186.46 CH - [2015-05-28 19:46:24.301310] "GET /EMail/login.aspx?username=Michaud HTTP/1.1" 200 7350 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d557ce73.5232e9a2f3f55" VjEYAKwxQzZrjHGWUQQAAABv TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 823 7772 -% 828578 10069 812897 3602 3 0 192.168.186.46 CH - [2015-05-28 19:46:48.407207] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=Michaud" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d557ce73.5232e9a2f3f55" VjEYGKwxQzZrjHGWUQcAAABl TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1307 2226 -% 749374 9743 737513 198 3 0 192.168.186.46 CH - [2015-05-28 19:46:48.537615] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=Michaud" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d557ce73.5232e9a2f3f55" VjEYGKwxQzZrjHGWUQgAAABg TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1231 577 -% 955164 10999 942219 206 3 0 192.168.186.46 CH - [2015-05-28 19:46:49.590676] "GET /EMail/login.aspx?username=michaud HTTP/1.1" 200 7350 "https://www.example.com/EMail/login.aspx?username=Michaud" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d557ce73.5232e9a2f3f55" VjEYGawxQzZrjHGWUQkAAABW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 840 7772 -% 867447 6283 855591 3656 3 0 192.168.19.17 CH - [2015-05-28 19:48:34.085787] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "72e46273.5232ea41f2da0" VjEYgqwxQzZrjHGWURwAAAB3 TLSv1 ECDHE-RSA-AES256-SHA 911 4638 56% 906055 4855 898990 206 3 0 192.168.19.17 CH - [2015-05-28 19:48:34.084882] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "72e46273.5232ea41f2da0" VjEYgqwxQzZrjHGWURsAAAB0 TLSv1 ECDHE-RSA-AES256-SHA 911 5918 22% 1055768 5134 47742 207 3 0 192.168.19.17 CH - [2015-05-28 19:48:34.082679] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "72e46273.5232ea41f2da0" VjEYgqwxQzZrjHGWURoAAAB1 TLSv1 ECDHE-RSA-AES256-SHA 943 11699 22% 1058719 5139 49498 141 3 0 192.168.19.17 CH - [2015-05-28 19:48:35.049590] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "72e46273.5232ea41f2da0" VjEYg6wxQzZrjHGWUR0AAABs TLSv1 ECDHE-RSA-AES256-SHA 582 4259 23% 878128 3247 871433 210 3 0 192.168.19.17 CH - [2015-05-28 19:48:36.009353] "GET /EMail/scripts/csshover.htc HTTP/1.1" 200 4255 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "72e46273.5232ea41f2da0" VjEYhKwxQzZrjHGWUR4AAAB@ TLSv1 ECDHE-RSA-AES256-SHA 422 4682 -% 620564 3586 615070 233 3 0 192.168.19.17 CH - [2015-05-28 19:48:36.015286] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "72e46273.5232ea41f2da0" VjEYhKwxQzZrjHGWUR8AAABw TLSv1 ECDHE-RSA-AES256-SHA 598 1802 -% 825955 2940 820925 154 3 0 192.168.19.17 CH - [2015-05-28 19:50:24.569503] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7378 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "dee74cb0.5232eaacccc9f" VjEY8KwxQzZrjHGVpaMAAAAm TLSv1 ECDHE-RSA-AES256-SHA 815 12009 -% 905965 3021 899343 2232 3 0 192.168.186.76 CH - [2015-05-29 07:16:23.369416] "GET /EMail/main.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjG5t6wxQzZrjAbUCWAAAAAR TLSv1.2 ECDHE-RSA-AES256-SHA384 919 12118 -% 697654 3029 689040 3549 3 0 192.168.186.76 CH - [2015-05-29 07:16:24.391903] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjG5uKwxQzZrjAbVQu8AAABc TLSv1.2 ECDHE-RSA-AES256-SHA384 1196 1947 -% 947259 4682 940338 235 3 0 192.168.186.76 CH - [2015-05-29 07:16:24.320318] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjG5uKwxQzZrjAbUCWEAAAAS TLSv1.2 ECDHE-RSA-AES256-SHA384 646 2015 22% 1078600 6806 47605 172 3 0 192.168.186.76 CH - [2015-05-29 07:16:24.319557] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjG5uKwxQzZrjAbVQu4AAABd TLSv1.2 ECDHE-RSA-AES256-SHA384 1031 6651 14% 1154356 6526 145269 188 3 0 192.168.186.76 CH - [2015-05-29 07:16:24.400308] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjG5uKwxQzZrjAbUCWIAAAAU TLSv1.2 ECDHE-RSA-AES256-SHA384 1196 4453 23% 1206637 5810 197322 215 3 0 192.168.186.76 CH - [2015-05-29 07:16:28.080675] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjG5vKwxQzZrjAbVQvEAAABf TLSv1.2 ECDHE-RSA-AES256-SHA384 678 1898 -% 938977 6427 930504 154 3 0 192.168.144.21 CH - [2015-05-29 07:40:05.595942] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b811fec0.5233894d3b326" VjG-RawxQzZrjAbUCb4AAAAz TLSv1.2 ECDHE-RSA-AES256-SHA384 966 11923 -% 1143755 5162 134172 3094 6 0 192.168.144.21 CH - [2015-05-29 07:40:06.854205] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b811fec0.5233894d3b326" VjG-RqwxQzZrjAbUCcAAAAA1 TLSv1.2 ECDHE-RSA-AES256-SHA384 726 2575 14% 729855 8106 719534 178 6 0 192.168.144.21 CH - [2015-05-29 07:40:06.947117] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b811fec0.5233894d3b326" VjG-RqwxQzZrjAbUCcIAAAA3 TLSv1.2 ECDHE-RSA-AES256-SHA384 1035 2208 22% 939715 9591 927405 261 6 0 192.168.144.21 CH - [2015-05-29 07:40:06.948629] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b811fec0.5233894d3b326" VjG-RqwxQzZrjAbUCcMAAAA4 TLSv1.2 ECDHE-RSA-AES256-SHA384 1035 928 56% 944822 11082 932471 104 6 0 192.168.144.21 CH - [2015-05-29 07:40:06.946764] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b811fec0.5233894d3b326" VjG-RqwxQzZrjAbVQ7wAAABy TLSv1.2 ECDHE-RSA-AES256-SHA384 1067 1979 -% 973842 6622 964677 210 6 0 192.168.144.21 CH - [2015-05-29 07:40:06.946864] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7239 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b811fec0.5233894d3b326" VjG-RqwxQzZrjAbUCcEAAAA2 TLSv1.2 ECDHE-RSA-AES256-SHA384 1051 8829 22% 1177856 6397 166602 166 6 0 192.168.144.21 CH - [2015-05-29 07:40:06.949245] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b811fec0.5233894d3b326" VjG-RqwxQzZrjAbVQ70AAABu TLSv1.2 ECDHE-RSA-AES256-SHA384 1051 4788 23% 1354480 10628 340587 158 6 0 192.168.144.21 CH - [2015-05-29 07:40:08.352528] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b811fec0.5233894d3b326" VjG-SKwxQzZrjAbVQ74AAAB0 TLSv1.2 ECDHE-RSA-AES256-SHA384 758 1898 -% 978762 10366 966558 168 6 0 192.168.144.21 CH - [2015-05-29 07:40:09.640805] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f71877.5233895116b65" VjG-SawxQzZrjAbVQ78AAABz TLSv1.2 ECDHE-RSA-AES256-SHA384 646 5699 -% 932467 612 931144 163 0 0 192.168.144.21 CH - [2015-05-29 07:40:10.213509] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "b811fec0.5233894d3b326" VjG-SqwxQzZrjAbVQ8AAAAB1 TLSv1.2 ECDHE-RSA-AES256-SHA384 758 0 -% 899148 6920 888979 316 6 0 192.168.144.21 CH - [2015-05-29 07:40:10.680636] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b811fec0.5233894d3b326" VjG-SqwxQzZrjAbUCcQAAAA5 TLSv1.2 ECDHE-RSA-AES256-SHA384 902 469 -% 913506 12834 898235 182 6 0 192.168.144.21 CH - [2015-05-29 07:40:11.606678] "GET /EMail/main.aspx HTTP/1.1" 200 3401 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b811fec0.5233894d3b326" VjG-S6wxQzZrjAbUCcUAAAA6 TLSv1.2 ECDHE-RSA-AES256-SHA384 758 3914 -% 977496 9750 965123 1131 6 0 192.168.144.21 CH - [2015-05-29 07:40:12.638664] "GET /EMail/overview.aspx HTTP/1.1" 200 5303 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b811fec0.5233894d3b326" VjG-TKwxQzZrjAbUCccAAAA8 TLSv1.2 ECDHE-RSA-AES256-SHA384 742 5818 -% 1005331 9581 0 2991 6 0 192.168.144.21 CH - [2015-05-29 07:40:12.636524] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b811fec0.5233894d3b326" VjG-TKwxQzZrjAbUCcYAAAA7 TLSv1.2 ECDHE-RSA-AES256-SHA384 742 4234 -% 1178077 9985 155724 10786 6 0 192.168.144.21 CH - [2015-05-29 07:40:12.637594] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b811fec0.5233894d3b326" VjG-TKwxQzZrjAbVQ8EAAAB2 TLSv1.2 ECDHE-RSA-AES256-SHA384 774 9666 -% 1620033 10443 601860 4049 6 0 192.168.144.21 CH - [2015-05-29 07:40:13.675519] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b811fec0.5233894d3b326" VjG-TawxQzZrjAbUCcgAAAA9 TLSv1.2 ECDHE-RSA-AES256-SHA384 774 1354 -% 918639 6000 910851 157 6 0 192.168.144.21 CH - [2015-05-29 07:40:14.317692] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b811fec0.5233894d3b326" VjG-TqwxQzZrjAbVQ8IAAAB3 TLSv1.2 ECDHE-RSA-AES256-SHA384 806 1370 -% 981082 9647 969085 197 6 0 192.168.144.21 CH - [2015-05-29 07:40:19.301600] "GET /EMail/inbox.aspx HTTP/1.1" 200 8592 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b811fec0.5233894d3b326" VjG-U6wxQzZrjAbVQ8UAAAB6 TLSv1.2 ECDHE-RSA-AES256-SHA384 742 9199 -% 1334514 10180 319606 2719 6 0 192.168.144.21 CH - [2015-05-29 07:40:20.738207] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b811fec0.5233894d3b326" VjG-VKwxQzZrjAbVQ8gAAAB9 TLSv1.2 ECDHE-RSA-AES256-SHA384 1067 2107 -% 815368 9981 803071 219 6 0 192.168.144.21 CH - [2015-05-29 07:40:20.738175] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b811fec0.5233894d3b326" VjG-VKwxQzZrjAbVQ8cAAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 1067 827 -% 885654 6406 876184 259 6 0 192.168.144.21 CH - [2015-05-29 07:40:20.692001] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b811fec0.5233894d3b326" VjG-VKwxQzZrjAbVQ8YAAAB8 TLSv1.2 ECDHE-RSA-AES256-SHA384 758 634 -% 1140233 8825 129167 271 6 0 192.168.144.21 CH - [2015-05-29 07:40:22.381228] "GET /EMail/message.aspx?&mailId=3917_1&folderId=1094_6&mailPos=0 HTTP/1.1" 200 13006 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b811fec0.5233894d3b326" VjG-VqwxQzZrjAbVQ8kAAAB@ TLSv1.2 ECDHE-RSA-AES256-SHA384 774 13684 -% 1498291 11433 480652 4096 6 0 192.168.144.21 CH - [2015-05-29 07:40:26.024631] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3917_1&folderId=1094_6&attachmentId=2&token=39211546238830305E18 HTTP/1.1" 200 10880 "https://www.example.com/EMail/message.aspx?&mailId=3917_1&folderId=1094_6&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b811fec0.5233894d3b326" VjG-WqwxQzZrjAbVQ8sAAABB TLSv1.2 ECDHE-RSA-AES256-SHA384 886 11896 -% 984337 12761 966224 172 6 0 192.168.144.21 CH - [2015-05-29 07:40:33.843232] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b811fec0.5233894d3b326" VjG-YawxQzZrjAbVQ8wAAABC TLSv1.2 ECDHE-RSA-AES256-SHA384 1067 2379 -% 965223 7848 954993 202 6 0 192.168.144.21 CH - [2015-05-29 07:40:34.407313] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b811fec0.5233894d3b326" VjG-YqwxQzZrjAbUCcoAAAA- TLSv1.2 ECDHE-RSA-AES256-SHA384 1067 646 -% 921727 9110 910494 214 6 0 192.168.144.21 CH - [2015-05-29 07:40:35.342195] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b811fec0.5233894d3b326" VjG-Y6wxQzZrjAbUCcsAAAAA TLSv1.2 ECDHE-RSA-AES256-SHA384 742 815 75% 1077405 6525 68304 393 6 0 192.168.144.21 CH - [2015-05-29 07:40:36.531330] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "f71877.5233895116b65" VjG-ZKwxQzZrjAbUCc0AAAAD TLSv1.2 ECDHE-RSA-AES256-SHA384 619 1835 -% 2723 1762 47 147 0 0 192.168.144.21 CH - [2015-05-29 07:40:36.476904] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b811fec0.5233894d3b326" VjG-ZKwxQzZrjAbUCcwAAAAC TLSv1.2 ECDHE-RSA-AES256-SHA384 710 373 -% 647184 11108 633740 186 6 0 192.168.144.21 CH - [2015-05-29 07:40:37.135590] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b811fec0.5233894d3b326" VjG-ZawxQzZrjAbUCc4AAAAB TLSv1.2 ECDHE-RSA-AES256-SHA384 694 7866 -% 723537 9730 708425 3391 6 0 192.168.144.21 CH - [2015-05-29 07:40:37.896733] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b811fec0.5233894d3b326" VjG-ZawxQzZrjAbUCc8AAAAE TLSv1.2 ECDHE-RSA-AES256-SHA384 822 2575 14% 695706 9768 683164 211 6 0 192.168.144.21 CH - [2015-05-29 07:40:37.998976] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b811fec0.5233894d3b326" VjG-ZawxQzZrjAbVQ9MAAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 1163 454 -% 878951 12168 864421 188 6 0 192.168.144.21 CH - [2015-05-29 07:40:37.897376] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b811fec0.5233894d3b326" VjG-ZawxQzZrjAbVQ88AAABF TLSv1.2 ECDHE-RSA-AES256-SHA384 806 2015 22% 1005524 9542 0 158 6 0 192.168.144.21 CH - [2015-05-29 07:40:37.998515] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b811fec0.5233894d3b326" VjG-ZawxQzZrjAbVQ9IAAABH TLSv1.2 ECDHE-RSA-AES256-SHA384 1147 4485 23% 1117215 9971 102157 290 6 0 192.168.144.21 CH - [2015-05-29 07:40:37.997715] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b811fec0.5233894d3b326" VjG-ZawxQzZrjAbVQ9AAAABI TLSv1.2 ECDHE-RSA-AES256-SHA384 1115 928 56% 1122236 15275 105136 95 6 0 192.168.144.21 CH - [2015-05-29 07:40:37.997898] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b811fec0.5233894d3b326" VjG-ZawxQzZrjAbVQ9EAAABG TLSv1.2 ECDHE-RSA-AES256-SHA384 1147 8781 22% 1177402 15175 156812 198 6 0 192.168.144.21 CH - [2015-05-29 07:40:39.215348] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b811fec0.5233894d3b326" VjG-Z6wxQzZrjAbVQ9QAAABK TLSv1.2 ECDHE-RSA-AES256-SHA384 854 261 -% 887808 6011 879444 204 6 0 192.168.245.238 CH - [2015-05-29 07:49:48.644548] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7368 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "986e164a.52338b79450c4" VjHBjKwxQzZrjAbUCgIAAAA4 TLSv1.2 ECDHE-RSA-AES256-SHA384 813 11939 -% 1057498 4303 49833 2525 0 0 192.168.245.238 CH - [2015-05-29 07:49:49.853001] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "986e164a.52338b79450c4" VjHBjawxQzZrjAbVRBEAAABG TLSv1.2 ECDHE-RSA-AES256-SHA384 973 5779 -% 734702 3196 730748 152 0 0 192.168.245.238 CH - [2015-05-29 07:49:49.815304] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "986e164a.52338b79450c4" VjHBjawxQzZrjAbUCgMAAAA2 TLSv1.2 ECDHE-RSA-AES256-SHA384 614 1786 -% 1022009 4890 16187 194 0 0 192.168.245.238 CH - [2015-05-29 07:49:54.789389] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "986e164a.52338b79450c4" VjHBkqwxQzZrjAbUCgYAAAA8 TLSv1.2 ECDHE-RSA-AES256-SHA384 758 469 -% 995475 7454 987016 230 0 0 192.168.245.238 CH - [2015-05-29 07:49:55.807706] "GET /EMail/main.aspx HTTP/1.1" 200 3400 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "986e164a.52338b79450c4" VjHBk6wxQzZrjAbUCgcAAAA7 TLSv1.2 ECDHE-RSA-AES256-SHA384 614 3914 -% 825371 4913 818785 1146 0 0 192.168.245.238 CH - [2015-05-29 07:49:56.689989] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "986e164a.52338b79450c4" VjHBlKwxQzZrjAbUCggAAAA9 TLSv1.2 ECDHE-RSA-AES256-SHA384 566 4234 -% 755014 5239 739743 9075 0 0 192.168.245.238 CH - [2015-05-29 07:49:56.693918] "GET /EMail/overview.aspx HTTP/1.1" 200 5297 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "986e164a.52338b79450c4" VjHBlKwxQzZrjAbVRBMAAABJ TLSv1.2 ECDHE-RSA-AES256-SHA384 882 6011 -% 1351086 5842 342704 1875 0 0 192.168.245.238 CH - [2015-05-29 07:49:58.085220] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "986e164a.52338b79450c4" VjHBlqwxQzZrjAbVRBQAAABM TLSv1.2 ECDHE-RSA-AES256-SHA384 598 1354 -% 1006367 3176 2064 337 0 0 192.168.245.238 CH - [2015-05-29 07:49:56.692659] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "986e164a.52338b79450c4" VjHBlKwxQzZrjAbVRBIAAABK TLSv1.2 ECDHE-RSA-AES256-SHA384 898 9859 -% 2428688 9889 408514 4495 0 0 192.168.245.238 CH - [2015-05-29 07:49:59.160856] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "986e164a.52338b79450c4" VjHBl6wxQzZrjAbVRBUAAABL TLSv1.2 ECDHE-RSA-AES256-SHA384 630 1370 -% 966337 5092 960382 157 0 0 192.168.245.238 CH - [2015-05-29 07:49:59.535667] "GET /EMail/inbox.aspx HTTP/1.1" 200 18991 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "986e164a.52338b79450c4" VjHBl6wxQzZrjAbVRBYAAABN TLSv1.2 ECDHE-RSA-AES256-SHA384 566 19822 -% 1496237 5046 449084 7272 0 0 192.168.245.238 CH - [2015-05-29 07:50:01.075990] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "986e164a.52338b79450c4" VjHBmawxQzZrjAbVRBcAAABO TLSv1.2 ECDHE-RSA-AES256-SHA384 582 634 -% 979858 5069 973741 199 0 0 192.168.245.238 CH - [2015-05-29 07:50:01.073851] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "986e164a.52338b79450c4" VjHBmawxQzZrjAbUCgkAAAA@ TLSv1.2 ECDHE-RSA-AES256-SHA384 582 634 -% 1030253 6885 22250 268 0 0 192.168.245.238 CH - [2015-05-29 07:50:01.119539] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "986e164a.52338b79450c4" VjHBmawxQzZrjAbVRBkAAABQ TLSv1.2 ECDHE-RSA-AES256-SHA384 898 2171 -% 985431 3963 980799 134 0 0 192.168.245.238 CH - [2015-05-29 07:50:01.091494] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "986e164a.52338b79450c4" VjHBmawxQzZrjAbVRBgAAABP TLSv1.2 ECDHE-RSA-AES256-SHA384 582 1914 -% 1097855 4788 92378 149 0 0 192.168.245.238 CH - [2015-05-29 07:50:05.408845] "GET /EMail/message.aspx?&mailId=3916_11&folderId=1230_48&mailPos=0 HTTP/1.1" 200 13172 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "986e164a.52338b79450c4" VjHBnawxQzZrjAbVRBwAAABW TLSv1.2 ECDHE-RSA-AES256-SHA384 614 13844 -% 1481132 7079 468195 4387 0 0 192.168.245.238 CH - [2015-05-29 07:50:09.453828] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3916_11&folderId=1230_48&attachmentId=2&token=50164265254401495E18 HTTP/1.1" 200 1414 "https://www.example.com/EMail/message.aspx?&mailId=3916_11&folderId=1230_48&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "986e164a.52338b79450c4" VjHBoawxQzZrjAbVRB0AAABV TLSv1.2 ECDHE-RSA-AES256-SHA384 710 2084 -% 1420752 11045 229014 183 0 0 192.168.245.238 CH - [2015-05-29 07:50:29.895627] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/message.aspx?&mailId=3916_11&folderId=1230_48&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "986e164a.52338b79450c4" VjHBtawxQzZrjAbVRCAAAABZ TLSv1.2 ECDHE-RSA-AES256-SHA384 946 2379 -% 944942 5062 938679 284 0 0 192.168.245.238 CH - [2015-05-29 07:50:30.613039] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "986e164a.52338b79450c4" VjHBtqwxQzZrjAbVRCEAAABa TLSv1.2 ECDHE-RSA-AES256-SHA384 898 646 -% 969675 4631 964138 275 0 0 192.168.245.238 CH - [2015-05-29 07:50:31.636928] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "986e164a.52338b79450c4" VjHBt6wxQzZrjAbVRCIAAABb TLSv1.2 ECDHE-RSA-AES256-SHA384 534 373 -% 951043 6097 943984 226 0 0 192.168.245.238 CH - [2015-05-29 07:50:32.610832] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "986e164a.52338b79450c4" VjHBuKwxQzZrjAbVRCQAAABi TLSv1.2 ECDHE-RSA-AES256-SHA384 518 7866 -% 711406 5065 702689 2393 0 0 192.168.245.238 CH - [2015-05-29 07:50:33.371555] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "986e164a.52338b79450c4" VjHBuawxQzZrjAbVRCUAAABj TLSv1.2 ECDHE-RSA-AES256-SHA384 630 261 -% 755019 3577 750471 265 0 0 192.168.245.238 CH - [2015-05-29 07:50:33.376223] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "986e164a.52338b79450c4" VjHBuawxQzZrjAbVRCgAAABe TLSv1.2 ECDHE-RSA-AES256-SHA384 978 454 -% 838299 3581 833932 157 0 0 192.168.245.238 CH - [2015-05-29 07:50:33.373979] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "986e164a.52338b79450c4" VjHBuawxQzZrjAbVRCYAAABh TLSv1.2 ECDHE-RSA-AES256-SHA384 630 261 -% 999526 5117 993730 148 0 0 192.168.245.238 CH - [2015-05-29 07:50:33.375100] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "986e164a.52338b79450c4" VjHBuawxQzZrjAbVRCcAAABd TLSv1.2 ECDHE-RSA-AES256-SHA384 946 454 -% 1020733 5334 14591 131 0 0 192.168.245.238 CH - [2015-05-29 07:50:33.377223] "GET /EMail/scripts/variables_de.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "986e164a.52338b79450c4" VjHBuawxQzZrjAbVRCkAAABc TLSv1.2 ECDHE-RSA-AES256-SHA384 978 454 -% 1191610 4734 186046 181 0 0 192.168.245.238 CH - [2015-05-29 07:50:33.378295] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "986e164a.52338b79450c4" VjHBuawxQzZrjAbVRCoAAABf TLSv1.2 ECDHE-RSA-AES256-SHA384 978 454 -% 1287078 5711 280769 148 0 0 192.168.245.238 CH - [2015-05-29 07:50:34.608304] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "986e164a.52338b79450c4" VjHBuqwxQzZrjAbVRCsAAABk TLSv1.2 ECDHE-RSA-AES256-SHA384 678 261 -% 707025 5108 700746 431 0 0 192.168.215.68 CH - [2015-05-29 08:14:02.820128] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "82e85b9c.523390e414620" VjHHOqwxQzZrjAbUCmoAAAAj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 572 8359 -% 1127003 1441 124394 201 0 0 192.168.186.76 CH - [2015-05-29 08:16:09.588568] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "f139da27.52338400e3ec8" VjHHuawxQzZrjAbVRP4AAAB@ TLSv1.2 ECDHE-RSA-AES256-SHA384 1271 4076 -% 1078980 4081 72721 244 3 0 192.168.186.76 CH - [2015-05-29 08:16:10.335875] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHHuqwxQzZrjAbVRP8AAAB- TLSv1.2 ECDHE-RSA-AES256-SHA384 1298 630 -% 945723 8837 934059 233 3 0 192.168.186.76 CH - [2015-05-29 08:16:11.316143] "GET /EMail/main.aspx HTTP/1.1" 200 3391 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHHu6wxQzZrjAbVRQAAAABB TLSv1.2 ECDHE-RSA-AES256-SHA384 678 3898 -% 908205 6436 895625 3341 3 0 192.168.186.76 CH - [2015-05-29 08:16:12.285775] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHHvKwxQzZrjAbVRQIAAABD TLSv1.2 ECDHE-RSA-AES256-SHA384 662 4234 -% 1039348 6553 24211 6838 3 0 192.168.186.76 CH - [2015-05-29 08:16:30.329933] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHHzqwxQzZrjAbVRQYAAABH TLSv1.2 ECDHE-RSA-AES256-SHA384 1271 4710 -% 1038126 4605 31810 184 3 0 192.168.186.76 CH - [2015-05-29 08:16:30.453542] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHHzqwxQzZrjAbVRQcAAABI TLSv1.2 ECDHE-RSA-AES256-SHA384 1196 2075 -% 946897 4042 941121 173 3 0 192.168.186.76 CH - [2015-05-29 08:16:32.242257] "GET /EMail/message.aspx?&mailId=3917_6&folderId=947_65&mailPos=0 HTTP/1.1" 200 17192 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHH0KwxQzZrjAbVRQgAAABG TLSv1.2 ECDHE-RSA-AES256-SHA384 710 17945 -% 1652218 8616 606017 31140 3 0 192.168.186.76 CH - [2015-05-29 08:16:35.988484] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3917_6&folderId=947_65&attachmentId=3&token=190831160408491392E18 HTTP/1.1" 200 117222 "https://www.example.com/EMail/message.aspx?&mailId=3917_6&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHH06wxQzZrjAbVRQkAAABJ TLSv1.2 ECDHE-RSA-AES256-SHA384 806 122907 -% 1605361 8167 247378 175 3 0 192.168.186.76 CH - [2015-05-29 08:16:55.385267] "GET /EMail/scripts/tinymce/themes/modern/theme.min.js HTTP/1.1" 200 2651 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3917_6&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHH56wxQzZrjAbVRQ4AAABQ TLSv1.2 ECDHE-RSA-AES256-SHA384 1351 7440 41% 929528 5318 921697 212 3 0 192.168.186.76 CH - [2015-05-29 08:16:55.387316] "GET /EMail/scripts/tinymce/plugins/print/plugin.min.js HTTP/1.1" 200 182 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3917_6&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHH56wxQzZrjAbVRQ8AAABO TLSv1.2 ECDHE-RSA-AES256-SHA384 1351 4891 55% 1138844 4405 132837 159 3 0 192.168.186.76 CH - [2015-05-29 08:16:55.900066] "GET /EMail/scripts/tinymce/plugins/searchreplace/plugin.min.js HTTP/1.1" 200 2586 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3917_6&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHH56wxQzZrjAbVRRAAAABP TLSv1.2 ECDHE-RSA-AES256-SHA384 1276 3461 40% 1082476 4044 76541 156 3 0 192.168.186.76 CH - [2015-05-29 08:16:56.329751] "GET /EMail/scripts/tinymce/plugins/charmap/plugin.min.js HTTP/1.1" 200 2698 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3917_6&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHH6KwxQzZrjAbVRREAAABR TLSv1.2 ECDHE-RSA-AES256-SHA384 758 3412 38% 926221 6673 916808 192 3 0 192.168.186.76 CH - [2015-05-29 08:16:56.538489] "GET /EMail/scripts/tinymce/plugins/visualblocks/plugin.min.js HTTP/1.1" 200 525 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3917_6&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHH6KwxQzZrjAbVRRIAAABS TLSv1.2 ECDHE-RSA-AES256-SHA384 758 1167 43% 841367 4089 835311 207 3 0 192.168.186.76 CH - [2015-05-29 08:16:56.997689] "GET /EMail/scripts/tinymce/plugins/visualchars/plugin.min.js HTTP/1.1" 200 608 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3917_6&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHH6KwxQzZrjAbVRRMAAABT TLSv1.2 ECDHE-RSA-AES256-SHA384 758 1247 54% 566006 6560 556095 358 3 0 192.168.186.76 CH - [2015-05-29 08:16:57.270678] "GET /EMail/scripts/tinymce/plugins/table/plugin.min.js HTTP/1.1" 200 9181 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3917_6&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHH6awxQzZrjAbVRRUAAABW TLSv1.2 ECDHE-RSA-AES256-SHA384 758 10657 32% 529516 6283 518860 186 3 0 192.168.186.76 CH - [2015-05-29 08:16:58.064178] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5873 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3917_6&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHH6qwxQzZrjAbVRRYAAABV TLSv1.2 ECDHE-RSA-AES256-SHA384 710 9650 -% 805554 5763 0 0 3 0 192.168.186.76 CH - [2015-05-29 08:18:11.899699] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHIM6wxQzZrjAbUCnkAAAA1 TLSv1.2 ECDHE-RSA-AES256-SHA384 1079 13742 -% 1650016 11818 606633 4477 3 0 192.168.186.76 CH - [2015-05-29 08:46:40.360799] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHO4KwxQzZrjAbUCuUAAAAo TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1635711 4914 620346 3452 3 0 192.168.186.76 CH - [2015-05-29 08:46:42.872682] "GET /EMail/message.aspx?&mailId=3917_7&folderId=947_65&mailPos=0 HTTP/1.1" 200 16531 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHO4qwxQzZrjAbUCuYAAAAp TLSv1.2 ECDHE-RSA-AES256-SHA384 710 17289 -% 1587296 5319 542945 35818 3 0 192.168.186.76 CH - [2015-05-29 08:49:05.170524] "GET /EMail/newMessage.aspx?action=reply&mailId=3917_7&folderId=947_65&showPics=false HTTP/1.1" 200 24984 "https://www.example.com/EMail/message.aspx?&mailId=3917_7&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHPcawxQzZrjAbVRiUAAABt TLSv1.2 ECDHE-RSA-AES256-SHA384 1367 29967 -% 1167697 8518 99064 54954 6 3 192.168.186.76 CH - [2015-05-29 08:49:06.418568] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3917_7&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHPcqwxQzZrjAbVRiYAAABs TLSv1.2 ECDHE-RSA-AES256-SHA384 1319 7526 -% 846954 5201 835384 5000 3 0 192.168.186.76 CH - [2015-05-29 08:49:06.501808] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5873 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3917_7&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHPcqwxQzZrjAbVRicAAABv TLSv1.2 ECDHE-RSA-AES256-SHA384 710 9650 -% 947669 6609 0 0 3 0 192.168.186.76 CH - [2015-05-29 08:49:39.791605] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHPk6wxQzZrjAbVRisAAABz TLSv1.2 ECDHE-RSA-AES256-SHA384 1261 13742 -% 2021557 7342 5311 2785 3 0 192.168.186.76 CH - [2015-05-29 08:49:43.335891] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHPl6wxQzZrjAbVRiwAAAB1 TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1175269 13581 159152 202 3 0 192.168.186.76 CH - [2015-05-29 08:49:44.522751] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7290 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHPmKwxQzZrjAbVRi4AAAB3 TLSv1.2 ECDHE-RSA-AES256-SHA384 726 7802 -% 1071499 7578 56893 4667 3 0 192.168.212.2 CH - [2015-05-29 08:50:44.215764] "GET /EMail/main.aspx HTTP/1.1" 200 3415 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "766d6dff.523398f8a4de8" VjHP1KwxQzZrjAbVRjgAAABD TLSv1 ECDHE-RSA-AES256-SHA 872 7670 -% 855398 2146 850721 1880 0 0 192.168.212.2 CH - [2015-05-29 08:50:45.316395] "GET /EMail/overview.aspx HTTP/1.1" 200 6445 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "766d6dff.523398f8a4de8" VjHP1awxQzZrjAbVRjoAAABF TLSv1 ECDHE-RSA-AES256-SHA 840 10726 -% 1340827 2909 334528 2631 0 0 192.168.212.2 CH - [2015-05-29 08:50:46.915778] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "766d6dff.523398f8a4de8" VjHP1qwxQzZrjAbUCwAAAAAE TLSv1 ECDHE-RSA-AES256-SHA 952 4049 -% 861382 4435 856107 240 0 0 192.168.212.2 CH - [2015-05-29 08:50:45.316475] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "766d6dff.523398f8a4de8" VjHP1awxQzZrjAbVRjsAAABH TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 2492035 2889 483768 2798 0 0 192.168.212.2 CH - [2015-05-29 08:50:53.218459] "GET /EMail/images/attach.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "766d6dff.523398f8a4de8" VjHP3awxQzZrjAbVRj0AAABJ TLSv1 ECDHE-RSA-AES256-SHA 952 4049 -% 793769 3189 789643 214 0 0 192.168.212.2 CH - [2015-05-29 08:50:53.218606] "GET /EMail/images/Highost.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "766d6dff.523398f8a4de8" VjHP3awxQzZrjAbVRj4AAABK TLSv1 ECDHE-RSA-AES256-SHA 952 4049 -% 1031468 3160 27443 224 0 0 192.168.212.2 CH - [2015-05-29 08:50:55.511707] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7290 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "766d6dff.523398f8a4de8" VjHP36wxQzZrjAbUCwEAAAAH TLSv1 ECDHE-RSA-AES256-SHA 840 11558 -% 1142604 2303 136861 2784 0 0 192.168.212.2 CH - [2015-05-29 08:51:01.909739] "GET /EMail/index.html HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "766d6dff.523398f8a4de8" VjHP5awxQzZrjAbUCwMAAAAJ TLSv1 ECDHE-RSA-AES256-SHA 920 4049 -% 751645 2778 748103 151 0 0 192.168.213.21 CH - [2015-05-29 08:51:02.929527] "GET /favicon.ico HTTP/1.1" 304 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "155093cf.523398fca09a3" VjHP5qwxQzZrjAbVxQzZrjBO TLSv1 ECDHE-RSA-AES256-SHA 776 4033 -% 2083 1409 56 112 0 0 192.168.212.2 CH - [2015-05-29 08:51:03.911039] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "766d6dff.523398f8a4de8" VjHP56wxQzZrjAbUCwQAAAAL TLSv1 ECDHE-RSA-AES256-SHA 776 11622 -% 916004 2080 907122 6260 0 0 192.168.212.2 CH - [2015-05-29 08:51:05.060736] "GET /EMail/scripts/variables_de.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "766d6dff.523398f8a4de8" VjHP6awxQzZrjAbVxQzZrjBS TLSv1 ECDHE-RSA-AES256-SHA 936 4049 -% 956635 2769 953206 154 0 0 192.168.212.2 CH - [2015-05-29 08:51:05.061578] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "766d6dff.523398f8a4de8" VjHP6awxQzZrjAbVxQzZrjBU TLSv1 ECDHE-RSA-AES256-SHA 904 4049 -% 997971 2383 994865 193 0 0 192.168.212.2 CH - [2015-05-29 08:51:05.110743] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "766d6dff.523398f8a4de8" VjHP6awxQzZrjAbVxQzZrjBR TLSv1 ECDHE-RSA-AES256-SHA 920 4049 -% 1059284 3588 54924 156 0 0 192.168.186.76 CH - [2015-05-29 08:52:22.420620] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8389 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHQNqwxQzZrjAbUCwsAAAAU TLSv1.2 ECDHE-RSA-AES256-SHA384 1180 9152 -% 1443120 6506 430238 4230 3 0 192.168.186.76 CH - [2015-05-29 08:52:36.434668] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5873 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3918_3&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHQRKwxQzZrjAbVxQzZrjBc TLSv1.2 ECDHE-RSA-AES256-SHA384 1303 13726 -% 867484 4086 0 0 3 0 192.168.186.76 CH - [2015-05-29 08:55:00.228532] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3918_3&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHQ1KwxQzZrjAbUCxsAAAAk TLSv1.2 ECDHE-RSA-AES256-SHA384 8471 630 -% 1998148 451038 526366 456 86 0 192.168.186.76 CH - [2015-05-29 08:55:02.238665] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3918_3&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHQ1qwxQzZrjAbUCxwAAAAj TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 1062954 6415 45228 9473 3 0 192.168.186.76 CH - [2015-05-29 08:55:04.704629] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8388 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHQ2KwxQzZrjAbUCx4AAAAl TLSv1.2 ECDHE-RSA-AES256-SHA384 662 8991 -% 1385020 7564 370285 4958 3 0 192.168.90.199 CH - [2015-05-29 08:58:31.721689] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7371 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "286bb2c6.52339ad557ad9" VjHRp6wxQzZrjAbVRoAAAABV TLSv1 ECDHE-RSA-AES256-SHA 622 11793 -% 767892 1277 761178 4879 0 0 192.168.90.199 CH - [2015-05-29 08:58:32.520970] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "286bb2c6.52339ad557ad9" VjHRqKwxQzZrjAbVRoEAAABX TLSv1 ECDHE-RSA-AES256-SHA 491 2431 14% 1086525 3052 81656 212 0 0 192.168.90.199 CH - [2015-05-29 08:58:32.559216] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "286bb2c6.52339ad557ad9" VjHRqKwxQzZrjAbUCykAAAAx TLSv1 ECDHE-RSA-AES256-SHA 707 752 56% 1147916 2293 144748 160 0 0 192.168.90.199 CH - [2015-05-29 08:58:32.552315] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "286bb2c6.52339ad557ad9" VjHRqKwxQzZrjAbVRoIAAABY TLSv1 ECDHE-RSA-AES256-SHA 707 2032 22% 1200962 1874 197877 262 0 0 192.168.90.199 CH - [2015-05-29 08:58:32.557194] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7239 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "286bb2c6.52339ad557ad9" VjHRqKwxQzZrjAbVRoMAAABZ TLSv1 ECDHE-RSA-AES256-SHA 723 8221 22% 1204379 1898 198960 145 0 0 192.168.90.199 CH - [2015-05-29 08:58:32.565229] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "286bb2c6.52339ad557ad9" VjHRqKwxQzZrjAbUCyoAAAAy TLSv1 ECDHE-RSA-AES256-SHA 739 1835 -% 1440407 1786 437635 283 0 0 192.168.90.199 CH - [2015-05-29 08:58:32.562376] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "286bb2c6.52339ad557ad9" VjHRqKwxQzZrjAbVRoQAAABa TLSv1 ECDHE-RSA-AES256-SHA 739 4245 23% 1446498 2217 441973 368 0 0 192.168.90.199 CH - [2015-05-29 08:58:34.033170] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "286bb2c6.52339ad557ad9" VjHRqqwxQzZrjAbVRoUAAABg TLSv1 ECDHE-RSA-AES256-SHA 523 1802 -% 928047 3021 924218 187 0 0 192.168.90.199 CH - [2015-05-29 08:58:35.071483] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "286bb2c6.52339ad557ad9" VjHRq6wxQzZrjAbUCysAAAA0 TLSv1 ECDHE-RSA-AES256-SHA 523 2090 -% 835511 3248 831458 156 0 0 192.168.90.199 CH - [2015-05-29 08:58:34.977882] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "286bb2c6.52339ad557ad9" VjHRqqwxQzZrjAbVRoYAAABb TLSv1 ECDHE-RSA-AES256-SHA 379 1578 -% 977476 4208 972499 156 0 0 192.168.90.199 CH - [2015-05-29 08:58:38.900627] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "286bb2c6.52339ad557ad9" VjHRrqwxQzZrjAbVRocAAABi TLSv1 ECDHE-RSA-AES256-SHA 667 421 -% 1019902 3611 14984 396 0 0 192.168.90.199 CH - [2015-05-29 08:58:39.950469] "GET /EMail/main.aspx HTTP/1.1" 200 3403 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "286bb2c6.52339ad557ad9" VjHRr6wxQzZrjAbVRogAAABj TLSv1 ECDHE-RSA-AES256-SHA 523 3818 -% 922312 2080 918203 1434 0 0 192.168.90.199 CH - [2015-05-29 08:58:40.913372] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "286bb2c6.52339ad557ad9" VjHRsKwxQzZrjAbVRokAAABe TLSv1 ECDHE-RSA-AES256-SHA 475 4154 -% 859397 2351 848133 8188 0 0 192.168.90.199 CH - [2015-05-29 08:58:40.969904] "GET /EMail/overview.aspx HTTP/1.1" 200 5302 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "286bb2c6.52339ad557ad9" VjHRsKwxQzZrjAbVRosAAABd TLSv1 ECDHE-RSA-AES256-SHA 691 5883 -% 1428271 2068 422394 3138 0 0 192.168.90.199 CH - [2015-05-29 08:58:40.966640] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "286bb2c6.52339ad557ad9" VjHRsKwxQzZrjAbVRooAAABh TLSv1 ECDHE-RSA-AES256-SHA 723 9379 -% 2132411 2486 120195 4532 0 0 192.168.90.199 CH - [2015-05-29 08:58:42.421502] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "286bb2c6.52339ad557ad9" VjHRsqwxQzZrjAbVRo0AAABf TLSv1 ECDHE-RSA-AES256-SHA 507 1258 -% 869335 3300 865165 204 0 0 192.168.90.199 CH - [2015-05-29 08:58:43.125167] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "286bb2c6.52339ad557ad9" VjHRs6wxQzZrjAbVRo4AAABk TLSv1 ECDHE-RSA-AES256-SHA 539 1274 -% 885763 2180 882752 157 0 0 192.168.90.199 CH - [2015-05-29 08:58:44.703923] "GET /EMail/inbox.aspx HTTP/1.1" 200 10126 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "286bb2c6.52339ad557ad9" VjHRtKwxQzZrjAbVRo8AAABl TLSv1 ECDHE-RSA-AES256-SHA 475 10607 -% 1205157 3085 195679 5356 0 0 192.168.90.199 CH - [2015-05-29 08:58:45.936856] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "286bb2c6.52339ad557ad9" VjHRtawxQzZrjAbVRpAAAABm TLSv1 ECDHE-RSA-AES256-SHA 491 554 -% 751670 3074 747471 214 0 0 192.168.90.199 CH - [2015-05-29 08:58:45.937803] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "286bb2c6.52339ad557ad9" VjHRtawxQzZrjAbVRpEAAABn TLSv1 ECDHE-RSA-AES256-SHA 491 538 -% 785711 3029 781841 202 0 0 192.168.90.199 CH - [2015-05-29 08:58:45.939960] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "286bb2c6.52339ad557ad9" VjHRtawxQzZrjAbVRpIAAABo TLSv1 ECDHE-RSA-AES256-SHA 491 1818 -% 1126465 2732 122903 161 0 0 192.168.90.199 CH - [2015-05-29 08:58:45.979463] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "286bb2c6.52339ad557ad9" VjHRtawxQzZrjAbVRpMAAABq TLSv1 ECDHE-RSA-AES256-SHA 707 2027 -% 1110717 2017 107829 113 0 0 192.168.90.199 CH - [2015-05-29 08:58:48.978619] "GET /EMail/message.aspx?&mailId=3875_7&folderId=2737_23&mailPos=1 HTTP/1.1" 200 11328 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "286bb2c6.52339ad557ad9" VjHRuKwxQzZrjAbVRpQAAABp TLSv1 ECDHE-RSA-AES256-SHA 523 11828 -% 1472142 5143 432237 33380 0 0 192.168.90.199 CH - [2015-05-29 08:58:55.538493] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 10126 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "286bb2c6.52339ad557ad9" VjHRv6wxQzZrjAbVRpYAAABt TLSv1 ECDHE-RSA-AES256-SHA 691 10752 -% 1621580 3149 611841 5661 0 0 192.168.90.199 CH - [2015-05-29 08:58:55.539860] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "286bb2c6.52339ad557ad9" VjHRv6wxQzZrjAbVRpcAAABs TLSv1 ECDHE-RSA-AES256-SHA 723 9379 -% 1628252 3506 614766 4643 0 0 192.168.76.174 CH - [2015-05-29 09:02:41.793799] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7358 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_5) AppleWebKit/600.8.9 (KHTML, like Gecko) Version/6.2.8 Safari/537.85.17" www.example.com 192.168.34.16 443 proxy-server - + "7bhost.52339bc3d4707" VjHSoawxQzZrjAbVRr8AAABX TLSv1 ECDHE-RSA-AES256-SHA 999 11793 -% 1812463 6988 800481 3640 3 0 192.168.76.174 CH - [2015-05-29 09:02:43.907112] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_5) AppleWebKit/600.8.9 (KHTML, like Gecko) Version/6.2.8 Safari/537.85.17" www.example.com 192.168.34.16 443 proxy-server - + "7bhost.52339bc3d4707" VjHSo6wxQzZrjAbVRsAAAABY TLSv1 ECDHE-RSA-AES256-SHA 859 1887 22% 1643285 6630 634657 147 3 0 192.168.76.174 CH - [2015-05-29 09:02:43.935177] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_5) AppleWebKit/600.8.9 (KHTML, like Gecko) Version/6.2.8 Safari/537.85.17" www.example.com 192.168.34.16 443 proxy-server - + "7bhost.52339bc3d4707" VjHSo6wxQzZrjAbUCzcAAAAA TLSv1 ECDHE-RSA-AES256-SHA 1052 2576 13% 1839296 10593 826354 132 3 0 192.168.76.174 CH - [2015-05-29 09:02:43.934773] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7239 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_5) AppleWebKit/600.8.9 (KHTML, like Gecko) Version/6.2.8 Safari/537.85.17" www.example.com 192.168.34.16 443 proxy-server - + "7bcbeb15.52339bc3d4707" VjHSo6wxQzZrjAbUCzYAAAA@ TLSv1 ECDHE-RSA-AES256-SHA 1036 8221 22% 1855325 14626 836036 93 3 0 192.168.76.174 CH - [2015-05-29 09:02:43.935000] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_5) AppleWebKit/600.8.9 (KHTML, like Gecko) Version/6.2.8 Safari/537.85.17" www.example.com 192.168.34.16 443 proxy-server - + "7bhost.52339bc3d4707" VjHSo6wxQzZrjAbVRsEAAABZ TLSv1 ECDHE-RSA-AES256-SHA 1052 752 56% 1860125 12077 846583 129 3 0 192.168.76.174 CH - [2015-05-29 09:02:43.935188] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_5) AppleWebKit/600.8.9 (KHTML, like Gecko) Version/6.2.8 Safari/537.85.17" www.example.com 192.168.34.16 443 proxy-server - + "7bhost.52339bc3d4707" VjHSo6wxQzZrjAbVRsIAAABa TLSv1 ECDHE-RSA-AES256-SHA 1036 4404 23% 1882682 15836 864138 93 3 0 192.168.76.174 CH - [2015-05-29 09:02:45.909230] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_5) AppleWebKit/600.8.9 (KHTML, like Gecko) Version/6.2.8 Safari/537.85.17" www.example.com 192.168.34.16 443 proxy-server - + "7bhost.52339bc3d4707" VjHSpawxQzZrjAbUCzkAAAAC TLSv1 ECDHE-RSA-AES256-SHA 843 1802 -% 1358875 8082 348360 174 3 0 192.168.76.174 CH - [2015-05-29 09:02:45.908948] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_5) AppleWebKit/600.8.9 (KHTML, like Gecko) Version/6.2.8 Safari/537.85.17" www.example.com 192.168.34.16 443 proxy-server - + "7bhost.52339bc3d4707" VjHSpawxQzZrjAbVRsMAAABg TLSv1 ECDHE-RSA-AES256-SHA 843 1690 -% 1370582 7084 361432 144 3 0 192.168.76.174 CH - [2015-05-29 09:02:47.321854] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_5) AppleWebKit/600.8.9 (KHTML, like Gecko) Version/6.2.8 Safari/537.85.17" www.example.com 192.168.34.16 443 proxy-server - + "7bhost.52339bc3d4707" VjHSp6wxQzZrjAbUCzoAAAA- TLSv1 ECDHE-RSA-AES256-SHA 1036 1723 -% 1228549 10550 216279 140 3 0 192.168.76.174 CH - [2015-05-29 09:02:49.144837] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_5) AppleWebKit/600.8.9 (KHTML, like Gecko) Version/6.2.8 Safari/537.85.17" www.example.com 192.168.34.16 443 proxy-server - + "7bhost.52339bc3d4707" VjHSqawxQzZrjAbVRsQAAABb TLSv1 ECDHE-RSA-AES256-SHA 843 2090 -% 944227 10702 931927 147 3 0 192.168.76.174 CH - [2015-05-29 09:02:51.989333] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_5) AppleWebKit/600.8.9 (KHTML, like Gecko) Version/6.2.8 Safari/537.85.17" www.example.com 192.168.34.16 443 proxy-server - + "7bhost.52339bc3d4707" VjHSq6wxQzZrjAbVRsUAAABi TLSv1 ECDHE-RSA-AES256-SHA 1141 421 -% 815557 9047 804713 187 3 0 192.168.76.174 CH - [2015-05-29 09:02:52.818243] "GET /EMail/main.aspx HTTP/1.1" 200 3390 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_5) AppleWebKit/600.8.9 (KHTML, like Gecko) Version/6.2.8 Safari/537.85.17" www.example.com 192.168.34.16 443 proxy-server - + "7bhost.52339bc3d4707" VjHSrKwxQzZrjAbVRsYAAABj TLSv1 ECDHE-RSA-AES256-SHA 923 3818 -% 930983 11214 915941 1527 3 0 192.168.76.174 CH - [2015-05-29 09:02:53.798809] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_5) AppleWebKit/600.8.9 (KHTML, like Gecko) Version/6.2.8 Safari/537.85.17" www.example.com 192.168.34.16 443 proxy-server - + "7bcbeb15.52339bc3d4707" VjHSrawxQzZrjAbVRskAAABd TLSv1 ECDHE-RSA-AES256-SHA 1052 4283 -% 1135160 7941 114350 10954 3 0 192.168.76.174 CH - [2015-05-29 09:02:53.798593] "GET /EMail/overview.aspx HTTP/1.1" 200 5285 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_5) AppleWebKit/600.8.9 (KHTML, like Gecko) Version/6.2.8 Safari/537.85.17" www.example.com 192.168.34.16 443 proxy-server - + "7bhost.52339bc3d4707" VjHSrawxQzZrjAbVRsgAAABc TLSv1 ECDHE-RSA-AES256-SHA 1052 5867 -% 1630648 6931 619641 2749 3 0 192.168.76.174 CH - [2015-05-29 09:02:53.768390] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_5) AppleWebKit/600.8.9 (KHTML, like Gecko) Version/6.2.8 Safari/537.85.17" www.example.com 192.168.34.16 443 proxy-server - + "7bhost.52339bc3d4707" VjHSrawxQzZrjAbVRscAAABe TLSv1 ECDHE-RSA-AES256-SHA 891 9218 -% 1833375 10286 812106 4476 3 0 192.168.76.174 CH - [2015-05-29 09:02:55.454768] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_5) AppleWebKit/600.8.9 (KHTML, like Gecko) Version/6.2.8 Safari/537.85.17" www.example.com 192.168.34.16 443 proxy-server - + "7bhost.52339bc3d4707" VjHSr6wxQzZrjAbVRssAAABf TLSv1 ECDHE-RSA-AES256-SHA 827 1258 -% 821553 8787 810251 146 3 0 192.168.76.174 CH - [2015-05-29 09:02:55.625014] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_5) AppleWebKit/600.8.9 (KHTML, like Gecko) Version/6.2.8 Safari/537.85.17" www.example.com 192.168.34.16 443 proxy-server - + "7bhost.52339bc3d4707" VjHSr6wxQzZrjAbVRswAAABk TLSv1 ECDHE-RSA-AES256-SHA 859 1274 -% 898155 7786 888258 223 3 0 192.168.76.174 CH - [2015-05-29 09:03:00.338764] "GET /EMail/inbox.aspx HTTP/1.1" 200 18962 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_5) AppleWebKit/600.8.9 (KHTML, like Gecko) Version/6.2.8 Safari/537.85.17" www.example.com 192.168.34.16 443 proxy-server - + "7bhost.52339bc3d4707" VjHStKwxQzZrjAbVRs4AAABm TLSv1 ECDHE-RSA-AES256-SHA 859 19534 -% 1645377 8401 594247 11345 3 0 192.168.76.174 CH - [2015-05-29 09:03:02.018345] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_5) AppleWebKit/600.8.9 (KHTML, like Gecko) Version/6.2.8 Safari/537.85.17" www.example.com 192.168.34.16 443 proxy-server - + "7bcbeb15.52339bc3d4707" VjHStqwxQzZrjAbVRs8AAABn TLSv1 ECDHE-RSA-AES256-SHA 811 538 -% 738987 8246 728652 520 3 0 192.168.76.174 CH - [2015-05-29 09:03:02.044925] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_5) AppleWebKit/600.8.9 (KHTML, like Gecko) Version/6.2.8 Safari/537.85.17" www.example.com 192.168.34.16 443 proxy-server - + "7bhost.52339bc3d4707" VjHStqwxQzZrjAbVRtAAAABo TLSv1 ECDHE-RSA-AES256-SHA 1004 2027 -% 926891 6809 917734 198 3 0 192.168.76.174 CH - [2015-05-29 09:03:02.048633] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_5) AppleWebKit/600.8.9 (KHTML, like Gecko) Version/6.2.8 Safari/537.85.17" www.example.com 192.168.34.16 443 proxy-server - + "7bhost.52339bc3d4707" VjHStqwxQzZrjAbVRtEAAABq TLSv1 ECDHE-RSA-AES256-SHA 1004 699 -% 996745 6345 989106 132 3 0 192.168.76.174 CH - [2015-05-29 09:03:02.051222] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_5) AppleWebKit/600.8.9 (KHTML, like Gecko) Version/6.2.8 Safari/537.85.17" www.example.com 192.168.34.16 443 proxy-server - + "7bhost.52339bc3d4707" VjHStqwxQzZrjAbVRtIAAABp TLSv1 ECDHE-RSA-AES256-SHA 1004 1963 -% 1166519 13538 151484 135 3 0 192.168.76.174 CH - [2015-05-29 09:03:04.986205] "GET /EMail/message.aspx?&mailId=3916_10&folderId=308_45&mailPos=0 HTTP/1.1" 200 13152 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_5) AppleWebKit/600.8.9 (KHTML, like Gecko) Version/6.2.8 Safari/537.85.17" www.example.com 192.168.34.16 443 proxy-server - + "7bhost.52339bc3d4707" VjHSuKwxQzZrjAbVRtQAAABv TLSv1 ECDHE-RSA-AES256-SHA 907 13652 -% 1827943 11699 805400 8189 3 0 192.168.76.174 CH - [2015-05-29 09:03:10.901762] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3916_10&folderId=308_45&attachmentId=2&token=51057809775866788E18 HTTP/1.1" 200 1920 "https://www.example.com/EMail/message.aspx?&mailId=3916_10&folderId=308_45&mailPos=0" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_5) AppleWebKit/600.8.9 (KHTML, like Gecko) Version/6.2.8 Safari/537.85.17" www.example.com 192.168.34.16 443 proxy-server - + "7bhost.52339bc3d4707" VjHSvqwxQzZrjAbVRtYAAABs TLSv1 ECDHE-RSA-AES256-SHA 1019 2404 -% 1037790 13033 19807 157 3 0 192.168.76.174 CH - [2015-05-29 09:03:23.540913] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_5) AppleWebKit/600.8.9 (KHTML, like Gecko) Version/6.2.8 Safari/537.85.17" www.example.com 192.168.34.16 443 proxy-server - + "7bcbeb15.52339bc3d4707" VjHSy6wxQzZrjAbVRtkAAABy TLSv1 ECDHE-RSA-AES256-SHA 1084 566 -% 1033428 7580 24448 142 3 0 192.168.76.174 CH - [2015-05-29 09:03:24.588034] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_5) AppleWebKit/600.8.9 (KHTML, like Gecko) Version/6.2.8 Safari/537.85.17" www.example.com 192.168.34.16 443 proxy-server - + "7bcbeb15.52339bc3d4707" VjHSzKwxQzZrjAbVRtoAAABu TLSv1 ECDHE-RSA-AES256-SHA 859 687 75% 928923 6457 920898 253 3 0 192.168.76.174 CH - [2015-05-29 09:03:25.538473] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "https://www.example.com/EMail/index.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_5) AppleWebKit/600.8.9 (KHTML, like Gecko) Version/6.2.8 Safari/537.85.17" www.example.com 192.168.34.16 443 proxy-server - + "7bhost.52339bc3d4707" VjHSzawxQzZrjAbVRtsAAABz TLSv1 ECDHE-RSA-AES256-SHA 875 325 -% 961149 14574 944243 132 3 0 192.168.76.174 CH - [2015-05-29 09:03:26.535718] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "https://www.example.com/EMail/index.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_5) AppleWebKit/600.8.9 (KHTML, like Gecko) Version/6.2.8 Safari/537.85.17" www.example.com 192.168.34.16 443 proxy-server - + "7bhost.52339bc3d4707" VjHSzqwxQzZrjAbVRtwAAAB2 TLSv1 ECDHE-RSA-AES256-SHA 859 7770 -% 1093091 6284 81607 3604 3 0 192.168.90.199 CH - [2015-05-29 09:04:35.564998] "GET /EMail/message.aspx?&mailId=3916_9&folderId=2737_23&mailPos=0 HTTP/1.1" 200 11346 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "286bb2c6.52339ad557ad9" VjHTE6wxQzZrjAbVRuoAAABD TLSv1 ECDHE-RSA-AES256-SHA 814 15691 -% 1315576 5654 284721 24182 0 0 192.168.90.199 CH - [2015-05-29 09:04:39.806976] "GET /EMail/downloadPDF.aspx HTTP/1.1" 200 4293 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "286bb2c6.52339ad557ad9" VjHTF6wxQzZrjAbVRusAAABE TLSv1 ECDHE-RSA-AES256-SHA 427 4730 -% 955511 3013 950041 1710 0 0 192.168.90.199 CH - [2015-05-29 09:04:42.907277] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3916_9&folderId=2737_23&attachmentId=2&token=46270609197049989E18 HTTP/1.1" 200 47559 "https://www.example.com/EMail/message.aspx?&mailId=3916_9&folderId=2737_23&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "286bb2c6.52339ad557ad9" VjHTGqwxQzZrjAbVRu0AAABI TLSv1 ECDHE-RSA-AES256-SHA 619 49109 -% 1043006 4028 19899 213 0 0 192.168.144.21 CH - [2015-05-29 09:04:43.483709] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e2f65d26.52339c37e1e3d" VjHTG6wxQzZrjAbVRu4AAABH TLSv1.2 ECDHE-RSA-AES256-SHA384 646 5699 -% 802314 715 800435 204 0 0 192.168.90.199 CH - [2015-05-29 09:05:44.060916] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3916_9&folderId=2737_23&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "286bb2c6.52339ad557ad9" VjHTWKwxQzZrjAbUC0MAAAAL TLSv1 ECDHE-RSA-AES256-SHA 931 502 -% 1241682 6292 234347 270 0 0 192.168.90.199 CH - [2015-05-29 09:05:45.311134] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8704 "https://www.example.com/EMail/message.aspx?&mailId=3916_9&folderId=2737_23&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "286bb2c6.52339ad557ad9" VjHTWawxQzZrjAbUC0QAAAAM TLSv1 ECDHE-RSA-AES256-SHA 571 9183 -% 1082988 3081 75950 2983 0 0 192.168.90.199 CH - [2015-05-29 09:05:48.098772] "GET /EMail/message.aspx?&mailId=3875_7&folderId=2737_23&mailPos=0 HTTP/1.1" 200 11203 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "286bb2c6.52339ad557ad9" VjHTXKwxQzZrjAbUC0UAAAAN TLSv1 ECDHE-RSA-AES256-SHA 539 11716 -% 1627838 4789 595232 26569 0 0 192.168.90.199 CH - [2015-05-29 09:05:51.416344] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3875_7&folderId=2737_23&attachmentId=2&token=140049263048966733E18 HTTP/1.1" 200 46699 "https://www.example.com/EMail/message.aspx?&mailId=3875_7&folderId=2737_23&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "286bb2c6.52339ad557ad9" VjHTX6wxQzZrjAbUC0YAAAAO TLSv1 ECDHE-RSA-AES256-SHA 619 48208 -% 1144756 5864 120068 219 0 0 192.168.90.199 CH - [2015-05-29 09:06:15.391390] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3875_7&folderId=2737_23&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "286bb2c6.52339ad557ad9" VjHTd6wxQzZrjAbVRv0AAABY TLSv1 ECDHE-RSA-AES256-SHA 931 502 -% 1124384 4734 118813 192 0 0 192.168.90.199 CH - [2015-05-29 09:06:16.528197] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7290 "https://www.example.com/EMail/message.aspx?&mailId=3875_7&folderId=2737_23&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "286bb2c6.52339ad557ad9" VjHTeKwxQzZrjAbVRv4AAABZ TLSv1 ECDHE-RSA-AES256-SHA 571 7722 -% 1064312 2527 57072 4125 0 0 192.168.90.199 CH - [2015-05-29 09:13:17.641723] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7371 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4d7722e6.52339e2238bfb" VjHVHawxQzZrjAbVR0MAAABj TLSv1 ECDHE-RSA-AES256-SHA 622 11793 -% 990113 1297 984359 3811 0 0 192.168.90.199 CH - [2015-05-29 09:13:18.659952] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4d7722e6.52339e2238bfb" VjHVHqwxQzZrjAbVR0QAAABh TLSv1 ECDHE-RSA-AES256-SHA 491 2431 14% 954323 2040 950910 233 0 0 192.168.90.199 CH - [2015-05-29 09:13:18.696177] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7239 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4d7722e6.52339e2238bfb" VjHVHqwxQzZrjAbUC1oAAAAj TLSv1 ECDHE-RSA-AES256-SHA 723 8221 22% 954973 1762 950673 141 0 0 192.168.90.199 CH - [2015-05-29 09:13:18.690119] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4d7722e6.52339e2238bfb" VjHVHqwxQzZrjAbUC1kAAAAk TLSv1 ECDHE-RSA-AES256-SHA 707 2032 22% 1073889 2179 70490 194 0 0 192.168.90.199 CH - [2015-05-29 09:13:18.694128] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4d7722e6.52339e2238bfb" VjHVHqwxQzZrjAbVR0UAAABd TLSv1 ECDHE-RSA-AES256-SHA 707 752 56% 1174083 1696 171335 386 0 0 192.168.90.199 CH - [2015-05-29 09:13:18.702635] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4d7722e6.52339e2238bfb" VjHVHqwxQzZrjAbVR0cAAABe TLSv1 ECDHE-RSA-AES256-SHA 739 1835 -% 1335260 2542 331397 294 0 0 192.168.90.199 CH - [2015-05-29 09:13:18.700614] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4d7722e6.52339e2238bfb" VjHVHqwxQzZrjAbVR0YAAABc TLSv1 ECDHE-RSA-AES256-SHA 739 4245 23% 1358294 1732 355302 134 0 0 192.168.90.199 CH - [2015-05-29 09:13:20.083828] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4d7722e6.52339e2238bfb" VjHVIKwxQzZrjAbVR0kAAABk TLSv1 ECDHE-RSA-AES256-SHA 523 1802 -% 716917 1976 714007 191 0 0 192.168.90.199 CH - [2015-05-29 09:13:20.818172] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4d7722e6.52339e2238bfb" VjHVIKwxQzZrjAbVR0oAAABl TLSv1 ECDHE-RSA-AES256-SHA 379 1578 -% 925844 2340 922659 205 0 0 192.168.90.199 CH - [2015-05-29 09:13:27.600416] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4d7722e6.52339e2238bfb" VjHVJ6wxQzZrjAbVR0wAAABn TLSv1 ECDHE-RSA-AES256-SHA 739 2235 -% 925205 3702 920565 153 0 0 192.168.90.199 CH - [2015-05-29 09:13:54.703071] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4d7722e6.52339e2238bfb" VjHVQqwxQzZrjAbUC1wAAAAl TLSv1 ECDHE-RSA-AES256-SHA 883 598 -% 1136179 5202 130088 225 0 0 192.168.90.199 CH - [2015-05-29 09:13:55.849291] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7544 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4d7722e6.52339e2238bfb" VjHVQ6wxQzZrjAbUC10AAAAn TLSv1 ECDHE-RSA-AES256-SHA 571 7978 -% 988310 2525 972855 12399 0 0 192.168.90.199 CH - [2015-05-29 09:14:11.955301] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4d7722e6.52339e2238bfb" VjHVU6wxQzZrjAbVR1UAAABx TLSv1 ECDHE-RSA-AES256-SHA 883 566 -% 941172 3301 937043 313 0 0 192.168.90.199 CH - [2015-05-29 09:14:12.904922] "GET /EMail/main.aspx HTTP/1.1" 200 3403 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4d7722e6.52339e2238bfb" VjHVVKwxQzZrjAbVR1YAAABy TLSv1 ECDHE-RSA-AES256-SHA 523 3818 -% 896050 1927 892084 1813 0 0 192.168.90.199 CH - [2015-05-29 09:14:13.871654] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4d7722e6.52339e2238bfb" VjHVVawxQzZrjAbVR1kAAAB2 TLSv1 ECDHE-RSA-AES256-SHA 691 5883 -% 855885 2868 849238 2821 0 0 192.168.90.199 CH - [2015-05-29 09:14:13.837136] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4d7722e6.52339e2238bfb" VjHVVawxQzZrjAbVR1gAAABz TLSv1 ECDHE-RSA-AES256-SHA 475 4154 -% 997044 1938 986027 8476 0 0 192.168.90.199 CH - [2015-05-29 09:14:14.749544] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4d7722e6.52339e2238bfb" VjHVVqwxQzZrjAbVR1sAAAB3 TLSv1 ECDHE-RSA-AES256-SHA 507 1258 -% 983924 2977 979978 252 0 0 192.168.90.199 CH - [2015-05-29 09:14:13.876382] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4d7722e6.52339e2238bfb" VjHVVawxQzZrjAbVR1oAAAB1 TLSv1 ECDHE-RSA-AES256-SHA 723 9379 -% 1872356 4156 859832 2743 0 0 192.168.90.199 CH - [2015-05-29 09:14:15.775943] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4d7722e6.52339e2238bfb" VjHVV6wxQzZrjAbVR1wAAAB4 TLSv1 ECDHE-RSA-AES256-SHA 539 1274 -% 833345 1897 830586 155 0 0 192.168.90.199 CH - [2015-05-29 09:14:25.513113] "GET /EMail/trash.aspx HTTP/1.1" 200 10238 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4d7722e6.52339e2238bfb" VjHVYawxQzZrjAbVR18AAAB6 TLSv1 ECDHE-RSA-AES256-SHA 691 10885 -% 1096868 3090 88353 4289 0 0 192.168.90.199 CH - [2015-05-29 09:14:26.638358] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/trash.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4d7722e6.52339e2238bfb" VjHVYqwxQzZrjAbVR2AAAAB9 TLSv1 ECDHE-RSA-AES256-SHA 491 554 -% 1014550 3078 10622 199 0 0 192.168.90.199 CH - [2015-05-29 09:14:26.677335] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/trash.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4d7722e6.52339e2238bfb" VjHVYqwxQzZrjAbVR2IAAAB8 TLSv1 ECDHE-RSA-AES256-SHA 707 2027 -% 1144813 2720 141183 198 0 0 192.168.90.199 CH - [2015-05-29 09:14:26.670546] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/trash.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4d7722e6.52339e2238bfb" VjHVYqwxQzZrjAbVR2EAAAB7 TLSv1 ECDHE-RSA-AES256-SHA 707 683 -% 1185993 1927 183214 214 0 0 192.168.90.199 CH - [2015-05-29 09:14:48.370504] "GET /EMail/message.aspx?&mailId=3916_9&folderId=2737_26&mailPos=0 HTTP/1.1" 200 11057 "https://www.example.com/EMail/trash.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4d7722e6.52339e2238bfb" VjHVeKwxQzZrjAbUC14AAAAo TLSv1 ECDHE-RSA-AES256-SHA 739 11701 -% 1387079 3440 362342 20255 0 0 192.168.90.199 CH - [2015-05-29 09:14:53.361058] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3916_9&folderId=2737_26&attachmentId=2&token=55699235020998994E18 HTTP/1.1" 200 47559 "https://www.example.com/EMail/message.aspx?&mailId=3916_9&folderId=2737_26&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4d7722e6.52339e2238bfb" VjHVfawxQzZrjAbUC18AAAAp TLSv1 ECDHE-RSA-AES256-SHA 619 49109 -% 969131 6207 940059 200 0 0 192.168.90.199 CH - [2015-05-29 09:20:00.687485] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4d7722e6.52339e2238bfb" VjHWsKwxQzZrjAbVR5oAAAB4 TLSv1 ECDHE-RSA-AES256-SHA 782 4252 -% 892530 2319 889114 205 0 0 192.168.90.199 CH - [2015-05-29 09:20:01.588592] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4d7722e6.52339e2238bfb" VjHWsawxQzZrjAbVR5sAAAB5 TLSv1 ECDHE-RSA-AES256-SHA 475 687 75% 932510 3022 928313 365 0 0 192.168.90.199 CH - [2015-05-29 09:20:02.550939] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "4d7722e6.52339e2238bfb" VjHWsqwxQzZrjAbVR5wAAAB0 TLSv1 ECDHE-RSA-AES256-SHA 315 1562 -% 3334 2379 52 144 0 0 192.168.90.199 CH - [2015-05-29 09:20:02.586943] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4d7722e6.52339e2238bfb" VjHWsqwxQzZrjAbUC20AAAA4 TLSv1 ECDHE-RSA-AES256-SHA 659 470 -% 722474 2481 719197 199 0 0 192.168.90.199 CH - [2015-05-29 09:20:03.317890] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4d7722e6.52339e2238bfb" VjHWs6wxQzZrjAbUC24AAAA2 TLSv1 ECDHE-RSA-AES256-SHA 427 7786 -% 1026714 2574 20960 2563 0 0 192.168.90.199 CH - [2015-05-29 09:20:04.363079] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4d7722e6.52339e2238bfb" VjHWtKwxQzZrjAbUC3AAAAA8 TLSv1 ECDHE-RSA-AES256-SHA 555 2431 14% 916114 2945 911333 186 0 0 192.168.90.199 CH - [2015-05-29 09:20:04.362974] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4d7722e6.52339e2238bfb" VjHWtKwxQzZrjAbVR54AAAB8 TLSv1 ECDHE-RSA-AES256-SHA 555 1887 22% 993901 2706 989812 162 0 0 192.168.90.199 CH - [2015-05-29 09:20:04.404907] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4d7722e6.52339e2238bfb" VjHWtKwxQzZrjAbVR6AAAAB@ TLSv1 ECDHE-RSA-AES256-SHA 771 752 56% 1183706 4000 178518 207 0 0 192.168.90.199 CH - [2015-05-29 09:20:04.401022] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4d7722e6.52339e2238bfb" VjHWtKwxQzZrjAbVR58AAAB7 TLSv1 ECDHE-RSA-AES256-SHA 787 8173 22% 1194645 3550 186997 122 0 0 192.168.90.199 CH - [2015-05-29 09:20:04.409853] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4d7722e6.52339e2238bfb" VjHWtKwxQzZrjAbVR6EAAAB- TLSv1 ECDHE-RSA-AES256-SHA 803 4245 23% 1399704 3598 394096 228 0 0 192.168.90.199 CH - [2015-05-29 09:20:04.414514] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4d7722e6.52339e2238bfb" VjHWtKwxQzZrjAbUC3EAAAA7 TLSv1 ECDHE-RSA-AES256-SHA 803 358 -% 1475632 3215 471509 152 0 0 192.168.90.199 CH - [2015-05-29 09:20:05.832350] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4d7722e6.52339e2238bfb" VjHWtawxQzZrjAbVR6IAAABB TLSv1 ECDHE-RSA-AES256-SHA 587 213 -% 964848 2979 960997 154 0 0 192.168.186.76 CH - [2015-05-29 09:21:53.151468] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 11924 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHXIawxQzZrjAbVR7UAAABW TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 16672 -% 1112292 7071 99193 3781 3 0 192.168.186.76 CH - [2015-05-29 09:21:53.179353] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHXIawxQzZrjAbVR7YAAABU TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1521867 6837 505222 2803 3 0 192.168.186.76 CH - [2015-05-29 09:21:57.951892] "GET /EMail/message.aspx?&mailId=3917_9&folderId=947_65&mailPos=0 HTTP/1.1" 200 16654 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHXJawxQzZrjAbVR7cAAABR TLSv1.2 ECDHE-RSA-AES256-SHA384 710 17401 -% 1383965 8708 342696 29655 3 0 192.168.186.76 CH - [2015-05-29 09:22:00.890380] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3917_9&folderId=947_65&attachmentId=3&token=37779895281641196E18 HTTP/1.1" 200 1338975 "https://www.example.com/EMail/message.aspx?&mailId=3917_9&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHXKKwxQzZrjAbVR7kAAABX TLSv1.2 ECDHE-RSA-AES256-SHA384 806 1408891 -% 1486493 7096 18877 425 3 0 192.168.186.76 CH - [2015-05-29 09:22:10.391903] "GET /EMail/newMessage.aspx?action=reply&mailId=3917_9&folderId=947_65&showPics=false HTTP/1.1" 200 24393 "https://www.example.com/EMail/message.aspx?&mailId=3917_9&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHXMqwxQzZrjAbVR7wAAABa TLSv1.2 ECDHE-RSA-AES256-SHA384 1292 25391 -% 1004232 6008 943660 41639 6 3 192.168.186.76 CH - [2015-05-29 09:22:11.472208] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3917_9&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHXM6wxQzZrjAbVR70AAABg TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 997045 6512 982795 6284 3 0 192.168.186.76 CH - [2015-05-29 09:22:21.911059] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3917_9&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHXPawxQzZrjAbVR74AAABi TLSv1.2 ECDHE-RSA-AES256-SHA384 7586 4545 -% 1466686 305705 140037 588 76 0 192.168.186.76 CH - [2015-05-29 09:22:23.391601] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3917_9&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHXP6wxQzZrjAbVR78AAABj TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 781896 9881 758920 11123 3 0 192.168.186.76 CH - [2015-05-29 09:22:24.799665] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 11923 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHXQKwxQzZrjAbVR8AAAABf TLSv1.2 ECDHE-RSA-AES256-SHA384 662 12596 -% 1605760 4910 589835 8546 3 0 192.168.186.76 CH - [2015-05-29 09:22:24.801581] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHXQKwxQzZrjAbVR8EAAABb TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1713238 6206 698332 2751 3 0 192.168.186.76 CH - [2015-05-29 09:22:28.522539] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHXRKwxQzZrjAbVR8MAAABd TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1378333 13115 363280 155 3 0 192.168.186.76 CH - [2015-05-29 09:22:29.913635] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 10713 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHXRawxQzZrjAbVR8QAAABe TLSv1.2 ECDHE-RSA-AES256-SHA384 726 11396 -% 1172952 4747 163147 3433 3 0 192.168.186.76 CH - [2015-05-29 09:22:32.151593] "GET /EMail/message.aspx?&mailId=3918_7&folderId=947_65&mailPos=0 HTTP/1.1" 200 16625 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHXSKwxQzZrjAbVR8UAAABc TLSv1.2 ECDHE-RSA-AES256-SHA384 726 17385 -% 1275862 8654 231394 33030 3 0 192.168.186.76 CH - [2015-05-29 09:22:35.481074] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3918_7&folderId=947_65&attachmentId=3&token=496351680587038E18 HTTP/1.1" 200 726213 "https://www.example.com/EMail/message.aspx?&mailId=3918_7&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHXS6wxQzZrjAbVR8YAAABk TLSv1.2 ECDHE-RSA-AES256-SHA384 806 765546 -% 1339666 7221 29428 212 3 0 192.168.186.76 CH - [2015-05-29 09:23:14.360344] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHXcqwxQzZrjAbVR88AAABt TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1443355 5372 426432 4509 3 0 192.168.186.76 CH - [2015-05-29 09:23:17.657055] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHXdawxQzZrjAbVR9AAAABs TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1530170 13064 515217 150 3 0 192.168.186.76 CH - [2015-05-29 09:23:19.205738] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 9501 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHXd6wxQzZrjAbVR9IAAABx TLSv1.2 ECDHE-RSA-AES256-SHA384 726 10095 -% 1273304 4441 263690 3552 3 0 192.168.186.76 CH - [2015-05-29 09:23:21.575024] "GET /EMail/message.aspx?&mailId=3918_6&folderId=947_65&mailPos=0 HTTP/1.1" 200 16307 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHXeawxQzZrjAbVR9QAAABy TLSv1.2 ECDHE-RSA-AES256-SHA384 726 16980 -% 1442024 8717 396959 33631 3 0 192.168.186.76 CH - [2015-05-29 09:24:06.480982] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3918_6&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHXpqwxQzZrjAbVR9oAAAB5 TLSv1.2 ECDHE-RSA-AES256-SHA384 7474 4545 -% 1632501 298797 313787 172 86 0 192.168.186.76 CH - [2015-05-29 09:24:08.125257] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3918_6&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHXqKwxQzZrjAbVR9sAAAB0 TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 981967 7547 964916 7720 3 0 192.168.186.76 CH - [2015-05-29 09:24:09.670485] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9499 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHXqawxQzZrjAbVR9wAAAB6 TLSv1.2 ECDHE-RSA-AES256-SHA384 662 10095 -% 1352820 4910 343520 2885 3 0 192.168.186.76 CH - [2015-05-29 09:24:09.671884] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHXqawxQzZrjAbUC34AAAAI TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1579964 4627 565306 3976 3 0 192.168.186.76 CH - [2015-05-29 09:24:12.678294] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHXrKwxQzZrjAbUC4AAAAAL TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1184389 12921 169018 216 3 0 192.168.186.76 CH - [2015-05-29 09:24:13.874700] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8402 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHXrawxQzZrjAbUC4EAAAAM TLSv1.2 ECDHE-RSA-AES256-SHA384 726 9007 -% 1074003 6104 62679 3384 3 0 192.168.186.76 CH - [2015-05-29 09:24:25.469060] "GET /EMail/message.aspx?&mailId=3918_5&folderId=947_65&mailPos=0 HTTP/1.1" 200 15598 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHXuawxQzZrjAbVR94AAAB8 TLSv1.2 ECDHE-RSA-AES256-SHA384 1244 16352 -% 2584986 9307 537307 35631 3 0 192.168.186.76 CH - [2015-05-29 09:24:32.245752] "GET /EMail/newMessage.aspx?action=reply&mailId=3918_5&folderId=947_65&showPics=false HTTP/1.1" 200 22739 "https://www.example.com/EMail/message.aspx?&mailId=3918_5&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHXwKwxQzZrjAbVR@AAAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 774 23566 -% 1334185 7290 282764 40466 6 3 192.168.186.76 CH - [2015-05-29 09:24:33.654232] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3918_5&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHXwawxQzZrjAbVR@EAAAB- TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 914922 6598 898274 8450 3 0 192.168.186.76 CH - [2015-05-29 09:25:38.327184] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHYAqwxQzZrjAbVR@wAAABK TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1281735 5209 264711 4500 3 0 192.168.186.76 CH - [2015-05-29 09:25:42.606898] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHYBqwxQzZrjAbVR@4AAABQ TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1190764 8014 180948 156 3 0 192.168.186.76 CH - [2015-05-29 09:25:43.811417] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7291 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHYB6wxQzZrjAbVR@8AAABO TLSv1.2 ECDHE-RSA-AES256-SHA384 726 7802 -% 1223205 8754 210436 2543 3 0 192.168.100.52 CH - [2015-05-29 09:34:34.367829] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "fa5eddc.5233a2e2e5964" VjHaGqwxQzZrjAbVSF4AAABD TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 881 5897 22% 956820 2558 953354 148 0 0 192.168.100.52 CH - [2015-05-29 09:34:42.939544] "GET /EMail/overview.aspx HTTP/1.1" 200 5290 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "fa5eddc.5233a2e2e5964" VjHaIqwxQzZrjAbVSGEAAABF TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1213 9733 -% 1368475 1863 362977 2757 0 0 192.168.100.52 CH - [2015-05-29 09:34:42.930216] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "fa5eddc.5233a2e2e5964" VjHaIqwxQzZrjAbVSGAAAABI TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1239 13200 -% 1600209 4205 586342 4116 0 0 192.168.100.52 CH - [2015-05-29 09:34:44.352542] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "fa5eddc.5233a2e2e5964" VjHaJKwxQzZrjAbVSGIAAABG TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 509 1248 -% 1031678 2017 29050 133 0 0 192.168.100.52 CH - [2015-05-29 09:34:44.574477] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "fa5eddc.5233a2e2e5964" VjHaJKwxQzZrjAbVSGMAAABH TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 551 1260 -% 973077 1947 970459 176 0 0 192.168.100.52 CH - [2015-05-29 09:34:48.983963] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "fa5eddc.5233a2e2e5964" VjHaKKwxQzZrjAbVSGQAAABJ TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 624 9179 -% 1605897 2747 594987 2816 0 0 192.168.100.52 CH - [2015-05-29 09:34:48.984478] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 22586 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "fa5eddc.5233a2e2e5964" VjHaKKwxQzZrjAbVSGUAAABM TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 607 23125 -% 1673959 2847 562891 7081 0 0 192.168.100.52 CH - [2015-05-29 09:34:50.709013] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "fa5eddc.5233a2e2e5964" VjHaKqwxQzZrjAbVSGcAAABK TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 513 527 -% 948395 1640 946052 180 0 0 192.168.100.52 CH - [2015-05-29 09:34:50.703525] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "fa5eddc.5233a2e2e5964" VjHaKqwxQzZrjAbVSGYAAABL TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 510 539 -% 1073931 1959 71133 250 0 0 192.168.100.52 CH - [2015-05-29 09:38:16.736786] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/css/NNstyle.css" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "fa5eddc.5233a2e2e5964" VjHa@KwxQzZrjAbVSIoAAABu TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1149 6109 -% 868788 2121 865932 131 0 0 192.168.100.52 CH - [2015-05-29 09:38:17.042188] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "fa5eddc.5233a2e2e5964" VjHa@awxQzZrjAbVSIsAAABx TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1157 547 -% 614908 2253 611892 138 0 0 192.168.100.52 CH - [2015-05-29 09:38:17.676984] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "fa5eddc.5233a2e2e5964" VjHa@awxQzZrjAbVSIwAAABy TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 571 676 75% 480807 2029 477487 434 0 0 192.168.100.52 CH - [2015-05-29 09:38:18.202148] "GET /favicon.ico HTTP/1.1" 200 1150 "https://www.example.com/EMail/index.html" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 - - + "fa5eddc.5233a2e2e5964" VjHa@qwxQzZrjAbVSI4AAABz TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 418 1554 -% 2792 1900 58 119 0 0 192.168.100.52 CH - [2015-05-29 09:38:18.197970] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "https://www.example.com/EMail/index.html" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "fa5eddc.5233a2e2e5964" VjHa@qwxQzZrjAbVSI0AAAB2 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 588 318 -% 991821 2241 988930 136 0 0 192.168.100.52 CH - [2015-05-29 09:38:19.203488] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "https://www.example.com/EMail/index.html" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "fa5eddc.5233a2e2e5964" VjHa@6wxQzZrjAbVSI8AAAB3 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 570 7758 -% 658000 2869 651112 3414 0 0 192.168.186.76 CH - [2015-05-29 09:40:26.603383] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8512 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHbeqwxQzZrjAbVSKUAAABN TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 13195 -% 1241814 4924 232089 2983 3 0 192.168.186.76 CH - [2015-05-29 09:40:45.164169] "GET /EMail/newMessage.aspx?action=reply&mailId=3917_11&folderId=947_65&showPics=false HTTP/1.1" 200 24159 "https://www.example.com/EMail/message.aspx?&mailId=3917_11&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHbjawxQzZrjAbVSKgAAABT TLSv1.2 ECDHE-RSA-AES256-SHA384 1292 25151 -% 1235340 10985 165543 45030 6 3 192.168.186.76 CH - [2015-05-29 09:40:46.467933] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3917_11&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHbjqwxQzZrjAbVSKkAAABP TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 834182 6506 820369 5820 3 0 192.168.186.76 CH - [2015-05-29 09:41:02.144697] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHbnqwxQzZrjAbVSKoAAABS TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1449054 12328 426023 4048 3 0 192.168.186.76 CH - [2015-05-29 09:41:05.369409] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHboawxQzZrjAbVSKwAAABU TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1215220 12574 200420 331 3 0 192.168.186.76 CH - [2015-05-29 09:41:06.598062] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7289 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHboqwxQzZrjAbVSK0AAABV TLSv1.2 ECDHE-RSA-AES256-SHA384 726 7802 -% 1072276 4546 63534 2870 3 0 192.168.227.15 CH - [2015-05-29 09:53:59.036543] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7922 "-" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHep6wxQzZrjAbUC-gAAAAK TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 779 12327 -% 1101851 2029 96686 2517 0 0 192.168.227.15 CH - [2015-05-29 09:54:00.330743] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHeqKwxQzZrjAbVSRYAAABA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 778 732 56% 851271 2705 847708 178 0 0 192.168.227.15 CH - [2015-05-29 09:54:00.331535] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHeqKwxQzZrjAbVSRcAAABD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 768 7799 22% 1034267 2660 29391 146 0 0 192.168.227.15 CH - [2015-05-29 09:54:00.257452] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHeqKwxQzZrjAbUC-kAAAAI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 525 2421 13% 1135046 1898 131601 163 0 0 192.168.227.15 CH - [2015-05-29 09:54:00.331793] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHeqKwxQzZrjAbVSRgAAABC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 778 2014 22% 1289396 2234 286257 128 0 0 192.168.227.15 CH - [2015-05-29 09:54:00.332111] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHeqKwxQzZrjAbUC-oAAAAL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 765 1823 -% 1293794 2424 290687 109 0 0 192.168.227.15 CH - [2015-05-29 09:54:01.710624] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHeqawxQzZrjAbUC-sAAAAM TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 514 1792 -% 680362 1983 677607 181 0 0 192.168.186.76 CH - [2015-05-29 09:55:58.396162] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3917_12&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHfHqwxQzZrjAbVSS0AAABb TLSv1.2 ECDHE-RSA-AES256-SHA384 8508 4545 -% 1516593 406045 89932 291 81 0 192.168.186.76 CH - [2015-05-29 09:55:59.929875] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3917_12&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHfH6wxQzZrjAbVSS4AAABi TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 1005598 9012 987576 7296 3 0 192.168.227.15 CH - [2015-05-29 09:56:32.732893] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHfQKwxQzZrjAbVSTMAAABe TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1460 502 -% 1762737 9255 752541 173 0 0 192.168.227.15 CH - [2015-05-29 09:56:34.623772] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7358 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHfQqwxQzZrjAbVSTQAAABk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 627 7780 -% 970528 3189 964673 2157 0 0 192.168.227.15 CH - [2015-05-29 09:56:35.657384] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHfQ6wxQzZrjAbVSTUAAABc TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 502 4096 23% 972047 2701 967418 187 0 0 192.168.227.15 CH - [2015-05-29 09:56:54.164744] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHfVqwxQzZrjAbUDAQAAAAW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1321 559 -% 1034060 5231 27937 184 0 0 192.168.227.15 CH - [2015-05-29 09:56:55.315233] "GET /EMail/main.aspx HTTP/1.1" 200 3390 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHfV6wxQzZrjAbUDAUAAAAT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 578 3806 -% 983998 2182 979367 1821 0 0 192.168.227.15 CH - [2015-05-29 09:56:56.468548] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHfWKwxQzZrjAbUDAYAAAAX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 516 4128 -% 1039995 2969 25693 10613 0 0 192.168.227.15 CH - [2015-05-29 09:56:56.526784] "GET /EMail/overview.aspx HTTP/1.1" 200 5283 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHfWKwxQzZrjAbVSTsAAABp TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 773 5843 -% 1157576 2844 152367 1746 0 0 192.168.227.15 CH - [2015-05-29 09:56:56.606816] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHfWKwxQzZrjAbVSTwAAABr TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 799 9317 -% 1591834 3531 578601 4554 0 0 192.168.227.15 CH - [2015-05-29 09:56:57.740751] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHfWawxQzZrjAbUDAcAAAAY TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 472 1248 -% 651684 2061 649010 131 0 0 192.168.227.15 CH - [2015-05-29 09:56:58.292913] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHfWqwxQzZrjAbVST0AAABv TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 514 1260 -% 837161 3125 833160 177 0 0 192.168.227.15 CH - [2015-05-29 09:57:04.255917] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8391 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHfYKwxQzZrjAbVST4AAABt TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 809 8980 -% 1088572 3199 81594 2672 0 0 192.168.227.15 CH - [2015-05-29 09:57:04.251037] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHfYKwxQzZrjAbUDAkAAAAa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 826 9317 -% 1619736 4966 605272 4029 0 0 192.168.227.15 CH - [2015-05-29 09:57:05.553561] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHfYawxQzZrjAbVSUEAAABu TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 731 665 -% 839145 2733 835707 133 0 0 192.168.227.15 CH - [2015-05-29 09:57:05.466055] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHfYawxQzZrjAbVST8AAABw TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 473 539 -% 948954 2936 945202 119 0 0 192.168.227.15 CH - [2015-05-29 09:57:05.534299] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHfYawxQzZrjAbVSUAAAABs TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 731 1951 -% 1044781 2833 41214 140 0 0 192.168.227.15 CH - [2015-05-29 09:57:38.658110] "GET /EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle HTTP/1.1" 200 9400 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHfgqwxQzZrjAbVSUkAAAB5 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1182 10221 -% 1498858 5406 484850 2984 0 0 192.168.227.15 CH - [2015-05-29 09:57:40.323405] "GET /EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle HTTP/1.1" 200 9400 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHfhKwxQzZrjAbUDAsAAAAc TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 870 10221 -% 1525519 3196 514984 4764 0 0 192.168.227.15 CH - [2015-05-29 09:57:42.028188] "GET /EMail/images/tree/folder/minus-first-node.gif HTTP/1.1" 200 842 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHfhqwxQzZrjAbUDAwAAAAd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 559 1254 -% 870041 1836 867591 135 0 0 192.168.227.15 CH - [2015-05-29 09:57:42.087449] "GET /EMail/images/tree/folder/vertical-sign.gif HTTP/1.1" 200 811 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHfhqwxQzZrjAbVSUsAAAB9 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 811 1361 -% 864827 1607 862614 127 0 0 192.168.227.15 CH - [2015-05-29 09:57:42.084756] "GET /EMail/images/tree/folder/pixel.gif HTTP/1.1" 200 807 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHfhqwxQzZrjAbVSUoAAAB6 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 803 1357 -% 1053765 1767 51317 169 0 0 192.168.227.15 CH - [2015-05-29 09:57:45.224126] "GET /EMail/folderOverview.aspx HTTP/1.1" 200 4635 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHfiawxQzZrjAbUDA0AAAAe TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 598 5057 -% 1438720 3870 431491 2674 0 0 192.168.227.15 CH - [2015-05-29 09:57:45.224609] "GET /EMail/tree.aspx?sNode-sharedTree=treePerFolderOverView HTTP/1.1" 200 9409 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHfiawxQzZrjAbVSUwAAAB8 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 627 10092 -% 1671129 4073 656231 5200 0 0 192.168.227.15 CH - [2015-05-29 09:57:50.127890] "GET /EMail/folderOverview.aspx HTTP/1.1" 200 4635 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treePerFolderOverView" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHfjqwxQzZrjAbUDA8AAAAg TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 563 5057 -% 1541623 1936 537147 1904 0 0 192.168.227.15 CH - [2015-05-29 09:57:50.133703] "GET /EMail/tree.aspx?sNode-sharedTree=treePerFolderOverView HTTP/1.1" 200 9409 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treePerFolderOverView" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHfjqwxQzZrjAbVSU4AAAB@ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 592 10092 -% 1750009 2516 739091 3238 0 0 192.168.227.15 CH - [2015-05-29 09:57:56.158084] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8391 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treePerFolderOverView" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHflKwxQzZrjAbUDBAAAAAh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 563 8842 -% 1046722 3379 39791 2618 0 0 192.168.227.15 CH - [2015-05-29 09:57:56.160930] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 9409 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treePerFolderOverView" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHflKwxQzZrjAbVSU8AAAB- TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 580 10092 -% 1486225 2847 472239 5260 0 0 192.168.227.15 CH - [2015-05-29 09:58:02.061387] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHfmqwxQzZrjAbUDBIAAAAj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 473 2088 -% 993962 2443 990565 175 0 0 192.168.227.15 CH - [2015-05-29 09:58:02.187596] "GET /EMail/moveToFolder.aspx?folderName=Inbox&mailId=3918_22 HTTP/1.1" 200 4465 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHfmqwxQzZrjAbVSVEAAABA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 564 4887 -% 1128514 2717 121704 3524 0 0 192.168.227.15 CH - [2015-05-29 09:58:12.158655] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/moveToFolder.aspx?folderName=Inbox&mailId=3918_22" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHfpKwxQzZrjAbVSVQAAABE TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1376 470 -% 1225079 5061 219219 175 0 0 192.168.227.15 CH - [2015-05-29 09:58:13.441932] "GET /EMail/error.aspx HTTP/1.1" 200 3750 "https://www.example.com/EMail/moveToFolder.aspx?folderName=Inbox&mailId=3918_22" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHfpawxQzZrjAbVSVUAAABF TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 586 4172 -% 915884 1943 903698 9751 0 0 192.168.227.15 CH - [2015-05-29 09:59:01.558801] "GET /EMail/tree.aspx?oNode-sharedTree=treePreferences&sNode-sharedTree=treePreferences HTTP/1.1" 200 11742 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHf1awxQzZrjAbVSVwAAABL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1249 16339 -% 1626890 2920 612854 4367 0 0 192.168.227.15 CH - [2015-05-29 09:59:06.722120] "GET /EMail/certificates.aspx? HTTP/1.1" 200 6326 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePreferences&sNode-sharedTree=treePreferences" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHf2qwxQzZrjAbVSV0AAABN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 589 6748 -% 1046105 1955 41209 2426 0 0 192.168.227.15 CH - [2015-05-29 09:59:06.786104] "GET /EMail/tree.aspx?sNode-sharedTree=treeCertManag HTTP/1.1" 200 11750 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePreferences&sNode-sharedTree=treePreferences" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHf2qwxQzZrjAbVSV4AAABQ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 866 12659 -% 1413808 2615 397546 6066 0 0 192.168.227.15 CH - [2015-05-29 09:59:12.768178] "GET /EMail/preferences.aspx HTTP/1.1" 200 7111 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeCertManag" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHf4KwxQzZrjAbVSWIAAABW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 807 7671 -% 839713 2885 832540 3616 0 0 192.168.227.15 CH - [2015-05-29 09:59:12.684733] "GET /EMail/tree.aspx?sNode-sharedTree=treeUserPreferences HTTP/1.1" 200 11750 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeCertManag" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHf4KwxQzZrjAbVSWEAAABP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 582 12521 -% 1430501 3311 413358 6130 0 0 192.168.227.15 CH - [2015-05-29 09:59:26.136543] "GET /EMail/overview.aspx HTTP/1.1" 200 5282 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeUserPreferences" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHf7qwxQzZrjAbVSWUAAABV TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1122 5842 -% 1222104 2904 215662 2775 0 0 192.168.227.15 CH - [2015-05-29 09:59:26.203443] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 11750 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeUserPreferences" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHf7qwxQzZrjAbVSWYAAABR TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 836 12659 -% 1484559 3912 467937 4842 0 0 192.168.227.15 CH - [2015-05-29 09:59:31.172459] "GET /EMail/MailHandler?service=downloadCert&type=root&token=2585040023024041E18 HTTP/1.1" 200 1165 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHf86wxQzZrjAbVSWgAAABY TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 581 1638 -% 1056461 3053 52328 167 0 0 192.168.227.15 CH - [2015-05-29 09:59:43.561310] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8391 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHf-6wxQzZrjAbUDBgAAAAp TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1121 8980 -% 1073407 2251 66129 4272 0 0 192.168.227.15 CH - [2015-05-29 09:59:43.625539] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 11750 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHf-6wxQzZrjAbVSWsAAABg TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 826 12659 -% 1546440 4094 529320 5476 0 0 192.168.227.15 CH - [2015-05-29 09:59:53.865549] "GET /EMail/moveToFolder.aspx?folderName=Inbox&mailId=3918_22 HTTP/1.1" 200 4466 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHgCawxQzZrjAbVSW0AAABf TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1131 5026 -% 1504151 2973 496827 3668 0 0 192.168.186.76 CH - [2015-05-29 10:00:48.186216] "GET /EMail/message.aspx?&mailId=3918_20&folderId=947_65&mailPos=0 HTTP/1.1" 200 16371 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHgQKwxQzZrjAbVSXgAAABv TLSv1.2 ECDHE-RSA-AES256-SHA384 1319 21120 -% 2410548 5748 371776 31067 3 0 192.168.227.15 CH - [2015-05-29 10:00:49.782964] "GET /EMail/overview.aspx HTTP/1.1" 200 5283 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHgQawxQzZrjAbVSXoAAABx TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1112 5843 -% 1277394 2319 271865 2675 0 0 192.168.227.15 CH - [2015-05-29 10:00:49.853404] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 11750 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHgQawxQzZrjAbVSXsAAABu TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 826 12659 -% 1599071 3816 581761 6134 0 0 192.168.186.76 CH - [2015-05-29 10:00:53.409298] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3918_20&folderId=947_65&attachmentId=3&token=25053765313973878E18 HTTP/1.1" 200 1040402 "https://www.example.com/EMail/message.aspx?&mailId=3918_20&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHgRawxQzZrjAbVSXwAAABw TLSv1.2 ECDHE-RSA-AES256-SHA384 806 1096546 -% 1532824 9017 144081 204 3 0 192.168.227.15 CH - [2015-05-29 10:00:54.296902] "GET /EMail/MailHandler?service=downloadCert&type=root&token=25273455347757804E18 HTTP/1.1" 200 1165 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHgRqwxQzZrjAbVSX0AAABs TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 582 1638 -% 695454 5021 689391 326 0 0 192.168.227.15 CH - [2015-05-29 10:01:27.345383] "GET /EMail/tree.aspx?sNode-sharedTree=treePerFolderOverView HTTP/1.1" 200 11750 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHgZ6wxQzZrjAbVSYAAAAB3 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 838 12659 -% 1365577 4297 349416 4334 0 0 192.168.227.15 CH - [2015-05-29 10:01:27.279086] "GET /EMail/folderOverview.aspx HTTP/1.1" 200 4635 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHgZ6wxQzZrjAbVSX8AAAB2 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1121 5195 -% 1633148 2896 627104 2408 0 0 192.168.186.76 CH - [2015-05-29 10:01:29.421582] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3918_20&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHgaawxQzZrjAbVSYEAAAB1 TLSv1.2 ECDHE-RSA-AES256-SHA384 8450 4545 -% 1664753 398498 245470 344 81 0 192.168.186.76 CH - [2015-05-29 10:01:31.097944] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3918_20&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHga6wxQzZrjAbVSYMAAAB5 TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 1085585 9356 66690 8225 3 0 192.168.227.15 CH - [2015-05-29 10:01:31.157008] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8391 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treePerFolderOverView" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHga6wxQzZrjAbVSYQAAAB0 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 563 8842 -% 1330721 3181 322364 4268 0 0 192.168.227.15 CH - [2015-05-29 10:01:31.157287] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 11750 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treePerFolderOverView" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHga6wxQzZrjAbVSYUAAAB9 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 580 12521 -% 1512074 3362 495207 6075 0 0 192.168.186.76 CH - [2015-05-29 10:01:32.941501] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9728 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHgbKwxQzZrjAbVSYYAAAB6 TLSv1.2 ECDHE-RSA-AES256-SHA384 662 10335 -% 1022020 6437 8422 5092 3 0 192.168.186.76 CH - [2015-05-29 10:01:32.995233] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHgbKwxQzZrjAbUDCQAAAA1 TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1175772 4420 160672 4584 3 0 192.168.186.76 CH - [2015-05-29 10:01:35.948507] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHgb6wxQzZrjAbUDCUAAAA4 TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1228781 13100 213194 256 3 0 192.168.186.76 CH - [2015-05-29 10:01:37.190180] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8511 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHgcawxQzZrjAbUDCYAAAA5 TLSv1.2 ECDHE-RSA-AES256-SHA384 726 9103 -% 1136066 7381 124274 2856 3 0 192.168.186.76 CH - [2015-05-29 10:01:38.972934] "GET /EMail/message.aspx?&mailId=3917_13&folderId=947_65&mailPos=0 HTTP/1.1" 200 16342 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHgcqwxQzZrjAbUDCcAAAA6 TLSv1.2 ECDHE-RSA-AES256-SHA384 726 17028 -% 2438134 6425 389121 39400 3 0 192.168.227.15 CH - [2015-05-29 10:01:44.431533] "GET /EMail/help.aspx?helpTopic=inbox HTTP/1.1" 200 3090 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHgeKwxQzZrjAbUDCkAAAA8 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1107 3644 -% 960754 3517 954809 1672 0 0 192.168.186.76 CH - [2015-05-29 10:01:44.990174] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3917_13&folderId=947_65&attachmentId=3&token=30039547024908283E18 HTTP/1.1" 200 601348 "https://www.example.com/EMail/message.aspx?&mailId=3917_13&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHgeKwxQzZrjAbUDCoAAAA9 TLSv1.2 ECDHE-RSA-AES256-SHA384 806 634180 -% 1374553 7405 96890 203 3 0 192.168.227.15 CH - [2015-05-29 10:01:45.616059] "GET /EMail/help/external/de/help_inbox.html HTTP/1.1" 200 962 "https://www.example.com/EMail/help.aspx?helpTopic=inbox" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHgeawxQzZrjAbVSYgAAAB7 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 809 1594 47% 1019915 2921 14654 1344 0 0 192.168.227.15 CH - [2015-05-29 10:01:45.546305] "GET /EMail/help/external/de/host.html HTTP/1.1" 200 440 "https://www.example.com/EMail/help.aspx?helpTopic=inbox" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHgeawxQzZrjAbUDCsAAAA7 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 550 933 64% 1096544 2278 93009 502 0 0 192.168.227.15 CH - [2015-05-29 10:01:46.746378] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/help/external/de/help_inbox.html" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHgeqwxQzZrjAbUDCwAAAAD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 500 2551 14% 660167 2989 655610 144 0 0 192.168.227.15 CH - [2015-05-29 10:02:04.692805] "GET /EMail/message.aspx?&mailId=3918_22&folderId=3506_17&mailPos=0 HTTP/1.1" 200 12872 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHgjKwxQzZrjAbVSYsAAABB TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1137 13491 -% 1388290 4176 375986 6630 0 0 192.168.108.124 CH - [2015-05-29 10:02:58.497004] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "11d04aef.5233a93cfc9ec" VjHgwqwxQzZrjAbVSZUAAABK TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 572 8359 -% 942741 2016 939560 238 0 0 192.168.186.76 CH - [2015-05-29 10:03:20.156592] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHg2KwxQzZrjAbVSZoAAABT TLSv1.2 ECDHE-RSA-AES256-SHA384 1261 13742 -% 2102450 4428 86794 5031 3 0 192.168.186.76 CH - [2015-05-29 10:03:23.629064] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHg26wxQzZrjAbVSZwAAABP TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 2676039 13721 659238 421 3 0 192.168.186.76 CH - [2015-05-29 10:03:26.317857] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7290 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "f139da27.52338400e3ec8" VjHg3qwxQzZrjAbVSZ0AAABS TLSv1.2 ECDHE-RSA-AES256-SHA384 726 0 -% 1176388 7140 163911 3452 3 0 192.168.227.15 CH - [2015-05-29 10:03:50.173358] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9527 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHg9qwxQzZrjAbVSaIAAABY TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1118 10116 -% 1202368 3344 195216 2950 0 0 192.168.227.15 CH - [2015-05-29 10:03:50.229158] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 11750 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHg9qwxQzZrjAbVSaMAAABZ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 823 12659 -% 1168784 3955 151155 6329 0 0 192.168.227.15 CH - [2015-05-29 10:03:51.457787] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHg96wxQzZrjAbVSaQAAABb TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 476 1878 -% 936340 2954 932485 180 0 0 192.168.227.15 CH - [2015-05-29 10:03:57.015831] "GET /EMail/message.aspx?&mailId=3918_22&folderId=3506_17&mailPos=1 HTTP/1.1" 200 13003 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHg-awxQzZrjAbVSaYAAABg TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 570 13484 -% 1277621 3054 269305 3968 0 0 192.168.192.35 CH - [2015-05-29 10:04:49.328588] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHhMawxQzZrjAbVSawAAABe TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1298 4447 -% 912553 7359 904305 170 0 0 192.168.192.35 CH - [2015-05-29 10:04:50.252310] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHhMqwxQzZrjAbVSa0AAABk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 492 3812 -% 876842 1946 871950 2360 0 0 192.168.192.35 CH - [2015-05-29 10:04:51.196390] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHhM6wxQzZrjAbVSa4AAABl TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 427 4141 -% 751940 1953 738822 10504 0 0 192.168.192.35 CH - [2015-05-29 10:04:51.246022] "GET /EMail/overview.aspx HTTP/1.1" 200 5302 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHhM6wxQzZrjAbVSbAAAABn TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1071 9750 -% 1407207 3057 401888 1690 0 0 192.168.192.35 CH - [2015-05-29 10:04:51.243726] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHhM6wxQzZrjAbVSa8AAABc TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1097 13218 -% 1996217 3688 985162 2728 0 0 192.168.227.15 CH - [2015-05-29 10:17:57.245401] "GET /EMail/draftsExternal.aspx?dir=desc HTTP/1.1" 200 7249 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHkRawxQzZrjAbUDHMAAAAH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 914 11497 -% 1078947 2143 73978 2318 0 0 192.168.227.15 CH - [2015-05-29 10:17:57.304003] "GET /EMail/tree.aspx?sNode-sharedTree=treeDrafts HTTP/1.1" 200 11750 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHkRawxQzZrjAbUDHQAAAAF TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 824 12659 -% 1487653 4118 470454 5787 0 0 192.168.227.15 CH - [2015-05-29 10:18:01.155654] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9527 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeDrafts" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHkSawxQzZrjAbUDHUAAAAJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 552 9978 -% 912297 5232 900891 5211 0 0 192.168.227.15 CH - [2015-05-29 10:18:01.158124] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 11750 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeDrafts" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHkSawxQzZrjAbUDHYAAAAK TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 569 12521 -% 1523495 4177 508050 4395 0 0 192.168.227.15 CH - [2015-05-29 10:18:20.793543] "GET /EMail/tree.aspx?sNode-sharedTree=treeDrafts HTTP/1.1" 200 11750 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHkXKwxQzZrjAbVShsAAABR TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1136 12659 -% 1411816 3010 397991 3903 0 0 192.168.192.35 CH - [2015-05-29 10:18:22.307041] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHkXqwxQzZrjAbVShwAAABX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 835 7838 -% 887253 2563 882851 1198 0 0 192.168.192.35 CH - [2015-05-29 10:18:23.252899] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHkX6wxQzZrjAbVSh8AAABb TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1066 737 56% 832289 1811 829636 268 0 0 192.168.192.35 CH - [2015-05-29 10:18:23.230809] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHkX6wxQzZrjAbVSh0AAABY TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 503 2427 14% 994864 3003 990527 154 0 0 192.168.192.35 CH - [2015-05-29 10:18:23.254915] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHkX6wxQzZrjAbVSiAAAABi TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1093 7804 22% 987753 2496 981797 150 0 0 192.168.192.35 CH - [2015-05-29 10:18:23.252642] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHkX6wxQzZrjAbVSh4AAABZ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1067 2019 22% 1029781 2123 26504 174 0 0 192.168.192.35 CH - [2015-05-29 10:18:23.256540] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHkX6wxQzZrjAbVSiEAAABg TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1098 4386 23% 1173630 2820 169122 170 0 0 192.168.227.15 CH - [2015-05-29 10:18:23.631871] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9527 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeDrafts" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHkX6wxQzZrjAbVSiIAAABj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 552 9978 -% 1076152 3401 68038 3641 0 0 192.168.227.15 CH - [2015-05-29 10:18:23.693983] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 11750 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeDrafts" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHkX6wxQzZrjAbUDHgAAAAL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 824 12659 -% 1513453 4809 497347 3943 0 0 192.168.192.35 CH - [2015-05-29 10:18:24.466091] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHkYKwxQzZrjAbVSiQAAABa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 427 4141 -% 886964 3058 875512 7624 0 0 192.168.192.35 CH - [2015-05-29 10:18:24.472289] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHkYKwxQzZrjAbVSiUAAABd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 429 5723 -% 1253181 2865 245810 3776 0 0 192.168.192.35 CH - [2015-05-29 10:18:24.475934] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHkYKwxQzZrjAbVSiYAAABh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 455 9192 -% 1430261 2832 419836 3194 0 0 192.168.192.35 CH - [2015-05-29 10:18:25.389089] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHkYawxQzZrjAbVSikAAABl TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 502 1876 22% 799557 2709 795868 160 0 0 192.168.192.35 CH - [2015-05-29 10:18:25.387975] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHkYawxQzZrjAbVSigAAABk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 505 2551 14% 874377 2891 870075 173 0 0 192.168.227.15 CH - [2015-05-29 10:18:25.123587] "GET /EMail/newMessage.aspx?msg=new HTTP/1.1" 200 12009 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeDrafts" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHkYawxQzZrjAbVSicAAABe TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 556 12461 -% 1220035 2092 190959 25230 3 3 192.168.192.35 CH - [2015-05-29 10:18:25.391772] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHkYawxQzZrjAbVSioAAABm TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 501 594 56% 1030955 1977 28222 141 0 0 192.168.192.35 CH - [2015-05-29 10:18:25.411045] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHkYawxQzZrjAbVSisAAABc TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1103 349 -% 1125248 2762 121333 191 0 0 192.168.192.35 CH - [2015-05-29 10:18:25.756392] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHkYawxQzZrjAbVSi0AAABo TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 544 205 -% 912358 5094 906027 284 0 0 192.168.192.35 CH - [2015-05-29 10:18:25.411123] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/header.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHkYawxQzZrjAbVSiwAAABn TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1095 7804 22% 1280451 2022 273991 232 0 0 192.168.227.15 CH - [2015-05-29 10:18:25.175565] "GET /EMail/tree.aspx?sNode-sharedTree=treeNewMsg HTTP/1.1" 200 11750 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeDrafts" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHkYawxQzZrjAbUDHkAAAAM TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 825 12659 -% 1563727 2554 549627 4599 0 0 192.168.192.35 CH - [2015-05-29 10:18:25.945068] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHkYawxQzZrjAbVSi4AAABq TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 586 205 -% 910120 4555 904563 191 0 0 192.168.227.15 CH - [2015-05-29 10:18:26.480756] "GET /EMail/scripts/tinymce/tinymce.min.js HTTP/1.1" 200 102049 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHkYqwxQzZrjAbVSi8AAABp TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 103460 33% 858982 2893 688330 165 0 0 192.168.227.15 CH - [2015-05-29 10:18:27.609757] "GET /EMail/scripts/tinymce/plugins/paste/plugin.min.js HTTP/1.1" 200 6239 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHkY6wxQzZrjAbVSjIAAABx TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 758 6908 40% 759894 2864 755391 136 0 0 192.168.227.15 CH - [2015-05-29 10:18:27.610392] "GET /EMail/scripts/tinymce/plugins/print/plugin.min.js HTTP/1.1" 200 182 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHkY6wxQzZrjAbVSjMAAABv TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 758 819 55% 828111 2784 824524 133 0 0 192.168.227.15 CH - [2015-05-29 10:18:27.531850] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2942 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHkY6wxQzZrjAbVSjEAAABt TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 537 3335 -% 912889 2901 904101 5277 0 0 192.168.227.15 CH - [2015-05-29 10:18:27.548434] "GET /EMail/scripts/tinymce/langs/de.js HTTP/1.1" 200 2969 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHkY6wxQzZrjAbUDHoAAAAO TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 487 3499 38% 1099881 1600 97245 148 0 0 192.168.227.15 CH - [2015-05-29 10:18:27.611882] "GET /EMail/scripts/tinymce/themes/modern/theme.min.js HTTP/1.1" 200 2651 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHkY6wxQzZrjAbUDHsAAAAP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 757 3319 41% 1233051 2640 229142 176 0 0 192.168.227.15 CH - [2015-05-29 10:18:27.611640] "GET /EMail/scripts/tinymce/plugins/preview/plugin.min.js HTTP/1.1" 200 737 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHkY6wxQzZrjAbVSjQAAABu TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 760 1375 51% 1265677 2732 261623 216 0 0 192.168.227.15 CH - [2015-05-29 10:18:28.530855] "GET /EMail/scripts/tinymce/plugins/fullpage/plugin.min.js HTTP/1.1" 200 2325 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHkZKwxQzZrjAbVSjYAAABs TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 506 2855 36% 869365 2832 865104 180 0 0 192.168.227.15 CH - [2015-05-29 10:18:28.539884] "GET /EMail/scripts/tinymce/plugins/charmap/plugin.min.js HTTP/1.1" 200 2698 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHkZKwxQzZrjAbVSjcAAABy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 505 3228 38% 869397 2848 865548 85 0 0 192.168.227.15 CH - [2015-05-29 10:18:28.518820] "GET /EMail/scripts/tinymce/plugins/searchreplace/plugin.min.js HTTP/1.1" 200 2586 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHkZKwxQzZrjAbVSjUAAABw TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 511 3116 40% 962914 2135 959825 116 0 0 192.168.227.15 CH - [2015-05-29 10:18:28.679082] "GET /EMail/scripts/tinymce/plugins/insertdatetime/plugin.min.js HTTP/1.1" 200 867 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHkZKwxQzZrjAbUDHwAAAAQ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 512 1367 42% 827442 2908 823558 141 0 0 192.168.227.15 CH - [2015-05-29 10:18:28.924140] "GET /EMail/scripts/tinymce/plugins/hr/plugin.min.js HTTP/1.1" 200 191 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHkZKwxQzZrjAbVSjgAAABz TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 500 690 53% 989905 2657 986233 177 0 0 192.168.227.15 CH - [2015-05-29 10:18:28.888524] "GET /EMail/scripts/tinymce/plugins/visualblocks/plugin.min.js HTTP/1.1" 200 525 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHkZKwxQzZrjAbUDH0AAAAR TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 510 1025 43% 1055155 3188 51029 133 0 0 192.168.227.15 CH - [2015-05-29 10:18:29.523553] "GET /EMail/scripts/tinymce/plugins/link/plugin.min.js HTTP/1.1" 200 1835 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHkZawxQzZrjAbVSjkAAAB3 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 502 2336 41% 591403 4435 585757 186 0 0 192.168.227.15 CH - [2015-05-29 10:18:29.538127] "GET /EMail/scripts/tinymce/plugins/textcolor/plugin.min.js HTTP/1.1" 200 1647 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHkZawxQzZrjAbVSjsAAAB4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 507 2148 44% 723595 2053 720758 133 0 0 192.168.227.15 CH - [2015-05-29 10:18:29.538395] "GET /EMail/scripts/tinymce/plugins/visualchars/plugin.min.js HTTP/1.1" 200 608 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHkZawxQzZrjAbUDH4AAAAS TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 509 1108 54% 869060 1864 866355 138 0 0 192.168.227.15 CH - [2015-05-29 10:18:29.524705] "GET /EMail/scripts/tinymce/plugins/anchor/plugin.min.js HTTP/1.1" 200 339 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHkZawxQzZrjAbVSjoAAAB2 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 504 838 63% 1137666 3695 132960 208 0 0 192.168.227.15 CH - [2015-05-29 10:18:30.041924] "GET /EMail/scripts/tinymce/plugins/image/plugin.min.js HTTP/1.1" 200 2136 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHkZqwxQzZrjAbVSjwAAAB1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 503 2666 42% 878293 4455 872354 358 0 0 192.168.227.15 CH - [2015-05-29 10:18:30.048313] "GET /EMail/scripts/tinymce/plugins/table/plugin.min.js HTTP/1.1" 200 9181 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHkZqwxQzZrjAbUDH8AAAAU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 503 10005 32% 897714 2778 891074 136 0 0 192.168.227.15 CH - [2015-05-29 10:18:31.092189] "GET /EMail/scripts/tinymce/skins/lightgray/content.min.css HTTP/1.1" 200 588 "-" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHkZ6wxQzZrjAbUDIAAAAAV TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 459 1081 38% 573854 2864 570065 139 0 0 192.168.227.15 CH - [2015-05-29 10:18:31.028105] "GET /EMail/scripts/tinymce/skins/lightgray/skin.min.css HTTP/1.1" 200 6013 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHkZ6wxQzZrjAbVSj0AAAB5 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 519 6736 17% 954512 2160 947170 198 0 0 192.168.227.15 CH - [2015-05-29 10:18:31.097903] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5089 "-" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHkZ6wxQzZrjAbVSj4AAAB0 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 434 6740 -% 1072851 2202 0 0 0 0 192.168.227.15 CH - [2015-05-29 10:18:32.164939] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce-small.woff HTTP/1.1" 200 7848 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHkaKwxQzZrjAbVSj8AAAB9 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 516 8276 -% 984869 3231 980797 132 0 0 192.168.227.15 CH - [2015-05-29 10:19:43.295382] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHkr6wxQzZrjAbVSkkAAABE TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1604 566 -% 999803 9313 986975 153 18 0 192.168.227.15 CH - [2015-05-29 10:19:44.403367] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=john.smith@ourindustry.com&bcc= HTTP/1.1" 200 4109 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHksKwxQzZrjAbVSkoAAABF TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 656 4531 -% 1049456 6247 30620 11894 0 0 192.168.227.15 CH - [2015-05-29 10:22:06.665965] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7358 "-" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHlPqwxQzZrjAbVSl4AAABY TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1065 7918 -% 1018195 2535 11385 3619 0 0 192.168.227.15 CH - [2015-05-29 10:22:21.133513] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHlTawxQzZrjAbVSmIAAABj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1321 559 -% 966626 3387 962295 236 0 0 192.168.227.15 CH - [2015-05-29 10:22:22.203655] "GET /EMail/main.aspx HTTP/1.1" 200 3390 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHlTqwxQzZrjAbVSmMAAABa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 578 3806 -% 995495 1960 991287 1559 0 0 192.168.227.15 CH - [2015-05-29 10:22:23.386554] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHlT6wxQzZrjAbVSmQAAABd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 516 4128 -% 844391 2592 831939 9303 0 0 192.168.227.15 CH - [2015-05-29 10:22:23.464835] "GET /EMail/overview.aspx HTTP/1.1" 200 5287 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHlT6wxQzZrjAbVSmYAAABl TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 773 5847 -% 1123586 3626 117426 1933 0 0 192.168.227.15 CH - [2015-05-29 10:22:23.464201] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHlT6wxQzZrjAbVSmUAAABh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 799 9317 -% 2006716 2540 994093 5220 0 0 192.168.227.15 CH - [2015-05-29 10:22:32.461128] "GET /EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle HTTP/1.1" 200 9400 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHlWKwxQzZrjAbVSmkAAABm TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1185 10221 -% 1491134 3673 477539 4801 0 0 192.168.227.15 CH - [2015-05-29 10:22:34.096259] "GET /EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle HTTP/1.1" 200 9400 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHlWqwxQzZrjAbVSmoAAABo TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 873 10221 -% 1368923 5258 353007 5455 0 0 192.168.227.15 CH - [2015-05-29 10:22:38.539261] "GET /EMail/folderOverview.aspx HTTP/1.1" 200 4635 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHlXqwxQzZrjAbVSmwAAABq TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 598 5057 -% 1664589 2929 658418 2498 0 0 192.168.227.15 CH - [2015-05-29 10:22:38.584963] "GET /EMail/tree.aspx?sNode-sharedTree=treePerFolderOverView HTTP/1.1" 200 9409 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHlXqwxQzZrjAbVSm0AAABr TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 882 10230 -% 1702158 2466 689629 4941 0 0 192.168.227.15 CH - [2015-05-29 10:22:57.595381] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/folderOverview.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHlcawxQzZrjAbUDJQAAAAp TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1398 4167 -% 1082608 4464 77019 243 0 0 192.168.227.15 CH - [2015-05-29 10:22:58.748070] "GET /EMail/folderOverview.aspx HTTP/1.1" 200 4887 "https://www.example.com/EMail/folderOverview.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHlcqwxQzZrjAbUDJYAAAAs TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 565 5309 -% 1515282 3393 508313 2713 0 0 192.168.227.15 CH - [2015-05-29 10:23:03.722064] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9528 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treePerFolderOverView" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHld6wxQzZrjAbUDJgAAAAt TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 563 9979 -% 1236606 3640 228945 3172 0 0 192.168.227.15 CH - [2015-05-29 10:23:03.793086] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 9409 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treePerFolderOverView" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHld6wxQzZrjAbVSnAAAABv TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 835 10230 -% 1501613 2565 490966 3196 0 0 192.168.227.15 CH - [2015-05-29 10:23:11.630059] "GET /EMail/message.aspx?&mailId=3917_14&folderId=3506_17&mailPos=0 HTTP/1.1" 200 13004 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHlf6wxQzZrjAbUDJoAAAAw TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1137 13623 -% 1198785 3088 190506 4270 0 0 192.168.227.15 CH - [2015-05-29 10:23:28.583974] "GET /EMail/MailHandler?service=downloadEml&msgId=3917_14&folderId=3506_17&token=54808161455840369E18 HTTP/1.1" 200 6637 "https://www.example.com/EMail/message.aspx?&mailId=3917_14&folderId=3506_17&mailPos=0" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "168b2f46.5233a73a8467f" VjHlkKwxQzZrjAbUDJwAAAAu TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1211 7270 -% 1636227 5323 629769 196 0 0 192.168.186.76 CH - [2015-05-29 10:28:33.247790] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9636 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHmwawxQzZrjAbVSpcAAABR TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 14384 -% 1289986 4411 280611 3406 3 0 192.168.186.76 CH - [2015-05-29 10:28:46.445965] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5881 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3918_28&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHmzqwxQzZrjAbUDLsAAAAQ TLSv1.2 ECDHE-RSA-AES256-SHA384 1303 13742 -% 955691 6886 0 0 3 0 192.168.186.76 CH - [2015-05-29 10:31:45.716008] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3918_26&folderId=947_65&attachmentId=3&token=37641206187978086E18 HTTP/1.1" 200 954696 "https://www.example.com/EMail/message.aspx?&mailId=3918_26&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHngawxQzZrjAbUDMkAAAAg TLSv1.2 ECDHE-RSA-AES256-SHA384 1399 1009749 -% 1528728 8882 159815 224 3 0 192.168.186.76 CH - [2015-05-29 10:31:56.412635] "GET /EMail/newMessage.aspx?action=reply&mailId=3918_26&folderId=947_65&showPics=false HTTP/1.1" 200 23127 "https://www.example.com/EMail/message.aspx?&mailId=3918_26&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHnjKwxQzZrjAbVSrEAAABy TLSv1.2 ECDHE-RSA-AES256-SHA384 1367 28042 -% 1311490 6524 246342 56000 6 3 192.168.186.76 CH - [2015-05-29 10:31:57.805992] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3918_26&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHnjawxQzZrjAbVSrIAAABz TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 900093 6748 879255 12077 3 0 192.168.186.76 CH - [2015-05-29 10:31:57.983579] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5881 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3918_26&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHnjawxQzZrjAbVSrQAAAB4 TLSv1.2 ECDHE-RSA-AES256-SHA384 1228 9827 -% 928753 6540 0 0 3 0 192.168.110.183 CH - [2015-05-29 10:36:13.482788] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "63287f03.522b276319694" VjHojawxQzZrjAbVStMAAABX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 661 8286 -% 997256 4109 991398 196 0 0 192.168.192.35 CH - [2015-05-29 10:41:06.882572] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHpsqwxQzZrjAbVSvgAAAB7 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 835 7838 -% 1065585 5087 57848 1848 0 0 192.168.192.35 CH - [2015-05-29 10:41:07.975282] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHps6wxQzZrjAbVSvkAAAB@ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 503 2427 14% 1062200 3050 57438 196 0 0 192.168.192.35 CH - [2015-05-29 10:41:10.017420] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHptqwxQzZrjAbVSvoAAAB- TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 502 1876 22% 845144 3493 840293 349 0 0 192.168.186.76 CH - [2015-05-29 10:43:38.687632] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8503 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHqSqwxQzZrjAbVSxIAAABX TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 13179 -% 996336 4333 985213 4600 3 0 192.168.186.76 CH - [2015-05-29 10:43:38.673877] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHqSqwxQzZrjAbVSxEAAABR TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1436139 8831 417036 4187 3 0 192.168.186.76 CH - [2015-05-29 10:43:41.287272] "GET /EMail/message.aspx?&mailId=3918_31&folderId=947_65&mailPos=0 HTTP/1.1" 200 16111 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHqTawxQzZrjAbVSxMAAABf TLSv1.2 ECDHE-RSA-AES256-SHA384 710 16788 -% 2570848 9488 531045 27059 3 0 192.168.186.76 CH - [2015-05-29 10:44:27.661073] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3918_31&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHqe6wxQzZrjAbVSxsAAABl TLSv1.2 ECDHE-RSA-AES256-SHA384 1319 7526 -% 831017 5955 815315 7151 3 0 192.168.186.76 CH - [2015-05-29 10:44:34.609334] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3918_31&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHqgqwxQzZrjAbVSx0AAABk TLSv1.2 ECDHE-RSA-AES256-SHA384 8274 4545 -% 1600423 378919 201993 172 81 0 192.168.186.76 CH - [2015-05-29 10:44:36.242862] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3918_31&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHqhKwxQzZrjAbVSx8AAABm TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 949190 8137 932590 6968 3 0 192.168.186.76 CH - [2015-05-29 10:44:38.686465] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8503 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHqhqwxQzZrjAbVSyAAAABc TLSv1.2 ECDHE-RSA-AES256-SHA384 662 9103 -% 1195196 5007 183913 4304 3 0 192.168.186.76 CH - [2015-05-29 10:44:38.692394] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHqhqwxQzZrjAbUDQUAAAAf TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1353803 7427 337755 3381 3 0 192.168.186.76 CH - [2015-05-29 10:44:41.848065] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHqiawxQzZrjAbUDQYAAAAe TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1153327 18274 133138 157 3 0 192.168.186.76 CH - [2015-05-29 10:44:43.013506] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7290 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjHqi6wxQzZrjAbUDQcAAAAg TLSv1.2 ECDHE-RSA-AES256-SHA384 726 7802 -% 1043270 7668 29521 3841 3 0 192.168.192.35 CH - [2015-05-29 10:52:03.548483] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHsQ6wxQzZrjAbVS2AAAABn TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1173 8122 23% 990865 1768 987277 219 0 0 192.168.192.35 CH - [2015-05-29 10:52:03.543587] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHsQ6wxQzZrjAbVS14AAABm TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1142 5902 22% 1201061 2171 197606 152 0 0 192.168.192.35 CH - [2015-05-29 10:52:03.544430] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHsQ6wxQzZrjAbVS18AAABo TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1141 4620 56% 1222793 2309 219646 161 0 0 192.168.192.35 CH - [2015-05-29 10:52:03.550014] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHsQ6wxQzZrjAbVS2EAAABc TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1168 12018 22% 1235138 2003 228802 146 0 0 192.168.192.35 CH - [2015-05-29 10:52:04.826213] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHsRKwxQzZrjAbVS2QAAABr TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 429 5723 -% 719756 2907 712621 3381 0 0 192.168.192.35 CH - [2015-05-29 10:52:04.817500] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHsRKwxQzZrjAbVS2MAAABp TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 427 4141 -% 752958 2954 740904 8278 0 0 192.168.192.35 CH - [2015-05-29 10:52:05.569525] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHsRawxQzZrjAbVS2cAAABt TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 504 1876 22% 875645 2011 872546 244 0 0 192.168.192.35 CH - [2015-05-29 10:52:04.829906] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHsRKwxQzZrjAbVS2UAAABx TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 455 9192 -% 1931326 2403 924053 2883 0 0 192.168.192.35 CH - [2015-05-29 10:52:05.568420] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHsRawxQzZrjAbVS2YAAABv TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 507 2551 14% 1303201 2523 299122 166 0 0 192.168.192.35 CH - [2015-05-29 10:52:05.592580] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHsRawxQzZrjAbVS2gAAABw TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 536 206 -% 1426872 1746 424464 193 0 0 192.168.192.35 CH - [2015-05-29 10:52:05.606576] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHsRawxQzZrjAbVS2oAAABs TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1186 4231 -% 1443578 2669 440069 190 0 0 192.168.192.35 CH - [2015-05-29 10:52:05.605546] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHsRawxQzZrjAbVS2kAAABu TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1172 12018 22% 1616853 1674 610823 216 0 0 192.168.192.35 CH - [2015-05-29 10:52:06.797355] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHsRqwxQzZrjAbVS2sAAABy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 586 205 -% 705998 2899 702207 247 0 0 192.168.146.78 CH - [2015-05-29 10:56:38.381981] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7350 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "41a874d9.5233b53bb559d" VjHtVqwxQzZrjAbVS4wAAABV TLSv1.2 ECDHE-RSA-AES128-SHA256 703 11875 -% 884074 2066 877307 3959 0 0 192.168.146.78 CH - [2015-05-29 10:56:41.842326] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "41a874d9.5233b53bb559d" VjHtWawxQzZrjAbVS40AAABX TLSv1.2 ECDHE-RSA-AES128-SHA256 678 453 -% 1035908 3955 30693 238 0 0 192.168.146.78 CH - [2015-05-29 10:56:42.959689] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "41a874d9.5233b53bb559d" VjHtWqwxQzZrjAbVS44AAABR TLSv1.2 ECDHE-RSA-AES128-SHA256 534 3882 -% 825644 1947 821616 1300 0 0 192.168.146.78 CH - [2015-05-29 10:56:43.988271] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "41a874d9.5233b53bb559d" VjHtW6wxQzZrjAbVS48AAABf TLSv1.2 ECDHE-RSA-AES128-SHA256 486 4202 -% 992921 3048 979059 10126 0 0 192.168.146.78 CH - [2015-05-29 10:56:44.095006] "GET /EMail/overview.aspx HTTP/1.1" 200 5304 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "41a874d9.5233b53bb559d" VjHtXKwxQzZrjAbVS5AAAABb TLSv1.2 ECDHE-RSA-AES128-SHA256 772 5963 -% 1032226 2347 27470 1735 0 0 192.168.146.78 CH - [2015-05-29 10:56:44.255710] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "41a874d9.5233b53bb559d" VjHtXKwxQzZrjAbVS5EAAABi TLSv1.2 ECDHE-RSA-AES128-SHA256 804 9683 -% 1597895 2549 588154 2767 0 0 192.168.146.78 CH - [2015-05-29 10:56:47.057249] "GET /EMail/inbox.aspx HTTP/1.1" 200 51491 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "41a874d9.5233b53bb559d" VjHtX6wxQzZrjAbVS5IAAABY TLSv1.2 ECDHE-RSA-AES128-SHA256 486 52657 -% 2266511 3033 730406 22419 0 0 192.168.192.35 CH - [2015-05-29 10:59:55.038050] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHuG6wxQzZrjAbVS6kAAABy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 835 7838 -% 942982 2556 938643 1232 0 0 192.168.192.35 CH - [2015-05-29 10:59:56.009002] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHuHKwxQzZrjAbVS6oAAAB3 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 503 2427 14% 1001405 2997 0 163 0 0 192.168.192.35 CH - [2015-05-29 10:59:57.458199] "GET /EMail/overview.aspx HTTP/1.1" 200 5300 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHuHawxQzZrjAbVS6sAAABz TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 429 5722 -% 1300949 3097 294720 2195 0 0 192.168.192.35 CH - [2015-05-29 10:59:58.782520] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHuHqwxQzZrjAbVS60AAAB2 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 544 205 -% 1247105 2880 243262 280 0 0 192.168.192.35 CH - [2015-05-29 11:00:00.050472] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHuIKwxQzZrjAbVS64AAAB1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 540 206 -% 802122 4464 796530 153 0 0 192.168.192.35 CH - [2015-05-29 11:00:01.723736] "GET /EMail/inbox.aspx HTTP/1.1" 200 8590 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHuIawxQzZrjAbVS68AAAB5 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 430 9041 -% 1118655 3375 111300 2860 0 0 192.168.192.35 CH - [2015-05-29 11:00:04.531523] "GET /EMail/message.aspx?&mailId=3917_22&folderId=540_81&mailPos=0 HTTP/1.1" 200 11191 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHuJKwxQzZrjAbVS7EAAAB8 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 471 11672 -% 1349573 3074 324172 21475 0 0 192.168.192.35 CH - [2015-05-29 11:00:09.051413] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3917_22&folderId=540_81&attachmentId=2&token=65529296044504678E18 HTTP/1.1" 200 55675 "https://www.example.com/EMail/message.aspx?&mailId=3917_22&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHuKawxQzZrjAbVS7IAAAB6 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 576 57182 -% 1199909 6264 170691 200 0 0 192.168.213.21 CH - [2015-05-29 11:02:06.422167] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7383 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e921b4b6.5233b6748d497" VjHunqwxQzZrjAbVS8MAAABO TLSv1 ECDHE-RSA-AES256-SHA 704 11809 -% 860160 2208 854103 3030 0 0 192.168.213.21 CH - [2015-05-29 11:02:07.493865] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e921b4b6.5233b6748d497" VjHun6wxQzZrjAbUDVoAAAA4 TLSv1 ECDHE-RSA-AES256-SHA 869 358 -% 957229 2130 954422 160 0 0 192.168.213.21 CH - [2015-05-29 11:02:07.509412] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e921b4b6.5233b6748d497" VjHun6wxQzZrjAbVS8UAAABT TLSv1 ECDHE-RSA-AES256-SHA 901 358 -% 1025477 2141 22563 203 0 0 192.168.213.21 CH - [2015-05-29 11:02:07.495097] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e921b4b6.5233b6748d497" VjHun6wxQzZrjAbVS8QAAABN TLSv1 ECDHE-RSA-AES256-SHA 869 358 -% 1071420 1879 68762 209 0 0 192.168.213.21 CH - [2015-05-29 11:02:07.510405] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e921b4b6.5233b6748d497" VjHun6wxQzZrjAbVS8YAAABQ TLSv1 ECDHE-RSA-AES256-SHA 885 358 -% 1146299 2348 143175 166 0 0 192.168.213.21 CH - [2015-05-29 11:02:08.853872] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e921b4b6.5233b6748d497" VjHuoKwxQzZrjAbVS8cAAABP TLSv1 ECDHE-RSA-AES256-SHA 694 213 -% 890915 2528 887416 204 0 0 192.168.213.21 CH - [2015-05-29 11:02:19.363147] "GET /EMail/main.aspx HTTP/1.1" 200 3415 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e921b4b6.5233b6748d497" VjHuq6wxQzZrjAbVS8oAAABV TLSv1 ECDHE-RSA-AES256-SHA 872 7670 -% 922218 2228 917567 1756 0 0 192.168.213.21 CH - [2015-05-29 11:02:20.653396] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e921b4b6.5233b6748d497" VjHurKwxQzZrjAbVS80AAABf TLSv1 ECDHE-RSA-AES256-SHA 840 7990 -% 1109306 1983 96140 10624 0 0 192.168.213.21 CH - [2015-05-29 11:02:20.645929] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e921b4b6.5233b6748d497" VjHurKwxQzZrjAbVS8wAAABb TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 2027006 2676 15118 4612 0 0 192.168.213.21 CH - [2015-05-29 11:02:22.938279] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e921b4b6.5233b6748d497" VjHurqwxQzZrjAbVS84AAABZ TLSv1 ECDHE-RSA-AES256-SHA 984 4049 -% 601324 2686 597794 216 0 0 192.168.213.21 CH - [2015-05-29 11:02:26.679495] "GET /EMail/images/attach.gif HTTP/1.1" 304 - "https://www.example.com/EMail/draftsExternal.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e921b4b6.5233b6748d497" VjHusqwxQzZrjAbVS9AAAABd TLSv1 ECDHE-RSA-AES256-SHA 952 4049 -% 900224 1989 897592 152 0 0 192.168.213.21 CH - [2015-05-29 11:02:28.877767] "GET /EMail/newMessage.aspx?msg=new HTTP/1.1" 200 12054 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e921b4b6.5233b6748d497" VjHutKwxQzZrjAbVS9EAAABl TLSv1 ECDHE-RSA-AES256-SHA 872 16400 -% 1049476 2608 20335 24451 3 3 192.168.213.21 CH - [2015-05-29 11:02:30.178868] "GET /EMail/scripts/tinymce/tinymce.min.js HTTP/1.1" 200 102871 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e921b4b6.5233b6748d497" VjHutqwxQzZrjAbVS9IAAABe TLSv1 ECDHE-RSA-AES256-SHA 856 110424 34% 918922 1998 883338 194 0 0 192.168.213.21 CH - [2015-05-29 11:02:31.366476] "GET /EMail/scripts/tinymce/plugins/searchreplace/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e921b4b6.5233b6748d497" VjHut6wxQzZrjAbVS9MAAABn TLSv1 ECDHE-RSA-AES256-SHA 885 358 -% 839393 2055 836545 193 0 0 192.168.213.21 CH - [2015-05-29 11:02:31.381483] "GET /EMail/scripts/tinymce/plugins/insertdatetime/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e921b4b6.5233b6748d497" VjHut6wxQzZrjAbUDVwAAAA2 TLSv1 ECDHE-RSA-AES256-SHA 885 358 -% 1108105 1858 105501 184 0 0 192.168.213.21 CH - [2015-05-29 11:02:31.388817] "GET /EMail/scripts/tinymce/plugins/visualblocks/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e921b4b6.5233b6748d497" VjHut6wxQzZrjAbVS9QAAABr TLSv1 ECDHE-RSA-AES256-SHA 885 358 -% 1100807 1961 98212 156 0 0 192.168.213.21 CH - [2015-05-29 11:02:31.395555] "GET /EMail/scripts/tinymce/plugins/fullpage/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e921b4b6.5233b6748d497" VjHut6wxQzZrjAbUDV0AAAA6 TLSv1 ECDHE-RSA-AES256-SHA 885 358 -% 1133758 2847 130106 140 0 0 192.168.213.21 CH - [2015-05-29 11:02:31.395298] "GET /EMail/scripts/tinymce/plugins/hr/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e921b4b6.5233b6748d497" VjHut6wxQzZrjAbVS9UAAABo TLSv1 ECDHE-RSA-AES256-SHA 885 358 -% 1238560 1855 235925 203 0 0 192.168.213.21 CH - [2015-05-29 11:02:31.431308] "GET /EMail/scripts/tinymce/themes/modern/theme.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e921b4b6.5233b6748d497" VjHut6wxQzZrjAbVS9cAAABm TLSv1 ECDHE-RSA-AES256-SHA 968 4049 -% 1554902 2905 551083 199 0 0 192.168.213.21 CH - [2015-05-29 11:02:32.556257] "GET /EMail/scripts/tinymce/plugins/image/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e921b4b6.5233b6748d497" VjHuuKwxQzZrjAbVS9sAAABw TLSv1 ECDHE-RSA-AES256-SHA 885 358 -% 621053 3091 616806 298 0 0 192.168.213.21 CH - [2015-05-29 11:02:31.429539] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e921b4b6.5233b6748d497" VjHut6wxQzZrjAbVS9YAAABq TLSv1 ECDHE-RSA-AES256-SHA 856 7190 -% 1762932 1938 748963 11497 0 0 192.168.213.21 CH - [2015-05-29 11:02:31.459796] "GET /EMail/scripts/tinymce/plugins/textcolor/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e921b4b6.5233b6748d497" VjHut6wxQzZrjAbVS9gAAABc TLSv1 ECDHE-RSA-AES256-SHA 885 358 -% 1782167 2642 778699 154 0 0 192.168.213.21 CH - [2015-05-29 11:02:31.478706] "GET /EMail/scripts/tinymce/plugins/link/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e921b4b6.5233b6748d497" VjHut6wxQzZrjAbVS9kAAABp TLSv1 ECDHE-RSA-AES256-SHA 968 4049 -% 1782391 1815 780005 134 0 0 192.168.213.21 CH - [2015-05-29 11:02:32.324793] "GET /EMail/scripts/tinymce/plugins/visualchars/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e921b4b6.5233b6748d497" VjHuuKwxQzZrjAbVS9oAAABx TLSv1 ECDHE-RSA-AES256-SHA 885 358 -% 948118 3150 944047 151 0 0 192.168.213.21 CH - [2015-05-29 11:02:33.369877] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5473 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e921b4b6.5233b6748d497" VjHuuawxQzZrjAbVS90AAABz TLSv1 ECDHE-RSA-AES256-SHA 550 7314 -% 915296 2715 0 0 0 0 192.168.213.21 CH - [2015-05-29 11:02:33.372825] "GET /EMail/scripts/tinymce/skins/lightgray/content.min.css HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e921b4b6.5233b6748d497" VjHuuawxQzZrjAbVS94AAAB4 TLSv1 ECDHE-RSA-AES256-SHA 662 213 -% 1075710 1792 73195 232 0 0 192.168.213.21 CH - [2015-05-29 11:05:07.034467] "GET /EMail/attachost.aspx HTTP/1.1" 200 4989 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e921b4b6.5233b6748d497" VjHvU6wxQzZrjAbVS@8AAABJ TLSv1 ECDHE-RSA-AES256-SHA 709 5563 -% 1032201 2963 26266 2180 0 0 192.168.213.21 CH - [2015-05-29 11:05:17.738738] "GET /EMail/attachost.aspx HTTP/1.1" 200 6445 "https://www.example.com/EMail/attachments.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e921b4b6.5233b6748d497" VjHvXawxQzZrjAbVS-IAAABK TLSv1 ECDHE-RSA-AES256-SHA 840 10710 -% 1004351 2006 0 2040 0 0 192.168.213.21 CH - [2015-05-29 11:05:30.883296] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc= HTTP/1.1" 200 3928 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e921b4b6.5233b6748d497" VjHvaqwxQzZrjAbVS-UAAABN TLSv1 ECDHE-RSA-AES256-SHA 920 8198 -% 908655 3960 897162 6953 0 0 192.168.213.21 CH - [2015-05-29 11:05:34.683998] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e921b4b6.5233b6748d497" VjHvbqwxQzZrjAbVS-cAAABS TLSv1 ECDHE-RSA-AES256-SHA 920 4523 75% 842414 2030 839385 315 0 0 192.168.213.21 CH - [2015-05-29 11:05:36.883959] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e921b4b6.5233b6748d497" VjHvcKwxQzZrjAbVS-kAAABX TLSv1 ECDHE-RSA-AES256-SHA 776 11622 -% 1033803 2832 26443 3852 0 0 192.168.213.21 CH - [2015-05-29 11:05:38.094178] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e921b4b6.5233b6748d497" VjHvcqwxQzZrjAbVS-sAAABi TLSv1 ECDHE-RSA-AES256-SHA 821 358 -% 1050302 2149 47525 155 0 0 192.168.213.21 CH - [2015-05-29 11:05:38.102027] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e921b4b6.5233b6748d497" VjHvcqwxQzZrjAbVS-0AAABg TLSv1 ECDHE-RSA-AES256-SHA 853 358 -% 1045331 1848 42861 98 0 0 192.168.213.21 CH - [2015-05-29 11:05:38.094679] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e921b4b6.5233b6748d497" VjHvcqwxQzZrjAbVS-wAAABY TLSv1 ECDHE-RSA-AES256-SHA 837 358 -% 1215489 2364 212501 161 0 0 192.168.213.21 CH - [2015-05-29 11:05:38.093296] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e921b4b6.5233b6748d497" VjHvcqwxQzZrjAbVS-oAAABb TLSv1 ECDHE-RSA-AES256-SHA 821 358 -% 1216939 3280 212986 153 0 0 192.168.213.21 CH - [2015-05-29 11:05:38.102364] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e921b4b6.5233b6748d497" VjHvcqwxQzZrjAbVS-4AAABZ TLSv1 ECDHE-RSA-AES256-SHA 853 4245 23% 1398226 2181 394073 177 0 0 192.168.213.21 CH - [2015-05-29 11:05:38.187591] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e921b4b6.5233b6748d497" VjHvcqwxQzZrjAbVS-8AAABf TLSv1 ECDHE-RSA-AES256-SHA 904 6267 14% 1360423 2888 355366 509 0 0 192.168.192.35 CH - [2015-05-29 11:10:36.583005] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHwnKwxQzZrjAbUDYMAAAAj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 835 7838 -% 1014849 2992 9975 1227 0 0 192.168.192.35 CH - [2015-05-29 11:10:37.623658] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHwnawxQzZrjAbUDYQAAAAk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 503 2427 14% 854118 2935 849276 203 0 0 192.168.192.35 CH - [2015-05-29 11:10:39.794321] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjHwn6wxQzZrjAbUDYUAAAAm TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 504 1876 22% 1018646 3037 14554 155 0 0 192.168.32.7 CH - [2015-05-29 11:11:00.688589] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "4d00ce82.5233b872116cd" VjHwtKwxQzZrjAbVTCsAAABH TLSv1.2 ECDHE-RSA-AES128-SHA256 611 5555 -% 1847 848 61 159 0 0 192.168.213.22 CH - [2015-05-29 11:20:31.859475] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7383 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjHy76wxQzZrjAbVTHkAAABY TLSv1 ECDHE-RSA-AES256-SHA 704 11809 -% 933757 1491 927681 3937 0 0 192.168.213.22 CH - [2015-05-29 11:20:32.997242] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjHy8KwxQzZrjAbVTHoAAABb TLSv1 ECDHE-RSA-AES256-SHA 662 213 -% 781553 4210 776506 157 0 0 192.168.213.22 CH - [2015-05-29 11:20:33.036255] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjHy8awxQzZrjAbVTHwAAABj TLSv1 ECDHE-RSA-AES256-SHA 901 358 -% 763732 1864 761325 160 0 0 192.168.213.22 CH - [2015-05-29 11:20:33.041521] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjHy8awxQzZrjAbUDbEAAAAW TLSv1 ECDHE-RSA-AES256-SHA 885 358 -% 965386 1778 962814 202 0 0 192.168.213.22 CH - [2015-05-29 11:20:33.033165] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjHy8awxQzZrjAbVTHsAAABf TLSv1 ECDHE-RSA-AES256-SHA 805 4245 23% 1055666 3231 49646 250 0 0 192.168.213.22 CH - [2015-05-29 11:20:33.052985] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjHy8awxQzZrjAbUDbIAAAAV TLSv1 ECDHE-RSA-AES256-SHA 869 358 -% 1283157 1942 280442 206 0 0 192.168.213.22 CH - [2015-05-29 11:20:33.036749] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjHy8awxQzZrjAbVTH0AAABZ TLSv1 ECDHE-RSA-AES256-SHA 869 358 -% 1300568 2225 297469 267 0 0 192.168.213.22 CH - [2015-05-29 11:20:34.449550] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjHy8qwxQzZrjAbUDbMAAAAT TLSv1 ECDHE-RSA-AES256-SHA 694 213 -% 854245 2041 851545 156 0 0 192.168.213.22 CH - [2015-05-29 11:20:35.511790] "GET /EMail/images/active.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjHy86wxQzZrjAbUDbQAAAAX TLSv1 ECDHE-RSA-AES256-SHA 694 213 -% 1037458 2003 34716 185 0 0 192.168.213.22 CH - [2015-05-29 11:20:35.531840] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "675101f3.5233ba9648040" VjHy86wxQzZrjAbVTH8AAABa TLSv1 ECDHE-RSA-AES256-SHA 736 5569 -% 1038984 3482 33929 165 3 0 192.168.213.22 CH - [2015-05-29 11:20:46.785987] "GET /EMail/overview.aspx HTTP/1.1" 200 6448 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjHy-qwxQzZrjAbVTIEAAABl TLSv1 ECDHE-RSA-AES256-SHA 840 10726 -% 940865 1867 936433 2055 0 0 192.168.213.22 CH - [2015-05-29 11:20:46.785221] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjHy-qwxQzZrjAbVTIAAAABW TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 2039353 2634 29471 2829 0 0 192.168.213.22 CH - [2015-05-29 11:20:49.186272] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjHzAawxQzZrjAbVTIIAAABk TLSv1 ECDHE-RSA-AES256-SHA 984 4049 -% 893010 3186 888780 233 0 0 192.168.213.22 CH - [2015-05-29 11:20:51.675919] "GET /EMail/images/attach.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjHzA6wxQzZrjAbVTIMAAABt TLSv1 ECDHE-RSA-AES256-SHA 936 4049 -% 1056232 1815 53757 152 0 0 192.168.213.22 CH - [2015-05-29 11:20:51.674919] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjHzA6wxQzZrjAbUDbgAAAAb TLSv1 ECDHE-RSA-AES256-SHA 856 4374 -% 1081575 2149 78679 111 0 0 192.168.213.22 CH - [2015-05-29 11:20:53.778693] "GET /EMail/message.aspx?&mailId=3918_16&folderId=1001_9&mailPos=8 HTTP/1.1" 200 11340 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjHzBawxQzZrjAbUDbkAAAAd TLSv1 ECDHE-RSA-AES256-SHA 872 15659 -% 1507280 3438 478243 24681 0 0 192.168.213.22 CH - [2015-05-29 11:21:08.830367] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjHzFKwxQzZrjAbVTIgAAABw TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1307083 2659 296017 3884 0 0 192.168.213.22 CH - [2015-05-29 11:21:55.330978] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 18974 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjHzQ6wxQzZrjAbVTJAAAAB4 TLSv1 ECDHE-RSA-AES256-SHA 840 23370 -% 1569994 3617 524452 5729 0 0 192.168.213.22 CH - [2015-05-29 11:22:31.329869] "GET /EMail/message.aspx?&mailId=3917_18&folderId=1001_9&mailPos=6 HTTP/1.1" 200 11487 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjHzZ6wxQzZrjAbVTJYAAAB7 TLSv1 ECDHE-RSA-AES256-SHA 888 15824 -% 1339772 5301 313162 20016 0 0 192.168.213.22 CH - [2015-05-29 11:22:34.477689] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3917_18&folderId=1001_9&attachmentId=2&token=51428331198279547E18 HTTP/1.1" 200 55387 "https://www.example.com/EMail/message.aspx?&mailId=3917_18&folderId=1001_9&mailPos=6" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjHzaqwxQzZrjAbUDb4AAAAj TLSv1 ECDHE-RSA-AES256-SHA 984 60864 -% 1043794 6661 11719 177 0 0 192.168.213.22 CH - [2015-05-29 11:23:09.375663] "GET /EMail/message.aspx?&mailId=3918_36&folderId=1001_9&mailPos=5 HTTP/1.1" 200 11495 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjHzjawxQzZrjAbVTJoAAABD TLSv1 ECDHE-RSA-AES256-SHA 888 15840 -% 1378261 3051 351516 22717 0 0 192.168.213.22 CH - [2015-05-29 11:23:12.088210] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3918_36&folderId=1001_9&attachmentId=2&token=166974478088668954E18 HTTP/1.1" 200 54402 "https://www.example.com/EMail/message.aspx?&mailId=3918_36&folderId=1001_9&mailPos=5" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjHzkKwxQzZrjAbUDcQAAAAp TLSv1 ECDHE-RSA-AES256-SHA 984 59962 -% 1214307 7777 186522 202 0 0 192.168.213.22 CH - [2015-05-29 11:23:48.575196] "GET /EMail/message.aspx?&mailId=3917_20&folderId=1001_9&mailPos=4 HTTP/1.1" 200 11489 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjHztKwxQzZrjAbVTJ4AAABG TLSv1 ECDHE-RSA-AES256-SHA 888 15824 -% 1480025 4856 448179 25026 0 0 192.168.213.22 CH - [2015-05-29 11:24:00.081492] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 18950 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjHzwKwxQzZrjAbVTKEAAABK TLSv1 ECDHE-RSA-AES256-SHA 840 23354 -% 1486250 2674 438694 9109 0 0 192.168.213.22 CH - [2015-05-29 11:24:25.339693] "GET /EMail/message.aspx?&mailId=3917_21&folderId=1001_9&mailPos=3 HTTP/1.1" 200 11487 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjHz2awxQzZrjAbVTKQAAABN TLSv1 ECDHE-RSA-AES256-SHA 888 15803 -% 1437383 3469 408204 24731 0 0 192.168.213.22 CH - [2015-05-29 11:24:32.775307] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjHz4KwxQzZrjAbVTKcAAABS TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1595543 2497 586171 2805 0 0 192.168.213.22 CH - [2015-05-29 11:25:08.936387] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3917_23&folderId=1001_9&attachmentId=2&token=258310760500490944E17 HTTP/1.1" 200 57511 "https://www.example.com/EMail/message.aspx?&mailId=3917_23&folderId=1001_9&mailPos=2" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjH0BKwxQzZrjAbUDdEAAAA2 TLSv1 ECDHE-RSA-AES256-SHA 984 63161 -% 1147187 3991 119034 189 0 0 192.168.213.22 CH - [2015-05-29 11:25:13.676590] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 18934 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjH0CawxQzZrjAbUDdIAAAA8 TLSv1 ECDHE-RSA-AES256-SHA 840 23338 -% 1072565 2740 27741 6009 0 0 192.168.213.22 CH - [2015-05-29 11:25:52.184303] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3917_25&folderId=1001_9&attachmentId=2&token=213658877628339136E17 HTTP/1.1" 200 55342 "https://www.example.com/EMail/message.aspx?&mailId=3917_25&folderId=1001_9&mailPos=1" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjH0MKwxQzZrjAbUDdcAAAAC TLSv1 ECDHE-RSA-AES256-SHA 984 60832 -% 1221038 6692 46167 194 0 0 192.168.213.22 CH - [2015-05-29 11:25:56.526339] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjH0NKwxQzZrjAbUDdgAAAAB TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1605823 2544 596460 2757 0 0 192.168.213.22 CH - [2015-05-29 11:26:30.348506] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3917_28&folderId=1001_9&attachmentId=2&token=195699426057919411E18 HTTP/1.1" 200 55211 "https://www.example.com/EMail/message.aspx?&mailId=3917_28&folderId=1001_9&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjH0VqwxQzZrjAbVTLUAAABe TLSv1 ECDHE-RSA-AES256-SHA 984 60762 -% 1122621 6309 93903 244 0 0 192.168.213.22 CH - [2015-05-29 11:26:35.973929] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjH0W6wxQzZrjAbVTLcAAABt TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1643660 3881 632137 3214 0 0 192.168.251.28 CH - [2015-05-29 11:37:26.158782] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "78fe7b3a.5233be5a171be" VjH25qwxQzZrjAbVTRQAAABF TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 572 8359 -% 989740 2019 986754 187 0 0 192.168.192.35 CH - [2015-05-29 11:46:12.918474] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjH49KwxQzZrjAbVTVsAAABP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1298 4447 -% 1064447 5264 58094 304 0 0 192.168.192.35 CH - [2015-05-29 11:46:13.993490] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjH49awxQzZrjAbVTVwAAABU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 492 3812 -% 865547 3018 859838 1950 0 0 192.168.192.35 CH - [2015-05-29 11:46:14.918768] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjH49qwxQzZrjAbVTV0AAABS TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 427 4141 -% 942323 2127 933021 6525 0 0 192.168.192.35 CH - [2015-05-29 11:46:14.958260] "GET /EMail/overview.aspx HTTP/1.1" 200 5303 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjH49qwxQzZrjAbVTV4AAABX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1071 9751 -% 1259788 2265 254966 1859 0 0 192.168.192.35 CH - [2015-05-29 11:46:14.962169] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjH49qwxQzZrjAbVTV8AAABV TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1097 13218 -% 1546056 3639 535423 2701 0 0 192.168.192.35 CH - [2015-05-29 11:46:18.487030] "GET /EMail/inbox.aspx HTTP/1.1" 200 11190 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjH4@qwxQzZrjAbVTWIAAABg TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 430 11642 -% 1076887 2144 70290 3731 0 0 192.168.192.35 CH - [2015-05-29 11:46:21.352408] "GET /EMail/message.aspx?&mailId=3917_34&folderId=540_81&mailPos=0 HTTP/1.1" 200 11337 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjH4-awxQzZrjAbVTWMAAABY TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 471 11818 -% 1410844 3455 378810 27448 0 0 192.168.192.35 CH - [2015-05-29 11:46:32.848402] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3917_34&folderId=540_81&attachmentId=2&token=58283009799886602E18 HTTP/1.1" 200 59914 "https://www.example.com/EMail/message.aspx?&mailId=3917_34&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjH5CKwxQzZrjAbVTWUAAABj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1218 65635 -% 1034700 6616 3480 173 0 0 192.168.192.35 CH - [2015-05-29 11:47:22.821996] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3917_34&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjH5OqwxQzZrjAbUDjQAAAAj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1343 4382 -% 1278720 4396 273600 157 0 0 192.168.192.35 CH - [2015-05-29 11:47:24.115395] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 9890 "https://www.example.com/EMail/message.aspx?&mailId=3917_34&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjH5PKwxQzZrjAbUDjUAAAAk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 520 10341 -% 1206031 3947 197609 3536 0 0 192.168.192.35 CH - [2015-05-29 11:47:26.763961] "GET /EMail/message.aspx?&mailId=3917_30&folderId=540_81&mailPos=0 HTTP/1.1" 200 11339 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjH5PqwxQzZrjAbUDjYAAAAl TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 495 11791 -% 1217562 4804 188396 23463 0 0 192.168.192.35 CH - [2015-05-29 11:47:30.439877] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3917_30&folderId=540_81&attachmentId=2&token=24004279239872102E18 HTTP/1.1" 200 55555 "https://www.example.com/EMail/message.aspx?&mailId=3917_30&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjH5QqwxQzZrjAbUDjgAAAAn TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 576 57062 -% 1091798 6213 74999 189 0 0 192.168.192.35 CH - [2015-05-29 11:48:32.587261] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3917_30&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjH5gKwxQzZrjAbVTXMAAABo TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1345 4382 -% 1232261 4615 226646 200 0 0 192.168.192.35 CH - [2015-05-29 11:48:33.832912] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8590 "https://www.example.com/EMail/message.aspx?&mailId=3917_30&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjH5gawxQzZrjAbVTXQAAABu TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 520 9041 -% 1139377 3790 131957 2831 0 0 192.168.192.35 CH - [2015-05-29 11:48:36.236211] "GET /EMail/message.aspx?&mailId=3917_26&folderId=540_81&mailPos=0 HTTP/1.1" 200 11198 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjH5hKwxQzZrjAbVTXYAAABw TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 495 11650 -% 1677794 4762 646905 25208 0 0 192.168.192.35 CH - [2015-05-29 11:48:40.187879] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3917_26&folderId=540_81&attachmentId=2&token=126548895874523904E18 HTTP/1.1" 200 56072 "https://www.example.com/EMail/message.aspx?&mailId=3917_26&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjH5iKwxQzZrjAbVTXgAAABy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 577 57579 -% 1125246 6467 108412 169 0 0 192.168.192.35 CH - [2015-05-29 11:48:56.328239] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3917_26&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjH5mKwxQzZrjAbVTXsAAABp TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1346 4382 -% 1481102 4234 475738 354 0 0 192.168.192.35 CH - [2015-05-29 11:48:57.826572] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7290 "https://www.example.com/EMail/message.aspx?&mailId=3917_26&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3619ccf6.5233a972eff09" VjH5mawxQzZrjAbVTXwAAABx TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 520 7712 -% 1124787 3787 118119 2241 0 0 192.168.192.35 CH - [2015-05-29 11:51:11.050833] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7364 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjH6H6wxQzZrjAbVTZUAAABL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 896 8092 -% 993930 2052 988931 2279 0 0 192.168.192.35 CH - [2015-05-29 11:51:12.136966] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjH6IKwxQzZrjAbVTZYAAABO TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 450 2551 14% 1030419 2393 26631 179 0 0 192.168.192.35 CH - [2015-05-29 11:51:12.157134] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjH6IKwxQzZrjAbUDkYAAAA2 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1054 1828 -% 1206893 1965 204270 153 0 0 192.168.192.35 CH - [2015-05-29 11:51:12.157633] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjH6IKwxQzZrjAbUDkcAAAA5 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1040 7804 22% 1229653 2332 224657 119 0 0 192.168.192.35 CH - [2015-05-29 11:51:12.158066] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjH6IKwxQzZrjAbVTZcAAABT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1045 4239 23% 1259274 3019 253950 183 0 0 192.168.192.35 CH - [2015-05-29 11:51:12.158639] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjH6IKwxQzZrjAbUDkkAAAA1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1015 2019 22% 1262872 1831 260182 105 0 0 192.168.192.35 CH - [2015-05-29 11:51:12.158284] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjH6IKwxQzZrjAbUDkgAAAA4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1015 737 56% 1432389 2381 429191 151 0 0 192.168.192.35 CH - [2015-05-29 11:51:13.624421] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjH6IawxQzZrjAbUDksAAAA8 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 491 1792 -% 975040 2007 972392 152 0 0 192.168.192.35 CH - [2015-05-29 11:51:14.661745] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ff2d0c18.5233c17036571" VjH6IqwxQzZrjAbUDkwAAAA9 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 805 1873 -% 649225 757 647502 247 0 0 192.168.192.35 CH - [2015-05-29 11:51:21.038165] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjH6KawxQzZrjAbVTZkAAABQ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1056 2231 -% 854297 2484 851049 141 0 0 192.168.192.35 CH - [2015-05-29 11:51:21.835982] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjH6KawxQzZrjAbVTZoAAABP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1223 564 -% 1083260 5047 77385 168 0 0 192.168.192.35 CH - [2015-05-29 11:51:22.929161] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjH6KqwxQzZrjAbVTZwAAABX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 492 3812 -% 922178 2953 917372 1168 0 0 192.168.192.35 CH - [2015-05-29 11:51:23.916385] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjH6K6wxQzZrjAbVTZ0AAABV TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 427 4141 -% 783077 3017 769383 10009 0 0 192.168.192.35 CH - [2015-05-29 11:51:23.935868] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjH6K6wxQzZrjAbVTZ4AAABR TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 996 5866 -% 1312149 2698 307116 1798 0 0 192.168.192.35 CH - [2015-05-29 11:51:23.939222] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjH6K6wxQzZrjAbVTZ8AAABi TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1022 9335 -% 1854992 3288 846751 2965 0 0 192.168.192.35 CH - [2015-05-29 11:51:25.278429] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjH6LawxQzZrjAbVTaAAAABg TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 456 1248 -% 835645 3277 831582 160 0 0 192.168.192.35 CH - [2015-05-29 11:51:25.833414] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjH6LawxQzZrjAbVTaEAAABY TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 498 1260 -% 714403 3456 710159 156 0 0 192.168.192.35 CH - [2015-05-29 11:51:27.121266] "GET /EMail/inbox.aspx HTTP/1.1" 200 8590 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjH6L6wxQzZrjAbVTaIAAABb TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 430 9041 -% 1092168 2860 85836 2710 0 0 192.168.192.35 CH - [2015-05-29 11:51:28.254156] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjH6MKwxQzZrjAbVTaUAAABZ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 451 527 -% 829847 3009 825894 379 0 0 192.168.192.35 CH - [2015-05-29 11:51:28.253872] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjH6MKwxQzZrjAbVTaQAAABf TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 451 1813 -% 1008849 3012 4853 223 0 0 192.168.192.35 CH - [2015-05-29 11:51:28.253712] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjH6MKwxQzZrjAbVTaMAAABj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 448 539 -% 1055191 3211 51161 141 0 0 192.168.192.35 CH - [2015-05-29 11:51:30.158963] "GET /EMail/message.aspx?&mailId=3918_48&folderId=540_81&mailPos=0 HTTP/1.1" 200 11197 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjH6MqwxQzZrjAbVTaYAAABd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 471 11649 -% 1455996 4910 426815 23445 0 0 192.168.192.35 CH - [2015-05-29 11:51:35.566396] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/message.aspx?&mailId=3918_48&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjH6N6wxQzZrjAbVTakAAABh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 492 2088 -% 802463 1997 799299 231 0 0 192.168.192.35 CH - [2015-05-29 11:51:36.776438] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3918_48&folderId=540_81&attachmentId=2&token=202258688408984474E18 HTTP/1.1" 200 55043 "https://www.example.com/EMail/message.aspx?&mailId=3918_48&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjH6OKwxQzZrjAbVTaoAAABW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 577 56550 -% 1053950 5843 26427 179 0 0 192.168.186.76 CH - [2015-05-29 11:57:12.646497] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjH7iKwxQzZrjAbVTd8AAABY TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 12038 -% 983579 4439 975441 2267 3 0 192.168.186.76 CH - [2015-05-29 11:57:13.673579] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "f139da27.52338400e3ec8" VjH7iawxQzZrjAbVTeAAAABb TLSv1.2 ECDHE-RSA-AES256-SHA384 662 0 -% 971644 4086 963958 2274 3 0 192.168.192.35 CH - [2015-05-29 11:57:23.234637] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3918_50&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjH7k6wxQzZrjAbVTeMAAABj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1071 4382 -% 734758 4213 729701 207 0 0 192.168.192.35 CH - [2015-05-29 11:57:23.987079] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8590 "https://www.example.com/EMail/message.aspx?&mailId=3918_50&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjH7k6wxQzZrjAbVTeQAAABa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 520 9041 -% 1105487 3874 95781 4905 0 0 192.168.186.76 CH - [2015-05-29 11:57:25.174963] "GET /EMail/overview.aspx HTTP/1.1" 200 5537 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjH7lawxQzZrjAbUDl0AAAAM TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 10134 -% 1399616 4123 390829 2725 3 0 192.168.192.35 CH - [2015-05-29 11:57:26.197551] "GET /EMail/message.aspx?&mailId=3918_49&folderId=540_81&mailPos=0 HTTP/1.1" 200 11185 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjH7lqwxQzZrjAbVTeUAAABd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 495 11666 -% 1300750 7336 272201 19859 0 0 192.168.192.35 CH - [2015-05-29 11:57:28.870772] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3918_49&folderId=540_81&attachmentId=2&token=1773451167672288E18 HTTP/1.1" 200 60859 "https://www.example.com/EMail/message.aspx?&mailId=3918_49&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjH7mKwxQzZrjAbVTegAAABW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 575 62554 -% 1208602 4146 179940 187 0 0 192.168.186.76 CH - [2015-05-29 11:58:04.192306] "GET /EMail/newMessage.aspx?action=reply&mailId=3918_42&folderId=947_65&showPics=false HTTP/1.1" 200 23143 "https://www.example.com/EMail/message.aspx?&mailId=3918_42&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjH7vKwxQzZrjAbVTe0AAABr TLSv1.2 ECDHE-RSA-AES256-SHA384 1266 24143 -% 1228123 5528 169094 41919 6 3 192.168.186.76 CH - [2015-05-29 11:58:05.672543] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5881 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3918_42&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjH7vawxQzZrjAbVTe8AAABo TLSv1.2 ECDHE-RSA-AES256-SHA384 1202 9827 -% 950793 6508 0 0 3 0 192.168.186.76 CH - [2015-05-29 11:58:05.507419] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3918_42&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjH7vawxQzZrjAbVTe4AAABv TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 1137339 4649 122371 8615 3 0 192.168.28.1 CH - [2015-05-29 11:59:37.207718] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7364 "-" "Mozilla/5.0 (Windows NT 5.1; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "df6e455f.5233c34f7a3a6" VjH8GawxQzZrjAbVTf4AAAB0 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 686 11970 -% 916343 1325 910823 3545 0 0 192.168.45.26 CH - [2015-05-29 12:01:44.662918] "GET /EMail/MailHandler?service=createCRL HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "a65fbc7d.5233c3c907386" VjH8mKwxQzZrjAbVTg8AAABH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 560 8359 -% 1106204 1034 103421 272 0 0 192.168.28.1 CH - [2015-05-29 12:05:01.127976] "GET /EMail/images/msgOpenedReplied.png HTTP/1.1" 200 717 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 5.1; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "df6e455f.5233c34f7a3a6" VjH9XawxQzZrjAbVTiwAAABr TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1105 5150 -% 741550 2799 738020 136 0 0 192.168.28.1 CH - [2015-05-29 12:05:01.094432] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 5.1; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "df6e455f.5233c34f7a3a6" VjH9XawxQzZrjAbVTioAAABt TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1098 5899 -% 994484 2947 990341 243 0 0 192.168.28.1 CH - [2015-05-29 12:05:01.127106] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 5.1; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "df6e455f.5233c34f7a3a6" VjH9XawxQzZrjAbVTisAAABn TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1098 4548 -% 1012214 1907 9459 222 0 0 192.168.192.35 CH - [2015-05-29 12:06:42.236388] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjH9wqwxQzZrjAbUDoMAAAA2 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 835 7838 -% 943383 1955 939688 1248 0 0 192.168.192.35 CH - [2015-05-29 12:06:43.208843] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjH9w6wxQzZrjAbUDoQAAAA5 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 503 2427 14% 1143374 2021 140117 170 0 0 192.168.192.35 CH - [2015-05-29 12:06:44.648214] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjH9xKwxQzZrjAbUDoUAAAA1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 429 5723 -% 1838903 2628 832928 2503 0 0 192.168.192.35 CH - [2015-05-29 12:06:46.508857] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjH9xqwxQzZrjAbUDoYAAAA4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 544 205 -% 880299 1978 877491 211 0 0 192.168.213.21 CH - [2015-05-29 12:10:55.718473] "GET /EMail/moveToFolder.aspx?folderName=Inbox&mailId=3917_28&mailId=3917_25&mailId=3917_23&mailId=3917_21&mailId=3917_20&mailId=3918_36&mailId=3917_18&mailId=3918_25&mailId=3918_16 HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjH@v6wxQzZrjAbVTloAAABg TLSv1 ECDHE-RSA-AES256-SHA 928 11697 -% 1004680 8360 0 3837 0 0 192.168.213.21 CH - [2015-05-29 12:10:56.902464] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjH@wKwxQzZrjAbVTlwAAABb TLSv1 ECDHE-RSA-AES256-SHA 534 7786 -% 1003006 3098 0 2208 0 0 192.168.28.1 CH - [2015-05-29 12:11:07.816712] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 5.1; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "df6e455f.5233c34f7a3a6" VjH@y6wxQzZrjAbVTl0AAABZ TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1300 4481 -% 1283064 4250 278034 190 0 0 192.168.28.1 CH - [2015-05-29 12:11:09.140291] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7537 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 5.1; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "df6e455f.5233c34f7a3a6" VjH@zawxQzZrjAbVTl8AAABj TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 551 7959 -% 858114 3124 835744 18684 0 0 192.168.28.1 CH - [2015-05-29 12:11:12.924891] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 5.1; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "df6e455f.5233c34f7a3a6" VjH@0KwxQzZrjAbVTmAAAABa TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 660 460 -% 1056202 3814 51437 245 0 0 192.168.28.1 CH - [2015-05-29 12:11:14.020625] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7537 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 5.1; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "df6e455f.5233c34f7a3a6" VjH@0qwxQzZrjAbVTmEAAABl TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 551 7959 -% 913210 6369 890866 15316 0 0 192.168.28.1 CH - [2015-05-29 12:11:35.381950] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 5.1; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "df6e455f.5233c34f7a3a6" VjH@56wxQzZrjAbVTmUAAABe TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1229 559 -% 1111659 8230 102181 178 0 0 192.168.28.1 CH - [2015-05-29 12:11:36.535360] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 5.1; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "df6e455f.5233c34f7a3a6" VjH@6KwxQzZrjAbVTmYAAABk TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 512 3812 -% 865907 2917 860558 1774 0 0 192.168.28.1 CH - [2015-05-29 12:11:37.680125] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 5.1; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "df6e455f.5233c34f7a3a6" VjH@6awxQzZrjAbVTmgAAABt TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 475 4128 -% 756078 2867 742187 10306 0 0 192.168.28.1 CH - [2015-05-29 12:11:37.731537] "GET /EMail/overview.aspx HTTP/1.1" 200 5288 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 5.1; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "df6e455f.5233c34f7a3a6" VjH@6awxQzZrjAbVTmoAAABm TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1044 5848 -% 1165569 1689 161484 1971 0 0 192.168.28.1 CH - [2015-05-29 12:11:37.726334] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 5.1; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "df6e455f.5233c34f7a3a6" VjH@6awxQzZrjAbVTmkAAABn TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1070 9317 -% 1465309 2382 455406 3292 0 0 192.168.28.1 CH - [2015-05-29 12:11:41.338284] "GET /EMail/inbox.aspx HTTP/1.1" 200 16713 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 5.1; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "df6e455f.5233c34f7a3a6" VjH@7awxQzZrjAbVTmsAAABw TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 478 17223 -% 1200356 2850 187282 8415 0 0 192.168.28.1 CH - [2015-05-29 12:11:46.108097] "GET /EMail/message.aspx?&mailId=3914_66&folderId=2707_65&mailPos=0 HTTP/1.1" 200 19168 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 5.1; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "df6e455f.5233c34f7a3a6" VjH@8qwxQzZrjAbVTmwAAABq TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 520 19707 -% 1293323 4648 247999 38642 0 0 192.168.28.1 CH - [2015-05-29 12:14:03.813221] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 16714 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 5.1; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "df6e455f.5233c34f7a3a6" VjH-e6wxQzZrjAbVToYAAABJ TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1080 17362 -% 1417217 2480 407193 5640 0 0 192.168.28.1 CH - [2015-05-29 12:14:03.814325] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 5.1; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "df6e455f.5233c34f7a3a6" VjH-e6wxQzZrjAbUDqYAAAAe TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1097 9317 -% 1652491 2537 642930 2804 0 0 192.168.192.35 CH - [2015-05-29 12:18:13.525492] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjIAdawxQzZrjAbVTqIAAABt TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 835 7838 -% 1719522 3031 713848 1915 0 0 192.168.192.35 CH - [2015-05-29 12:18:15.293093] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjIAd6wxQzZrjAbVTqQAAABn TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1067 2019 22% 1306025 1866 302836 211 0 0 192.168.192.35 CH - [2015-05-29 12:18:15.296429] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjIAd6wxQzZrjAbVTqUAAABw TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1093 8135 22% 1368392 3010 360910 437 0 0 192.168.192.35 CH - [2015-05-29 12:18:15.273674] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjIAd6wxQzZrjAbVTqMAAABm TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 503 2427 14% 1497686 3451 492827 161 0 0 192.168.192.35 CH - [2015-05-29 12:18:15.297900] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjIAd6wxQzZrjAbVTqYAAABu TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1098 4239 23% 1609349 2958 604239 222 0 0 192.168.192.35 CH - [2015-05-29 12:18:15.310470] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjIAd6wxQzZrjAbVTqcAAABv TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1066 737 56% 1852563 1820 849754 153 0 0 192.168.192.35 CH - [2015-05-29 12:18:17.190439] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjIAeawxQzZrjAbVTqgAAABq TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 427 4141 -% 1043362 3163 25584 13840 0 0 192.168.192.35 CH - [2015-05-29 12:18:17.199865] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjIAeawxQzZrjAbVTqoAAABy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 429 5723 -% 1195447 4316 188262 1828 0 0 192.168.192.35 CH - [2015-05-29 12:18:18.258794] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjIAeqwxQzZrjAbVTq0AAABp TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 501 594 56% 674125 3563 669564 159 0 0 192.168.192.35 CH - [2015-05-29 12:18:18.256338] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjIAeqwxQzZrjAbVTqsAAABc TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 505 2427 14% 911744 3310 906583 262 0 0 192.168.192.35 CH - [2015-05-29 12:18:18.278941] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjIAeqwxQzZrjAbUDsAAAAA4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1103 349 -% 889221 2767 885482 271 0 0 192.168.192.35 CH - [2015-05-29 12:18:18.417227] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjIAeqwxQzZrjAbVTq8AAABx TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 544 205 -% 804252 3961 799361 221 0 0 192.168.192.35 CH - [2015-05-29 12:18:18.257455] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjIAeqwxQzZrjAbVTqwAAABs TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 502 1876 22% 966897 3546 962326 153 0 0 192.168.192.35 CH - [2015-05-29 12:18:18.278433] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/header.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjIAeqwxQzZrjAbVTq4AAAB3 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1095 7804 22% 1100910 1780 95644 221 0 0 192.168.192.35 CH - [2015-05-29 12:18:17.199504] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjIAeawxQzZrjAbVTqkAAABo TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 455 9192 -% 2238909 5078 220925 4707 0 0 192.168.192.35 CH - [2015-05-29 12:18:19.469854] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjIAe6wxQzZrjAbVTrEAAAB2 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 1876 22% 690062 4299 684484 200 0 0 192.168.192.35 CH - [2015-05-29 12:18:19.473663] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjIAe6wxQzZrjAbVTrQAAAB5 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 586 205 -% 922431 3065 918432 199 0 0 192.168.192.35 CH - [2015-05-29 12:18:19.468639] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjIAe6wxQzZrjAbVTrAAAABz TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 533 2427 14% 927624 1997 924014 197 0 0 192.168.192.35 CH - [2015-05-29 12:18:19.470723] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjIAe6wxQzZrjAbVTrIAAAB1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 529 594 56% 1127698 4316 122491 203 0 0 192.168.192.35 CH - [2015-05-29 12:18:19.471928] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjIAe6wxQzZrjAbVTrMAAAB4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 556 7992 22% 1173786 3907 165460 184 0 0 192.168.28.1 CH - [2015-05-29 12:21:03.837729] "GET /EMail/message.aspx?&mailId=3914_66&folderId=2707_65&mailPos=0 HTTP/1.1" 200 19168 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 5.1; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "df6e455f.5233c34f7a3a6" VjIBH6wxQzZrjAbVTsgAAABT TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 873 23699 -% 2088276 4862 48116 34329 0 0 192.168.192.35 CH - [2015-05-29 12:21:14.452648] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjIBKqwxQzZrjAbVTswAAABS TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1034 3955 -% 914051 2601 909647 1201 0 0 192.168.192.35 CH - [2015-05-29 12:21:15.391930] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjIBK6wxQzZrjAbVTs0AAABP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 503 2551 14% 1023666 2138 20099 183 0 0 192.168.192.35 CH - [2015-05-29 12:21:15.410519] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjIBK6wxQzZrjAbUDtAAAAAI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1066 737 56% 1010287 3102 6329 120 0 0 192.168.192.35 CH - [2015-05-29 12:21:15.410954] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjIBK6wxQzZrjAbVTs4AAABV TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1093 7804 22% 1026967 2948 21248 140 0 0 192.168.192.35 CH - [2015-05-29 12:21:15.411803] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjIBK6wxQzZrjAbVTtAAAABR TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1098 4239 23% 1068758 1895 64247 319 0 0 192.168.192.35 CH - [2015-05-29 12:21:15.411302] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjIBK6wxQzZrjAbVTs8AAABX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1067 2019 22% 1223352 2734 219523 211 0 0 192.168.192.35 CH - [2015-05-29 12:21:16.675639] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjIBLKwxQzZrjAbVTtMAAABY TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 429 5723 -% 914776 3211 907276 3126 0 0 192.168.192.35 CH - [2015-05-29 12:21:16.666109] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjIBLKwxQzZrjAbVTtIAAABg TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 427 4141 -% 1035733 2265 26438 6557 0 0 192.168.28.1 CH - [2015-05-29 12:21:16.587404] "GET /EMail/message.aspx?mailId=3914_66&folderId=2707_65&print=true&showPics=false HTTP/1.1" 200 14468 "https://www.example.com/EMail/message.aspx?&mailId=3914_66&folderId=2707_65&mailPos=0" "Mozilla/5.0 (Windows NT 5.1; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "df6e455f.5233c34f7a3a6" VjIBLKwxQzZrjAbVTtEAAABi TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1147 15087 -% 1368427 4789 329630 33040 0 0 192.168.192.35 CH - [2015-05-29 12:21:17.614223] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjIBLawxQzZrjAbVTtYAAABZ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 507 2427 14% 935328 3762 929893 196 0 0 192.168.192.35 CH - [2015-05-29 12:21:16.679535] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjIBLKwxQzZrjAbVTtQAAABb TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 455 9192 -% 2011378 3810 0 2768 0 0 192.168.192.35 CH - [2015-05-29 12:21:17.614314] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjIBLawxQzZrjAbUDtEAAAAL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 504 1876 22% 1106169 3062 101828 279 0 0 192.168.192.35 CH - [2015-05-29 12:21:17.614935] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjIBLawxQzZrjAbVTtcAAABj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 503 594 56% 1276862 2776 273007 263 0 0 192.168.192.35 CH - [2015-05-29 12:21:17.723467] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjIBLawxQzZrjAbVTtoAAABd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 536 206 -% 1188834 2967 185177 110 0 0 192.168.192.35 CH - [2015-05-29 12:21:17.633775] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7239 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjIBLawxQzZrjAbVTtgAAABa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1097 8184 22% 1318747 4327 310703 139 0 0 192.168.192.35 CH - [2015-05-29 12:21:17.635695] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjIBLawxQzZrjAbVTtkAAABl TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1111 348 -% 1451125 3982 445994 211 0 0 192.168.192.35 CH - [2015-05-29 12:21:18.724274] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjIBLqwxQzZrjAbVTtsAAABh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 586 205 -% 911987 3078 907941 208 0 0 192.168.28.1 CH - [2015-05-29 12:21:53.584457] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 16714 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 5.1; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "df6e455f.5233c34f7a3a6" VjIBUawxQzZrjAbVTuAAAABt TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1077 17362 -% 1537749 3516 523861 8362 0 0 192.168.28.1 CH - [2015-05-29 12:21:53.597594] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 5.1; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "df6e455f.5233c34f7a3a6" VjIBUawxQzZrjAbVTuEAAABn TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1094 9317 -% 1854402 4008 841696 3045 0 0 192.168.28.1 CH - [2015-05-29 12:22:33.016139] "GET /EMail/message.aspx?&mailId=3896_7&folderId=2707_65&mailPos=2 HTTP/1.1" 200 14949 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 5.1; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "df6e455f.5233c34f7a3a6" VjIBeawxQzZrjAbVTukAAABo TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1095 15568 -% 1285464 4403 239940 39915 0 0 192.168.28.1 CH - [2015-05-29 12:22:48.520376] "GET /EMail/message.aspx?folderId=2707_65&mailPos=3&isNextOrPrevious=true HTTP/1.1" 200 65860 "https://www.example.com/EMail/message.aspx?&mailId=3896_7&folderId=2707_65&mailPos=2" "Mozilla/5.0 (Windows NT 5.1; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "df6e455f.5233c34f7a3a6" VjIBiKwxQzZrjAbVTusAAAB5 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1137 66856 -% 2050624 3408 863418 128330 0 0 192.168.28.1 CH - [2015-05-29 12:22:56.280593] "GET /EMail/message.aspx?folderId=2707_65&mailPos=4&isNextOrPrevious=true HTTP/1.1" 200 15597 "https://www.example.com/EMail/message.aspx?folderId=2707_65&mailPos=3&isNextOrPrevious=true" "Mozilla/5.0 (Windows NT 5.1; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "df6e455f.5233c34f7a3a6" VjIBkKwxQzZrjAbVTu0AAAB8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1144 16216 -% 1383260 5342 346144 30460 0 0 192.168.28.1 CH - [2015-05-29 12:23:01.797857] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 16713 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 5.1; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "df6e455f.5233c34f7a3a6" VjIBlawxQzZrjAbVTu4AAAB6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 510 17223 -% 1482145 3321 468331 8507 0 0 192.168.28.1 CH - [2015-05-29 12:23:01.855587] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 5.1; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "df6e455f.5233c34f7a3a6" VjIBlawxQzZrjAbVTu8AAAB7 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1094 9317 -% 1586778 2400 575800 2958 0 0 192.168.28.1 CH - [2015-05-29 12:23:08.080567] "GET /EMail/message.aspx?&mailId=3914_63&folderId=2707_65&mailPos=1 HTTP/1.1" 200 14932 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 5.1; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "df6e455f.5233c34f7a3a6" VjIBnKwxQzZrjAbVTvEAAAB- TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 529 15413 -% 1232575 4641 201829 24886 0 0 192.168.28.1 CH - [2015-05-29 12:23:46.246869] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 16713 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 5.1; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "df6e455f.5233c34f7a3a6" VjIBwqwxQzZrjAbVTvcAAABI TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1077 17361 -% 1095758 3378 85309 4987 0 0 192.168.28.1 CH - [2015-05-29 12:23:46.258467] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 5.1; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "df6e455f.5233c34f7a3a6" VjIBwqwxQzZrjAbVTvgAAABF TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1094 9317 -% 1432741 2060 421008 3994 0 0 192.168.28.1 CH - [2015-05-29 12:23:50.609056] "GET /EMail/message.aspx?&mailId=3914_66&folderId=2707_65&mailPos=0 HTTP/1.1" 200 19167 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 5.1; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "df6e455f.5233c34f7a3a6" VjIBxqwxQzZrjAbVTvsAAABM TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 529 19706 -% 1369317 2978 325084 39081 0 0 192.168.192.35 CH - [2015-05-29 12:25:34.509315] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjICLqwxQzZrjAbVTwgAAABf TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 835 7838 -% 912743 2637 907496 1865 0 0 192.168.192.35 CH - [2015-05-29 12:25:35.470505] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjICL6wxQzZrjAbVTw0AAABb TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1098 4239 23% 942297 2847 937327 215 0 0 192.168.192.35 CH - [2015-05-29 12:25:35.450530] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjICL6wxQzZrjAbVTwkAAABY TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 503 2427 14% 1011819 1942 8148 235 0 0 192.168.192.35 CH - [2015-05-29 12:25:35.466982] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjICL6wxQzZrjAbVTwoAAABg TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1067 2019 22% 1157939 2874 153769 202 0 0 192.168.192.35 CH - [2015-05-29 12:25:35.468543] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjICL6wxQzZrjAbVTwsAAABi TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1066 737 56% 1174100 2841 170336 223 0 0 192.168.192.35 CH - [2015-05-29 12:25:35.469479] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjICL6wxQzZrjAbVTwwAAABZ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1093 8135 22% 1215200 2789 207872 144 0 0 192.168.192.35 CH - [2015-05-29 12:25:36.724718] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjICMKwxQzZrjAbVTw8AAABd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 429 5723 -% 857165 2882 851675 2028 0 0 192.168.192.35 CH - [2015-05-29 12:25:36.716661] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjICMKwxQzZrjAbVTw4AAABj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 427 4141 -% 1020935 3006 10341 6948 0 0 192.168.192.35 CH - [2015-05-29 12:25:36.728446] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjICMKwxQzZrjAbVTxAAAABa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 455 9192 -% 1212179 3746 199700 3182 0 0 192.168.192.35 CH - [2015-05-29 12:25:37.608266] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjICMawxQzZrjAbVTxMAAABW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 503 594 56% 872093 2058 868941 391 0 0 192.168.192.35 CH - [2015-05-29 12:25:37.627282] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjICMawxQzZrjAbVTxQAAABe TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1097 8135 22% 863413 2120 853436 102 0 0 192.168.192.35 CH - [2015-05-29 12:25:37.605453] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjICMawxQzZrjAbVTxEAAABl TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 507 2427 14% 905243 2376 900887 251 0 0 192.168.192.35 CH - [2015-05-29 12:25:37.606045] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjICMawxQzZrjAbVTxIAAABh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 504 1876 22% 978634 1901 975606 239 0 0 192.168.192.35 CH - [2015-05-29 12:25:37.627283] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjICMawxQzZrjAbUDuUAAAAh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1111 348 -% 967849 2853 964154 120 0 0 192.168.192.35 CH - [2015-05-29 12:25:37.761500] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjICMawxQzZrjAbVTxUAAABr TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 536 206 -% 1050582 3492 46385 185 0 0 192.168.192.35 CH - [2015-05-29 12:25:37.977072] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjICMawxQzZrjAbVTxYAAABk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 586 205 -% 1128815 2272 125651 312 0 0 192.168.192.35 CH - [2015-05-29 12:25:49.225843] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjICPawxQzZrjAbVTxkAAABu TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1015 552 -% 1033833 2963 29898 305 0 0 192.168.192.35 CH - [2015-05-29 12:25:50.267689] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjICPqwxQzZrjAbVTxoAAABm TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 429 676 75% 873556 2994 869582 241 0 0 192.168.192.35 CH - [2015-05-29 12:25:51.242627] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "ff2d0c18.5233c17036571" VjICP6wxQzZrjAbVTxwAAABw TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 835 1697 -% 2663 1781 74 167 0 0 192.168.192.35 CH - [2015-05-29 12:25:51.219024] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjICP6wxQzZrjAbVTxsAAABy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 962 461 -% 921460 3184 917509 190 0 0 192.168.192.35 CH - [2015-05-29 12:25:52.159142] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjICQKwxQzZrjAbVTx0AAABp TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 944 7914 -% 841706 3210 833928 3691 0 0 192.168.192.35 CH - [2015-05-29 12:25:53.036568] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjICQawxQzZrjAbVTx4AAABc TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 407 594 56% 737470 3108 733505 167 0 0 192.168.192.35 CH - [2015-05-29 12:25:53.039302] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjICQawxQzZrjAbVTyAAAAB3 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 432 7661 22% 899648 2722 893582 230 0 0 192.168.192.35 CH - [2015-05-29 12:25:53.038867] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjICQawxQzZrjAbVTx8AAABx TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 437 4243 23% 1142912 1795 139169 170 0 0 192.168.192.35 CH - [2015-05-29 12:25:53.044227] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjICQawxQzZrjAbVTyEAAABs TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 976 2570 14% 1146774 1729 143575 156 0 0 192.168.192.35 CH - [2015-05-29 12:25:53.045326] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjICQawxQzZrjAbVTyIAAABo TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 974 2019 22% 1345222 2587 341786 171 0 0 192.168.192.35 CH - [2015-05-29 12:25:53.057331] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjICQawxQzZrjAbVTyMAAAB2 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1013 1828 -% 1535202 2512 532029 217 0 0 192.168.192.35 CH - [2015-05-29 12:25:54.424447] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87016851.5233c16cc4c51" VjICQqwxQzZrjAbVTyQAAABz TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 450 1792 -% 528743 2291 525601 192 0 0 192.168.192.35 CH - [2015-05-29 12:25:54.971394] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ff2d0c18.5233c17036571" VjICQqwxQzZrjAbVTyUAAAB5 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 327 1657 -% 988186 4214 982679 267 0 0 192.168.192.35 CH - [2015-05-29 12:31:39.048986] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7364 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dfc0107.5233ca7849c1a" VjIDm6wxQzZrjAbVT1YAAABx TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 697 11975 -% 914641 1178 910635 2261 0 0 192.168.192.35 CH - [2015-05-29 12:31:40.023881] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dfc0107.5233ca7849c1a" VjIDnKwxQzZrjAbVT1kAAAB2 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1015 737 56% 716431 1798 713761 209 0 0 192.168.192.35 CH - [2015-05-29 12:31:40.025476] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dfc0107.5233ca7849c1a" VjIDnKwxQzZrjAbVT1oAAAB5 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1045 4239 23% 847184 2998 842295 253 0 0 192.168.192.35 CH - [2015-05-29 12:31:40.022968] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dfc0107.5233ca7849c1a" VjIDnKwxQzZrjAbVT1gAAABo TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1015 2019 22% 911079 1811 908444 119 0 0 192.168.192.35 CH - [2015-05-29 12:31:40.002786] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dfc0107.5233ca7849c1a" VjIDnKwxQzZrjAbVT1cAAABs TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 450 2427 14% 951862 2865 947253 157 0 0 192.168.192.35 CH - [2015-05-29 12:31:40.026893] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dfc0107.5233ca7849c1a" VjIDnKwxQzZrjAbVT1wAAAB0 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1054 1828 -% 935861 2124 933068 145 0 0 192.168.192.35 CH - [2015-05-29 12:31:40.026040] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dfc0107.5233ca7849c1a" VjIDnKwxQzZrjAbVT1sAAABz TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1040 7804 22% 1134861 2988 128064 213 0 0 192.168.192.35 CH - [2015-05-29 12:31:41.235699] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dfc0107.5233ca7849c1a" VjIDnawxQzZrjAbVT10AAAB4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 491 1792 -% 914380 3478 910175 152 0 0 192.168.192.35 CH - [2015-05-29 12:31:42.221714] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4544a2a.5233ca7b50592" VjIDnqwxQzZrjAbVT14AAAB1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 805 1872 -% 905613 680 904079 280 0 0 192.168.192.35 CH - [2015-05-29 12:32:22.718625] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dfc0107.5233ca7849c1a" VjIDxqwxQzZrjAbUDwIAAAAA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1223 564 -% 1029783 5352 23296 289 0 0 192.168.192.35 CH - [2015-05-29 12:32:23.757977] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dfc0107.5233ca7849c1a" VjIDx6wxQzZrjAbUDwMAAAA@ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 492 3812 -% 911333 2760 906486 1587 0 0 192.168.192.35 CH - [2015-05-29 12:32:24.809563] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dfc0107.5233ca7849c1a" VjIDyKwxQzZrjAbUDwQAAAAC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 427 4141 -% 870812 1987 857932 10294 0 0 192.168.192.35 CH - [2015-05-29 12:32:24.838413] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dfc0107.5233ca7849c1a" VjIDyKwxQzZrjAbUDwUAAAA- TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 996 5866 -% 1252628 2767 247312 1899 0 0 192.168.192.35 CH - [2015-05-29 12:32:24.829271] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dfc0107.5233ca7849c1a" VjIDyKwxQzZrjAbVT2cAAABD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1022 9335 -% 1408359 2295 396092 4673 0 0 192.168.192.35 CH - [2015-05-29 12:32:26.118149] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dfc0107.5233ca7849c1a" VjIDyqwxQzZrjAbUDwYAAAAB TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 456 1248 -% 919888 3029 915987 158 0 0 192.168.192.35 CH - [2015-05-29 12:32:26.280566] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dfc0107.5233ca7849c1a" VjIDyqwxQzZrjAbVT2gAAABC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 498 1260 -% 873882 2917 870167 155 0 0 192.168.192.35 CH - [2015-05-29 12:39:11.220616] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dfc0107.5233ca7849c1a" VjIFX6wxQzZrjAbUDysAAAAr TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 835 7838 -% 916863 3019 911078 1808 0 0 192.168.192.35 CH - [2015-05-29 12:39:12.163754] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dfc0107.5233ca7849c1a" VjIFYKwxQzZrjAbUDywAAAAp TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 503 2427 14% 1043879 3037 39474 161 0 0 192.168.192.35 CH - [2015-05-29 12:39:13.322031] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dfc0107.5233ca7849c1a" VjIFYawxQzZrjAbUDy0AAAAs TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 455 9192 -% 1567299 2654 554816 4545 0 0 192.168.192.35 CH - [2015-05-29 12:39:14.919714] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dfc0107.5233ca7849c1a" VjIFYqwxQzZrjAbUDy4AAAAq TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 586 205 -% 1003172 1948 553 161 0 0 192.168.192.35 CH - [2015-05-29 12:45:08.973681] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dfc0107.5233ca7849c1a" VjIGxKwxQzZrjAbVT@IAAABD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1109 7838 -% 944787 2157 940751 1210 0 0 192.168.192.35 CH - [2015-05-29 12:45:10.004787] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dfc0107.5233ca7849c1a" VjIGxqwxQzZrjAbVT@UAAABJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1141 4620 56% 873407 2713 869671 208 0 0 192.168.192.35 CH - [2015-05-29 12:45:09.966431] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dfc0107.5233ca7849c1a" VjIGxawxQzZrjAbVT@MAAABC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 503 2551 14% 941365 3057 936541 124 0 0 192.168.192.35 CH - [2015-05-29 12:45:10.003997] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dfc0107.5233ca7849c1a" VjIGxqwxQzZrjAbVT@QAAABE TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1142 5902 22% 983707 2988 979369 268 0 0 192.168.192.35 CH - [2015-05-29 12:45:10.010628] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dfc0107.5233ca7849c1a" VjIGxqwxQzZrjAbVT@cAAABF TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1173 8122 23% 998250 2190 994158 153 0 0 192.168.192.35 CH - [2015-05-29 12:45:10.008733] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dfc0107.5233ca7849c1a" VjIGxqwxQzZrjAbVT@YAAABI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1168 12018 22% 1233574 1913 227350 208 0 0 192.168.192.35 CH - [2015-05-29 12:45:11.275024] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dfc0107.5233ca7849c1a" VjIGx6wxQzZrjAbVT@gAAABH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 427 4141 -% 1008734 4793 992684 9903 0 0 192.168.192.35 CH - [2015-05-29 12:45:11.284419] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dfc0107.5233ca7849c1a" VjIGx6wxQzZrjAbVT@kAAABG TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 429 5723 -% 1308609 2938 303234 1864 0 0 192.168.192.35 CH - [2015-05-29 12:45:11.287320] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dfc0107.5233ca7849c1a" VjIGx6wxQzZrjAbVT@oAAABM TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 455 9192 -% 1439697 2363 429992 3076 0 0 192.168.192.35 CH - [2015-05-29 12:45:12.305370] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dfc0107.5233ca7849c1a" VjIGyKwxQzZrjAbVT@sAAABK TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 505 2427 14% 784381 3490 778874 221 0 0 192.168.192.35 CH - [2015-05-29 12:45:12.305797] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dfc0107.5233ca7849c1a" VjIGyKwxQzZrjAbVT@wAAABL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 502 1876 22% 1030089 2712 26233 201 0 0 192.168.192.35 CH - [2015-05-29 12:45:12.307406] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dfc0107.5233ca7849c1a" VjIGyKwxQzZrjAbVT@0AAABO TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 501 594 56% 1143165 3519 138677 162 0 0 192.168.192.35 CH - [2015-05-29 12:45:12.764364] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dfc0107.5233ca7849c1a" VjIGyKwxQzZrjAbVT-EAAABU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 586 205 -% 867355 4208 862097 200 0 0 192.168.192.35 CH - [2015-05-29 12:45:12.344537] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/header.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dfc0107.5233ca7849c1a" VjIGyKwxQzZrjAbVT@4AAABN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1170 12018 22% 1307268 1937 300708 152 0 0 192.168.192.35 CH - [2015-05-29 12:45:12.347965] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dfc0107.5233ca7849c1a" VjIGyKwxQzZrjAbVT@8AAABT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1178 4232 -% 1379751 1691 377145 249 0 0 192.168.192.35 CH - [2015-05-29 12:45:12.616267] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3dfc0107.5233ca7849c1a" VjIGyKwxQzZrjAbVT-AAAABQ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 544 205 -% 1250621 1902 247810 298 0 0 192.168.186.76 CH - [2015-05-29 12:45:14.483004] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7359 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "39f26f8.5233cd81f253c" VjIGyqwxQzZrjAbUDzQAAAAy TLSv1.2 ECDHE-RSA-AES256-SHA384 759 12102 -% 940186 1385 933889 3997 0 0 192.168.186.76 CH - [2015-05-29 12:45:15.510519] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "39f26f8.5233cd81f253c" VjIGy6wxQzZrjAbUDzUAAAA0 TLSv1.2 ECDHE-RSA-AES256-SHA384 486 2575 14% 1025321 3617 20113 176 0 0 192.168.186.76 CH - [2015-05-29 12:45:15.572216] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "39f26f8.5233cd81f253c" VjIGy6wxQzZrjAbUDzYAAAAz TLSv1.2 ECDHE-RSA-AES256-SHA384 1036 4453 23% 1202705 1902 199161 155 0 0 192.168.186.76 CH - [2015-05-29 12:45:24.357836] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "39f26f8.5233cd81f253c" VjIG1KwxQzZrjAbVT-QAAABP TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 4545 -% 1159386 3670 154853 237 0 0 192.168.186.76 CH - [2015-05-29 12:45:25.531159] "GET /EMail/main.aspx HTTP/1.1" 200 3391 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "39f26f8.5233cd81f253c" VjIG1awxQzZrjAbVT-UAAABR TLSv1.2 ECDHE-RSA-AES256-SHA384 534 3898 -% 745163 3386 738599 1707 0 0 192.168.186.76 CH - [2015-05-29 12:45:26.332122] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "39f26f8.5233cd81f253c" VjIG1qwxQzZrjAbVT-YAAABX TLSv1.2 ECDHE-RSA-AES256-SHA384 486 4234 -% 866806 1966 856707 7538 0 0 192.168.186.76 CH - [2015-05-29 12:45:26.411874] "GET /EMail/overview.aspx HTTP/1.1" 200 5537 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "39f26f8.5233cd81f253c" VjIG1qwxQzZrjAbVT-gAAABb TLSv1.2 ECDHE-RSA-AES256-SHA384 1004 6219 -% 923729 2553 917487 2929 0 0 192.168.186.76 CH - [2015-05-29 12:45:26.407398] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "39f26f8.5233cd81f253c" VjIG1qwxQzZrjAbVT-cAAABf TLSv1.2 ECDHE-RSA-AES256-SHA384 1036 9827 -% 1432224 5408 417681 3505 0 0 192.168.186.76 CH - [2015-05-29 12:45:27.360622] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "39f26f8.5233cd81f253c" VjIG16wxQzZrjAbVT-kAAABY TLSv1.2 ECDHE-RSA-AES256-SHA384 518 1354 -% 879734 2102 876835 170 0 0 192.168.186.76 CH - [2015-05-29 12:45:27.877750] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "39f26f8.5233cd81f253c" VjIG16wxQzZrjAbVT-sAAABi TLSv1.2 ECDHE-RSA-AES256-SHA384 566 1370 -% 905522 4180 900311 208 0 0 192.168.186.76 CH - [2015-05-29 12:45:29.336335] "GET /EMail/inbox.aspx HTTP/1.1" 200 8389 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "39f26f8.5233cd81f253c" VjIG2awxQzZrjAbVT-wAAABZ TLSv1.2 ECDHE-RSA-AES256-SHA384 486 8991 -% 1419637 3294 412268 3468 0 0 192.168.186.76 CH - [2015-05-29 12:45:30.780959] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "39f26f8.5233cd81f253c" VjIG2qwxQzZrjAbVT-0AAABd TLSv1.2 ECDHE-RSA-AES256-SHA384 518 634 -% 926019 1949 923119 162 0 0 192.168.186.76 CH - [2015-05-29 12:45:30.780988] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "39f26f8.5233cd81f253c" VjIG2qwxQzZrjAbVT-4AAABj TLSv1.2 ECDHE-RSA-AES256-SHA384 518 634 -% 1057225 1944 54164 273 0 0 192.168.186.76 CH - [2015-05-29 12:45:30.781054] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "39f26f8.5233cd81f253c" VjIG2qwxQzZrjAbVT-8AAABa TLSv1.2 ECDHE-RSA-AES256-SHA384 518 1914 -% 1163150 2582 159248 232 0 0 192.168.186.76 CH - [2015-05-29 12:45:33.155264] "GET /EMail/message.aspx?&mailId=3919_1&folderId=947_65&mailPos=0 HTTP/1.1" 200 15653 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "39f26f8.5233cd81f253c" VjIG3awxQzZrjAbVUAAAAABW TLSv1.2 ECDHE-RSA-AES256-SHA384 534 16340 -% 3524881 4062 490503 28629 0 0 192.168.186.76 CH - [2015-05-29 12:45:39.437594] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/message.aspx?&mailId=3919_1&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "39f26f8.5233cd81f253c" VjIG46wxQzZrjAbVUAcAAABk TLSv1.2 ECDHE-RSA-AES256-SHA384 550 2186 -% 1065378 1996 62673 168 0 0 192.168.186.76 CH - [2015-05-29 12:45:50.910153] "GET /EMail/scripts/tinymce/plugins/print/plugin.min.js HTTP/1.1" 200 182 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3919_1&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "39f26f8.5233cd81f253c" VjIG7qwxQzZrjAbVUA0AAABy TLSv1.2 ECDHE-RSA-AES256-SHA384 1175 4891 55% 1264348 2111 261276 286 0 0 192.168.186.76 CH - [2015-05-29 12:45:50.901557] "GET /EMail/scripts/tinymce/plugins/preview/plugin.min.js HTTP/1.1" 200 737 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3919_1&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "39f26f8.5233cd81f253c" VjIG7qwxQzZrjAbUDz8AAAA7 TLSv1.2 ECDHE-RSA-AES256-SHA384 1175 5451 51% 1289350 3001 285231 266 0 0 192.168.186.76 CH - [2015-05-29 12:45:50.902513] "GET /EMail/scripts/tinymce/plugins/paste/plugin.min.js HTTP/1.1" 200 6239 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3919_1&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "39f26f8.5233cd81f253c" VjIG7qwxQzZrjAbUD0AAAAAD TLSv1.2 ECDHE-RSA-AES256-SHA384 1175 11040 40% 1572879 2733 567955 192 0 0 192.168.186.76 CH - [2015-05-29 12:45:51.416602] "GET /EMail/scripts/tinymce/plugins/fullpage/plugin.min.js HTTP/1.1" 200 2325 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3919_1&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "39f26f8.5233cd81f253c" VjIG76wxQzZrjAbVUA4AAABp TLSv1.2 ECDHE-RSA-AES256-SHA384 1100 3205 36% 1492305 3065 487884 179 0 0 192.168.186.76 CH - [2015-05-29 12:45:52.187239] "GET /EMail/scripts/tinymce/plugins/hr/plugin.min.js HTTP/1.1" 200 191 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3919_1&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "39f26f8.5233cd81f253c" VjIG8KwxQzZrjAbVUA8AAABc TLSv1.2 ECDHE-RSA-AES256-SHA384 582 831 53% 1091682 2019 88845 159 0 0 192.168.186.76 CH - [2015-05-29 12:45:52.205730] "GET /EMail/scripts/tinymce/plugins/anchor/plugin.min.js HTTP/1.1" 200 339 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3919_1&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "39f26f8.5233cd81f253c" VjIG8KwxQzZrjAbUD0EAAAAA TLSv1.2 ECDHE-RSA-AES256-SHA384 582 975 63% 1276700 2488 273352 154 0 0 192.168.186.76 CH - [2015-05-29 12:45:52.494786] "GET /EMail/scripts/tinymce/plugins/visualchars/plugin.min.js HTTP/1.1" 200 608 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3919_1&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "39f26f8.5233cd81f253c" VjIG8KwxQzZrjAbUD0IAAAA@ TLSv1.2 ECDHE-RSA-AES256-SHA384 582 1247 54% 1017752 2330 14637 133 0 0 192.168.186.76 CH - [2015-05-29 12:45:52.925177] "GET /EMail/scripts/tinymce/plugins/table/plugin.min.js HTTP/1.1" 200 9181 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3919_1&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "39f26f8.5233cd81f253c" VjIG8KwxQzZrjAbVUBAAAAB3 TLSv1.2 ECDHE-RSA-AES256-SHA384 582 10657 32% 1007492 2258 1804 215 0 0 192.168.186.76 CH - [2015-05-29 12:45:54.017352] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5873 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3919_1&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "39f26f8.5233cd81f253c" VjIG8qwxQzZrjAbUD0MAAAAC TLSv1.2 ECDHE-RSA-AES256-SHA384 534 9650 -% 963294 2347 0 0 0 0 192.168.186.76 CH - [2015-05-29 12:45:53.970599] "GET /EMail/scripts/tinymce/skins/lightgray/skin.min.css HTTP/1.1" 200 6042 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3919_1&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "39f26f8.5233cd81f253c" VjIG8awxQzZrjAbVUBEAAAB2 TLSv1.2 ECDHE-RSA-AES256-SHA384 566 7420 17% 1017413 2202 11043 249 0 0 192.168.186.76 CH - [2015-05-29 12:45:55.025752] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce.eot? HTTP/1.1" 200 10024 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3919_1&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "39f26f8.5233cd81f253c" VjIG86wxQzZrjAbVUBIAAAB5 TLSv1.2 ECDHE-RSA-AES256-SHA384 598 10724 -% 955747 2058 952512 213 0 0 192.168.144.21 CH - [2015-05-29 12:46:14.455956] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "e2f65d26.52339c37e1e3d" VjIHBqwxQzZrjAbVUBwAAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 694 5523 -% 2490 1614 62 138 0 0 192.168.186.76 CH - [2015-05-29 12:46:28.414948] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3919_1&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "39f26f8.5233cd81f253c" VjIHFKwxQzZrjAbVUB8AAABD TLSv1.2 ECDHE-RSA-AES256-SHA384 7986 4545 -% 1737343 375627 341157 234 83 0 192.168.186.76 CH - [2015-05-29 12:46:30.163408] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3919_1&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "39f26f8.5233cd81f253c" VjIHFqwxQzZrjAbVUCEAAABC TLSv1.2 ECDHE-RSA-AES256-SHA384 662 4554 -% 823904 3596 812107 7695 0 0 192.168.186.76 CH - [2015-05-29 12:46:34.275964] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8388 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "39f26f8.5233cd81f253c" VjIHGqwxQzZrjAbVUCIAAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 502 8991 -% 1367265 2270 361672 2633 0 0 192.168.186.76 CH - [2015-05-29 12:46:34.277542] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "39f26f8.5233cd81f253c" VjIHGqwxQzZrjAbVUCMAAABA TLSv1.2 ECDHE-RSA-AES256-SHA384 1111 13742 -% 1535699 2789 522857 4653 0 0 192.168.186.76 CH - [2015-05-29 12:46:35.667187] "GET /EMail/images/msgOpenedReplied.png HTTP/1.1" 200 717 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "39f26f8.5233cd81f253c" VjIHG6wxQzZrjAbVUCUAAABI TLSv1.2 ECDHE-RSA-AES256-SHA384 534 1226 -% 911690 3049 907776 191 0 0 192.168.186.76 CH - [2015-05-29 12:46:38.765520] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "39f26f8.5233cd81f253c" VjIHHqwxQzZrjAbVUCYAAABH TLSv1.2 ECDHE-RSA-AES256-SHA384 790 405 -% 1167628 9641 156961 268 0 0 192.168.186.76 CH - [2015-05-29 12:46:39.945915] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7288 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "39f26f8.5233cd81f253c" VjIHH6wxQzZrjAbVUCgAAABM TLSv1.2 ECDHE-RSA-AES256-SHA384 550 7802 -% 987780 4910 978137 3902 0 0 192.168.186.76 CH - [2015-05-29 12:56:25.020669] "GET /EMail/overview.aspx HTTP/1.1" 200 5538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjIJaawxQzZrjAbVUH8AAABr TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 10134 -% 1198509 4100 189308 3217 3 0 192.168.186.76 CH - [2015-05-29 12:56:30.522324] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjIJbqwxQzZrjAbVUIEAAABq TLSv1.2 ECDHE-RSA-AES256-SHA384 694 9666 -% 1814435 6293 796221 5225 3 0 192.168.111.207 CH - [2015-05-29 13:11:17.580549] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7920 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "5588aa1c.5233d354a1f05" VjIM5awxQzZrjAbVUQoAAABz TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1135 12520 -% 956798 7689 942939 3927 6 0 192.168.111.207 CH - [2015-05-29 13:11:18.605657] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "5588aa1c.5233d354a1f05" VjIM5qwxQzZrjAbVUQsAAAB0 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 848 2545 14% 923007 9782 910726 153 6 0 192.168.111.207 CH - [2015-05-29 13:11:18.638330] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "5588aa1c.5233d354a1f05" VjIM5qwxQzZrjAbVUQwAAABs TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1184 5897 22% 917950 10059 906011 109 6 0 192.168.111.207 CH - [2015-05-29 13:18:42.245925] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8474 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "5588aa1c.5233d354a1f05" VjIOoqwxQzZrjAbVUUUAAABc TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1561 12946 -% 990760 11095 975204 2808 6 0 192.168.111.207 CH - [2015-05-29 13:18:42.247545] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "5588aa1c.5233d354a1f05" VjIOoqwxQzZrjAbVUUYAAAB5 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1578 13200 -% 1203780 11606 185491 2811 6 0 192.168.146.78 CH - [2015-05-29 13:27:41.037135] "GET /EMail/message.aspx?&mailId=3918_39&folderId=2634_79&mailPos=0 HTTP/1.1" 200 7335 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "41a874d9.5233b53bb559d" VjIQvawxQzZrjAbVUZEAAABD TLSv1.2 ECDHE-RSA-AES128-SHA256 895 11779 -% 848436 3541 840231 3902 0 0 192.168.146.78 CH - [2015-05-29 13:27:42.061371] "GET /EMail/login.aspx HTTP/1.1" 200 7335 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "41a874d9.5233b53bb559d" VjIQvqwxQzZrjAbVUZIAAABC TLSv1.2 ECDHE-RSA-AES128-SHA256 486 7818 -% 927825 3446 919860 3678 0 0 192.168.146.78 CH - [2015-05-29 13:27:49.642056] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "41a874d9.5233b53bb559d" VjIQxawxQzZrjAbUD@AAAAAm TLSv1.2 ECDHE-RSA-AES128-SHA256 932 630 -% 972524 4790 966856 271 0 0 192.168.146.78 CH - [2015-05-29 13:27:50.626317] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "41a874d9.5233b53bb559d" VjIQxqwxQzZrjAbUD@EAAAAl TLSv1.2 ECDHE-RSA-AES128-SHA256 518 3882 -% 881337 2452 876484 1632 0 0 192.168.146.78 CH - [2015-05-29 13:27:51.614268] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "41a874d9.5233b53bb559d" VjIQx6wxQzZrjAbUD@IAAAAn TLSv1.2 ECDHE-RSA-AES128-SHA256 486 4202 -% 961480 3062 950242 7443 0 0 192.168.146.78 CH - [2015-05-29 13:27:51.686838] "GET /EMail/overview.aspx HTTP/1.1" 200 5306 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "41a874d9.5233b53bb559d" VjIQx6wxQzZrjAbVUZQAAABE TLSv1.2 ECDHE-RSA-AES128-SHA256 772 5963 -% 1022523 2826 14602 4053 0 0 192.168.146.78 CH - [2015-05-29 13:27:51.783178] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "41a874d9.5233b53bb559d" VjIQx6wxQzZrjAbVUZUAAABA TLSv1.2 ECDHE-RSA-AES128-SHA256 804 9683 -% 1191961 2525 179235 4509 0 0 192.168.146.78 CH - [2015-05-29 13:27:54.066920] "GET /EMail/inbox.aspx HTTP/1.1" 200 51491 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "41a874d9.5233b53bb559d" VjIQyqwxQzZrjAbVUZYAAABI TLSv1.2 ECDHE-RSA-AES128-SHA256 486 52657 -% 2413857 3203 838330 16806 0 0 192.168.146.78 CH - [2015-05-29 13:27:58.440983] "GET /EMail/message.aspx?&mailId=3918_39&folderId=2634_79&mailPos=0 HTTP/1.1" 200 19699 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "41a874d9.5233b53bb559d" VjIQzqwxQzZrjAbVUZcAAABG TLSv1.2 ECDHE-RSA-AES128-SHA256 534 20430 -% 1296470 4039 254602 35353 0 0 192.168.96.45 CH - [2015-05-29 13:39:58.250335] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7366 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "8a66fe98.5233d9bd9755f" VjITnqwxQzZrjAbVUf0AAABc TLSv1 AES256-SHA 885 11449 -% 895992 1274 890921 3263 0 0 192.168.96.45 CH - [2015-05-29 13:39:59.277153] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "8a66fe98.5233d9bd9755f" VjITn6wxQzZrjAbVUf8AAAB5 TLSv1 AES256-SHA 598 2569 14% 877982 4749 871502 168 0 0 192.168.96.45 CH - [2015-05-29 13:39:59.715216] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "8a66fe98.5233d9bd9755f" VjITn6wxQzZrjAbVUgAAAAB9 TLSv1 AES256-SHA 1093 3700 -% 1167677 3143 163662 154 0 0 192.168.96.45 CH - [2015-05-29 13:39:59.730540] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "8a66fe98.5233d9bd9755f" VjITn6wxQzZrjAbVUgEAAAB8 TLSv1 AES256-SHA 1093 3700 -% 1296398 3612 292009 202 0 0 192.168.96.45 CH - [2015-05-29 13:39:59.750001] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "8a66fe98.5233d9bd9755f" VjITn6wxQzZrjAbVUgIAAAB6 TLSv1 AES256-SHA 1141 3700 -% 1333292 2002 330518 204 0 0 192.168.96.45 CH - [2015-05-29 13:40:01.273802] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "8a66fe98.5233d9bd9755f" VjIToawxQzZrjAbVUgMAAAB@ TLSv1 AES256-SHA 726 213 -% 983877 3276 979686 208 0 0 192.168.96.45 CH - [2015-05-29 13:40:08.624854] "GET /EMail/main.aspx HTTP/1.1" 200 3398 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "8a66fe98.5233d9bd9755f" VjITqKwxQzZrjAbUEBMAAAAZ TLSv1 AES256-SHA 1005 7301 -% 896256 2051 892043 1648 0 0 192.168.96.45 CH - [2015-05-29 13:40:09.712493] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "8a66fe98.5233d9bd9755f" VjITqawxQzZrjAbVUgcAAABF TLSv1 AES256-SHA 989 9221 -% 1005860 2097 439 2698 0 0 192.168.96.45 CH - [2015-05-29 13:40:09.714708] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "8a66fe98.5233d9bd9755f" VjITqawxQzZrjAbUEBUAAAAb TLSv1 AES256-SHA 973 7637 -% 1112047 2760 98615 10026 0 0 192.168.96.45 CH - [2015-05-29 13:40:11.672390] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "8a66fe98.5233d9bd9755f" VjITq6wxQzZrjAbUEBYAAAAf TLSv1 AES256-SHA 1133 3696 -% 866483 2782 862786 250 0 0 192.168.96.45 CH - [2015-05-29 13:40:14.020010] "GET /EMail/inbox.aspx HTTP/1.1" 200 8593 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "8a66fe98.5233d9bd9755f" VjITrqwxQzZrjAbVUggAAABE TLSv1 AES256-SHA 989 12554 -% 950780 2003 944431 3553 0 0 192.168.96.45 CH - [2015-05-29 13:40:16.917746] "GET /EMail/message.aspx?&mailId=3917_39&folderId=1157_50&mailPos=0 HTTP/1.1" 200 11202 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "8a66fe98.5233d9bd9755f" VjITsKwxQzZrjAbVUgkAAABI TLSv1 AES256-SHA 1021 15199 -% 1252291 8139 222975 19809 0 0 192.168.96.45 CH - [2015-05-29 13:40:37.965336] "GET /EMail/images/active.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "8a66fe98.5233d9bd9755f" VjITxawxQzZrjAbUEBsAAAAk TLSv1 AES256-SHA 1085 3696 -% 838159 2289 834979 196 0 0 192.168.96.45 CH - [2015-05-29 13:40:40.863631] "GET /EMail/inbox.aspx HTTP/1.1" 200 8583 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "8a66fe98.5233d9bd9755f" VjITyKwxQzZrjAbVUgsAAABM TLSv1 AES256-SHA 989 12538 -% 1177022 3213 170156 2764 0 0 192.168.96.45 CH - [2015-05-29 13:40:42.218054] "GET /EMail/images/msgOpened.png HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "8a66fe98.5233d9bd9755f" VjITyqwxQzZrjAbUEB0AAAAo TLSv1 AES256-SHA 1085 3696 -% 829443 2163 826587 160 0 0 192.168.96.45 CH - [2015-05-29 13:40:49.968672] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "8a66fe98.5233d9bd9755f" VjIT0awxQzZrjAbVUg0AAABO TLSv1 AES256-SHA 1005 3904 -% 968849 2618 965470 195 0 0 192.168.96.45 CH - [2015-05-29 13:40:52.318068] "GET /favicon.ico HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0)" www.example.com 192.168.34.16 443 - - + "c91f4b2b.5233d9c1d22a6" VjIT1KwxQzZrjAbVUg4AAABN TLSv1 AES256-SHA 925 3680 -% 3026 2092 66 148 0 0 192.168.96.45 CH - [2015-05-29 13:40:52.346508] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "8a66fe98.5233d9bd9755f" VjIT1KwxQzZrjAbVUg8AAABT TLSv1 AES256-SHA 941 3808 -% 1019541 2284 16392 205 0 0 192.168.96.45 CH - [2015-05-29 13:40:53.515920] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "8a66fe98.5233d9bd9755f" VjIT1awxQzZrjAbVUhEAAABP TLSv1 AES256-SHA 925 11269 -% 838803 1943 834198 2155 0 0 192.168.96.45 CH - [2015-05-29 13:40:54.567258] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "8a66fe98.5233d9bd9755f" VjIT1qwxQzZrjAbUEB8AAAAp TLSv1 AES256-SHA 1085 3696 -% 1253082 2422 249752 195 0 0 192.168.153.25 CH - [2015-05-29 13:43:11.080625] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7944 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIUX6wxQzZrjAbVUh4AAABW TLSv1 ECDHE-RSA-AES256-SHA 656 12353 -% 962294 1458 957750 2513 0 0 192.168.153.25 CH - [2015-05-29 13:43:12.756357] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIUYKwxQzZrjAbVUiAAAABn TLSv1 ECDHE-RSA-AES256-SHA 507 2569 14% 821277 1949 817817 205 0 0 192.168.153.25 CH - [2015-05-29 13:43:13.652590] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIUYawxQzZrjAbVUiEAAABt TLSv1 ECDHE-RSA-AES256-SHA 725 2032 22% 951075 2068 947666 203 0 0 192.168.153.25 CH - [2015-05-29 13:43:13.862723] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIUYawxQzZrjAbVUiIAAABu TLSv1 ECDHE-RSA-AES256-SHA 725 752 56% 916838 3081 912423 181 0 0 192.168.153.25 CH - [2015-05-29 13:43:13.955403] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIUYawxQzZrjAbVUiQAAABr TLSv1 ECDHE-RSA-AES256-SHA 757 7813 22% 1042692 2779 36319 271 0 0 192.168.153.25 CH - [2015-05-29 13:43:13.950754] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIUYawxQzZrjAbVUiMAAABk TLSv1 ECDHE-RSA-AES256-SHA 773 1835 -% 1066639 2782 62939 157 0 0 192.168.153.25 CH - [2015-05-29 13:43:15.329434] "GET /EMail/scripts/csshover.htc HTTP/1.1" 200 4255 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIUY6wxQzZrjAbVUiUAAABq TLSv1 ECDHE-RSA-AES256-SHA 395 4682 -% 822099 2307 818629 296 0 0 192.168.153.25 CH - [2015-05-29 13:43:15.692141] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIUY6wxQzZrjAbVUicAAABm TLSv1 ECDHE-RSA-AES256-SHA 555 1802 -% 918248 2015 915413 273 0 0 192.168.153.25 CH - [2015-05-29 13:43:16.811556] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIUZKwxQzZrjAbVUigAAABw TLSv1 ECDHE-RSA-AES256-SHA 379 1578 -% 834676 4759 828668 241 0 0 192.168.153.25 CH - [2015-05-29 13:51:19.562230] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWR6wxQzZrjAbVUnEAAAB4 TLSv1 ECDHE-RSA-AES256-SHA 848 5921 -% 962034 2814 958294 196 0 0 192.168.153.25 CH - [2015-05-29 13:51:20.157724] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWSKwxQzZrjAbVUnMAAAB9 TLSv1 ECDHE-RSA-AES256-SHA 1045 518 -% 1673184 7642 664496 356 0 0 192.168.153.25 CH - [2015-05-29 13:51:21.854502] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7375 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWSawxQzZrjAbVUnQAAAB6 TLSv1 ECDHE-RSA-AES256-SHA 603 7818 -% 974446 4901 964704 4003 0 0 192.168.153.25 CH - [2015-05-29 13:51:22.977698] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWSqwxQzZrjAbVUnUAAAB@ TLSv1 ECDHE-RSA-AES256-SHA 587 2569 14% 882496 4338 876376 238 0 0 192.168.153.25 CH - [2015-05-29 13:51:23.152560] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWS6wxQzZrjAbVUnYAAAB7 TLSv1 ECDHE-RSA-AES256-SHA 805 2032 22% 957523 1800 954435 206 0 0 192.168.153.25 CH - [2015-05-29 13:51:23.146778] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWS6wxQzZrjAbUEEsAAAAY TLSv1 ECDHE-RSA-AES256-SHA 837 7813 22% 1017924 3073 11745 188 0 0 192.168.153.25 CH - [2015-05-29 13:51:23.163224] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWS6wxQzZrjAbVUngAAABJ TLSv1 ECDHE-RSA-AES256-SHA 853 358 -% 1175266 1905 172569 191 0 0 192.168.153.25 CH - [2015-05-29 13:51:23.163062] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWS6wxQzZrjAbVUncAAAB- TLSv1 ECDHE-RSA-AES256-SHA 757 4245 23% 1198493 1969 194355 176 0 0 192.168.153.25 CH - [2015-05-29 13:51:23.163845] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWS6wxQzZrjAbVUnkAAABB TLSv1 ECDHE-RSA-AES256-SHA 805 752 56% 1204619 1791 202194 103 0 0 192.168.153.25 CH - [2015-05-29 13:51:24.487261] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWTKwxQzZrjAbVUnsAAABF TLSv1 ECDHE-RSA-AES256-SHA 635 213 -% 615042 2388 611993 163 0 0 192.168.153.25 CH - [2015-05-29 13:51:24.467603] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWTKwxQzZrjAbVUnoAAABD TLSv1 ECDHE-RSA-AES256-SHA 475 213 -% 886460 3105 882260 210 0 0 192.168.153.25 CH - [2015-05-29 13:51:30.239244] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWUqwxQzZrjAbVUnwAAABC TLSv1 ECDHE-RSA-AES256-SHA 539 2090 -% 930462 2104 927436 256 0 0 192.168.153.25 CH - [2015-05-29 13:51:30.918536] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWUqwxQzZrjAbVUn0AAABE TLSv1 ECDHE-RSA-AES256-SHA 901 566 -% 1072058 4087 67034 282 0 0 192.168.153.25 CH - [2015-05-29 13:51:31.997619] "GET /EMail/main.aspx HTTP/1.1" 200 3407 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWU6wxQzZrjAbVUn4AAABI TLSv1 ECDHE-RSA-AES256-SHA 539 3834 -% 736158 2284 731819 1554 0 0 192.168.153.25 CH - [2015-05-29 13:51:32.832733] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWVKwxQzZrjAbVUn8AAABG TLSv1 ECDHE-RSA-AES256-SHA 555 2431 14% 1002516 3081 0 246 0 0 192.168.153.25 CH - [2015-05-29 13:51:32.981996] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWVKwxQzZrjAbVUoEAAABM TLSv1 ECDHE-RSA-AES256-SHA 773 2032 22% 1050234 2745 46411 206 0 0 192.168.153.25 CH - [2015-05-29 13:51:32.992845] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWVKwxQzZrjAbVUoIAAABK TLSv1 ECDHE-RSA-AES256-SHA 773 752 56% 1105295 2351 102218 156 0 0 192.168.153.25 CH - [2015-05-29 13:51:32.994000] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWVKwxQzZrjAbVUoMAAABL TLSv1 ECDHE-RSA-AES256-SHA 805 4245 23% 1158984 2774 154231 193 0 0 192.168.153.25 CH - [2015-05-29 13:51:33.010079] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWVawxQzZrjAbVUoQAAABO TLSv1 ECDHE-RSA-AES256-SHA 805 8173 22% 1240617 1726 234559 174 0 0 192.168.153.25 CH - [2015-05-29 13:51:34.339141] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWVqwxQzZrjAbVUoUAAABU TLSv1 ECDHE-RSA-AES256-SHA 491 4154 -% 1226877 3141 216172 6447 0 0 192.168.153.25 CH - [2015-05-29 13:51:34.395325] "GET /EMail/overview.aspx HTTP/1.1" 200 5299 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWVqwxQzZrjAbVUocAAABQ TLSv1 ECDHE-RSA-AES256-SHA 491 5738 -% 1172573 1762 168499 1857 0 0 192.168.153.25 CH - [2015-05-29 13:51:34.364107] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWVqwxQzZrjAbVUoYAAABN TLSv1 ECDHE-RSA-AES256-SHA 507 9234 -% 1730865 2188 718196 5555 0 0 192.168.153.25 CH - [2015-05-29 13:51:35.608516] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWV6wxQzZrjAbVUokAAABT TLSv1 ECDHE-RSA-AES256-SHA 555 1887 22% 998490 1994 995519 157 0 0 192.168.153.25 CH - [2015-05-29 13:51:35.607242] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWV6wxQzZrjAbVUogAAABV TLSv1 ECDHE-RSA-AES256-SHA 555 2569 14% 1038894 2361 35052 150 0 0 192.168.153.25 CH - [2015-05-29 13:51:36.160708] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWWKwxQzZrjAbVUo4AAABb TLSv1 ECDHE-RSA-AES256-SHA 555 1274 -% 515935 2206 512918 184 0 0 192.168.153.25 CH - [2015-05-29 13:51:35.778228] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWV6wxQzZrjAbVUo0AAABX TLSv1 ECDHE-RSA-AES256-SHA 725 1403 -% 903539 2133 900792 124 0 0 192.168.153.25 CH - [2015-05-29 13:51:35.628185] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/header.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWV6wxQzZrjAbVUosAAABP TLSv1 ECDHE-RSA-AES256-SHA 587 8028 22% 1072458 2041 67048 119 0 0 192.168.153.25 CH - [2015-05-29 13:51:35.612284] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWV6wxQzZrjAbVUooAAABS TLSv1 ECDHE-RSA-AES256-SHA 555 607 56% 1189613 1813 187105 169 0 0 192.168.153.25 CH - [2015-05-29 13:51:35.722784] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWV6wxQzZrjAbVUowAAABR TLSv1 ECDHE-RSA-AES256-SHA 805 358 -% 1199218 3091 195216 189 0 0 192.168.153.25 CH - [2015-05-29 13:51:36.806925] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWWKwxQzZrjAbVUo8AAABg TLSv1 ECDHE-RSA-AES256-SHA 475 213 -% 639145 1996 636290 222 0 0 192.168.153.25 CH - [2015-05-29 13:51:36.841217] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWWKwxQzZrjAbVUpAAAABf TLSv1 ECDHE-RSA-AES256-SHA 475 213 -% 740643 3443 736287 214 0 0 192.168.153.25 CH - [2015-05-29 13:51:36.997941] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWWKwxQzZrjAbVUpIAAABi TLSv1 ECDHE-RSA-AES256-SHA 603 213 -% 688665 3001 684709 238 0 0 192.168.153.25 CH - [2015-05-29 13:51:36.859856] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWWKwxQzZrjAbVUpEAAABY TLSv1 ECDHE-RSA-AES256-SHA 475 213 -% 873784 3867 868919 194 0 0 192.168.153.25 CH - [2015-05-29 13:51:40.478817] "GET /EMail/inbox.aspx HTTP/1.1" 200 8789 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWXKwxQzZrjAbVUpQAAABd TLSv1 ECDHE-RSA-AES256-SHA 491 9263 -% 1255493 3154 246756 4315 0 0 192.168.153.25 CH - [2015-05-29 13:51:41.820395] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWXawxQzZrjAbVUpYAAABa TLSv1 ECDHE-RSA-AES256-SHA 555 607 56% 898760 1804 896140 160 0 0 192.168.153.25 CH - [2015-05-29 13:51:41.819281] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWXawxQzZrjAbVUpUAAABj TLSv1 ECDHE-RSA-AES256-SHA 555 2569 14% 1025114 2057 21783 169 0 0 192.168.153.25 CH - [2015-05-29 13:51:41.844283] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWXawxQzZrjAbVUpgAAABl TLSv1 ECDHE-RSA-AES256-SHA 555 1887 22% 1027169 3387 22540 147 0 0 192.168.153.25 CH - [2015-05-29 13:51:41.821672] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWXawxQzZrjAbVUpcAAABe TLSv1 ECDHE-RSA-AES256-SHA 587 7668 22% 1061543 1755 56375 144 0 0 192.168.153.25 CH - [2015-05-29 13:51:42.037803] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWXqwxQzZrjAbVUpoAAABW TLSv1 ECDHE-RSA-AES256-SHA 725 683 -% 1025654 1985 22896 200 0 0 192.168.153.25 CH - [2015-05-29 13:51:42.025740] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWXqwxQzZrjAbVUpkAAABh TLSv1 ECDHE-RSA-AES256-SHA 725 699 -% 1073570 2114 70623 234 0 0 192.168.153.25 CH - [2015-05-29 13:51:42.039906] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWXqwxQzZrjAbVUpsAAABn TLSv1 ECDHE-RSA-AES256-SHA 725 1963 -% 1113772 2337 110704 203 0 0 192.168.153.25 CH - [2015-05-29 13:51:43.421809] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWX6wxQzZrjAbVUpwAAABt TLSv1 ECDHE-RSA-AES256-SHA 475 213 -% 871534 3551 867220 155 0 0 192.168.153.25 CH - [2015-05-29 13:53:00.742420] "GET /EMail/message.aspx?&mailId=3919_8&folderId=3505_31&mailPos=0 HTTP/1.1" 200 35751 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWrKwxQzZrjAbVUqcAAAB3 TLSv1 ECDHE-RSA-AES256-SHA 741 36542 -% 1540113 4939 442411 85831 0 0 192.168.153.25 CH - [2015-05-29 13:53:02.375000] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/message.aspx?&mailId=3919_8&folderId=3505_31&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWrqwxQzZrjAbVUqgAAAB2 TLSv1 ECDHE-RSA-AES256-SHA 603 2569 14% 951098 4121 945047 180 0 0 192.168.153.25 CH - [2015-05-29 13:53:02.609873] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/message.aspx?&mailId=3919_8&folderId=3505_31&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWrqwxQzZrjAbVUqoAAABc TLSv1 ECDHE-RSA-AES256-SHA 821 752 56% 769128 2680 765744 108 0 0 192.168.153.25 CH - [2015-05-29 13:53:02.593702] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/message.aspx?&mailId=3919_8&folderId=3505_31&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWrqwxQzZrjAbVUqkAAABo TLSv1 ECDHE-RSA-AES256-SHA 821 2032 22% 832356 2481 828887 164 0 0 192.168.153.25 CH - [2015-05-29 13:53:02.610200] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/message.aspx?&mailId=3919_8&folderId=3505_31&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWrqwxQzZrjAbVUqsAAAB0 TLSv1 ECDHE-RSA-AES256-SHA 853 8173 22% 988750 2415 982836 165 0 0 192.168.153.25 CH - [2015-05-29 13:53:03.662317] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWr6wxQzZrjAbVUqwAAAB1 TLSv1 ECDHE-RSA-AES256-SHA 475 213 -% 897883 2450 894801 154 0 0 192.168.153.25 CH - [2015-05-29 13:53:23.539970] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "b4e39aac.5233da757d0b1" VjIWw6wxQzZrjAbUEFMAAAAg TLSv1 ECDHE-RSA-AES256-SHA 725 2235 -% 809645 1972 806885 207 0 0 192.168.28.1 CH - [2015-05-29 14:08:38.086041] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 5.1; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "df6e455f.5233c34f7a3a6" VjIaVqwxQzZrjAbVUzUAAABB TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 840 4430 -% 1006390 2658 2800 196 0 0 192.168.28.1 CH - [2015-05-29 14:08:39.323474] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 5.1; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "df6e455f.5233c34f7a3a6" VjIaV6wxQzZrjAbVUzYAAABF TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 443 318 -% 812181 2257 808774 383 0 0 192.168.28.1 CH - [2015-05-29 14:08:40.258046] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 5.1; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "df6e455f.5233c34f7a3a6" VjIaWKwxQzZrjAbVUzcAAABD TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 425 7758 -% 922645 3060 916375 2523 0 0 192.168.212.2 CH - [2015-05-29 14:44:51.744554] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjIi06wxQzZrjAbVVI8AAABv TLSv1 ECDHE-RSA-AES256-SHA 1032 4257 -% 1313773 5655 307261 168 0 0 192.168.212.2 CH - [2015-05-29 14:44:54.395275] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjIi1qwxQzZrjAbVVJAAAABm TLSv1 ECDHE-RSA-AES256-SHA 840 7990 -% 1389681 2084 375891 11100 0 0 192.168.212.2 CH - [2015-05-29 14:45:18.750723] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjIi7qwxQzZrjAbVVJIAAABp TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 2026548 3923 12989 4544 0 0 192.168.192.35 CH - [2015-05-29 14:45:39.067173] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8f9217b6.5233e4b773df5" VjIjA6wxQzZrjAbVVJYAAABo TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 835 7838 -% 865530 3313 859408 1750 0 0 192.168.192.35 CH - [2015-05-29 14:45:39.958106] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8f9217b6.5233e4b773df5" VjIjA6wxQzZrjAbVVJcAAAB0 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 503 2427 14% 982823 3065 977771 400 0 0 192.168.192.35 CH - [2015-05-29 14:45:41.845348] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8f9217b6.5233e4b773df5" VjIjBawxQzZrjAbVVJgAAABs TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 504 1876 22% 3933356 3087 929228 211 0 0 192.168.212.2 CH - [2015-05-29 14:53:05.011776] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 22797 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjIkwawxQzZrjAbVVNoAAAB5 TLSv1 ECDHE-RSA-AES256-SHA 840 27194 -% 1515243 3643 425532 9969 0 0 192.168.212.2 CH - [2015-05-29 14:53:29.655044] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3920_5&folderId=1001_9&attachmentId=2&token=32166039702192553E18 HTTP/1.1" 200 55253 "https://www.example.com/EMail/message.aspx?&mailId=3920_5&folderId=1001_9&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjIk2awxQzZrjAbVVOAAAAB7 TLSv1 ECDHE-RSA-AES256-SHA 984 60736 -% 2418476 4063 391143 209 0 0 192.168.212.2 CH - [2015-05-29 14:53:37.261522] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjIk4awxQzZrjAbUESsAAAAH TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 4696300 4007 682706 4563 0 0 192.168.212.2 CH - [2015-05-29 14:54:09.056974] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/moveToFolder.aspx?folderName=Inbox&mailId=3920_5&mailId=3920_4&mailId=3919_4&mailId=3917_28&mailId=3917_25&mailId=3917_23&mailId=3917_21&mailId=3917_20&mailId=3918_36&mailId=3917_18&mailId=3918_25&mailId=3918_16" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjIlAawxQzZrjAbVVOYAAABI TLSv1 ECDHE-RSA-AES256-SHA 1416 4177 -% 3064272 8272 55251 157 0 0 192.168.212.2 CH - [2015-05-29 14:54:14.172876] "GET /favicon.ico HTTP/1.1" 304 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "675101f3.5233ba9648040" VjIlBqwxQzZrjAbVVOoAAABU TLSv1 ECDHE-RSA-AES256-SHA 848 4028 -% 6442 4152 64 147 3 0 192.168.212.2 CH - [2015-05-29 14:54:13.507497] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7291 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjIlBawxQzZrjAbVVOgAAABM TLSv1 ECDHE-RSA-AES256-SHA 840 11558 -% 1049823 2383 43762 2989 0 0 192.168.212.2 CH - [2015-05-29 14:54:14.808713] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjIlBqwxQzZrjAbVVOsAAABO TLSv1 ECDHE-RSA-AES256-SHA 920 4049 -% 1163494 3110 159445 417 0 0 192.168.212.2 CH - [2015-05-29 14:59:22.109649] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9877 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjImOqwxQzZrjAbUEUEAAAAf TLSv1 ECDHE-RSA-AES256-SHA 840 14187 -% 1348683 4502 339520 3796 0 0 192.168.212.2 CH - [2015-05-29 14:59:22.110986] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjImOqwxQzZrjAbVVRcAAAB9 TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1797737 4065 783458 4516 0 0 192.168.212.2 CH - [2015-05-29 14:59:28.010187] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3920_7&folderId=1001_9&attachmentId=2&token=23325789068271852E18 HTTP/1.1" 200 59829 "https://www.example.com/EMail/message.aspx?&mailId=3920_7&folderId=1001_9&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d1aa5cf5.5233ba92c7713" VjImQKwxQzZrjAbVVRgAAAB@ TLSv1 ECDHE-RSA-AES256-SHA 984 65518 -% 1639797 4611 611120 180 0 0 192.168.254.25 CH - [2015-05-29 15:08:35.646443] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7372 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIoY6wxQzZrjAbVVWYAAABT TLSv1 ECDHE-RSA-AES256-SHA 624 11809 -% 2235620 1344 229936 3681 0 0 192.168.254.25 CH - [2015-05-29 15:08:38.384330] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIoZqwxQzZrjAbUEWsAAAAL TLSv1 ECDHE-RSA-AES256-SHA 709 752 56% 1159166 3006 155167 201 0 0 192.168.254.25 CH - [2015-05-29 15:08:38.303070] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIoZqwxQzZrjAbVVWgAAABb TLSv1 ECDHE-RSA-AES256-SHA 709 2032 22% 1731645 2993 727592 158 0 0 192.168.254.25 CH - [2015-05-29 15:08:38.228726] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIoZqwxQzZrjAbVVWcAAABV TLSv1 ECDHE-RSA-AES256-SHA 491 2431 14% 1853029 3693 847607 202 0 0 192.168.254.25 CH - [2015-05-29 15:08:38.421286] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIoZqwxQzZrjAbVVWoAAABR TLSv1 ECDHE-RSA-AES256-SHA 741 1835 -% 1676037 4528 670225 216 0 0 192.168.254.25 CH - [2015-05-29 15:08:38.391755] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIoZqwxQzZrjAbVVWkAAABX TLSv1 ECDHE-RSA-AES256-SHA 741 4404 23% 1708707 2338 703713 222 0 0 192.168.254.25 CH - [2015-05-29 15:08:38.384886] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIoZqwxQzZrjAbUEWwAAAAN TLSv1 ECDHE-RSA-AES256-SHA 725 8173 22% 1716574 4026 708195 169 0 0 192.168.254.25 CH - [2015-05-29 15:08:40.345324] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIoaKwxQzZrjAbVVWsAAABP TLSv1 ECDHE-RSA-AES256-SHA 539 1802 -% 892631 3332 888188 224 0 0 192.168.254.25 CH - [2015-05-29 15:08:40.312435] "GET /EMail/scripts/csshover.htc HTTP/1.1" 200 4255 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIoaKwxQzZrjAbUEW0AAAAM TLSv1 ECDHE-RSA-AES256-SHA 379 4682 -% 967349 1889 964661 163 0 0 192.168.254.25 CH - [2015-05-29 15:08:47.062493] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - X "4bd7701f.5233ed8ca7beb" VjIob6wxQzZrjAbUEW8AAAAO TLSv1 ECDHE-RSA-AES256-SHA 741 145 -% 1509414 3323 505104 187 0 0 192.168.254.25 CH - [2015-05-29 15:08:47.773238] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIob6wxQzZrjAbVVW0AAABS TLSv1 ECDHE-RSA-AES256-SHA 901 566 -% 1046722 3350 42639 179 0 0 192.168.254.25 CH - [2015-05-29 15:08:48.828551] "GET /EMail/main.aspx HTTP/1.1" 200 3404 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIocKwxQzZrjAbVVW4AAABg TLSv1 ECDHE-RSA-AES256-SHA 539 3834 -% 1499401 2787 494040 1854 0 0 192.168.254.25 CH - [2015-05-29 15:08:50.995158] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIocqwxQzZrjAbVVW8AAABi TLSv1 ECDHE-RSA-AES256-SHA 475 4154 -% 3873659 4227 862249 6534 0 0 192.168.254.25 CH - [2015-05-29 15:08:51.105438] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIoc6wxQzZrjAbVVXAAAABY TLSv1 ECDHE-RSA-AES256-SHA 725 9379 -% 6735596 3892 720577 4915 0 0 192.168.254.25 CH - [2015-05-29 15:08:51.118331] "GET /EMail/overview.aspx HTTP/1.1" 200 5302 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIoc6wxQzZrjAbVVXEAAABa TLSv1 ECDHE-RSA-AES256-SHA 693 5883 -% 6821311 2937 815977 1768 0 0 192.168.254.25 CH - [2015-05-29 15:08:58.569285] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIoeqwxQzZrjAbVVXMAAABl TLSv1 ECDHE-RSA-AES256-SHA 507 1258 -% 2005019 3382 852 156 0 0 192.168.254.25 CH - [2015-05-29 15:08:58.488749] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIoeqwxQzZrjAbVVXIAAABd TLSv1 ECDHE-RSA-AES256-SHA 555 1274 -% 2380769 1975 378130 189 0 0 192.168.254.25 CH - [2015-05-29 15:09:26.227490] "GET /EMail/newMessage.aspx?msg=new HTTP/1.1" 200 12043 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIolqwxQzZrjAbVVXkAAABn TLSv1 ECDHE-RSA-AES256-SHA 741 12656 -% 1810339 3439 784935 20275 3 3 192.168.254.25 CH - [2015-05-29 15:09:26.242280] "GET /EMail/tree.aspx?sNode-sharedTree=treeNewMsg HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIolqwxQzZrjAbVVXoAAABu TLSv1 ECDHE-RSA-AES256-SHA 757 9379 -% 2137456 3604 123106 3345 0 0 192.168.254.25 CH - [2015-05-29 15:09:28.646670] "GET /EMail/scripts/tinymce/tinymce.min.js HTTP/1.1" 200 102781 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIomKwxQzZrjAbVVXwAAABr TLSv1 ECDHE-RSA-AES256-SHA 507 106032 34% 1282036 3287 244324 194 0 0 192.168.254.25 CH - [2015-05-29 15:09:30.286811] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIomqwxQzZrjAbVVX0AAABk TLSv1 ECDHE-RSA-AES256-SHA 491 3354 -% 917211 3023 908525 5016 0 0 192.168.254.25 CH - [2015-05-29 15:09:31.674921] "GET /EMail/scripts/tinymce/langs/de.js HTTP/1.1" 200 2969 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIom6wxQzZrjAbVVX4AAABv TLSv1 ECDHE-RSA-AES256-SHA 507 3508 38% 775810 3155 771171 153 0 0 192.168.254.25 CH - [2015-05-29 15:09:31.777747] "GET /EMail/scripts/tinymce/plugins/print/plugin.min.js HTTP/1.1" 200 182 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIom6wxQzZrjAbVVYAAAABm TLSv1 ECDHE-RSA-AES256-SHA 741 848 55% 965652 3458 960845 193 0 0 192.168.254.25 CH - [2015-05-29 15:09:31.700209] "GET /EMail/scripts/tinymce/themes/modern/theme.min.js HTTP/1.1" 200 2651 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIom6wxQzZrjAbVVX8AAABq TLSv1 ECDHE-RSA-AES256-SHA 523 3188 41% 1188204 2769 184138 163 0 0 192.168.254.25 CH - [2015-05-29 15:09:31.827708] "GET /EMail/scripts/tinymce/plugins/paste/plugin.min.js HTTP/1.1" 200 6239 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIom6wxQzZrjAbVVYIAAABy TLSv1 ECDHE-RSA-AES256-SHA 741 6933 40% 1156718 2852 152152 179 0 0 192.168.254.25 CH - [2015-05-29 15:09:31.809333] "GET /EMail/scripts/tinymce/plugins/preview/plugin.min.js HTTP/1.1" 200 737 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIom6wxQzZrjAbVVYEAAABw TLSv1 ECDHE-RSA-AES256-SHA 741 1392 51% 1304211 1910 301545 158 0 0 192.168.254.25 CH - [2015-05-29 15:09:31.880467] "GET /EMail/scripts/tinymce/plugins/searchreplace/plugin.min.js HTTP/1.1" 200 2586 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIom6wxQzZrjAbVVYMAAABp TLSv1 ECDHE-RSA-AES256-SHA 741 3269 40% 1235006 2577 230867 145 0 0 192.168.254.25 CH - [2015-05-29 15:09:31.892378] "GET /EMail/scripts/tinymce/plugins/fullpage/plugin.min.js HTTP/1.1" 200 2325 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIom6wxQzZrjAbUEXIAAAAS TLSv1 ECDHE-RSA-AES256-SHA 741 3013 36% 1442329 1695 439731 156 0 0 192.168.254.25 CH - [2015-05-29 15:09:31.965899] "GET /EMail/scripts/tinymce/plugins/insertdatetime/plugin.min.js HTTP/1.1" 200 867 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIom6wxQzZrjAbVVYQAAABx TLSv1 ECDHE-RSA-AES256-SHA 741 1520 42% 1369813 3310 365428 166 0 0 192.168.254.25 CH - [2015-05-29 15:09:32.030449] "GET /EMail/scripts/tinymce/plugins/link/plugin.min.js HTTP/1.1" 200 1835 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIonKwxQzZrjAbVVYgAAABo TLSv1 ECDHE-RSA-AES256-SHA 741 2496 41% 1305844 3084 301312 199 0 0 192.168.254.25 CH - [2015-05-29 15:09:31.970965] "GET /EMail/scripts/tinymce/plugins/visualblocks/plugin.min.js HTTP/1.1" 200 525 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIom6wxQzZrjAbVVYYAAAB2 TLSv1 ECDHE-RSA-AES256-SHA 741 1184 43% 1365568 2611 362349 108 0 0 192.168.254.25 CH - [2015-05-29 15:09:32.001166] "GET /EMail/scripts/tinymce/plugins/hr/plugin.min.js HTTP/1.1" 200 191 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIonKwxQzZrjAbVVYcAAABc TLSv1 ECDHE-RSA-AES256-SHA 741 848 53% 1460484 3088 456441 186 0 0 192.168.254.25 CH - [2015-05-29 15:09:31.967927] "GET /EMail/scripts/tinymce/plugins/charmap/plugin.min.js HTTP/1.1" 200 2698 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIom6wxQzZrjAbVVYUAAAB3 TLSv1 ECDHE-RSA-AES256-SHA 741 3381 38% 1512355 2230 508905 142 0 0 192.168.254.25 CH - [2015-05-29 15:09:32.750427] "GET /EMail/scripts/tinymce/plugins/textcolor/plugin.min.js HTTP/1.1" 200 1647 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIonKwxQzZrjAbVVYsAAABs TLSv1 ECDHE-RSA-AES256-SHA 523 2159 44% 756488 2750 752556 145 0 0 192.168.254.25 CH - [2015-05-29 15:09:32.472223] "GET /EMail/scripts/tinymce/plugins/anchor/plugin.min.js HTTP/1.1" 200 339 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIonKwxQzZrjAbVVYoAAAB1 TLSv1 ECDHE-RSA-AES256-SHA 523 847 63% 1280191 3059 275740 355 0 0 192.168.254.25 CH - [2015-05-29 15:09:33.000123] "GET /EMail/scripts/tinymce/plugins/image/plugin.min.js HTTP/1.1" 200 2136 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIonawxQzZrjAbVVY0AAAB5 TLSv1 ECDHE-RSA-AES256-SHA 523 2676 42% 756387 2866 752289 153 0 0 192.168.254.25 CH - [2015-05-29 15:09:33.165161] "GET /EMail/scripts/tinymce/plugins/table/plugin.min.js HTTP/1.1" 200 9166 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIonawxQzZrjAbVVY4AAAB4 TLSv1 ECDHE-RSA-AES256-SHA 523 9753 32% 663858 2201 658033 198 0 0 192.168.254.25 CH - [2015-05-29 15:09:32.956443] "GET /EMail/scripts/tinymce/plugins/visualchars/plugin.min.js HTTP/1.1" 200 608 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIonKwxQzZrjAbVVYwAAABz TLSv1 ECDHE-RSA-AES256-SHA 523 1119 54% 1018898 1866 16110 213 0 0 192.168.254.25 CH - [2015-05-29 15:09:34.056582] "GET /EMail/scripts/tinymce/skins/lightgray/skin.min.css HTTP/1.1" 200 6071 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIonqwxQzZrjAbVVY8AAAB8 TLSv1 ECDHE-RSA-AES256-SHA 491 6887 17% 1339326 3000 332174 206 0 0 192.168.254.25 CH - [2015-05-29 15:09:34.157825] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5473 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIonqwxQzZrjAbVVZEAAAB6 TLSv1 ECDHE-RSA-AES256-SHA 475 7314 -% 1476040 2286 0 0 0 0 192.168.254.25 CH - [2015-05-29 15:09:34.134466] "GET /EMail/scripts/tinymce/skins/lightgray/content.min.css HTTP/1.1" 200 588 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIonqwxQzZrjAbVVZAAAAB9 TLSv1 ECDHE-RSA-AES256-SHA 491 1087 38% 1788757 3015 784719 161 0 0 192.168.254.25 CH - [2015-05-29 15:09:35.468963] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce.eot? HTTP/1.1" 200 10024 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIon6wxQzZrjAbUEXMAAAAU TLSv1 ECDHE-RSA-AES256-SHA 523 10532 -% 2083153 2218 79818 203 0 0 192.168.254.25 CH - [2015-05-29 15:09:35.491837] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce-small.eot? HTTP/1.1" 200 10316 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIon6wxQzZrjAbVVZIAAAB@ TLSv1 ECDHE-RSA-AES256-SHA 539 10820 -% 2105947 1891 102984 173 0 0 192.168.192.35 CH - [2015-05-29 15:11:15.959893] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8f9217b6.5233e4b773df5" VjIpA6wxQzZrjAbUEX4AAAAg TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1142 5902 22% 2915891 2243 912472 417 0 0 192.168.192.35 CH - [2015-05-29 15:11:15.961920] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8f9217b6.5233e4b773df5" VjIpA6wxQzZrjAbUEX8AAAAi TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1141 4620 56% 3707379 1753 704818 202 0 0 192.168.192.35 CH - [2015-05-29 15:11:15.964300] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8f9217b6.5233e4b773df5" VjIpA6wxQzZrjAbUEYAAAAAj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1168 11687 22% 3829943 1710 824362 190 0 0 192.168.192.35 CH - [2015-05-29 15:11:15.964693] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8f9217b6.5233e4b773df5" VjIpA6wxQzZrjAbUEYEAAAAh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1173 8122 23% 4397291 1696 393558 210 0 0 192.168.192.35 CH - [2015-05-29 15:11:20.400203] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8f9217b6.5233e4b773df5" VjIpCKwxQzZrjAbUEYIAAAAk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 427 4141 -% 2162059 3024 152181 6210 0 0 192.168.192.35 CH - [2015-05-29 15:11:20.409454] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8f9217b6.5233e4b773df5" VjIpCKwxQzZrjAbUEYMAAAAm TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 429 5723 -% 2273586 2752 267390 2784 0 0 192.168.192.35 CH - [2015-05-29 15:11:20.412249] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8f9217b6.5233e4b773df5" VjIpCKwxQzZrjAbUEYQAAAAl TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 455 9192 -% 2648011 3661 634047 4711 0 0 192.168.192.35 CH - [2015-05-29 15:11:22.586155] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8f9217b6.5233e4b773df5" VjIpCqwxQzZrjAbUEYUAAAAo TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 505 2427 14% 4051011 2050 47051 258 0 0 192.168.192.35 CH - [2015-05-29 15:11:22.590331] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8f9217b6.5233e4b773df5" VjIpCqwxQzZrjAbUEYYAAAAr TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 502 1876 22% 4967594 1723 965012 155 0 0 192.168.192.35 CH - [2015-05-29 15:11:22.630067] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7239 "https://www.example.com/EMail/header.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8f9217b6.5233e4b773df5" VjIpCqwxQzZrjAbVVaAAAABE TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1170 12067 22% 5417485 1784 412076 168 0 0 192.168.192.35 CH - [2015-05-29 15:11:22.631750] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8f9217b6.5233e4b773df5" VjIpCqwxQzZrjAbVVaEAAABO TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1178 4232 -% 6843330 1734 840998 156 0 0 192.168.192.35 CH - [2015-05-29 15:11:22.708043] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8f9217b6.5233e4b773df5" VjIpCqwxQzZrjAbUEYcAAAAn TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 544 205 -% 8063484 3100 59543 173 0 0 192.168.192.35 CH - [2015-05-29 15:11:23.090148] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8f9217b6.5233e4b773df5" VjIpC6wxQzZrjAbUEYgAAAAp TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 586 205 -% 8517590 3047 513867 209 0 0 192.168.192.35 CH - [2015-05-29 15:11:28.138053] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8f9217b6.5233e4b773df5" VjIpEKwxQzZrjAbVVaIAAABL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 540 206 -% 4869130 2525 865776 209 0 0 192.168.192.35 CH - [2015-05-29 15:11:28.388924] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8f9217b6.5233e4b773df5" VjIpEKwxQzZrjAbUEYoAAAAq TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 2088 -% 5717810 2047 715069 203 0 0 192.168.186.76 CH - [2015-05-29 15:22:54.857789] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjIrvqwxQzZrjAbVVisAAABZ TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 12038 -% 955801 6834 945053 2425 3 0 192.168.186.76 CH - [2015-05-29 15:22:55.846077] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "f139da27.52338400e3ec8" VjIrv6wxQzZrjAbVViwAAABj TLSv1.2 ECDHE-RSA-AES256-SHA384 662 0 -% 953043 6207 942734 2197 3 0 192.168.186.76 CH - [2015-05-29 15:22:59.841500] "GET /EMail/overview.aspx HTTP/1.1" 200 5538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjIrw6wxQzZrjAbVVi4AAABW TLSv1.2 ECDHE-RSA-AES256-SHA384 1047 10134 -% 1346781 6489 336781 2015 3 0 192.168.186.76 CH - [2015-05-29 15:23:17.413427] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5873 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3920_9&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjIr1awxQzZrjAbVVjMAAABu TLSv1.2 ECDHE-RSA-AES256-SHA384 1303 13726 -% 983879 6512 0 0 3 0 192.168.186.76 CH - [2015-05-29 15:24:59.946738] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3920_9&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjIsO6wxQzZrjAbVVkAAAABs TLSv1.2 ECDHE-RSA-AES256-SHA384 7831 630 -% 3678101 290095 368102 212 91 0 192.168.186.76 CH - [2015-05-29 15:25:03.635610] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3920_9&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjIsP6wxQzZrjAbVVkIAAAB4 TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 920617 6731 904835 6878 3 0 192.168.186.76 CH - [2015-05-29 15:25:51.477540] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjIsb6wxQzZrjAbVVk0AAABC TLSv1.2 ECDHE-RSA-AES256-SHA384 1261 13742 -% 1594932 7612 577495 4238 3 0 192.168.186.76 CH - [2015-05-29 15:25:54.772578] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjIscqwxQzZrjAbVVk4AAABF TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1096950 8906 86352 160 3 0 192.168.186.76 CH - [2015-05-29 15:25:55.880948] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7290 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f139da27.52338400e3ec8" VjIsc6wxQzZrjAbVVlAAAABH TLSv1.2 ECDHE-RSA-AES256-SHA384 726 7802 -% 1061046 4536 50427 4063 3 0 192.168.254.25 CH - [2015-05-29 15:30:45.476775] "GET /EMail/attachost.aspx HTTP/1.1" 200 4989 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjItlawxQzZrjAbVVn8AAAB4 TLSv1 ECDHE-RSA-AES256-SHA 720 9249 -% 972180 3488 966198 1865 0 0 192.168.254.25 CH - [2015-05-29 15:30:47.231377] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/attachost.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjItl6wxQzZrjAbVVoAAAABz TLSv1 ECDHE-RSA-AES256-SHA 507 554 -% 814197 1954 811268 195 0 0 192.168.254.25 CH - [2015-05-29 15:30:48.548323] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/attachost.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjItmKwxQzZrjAbVVoEAAAB8 TLSv1 ECDHE-RSA-AES256-SHA 507 2090 -% 949422 1993 946737 164 0 0 192.168.254.25 CH - [2015-05-29 15:31:53.051232] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/attachost.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIt2awxQzZrjAbVVosAAABI TLSv1 ECDHE-RSA-AES256-SHA 929125 486 -% 4364994 5096 54829 260 0 0 192.168.254.25 CH - [2015-05-29 15:31:57.461500] "GET /EMail/attachost.aspx HTTP/1.1" 200 6495 "https://www.example.com/EMail/attachments.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIt3awxQzZrjAbVVo0AAABH TLSv1 ECDHE-RSA-AES256-SHA 507 6922 -% 840002 2810 834613 1933 0 0 192.168.254.25 CH - [2015-05-29 15:35:37.429085] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIuuawxQzZrjAbVVqcAAABW TLSv1 ECDHE-RSA-AES256-SHA 2543 550 -% 1076935 45941 27177 181 33 0 192.168.254.25 CH - [2015-05-29 15:35:38.516914] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc= HTTP/1.1" 200 3929 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIuuqwxQzZrjAbVVqkAAABn TLSv1 ECDHE-RSA-AES256-SHA 587 4362 -% 817580 5408 797080 14656 0 0 192.168.254.25 CH - [2015-05-29 15:37:42.977887] "GET /EMail/tree.aspx?sNode-sharedTree=treeSent HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeNewMsg" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIvNqwxQzZrjAbUEfQAAAAc TLSv1 ECDHE-RSA-AES256-SHA 816 13049 -% 1520077 2371 508239 4525 0 0 192.168.254.25 CH - [2015-05-29 15:37:42.973999] "GET /EMail/sent.aspx?dir=desc HTTP/1.1" 200 24339 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeNewMsg" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIvNqwxQzZrjAbUEfMAAAAY TLSv1 ECDHE-RSA-AES256-SHA 800 28741 -% 1748548 2266 633699 12257 0 0 192.168.254.25 CH - [2015-05-29 15:37:45.264622] "GET /EMail/images/Highprio.gif HTTP/1.1" 200 91 "https://www.example.com/EMail/sent.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIvOawxQzZrjAbVVrgAAABc TLSv1 ECDHE-RSA-AES256-SHA 725 651 -% 567497 1928 564908 153 0 0 192.168.254.25 CH - [2015-05-29 15:37:45.140349] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/sent.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIvOawxQzZrjAbUEfUAAAAZ TLSv1 ECDHE-RSA-AES256-SHA 507 538 -% 932872 3028 928864 281 0 0 192.168.254.25 CH - [2015-05-29 15:37:45.165355] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/sent.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIvOawxQzZrjAbUEfYAAAAd TLSv1 ECDHE-RSA-AES256-SHA 507 1882 -% 940366 2982 936389 232 0 0 192.168.254.25 CH - [2015-05-29 15:37:52.081475] "GET /EMail/message.aspx?&mailId=3919_15&folderId=74_6&mailPos=0 HTTP/1.1" 200 12246 "https://www.example.com/EMail/sent.aspx?dir=desc" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIvQKwxQzZrjAbUEfgAAAAa TLSv1 ECDHE-RSA-AES256-SHA 741 12864 -% 1297410 6625 268569 21163 0 0 192.168.254.25 CH - [2015-05-29 15:39:14.918352] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3919_15&folderId=74_6&attachmentId=3&token=60730386560509983E18 HTTP/1.1" 200 923290 "https://www.example.com/EMail/message.aspx?&mailId=3919_15&folderId=74_6&mailPos=0" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjIvkqwxQzZrjAbVVsQAAABB TLSv1 ECDHE-RSA-AES256-SHA 837 941296 -% 1842944 4441 57794 193 0 0 192.168.1.78 CH - [2015-05-29 15:53:30.297210] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIy6qwxQzZrjAbVV0cAAABG TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1200 5902 22% 595865 2205 592557 202 0 0 192.168.1.78 CH - [2015-05-29 15:53:30.297057] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIy6qwxQzZrjAbVV0YAAABH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1199 4620 56% 7433619 2262 430339 196 0 0 192.168.1.78 CH - [2015-05-29 15:53:30.305896] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIy6qwxQzZrjAbVV0kAAABD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1239 4232 -% 7463169 2202 460447 137 0 0 192.168.1.78 CH - [2015-05-29 15:53:30.300500] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIy6qwxQzZrjAbUEi8AAAAT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1231 12018 22% 7658138 2673 651180 217 0 0 192.168.1.78 CH - [2015-05-29 15:53:30.303520] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIy6qwxQzZrjAbVV0gAAABK TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1236 8269 23% 7688625 1992 684487 187 0 0 192.168.1.78 CH - [2015-05-29 15:53:38.239681] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIy8qwxQzZrjAbUEjEAAAAc TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 595 206 -% 6796067 3364 791807 195 0 0 192.168.1.78 CH - [2015-05-29 15:53:38.159850] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIy8qwxQzZrjAbVV0sAAABM TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 206 -% 6892649 3065 888727 146 0 0 192.168.1.78 CH - [2015-05-29 15:53:47.834324] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIy@6wxQzZrjAbUEjQAAAAZ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 672 421 -% 5613891 3097 609884 287 0 0 192.168.1.78 CH - [2015-05-29 15:53:47.229947] "GET /EMail/images/active.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIy@6wxQzZrjAbVV0wAAABE TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 593 296 -% 11840624 2451 837151 187 0 0 192.168.1.78 CH - [2015-05-29 15:53:53.465665] "GET /EMail/main.aspx HTTP/1.1" 200 3397 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzAawxQzZrjAbUEjUAAAAd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 507 3813 -% 6146520 3047 141604 1198 0 0 192.168.1.78 CH - [2015-05-29 15:53:59.687332] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzB6wxQzZrjAbUEjcAAAAe TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 528 2427 14% 6864130 2005 860862 214 0 0 192.168.1.78 CH - [2015-05-29 15:53:59.726866] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzB6wxQzZrjAbVV04AAABP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1172 4620 56% 6884846 2893 880968 195 0 0 192.168.1.78 CH - [2015-05-29 15:53:59.726920] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzB6wxQzZrjAbVV08AAABL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1173 5902 22% 6959819 2896 955910 176 0 0 192.168.1.78 CH - [2015-05-29 15:53:59.727477] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzB6wxQzZrjAbVV1AAAABT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1209 8122 23% 6961407 1873 958057 129 0 0 192.168.1.78 CH - [2015-05-29 15:53:59.727690] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzB6wxQzZrjAbVV1EAAABQ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1204 12018 22% 7181425 2590 174539 221 0 0 192.168.1.78 CH - [2015-05-29 15:54:07.011953] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzD6wxQzZrjAbVV1IAAABb TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 457 4141 -% 7894791 3512 883027 7283 0 0 192.168.1.78 CH - [2015-05-29 15:54:07.013129] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzD6wxQzZrjAbVV1QAAABV TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 459 5723 -% 8036305 2813 30145 2661 0 0 192.168.1.78 CH - [2015-05-29 15:54:07.012802] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzD6wxQzZrjAbVV1MAAABf TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 485 9192 -% 11756743 2452 746734 2993 0 0 192.168.1.78 CH - [2015-05-29 15:54:14.971674] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzFqwxQzZrjAbVV1YAAABR TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 2551 14% 4087865 3153 82975 199 0 0 192.168.1.78 CH - [2015-05-29 15:54:15.049884] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/header.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzF6wxQzZrjAbVV1kAAABY TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1206 12018 22% 4011292 1954 5896 142 0 0 192.168.1.78 CH - [2015-05-29 15:54:15.015941] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzF6wxQzZrjAbVV1cAAABS TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1175 5902 22% 4113141 2997 108842 181 0 0 192.168.1.78 CH - [2015-05-29 15:54:15.016591] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzF6wxQzZrjAbVV1gAAABg TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1174 4620 56% 4131720 1875 128801 151 0 0 192.168.1.78 CH - [2015-05-29 15:54:15.049914] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzF6wxQzZrjAbUEjoAAAAi TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1214 4232 -% 10330766 1934 328126 168 0 0 192.168.1.78 CH - [2015-05-29 15:54:15.116633] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzF6wxQzZrjAbVV1oAAABi TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 574 205 -% 10678015 3397 673744 252 0 0 192.168.1.78 CH - [2015-05-29 15:54:18.860614] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzGqwxQzZrjAbVV1sAAABa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 616 205 -% 7061219 2253 58306 157 0 0 192.168.1.78 CH - [2015-05-29 15:54:19.164658] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzG6wxQzZrjAbVV14AAABZ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 206 -% 7212246 2734 208598 186 0 0 192.168.1.78 CH - [2015-05-29 15:54:19.159185] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzG6wxQzZrjAbVV10AAABd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 206 -% 7277633 3107 273671 184 0 0 192.168.1.78 CH - [2015-05-29 15:54:19.144205] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzG6wxQzZrjAbVV1wAAABl TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 206 -% 7431623 3532 427088 257 0 0 192.168.1.78 CH - [2015-05-29 15:54:19.231502] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzG6wxQzZrjAbVV18AAABj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 570 206 -% 13692741 2454 689128 399 0 0 192.168.1.78 CH - [2015-05-29 15:54:22.839383] "GET /EMail/inbox.aspx HTTP/1.1" 200 8592 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzHqwxQzZrjAbVV2AAAABe TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1108 13069 -% 10469035 2459 462049 3708 0 0 192.168.1.78 CH - [2015-05-29 15:54:33.392062] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzKawxQzZrjAbVV2IAAABt TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 529 2551 14% 10557808 3154 553291 165 0 0 192.168.1.78 CH - [2015-05-29 15:54:33.393693] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzKawxQzZrjAbVV2MAAAB0 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 526 1876 22% 10904850 2926 900623 208 0 0 192.168.1.78 CH - [2015-05-29 15:54:33.433409] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzKawxQzZrjAbVV2QAAABu TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1173 4620 56% 17837381 1760 834657 235 0 0 192.168.1.78 CH - [2015-05-29 15:54:33.433171] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzKawxQzZrjAbUEj0AAAAk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1205 12018 22% 18058540 1994 52091 271 0 0 192.168.1.78 CH - [2015-05-29 15:54:33.440552] "GET /EMail/images/attach.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzKawxQzZrjAbVV2UAAABr TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1214 4231 -% 25902738 2891 898937 229 0 0 192.168.1.78 CH - [2015-05-29 15:54:33.478001] "GET /EMail/images/msgClosed.png HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzKawxQzZrjAbUEj4AAAAm TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1218 4232 -% 25947546 1873 944934 198 0 0 192.168.1.78 CH - [2015-05-29 15:54:33.442092] "GET /EMail/images/Highost.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzKawxQzZrjAbVV2YAAABk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1217 4231 -% 32155821 3174 152031 153 0 0 192.168.1.78 CH - [2015-05-29 15:54:51.572690] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzO6wxQzZrjAbUEkAAAAAs TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 206 -% 14367227 3080 363096 258 0 0 192.168.1.78 CH - [2015-05-29 15:55:13.069747] "GET /EMail/message.aspx?&mailId=3919_16&folderId=2582_34&mailPos=0 HTTP/1.1" 200 11207 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzUawxQzZrjAbVV28AAAB3 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1150 15685 -% 16750579 3228 716769 29652 0 0 192.168.1.78 CH - [2015-05-29 15:55:17.946513] "GET /EMail/message.aspx?&mailId=3919_16&folderId=2582_34&mailPos=0 HTTP/1.1" 200 11205 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzVawxQzZrjAbVV3AAAAB5 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1150 15712 -% 28369465 3740 343861 20708 0 0 192.168.1.78 CH - [2015-05-29 15:55:23.164494] "GET /EMail/message.aspx?&mailId=3919_16&folderId=2582_34&mailPos=0 HTTP/1.1" 200 11203 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzW6wxQzZrjAbUEkMAAAAn TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1150 15710 -% 23388697 4318 364087 19274 0 0 192.168.1.78 CH - [2015-05-29 15:55:37.471330] "GET /EMail/message.aspx?&mailId=3919_16&folderId=2582_34&mailPos=0 HTTP/1.1" 200 11137 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzaawxQzZrjAbVV3QAAAB6 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1150 15615 -% 15753817 3425 730887 18788 0 0 192.168.1.78 CH - [2015-05-29 15:55:44.731243] "GET /EMail/message.aspx?&mailId=3919_16&folderId=2582_34&mailPos=0 HTTP/1.1" 200 11207 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzcKwxQzZrjAbVV3YAAABJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1150 15685 -% 25354649 4953 324912 23839 0 0 192.168.1.78 CH - [2015-05-29 15:55:53.727380] "GET /EMail/message.aspx?&mailId=3919_16&folderId=2582_34&mailPos=0 HTTP/1.1" 200 11195 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzeawxQzZrjAbVV3gAAAB- TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1150 15673 -% 22805636 5229 778697 20802 0 0 192.168.1.78 CH - [2015-05-29 15:56:03.814549] "GET /EMail/message.aspx?&mailId=3919_16&folderId=2582_34&mailPos=0 HTTP/1.1" 200 11201 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzg6wxQzZrjAbVV3oAAABA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1150 15679 -% 23779176 3329 756253 18804 0 0 192.168.1.78 CH - [2015-05-29 15:56:05.219501] "GET /EMail/message.aspx?&mailId=3919_16&folderId=2582_34&mailPos=0 HTTP/1.1" 200 11138 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzhawxQzZrjAbUEkgAAAAx TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1150 15645 -% 22594034 3013 567518 22238 0 0 192.168.1.78 CH - [2015-05-29 15:56:25.957684] "GET /EMail/message.aspx?&mailId=3919_16&folderId=2582_34&mailPos=0 HTTP/1.1" 200 11207 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzmawxQzZrjAbUEkoAAAAy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1150 15714 -% 13379120 3073 356067 18957 0 0 192.168.1.78 CH - [2015-05-29 15:56:39.498810] "GET /EMail/css/utils.css HTTP/1.1" 502 4088 "https://www.example.com/EMail/message.aspx?&mailId=3919_16&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzp6wxQzZrjAbVV4EAAABN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1218 8678 -% 30034034 2368 0 0 0 0 192.168.1.78 CH - [2015-05-29 15:56:39.497705] "GET /EMail/css/basic.css HTTP/1.1" 502 4088 "https://www.example.com/EMail/message.aspx?&mailId=3919_16&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzp6wxQzZrjAbVV4AAAABM TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1219 8678 -% 30035505 2513 0 0 0 0 192.168.1.78 CH - [2015-05-29 15:56:39.507906] "GET /EMail/scripts/shost.js HTTP/1.1" 502 4088 "https://www.example.com/EMail/message.aspx?&mailId=3919_16&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzp6wxQzZrjAbVV4IAAABE TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1250 8678 -% 30033206 2047 0 0 0 0 192.168.1.78 CH - [2015-05-29 15:56:39.429207] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/message.aspx?&mailId=3919_16&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzp6wxQzZrjAbUEksAAAAz TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 574 2427 14% 35925341 2749 920927 168 0 0 192.168.1.78 CH - [2015-05-29 15:57:09.700384] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzxawxQzZrjAbUEk8AAAA5 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1097 4232 -% 9166663 1961 163929 265 0 0 192.168.1.78 CH - [2015-05-29 15:57:12.233469] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3919_16&folderId=2582_34&attachmentId=2&token=140762334918697574E18 HTTP/1.1" 502 4088 "https://www.example.com/EMail/message.aspx?&mailId=3919_16&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIzyKwxQzZrjAbUElAAAAA1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1257 8678 -% 30039573 6330 0 0 0 0 192.168.1.78 CH - [2015-05-29 15:57:21.856916] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3919_16&folderId=2582_34&attachmentId=2&token=140762334918697574E18 HTTP/1.1" 502 4088 "https://www.example.com/EMail/message.aspx?&mailId=3919_16&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIz0awxQzZrjAbVV4gAAABf TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1257 8678 -% 30035829 6252 0 0 0 0 192.168.1.78 CH - [2015-05-29 15:57:51.926134] "GET /errordocuments/logo_d.png HTTP/1.1" 200 7515 "https://www.example.com/EMail/MailHandler?service=downloadAttachment&mailId=3919_16&folderId=2582_34&attachmentId=2&token=140762334918697574E18" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 - - + "5879f0c4.5233ed00e87b2" VjIz76wxQzZrjAbVV40AAABi TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 540 7917 -% 2005 1358 41 105 0 0 192.168.212.2 CH - [2015-05-29 15:57:31.133411] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 502 4088 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "bea8393a.5233f87c275e3" VjIz26wxQzZrjAbVV4sAAABS TLSv1 ECDHE-RSA-AES256-SHA 704 8671 -% 30031463 1947 0 0 0 0 192.168.212.2 CH - [2015-05-29 15:58:01.210376] "GET /errordocuments/logo_d.png HTTP/1.1" 200 7515 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "bea8393a.5233f87c275e3" VjIz@awxQzZrjAbVV48AAABa TLSv1 ECDHE-RSA-AES256-SHA 566 7914 -% 2099 1382 50 111 0 0 192.168.1.78 CH - [2015-05-29 15:57:52.044996] "GET /EMail/favicon.ico HTTP/1.1" 404 5089 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Win64; x64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "ea96acf1.5233ed074ba9c" VjIz8KwxQzZrjAbUElUAAAA- TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1019 10766 -% 22948172 1958 0 0 0 0 192.168.212.2 CH - [2015-05-29 15:58:01.468130] "GET /EMail/favicon.ico HTTP/1.1" 404 5089 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "997fd8b6.5233f899154e2" VjIz@awxQzZrjAbVV5AAAABZ TLSv1 ECDHE-RSA-AES256-SHA 624 10905 -% 13756943 962 0 0 0 0 192.168.1.78 CH - [2015-05-29 15:58:02.880814] "GET /EMail/main.aspx HTTP/1.1" 200 3397 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjIz@qwxQzZrjAbVV5EAAABd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1130 7839 -% 12539514 1967 534901 2021 0 0 192.168.212.2 CH - [2015-05-29 15:58:15.543889] "GET /favicon.ico HTTP/1.1" 304 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "997fd8b6.5233f899154e2" VjI0B6wxQzZrjAbVV5QAAABj TLSv1 ECDHE-RSA-AES256-SHA 693 342 -% 2905 1954 65 154 0 0 192.168.1.78 CH - [2015-05-29 15:58:15.557173] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjI0B6wxQzZrjAbVV5UAAABe TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 457 4141 -% 21757151 2815 742158 11380 0 0 192.168.1.78 CH - [2015-05-29 15:58:15.641387] "GET /EMail/overview.aspx HTTP/1.1" 502 4088 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjI0B6wxQzZrjAbVV5cAAABv TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1107 8678 -% 30031371 1875 0 0 0 0 192.168.1.78 CH - [2015-05-29 15:58:15.641018] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 502 4088 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjI0B6wxQzZrjAbVV5YAAABq TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1133 8678 -% 30036263 3313 0 0 0 0 192.168.1.78 CH - [2015-05-29 15:58:45.703643] "GET /errordocuments/logo_d.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 - - + "5879f0c4.5233ed00e87b2" VjI0JawxQzZrjAbVV50AAABm TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 523 194 -% 3074 1974 63 144 0 0 192.168.1.78 CH - [2015-05-29 15:58:37.384181] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjI0HawxQzZrjAbVV5sAAABu TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 2427 14% 34735091 3336 729777 226 0 0 192.168.1.78 CH - [2015-05-29 15:58:45.729717] "GET /EMail/overview.aspx HTTP/1.1" 200 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - - "5879f0c4.5233ed00e87b2" VjI0JawxQzZrjAbVV54AAABr - - 463 31 -% 30030914 1833 28392 151 0 0 192.168.212.2 CH - [2015-05-29 15:59:08.924142] "GET /EMail/images/active.gif HTTP/1.1" 502 4088 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f290dfac.5233f85df7745" VjI0PKwxQzZrjAbUElwAAAAK TLSv1 ECDHE-RSA-AES256-SHA 984 8532 -% 30033911 2013 0 0 0 0 192.168.1.78 CH - [2015-05-29 15:59:12.392485] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 502 4088 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjI0QKwxQzZrjAbVV6EAAABp TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1006 4795 -% 30033336 2612 0 0 0 0 192.168.1.78 CH - [2015-05-29 15:59:42.493291] "GET /errordocuments/logo_d.png HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 - - + "5879f0c4.5233ed00e87b2" VjI0XqwxQzZrjAbVV6UAAABs TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 546 194 -% 2910 1979 64 147 0 0 192.168.1.78 CH - [2015-05-29 15:59:42.618592] "GET /EMail/favicon.ico HTTP/1.1" 502 4088 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Win64; x64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "ea96acf1.5233ed074ba9c" VjI0XqwxQzZrjAbVV6YAAAB3 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 944 4795 -% 30035072 3042 0 0 0 0 192.168.146.78 CH - [2015-05-29 16:00:31.282800] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7354 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "25host.5233f927f5270" VjI0j6wxQzZrjAbVV7EAAABI TLSv1.2 ECDHE-RSA-AES128-SHA256 1007 11875 -% 14956345 7871 944826 2236 3 0 192.168.1.78 CH - [2015-05-29 16:00:30.004122] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7365 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjI0jqwxQzZrjAbVV7AAAAB- TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1006 7930 -% 16573594 4356 564759 3632 0 0 192.168.1.78 CH - [2015-05-29 16:00:46.766369] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjI0nqwxQzZrjAbUEmUAAAAU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1124 737 56% 14068381 1904 65733 168 0 0 192.168.1.78 CH - [2015-05-29 16:00:46.714907] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjI0nqwxQzZrjAbVV7MAAABU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 555 2551 14% 14318124 3064 313455 165 0 0 192.168.1.78 CH - [2015-05-29 16:00:46.772129] "GET /EMail/images/logo.gif HTTP/1.1" 502 4088 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjI0nqwxQzZrjAbVV7QAAABA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1164 4795 -% 30033402 2983 0 0 0 0 192.168.1.78 CH - [2015-05-29 16:00:46.775079] "GET /EMail/scripts/variables_de.js HTTP/1.1" 502 4088 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjI0nqwxQzZrjAbVV7UAAABH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1161 4795 -% 30033758 1858 0 0 0 0 192.168.1.78 CH - [2015-05-29 16:00:46.775493] "GET /EMail/css/basic.css HTTP/1.1" 502 4088 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjI0nqwxQzZrjAbUEmYAAAAW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1125 4795 -% 30033751 1785 0 0 0 0 192.168.1.78 CH - [2015-05-29 16:00:47.278134] "GET /EMail/scripts/shost.js HTTP/1.1" 502 4088 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjI0n6wxQzZrjAbVV7YAAABD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1156 4795 -% 30034891 2747 0 0 0 0 192.168.146.78 CH - [2015-05-29 16:00:49.959086] "POST /EMail/MailHandler HTTP/1.1" 200 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - - "25host.5233f927f5270" VjI0oawxQzZrjAbVV7cAAABK - - 966 69 -% 30042018 11181 28075 180 3 0 192.168.1.78 CH - [2015-05-29 16:01:17.858434] "GET /EMail/scripts/csshover.htc HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - - "5879f0c4.5233ed00e87b2" VjI0vawxQzZrjAbVV7wAAABE - - 449 31 -% 30034270 3042 30297 186 0 0 192.168.146.78 CH - [2015-05-29 16:01:20.302288] "POST /EMail/MailHandler HTTP/1.1" 502 4088 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "25host.5233f927f5270" VjI0wKwxQzZrjAbVV74AAABX TLSv1.2 ECDHE-RSA-AES128-SHA256 1252 5097 -% 30043760 12546 0 0 3 0 192.168.1.78 CH - [2015-05-29 16:01:30.857837] "POST /EMail/MailHandler HTTP/1.1" 502 4088 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjI0yqwxQzZrjAbUEmsAAAAb TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1245 4795 -% 30037195 3183 0 0 0 0 192.168.1.78 CH - [2015-05-29 16:02:00.930550] "GET /errordocuments/logo_d.png HTTP/1.1" 304 - "https://www.example.com/EMail/MailHandler" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 - - + "5879f0c4.5233ed00e87b2" VjI06KwxQzZrjAbUEm4AAAAd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 525 194 -% 3211 1976 68 145 0 0 192.168.146.78 CH - [2015-05-29 16:01:34.398042] "POST /EMail/MailHandler HTTP/1.1" 502 4088 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "25host.5233f927f5270" VjI0zqwxQzZrjAbVV8AAAABV TLSv1.2 ECDHE-RSA-AES128-SHA256 1252 5097 -% 30039366 7037 0 0 3 0 192.168.146.78 CH - [2015-05-29 16:02:04.462165] "GET /errordocuments/logo_d.png HTTP/1.1" 200 7515 "https://www.example.com/EMail/MailHandler" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "25host.5233f927f5270" VjI07KwxQzZrjAbVV8UAAABh TLSv1.2 ECDHE-RSA-AES128-SHA256 758 7978 -% 10092 7910 58 149 3 0 192.168.146.78 CH - [2015-05-29 16:02:44.360195] "GET /EMail HTTP/1.1" 302 223 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "-" VjI1FKwxQzZrjAbVV8sAAABd TLSv1.2 ECDHE-RSA-AES128-SHA256 959 4531 -% 1182 307 595 301 0 0 192.168.146.78 CH - [2015-05-29 16:02:44.377523] "GET /EMail/login.aspx HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - - "3chost.5233f9a6e2fb3" VjI1FKwxQzZrjAbVV8wAAABj - - 646 69 -% 30038144 4440 31627 203 3 0 192.168.1.78 CH - [2015-05-29 16:03:07.428723] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7365 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "55e6b346.5233f9bcdeb73" VjI1K6wxQzZrjAbVV88AAABw TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 917 8093 -% 19204127 1817 198627 2888 0 0 192.168.146.78 CH - [2015-05-29 16:03:14.488749] "GET /EMail/login.aspx HTTP/1.1" 200 7335 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "67880da3.5233f9c39a5ad" VjI1MqwxQzZrjAbVV9EAAABy TLSv1.2 ECDHE-RSA-AES128-SHA256 932 8171 -% 18777483 6979 766590 2438 3 0 192.168.1.78 CH - [2015-05-29 16:03:26.807944] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "55e6b346.5233f9bcdeb73" VjI1PqwxQzZrjAbVV9QAAABm TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 460 2551 14% 29830026 3096 825174 184 0 0 192.168.1.78 CH - [2015-05-29 16:03:26.887267] "GET /EMail/css/utils.css HTTP/1.1" 502 4088 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "55e6b346.5233f9bcdeb73" VjI1PqwxQzZrjAbVV9cAAABu TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1106 8678 -% 30033986 4025 0 0 0 0 192.168.1.78 CH - [2015-05-29 16:03:26.886347] "GET /EMail/scripts/shost.js HTTP/1.1" 502 4088 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "55e6b346.5233f9bcdeb73" VjI1PqwxQzZrjAbVV9YAAABx TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1136 8678 -% 30035989 2202 0 0 0 0 192.168.1.78 CH - [2015-05-29 16:03:26.887812] "GET /EMail/css/basic.css HTTP/1.1" 502 4088 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "55e6b346.5233f9bcdeb73" VjI1PqwxQzZrjAbVV9gAAABo TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1106 8678 -% 30035268 4072 0 0 0 0 192.168.1.78 CH - [2015-05-29 16:03:28.165023] "GET /EMail/images/logo.gif HTTP/1.1" 502 4088 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "55e6b346.5233f9bcdeb73" VjI1QKwxQzZrjAbVV9kAAABk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1150 8678 -% 30035759 3292 0 0 0 0 192.168.1.78 CH - [2015-05-29 16:03:26.880622] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "55e6b346.5233f9bcdeb73" VjI1PqwxQzZrjAbVV9UAAAB2 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1141 8269 23% 36985453 2433 980511 223 0 0 192.168.1.78 CH - [2015-05-29 16:03:40.276804] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 502 4088 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "55e6b346.5233f9bcdeb73" VjI1TKwxQzZrjAbUEncAAAAm TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1081 8678 -% 30036056 3892 0 0 0 0 192.168.146.78 CH - [2015-05-29 16:03:40.496642] "POST /EMail/MailHandler HTTP/1.1" 502 4088 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "67880da3.5233f9c39a5ad" VjI1TKwxQzZrjAbVV9oAAABr TLSv1.2 ECDHE-RSA-AES128-SHA256 1204 5097 -% 30041927 9501 0 0 3 0 192.168.146.78 CH - [2015-05-29 16:04:10.750497] "GET /EMail/favicon.ico HTTP/1.1" 502 4088 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "fce27d94.5233f9f942221" VjI1aqwxQzZrjAbUEnwAAAAn TLSv1.2 ECDHE-RSA-AES128-SHA256 703 8929 -% 30035654 1993 0 0 0 0 192.168.1.78 CH - [2015-05-29 16:04:12.420318] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 502 4088 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "55e6b346.5233f9bcdeb73" VjI1bKwxQzZrjAbVV90AAAB9 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1081 8678 -% 30032608 2477 0 0 0 0 192.168.1.78 CH - [2015-05-29 16:04:42.509962] "GET /errordocuments/logo_d.png HTTP/1.1" 200 7515 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 - - + "55e6b346.5233f9bcdeb73" VjI1iqwxQzZrjAbVV@MAAABC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 459 7917 -% 2657 1742 261 323 0 0 192.168.1.78 CH - [2015-05-29 16:04:42.715113] "GET /EMail/favicon.ico HTTP/1.1" 404 5089 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Win64; x64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "2fhost.5233fa17bdfe9" VjI1iqwxQzZrjAbVV@QAAABJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 930 10911 -% 10124544 899 0 0 0 0 192.168.32.7 CH - [2015-05-29 16:06:20.386939] "GET /EMail/login.aspx HTTP/1.1" 200 7356 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7a569228.5233f92ea7125" VjI17KwxQzZrjAbVV-gAAABf TLSv1.2 ECDHE-RSA-AES128-SHA256 755 11699 -% 8081239 2479 75804 2202 0 0 192.168.32.7 CH - [2015-05-29 16:06:28.583793] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7a569228.5233f92ea7125" VjI19KwxQzZrjAbVV-oAAABV TLSv1.2 ECDHE-RSA-AES128-SHA256 454 2527 14% 7618522 3110 613191 209 0 0 192.168.32.7 CH - [2015-05-29 16:06:28.618092] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7a569228.5233f92ea7125" VjI19KwxQzZrjAbVV-sAAABh TLSv1.2 ECDHE-RSA-AES128-SHA256 744 2144 22% 14523010 1866 519981 205 0 0 192.168.32.7 CH - [2015-05-29 16:06:28.620102] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7a569228.5233f92ea7125" VjI19KwxQzZrjAbVV-wAAABa TLSv1.2 ECDHE-RSA-AES128-SHA256 760 7973 22% 14542433 1697 538338 143 0 0 192.168.32.7 CH - [2015-05-29 16:06:28.623829] "GET /EMail/scripts/variables_fr.js HTTP/1.1" 200 1679 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7a569228.5233f92ea7125" VjI19KwxQzZrjAbVV-0AAABW TLSv1.2 ECDHE-RSA-AES128-SHA256 760 2448 27% 14592056 1909 589155 189 0 0 192.168.32.7 CH - [2015-05-29 16:06:28.624620] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7a569228.5233f92ea7125" VjI19KwxQzZrjAbVV-4AAABS TLSv1.2 ECDHE-RSA-AES128-SHA256 744 864 56% 14834177 1903 831486 192 0 0 192.168.32.7 CH - [2015-05-29 16:06:28.627906] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7a569228.5233f92ea7125" VjI19KwxQzZrjAbVV-8AAABl TLSv1.2 ECDHE-RSA-AES128-SHA256 776 1931 -% 22845035 1769 842456 197 0 0 192.168.1.78 CH - [2015-05-29 16:18:29.309597] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7365 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjI4xawxQzZrjAbUErAAAAAi TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1075 11813 -% 29766507 3858 759417 2538 0 0 192.168.1.78 CH - [2015-05-29 16:18:59.208534] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjI446wxQzZrjAbUErMAAAAo TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 555 2427 14% 21731338 2017 727163 361 0 0 192.168.176.10 CH - [2015-05-29 16:19:36.548432] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7372 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "e2d3d55e.5233fd6c2b050" VjI5CKwxQzZrjAbVWG0AAABX TLSv1 ECDHE-RSA-AES256-SHA 756 11801 -% 25513513 1973 453909 3697 0 0 192.168.176.10 CH - [2015-05-29 16:20:02.201776] "GET /EMail/scripts/shost.js HTTP/1.1" 502 4088 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "e2d3d55e.5233fd6c2b050" VjI5IqwxQzZrjAbVWHcAAABn TLSv1 ECDHE-RSA-AES256-SHA 871 4841 -% 30035477 4575 0 0 0 0 192.168.176.10 CH - [2015-05-29 16:20:02.201686] "GET /EMail/images/logo.gif HTTP/1.1" 502 4088 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "e2d3d55e.5233fd6c2b050" VjI5IqwxQzZrjAbVWHYAAABd TLSv1 ECDHE-RSA-AES256-SHA 887 4841 -% 30035730 4673 0 0 0 0 192.168.176.10 CH - [2015-05-29 16:20:02.201472] "GET /EMail/css/utils.css HTTP/1.1" 502 4088 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "e2d3d55e.5233fd6c2b050" VjI5IqwxQzZrjAbVWHQAAABa TLSv1 ECDHE-RSA-AES256-SHA 839 4841 -% 30036902 4685 0 0 0 0 192.168.176.10 CH - [2015-05-29 16:20:02.201472] "GET /EMail/scripts/variables_de.js HTTP/1.1" 502 4088 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "e2d3d55e.5233fd6c2b050" VjI5IqwxQzZrjAbVWHUAAABW TLSv1 ECDHE-RSA-AES256-SHA 887 4841 -% 30038486 4725 0 0 0 0 192.168.176.10 CH - [2015-05-29 16:20:02.197534] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "e2d3d55e.5233fd6c2b050" VjI5IqwxQzZrjAbVWHMAAABh TLSv1 ECDHE-RSA-AES256-SHA 839 2032 22% 32112771 3355 108059 227 0 0 192.168.176.10 CH - [2015-05-29 16:20:02.115547] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "e2d3d55e.5233fd6c2b050" VjI5IqwxQzZrjAbVWHIAAABZ TLSv1 ECDHE-RSA-AES256-SHA 592 2431 14% 32296069 3567 276825 167 0 0 192.168.176.10 CH - [2015-05-29 16:20:34.481224] "GET /EMail/scripts/csshover.htc HTTP/1.1" 200 4255 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "e2d3d55e.5233fd6c2b050" VjI5QqwxQzZrjAbVWH0AAABc TLSv1 ECDHE-RSA-AES256-SHA 496 4682 -% 13587180 3092 569557 172 0 0 192.168.176.10 CH - [2015-05-29 16:20:34.558762] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "e2d3d55e.5233fd6c2b050" VjI5QqwxQzZrjAbVWH4AAABm TLSv1 ECDHE-RSA-AES256-SHA 640 1802 -% 13556793 2943 539509 460 0 0 192.168.176.10 CH - [2015-05-29 16:20:45.689913] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "e2d3d55e.5233fd6c2b050" VjI5TawxQzZrjAbUEr0AAAA0 TLSv1 ECDHE-RSA-AES256-SHA 887 2235 -% 23811586 3242 807380 243 0 0 192.168.176.10 CH - [2015-05-29 16:21:09.528576] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "e2d3d55e.5233fd6c2b050" VjI5ZawxQzZrjAbUEr8AAAA6 TLSv1 ECDHE-RSA-AES256-SHA 480 1578 -% 35157693 2791 140514 208 0 0 192.168.254.25 CH - [2015-05-29 16:21:26.924579] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7372 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjI5dqwxQzZrjAbUEsIAAAAz TLSv1 ECDHE-RSA-AES256-SHA 720 11729 -% 25846644 2946 840819 2350 0 0 192.168.176.10 CH - [2015-05-29 16:21:34.356752] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "e2d3d55e.5233fd6c2b050" VjI5fqwxQzZrjAbVWIQAAABp TLSv1 ECDHE-RSA-AES256-SHA 1068 566 -% 24577310 5226 571020 210 0 0 192.168.176.10 CH - [2015-05-29 16:21:59.041261] "GET /EMail/main.aspx HTTP/1.1" 200 3404 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "e2d3d55e.5233fd6c2b050" VjI5l6wxQzZrjAbVWIcAAAB8 TLSv1 ECDHE-RSA-AES256-SHA 887 3979 -% 33095948 3756 89610 1848 0 0 192.168.254.25 CH - [2015-05-29 16:22:06.424434] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - X "4bd7701f.5233ed8ca7beb" VjI5nqwxQzZrjAbUEscAAAA7 TLSv1 ECDHE-RSA-AES256-SHA 901 145 -% 37969891 5377 963519 269 0 0 192.168.254.25 CH - [2015-05-29 16:22:21.201288] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - X "4bd7701f.5233ed8ca7beb" VjI5rawxQzZrjAbUEskAAAAD TLSv1 ECDHE-RSA-AES256-SHA 901 145 -% 23396616 5494 390282 171 0 0 192.168.176.10 CH - [2015-05-29 16:22:32.361113] "GET /EMail/css/utils.css HTTP/1.1" 200 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - - "e2d3d55e.5233fd6c2b050" VjI5uKwxQzZrjAbVWI8AAAB3 - - 560 37 -% 30047624 3041 30424 188 0 0 192.168.176.10 CH - [2015-05-29 16:22:32.448978] "GET /EMail/scripts/shost.js HTTP/1.1" 502 4088 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "e2d3d55e.5233fd6c2b050" VjI5uKwxQzZrjAbVWJAAAABB TLSv1 ECDHE-RSA-AES256-SHA 839 4841 -% 30032799 2017 0 0 0 0 192.168.176.10 CH - [2015-05-29 16:22:32.449036] "GET /EMail/scripts/variables_de.js HTTP/1.1" 502 4088 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "e2d3d55e.5233fd6c2b050" VjI5uKwxQzZrjAbUEsoAAAAA TLSv1 ECDHE-RSA-AES256-SHA 855 4841 -% 30034944 1974 0 0 0 0 192.168.254.25 CH - [2015-05-29 16:22:26.100733] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - X "4bd7701f.5233ed8ca7beb" VjI5sqwxQzZrjAbVWIwAAAB@ TLSv1 ECDHE-RSA-AES256-SHA 901 145 -% 38681036 5236 675058 175 0 0 192.168.254.25 CH - [2015-05-29 16:22:34.842559] "POST /EMail/MailHandler HTTP/1.1" 502 4088 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjI5uqwxQzZrjAbVWJEAAAB9 TLSv1 ECDHE-RSA-AES256-SHA 901 4841 -% 30035142 3618 0 0 0 0 192.168.254.25 CH - [2015-05-29 16:23:05.034395] "GET /errordocuments/logo_d.png HTTP/1.1" 200 7515 "https://www.example.com/EMail/MailHandler" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 - - + "4bd7701f.5233ed8ca7beb" VjI52awxQzZrjAbVWJkAAABU TLSv1 ECDHE-RSA-AES256-SHA 459 7914 -% 2894 1804 60 150 0 0 192.168.254.25 CH - [2015-05-29 16:23:05.123167] "GET /EMail/favicon.ico HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - - "4bd7701f.5233ed8ca7beb" VjI52awxQzZrjAbVWJoAAABL - - 363 37 -% 30035100 3009 31254 150 0 0 192.168.176.10 CH - [2015-05-29 16:23:02.730544] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "e2d3d55e.5233fd6c2b050" VjI51qwxQzZrjAbVWJgAAABO TLSv1 ECDHE-RSA-AES256-SHA 839 5883 -% 34570080 1994 564353 2899 0 0 192.168.176.10 CH - [2015-05-29 16:23:02.732707] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "e2d3d55e.5233fd6c2b050" VjI51qwxQzZrjAbUEswAAAA- TLSv1 ECDHE-RSA-AES256-SHA 839 4299 -% 40822573 2741 807909 11253 0 0 192.168.254.25 CH - [2015-05-29 16:23:35.225235] "GET /EMail/favicon.ico HTTP/1.1" 404 5089 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjI596wxQzZrjAbVWJ4AAABM TLSv1 ECDHE-RSA-AES256-SHA 581 7075 -% 22124185 1932 0 0 0 0 192.168.176.10 CH - [2015-05-29 16:23:37.326018] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "e2d3d55e.5233fd6c2b050" VjI5@awxQzZrjAbVWJ8AAABD TLSv1 ECDHE-RSA-AES256-SHA 560 607 56% 20177584 2454 147615 484 0 0 192.168.176.10 CH - [2015-05-29 16:23:02.730529] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "e2d3d55e.5233fd6c2b050" VjI51qwxQzZrjAbVWJcAAABP TLSv1 ECDHE-RSA-AES256-SHA 871 9379 -% 54809602 2394 799266 4820 0 0 192.168.176.10 CH - [2015-05-29 16:23:37.562815] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "e2d3d55e.5233fd6c2b050" VjI5@awxQzZrjAbUEtEAAAAF TLSv1 ECDHE-RSA-AES256-SHA 839 7813 22% 27003824 1934 0 208 0 0 192.168.176.10 CH - [2015-05-29 16:23:37.562957] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "e2d3d55e.5233fd6c2b050" VjI5@awxQzZrjAbUEtAAAAAH TLSv1 ECDHE-RSA-AES256-SHA 871 1403 -% 27175921 2041 159893 227 0 0 192.168.176.10 CH - [2015-05-29 16:23:43.779373] "GET /EMail/images/logo.gif HTTP/1.1" 200 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - - "e2d3d55e.5233fd6c2b050" VjI5-6wxQzZrjAbUEtMAAAAI - - 608 37 -% 30048070 3075 30854 148 0 0 192.168.176.10 CH - [2015-05-29 16:23:57.652718] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 502 4088 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "e2d3d55e.5233fd6c2b050" VjI6DawxQzZrjAbUEtQAAAAL TLSv1 ECDHE-RSA-AES256-SHA 903 4841 -% 30035541 3197 0 0 0 0 192.168.1.78 CH - [2015-05-29 16:24:12.118941] "GET /EMail/inbox.aspx HTTP/1.1" 200 8585 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjI6HKwxQzZrjAbVWKYAAABg TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1108 13062 -% 37204619 3987 196789 3062 0 0 192.168.1.78 CH - [2015-05-29 16:24:11.299687] "GET /EMail/inbox.aspx HTTP/1.1" 200 8584 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjI6G6wxQzZrjAbUEtUAAAAN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1108 13061 -% 38153986 3315 145358 4438 0 0 192.168.1.78 CH - [2015-05-29 16:24:52.730768] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjI6RKwxQzZrjAbVWK0AAABe TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1173 4620 56% 10273686 4375 268246 193 0 0 192.168.1.78 CH - [2015-05-29 16:24:52.730126] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjI6RKwxQzZrjAbVWKwAAAB0 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1174 5902 22% 10275604 3104 271121 154 0 0 192.168.1.78 CH - [2015-05-29 16:24:52.735544] "GET /EMail/images/attach.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjI6RKwxQzZrjAbVWK8AAABl TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1214 4231 -% 25529328 2364 525968 222 0 0 192.168.1.78 CH - [2015-05-29 16:24:52.738103] "GET /EMail/images/Highost.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjI6RKwxQzZrjAbVWLAAAABn TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1217 4231 -% 25641024 2779 637271 208 0 0 192.168.1.78 CH - [2015-05-29 16:24:52.732162] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjI6RKwxQzZrjAbVWK4AAABj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1205 12018 22% 25651681 4164 643494 108 0 0 192.168.1.78 CH - [2015-05-29 16:24:52.741170] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjI6RKwxQzZrjAbVWLEAAABd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1129 5904 -% 25654178 2881 650460 359 0 0 192.168.1.78 CH - [2015-05-29 16:25:03.696529] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7365 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "55e6b346.5233f9bcdeb73" VjI6T6wxQzZrjAbVWLMAAABW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1081 11813 -% 14729291 3069 721865 3721 0 0 192.168.254.25 CH - [2015-05-29 16:25:09.480295] "GET /EMail/newMessage.aspx?action=resend&mailId=3919_15&to=john.smith@ourindustry.com&folderId=74_6&showPics=false HTTP/1.1" 200 7349 "https://www.example.com/EMail/message.aspx?&mailId=3919_15&folderId=74_6&mailPos=0" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "4bd7701f.5233ed8ca7beb" VjI6VawxQzZrjAbVWLYAAABw TLSv1 ECDHE-RSA-AES256-SHA 912 11697 -% 18575697 4139 567744 3260 0 0 192.168.1.78 CH - [2015-05-29 16:25:18.472045] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjI6XqwxQzZrjAbVWLgAAABh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 206 -% 29964315 3077 960295 216 0 0 192.168.1.78 CH - [2015-05-29 16:25:18.641549] "GET /EMail/scripts/variables_de.js HTTP/1.1" 502 4088 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "55e6b346.5233f9bcdeb73" VjI6XqwxQzZrjAbVWLsAAABm TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1141 8678 -% 30034740 2830 0 0 0 0 192.168.1.78 CH - [2015-05-29 16:25:18.641989] "GET /EMail/images/logo.gif HTTP/1.1" 502 4088 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "55e6b346.5233f9bcdeb73" VjI6XqwxQzZrjAbVWLwAAAB1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1150 8678 -% 30035297 2838 0 0 0 0 192.168.1.78 CH - [2015-05-29 16:25:18.727814] "GET /EMail/scripts/shost.js HTTP/1.1" 502 4088 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "55e6b346.5233f9bcdeb73" VjI6XqwxQzZrjAbVWL0AAABu TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1136 8678 -% 30037220 3186 0 0 0 0 192.168.1.78 CH - [2015-05-29 16:25:18.729347] "GET /EMail/css/utils.css HTTP/1.1" 502 4088 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "55e6b346.5233f9bcdeb73" VjI6XqwxQzZrjAbVWL4AAABx TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1106 8678 -% 30035946 2653 0 0 0 0 192.168.1.78 CH - [2015-05-29 16:25:18.571511] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "55e6b346.5233f9bcdeb73" VjI6XqwxQzZrjAbVWLkAAABZ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 460 2551 14% 37075906 3445 70736 165 0 0 192.168.1.78 CH - [2015-05-29 16:25:18.635519] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "55e6b346.5233f9bcdeb73" VjI6XqwxQzZrjAbVWLoAAABc TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1106 5902 22% 37099242 3059 94900 169 0 0 192.168.254.25 CH - [2015-05-29 16:25:28.805036] "GET /EMail/login.aspx HTTP/1.1" 200 - "https://www.example.com/EMail/newMessage.aspx?action=resend&mailId=3919_15&to=john.smith@ourindustry.com&folderId=74_6&showPics=false" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - - "4bd7701f.5233ed8ca7beb" VjI6aKwxQzZrjAbVWMEAAAB4 - - 571 37 -% 30030724 1981 27905 188 0 0 192.168.1.78 CH - [2015-05-29 16:25:34.293710] "GET /EMail/message.aspx?&mailId=3919_16&folderId=2582_34&mailPos=0 HTTP/1.1" 502 4088 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjI6bqwxQzZrjAbUEt8AAAAc TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1150 8678 -% 30034625 4906 0 0 0 0 192.168.1.78 CH - [2015-05-29 16:26:04.366492] "GET /errordocuments/logo_d.png HTTP/1.1" 304 - "https://www.example.com/EMail/message.aspx?&mailId=3919_16&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 - - + "5879f0c4.5233ed00e87b2" VjI6jKwxQzZrjAbUEuEAAAAa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 565 194 -% 2578 1764 45 106 0 0 192.168.1.78 CH - [2015-05-29 16:26:04.399622] "GET /EMail/message.aspx?&mailId=3919_16&folderId=2582_34&mailPos=0 HTTP/1.1" 200 - "https://www.example.com/EMail/message.aspx?&mailId=3919_16&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - - "5879f0c4.5233ed00e87b2" VjI6jKwxQzZrjAbUEuMAAAAd - - 547 31 -% 30032955 4328 27850 148 0 0 192.168.254.25 CH - [2015-05-29 16:25:58.922541] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "https://www.example.com/EMail/newMessage.aspx?action=resend&mailId=3919_15&to=john.smith@ourindustry.com&folderId=74_6&showPics=false" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - X "4bd7701f.5233ed8ca7beb" VjI6hqwxQzZrjAbVWMUAAABF TLSv1 ECDHE-RSA-AES256-SHA 789 145 -% 43555547 3034 548887 2986 0 0 192.168.1.78 CH - [2015-05-29 16:26:57.618202] "GET /EMail/scripts/shost.js HTTP/1.1" 502 4088 "https://www.example.com/EMail/message.aspx?&mailId=3919_16&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjI6wawxQzZrjAbUEukAAAAl TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1250 8678 -% 30035724 3817 0 0 0 0 192.168.1.78 CH - [2015-05-29 16:26:57.617390] "GET /EMail/css/utils.css HTTP/1.1" 502 4088 "https://www.example.com/EMail/message.aspx?&mailId=3919_16&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjI6wawxQzZrjAbVWMwAAAB@ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1218 8678 -% 30036920 2938 0 0 0 0 192.168.1.78 CH - [2015-05-29 16:26:57.620323] "GET /EMail/css/basic.css HTTP/1.1" 502 4088 "https://www.example.com/EMail/message.aspx?&mailId=3919_16&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjI6wawxQzZrjAbUEuoAAAAk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1219 8678 -% 30037092 3898 0 0 0 0 192.168.1.78 CH - [2015-05-29 16:26:57.625147] "GET /EMail/images/attach.gif HTTP/1.1" 502 4088 "https://www.example.com/EMail/message.aspx?&mailId=3919_16&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "5879f0c4.5233ed00e87b2" VjI6wawxQzZrjAbVWM0AAAB9 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1259 8678 -% 30032801 2011 0 0 0 0 192.168.96.46 CH - [2015-05-29 17:11:53.743424] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7366 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "12d9f64e.5234091c07c40" VjJFSawxQzZrjAbVWmkAAAB- TLSv1 AES256-SHA 885 11449 -% 32281758 2372 276153 2382 0 0 192.168.96.46 CH - [2015-05-29 17:12:26.160782] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "12d9f64e.5234091c07c40" VjJFaqwxQzZrjAbVWnEAAAB9 TLSv1 AES256-SHA 678 213 -% 41548748 3143 544735 215 0 0 192.168.96.46 CH - [2015-05-29 17:12:26.478645] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "12d9f64e.5234091c07c40" VjJFaqwxQzZrjAbVWnIAAABQ TLSv1 AES256-SHA 1093 3700 -% 41277253 2396 274044 227 0 0 192.168.96.46 CH - [2015-05-29 17:13:07.813824] "GET /EMail/scripts/csshover.htc HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - - "12d9f64e.5234091c07c40" VjJFk6wxQzZrjAbVWnsAAABt - - 582 37 -% 30034527 3072 30509 189 0 0 192.168.96.46 CH - [2015-05-29 17:13:07.818094] "GET /EMail/images/inactive.gif HTTP/1.1" 200 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - - "12d9f64e.5234091c07c40" VjJFk6wxQzZrjAbVWnwAAABg - - 646 37 -% 30034031 2838 30377 128 0 0 192.168.96.46 CH - [2015-05-29 17:13:37.959584] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - - "12d9f64e.5234091c07c40" VjJFsawxQzZrjAbVWoIAAABS TLSv1 AES256-SHA 973 3664 -% 17375225 2031 372388 197 0 0 192.168.96.46 CH - [2015-05-29 17:13:37.961054] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - - "12d9f64e.5234091c07c40" VjJFsawxQzZrjAbVWoMAAABy TLSv1 AES256-SHA 1021 5253 -% 41054473 3196 50326 241 0 0 192.168.96.46 CH - [2015-05-29 17:14:19.219809] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "28704ba1.523409a6c4761" VjJF26wxQzZrjAbVWokAAABe TLSv1 AES256-SHA 837 5225 -% 20777930 672 776416 224 0 0 192.168.96.46 CH - [2015-05-29 17:19:30.010852] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "12d9f64e.5234091c07c40" VjJHEqwxQzZrjAbUE8cAAAAS TLSv1 AES256-SHA 1045 3908 -% 17631712 5149 625671 169 0 0 192.168.96.46 CH - [2015-05-29 17:19:47.664127] "GET /EMail/main.aspx HTTP/1.1" 200 3398 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "12d9f64e.5234091c07c40" VjJHI6wxQzZrjAbUE8gAAAAV TLSv1 AES256-SHA 614 3818 -% 17716656 1987 712193 1883 0 0 192.168.96.46 CH - [2015-05-29 17:19:50.535016] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "12d9f64e.5234091c07c40" VjJHJqwxQzZrjAbVWrIAAABR TLSv1 AES256-SHA 1045 3908 -% 18107470 5361 101059 278 0 0 192.168.96.46 CH - [2015-05-29 17:20:08.677877] "GET /EMail/main.aspx HTTP/1.1" 200 3398 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "12d9f64e.5234091c07c40" VjJHOKwxQzZrjAbVWrUAAAB9 TLSv1 AES256-SHA 614 3818 -% 13357144 1999 352677 1862 0 0 192.168.96.46 CH - [2015-05-29 17:20:22.116504] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "12d9f64e.5234091c07c40" VjJHRqwxQzZrjAbVWrgAAABi TLSv1 AES256-SHA 566 607 56% 6648905 3071 645014 167 0 0 192.168.96.46 CH - [2015-05-29 17:20:22.724430] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7160 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "12d9f64e.5234091c07c40" VjJHRqwxQzZrjAbVWrkAAABv TLSv1 AES256-SHA 1013 11409 22% 12325192 3420 319094 197 0 0 192.168.152.176 CH - [2015-05-29 17:21:06.492157] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "ec934544.52340b2b2c2fd" VjJHcqwxQzZrjAbVWsAAAABd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 572 8359 -% 10690707 1885 687697 228 0 0 192.168.213.23 CH - [2015-05-29 17:38:55.559374] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7383 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjJLn6wxQzZrjAbVWz4AAABy TLSv1 ECDHE-RSA-AES256-SHA 704 11809 -% 4080851 2204 74146 3745 0 0 192.168.213.23 CH - [2015-05-29 17:38:59.818558] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjJLo6wxQzZrjAbVW0AAAABn TLSv1 ECDHE-RSA-AES256-SHA 869 358 -% 14283203 2811 279671 166 0 0 192.168.213.23 CH - [2015-05-29 17:38:59.775755] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjJLo6wxQzZrjAbVWz8AAABo TLSv1 ECDHE-RSA-AES256-SHA 662 213 -% 17356201 3116 352285 159 0 0 192.168.213.23 CH - [2015-05-29 17:38:59.824509] "GET /EMail/scripts/variables_de.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjJLo6wxQzZrjAbVW0EAAABj TLSv1 ECDHE-RSA-AES256-SHA 901 358 -% 17390713 2883 386921 196 0 0 192.168.213.23 CH - [2015-05-29 17:38:59.861287] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjJLo6wxQzZrjAbVW0MAAABa TLSv1 ECDHE-RSA-AES256-SHA 885 358 -% 17395234 2821 391648 143 0 0 192.168.213.23 CH - [2015-05-29 17:38:59.825500] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjJLo6wxQzZrjAbVW0IAAABe TLSv1 ECDHE-RSA-AES256-SHA 869 358 -% 17582896 2940 578831 396 0 0 192.168.213.23 CH - [2015-05-29 17:38:59.824442] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjJLo6wxQzZrjAbUFC0AAAA@ TLSv1 ECDHE-RSA-AES256-SHA 901 358 -% 17624277 2888 620466 205 0 0 192.168.213.23 CH - [2015-05-29 17:39:19.460290] "GET /EMail/images/active.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjJLt6wxQzZrjAbUFDAAAAAA TLSv1 ECDHE-RSA-AES256-SHA 694 213 -% 8810890 3072 806891 235 0 0 192.168.213.23 CH - [2015-05-29 17:39:17.495719] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjJLtawxQzZrjAbVW0YAAABu TLSv1 ECDHE-RSA-AES256-SHA 694 213 -% 10865852 3066 861922 198 0 0 192.168.213.23 CH - [2015-05-29 17:39:28.548138] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d4662367.52340f462cd2a" VjJLwKwxQzZrjAbVW0gAAABx TLSv1 ECDHE-RSA-AES256-SHA 624 5569 -% 14389687 915 387679 234 0 0 192.168.213.23 CH - [2015-05-29 17:39:43.160880] "GET /EMail/main.aspx HTTP/1.1" 200 3415 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjJLz6wxQzZrjAbVW0sAAABC TLSv1 ECDHE-RSA-AES256-SHA 872 7670 -% 7495124 2219 489027 2910 0 0 192.168.213.23 CH - [2015-05-29 17:39:50.913129] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjJL1qwxQzZrjAbUFDQAAAAH TLSv1 ECDHE-RSA-AES256-SHA 840 7990 -% 21617363 3369 602671 10424 0 0 192.168.213.23 CH - [2015-05-29 17:39:50.915004] "GET /EMail/overview.aspx HTTP/1.1" 200 6448 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjJL1qwxQzZrjAbVW00AAAB5 TLSv1 ECDHE-RSA-AES256-SHA 840 10726 -% 28547820 1821 541986 3431 0 0 192.168.213.23 CH - [2015-05-29 17:40:27.312154] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjJL@6wxQzZrjAbVW1QAAAB7 TLSv1 ECDHE-RSA-AES256-SHA 984 4049 -% 14786117 2101 783359 158 0 0 192.168.213.23 CH - [2015-05-29 17:40:46.200961] "GET /EMail/images/msgOpened.png HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjJMDqwxQzZrjAbVW1gAAABF TLSv1 ECDHE-RSA-AES256-SHA 869 358 -% 6225567 3141 221498 208 0 0 192.168.213.23 CH - [2015-05-29 17:40:46.201104] "GET /EMail/images/msgClosed.png HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjJMDqwxQzZrjAbVW1kAAABU TLSv1 ECDHE-RSA-AES256-SHA 869 358 -% 9009081 3052 5234 153 0 0 192.168.213.23 CH - [2015-05-29 17:40:57.419339] "GET /EMail/message.aspx?&mailId=3920_8&folderId=1001_9&mailPos=24 HTTP/1.1" 200 11486 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjJMGawxQzZrjAbVW1sAAABA TLSv1 ECDHE-RSA-AES256-SHA 872 15803 -% 13376415 4868 347239 23225 0 0 192.168.213.23 CH - [2015-05-29 17:41:10.921361] "GET /EMail/message.aspx?&mailId=3920_8&folderId=1001_9&mailPos=24 HTTP/1.1" 500 4529 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - - "e902675f.52340f26b6ece" VjJMJqwxQzZrjAbVW10AAABT TLSv1 ECDHE-RSA-AES256-SHA 872 8826 -% 6249765 4840 0 0 0 0 192.168.213.23 CH - [2015-05-29 17:41:17.250658] "GET /EMail/message.aspx?&mailId=3920_8&folderId=1001_9&mailPos=24 HTTP/1.1" 200 7349 "https://www.example.com/EMail/message.aspx?&mailId=3920_8&folderId=1001_9&mailPos=24" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjJMLawxQzZrjAbVW18AAABM TLSv1 ECDHE-RSA-AES256-SHA 837 8011 -% 444824 5021 434828 4199 0 0 192.168.15.144 CH - [2015-05-29 17:46:15.385963] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "e2046396.523410ca2a76b" VjJNV6wxQzZrjAbVW4oAAABr TLSv1.2 ECDHE-RSA-AES256-SHA384 659 8674 -% 2861051 1586 858205 210 0 0 192.168.76.46 CH - [2015-05-29 19:24:21.093597] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8fb79114.523426ae3c999" VjJkVawxQzZrjAbVXroAAABU TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1181 5897 22% 14878306 11235 864422 181 6 0 192.168.76.46 CH - [2015-05-29 19:29:46.788528] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 12863 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeNewMsg" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8fb79114.523426ae3c999" VjJlmqwxQzZrjAbVXuUAAABx TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1573 17365 -% 7514359 8647 499920 3874 6 0 192.168.76.46 CH - [2015-05-29 19:29:46.792866] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeNewMsg" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8fb79114.523426ae3c999" VjJlmqwxQzZrjAbVXuYAAABW TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1590 13200 -% 8257500 8656 238306 4427 6 0 192.168.76.46 CH - [2015-05-29 19:30:02.889534] "GET /EMail/draftsExternal.aspx?dir=desc HTTP/1.1" 200 9813 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8fb79114.523426ae3c999" VjJlqqwxQzZrjAbUFfQAAAAT TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1506 10402 -% 7630836 11261 612086 4882 6 0 192.168.76.46 CH - [2015-05-29 19:30:02.889976] "GET /EMail/tree.aspx?sNode-sharedTree=treeDrafts HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8fb79114.523426ae3c999" VjJlqqwxQzZrjAbVXugAAABJ TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1515 9317 -% 7906096 12653 882845 4496 6 0 192.168.76.46 CH - [2015-05-29 19:30:15.107853] "GET /EMail/newMessage.aspx?action=draft&mailId=3919_48&folderId=2890_7&to= HTTP/1.1" 200 13421 "https://www.example.com/EMail/draftsExternal.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8fb79114.523426ae3c999" VjJlt6wxQzZrjAbVXusAAAB5 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 966 13873 -% 3629275 13027 591999 22387 9 3 192.168.76.46 CH - [2015-05-29 19:30:18.986506] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2942 "https://www.example.com/EMail/newMessage.aspx?action=draft&mailId=3919_48&folderId=2890_7&to=" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8fb79114.523426ae3c999" VjJluqwxQzZrjAbVXu0AAAB8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 956 3335 -% 6972477 11106 950880 8295 6 0 192.168.76.46 CH - [2015-05-29 19:30:19.304906] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5793 "https://www.example.com/EMail/newMessage.aspx?action=draft&mailId=3919_48&folderId=2890_7&to=" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8fb79114.523426ae3c999" VjJlu6wxQzZrjAbVXu4AAABI TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1442 7582 -% 6759614 11057 0 0 6 0 192.168.76.46 CH - [2015-05-29 19:30:47.986130] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=draft&mailId=3919_48&folderId=2890_7&to=" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8fb79114.523426ae3c999" VjJl16wxQzZrjAbVXvEAAAB7 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 3824 535 -% 1480471 53887 422830 167 34 0 192.168.76.46 CH - [2015-05-29 19:30:49.481963] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc= HTTP/1.1" 200 3910 "https://www.example.com/EMail/newMessage.aspx?action=draft&mailId=3919_48&folderId=2890_7&to=" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8fb79114.523426ae3c999" VjJl2awxQzZrjAbVXvIAAABH TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1039 4332 -% 7249996 13295 223516 10821 6 0 192.168.76.46 CH - [2015-05-29 19:31:08.751669] "GET /EMail/draftsExternal.aspx?dir=desc HTTP/1.1" 200 8531 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeDrafts" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8fb79114.523426ae3c999" VjJl7KwxQzZrjAbVXvMAAAB3 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1507 9120 -% 7630131 11699 611792 4306 6 0 192.168.76.46 CH - [2015-05-29 19:31:08.751739] "GET /EMail/tree.aspx?sNode-sharedTree=treeDrafts HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeDrafts" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8fb79114.523426ae3c999" VjJl7KwxQzZrjAbVXvQAAABL TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1516 9317 -% 7919947 11925 896743 5170 6 0 192.168.76.46 CH - [2015-05-29 19:31:25.149907] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8fb79114.523426ae3c999" VjJl-awxQzZrjAbVXvcAAABO TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1483 547 -% 964247 11592 951048 160 6 0 192.168.76.46 CH - [2015-05-29 19:31:26.129205] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8fb79114.523426ae3c999" VjJl-qwxQzZrjAbVXvgAAAB@ TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 897 676 75% 7307167 8524 296242 291 6 0 192.168.76.46 CH - [2015-05-29 19:31:33.719215] "GET /favicon.ico HTTP/1.1" 200 1150 "https://www.example.com/EMail/index.html" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 - - + "8fb79114.523426ae3c999" VjJmBawxQzZrjAbUFgIAAAAl TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1311 1692 -% 7544 6131 40 96 6 0 192.168.76.46 CH - [2015-05-29 19:31:33.655745] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "https://www.example.com/EMail/index.html" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8fb79114.523426ae3c999" VjJmBawxQzZrjAbVXvkAAABU TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 914 318 -% 918682 7338 909397 179 6 0 192.168.76.46 CH - [2015-05-29 19:31:34.588249] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "https://www.example.com/EMail/index.html" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8fb79114.523426ae3c999" VjJmBqwxQzZrjAbVXvoAAABT TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 896 7758 -% 934459 11530 916850 3801 6 0 192.168.150.203 CH - [2015-05-29 20:06:00.933794] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd (unknown version) CFNetwork/520.5.3 Darwin/11.4.2 (x86_64) (MacBookPro8%2C1)" www.example.com 192.168.34.16 443 proxy-server - - "6e21154.523430073f5a2" VjJuGKwxQzZrjAbVYA4AAABk TLSv1 ECDHE-RSA-AES256-SHA 523 8347 -% 925700 1798 922428 218 0 0 192.168.237.42 CH - [2015-05-29 21:28:08.182090] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7356 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "40host.523442623cd4a" VjKBWKwxQzZrjAbVYsQAAABc TLSv1.2 ECDHE-RSA-AES256-SHA384 915 11923 -% 13906805 2399 898796 3688 3 0 192.168.237.42 CH - [2015-05-29 21:28:22.771136] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "40host.523442623cd4a" VjKBZqwxQzZrjAbVYscAAABx TLSv1.2 ECDHE-RSA-AES256-SHA384 646 2777 14% 21760809 3426 754953 142 3 0 192.168.237.42 CH - [2015-05-29 21:28:22.913038] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "40host.523442623cd4a" VjKBZqwxQzZrjAbVYsgAAABW TLSv1.2 ECDHE-RSA-AES256-SHA384 948 1979 -% 21673623 4844 667389 97 3 0 192.168.237.42 CH - [2015-05-29 21:28:22.929046] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "40host.523442623cd4a" VjKBZqwxQzZrjAbVYskAAABZ TLSv1.2 ECDHE-RSA-AES256-SHA384 964 2208 22% 21658499 4864 652071 85 3 0 192.168.237.42 CH - [2015-05-29 21:28:22.949160] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "40host.523442623cd4a" VjKBZqwxQzZrjAbVYsoAAABG TLSv1.2 ECDHE-RSA-AES256-SHA384 964 4485 23% 29740290 4997 732919 147 3 0 192.168.237.42 CH - [2015-05-29 21:28:22.977092] "GET /EMail/scripts/shost.js HTTP/1.1" 502 4088 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "40cb4ee8.523442623cd4a" VjKBZqwxQzZrjAbVYswAAABJ TLSv1.2 ECDHE-RSA-AES256-SHA384 948 5241 -% 30037212 4830 0 0 3 0 192.168.237.42 CH - [2015-05-29 21:28:22.961086] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "40host.523442623cd4a" VjKBZqwxQzZrjAbVYssAAABw TLSv1.2 ECDHE-RSA-AES256-SHA384 964 928 56% 39507719 4749 500495 250 3 0 192.168.237.42 CH - [2015-05-29 21:28:32.004108] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7356 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Mobile/12B411" www.example.com 192.168.34.16 443 proxy-server - + "40992df7.52344278f4c0c" VjKBcKwxQzZrjAbVYs0AAABr TLSv1.2 ECDHE-RSA-AES256-SHA384 819 11923 -% 31886496 1745 881889 2178 0 0 192.168.237.42 CH - [2015-05-29 21:28:35.333553] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7356 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "40host.523442623cd4a" VjKBc6wxQzZrjAbVYs8AAAB6 TLSv1.2 ECDHE-RSA-AES256-SHA384 952 8059 -% 35701173 6175 689362 3846 3 0 192.168.128.7 CH - [2015-05-29 21:28:44.563983] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "e037455c.52344284ef20f" VjKBfKwxQzZrjAbVYtAAAAB4 TLSv1.2 ECDHE-RSA-AES256-SHA384 659 8674 -% 26676313 1197 673980 202 0 0 192.168.237.42 CH - [2015-05-29 21:29:21.803207] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7356 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "40host.523442623cd4a" VjKBoawxQzZrjAbUF9kAAAAS TLSv1.2 ECDHE-RSA-AES256-SHA384 952 8059 -% 19514278 6008 504666 2189 3 0 192.168.186.76 CH - [2015-05-30 07:20:27.850778] "GET /EMail/main.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMMK6wxQzZrjDjjqVYAAABV TLSv1.2 ECDHE-RSA-AES256-SHA384 919 12118 -% 965958 3003 955869 4992 3 0 192.168.186.76 CH - [2015-05-30 07:20:29.133113] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMMLawxQzZrjDjjqVgAAABY TLSv1.2 ECDHE-RSA-AES256-SHA384 646 2015 22% 930766 4482 923647 212 3 0 192.168.186.76 CH - [2015-05-30 07:20:29.211492] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMMLawxQzZrjDjiLQYAAAAf TLSv1.2 ECDHE-RSA-AES256-SHA384 1196 4453 23% 987937 8138 976986 169 3 0 192.168.186.76 CH - [2015-05-30 07:20:29.203742] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMMLawxQzZrjDjjqVkAAABZ TLSv1.2 ECDHE-RSA-AES256-SHA384 1180 8021 22% 1102835 6514 92866 164 3 0 192.168.186.76 CH - [2015-05-30 07:20:29.207191] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMMLawxQzZrjDjjqVoAAABa TLSv1.2 ECDHE-RSA-AES256-SHA384 1196 1947 -% 1250683 8057 240906 154 3 0 192.168.186.76 CH - [2015-05-30 07:20:32.936895] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMMMKwxQzZrjDjjqVsAAABb TLSv1.2 ECDHE-RSA-AES256-SHA384 678 1898 -% 813003 4918 806393 156 3 0 192.168.126.131 CH - [2015-05-30 07:33:47.441891] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPS6wxQzZrjDjiLS8AAAAI TLSv1.2 ECDHE-RSA-AES256-SHA384 1015 4337 -% 721037 2076 718153 193 0 0 192.168.126.131 CH - [2015-05-30 07:33:47.507212] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPS6wxQzZrjDjjqdYAAABa TLSv1.2 ECDHE-RSA-AES256-SHA384 1223 4337 -% 1014122 4045 9216 160 0 0 192.168.126.131 CH - [2015-05-30 07:33:47.533107] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPS6wxQzZrjDjjqdgAAABd TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 4337 -% 1251170 2767 247554 202 0 0 192.168.126.131 CH - [2015-05-30 07:33:47.527539] "GET /EMail/scripts/variables_en.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPS6wxQzZrjDjjqdcAAABb TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 4337 -% 1271212 2070 268549 93 0 0 192.168.126.131 CH - [2015-05-30 07:33:48.828997] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPTKwxQzZrjDjjqdkAAABe TLSv1.2 ECDHE-RSA-AES256-SHA384 678 261 -% 894317 3067 890322 198 0 0 192.168.126.131 CH - [2015-05-30 07:34:19.277642] "GET /EMail/images/active.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "b43b967d.5234c9c12ca2e" VjMPa6wxQzZrjDjiLTMAAAAP TLSv1.2 ECDHE-RSA-AES256-SHA384 1196 161 -% 935403 3230 931293 194 0 0 192.168.126.131 CH - [2015-05-30 07:34:19.633057] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPa6wxQzZrjDjiLTQAAAAM TLSv1.2 ECDHE-RSA-AES256-SHA384 1244 630 -% 936921 3290 932798 223 0 0 192.168.126.131 CH - [2015-05-30 07:34:20.583058] "GET /EMail/main.aspx HTTP/1.1" 200 3403 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPbKwxQzZrjDjiLTUAAAAN TLSv1.2 ECDHE-RSA-AES256-SHA384 582 3914 -% 930510 2704 925834 1380 0 0 192.168.126.131 CH - [2015-05-30 07:34:21.561041] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPbawxQzZrjDjiLTYAAAAO TLSv1.2 ECDHE-RSA-AES256-SHA384 630 261 -% 958619 3746 953998 154 0 0 192.168.126.131 CH - [2015-05-30 07:34:21.607636] "GET /EMail/scripts/variables_de.js HTTP/1.1" 304 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPbawxQzZrjDjiLTcAAAAQ TLSv1.2 ECDHE-RSA-AES256-SHA384 1180 422 -% 984603 3763 979873 189 0 0 192.168.126.131 CH - [2015-05-30 07:34:24.213996] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPcKwxQzZrjDjiLTgAAAAR TLSv1.2 ECDHE-RSA-AES256-SHA384 630 261 -% 764005 2110 760911 151 0 0 192.168.126.131 CH - [2015-05-30 07:34:24.267778] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/header.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPcKwxQzZrjDjjqd4AAABj TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 4337 -% 1024870 3086 20863 196 0 0 192.168.126.131 CH - [2015-05-30 07:34:24.214852] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPcKwxQzZrjDjiLTkAAAAT TLSv1.2 ECDHE-RSA-AES256-SHA384 630 261 -% 1089328 3009 85383 215 0 0 192.168.126.131 CH - [2015-05-30 07:34:24.989459] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPcKwxQzZrjDjiLToAAAAS TLSv1.2 ECDHE-RSA-AES256-SHA384 726 261 -% 644529 2719 641069 150 0 0 192.168.126.131 CH - [2015-05-30 07:34:25.321530] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPcawxQzZrjDjiLTsAAAAV TLSv1.2 ECDHE-RSA-AES256-SHA384 678 261 -% 751969 4510 746355 155 0 0 192.168.126.131 CH - [2015-05-30 07:34:28.349334] "GET /EMail/inbox.aspx HTTP/1.1" 200 9705 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPdKwxQzZrjDjiLTwAAAAU TLSv1.2 ECDHE-RSA-AES256-SHA384 566 10303 -% 1106951 3368 97846 4898 0 0 192.168.126.131 CH - [2015-05-30 07:34:29.567042] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPdawxQzZrjDjiLT0AAAAW TLSv1.2 ECDHE-RSA-AES256-SHA384 630 261 -% 972908 2246 969920 168 0 0 192.168.126.131 CH - [2015-05-30 07:34:29.568354] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPdawxQzZrjDjiLT4AAAAX TLSv1.2 ECDHE-RSA-AES256-SHA384 630 261 -% 1036319 2504 32980 171 0 0 192.168.126.131 CH - [2015-05-30 07:34:29.568779] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPdawxQzZrjDjjqeAAAABm TLSv1.2 ECDHE-RSA-AES256-SHA384 662 261 -% 1070186 3217 66040 181 0 0 192.168.126.131 CH - [2015-05-30 07:34:29.606452] "GET /EMail/images/Highost.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPdawxQzZrjDjiLT8AAAAZ TLSv1.2 ECDHE-RSA-AES256-SHA384 1196 422 -% 1181451 2891 177809 168 0 0 192.168.126.131 CH - [2015-05-30 07:34:42.485005] "GET /EMail/newMessage.aspx?msg=new HTTP/1.1" 200 12042 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPgqwxQzZrjDjjqeQAAABo TLSv1.2 ECDHE-RSA-AES256-SHA384 1159 16800 -% 993290 2611 968727 20161 3 3 192.168.126.131 CH - [2015-05-30 07:34:43.509158] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPg6wxQzZrjDjjqeUAAABp TLSv1.2 ECDHE-RSA-AES256-SHA384 646 261 -% 877776 3175 873627 203 0 0 192.168.126.131 CH - [2015-05-30 07:34:43.555839] "GET /EMail/scripts/tinymce/tinymce.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPg6wxQzZrjDjjqecAAABr TLSv1.2 ECDHE-RSA-AES256-SHA384 1196 422 -% 1000278 3137 995904 195 0 0 192.168.126.131 CH - [2015-05-30 07:34:43.540363] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPg6wxQzZrjDjjqeYAAABq TLSv1.2 ECDHE-RSA-AES256-SHA384 1164 422 -% 1079105 3848 74497 153 0 0 192.168.126.131 CH - [2015-05-30 07:34:44.881567] "GET /EMail/scripts/tinymce/langs/de.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPhKwxQzZrjDjjqegAAABs TLSv1.2 ECDHE-RSA-AES256-SHA384 678 261 -% 942866 3124 938918 157 0 0 192.168.126.131 CH - [2015-05-30 07:34:44.899165] "GET /EMail/scripts/tinymce/plugins/preview/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPhKwxQzZrjDjjqeoAAABt TLSv1.2 ECDHE-RSA-AES256-SHA384 694 261 -% 1021513 2786 17995 144 0 0 192.168.126.131 CH - [2015-05-30 07:34:44.887692] "GET /EMail/scripts/tinymce/themes/modern/theme.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPhKwxQzZrjDjjqekAAABu TLSv1.2 ECDHE-RSA-AES256-SHA384 694 261 -% 1238931 1656 236401 156 0 0 192.168.126.131 CH - [2015-05-30 07:34:45.836095] "GET /EMail/scripts/tinymce/plugins/insertdatetime/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPhawxQzZrjDjjqewAAABw TLSv1.2 ECDHE-RSA-AES256-SHA384 694 261 -% 454162 3113 450244 140 0 0 192.168.126.131 CH - [2015-05-30 07:34:45.534721] "GET /EMail/scripts/tinymce/plugins/fullpage/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPhawxQzZrjDjjqesAAABv TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 4337 -% 938496 2738 935021 185 0 0 192.168.126.131 CH - [2015-05-30 07:34:45.933648] "GET /EMail/scripts/tinymce/plugins/visualblocks/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPhawxQzZrjDjjqe0AAABx TLSv1.2 ECDHE-RSA-AES256-SHA384 694 261 -% 701593 2205 698632 193 0 0 192.168.126.131 CH - [2015-05-30 07:34:46.301926] "GET /EMail/scripts/tinymce/plugins/visualchars/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPhqwxQzZrjDjjqe8AAABy TLSv1.2 ECDHE-RSA-AES256-SHA384 694 261 -% 728011 4110 722330 192 0 0 192.168.126.131 CH - [2015-05-30 07:34:46.138042] "GET /EMail/scripts/tinymce/plugins/link/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPhqwxQzZrjDjjqe4AAAB0 TLSv1.2 ECDHE-RSA-AES256-SHA384 694 261 -% 907184 2602 903440 223 0 0 192.168.126.131 CH - [2015-05-30 07:34:46.649193] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/checkRecAvail.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPhqwxQzZrjDjjqfEAAAB1 TLSv1.2 ECDHE-RSA-AES256-SHA384 646 261 -% 539500 3115 535489 376 0 0 192.168.126.131 CH - [2015-05-30 07:34:46.484984] "GET /EMail/scripts/tinymce/plugins/image/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPhqwxQzZrjDjjqfAAAABz TLSv1.2 ECDHE-RSA-AES256-SHA384 694 261 -% 831247 3525 826841 151 0 0 192.168.126.131 CH - [2015-05-30 07:34:47.041017] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/checkRecAvail.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPh6wxQzZrjDjjqfIAAAB2 TLSv1.2 ECDHE-RSA-AES256-SHA384 630 261 -% 556976 3054 553075 168 0 0 192.168.126.131 CH - [2015-05-30 07:34:47.058785] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/checkRecAvail.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPh6wxQzZrjDjjqfMAAAB4 TLSv1.2 ECDHE-RSA-AES256-SHA384 662 261 -% 920436 2897 916668 178 0 0 192.168.126.131 CH - [2015-05-30 07:34:47.350543] "GET /EMail/scripts/tinymce/skins/lightgray/skin.min.css HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPh6wxQzZrjDjjqfUAAAB8 TLSv1.2 ECDHE-RSA-AES256-SHA384 678 261 -% 637960 2622 634512 126 0 0 192.168.126.131 CH - [2015-05-30 07:34:47.211899] "GET /EMail/images/active.gif HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPh6wxQzZrjDjjqfQAAAB3 TLSv1.2 ECDHE-RSA-AES256-SHA384 678 261 -% 796633 2997 792635 239 0 0 192.168.126.131 CH - [2015-05-30 07:34:47.610028] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5471 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPh6wxQzZrjDjjqfYAAAB5 TLSv1.2 ECDHE-RSA-AES256-SHA384 566 9250 -% 955341 2757 0 0 0 0 192.168.126.131 CH - [2015-05-30 07:34:48.019689] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce.eot? HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPiKwxQzZrjDjjqfcAAAB6 TLSv1.2 ECDHE-RSA-AES256-SHA384 694 261 -% 894374 3582 889551 249 0 0 192.168.126.131 CH - [2015-05-30 07:34:48.023658] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce-small.eot? HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPiKwxQzZrjDjjqfgAAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 710 261 -% 1093305 3402 88964 190 0 0 192.168.126.131 CH - [2015-05-30 07:34:48.887978] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/attachments.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPiKwxQzZrjDjiLUEAAAAb TLSv1.2 ECDHE-RSA-AES256-SHA384 1180 422 -% 841594 1897 838877 184 0 0 192.168.126.131 CH - [2015-05-30 07:34:48.858285] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/attachost.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPiKwxQzZrjDjjqfkAAAB@ TLSv1.2 ECDHE-RSA-AES256-SHA384 630 261 -% 1011334 3121 7397 160 0 0 192.168.126.131 CH - [2015-05-30 07:34:48.925423] "GET /EMail/images/attach.gif HTTP/1.1" 304 - "https://www.example.com/EMail/attachost.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPiKwxQzZrjDjjqfoAAAB- TLSv1.2 ECDHE-RSA-AES256-SHA384 678 261 -% 1088575 2033 85749 214 0 0 192.168.126.131 CH - [2015-05-30 07:34:50.054658] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/attachost.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPiqwxQzZrjDjjqfsAAABA TLSv1.2 ECDHE-RSA-AES256-SHA384 678 261 -% 963300 2158 960405 153 0 0 192.168.126.131 CH - [2015-05-30 07:34:51.181832] "GET /EMail/images/active.gif HTTP/1.1" 304 - "https://www.example.com/EMail/attachost.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMPi6wxQzZrjDjjqf0AAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 678 261 -% 978006 2867 974411 152 0 0 192.168.126.131 CH - [2015-05-30 07:35:54.408102] "POST /EMail/MailHandler HTTP/1.1" 413 1924 "https://www.example.com/EMail/attachost.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - - "b43b967d.5234c9c12ca2e" VjMPyqwxQzZrjDjiLUkAAAAj TLSv1.2 ECDHE-RSA-AES256-SHA384 1228 2608 44% 77075 256 0 0 0 0 192.168.126.131 CH - [2015-05-30 07:35:56.077541] "GET /errordocuments/logo_d.png HTTP/1.1" 200 7515 "https://www.example.com/EMail/MailHandler" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "b43b967d.5234c9c12ca2e" VjMPzKwxQzZrjDjiLUoAAAAk TLSv1.2 ECDHE-RSA-AES256-SHA384 1148 8171 -% 2951 1913 67 156 0 0 192.168.126.131 CH - [2015-05-30 07:35:56.160290] "GET /EMail/favicon.ico HTTP/1.1" 404 5087 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4b57fe6d.5234ca3ccfd22" VjMPzKwxQzZrjDjjqgUAAABL TLSv1.2 ECDHE-RSA-AES256-SHA384 711 13086 -% 849474 941 0 0 0 0 192.168.169.43 CH - [2015-05-30 07:37:09.363875] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7368 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMQFawxQzZrjDjiLVQAAAAu TLSv1.2 ECDHE-RSA-AES256-SHA384 733 11939 -% 892955 1278 886991 3856 0 0 192.168.169.43 CH - [2015-05-30 07:37:10.414477] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMQFqwxQzZrjDjiLVcAAAAy TLSv1.2 ECDHE-RSA-AES256-SHA384 850 1979 -% 735616 2280 732475 169 0 0 192.168.169.43 CH - [2015-05-30 07:37:10.353235] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMQFqwxQzZrjDjiLVYAAAAx TLSv1.2 ECDHE-RSA-AES256-SHA384 502 2575 14% 888981 3100 884464 179 0 0 192.168.169.43 CH - [2015-05-30 07:37:10.427928] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMQFqwxQzZrjDjjqgsAAABT TLSv1.2 ECDHE-RSA-AES256-SHA384 834 4788 23% 855059 2586 850463 151 0 0 192.168.169.43 CH - [2015-05-30 07:37:10.422285] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMQFqwxQzZrjDjiLVkAAAAz TLSv1.2 ECDHE-RSA-AES256-SHA384 834 8053 22% 943883 2358 936259 236 0 0 192.168.169.43 CH - [2015-05-30 07:37:10.422223] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMQFqwxQzZrjDjiLVgAAAAv TLSv1.2 ECDHE-RSA-AES256-SHA384 802 928 56% 1083682 3197 79078 189 0 0 192.168.169.43 CH - [2015-05-30 07:37:11.678851] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMQF6wxQzZrjDjiLVoAAAA0 TLSv1.2 ECDHE-RSA-AES256-SHA384 534 1898 -% 839849 3106 835813 189 0 0 192.168.169.43 CH - [2015-05-30 07:37:15.006849] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMQG6wxQzZrjDjiLVsAAAA1 TLSv1.2 ECDHE-RSA-AES256-SHA384 534 2186 -% 797561 3189 792995 158 0 0 192.168.169.43 CH - [2015-05-30 07:37:31.209385] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMQK6wxQzZrjDjjqhAAAABY TLSv1.2 ECDHE-RSA-AES256-SHA384 994 662 -% 998256 3560 993909 226 0 0 192.168.169.43 CH - [2015-05-30 07:37:32.227419] "GET /EMail/main.aspx HTTP/1.1" 200 3400 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMQLKwxQzZrjDjjqhEAAABa TLSv1.2 ECDHE-RSA-AES256-SHA384 534 3914 -% 833045 2790 828264 1195 0 0 192.168.169.43 CH - [2015-05-30 07:37:33.159736] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMQLawxQzZrjDjjqhIAAABd TLSv1.2 ECDHE-RSA-AES256-SHA384 486 4234 -% 1055891 3017 45383 6780 0 0 192.168.169.43 CH - [2015-05-30 07:37:33.212570] "GET /EMail/overview.aspx HTTP/1.1" 200 5299 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMQLawxQzZrjDjjqhQAAABb TLSv1.2 ECDHE-RSA-AES256-SHA384 802 6011 -% 1142477 2199 137955 1741 0 0 192.168.169.43 CH - [2015-05-30 07:37:33.166342] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMQLawxQzZrjDjjqhMAAABZ TLSv1.2 ECDHE-RSA-AES256-SHA384 834 9859 -% 1658085 3216 647012 3045 0 0 192.168.169.43 CH - [2015-05-30 07:37:34.405469] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMQLqwxQzZrjDjjqhUAAABe TLSv1.2 ECDHE-RSA-AES256-SHA384 518 1354 -% 846653 3241 842505 159 0 0 192.168.169.43 CH - [2015-05-30 07:37:34.883477] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMQLqwxQzZrjDjjqhYAAABc TLSv1.2 ECDHE-RSA-AES256-SHA384 550 1370 -% 656015 3035 652035 203 0 0 192.168.169.43 CH - [2015-05-30 07:37:37.579103] "GET /EMail/inbox.aspx HTTP/1.1" 200 8594 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMQMawxQzZrjDjjqhcAAABg TLSv1.2 ECDHE-RSA-AES256-SHA384 486 9199 -% 1057840 3396 50646 2760 0 0 192.168.169.43 CH - [2015-05-30 07:37:38.692697] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMQMqwxQzZrjDjjqhgAAABh TLSv1.2 ECDHE-RSA-AES256-SHA384 502 634 -% 592281 3393 588071 156 0 0 192.168.169.43 CH - [2015-05-30 07:37:38.699543] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMQMqwxQzZrjDjjqhoAAABj TLSv1.2 ECDHE-RSA-AES256-SHA384 502 634 -% 755448 2114 752404 228 0 0 192.168.169.43 CH - [2015-05-30 07:37:38.699534] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMQMqwxQzZrjDjjqhkAAABf TLSv1.2 ECDHE-RSA-AES256-SHA384 502 1914 -% 1083235 3097 79001 206 0 0 192.168.169.43 CH - [2015-05-30 07:37:46.325762] "GET /EMail/message.aspx?&mailId=3919_51&folderId=75_57&mailPos=0 HTTP/1.1" 200 13006 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMQOqwxQzZrjDjjqh0AAABk TLSv1.2 ECDHE-RSA-AES256-SHA384 850 13792 -% 1401006 3806 389261 6958 0 0 192.168.169.43 CH - [2015-05-30 07:37:52.310631] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3919_51&folderId=75_57&attachmentId=2&token=33367581330963103E18 HTTP/1.1" 200 24960 "https://www.example.com/EMail/message.aspx?&mailId=3919_51&folderId=75_57&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMQQKwxQzZrjDjjqh8AAABo TLSv1.2 ECDHE-RSA-AES256-SHA384 630 26709 -% 1122179 8598 105010 180 0 0 192.168.169.43 CH - [2015-05-30 07:41:33.310953] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8586 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMRHawxQzZrjDjjqj0AAABI TLSv1.2 ECDHE-RSA-AES256-SHA384 802 9376 -% 967145 3219 960223 2769 0 0 192.168.169.43 CH - [2015-05-30 07:41:33.300174] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMRHawxQzZrjDjjqjwAAABH TLSv1.2 ECDHE-RSA-AES256-SHA384 818 9859 -% 1285184 2577 273244 4473 0 0 192.168.169.43 CH - [2015-05-30 07:41:34.336594] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMRHqwxQzZrjDjjqj8AAABK TLSv1.2 ECDHE-RSA-AES256-SHA384 518 1978 -% 900880 2033 898066 157 0 0 192.168.169.43 CH - [2015-05-30 07:41:36.469876] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMRIKwxQzZrjDjjqkAAAABL TLSv1.2 ECDHE-RSA-AES256-SHA384 790 405 -% 1081510 7203 73156 300 0 0 192.168.169.43 CH - [2015-05-30 07:41:37.571941] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7290 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMRIawxQzZrjDjjqkEAAABM TLSv1.2 ECDHE-RSA-AES256-SHA384 534 7802 -% 1029452 3810 22325 2448 0 0 192.168.169.43 CH - [2015-05-30 07:41:41.656128] "GET /EMail/trash.aspx?dir=desc HTTP/1.1" 200 8680 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMRJawxQzZrjDjjqkIAAABP TLSv1.2 ECDHE-RSA-AES256-SHA384 486 9279 -% 1026291 3645 14289 6992 0 0 192.168.169.43 CH - [2015-05-30 07:41:41.714168] "GET /EMail/tree.aspx?sNode-sharedTree=treeTrash HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMRJawxQzZrjDjiLW8AAAAK TLSv1.2 ECDHE-RSA-AES256-SHA384 818 9859 -% 1270526 3792 257296 4608 0 0 192.168.169.43 CH - [2015-05-30 07:41:45.262626] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/trash.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMRKawxQzZrjDjiLXAAAAAJ TLSv1.2 ECDHE-RSA-AES256-SHA384 790 405 -% 1093564 10276 82255 156 0 0 192.168.169.43 CH - [2015-05-30 07:41:46.376946] "GET /EMail/trash.aspx?returnedFromDelete=true HTTP/1.1" 200 7278 "https://www.example.com/EMail/trash.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMRKqwxQzZrjDjiLXEAAAAL TLSv1.2 ECDHE-RSA-AES256-SHA384 534 7786 -% 989692 2654 982156 4337 0 0 192.168.169.43 CH - [2015-05-30 07:41:51.637767] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMRL6wxQzZrjDjiLXIAAAAP TLSv1.2 ECDHE-RSA-AES256-SHA384 502 453 -% 874514 3600 869954 215 0 0 192.168.169.43 CH - [2015-05-30 07:41:52.533637] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMRMKwxQzZrjDjiLXMAAAAM TLSv1.2 ECDHE-RSA-AES256-SHA384 486 815 75% 836278 2635 832447 348 0 0 192.168.169.43 CH - [2015-05-30 07:41:53.456705] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMRMawxQzZrjDjiLXQAAAAN TLSv1.2 ECDHE-RSA-AES256-SHA384 454 373 -% 856652 5238 850556 151 0 0 192.168.169.43 CH - [2015-05-30 07:41:54.336720] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMRMqwxQzZrjDjiLXYAAAAQ TLSv1.2 ECDHE-RSA-AES256-SHA384 438 7866 -% 902861 3134 896626 2243 0 0 192.168.169.43 CH - [2015-05-30 07:41:55.351976] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMRM6wxQzZrjDjjqkUAAABQ TLSv1.2 ECDHE-RSA-AES256-SHA384 866 2208 22% 965694 4109 960503 164 0 0 192.168.169.43 CH - [2015-05-30 07:41:55.305042] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMRM6wxQzZrjDjiLXcAAAAR TLSv1.2 ECDHE-RSA-AES256-SHA384 566 2575 14% 1016103 3099 11211 164 0 0 192.168.169.43 CH - [2015-05-30 07:41:55.358655] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMRM6wxQzZrjDjjqkYAAABR TLSv1.2 ECDHE-RSA-AES256-SHA384 898 4485 23% 1008533 2804 4043 150 0 0 192.168.169.43 CH - [2015-05-30 07:41:55.364179] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMRM6wxQzZrjDjiLXgAAAAT TLSv1.2 ECDHE-RSA-AES256-SHA384 898 8053 22% 1144751 4543 136343 225 0 0 192.168.169.43 CH - [2015-05-30 07:41:55.371076] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMRM6wxQzZrjDjjqkcAAABS TLSv1.2 ECDHE-RSA-AES256-SHA384 866 928 56% 1179782 1739 177035 208 0 0 192.168.169.43 CH - [2015-05-30 07:41:55.372357] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMRM6wxQzZrjDjiLXkAAAAS TLSv1.2 ECDHE-RSA-AES256-SHA384 914 454 -% 1192311 2194 189443 199 0 0 192.168.169.43 CH - [2015-05-30 07:41:56.653768] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e86d48b6.5234ca829fca3" VjMRNKwxQzZrjDjiLXoAAAAV TLSv1.2 ECDHE-RSA-AES256-SHA384 598 261 -% 674338 3674 669685 158 0 0 192.168.126.131 CH - [2015-05-30 07:42:56.791504] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/error.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMRcKwxQzZrjDjjqlMAAABc TLSv1.2 ECDHE-RSA-AES256-SHA384 1015 4337 -% 859812 2507 856610 157 0 0 192.168.126.131 CH - [2015-05-30 07:42:56.849927] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/error.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMRcKwxQzZrjDjjqlUAAABh TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 4337 -% 1167019 3221 162712 190 0 0 192.168.126.131 CH - [2015-05-30 07:42:56.849919] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/error.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b43b967d.5234c9c12ca2e" VjMRcKwxQzZrjDjjqlQAAABg TLSv1.2 ECDHE-RSA-AES256-SHA384 1223 4337 -% 1180002 4513 174476 102 0 0 192.168.212.3 CH - [2015-05-30 08:03:34.940404] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7383 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMWRqwxQzZrjDjjqvwAAABO TLSv1 ECDHE-RSA-AES256-SHA 704 11809 -% 894941 1676 890144 2589 0 0 192.168.212.3 CH - [2015-05-30 08:03:36.101166] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMWSKwxQzZrjDjjqwEAAABU TLSv1 ECDHE-RSA-AES256-SHA 885 358 -% 971558 3740 967066 172 0 0 192.168.212.3 CH - [2015-05-30 08:03:36.068079] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMWSKwxQzZrjDjjqv4AAABT TLSv1 ECDHE-RSA-AES256-SHA 662 213 -% 1045142 1985 42361 186 0 0 192.168.212.3 CH - [2015-05-30 08:03:36.116721] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMWSKwxQzZrjDjiLdQAAAAx TLSv1 ECDHE-RSA-AES256-SHA 901 358 -% 1014779 2137 11809 200 0 0 192.168.212.3 CH - [2015-05-30 08:03:36.096467] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMWSKwxQzZrjDjjqv8AAABR TLSv1 ECDHE-RSA-AES256-SHA 869 358 -% 1144389 1970 141670 166 0 0 192.168.212.3 CH - [2015-05-30 08:03:36.099440] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMWSKwxQzZrjDjjqwAAAABQ TLSv1 ECDHE-RSA-AES256-SHA 869 358 -% 1175888 2785 172367 182 0 0 192.168.212.3 CH - [2015-05-30 08:03:36.108065] "GET /EMail/scripts/variables_de.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMWSKwxQzZrjDjjqwIAAABS TLSv1 ECDHE-RSA-AES256-SHA 901 358 -% 1225180 1960 222613 134 0 0 192.168.212.3 CH - [2015-05-30 08:03:37.437383] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMWSawxQzZrjDjjqwMAAABW TLSv1 ECDHE-RSA-AES256-SHA 694 213 -% 872013 3131 868114 155 0 0 192.168.212.3 CH - [2015-05-30 08:03:49.073104] "GET /EMail/main.aspx HTTP/1.1" 200 3415 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMWVawxQzZrjDjjqwYAAABY TLSv1 ECDHE-RSA-AES256-SHA 872 7670 -% 948850 2353 944863 1105 0 0 192.168.212.3 CH - [2015-05-30 08:03:50.314368] "GET /EMail/overview.aspx HTTP/1.1" 200 6448 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMWVqwxQzZrjDjjqwcAAABd TLSv1 ECDHE-RSA-AES256-SHA 840 10726 -% 1271608 2512 263959 4451 0 0 192.168.212.3 CH - [2015-05-30 08:03:51.813210] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMWV6wxQzZrjDjjqwgAAABZ TLSv1 ECDHE-RSA-AES256-SHA 952 4049 -% 787698 3294 783624 151 0 0 192.168.212.3 CH - [2015-05-30 08:03:54.113237] "GET /EMail/inbox.aspx HTTP/1.1" 200 47599 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMWWqwxQzZrjDjjqwkAAABj TLSv1 ECDHE-RSA-AES256-SHA 840 52168 -% 1719826 2025 244630 24462 0 0 192.168.212.3 CH - [2015-05-30 08:03:56.063461] "GET /EMail/images/attach.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMWXKwxQzZrjDjjqwsAAABg TLSv1 ECDHE-RSA-AES256-SHA 936 4049 -% 1003376 2104 605 151 0 0 192.168.212.3 CH - [2015-05-30 08:03:56.063769] "GET /EMail/images/Highost.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMWXKwxQzZrjDjjqwwAAABf TLSv1 ECDHE-RSA-AES256-SHA 952 4049 -% 1260138 2889 256323 265 0 0 192.168.212.3 CH - [2015-05-30 08:03:59.654041] "GET /EMail/message.aspx?&mailId=3919_12&folderId=1001_9&mailPos=27 HTTP/1.1" 200 11496 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMWX6wxQzZrjDjjqw0AAABk TLSv1 ECDHE-RSA-AES256-SHA 872 15803 -% 1427758 3264 395630 27902 0 0 192.168.212.3 CH - [2015-05-30 08:04:32.711335] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMWgKwxQzZrjDjjqxMAAABs TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1514797 2662 504026 3774 0 0 192.168.212.3 CH - [2015-05-30 08:04:37.514063] "GET /EMail/message.aspx?&mailId=3919_17&folderId=1001_9&mailPos=26 HTTP/1.1" 200 11491 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMWhawxQzZrjDjiLdgAAAA1 TLSv1 ECDHE-RSA-AES256-SHA 888 15803 -% 1333048 5008 288419 38548 0 0 192.168.212.3 CH - [2015-05-30 08:04:40.112895] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3919_17&folderId=1001_9&attachmentId=2&token=32922582720442988E18 HTTP/1.1" 200 54436 "https://www.example.com/EMail/message.aspx?&mailId=3919_17&folderId=1001_9&mailPos=26" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMWiKwxQzZrjDjjqxUAAABw TLSv1 ECDHE-RSA-AES256-SHA 984 59994 -% 1146082 7578 115832 196 0 0 192.168.212.3 CH - [2015-05-30 08:05:08.611052] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3919_18&folderId=1001_9&attachmentId=2&token=161942659842769254E18 HTTP/1.1" 200 54500 "https://www.example.com/EMail/message.aspx?&mailId=3919_18&folderId=1001_9&mailPos=25" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMWpKwxQzZrjDjjqxwAAAB3 TLSv1 ECDHE-RSA-AES256-SHA 984 59984 -% 1114270 4005 89211 249 0 0 192.168.212.3 CH - [2015-05-30 08:05:12.060804] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMWqKwxQzZrjDjjqx4AAAB6 TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1647475 2926 635311 5051 0 0 192.168.212.3 CH - [2015-05-30 08:05:38.406831] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3919_19&folderId=1001_9&attachmentId=2&token=3957685464521878E18 HTTP/1.1" 200 57298 "https://www.example.com/EMail/message.aspx?&mailId=3919_19&folderId=1001_9&mailPos=24" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMWwqwxQzZrjDjjqyEAAABA TLSv1 ECDHE-RSA-AES256-SHA 984 62879 -% 1175710 6411 146975 211 0 0 192.168.212.3 CH - [2015-05-30 08:05:42.458375] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMWxqwxQzZrjDjjqyQAAABF TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1674193 2291 664880 2719 0 0 192.168.212.3 CH - [2015-05-30 08:05:42.456727] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 47567 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMWxqwxQzZrjDjjqyMAAABC TLSv1 ECDHE-RSA-AES256-SHA 840 52136 -% 2104252 2679 632421 14761 0 0 192.168.212.3 CH - [2015-05-30 08:06:04.411686] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3920_11&folderId=1001_9&attachmentId=2&token=48785106739311514E18 HTTP/1.1" 200 54794 "https://www.example.com/EMail/message.aspx?&mailId=3920_11&folderId=1001_9&mailPos=23" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMW3KwxQzZrjDjjqygAAABK TLSv1 ECDHE-RSA-AES256-SHA 984 60346 -% 1071487 5530 43190 196 0 0 192.168.212.3 CH - [2015-05-30 08:06:28.959963] "GET /EMail/message.aspx?&mailId=3919_20&folderId=1001_9&mailPos=22 HTTP/1.1" 200 11490 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMW9KwxQzZrjDjjqyoAAABP TLSv1 ECDHE-RSA-AES256-SHA 888 15840 -% 1326505 5550 291666 28284 0 0 192.168.212.3 CH - [2015-05-30 08:06:31.660089] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3919_20&folderId=1001_9&attachmentId=2&token=32329139604495647E18 HTTP/1.1" 200 59806 "https://www.example.com/EMail/message.aspx?&mailId=3919_20&folderId=1001_9&mailPos=22" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMW96wxQzZrjDjiLeMAAAAD TLSv1 ECDHE-RSA-AES256-SHA 984 65502 -% 1116989 6552 83639 219 0 0 192.168.212.3 CH - [2015-05-30 08:07:02.165249] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3919_21&folderId=1001_9&attachmentId=2&token=48326221533117984E17 HTTP/1.1" 200 56633 "https://www.example.com/EMail/message.aspx?&mailId=3919_21&folderId=1001_9&mailPos=21" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMXFqwxQzZrjDjjqzAAAABS TLSv1 ECDHE-RSA-AES256-SHA 984 62223 -% 1068163 5533 39610 233 0 0 192.168.212.3 CH - [2015-05-30 08:07:06.168205] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMXGqwxQzZrjDjjqzMAAABY TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1589316 2896 579214 2930 0 0 192.168.212.3 CH - [2015-05-30 08:07:06.166514] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 47543 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMXGqwxQzZrjDjjqzIAAABV TLSv1 ECDHE-RSA-AES256-SHA 840 52120 -% 2177394 3202 741002 15249 0 0 192.168.212.3 CH - [2015-05-30 08:07:25.660643] "GET /EMail/message.aspx?&mailId=3919_23&folderId=1001_9&mailPos=20 HTTP/1.1" 200 11490 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMXLawxQzZrjDjjqzYAAABe TLSv1 ECDHE-RSA-AES256-SHA 888 15803 -% 1324397 3039 296534 24077 0 0 192.168.212.3 CH - [2015-05-30 08:07:28.310885] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3919_23&folderId=1001_9&attachmentId=2&token=29865499729150894E18 HTTP/1.1" 200 55814 "https://www.example.com/EMail/message.aspx?&mailId=3919_23&folderId=1001_9&mailPos=20" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMXMKwxQzZrjDjjqzgAAABh TLSv1 ECDHE-RSA-AES256-SHA 984 61296 -% 1198882 3992 165355 218 0 0 192.168.96.45 CH - [2015-05-30 08:07:29.944095] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "a0a87e9b.5234d1496d281" VjMXMawxQzZrjDjiLecAAAAH TLSv1 AES256-SHA 1141 3700 -% 916082 2085 913294 163 0 0 192.168.96.45 CH - [2015-05-30 08:07:29.992477] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "a0a87e9b.5234d1496d281" VjMXMawxQzZrjDjjqzkAAABi TLSv1 AES256-SHA 1093 3700 -% 909634 1834 906942 183 0 0 192.168.96.45 CH - [2015-05-30 08:07:38.338962] "GET /EMail/overview.aspx HTTP/1.1" 200 5303 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "a0a87e9b.5234d1496d281" VjMXOqwxQzZrjDjiLekAAAAI TLSv1 AES256-SHA 989 9221 -% 1174357 2478 168790 2547 0 0 192.168.96.45 CH - [2015-05-30 08:07:39.690429] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "a0a87e9b.5234d1496d281" VjMXO6wxQzZrjDjjqzsAAABn TLSv1 AES256-SHA 1101 3696 -% 909008 4128 904060 195 0 0 192.168.96.45 CH - [2015-05-30 08:07:46.738565] "GET /EMail/images/msgClosed.png HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "a0a87e9b.5234d1496d281" VjMXQqwxQzZrjDjjqz0AAABp TLSv1 AES256-SHA 1085 3696 -% 919322 3242 915072 166 0 0 192.168.96.45 CH - [2015-05-30 08:07:46.789175] "GET /EMail/images/Highost.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "a0a87e9b.5234d1496d281" VjMXQqwxQzZrjDjjqz8AAABr TLSv1 AES256-SHA 1085 3696 -% 1025988 1826 23498 190 0 0 192.168.96.45 CH - [2015-05-30 08:07:46.788286] "GET /EMail/images/attach.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "a0a87e9b.5234d1496d281" VjMXQqwxQzZrjDjjqz4AAABl TLSv1 AES256-SHA 1085 3696 -% 1040535 2268 37662 133 0 0 192.168.212.3 CH - [2015-05-30 08:07:57.370152] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 47535 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMXTawxQzZrjDjjq0AAAABu TLSv1 ECDHE-RSA-AES256-SHA 840 52104 -% 2218668 4045 780956 16669 0 0 192.168.212.3 CH - [2015-05-30 08:08:01.669784] "GET /EMail/message.aspx?&mailId=3920_12&folderId=1001_9&mailPos=19 HTTP/1.1" 200 11490 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMXUawxQzZrjDjjq0IAAABx TLSv1 ECDHE-RSA-AES256-SHA 888 15840 -% 1304786 3270 265169 35177 0 0 192.168.96.45 CH - [2015-05-30 08:08:08.630344] "GET /EMail/images/active.gif HTTP/1.1" 304 - "https://www.example.com/EMail/message.aspx?&mailId=3920_14&folderId=1157_50&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "a0a87e9b.5234d1496d281" VjMXWKwxQzZrjDjjq0QAAAB1 TLSv1 AES256-SHA 1133 3696 -% 975055 2425 971579 221 0 0 192.168.96.45 CH - [2015-05-30 08:08:10.784245] "GET /EMail/message.aspx?&mailId=3919_42&folderId=1157_50&mailPos=1 HTTP/1.1" 200 11333 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "a0a87e9b.5234d1496d281" VjMXWqwxQzZrjDjjq0cAAAB8 TLSv1 AES256-SHA 1021 15290 -% 1487969 4278 456540 26273 0 0 192.168.212.3 CH - [2015-05-30 08:08:10.612534] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 47527 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMXWqwxQzZrjDjjq0YAAAB4 TLSv1 ECDHE-RSA-AES256-SHA 840 52104 -% 1897880 5223 448134 22657 0 0 192.168.96.45 CH - [2015-05-30 08:08:26.284603] "GET /EMail/inbox.aspx HTTP/1.1" 200 9879 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "a0a87e9b.5234d1496d281" VjMXaqwxQzZrjDjjq0oAAAB7 TLSv1 AES256-SHA 989 13834 -% 988122 3055 981170 3027 0 0 192.168.96.45 CH - [2015-05-30 08:08:31.638082] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7290 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "a0a87e9b.5234d1496d281" VjMXb6wxQzZrjDjjq0wAAABA TLSv1 AES256-SHA 1005 11205 -% 1056140 4235 48871 2309 0 0 192.168.212.3 CH - [2015-05-30 08:08:33.014912] "GET /EMail/message.aspx?&mailId=3919_25&folderId=1001_9&mailPos=18 HTTP/1.1" 200 11490 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMXcawxQzZrjDjjq00AAABE TLSv1 ECDHE-RSA-AES256-SHA 888 15803 -% 1240006 4000 200551 34724 0 0 192.168.212.3 CH - [2015-05-30 08:08:35.516575] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3919_25&folderId=1001_9&attachmentId=2&token=56143952069889976E18 HTTP/1.1" 200 56441 "https://www.example.com/EMail/message.aspx?&mailId=3919_25&folderId=1001_9&mailPos=18" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMXc6wxQzZrjDjjq08AAABC TLSv1 ECDHE-RSA-AES256-SHA 984 61920 -% 1016523 6316 0 206 0 0 192.168.96.45 CH - [2015-05-30 08:08:37.078299] "GET /favicon.ico HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0)" www.example.com 192.168.34.16 443 - - + "e7d0c7ef.5234d14d878b3" VjMXdawxQzZrjDjjq1EAAABI TLSv1 AES256-SHA 949 3684 -% 3141 2194 70 148 0 0 192.168.96.45 CH - [2015-05-30 08:08:36.585517] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "a0a87e9b.5234d1496d281" VjMXdKwxQzZrjDjjq1AAAABG TLSv1 AES256-SHA 941 3808 -% 836925 3555 832415 154 0 0 192.168.96.45 CH - [2015-05-30 08:08:39.378699] "GET /EMail/scripts/variables_de.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "a0a87e9b.5234d1496d281" VjMXd6wxQzZrjDjjq1MAAABK TLSv1 AES256-SHA 1109 3700 -% 964270 1991 961642 181 0 0 192.168.96.45 CH - [2015-05-30 08:08:39.401701] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "a0a87e9b.5234d1496d281" VjMXd6wxQzZrjDjjq1QAAABL TLSv1 AES256-SHA 1109 3700 -% 946352 2211 943599 78 0 0 192.168.96.45 CH - [2015-05-30 08:08:39.372841] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "a0a87e9b.5234d1496d281" VjMXd6wxQzZrjDjiLe0AAAAM TLSv1 AES256-SHA 1093 3700 -% 995155 2115 992436 101 0 0 192.168.212.3 CH - [2015-05-30 08:09:28.267828] "GET /EMail/message.aspx?&mailId=3919_26&folderId=1001_9&mailPos=17 HTTP/1.1" 200 11490 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMXqKwxQzZrjDjjq1wAAABX TLSv1 ECDHE-RSA-AES256-SHA 888 15803 -% 1353731 4034 324392 24538 0 0 192.168.212.3 CH - [2015-05-30 08:09:37.770230] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMXsawxQzZrjDjjq18AAABd TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1472593 3980 460675 3983 0 0 192.168.212.3 CH - [2015-05-30 08:10:03.566435] "GET /EMail/message.aspx?&mailId=3919_27&folderId=1001_9&mailPos=16 HTTP/1.1" 200 11490 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMXy6wxQzZrjDjjq2cAAABf TLSv1 ECDHE-RSA-AES256-SHA 888 15840 -% 1659009 3363 634511 20504 0 0 192.168.212.3 CH - [2015-05-30 08:10:06.617257] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3919_27&folderId=1001_9&attachmentId=2&token=61116981958208594E18 HTTP/1.1" 200 58929 "https://www.example.com/EMail/message.aspx?&mailId=3919_27&folderId=1001_9&mailPos=16" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMXzqwxQzZrjDjiLfAAAAAR TLSv1 ECDHE-RSA-AES256-SHA 984 64585 -% 1736112 6325 705817 252 0 0 192.168.212.3 CH - [2015-05-30 08:10:39.163908] "GET /EMail/message.aspx?&mailId=3919_28&folderId=1001_9&mailPos=15 HTTP/1.1" 200 11490 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMX76wxQzZrjDjjq20AAABs TLSv1 ECDHE-RSA-AES256-SHA 888 15840 -% 1346581 3655 319505 22272 0 0 192.168.212.3 CH - [2015-05-30 08:10:42.015208] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3919_28&folderId=1001_9&attachmentId=2&token=34103226385587162E17 HTTP/1.1" 200 54200 "https://www.example.com/EMail/message.aspx?&mailId=3919_28&folderId=1001_9&mailPos=15" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMX8qwxQzZrjDjjq28AAABu TLSv1 ECDHE-RSA-AES256-SHA 984 59754 -% 1101496 4673 73376 242 0 0 192.168.212.3 CH - [2015-05-30 08:10:46.416503] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMX9qwxQzZrjDjjq3EAAABy TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1545388 2884 535001 2897 0 0 192.168.212.3 CH - [2015-05-30 08:11:18.024336] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMYFqwxQzZrjDjiLfYAAAAZ TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1708455 2588 698819 2783 0 0 192.168.212.3 CH - [2015-05-30 08:11:46.022450] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3919_30&folderId=1001_9&attachmentId=2&token=46007201774863985E18 HTTP/1.1" 200 54671 "https://www.example.com/EMail/message.aspx?&mailId=3919_30&folderId=1001_9&mailPos=13" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMYMqwxQzZrjDjjq3oAAAB6 TLSv1 ECDHE-RSA-AES256-SHA 984 60160 -% 790739 4902 763435 241 0 0 192.168.212.3 CH - [2015-05-30 08:11:50.720678] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMYNqwxQzZrjDjjq3wAAAB- TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1763905 2328 752828 4136 0 0 192.168.212.3 CH - [2015-05-30 08:11:50.719340] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 47479 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMYNqwxQzZrjDjiLfcAAAAb TLSv1 ECDHE-RSA-AES256-SHA 840 52056 -% 2088496 2274 653872 19801 0 0 192.168.212.3 CH - [2015-05-30 08:12:18.216974] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3919_31&folderId=1001_9&attachmentId=2&token=39540976452467758E18 HTTP/1.1" 200 55164 "https://www.example.com/EMail/message.aspx?&mailId=3919_31&folderId=1001_9&mailPos=12" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMYUqwxQzZrjDjjq4AAAABD TLSv1 ECDHE-RSA-AES256-SHA 984 60656 -% 1049002 3858 23413 205 0 0 192.168.212.3 CH - [2015-05-30 08:13:40.727342] "GET /EMail/message.aspx?&mailId=3919_32&folderId=1001_9&mailPos=11 HTTP/1.1" 200 11490 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMYpKwxQzZrjDjiLgEAAAAl TLSv1 ECDHE-RSA-AES256-SHA 880 15835 -% 1302972 4076 276087 21731 0 0 192.168.212.3 CH - [2015-05-30 08:13:43.332945] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3919_32&folderId=1001_9&attachmentId=2&token=47437900271886316E18 HTTP/1.1" 200 54671 "https://www.example.com/EMail/message.aspx?&mailId=3919_32&folderId=1001_9&mailPos=11" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMYp6wxQzZrjDjiLgIAAAAm TLSv1 ECDHE-RSA-AES256-SHA 694 56324 -% 1010895 6705 0 209 0 0 192.168.212.3 CH - [2015-05-30 08:13:51.097229] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMYr6wxQzZrjDjjq4wAAABR TLSv1 ECDHE-RSA-AES256-SHA 773 9379 -% 1632275 3446 619459 4703 0 0 192.168.212.3 CH - [2015-05-30 08:13:51.180192] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 47463 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMYr6wxQzZrjDjjq40AAABT TLSv1 ECDHE-RSA-AES256-SHA 840 52003 -% 2068728 3004 616648 22368 0 0 192.168.212.3 CH - [2015-05-30 08:14:30.225618] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 47455 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMY1qwxQzZrjDjjq5QAAABd TLSv1 ECDHE-RSA-AES256-SHA 840 52024 -% 2035716 3306 603428 13770 0 0 192.168.212.3 CH - [2015-05-30 08:14:57.771393] "GET /EMail/message.aspx?&mailId=3919_37&folderId=1001_9&mailPos=9 HTTP/1.1" 200 11495 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMY8awxQzZrjDjiLgYAAAAq TLSv1 ECDHE-RSA-AES256-SHA 888 15840 -% 1279830 3848 248130 26300 0 0 192.168.212.3 CH - [2015-05-30 08:15:08.123885] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 47446 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMY-KwxQzZrjDjjq54AAABo TLSv1 ECDHE-RSA-AES256-SHA 840 52024 -% 2193162 2367 817708 23521 0 0 192.168.212.3 CH - [2015-05-30 08:15:40.072816] "GET /EMail/message.aspx?&mailId=3919_38&folderId=1001_9&mailPos=8 HTTP/1.1" 200 11481 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMZHKwxQzZrjDjjq6MAAABt TLSv1 ECDHE-RSA-AES256-SHA 888 15787 -% 1493073 3737 463090 25451 0 0 192.168.212.3 CH - [2015-05-30 08:15:42.972290] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3919_38&folderId=1001_9&attachmentId=2&token=5662042164525536E17 HTTP/1.1" 200 57428 "https://www.example.com/EMail/message.aspx?&mailId=3919_38&folderId=1001_9&mailPos=8" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMZHqwxQzZrjDjiLgkAAAAw TLSv1 ECDHE-RSA-AES256-SHA 984 63081 -% 1174181 7336 143974 207 0 0 192.168.212.3 CH - [2015-05-30 08:15:50.524208] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMZJqwxQzZrjDjjq6YAAABy TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1748636 3986 735647 4273 0 0 192.168.212.3 CH - [2015-05-30 08:15:50.526156] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 47440 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMZJqwxQzZrjDjjq6cAAABx TLSv1 ECDHE-RSA-AES256-SHA 840 52008 -% 2067996 3285 673933 15601 0 0 192.168.212.3 CH - [2015-05-30 08:16:25.672480] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMZSawxQzZrjDjjq64AAAB9 TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1558309 4164 547264 2626 0 0 192.168.212.3 CH - [2015-05-30 08:17:01.380308] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMZbawxQzZrjDjiLg8AAAA0 TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1344482 2547 332360 4980 0 0 192.168.212.3 CH - [2015-05-30 08:17:01.380663] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 47423 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMZbawxQzZrjDjjq7MAAABB TLSv1 ECDHE-RSA-AES256-SHA 840 51992 -% 2136608 2228 706094 14995 0 0 192.168.212.3 CH - [2015-05-30 08:17:42.735299] "GET /EMail/message.aspx?&mailId=3919_43&folderId=1001_9&mailPos=5 HTTP/1.1" 200 11488 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMZlqwxQzZrjDjiLhQAAAA7 TLSv1 ECDHE-RSA-AES256-SHA 888 15824 -% 1398093 3161 360446 33451 0 0 192.168.212.3 CH - [2015-05-30 08:17:45.781076] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3919_43&folderId=1001_9&attachmentId=2&token=61164479372551035E18 HTTP/1.1" 200 56024 "https://www.example.com/EMail/message.aspx?&mailId=3919_43&folderId=1001_9&mailPos=5" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMZmawxQzZrjDjjq7gAAABI TLSv1 ECDHE-RSA-AES256-SHA 984 61409 -% 994690 6720 977037 219 0 0 192.168.212.3 CH - [2015-05-30 08:17:50.030136] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMZnqwxQzZrjDjjq7kAAABH TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1836785 2613 827099 2768 0 0 192.168.212.3 CH - [2015-05-30 08:18:16.578321] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3920_16&folderId=1001_9&attachmentId=2&token=52114000146729851E18 HTTP/1.1" 200 56882 "https://www.example.com/EMail/message.aspx?&mailId=3920_16&folderId=1001_9&mailPos=4" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMZuKwxQzZrjDjjq8AAAABR TLSv1 ECDHE-RSA-AES256-SHA 984 62463 -% 1050056 4752 22541 160 0 0 192.168.212.3 CH - [2015-05-30 08:19:06.077571] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3920_17&folderId=1001_9&attachmentId=2&token=38809549733686871E18 HTTP/1.1" 200 55004 "https://www.example.com/EMail/message.aspx?&mailId=3920_17&folderId=1001_9&mailPos=3" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMZ6qwxQzZrjDjjq8sAAABe TLSv1 ECDHE-RSA-AES256-SHA 984 60496 -% 988682 7533 959281 232 0 0 192.168.212.3 CH - [2015-05-30 08:19:10.030124] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMZ7qwxQzZrjDjjq80AAABh TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1699004 2690 687288 4549 0 0 192.168.212.3 CH - [2015-05-30 08:19:21.731332] "GET /EMail/message.aspx?&mailId=3920_18&folderId=1001_9&mailPos=2 HTTP/1.1" 200 11489 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMZ@awxQzZrjDjjq9AAAABn TLSv1 ECDHE-RSA-AES256-SHA 888 15824 -% 1271520 6735 243633 20207 0 0 192.168.212.3 CH - [2015-05-30 08:19:37.034452] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 47391 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMaCawxQzZrjDjiLhcAAAA@ TLSv1 ECDHE-RSA-AES256-SHA 840 51960 -% 2115170 2612 699622 14776 0 0 192.168.212.3 CH - [2015-05-30 08:19:41.024919] "GET /EMail/message.aspx?&mailId=3920_19&folderId=1001_9&mailPos=1 HTTP/1.1" 200 11487 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMaDawxQzZrjDjjq9QAAABq TLSv1 ECDHE-RSA-AES256-SHA 888 15824 -% 1509026 4120 478181 24651 0 0 192.168.212.3 CH - [2015-05-30 08:19:49.777460] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMaFawxQzZrjDjjq9YAAABs TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1809876 4103 798709 2708 0 0 192.168.212.3 CH - [2015-05-30 08:20:01.530726] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3920_25&folderId=1001_9&attachmentId=2&token=73961157567305748E18 HTTP/1.1" 200 55199 "https://www.example.com/EMail/message.aspx?&mailId=3920_25&folderId=1001_9&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMaIawxQzZrjDjjq9gAAABu TLSv1 ECDHE-RSA-AES256-SHA 984 60688 -% 1022245 4268 994788 203 0 0 192.168.212.3 CH - [2015-05-30 08:20:18.937203] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 47375 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMaMqwxQzZrjDjjq94AAAB3 TLSv1 ECDHE-RSA-AES256-SHA 840 51944 -% 2408200 3541 110447 21711 0 0 192.168.104.36 CH - [2015-05-30 08:22:26.007988] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7362 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1a41bf1d.5234d4a16afb4" VjMasqwxQzZrjDjjq@0AAABG TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 963 11973 -% 950510 1175 946229 2536 0 0 192.168.104.36 CH - [2015-05-30 08:22:27.355266] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "1a41bf1d.5234d4a16afb4" VjMas6wxQzZrjDjjq@8AAABH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 437 2427 14% 1054915 3341 50114 198 0 0 192.168.144.21 CH - [2015-05-30 08:39:42.709043] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7369 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6d0351b4.5234d87e17d33" VjMevqwxQzZrjDjjrJEAAABy TLSv1.2 ECDHE-RSA-AES256-SHA384 726 11939 -% 1045126 1262 40946 2302 0 0 192.168.144.21 CH - [2015-05-30 08:39:43.803813] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6d0351b4.5234d87e17d33" VjMev6wxQzZrjDjjrJMAAABx TLSv1.2 ECDHE-RSA-AES256-SHA384 486 2575 14% 928114 1986 923831 508 0 0 192.168.144.21 CH - [2015-05-30 08:39:43.862548] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6d0351b4.5234d87e17d33" VjMev6wxQzZrjDjiLlcAAAAD TLSv1.2 ECDHE-RSA-AES256-SHA384 827 8053 22% 905210 3051 897640 227 0 0 192.168.144.21 CH - [2015-05-30 08:39:43.866354] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6d0351b4.5234d87e17d33" VjMev6wxQzZrjDjiLlgAAAAB TLSv1.2 ECDHE-RSA-AES256-SHA384 795 2208 22% 1017484 3273 12878 221 0 0 192.168.144.21 CH - [2015-05-30 08:39:43.860130] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6d0351b4.5234d87e17d33" VjMev6wxQzZrjDjjrJQAAAB1 TLSv1.2 ECDHE-RSA-AES256-SHA384 827 4485 23% 1027200 3228 21769 187 0 0 192.168.144.21 CH - [2015-05-30 08:39:43.864726] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6d0351b4.5234d87e17d33" VjMev6wxQzZrjDjjrJUAAAB2 TLSv1.2 ECDHE-RSA-AES256-SHA384 795 928 56% 1091623 3059 87624 199 0 0 192.168.144.21 CH - [2015-05-30 08:39:43.874053] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6d0351b4.5234d87e17d33" VjMev6wxQzZrjDjjrJYAAAB8 TLSv1.2 ECDHE-RSA-AES256-SHA384 827 1979 -% 1270897 1973 268276 151 0 0 192.168.144.21 CH - [2015-05-30 08:39:45.071626] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6d0351b4.5234d87e17d33" VjMewawxQzZrjDjjrJcAAAB3 TLSv1.2 ECDHE-RSA-AES256-SHA384 534 1898 -% 906423 1943 903794 150 0 0 192.168.144.21 CH - [2015-05-30 08:39:45.783794] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "6d0351b4.5234d87e17d33" VjMewawxQzZrjDjjrJgAAAB4 TLSv1.2 ECDHE-RSA-AES256-SHA384 534 0 -% 851567 3145 847445 229 0 0 192.168.144.21 CH - [2015-05-30 08:39:46.283198] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6d0351b4.5234d87e17d33" VjMewqwxQzZrjDjjrJkAAAB5 TLSv1.2 ECDHE-RSA-AES256-SHA384 662 469 -% 953234 5251 946718 202 0 0 192.168.144.21 CH - [2015-05-30 08:39:47.250536] "GET /EMail/main.aspx HTTP/1.1" 200 3401 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6d0351b4.5234d87e17d33" VjMew6wxQzZrjDjjrJoAAAB9 TLSv1.2 ECDHE-RSA-AES256-SHA384 534 3914 -% 879453 2335 874620 1745 0 0 192.168.144.21 CH - [2015-05-30 08:39:48.201692] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6d0351b4.5234d87e17d33" VjMexKwxQzZrjDjjrJsAAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 470 4234 -% 1076702 2059 64908 9093 0 0 192.168.144.21 CH - [2015-05-30 08:39:48.206049] "GET /EMail/overview.aspx HTTP/1.1" 200 5303 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6d0351b4.5234d87e17d33" VjMexKwxQzZrjDjiLlkAAAAC TLSv1.2 ECDHE-RSA-AES256-SHA384 470 5818 -% 1115104 2704 110056 1781 0 0 192.168.144.21 CH - [2015-05-30 08:39:48.203771] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6d0351b4.5234d87e17d33" VjMexKwxQzZrjDjjrJwAAAB6 TLSv1.2 ECDHE-RSA-AES256-SHA384 502 9666 -% 1726703 2806 714813 4469 0 0 192.168.144.21 CH - [2015-05-30 08:39:49.357964] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6d0351b4.5234d87e17d33" VjMexawxQzZrjDjiLloAAAAE TLSv1.2 ECDHE-RSA-AES256-SHA384 502 1354 -% 807000 3070 802698 383 0 0 192.168.144.21 CH - [2015-05-30 08:39:49.969668] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6d0351b4.5234d87e17d33" VjMexawxQzZrjDjjrJ0AAAB@ TLSv1.2 ECDHE-RSA-AES256-SHA384 550 1370 -% 894695 2924 890628 219 0 0 192.168.144.21 CH - [2015-05-30 08:39:50.661307] "GET /EMail/inbox.aspx HTTP/1.1" 200 8596 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6d0351b4.5234d87e17d33" VjMexqwxQzZrjDjiLlwAAAAH TLSv1.2 ECDHE-RSA-AES256-SHA384 486 9199 -% 1100876 2556 93309 4054 0 0 192.168.144.21 CH - [2015-05-30 08:39:51.070537] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7b635cfa.5234d88611349" VjMex6wxQzZrjDjjrJ4AAABA TLSv1.2 ECDHE-RSA-AES256-SHA384 646 5699 -% 978625 845 976199 298 0 0 192.168.144.21 CH - [2015-05-30 08:39:51.804399] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6d0351b4.5234d87e17d33" VjMex6wxQzZrjDjjrKAAAABB TLSv1.2 ECDHE-RSA-AES256-SHA384 502 1914 -% 788703 2757 785030 213 0 0 192.168.144.21 CH - [2015-05-30 08:39:51.803881] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6d0351b4.5234d87e17d33" VjMex6wxQzZrjDjjrJ8AAAB- TLSv1.2 ECDHE-RSA-AES256-SHA384 502 634 -% 851745 3026 847853 128 0 0 192.168.144.21 CH - [2015-05-30 08:39:51.841805] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6d0351b4.5234d87e17d33" VjMex6wxQzZrjDjiLl0AAAAG TLSv1.2 ECDHE-RSA-AES256-SHA384 502 634 -% 889122 2747 885460 217 0 0 192.168.144.21 CH - [2015-05-30 08:39:53.461639] "GET /EMail/message.aspx?&mailId=3920_24&folderId=1094_6&mailPos=0 HTTP/1.1" 200 13016 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6d0351b4.5234d87e17d33" VjMeyawxQzZrjDjiLl4AAAAI TLSv1.2 ECDHE-RSA-AES256-SHA384 518 13700 -% 1279797 4983 266595 6863 0 0 192.168.144.21 CH - [2015-05-30 08:39:56.584182] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3920_24&folderId=1094_6&attachmentId=2&token=42652987736729994E18 HTTP/1.1" 200 10752 "https://www.example.com/EMail/message.aspx?&mailId=3920_24&folderId=1094_6&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6d0351b4.5234d87e17d33" VjMezKwxQzZrjDjiLmAAAAAJ TLSv1.2 ECDHE-RSA-AES256-SHA384 630 11837 -% 995530 7990 983257 169 0 0 192.168.144.21 CH - [2015-05-30 08:40:08.809773] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/message.aspx?&mailId=3920_24&folderId=1094_6&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6d0351b4.5234d87e17d33" VjMe2KwxQzZrjDjjrKMAAABJ TLSv1.2 ECDHE-RSA-AES256-SHA384 843 2379 -% 1845800 3995 840575 198 0 0 192.168.144.21 CH - [2015-05-30 08:40:09.494385] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3920_24&folderId=1094_6&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6d0351b4.5234d87e17d33" VjMe2awxQzZrjDjjrKQAAABI TLSv1.2 ECDHE-RSA-AES256-SHA384 1035 598 -% 1646774 6837 639187 151 0 0 192.168.144.21 CH - [2015-05-30 08:40:11.155075] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7290 "https://www.example.com/EMail/message.aspx?&mailId=3920_24&folderId=1094_6&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6d0351b4.5234d87e17d33" VjMe26wxQzZrjDjjrKUAAABM TLSv1.2 ECDHE-RSA-AES256-SHA384 566 7802 -% 1092194 4018 83461 3361 0 0 192.168.144.21 CH - [2015-05-30 08:40:12.924021] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6d0351b4.5234d87e17d33" VjMe3KwxQzZrjDjjrKYAAABG TLSv1.2 ECDHE-RSA-AES256-SHA384 502 453 -% 1016576 3559 12087 211 0 0 192.168.144.21 CH - [2015-05-30 08:40:13.953385] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6d0351b4.5234d87e17d33" VjMe3awxQzZrjDjjrKcAAABH TLSv1.2 ECDHE-RSA-AES256-SHA384 470 815 75% 897522 1993 894273 426 0 0 192.168.144.21 CH - [2015-05-30 08:40:15.009330] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "7b635cfa.5234d88611349" VjMe36wxQzZrjDjiLmUAAAAN TLSv1.2 ECDHE-RSA-AES256-SHA384 619 1835 -% 2900 1873 54 194 0 0 192.168.144.21 CH - [2015-05-30 08:40:14.910994] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6d0351b4.5234d87e17d33" VjMe3qwxQzZrjDjjrKgAAABK TLSv1.2 ECDHE-RSA-AES256-SHA384 438 373 -% 965375 3992 960286 201 0 0 192.168.144.21 CH - [2015-05-30 08:40:15.898243] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6d0351b4.5234d87e17d33" VjMe36wxQzZrjDjjrKkAAABL TLSv1.2 ECDHE-RSA-AES256-SHA384 422 7866 -% 855899 3001 848108 3999 0 0 192.168.144.21 CH - [2015-05-30 08:40:16.873953] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6d0351b4.5234d87e17d33" VjMe4KwxQzZrjDjjrKwAAABO TLSv1.2 ECDHE-RSA-AES256-SHA384 891 4485 23% 705259 1750 701359 259 0 0 192.168.144.21 CH - [2015-05-30 08:40:16.802336] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6d0351b4.5234d87e17d33" VjMe4KwxQzZrjDjjrKoAAABP TLSv1.2 ECDHE-RSA-AES256-SHA384 550 2793 14% 924363 3094 919863 152 0 0 192.168.144.21 CH - [2015-05-30 08:40:16.867433] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6d0351b4.5234d87e17d33" VjMe4KwxQzZrjDjjrKsAAABN TLSv1.2 ECDHE-RSA-AES256-SHA384 859 2208 22% 873171 1876 870520 95 0 0 192.168.144.21 CH - [2015-05-30 08:40:16.876547] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6d0351b4.5234d87e17d33" VjMe4KwxQzZrjDjjrK0AAABU TLSv1.2 ECDHE-RSA-AES256-SHA384 891 454 -% 1016081 2764 12538 179 0 0 192.168.144.21 CH - [2015-05-30 08:40:16.874537] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6d0351b4.5234d87e17d33" VjMe4KwxQzZrjDjiLmYAAAAQ TLSv1.2 ECDHE-RSA-AES256-SHA384 859 928 56% 1057949 1870 55369 137 0 0 192.168.144.21 CH - [2015-05-30 08:40:16.876244] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6d0351b4.5234d87e17d33" VjMe4KwxQzZrjDjiLmcAAAAR TLSv1.2 ECDHE-RSA-AES256-SHA384 891 8053 22% 1088274 1773 82763 171 0 0 192.168.144.21 CH - [2015-05-30 08:40:18.102058] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6d0351b4.5234d87e17d33" VjMe4qwxQzZrjDjiLmgAAAAT TLSv1.2 ECDHE-RSA-AES256-SHA384 582 261 -% 798531 4339 793265 197 0 0 192.168.232.219 CH - [2015-05-30 09:07:19.084243] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Linux; U; Android 4.4.2; de-de; HTC_One_mini_2 Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" www.example.com 192.168.34.16 443 proxy-server - + "ebhost.5234dddf2ecb6" VjMlN6wxQzZrjDjjraIAAABU TLSv1 ECDHE-RSA-AES256-SHA 1108 6116 -% 917361 2364 914190 212 0 0 192.168.145.72 CH - [2015-05-30 09:07:22.405519] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7380 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f65c5304.5234deace728f" VjMlOqwxQzZrjDjjraMAAABQ TLSv1 AES256-SHA 837 11465 -% 804074 2427 797001 3905 0 0 192.168.145.72 CH - [2015-05-30 09:07:23.436577] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f65c5304.5234deace728f" VjMlO6wxQzZrjDjjraUAAABS TLSv1 AES256-SHA 630 2431 14% 1037412 3182 32324 215 0 0 192.168.145.72 CH - [2015-05-30 09:07:23.980856] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f65c5304.5234deace728f" VjMlO6wxQzZrjDjjraYAAABd TLSv1 AES256-SHA 1077 3700 -% 875876 2141 873059 154 0 0 192.168.145.72 CH - [2015-05-30 09:07:34.249510] "GET /EMail/main.aspx HTTP/1.1" 200 3412 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f65c5304.5234deace728f" VjMlRqwxQzZrjDjjrakAAABe TLSv1 AES256-SHA 925 7317 -% 2014474 3131 9537 1163 0 0 192.168.232.219 CH - [2015-05-30 09:07:35.383161] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Linux; U; Android 4.4.2; de-de; HTC_One_mini_2 Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" www.example.com 192.168.34.16 443 proxy-server - + "ebhost.5234dddf2ecb6" VjMlR6wxQzZrjDjjraoAAABc TLSv1 ECDHE-RSA-AES256-SHA 1550 4399 -% 2592386 6933 584700 160 0 0 192.168.145.72 CH - [2015-05-30 09:07:36.528062] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f65c5304.5234deace728f" VjMlSKwxQzZrjDjjrasAAABh TLSv1 AES256-SHA 909 9221 -% 1523310 1983 517721 2821 0 0 192.168.232.219 CH - [2015-05-30 09:07:38.082184] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7362 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Linux; U; Android 4.4.2; de-de; HTC_One_mini_2 Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" www.example.com 192.168.34.16 443 proxy-server - + "ebhost.5234dddf2ecb6" VjMlSqwxQzZrjDjjrawAAABg TLSv1 ECDHE-RSA-AES256-SHA 875 7802 -% 1164296 4219 156875 2496 0 0 192.168.145.72 CH - [2015-05-30 09:07:38.240553] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f65c5304.5234deace728f" VjMlSqwxQzZrjDjjra0AAABm TLSv1 AES256-SHA 1021 3696 -% 1059851 4734 54327 121 0 0 192.168.232.219 CH - [2015-05-30 09:07:39.343490] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Linux; U; Android 4.4.2; de-de; HTC_One_mini_2 Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" www.example.com 192.168.34.16 443 proxy-server - + "ebhost.5234dddf2ecb6" VjMlS6wxQzZrjDjjra4AAABk TLSv1 ECDHE-RSA-AES256-SHA 747 4259 23% 676935 2036 672020 629 0 0 192.168.145.72 CH - [2015-05-30 09:07:42.751818] "GET /EMail/inbox.aspx HTTP/1.1" 200 34227 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f65c5304.5234deace728f" VjMlTqwxQzZrjDjjra8AAABo TLSv1 AES256-SHA 909 38360 -% 1628105 2204 405940 10121 0 0 192.168.145.72 CH - [2015-05-30 09:07:45.376763] "GET /EMail/images/attach.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f65c5304.5234deace728f" VjMlUawxQzZrjDjjrbAAAABq TLSv1 AES256-SHA 1021 3696 -% 589056 3116 584981 220 0 0 192.168.145.72 CH - [2015-05-30 09:07:48.121895] "GET /EMail/message.aspx?&mailId=3919_44&folderId=2828_57&mailPos=0 HTTP/1.1" 200 11365 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f65c5304.5234deace728f" VjMlVKwxQzZrjDjjrbEAAABl TLSv1 AES256-SHA 957 15359 -% 1269662 3006 244980 20593 0 0 192.168.145.72 CH - [2015-05-30 09:07:51.385159] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3919_44&folderId=2828_57&attachmentId=2&token=26518468301854438E18 HTTP/1.1" 200 48844 "https://www.example.com/EMail/message.aspx?&mailId=3919_44&folderId=2828_57&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f65c5304.5234deace728f" VjMlV6wxQzZrjDjiLsQAAAAx TLSv1 AES256-SHA 1053 53872 -% 1103996 4210 80414 163 0 0 192.168.232.219 CH - [2015-05-30 09:08:03.600900] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Linux; U; Android 4.4.2; de-de; HTC_One_mini_2 Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" www.example.com 192.168.34.16 443 proxy-server - + "ebhost.5234dddf2ecb6" VjMlY6wxQzZrjDjjrbQAAABu TLSv1 ECDHE-RSA-AES256-SHA 1092 6116 -% 968031 3094 964105 158 0 0 192.168.232.219 CH - [2015-05-30 09:08:04.002074] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Linux; U; Android 4.4.2; de-de; HTC_One_mini_2 Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" www.example.com 192.168.34.16 443 proxy-server - + "ebhost.5234dddf2ecb6" VjMlZKwxQzZrjDjjrbYAAAB0 TLSv1 ECDHE-RSA-AES256-SHA 1406 4447 -% 1276118 3324 272097 175 0 0 192.168.145.72 CH - [2015-05-30 09:08:05.443265] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f65c5304.5234deace728f" VjMlZawxQzZrjDjjrbgAAABy TLSv1 AES256-SHA 925 3904 -% 610240 2511 606954 219 0 0 192.168.232.219 CH - [2015-05-30 09:08:05.391069] "GET /EMail/main.aspx HTTP/1.1" 200 3394 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Linux; U; Android 4.4.2; de-de; HTC_One_mini_2 Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" www.example.com 192.168.34.16 443 proxy-server - + "ebhost.5234dddf2ecb6" VjMlZawxQzZrjDjjrbcAAABx TLSv1 ECDHE-RSA-AES256-SHA 827 3818 -% 899445 3104 893364 2212 0 0 192.168.232.219 CH - [2015-05-30 09:08:06.438148] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Linux; U; Android 4.4.2; de-de; HTC_One_mini_2 Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" www.example.com 192.168.34.16 443 proxy-server - + "ebc2ea82.5234dddf2ecb6" VjMlZqwxQzZrjDjjrbkAAAB2 TLSv1 ECDHE-RSA-AES256-SHA 763 4138 -% 825318 3108 815405 6253 0 0 192.168.145.72 CH - [2015-05-30 09:08:07.405438] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "f65c5304.5234deace728f" VjMlZ6wxQzZrjDjjrboAAAB8 TLSv1 AES256-SHA 829 5045 -% 2850 1840 52 141 0 0 192.168.145.72 CH - [2015-05-30 09:08:08.189062] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f65c5304.5234deace728f" VjMlaKwxQzZrjDjjrbwAAAB5 TLSv1 AES256-SHA 861 11269 -% 814519 2015 809576 2400 0 0 192.168.145.72 CH - [2015-05-30 09:08:09.403902] "GET /EMail/scripts/variables_de.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f65c5304.5234deace728f" VjMlaawxQzZrjDjjrb4AAAB7 TLSv1 AES256-SHA 1005 3696 -% 872896 2170 869942 197 0 0 192.168.145.72 CH - [2015-05-30 09:08:09.345636] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f65c5304.5234deace728f" VjMlaawxQzZrjDjiLsUAAAAv TLSv1 AES256-SHA 989 4090 56% 1068832 2298 65543 190 0 0 192.168.145.72 CH - [2015-05-30 09:08:09.403800] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f65c5304.5234deace728f" VjMlaawxQzZrjDjjrb0AAAB6 TLSv1 AES256-SHA 1005 3696 -% 1250987 2194 247875 254 0 0 192.168.232.219 CH - [2015-05-30 09:09:22.661995] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8396 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Linux; U; Android 4.4.2; de-de; HTC_One_mini_2 Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" www.example.com 192.168.34.16 443 proxy-server - + "ebhost.5234dddf2ecb6" VjMlsqwxQzZrjDjiLskAAAA5 TLSv1 ECDHE-RSA-AES256-SHA 1140 12905 -% 1341398 2300 335836 2609 0 0 192.168.232.219 CH - [2015-05-30 09:09:22.677093] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Linux; U; Android 4.4.2; de-de; HTC_One_mini_2 Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" www.example.com 192.168.34.16 443 proxy-server - + "ebhost.5234dddf2ecb6" VjMlsqwxQzZrjDjjrcoAAABL TLSv1 ECDHE-RSA-AES256-SHA 1156 13244 -% 1657538 2260 648023 2987 0 0 192.168.232.219 CH - [2015-05-30 09:09:24.178227] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Linux; U; Android 4.4.2; de-de; HTC_One_mini_2 Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" www.example.com 192.168.34.16 443 proxy-server - + "ebhost.5234dddf2ecb6" VjMltKwxQzZrjDjiLsoAAAA4 TLSv1 ECDHE-RSA-AES256-SHA 715 554 -% 867702 3107 863752 150 0 0 192.168.232.219 CH - [2015-05-30 09:09:47.780040] "GET /EMail/message.aspx?&mailId=3919_60&folderId=3507_34&mailPos=0 HTTP/1.1" 200 15584 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Linux; U; Android 4.4.2; de-de; HTC_One_mini_2 Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" www.example.com 192.168.34.16 443 proxy-server - + "ebhost.5234dddf2ecb6" VjMly6wxQzZrjDjjrc4AAABR TLSv1 ECDHE-RSA-AES256-SHA 1156 20110 -% 1336689 5033 292959 37308 0 0 192.168.232.219 CH - [2015-05-30 09:09:50.912474] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/message.aspx?&mailId=3919_60&folderId=3507_34&mailPos=0" "Mozilla/5.0 (Linux; U; Android 4.4.2; de-de; HTC_One_mini_2 Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" www.example.com 192.168.34.16 443 proxy-server - + "ebhost.5234dddf2ecb6" VjMlzqwxQzZrjDjjrdAAAABW TLSv1 ECDHE-RSA-AES256-SHA 747 2090 -% 863983 3595 859440 229 0 0 192.168.232.219 CH - [2015-05-30 09:11:53.682052] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Linux; U; Android 4.4.2; de-de; HTC_One_mini_2 Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" www.example.com 192.168.34.16 443 proxy-server - + "ebc2ea82.5234dddf2ecb6" VjMmSawxQzZrjDjjreQAAABq TLSv1 ECDHE-RSA-AES256-SHA 1124 4447 -% 805858 3715 801237 258 0 0 192.168.232.219 CH - [2015-05-30 09:11:54.755432] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Linux; U; Android 4.4.2; de-de; HTC_One_mini_2 Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" www.example.com 192.168.34.16 443 proxy-server - + "ebc2ea82.5234dddf2ecb6" VjMmSqwxQzZrjDjjreUAAABr TLSv1 ECDHE-RSA-AES256-SHA 763 687 75% 991340 3102 987088 319 0 0 192.168.232.219 CH - [2015-05-30 09:11:55.822165] "GET /favicon.ico HTTP/1.1" 200 1150 "https://www.example.com/EMail/index.html" "Mozilla/5.0 (Linux; U; Android 4.4.2; de-de; HTC_One_mini_2 Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" www.example.com 192.168.34.16 443 - - + "ebhost.5234dddf2ecb6" VjMmS6wxQzZrjDjjreYAAABl TLSv1 ECDHE-RSA-AES256-SHA 651 1562 -% 3847 2633 76 200 0 0 192.168.232.219 CH - [2015-05-30 09:11:55.882162] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "https://www.example.com/EMail/index.html" "Mozilla/5.0 (Linux; U; Android 4.4.2; de-de; HTC_One_mini_2 Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" www.example.com 192.168.34.16 443 proxy-server - + "ebhost.5234dddf2ecb6" VjMmS6wxQzZrjDjjrecAAABs TLSv1 ECDHE-RSA-AES256-SHA 779 325 -% 913759 3746 908878 312 0 0 192.168.232.219 CH - [2015-05-30 09:11:57.018418] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "https://www.example.com/EMail/index.html" "Mozilla/5.0 (Linux; U; Android 4.4.2; de-de; HTC_One_mini_2 Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" www.example.com 192.168.34.16 443 proxy-server - + "ebhost.5234dddf2ecb6" VjMmTawxQzZrjDjjrekAAABt TLSv1 ECDHE-RSA-AES256-SHA 763 7770 -% 910863 3152 902826 4128 0 0 192.168.186.76 CH - [2015-05-30 09:20:57.366520] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMoaawxQzZrjDjjrjYAAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 1399 4545 -% 992997 5928 984707 172 3 0 192.168.186.76 CH - [2015-05-30 09:20:58.374587] "GET /EMail/main.aspx HTTP/1.1" 200 3391 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMoaqwxQzZrjDjjrjgAAAB6 TLSv1.2 ECDHE-RSA-AES256-SHA384 678 3898 -% 927836 7312 917313 1425 3 0 192.168.186.76 CH - [2015-05-30 09:20:59.381650] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMoa6wxQzZrjDjjrjkAAABB TLSv1.2 ECDHE-RSA-AES256-SHA384 662 4234 -% 850221 6919 834684 6893 3 0 192.168.186.76 CH - [2015-05-30 09:21:00.252117] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMobKwxQzZrjDjjrjoAAAB- TLSv1.2 ECDHE-RSA-AES256-SHA384 694 9666 -% 1937264 4499 924760 2777 3 0 192.168.186.76 CH - [2015-05-30 09:21:02.211449] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMobqwxQzZrjDjjrjsAAABF TLSv1.2 ECDHE-RSA-AES256-SHA384 726 1370 -% 855410 4986 848652 212 3 0 192.168.186.76 CH - [2015-05-30 09:21:03.199698] "GET /EMail/inbox.aspx HTTP/1.1" 200 8392 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMob6wxQzZrjDjjrjwAAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 662 8991 -% 1009539 6597 0 3052 3 0 192.168.186.76 CH - [2015-05-30 09:21:04.235003] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMocKwxQzZrjDjiLvcAAAAs TLSv1.2 ECDHE-RSA-AES256-SHA384 1271 5990 -% 1030143 6108 21928 146 3 0 192.168.186.76 CH - [2015-05-30 09:21:04.234933] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMocKwxQzZrjDjjrj0AAABD TLSv1.2 ECDHE-RSA-AES256-SHA384 678 634 -% 1031560 4530 25121 146 3 0 192.168.186.76 CH - [2015-05-30 09:21:06.383525] "GET /EMail/message.aspx?&mailId=3919_53&folderId=947_65&mailPos=0 HTTP/1.1" 200 16740 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMocqwxQzZrjDjiLvgAAAAw TLSv1.2 ECDHE-RSA-AES256-SHA384 710 17497 -% 2410105 5586 368633 33007 3 0 192.168.186.76 CH - [2015-05-30 09:21:10.088894] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/message.aspx?&mailId=3919_53&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjModqwxQzZrjDjiLvoAAAAy TLSv1.2 ECDHE-RSA-AES256-SHA384 726 2186 -% 875175 4260 869091 145 3 0 192.168.186.76 CH - [2015-05-30 09:21:16.392747] "GET /EMail/newMessage.aspx?action=reply&mailId=3919_53&folderId=947_65&showPics=false HTTP/1.1" 200 25151 "https://www.example.com/EMail/message.aspx?&mailId=3919_53&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMofKwxQzZrjDjjrj8AAABJ TLSv1.2 ECDHE-RSA-AES256-SHA384 1292 26212 -% 1192578 8332 124097 47083 6 3 192.168.186.76 CH - [2015-05-30 09:21:18.663280] "GET /EMail/scripts/tinymce/plugins/paste/plugin.min.js HTTP/1.1" 200 6239 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3919_53&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMofqwxQzZrjDjjrkEAAABG TLSv1.2 ECDHE-RSA-AES256-SHA384 1351 11040 40% 714091 5518 705954 176 3 0 192.168.186.76 CH - [2015-05-30 09:21:18.605003] "GET /EMail/scripts/tinymce/langs/de.js HTTP/1.1" 200 2969 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3919_53&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMofqwxQzZrjDjjrkAAAABI TLSv1.2 ECDHE-RSA-AES256-SHA384 742 3684 38% 1008834 6705 0 195 3 0 192.168.186.76 CH - [2015-05-30 09:21:18.686949] "GET /EMail/scripts/tinymce/plugins/print/plugin.min.js HTTP/1.1" 200 182 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3919_53&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMofqwxQzZrjDjjrkIAAABM TLSv1.2 ECDHE-RSA-AES256-SHA384 1351 4891 55% 1222993 4055 216766 227 3 0 192.168.186.76 CH - [2015-05-30 09:21:19.168588] "GET /EMail/scripts/tinymce/plugins/searchreplace/plugin.min.js HTTP/1.1" 200 2586 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3919_53&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMof6wxQzZrjDjjrkMAAABH TLSv1.2 ECDHE-RSA-AES256-SHA384 1276 3461 40% 1133121 4827 125678 211 3 0 192.168.186.76 CH - [2015-05-30 09:21:19.393220] "GET /EMail/scripts/tinymce/plugins/charmap/plugin.min.js HTTP/1.1" 200 2698 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3919_53&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMof6wxQzZrjDjjrkQAAABK TLSv1.2 ECDHE-RSA-AES256-SHA384 758 3412 38% 1108937 6366 100562 157 3 0 192.168.186.76 CH - [2015-05-30 09:21:19.921210] "GET /EMail/scripts/tinymce/plugins/anchor/plugin.min.js HTTP/1.1" 200 339 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3919_53&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMof6wxQzZrjDjjrkYAAABO TLSv1.2 ECDHE-RSA-AES256-SHA384 758 975 63% 652019 6470 643847 148 3 0 192.168.186.76 CH - [2015-05-30 09:21:19.629480] "GET /EMail/scripts/tinymce/plugins/hr/plugin.min.js HTTP/1.1" 200 191 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3919_53&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMof6wxQzZrjDjjrkUAAABL TLSv1.2 ECDHE-RSA-AES256-SHA384 758 831 53% 1130178 6594 121844 153 3 0 192.168.186.76 CH - [2015-05-30 09:21:20.517002] "GET /EMail/scripts/tinymce/plugins/table/plugin.min.js HTTP/1.1" 200 9166 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3919_53&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMogKwxQzZrjDjjrkgAAABN TLSv1.2 ECDHE-RSA-AES256-SHA384 758 9961 32% 617438 9204 603189 278 3 0 192.168.186.76 CH - [2015-05-30 09:21:20.318072] "GET /EMail/scripts/tinymce/plugins/visualchars/plugin.min.js HTTP/1.1" 200 608 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3919_53&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMogKwxQzZrjDjjrkcAAABP TLSv1.2 ECDHE-RSA-AES256-SHA384 758 1247 54% 924754 5910 915684 278 3 0 192.168.186.76 CH - [2015-05-30 09:21:21.267242] "GET /EMail/scripts/tinymce/skins/lightgray/skin.min.css HTTP/1.1" 200 6020 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3919_53&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMogawxQzZrjDjjrkkAAABU TLSv1.2 ECDHE-RSA-AES256-SHA384 742 6740 17% 720140 4511 710758 249 3 0 192.168.186.76 CH - [2015-05-30 09:21:21.314881] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5879 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3919_53&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMogawxQzZrjDjjrkoAAABT TLSv1.2 ECDHE-RSA-AES256-SHA384 710 9666 -% 928412 6484 0 0 3 0 192.168.186.76 CH - [2015-05-30 09:21:22.034167] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce-small.eot? HTTP/1.1" 200 10316 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3919_53&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMogqwxQzZrjDjjrksAAABR TLSv1.2 ECDHE-RSA-AES256-SHA384 774 11012 -% 638387 4962 631366 204 3 0 192.168.177.88 CH - [2015-05-30 09:29:15.886353] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7901 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "68786be.5234e39189311" VjMqW6wxQzZrjDjjrpIAAABZ TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 960 12500 -% 958804 3167 951144 3774 0 0 192.168.177.88 CH - [2015-05-30 09:29:16.923667] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "68786be.5234e39189311" VjMqXKwxQzZrjDjjrpMAAABe TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 672 2545 14% 968453 5735 961027 176 0 0 192.168.186.76 CH - [2015-05-30 09:31:44.423024] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3919_53&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMq8KwxQzZrjDjjrqsAAABx TLSv1.2 ECDHE-RSA-AES256-SHA384 9980 4545 -% 1667838 554846 92937 165 86 0 192.168.186.76 CH - [2015-05-30 09:31:46.103648] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3919_53&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMq8qwxQzZrjDjjrqwAAAB2 TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 890971 5652 877165 6651 3 0 192.168.186.76 CH - [2015-05-30 09:34:23.204780] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9493 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMrj6wxQzZrjDjiLyoAAAAj TLSv1.2 ECDHE-RSA-AES256-SHA384 1180 10256 -% 1186274 5763 175599 2914 3 0 192.168.186.76 CH - [2015-05-30 09:34:24.420503] "GET /EMail/images/msgOpenedReplied.png HTTP/1.1" 200 717 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMrkKwxQzZrjDjiLywAAAAl TLSv1.2 ECDHE-RSA-AES256-SHA384 694 1226 -% 833628 6423 825583 182 3 0 192.168.186.76 CH - [2015-05-30 09:34:27.213700] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMrk6wxQzZrjDjiLy0AAAAm TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1073248 13751 57005 220 3 0 192.168.186.76 CH - [2015-05-30 09:34:28.299461] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8392 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMrlKwxQzZrjDjiLy4AAAAo TLSv1.2 ECDHE-RSA-AES256-SHA384 726 8991 -% 1219148 11932 200542 4288 3 0 192.168.186.76 CH - [2015-05-30 09:34:30.044017] "GET /EMail/message.aspx?&mailId=3920_35&folderId=947_65&mailPos=0 HTTP/1.1" 200 17066 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMrlqwxQzZrjDjiLzAAAAAp TLSv1.2 ECDHE-RSA-AES256-SHA384 726 17817 -% 1430391 8231 384344 34939 3 0 192.168.186.76 CH - [2015-05-30 09:34:39.574668] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3920_35&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMrn6wxQzZrjDjjrsIAAABL TLSv1.2 ECDHE-RSA-AES256-SHA384 1319 7526 -% 907396 4118 896770 5037 3 0 192.168.177.88 CH - [2015-05-30 09:34:46.736434] "GET /EMail/downloadPDF.aspx HTTP/1.1" 200 4276 "https://www.example.com/EMail/message.aspx?&mailId=3919_64&folderId=3508_18&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "68786be.5234e39189311" VjMrpqwxQzZrjDjiLzMAAAAt TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1402 8719 -% 869686 3554 864209 1417 0 0 192.168.177.88 CH - [2015-05-30 09:37:40.237976] "GET /EMail/downloadPDF.aspx HTTP/1.1" 200 4276 "https://www.example.com/EMail/message.aspx?&mailId=3919_64&folderId=3508_18&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "68786be.5234e39189311" VjMsVKwxQzZrjDjjrtcAAABm TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1402 8719 -% 945815 3295 939732 2195 0 0 192.168.177.88 CH - [2015-05-30 09:38:51.221317] "GET /EMail/overview.aspx HTTP/1.1" 200 5296 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "68786be.5234e39189311" VjMsm6wxQzZrjDjjruIAAABt TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1427 9739 -% 1239037 5498 231015 1815 0 0 192.168.177.88 CH - [2015-05-30 09:38:51.257722] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 9420 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "68786be.5234e39189311" VjMsm6wxQzZrjDjjruMAAABv TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1453 14124 -% 1614136 4835 598996 5098 0 0 192.168.177.88 CH - [2015-05-30 09:38:56.425886] "GET /EMail/MailHandler?service=downloadCert&type=root&token=142596946593695568E17 HTTP/1.1" 200 1165 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "68786be.5234e39189311" VjMsoKwxQzZrjDjjruUAAABz TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 776 1638 -% 1012844 7231 4148 188 0 0 192.168.213.22 CH - [2015-05-30 09:45:35.162056] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMuL6wxQzZrjDjiL2UAAAAh TLSv1 ECDHE-RSA-AES256-SHA 848 4252 -% 1571843 3617 567353 198 0 0 192.168.213.22 CH - [2015-05-30 09:45:36.750863] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMuMKwxQzZrjDjiL2YAAAAi TLSv1 ECDHE-RSA-AES256-SHA 550 687 75% 1421380 3301 416545 553 0 0 192.168.213.22 CH - [2015-05-30 09:45:38.321886] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMuMqwxQzZrjDjiL2gAAAAj TLSv1 ECDHE-RSA-AES256-SHA 518 325 -% 1223482 2313 220204 266 0 0 192.168.213.22 CH - [2015-05-30 09:45:39.560017] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMuM6wxQzZrjDjiL2kAAAAl TLSv1 ECDHE-RSA-AES256-SHA 486 7786 -% 1050557 4080 43012 2536 0 0 192.168.213.22 CH - [2015-05-30 09:45:40.783456] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMuNKwxQzZrjDjiL2oAAAAm TLSv1 ECDHE-RSA-AES256-SHA 614 213 -% 830531 3493 826248 184 0 0 192.168.213.22 CH - [2015-05-30 09:45:40.798384] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMuNKwxQzZrjDjjrxwAAABw TLSv1 ECDHE-RSA-AES256-SHA 821 358 -% 936121 2325 933046 206 0 0 192.168.213.22 CH - [2015-05-30 09:45:40.800743] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMuNKwxQzZrjDjjrx0AAABl TLSv1 ECDHE-RSA-AES256-SHA 821 358 -% 1060955 2990 57083 201 0 0 192.168.213.22 CH - [2015-05-30 09:45:40.830331] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMuNKwxQzZrjDjjrx8AAABu TLSv1 ECDHE-RSA-AES256-SHA 853 4245 23% 1095046 2191 90309 215 0 0 192.168.213.22 CH - [2015-05-30 09:45:40.816412] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMuNKwxQzZrjDjjrx4AAABs TLSv1 ECDHE-RSA-AES256-SHA 837 358 -% 1215777 1910 213159 183 0 0 192.168.213.22 CH - [2015-05-30 09:45:40.834336] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMuNKwxQzZrjDjjryAAAABt TLSv1 ECDHE-RSA-AES256-SHA 853 358 -% 1251302 2384 248282 143 0 0 192.168.213.22 CH - [2015-05-30 09:45:42.165044] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ef858fab.5234d06abf6f4" VjMuNqwxQzZrjDjjryEAAABv TLSv1 ECDHE-RSA-AES256-SHA 662 213 -% 687043 5210 680696 252 0 0 192.168.146.84 CH - [2015-05-30 09:47:45.251300] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7947 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a611eca6.5234e7b3823e4" VjMusawxQzZrjDjiL3EAAAAs TLSv1.2 ECDHE-RSA-AES256-SHA384 767 12499 -% 890423 3142 883063 3158 0 0 192.168.146.84 CH - [2015-05-30 09:47:46.191059] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a611eca6.5234e7b3823e4" VjMusqwxQzZrjDjiL3IAAAAu TLSv1.2 ECDHE-RSA-AES256-SHA384 518 2575 14% 912125 3009 907589 160 0 0 192.168.146.84 CH - [2015-05-30 09:47:46.261702] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a611eca6.5234e7b3823e4" VjMusqwxQzZrjDjjrzUAAABC TLSv1.2 ECDHE-RSA-AES256-SHA384 836 928 56% 1062971 1938 60068 199 0 0 192.168.146.84 CH - [2015-05-30 09:47:46.264707] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a611eca6.5234e7b3823e4" VjMusqwxQzZrjDjiL3MAAAAw TLSv1.2 ECDHE-RSA-AES256-SHA384 868 8053 22% 1062061 2571 55480 190 0 0 192.168.146.84 CH - [2015-05-30 09:47:46.261983] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a611eca6.5234e7b3823e4" VjMusqwxQzZrjDjjrzYAAABJ TLSv1.2 ECDHE-RSA-AES256-SHA384 836 2208 22% 1066210 1753 63387 143 0 0 192.168.146.84 CH - [2015-05-30 09:47:46.267541] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a611eca6.5234e7b3823e4" VjMusqwxQzZrjDjiL3QAAAAy TLSv1.2 ECDHE-RSA-AES256-SHA384 884 1979 -% 1176981 1866 174072 191 0 0 192.168.146.84 CH - [2015-05-30 09:47:47.407456] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a611eca6.5234e7b3823e4" VjMus6wxQzZrjDjjrzcAAABG TLSv1.2 ECDHE-RSA-AES256-SHA384 566 1898 -% 937248 3306 933074 168 0 0 192.168.146.84 CH - [2015-05-30 09:47:47.374373] "GET /EMail/scripts/csshover.htc HTTP/1.1" 200 4255 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a611eca6.5234e7b3823e4" VjMus6wxQzZrjDjiL3UAAAAx TLSv1.2 ECDHE-RSA-AES256-SHA384 390 4762 -% 997503 2153 994177 288 0 0 192.168.146.84 CH - [2015-05-30 09:51:03.647224] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - X "a611eca6.5234e7b3823e4" VjMvd6wxQzZrjDjjr1gAAABw TLSv1.2 ECDHE-RSA-AES256-SHA384 884 193 -% 963526 3132 959437 205 0 0 192.168.146.84 CH - [2015-05-30 09:51:04.074899] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a611eca6.5234e7b3823e4" VjMveKwxQzZrjDjjr1kAAABl TLSv1.2 ECDHE-RSA-AES256-SHA384 1140 582 -% 611048 9709 600302 188 0 0 192.168.146.84 CH - [2015-05-30 09:51:04.703518] "GET /EMail/error.aspx HTTP/1.1" 200 3752 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "a611eca6.5234e7b3823e4" VjMveKwxQzZrjDjjr1oAAABu TLSv1.2 ECDHE-RSA-AES256-SHA384 566 4266 -% 871357 2149 862590 6108 0 0 192.168.186.76 CH - [2015-05-30 09:52:00.029400] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3920_35&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMvsKwxQzZrjDjiL4UAAAAD TLSv1.2 ECDHE-RSA-AES256-SHA384 8972 4545 -% 1801042 444496 335489 173 91 0 192.168.186.76 CH - [2015-05-30 09:52:01.842702] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3920_35&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMvsawxQzZrjDjiL4YAAAAB TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 952433 5766 932822 7669 3 0 192.168.186.76 CH - [2015-05-30 09:52:19.588595] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8391 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMvw6wxQzZrjDjjr2MAAAB1 TLSv1.2 ECDHE-RSA-AES256-SHA384 1229 13067 -% 984994 7131 973204 2627 3 0 192.168.186.76 CH - [2015-05-30 09:52:19.660160] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMvw6wxQzZrjDjjr2QAAAB2 TLSv1.2 ECDHE-RSA-AES256-SHA384 1212 9827 -% 1715929 4903 698963 4540 3 0 192.168.186.76 CH - [2015-05-30 09:52:22.285081] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMvxqwxQzZrjDjjr2UAAAB3 TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1130000 13723 113513 227 3 0 192.168.186.76 CH - [2015-05-30 09:52:23.435845] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7290 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjMvx6wxQzZrjDjjr2YAAAB4 TLSv1.2 ECDHE-RSA-AES256-SHA384 726 7802 -% 993680 10738 977595 3721 3 0 192.168.156.88 CH - [2015-05-30 10:00:05.534776] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7805 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "25host.5234ea757f838" VjMxlawxQzZrjDjjr6cAAABA TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1245 12405 -% 945975 6671 935534 2325 6 0 192.168.156.88 CH - [2015-05-30 10:00:06.574943] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "25host.5234ea757f838" VjMxlqwxQzZrjDjjr6gAAAB6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 958 2545 14% 1073270 7404 62959 181 6 0 192.168.156.88 CH - [2015-05-30 10:00:06.581805] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "25host.5234ea757f838" VjMxlqwxQzZrjDjiL6kAAAAm TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1294 5897 22% 1081674 6525 73490 115 6 0 192.168.156.88 CH - [2015-05-30 10:24:10.436337] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7806 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "25host.5234ea757f838" VjM3OqwxQzZrjDjjsGUAAABF TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1326 12243 -% 1426168 7167 412697 4304 6 0 192.168.186.76 CH - [2015-05-30 10:30:11.743432] "GET /EMail/newMessage.aspx?action=reply&mailId=3921_2&folderId=947_65&showPics=false HTTP/1.1" 200 23986 "https://www.example.com/EMail/message.aspx?&mailId=3921_2&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjM4o6wxQzZrjDjjsKwAAABI TLSv1.2 ECDHE-RSA-AES256-SHA384 1367 28890 -% 1343481 8770 271943 58537 6 3 192.168.186.76 CH - [2015-05-30 10:30:13.251147] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5871 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3921_2&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjM4pawxQzZrjDjiMDcAAAA4 TLSv1.2 ECDHE-RSA-AES256-SHA384 1303 13726 -% 930264 6118 0 0 3 0 192.168.186.76 CH - [2015-05-30 10:30:13.155105] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3921_2&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjM4pawxQzZrjDjjsK0AAABT TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 1050411 3980 35128 9513 3 0 192.168.186.76 CH - [2015-05-30 10:32:55.802902] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8388 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjM5R6wxQzZrjDjjsMUAAABq TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 13067 -% 1463941 4557 452626 4448 3 0 192.168.186.76 CH - [2015-05-30 10:32:55.814006] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjM5R6wxQzZrjDjjsMYAAABp TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1619060 5330 602700 4718 3 0 192.168.186.76 CH - [2015-05-30 10:33:01.714169] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjM5TawxQzZrjDjjsMkAAABl TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1232448 15675 210000 185 3 0 192.168.186.76 CH - [2015-05-30 10:33:02.955295] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7290 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjM5TqwxQzZrjDjjsMoAAABu TLSv1.2 ECDHE-RSA-AES256-SHA384 726 7802 -% 1022326 5578 12754 2353 3 0 192.168.186.76 CH - [2015-05-30 10:59:53.846905] "GET /EMail/newMessage.aspx?action=reply&mailId=3923_2&folderId=947_65&showPics=false HTTP/1.1" 200 23364 "https://www.example.com/EMail/message.aspx?&mailId=3923_2&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjM-mawxQzZrjDjjscMAAABt TLSv1.2 ECDHE-RSA-AES256-SHA384 1367 28266 -% 1134383 5583 85385 40757 6 3 192.168.186.76 CH - [2015-05-30 10:59:55.069050] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3923_2&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjM-m6wxQzZrjDjjscQAAABv TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 644673 4712 630379 8076 3 0 192.168.186.76 CH - [2015-05-30 11:00:28.476417] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3923_2&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjM-vKwxQzZrjDjiMJQAAAAW TLSv1.2 ECDHE-RSA-AES256-SHA384 8375 630 -% 1528716 365798 141645 295 91 0 192.168.186.76 CH - [2015-05-30 11:00:30.015956] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3923_2&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjM-vqwxQzZrjDjiMJUAAAAY TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 1708556 5656 692713 8287 3 0 192.168.186.76 CH - [2015-05-30 11:00:33.334653] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 10697 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjM-wawxQzZrjDjiMJYAAAAb TLSv1.2 ECDHE-RSA-AES256-SHA384 662 11295 -% 3192263 4302 180204 5498 3 0 192.168.186.76 CH - [2015-05-30 11:00:33.335974] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjM-wawxQzZrjDjiMJcAAAAa TLSv1.2 ECDHE-RSA-AES256-SHA384 1212 9827 -% 3966593 4251 953736 2796 3 0 192.168.186.76 CH - [2015-05-30 11:00:40.136675] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjM-yKwxQzZrjDjiMJgAAAAc TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1361173 8361 350304 243 3 0 192.168.186.76 CH - [2015-05-30 11:00:41.511267] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 9599 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjM-yawxQzZrjDjiMJkAAAAd TLSv1.2 ECDHE-RSA-AES256-SHA384 726 10191 -% 1202746 7024 190520 3028 3 0 192.168.186.76 CH - [2015-05-30 11:01:43.140346] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3921_8&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNAB6wxQzZrjDjjsdYAAABJ TLSv1.2 ECDHE-RSA-AES256-SHA384 1319 7526 -% 837193 6504 818197 10066 3 0 192.168.186.76 CH - [2015-05-30 11:01:43.288655] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5871 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3921_8&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNAB6wxQzZrjDjjsdcAAABG TLSv1.2 ECDHE-RSA-AES256-SHA384 1202 9811 -% 887258 6881 0 0 3 0 192.168.186.76 CH - [2015-05-30 11:01:54.775988] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3921_8&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNAEqwxQzZrjDjjsdoAAABD TLSv1.2 ECDHE-RSA-AES256-SHA384 7959 630 -% 1440546 365724 54945 175 86 0 192.168.186.76 CH - [2015-05-30 11:01:56.228996] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3921_8&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNAFKwxQzZrjDjjsdsAAABO TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 981666 9541 959911 10456 3 0 192.168.186.76 CH - [2015-05-30 11:01:58.661618] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9598 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNAFqwxQzZrjDjjsd0AAABP TLSv1.2 ECDHE-RSA-AES256-SHA384 662 10191 -% 1361966 4455 352715 2951 3 0 192.168.186.76 CH - [2015-05-30 11:03:51.305936] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3921_9&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNAh6wxQzZrjDjjse4AAABe TLSv1.2 ECDHE-RSA-AES256-SHA384 8434 4545 -% 1719937 435814 262845 176 81 0 192.168.186.76 CH - [2015-05-30 11:03:53.036541] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3921_9&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNAiawxQzZrjDjjse8AAABj TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 983044 8934 958769 12888 3 0 192.168.146.78 CH - [2015-05-30 11:08:12.897586] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7350 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8a7e0c2d.5234f9af82d32" VjNBjKwxQzZrjDjjshQAAABJ TLSv1.2 ECDHE-RSA-AES128-SHA256 703 11875 -% 838507 1742 833686 2296 0 0 192.168.146.78 CH - [2015-05-30 11:08:15.551211] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8a7e0c2d.5234f9af82d32" VjNBj6wxQzZrjDjjshUAAABG TLSv1.2 ECDHE-RSA-AES128-SHA256 678 453 -% 1019958 5308 13784 247 0 0 192.168.146.78 CH - [2015-05-30 11:08:16.598960] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8a7e0c2d.5234f9af82d32" VjNBkKwxQzZrjDjjshYAAABH TLSv1.2 ECDHE-RSA-AES128-SHA256 534 3882 -% 917029 3031 911318 1883 0 0 192.168.146.78 CH - [2015-05-30 11:08:17.667828] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8a7e0c2d.5234f9af82d32" VjNBkawxQzZrjDjjshcAAABK TLSv1.2 ECDHE-RSA-AES128-SHA256 486 4202 -% 821175 3135 810708 6620 0 0 192.168.146.78 CH - [2015-05-30 11:08:17.757924] "GET /EMail/overview.aspx HTTP/1.1" 200 5304 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8a7e0c2d.5234f9af82d32" VjNBkawxQzZrjDjjshgAAABD TLSv1.2 ECDHE-RSA-AES128-SHA256 772 5963 -% 1068709 2243 62381 3444 0 0 192.168.146.78 CH - [2015-05-30 11:08:17.753241] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8a7e0c2d.5234f9af82d32" VjNBkawxQzZrjDjiMLoAAAA@ TLSv1.2 ECDHE-RSA-AES128-SHA256 804 9683 -% 1787687 3802 776566 3521 0 0 192.168.146.78 CH - [2015-05-30 11:08:20.897298] "GET /EMail/inbox.aspx HTTP/1.1" 200 51779 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8a7e0c2d.5234f9af82d32" VjNBlKwxQzZrjDjiMLsAAAAA TLSv1.2 ECDHE-RSA-AES128-SHA256 486 52945 -% 2319919 3573 738591 15794 0 0 192.168.146.78 CH - [2015-05-30 11:08:26.664484] "GET /EMail/message.aspx?&mailId=3923_5&folderId=2634_79&mailPos=0 HTTP/1.1" 200 15366 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8a7e0c2d.5234f9af82d32" VjNBmqwxQzZrjDjiMLwAAAAD TLSv1.2 ECDHE-RSA-AES128-SHA256 534 15988 -% 1538036 3076 500845 32911 0 0 192.168.32.7 CH - [2015-05-30 11:10:02.207476] "GET /EMail/login.aspx HTTP/1.1" 200 7356 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNB@qwxQzZrjDjjsiYAAABd TLSv1.2 ECDHE-RSA-AES128-SHA256 659 11875 -% 941419 851 934896 4745 0 0 192.168.32.7 CH - [2015-05-30 11:10:03.522494] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNB@6wxQzZrjDjjsicAAABS TLSv1.2 ECDHE-RSA-AES128-SHA256 454 2713 14% 997542 3179 992656 206 0 0 192.168.32.7 CH - [2015-05-30 11:10:03.555569] "GET /EMail/scripts/variables_fr.js HTTP/1.1" 200 1679 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNB@6wxQzZrjDjjsikAAABV TLSv1.2 ECDHE-RSA-AES128-SHA256 760 2448 27% 1120545 1601 117542 218 0 0 192.168.32.7 CH - [2015-05-30 11:10:03.553283] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7160 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNB@6wxQzZrjDjjsigAAABa TLSv1.2 ECDHE-RSA-AES128-SHA256 760 8403 22% 1126142 1751 120180 271 0 0 192.168.32.7 CH - [2015-05-30 11:10:03.558615] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNB@6wxQzZrjDjjsioAAABb TLSv1.2 ECDHE-RSA-AES128-SHA256 744 864 56% 1162446 2712 158949 145 0 0 192.168.32.7 CH - [2015-05-30 11:10:03.561914] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNB@6wxQzZrjDjiMMcAAAAO TLSv1.2 ECDHE-RSA-AES128-SHA256 744 2144 22% 1369323 4114 363648 195 0 0 192.168.32.7 CH - [2015-05-30 11:10:03.561026] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNB@6wxQzZrjDjjsisAAABZ TLSv1.2 ECDHE-RSA-AES128-SHA256 776 1931 -% 1384539 4284 379439 156 0 0 192.168.32.7 CH - [2015-05-30 11:10:05.008045] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNB-awxQzZrjDjjsiwAAABe TLSv1.2 ECDHE-RSA-AES128-SHA256 486 1866 -% 920894 3358 916594 204 0 0 192.168.32.7 CH - [2015-05-30 11:10:44.274151] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNCJKwxQzZrjDjjsjQAAABk TLSv1.2 ECDHE-RSA-AES128-SHA256 920 630 -% 1037298 3336 32969 395 0 0 192.168.32.7 CH - [2015-05-30 11:10:45.325041] "GET /EMail/main.aspx HTTP/1.1" 200 3407 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNCJawxQzZrjDjjsjUAAABf TLSv1.2 ECDHE-RSA-AES128-SHA256 486 3882 -% 948403 2696 943134 1941 0 0 192.168.32.7 CH - [2015-05-30 11:10:46.315371] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNCJqwxQzZrjDjjsjYAAABo TLSv1.2 ECDHE-RSA-AES128-SHA256 470 4212 23% 622124 2315 617843 165 0 0 192.168.32.7 CH - [2015-05-30 11:10:46.981406] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNCJqwxQzZrjDjjsjgAAABq TLSv1.2 ECDHE-RSA-AES128-SHA256 470 4202 -% 781193 3865 765821 10635 0 0 192.168.32.7 CH - [2015-05-30 11:10:47.011373] "GET /EMail/overview.aspx HTTP/1.1" 200 5303 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNCJ6wxQzZrjDjjsjkAAABp TLSv1.2 ECDHE-RSA-AES128-SHA256 760 5963 -% 916623 2752 909773 3023 0 0 192.168.32.7 CH - [2015-05-30 11:10:47.016891] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNCJ6wxQzZrjDjiMMkAAAAQ TLSv1.2 ECDHE-RSA-AES128-SHA256 792 9683 -% 1764707 3368 751477 4531 0 0 192.168.32.7 CH - [2015-05-30 11:10:47.968904] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNCJ6wxQzZrjDjjsjoAAABw TLSv1.2 ECDHE-RSA-AES128-SHA256 502 1322 -% 949305 3846 944272 199 0 0 192.168.32.7 CH - [2015-05-30 11:10:48.827043] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNCKKwxQzZrjDjiMMoAAAAR TLSv1.2 ECDHE-RSA-AES128-SHA256 534 1338 -% 873565 3027 869575 199 0 0 192.168.32.7 CH - [2015-05-30 11:12:50.252890] "GET /EMail/inbox.aspx HTTP/1.1" 200 25524 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNCoqwxQzZrjDjjskwAAABA TLSv1.2 ECDHE-RSA-AES128-SHA256 760 26500 -% 1508603 3518 364526 10957 0 0 192.168.32.7 CH - [2015-05-30 11:12:51.820313] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNCo6wxQzZrjDjjsk4AAAB7 TLSv1.2 ECDHE-RSA-AES128-SHA256 776 2059 -% 817173 3130 813095 224 0 0 192.168.32.7 CH - [2015-05-30 11:12:51.789819] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNCo6wxQzZrjDjjsk0AAAB6 TLSv1.2 ECDHE-RSA-AES128-SHA256 486 602 -% 1021127 3020 17159 201 0 0 192.168.32.7 CH - [2015-05-30 11:12:51.824864] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNCo6wxQzZrjDjjslAAAABB TLSv1.2 ECDHE-RSA-AES128-SHA256 776 779 -% 1158635 2824 154808 196 0 0 192.168.32.7 CH - [2015-05-30 11:12:51.822659] "GET /EMail/images/msgOpenedReplied.png HTTP/1.1" 200 717 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNCo6wxQzZrjDjjsk8AAAB- TLSv1.2 ECDHE-RSA-AES128-SHA256 792 1371 -% 1206258 3339 201998 153 0 0 192.168.32.7 CH - [2015-05-30 11:14:26.621359] "GET /EMail/message.aspx?&mailId=3921_10&folderId=3481_21&mailPos=0 HTTP/1.1" 200 11355 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNDAqwxQzZrjDjjsmIAAABW TLSv1.2 ECDHE-RSA-AES128-SHA256 808 12149 -% 1559429 3133 533458 21861 0 0 192.168.32.7 CH - [2015-05-30 11:14:35.458054] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3921_10&folderId=3481_21&attachmentId=2&token=6493594561017174E18 HTTP/1.1" 200 47444 "https://www.example.com/EMail/message.aspx?&mailId=3921_10&folderId=3481_21&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNDC6wxQzZrjDjjsmQAAABY TLSv1.2 ECDHE-RSA-AES128-SHA256 904 50182 -% 1131808 6389 107112 225 0 0 192.168.32.7 CH - [2015-05-30 11:15:42.599470] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNDTqwxQzZrjDjjsm8AAABm TLSv1.2 ECDHE-RSA-AES128-SHA256 851 6019 -% 862708 3042 858678 223 0 0 192.168.32.7 CH - [2015-05-30 11:15:48.155503] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNDVKwxQzZrjDjjsnIAAABf TLSv1.2 ECDHE-RSA-AES128-SHA256 776 9683 -% 1415134 3918 402125 3833 0 0 192.168.32.7 CH - [2015-05-30 11:15:48.105277] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 25517 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNDVKwxQzZrjDjjsnEAAABk TLSv1.2 ECDHE-RSA-AES128-SHA256 470 26307 -% 1493037 2235 369958 8448 0 0 192.168.32.7 CH - [2015-05-30 11:15:49.625406] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNDVawxQzZrjDjjsnMAAABr TLSv1.2 ECDHE-RSA-AES128-SHA256 502 1946 -% 873430 2005 870594 202 0 0 192.168.32.7 CH - [2015-05-30 11:16:12.500920] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNDbKwxQzZrjDjjsncAAABw TLSv1.2 ECDHE-RSA-AES128-SHA256 1064 566 -% 1212526 9759 201899 157 0 0 192.168.32.7 CH - [2015-05-30 11:16:13.723830] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 24220 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNDbawxQzZrjDjjsngAAABl TLSv1.2 ECDHE-RSA-AES128-SHA256 518 24958 -% 1505252 2655 380234 12524 0 0 192.168.32.7 CH - [2015-05-30 11:16:19.831282] "GET /EMail/message.aspx?&mailId=3922_1&folderId=3481_21&mailPos=0 HTTP/1.1" 200 11357 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNDc6wxQzZrjDjjsnoAAABs TLSv1.2 ECDHE-RSA-AES128-SHA256 534 11972 -% 1189681 4835 155718 27650 0 0 192.168.32.7 CH - [2015-05-30 11:17:13.302640] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3922_1&folderId=3481_21&attachmentId=2&token=171313771174944358E18 HTTP/1.1" 200 47792 "https://www.example.com/EMail/message.aspx?&mailId=3922_1&folderId=3481_21&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNDqawxQzZrjDjjsoIAAAB1 TLSv1.2 ECDHE-RSA-AES128-SHA256 904 50343 -% 1307086 6263 264213 272 0 0 192.168.32.7 CH - [2015-05-30 11:18:39.538213] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 24212 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjND-6wxQzZrjDjjso4AAAB- TLSv1.2 ECDHE-RSA-AES128-SHA256 760 25119 -% 1508408 3336 382920 12976 0 0 192.168.32.7 CH - [2015-05-30 11:18:39.554422] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjND-6wxQzZrjDjjso8AAABC TLSv1.2 ECDHE-RSA-AES128-SHA256 776 9683 -% 1560204 3323 548966 2818 0 0 192.168.32.7 CH - [2015-05-30 11:19:03.053801] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNEF6wxQzZrjDjjspQAAABK TLSv1.2 ECDHE-RSA-AES128-SHA256 1048 566 -% 1175453 10020 164631 148 0 0 192.168.32.7 CH - [2015-05-30 11:19:04.240915] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 22919 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNEGKwxQzZrjDjjspUAAABD TLSv1.2 ECDHE-RSA-AES128-SHA256 518 23662 -% 1516720 2949 409095 11768 0 0 192.168.32.7 CH - [2015-05-30 11:19:07.887239] "GET /EMail/message.aspx?&mailId=3919_62&folderId=3481_21&mailPos=0 HTTP/1.1" 200 11360 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNEG6wxQzZrjDjjspcAAABL TLSv1.2 ECDHE-RSA-AES128-SHA256 534 11972 -% 1479654 4182 446572 27753 0 0 192.168.32.7 CH - [2015-05-30 11:19:12.779291] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3919_62&folderId=3481_21&attachmentId=2&token=74314081839285391E18 HTTP/1.1" 200 47604 "https://www.example.com/EMail/message.aspx?&mailId=3919_62&folderId=3481_21&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNEIKwxQzZrjDjjspgAAABP TLSv1.2 ECDHE-RSA-AES128-SHA256 614 49958 -% 1108609 6213 83105 259 0 0 192.168.32.7 CH - [2015-05-30 11:19:39.417961] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNEO6wxQzZrjDjjsp8AAABW TLSv1.2 ECDHE-RSA-AES128-SHA256 776 9683 -% 1456302 2180 444176 4737 0 0 192.168.32.7 CH - [2015-05-30 11:19:39.399068] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 22911 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNEO6wxQzZrjDjiMOcAAAAu TLSv1.2 ECDHE-RSA-AES128-SHA256 760 23823 -% 1709145 2286 597693 8738 0 0 192.168.32.7 CH - [2015-05-30 11:19:44.256696] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNEQKwxQzZrjDjiMOgAAAAw TLSv1.2 ECDHE-RSA-AES128-SHA256 758 389 -% 1231068 9547 220447 367 0 0 192.168.32.7 CH - [2015-05-30 11:19:45.498522] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 21615 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNEQawxQzZrjDjiMOkAAAAy TLSv1.2 ECDHE-RSA-AES128-SHA256 518 22350 -% 1415015 4228 329802 7386 0 0 192.168.32.7 CH - [2015-05-30 11:19:48.909746] "GET /EMail/message.aspx?&mailId=3919_59&folderId=3481_21&mailPos=0 HTTP/1.1" 200 11366 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNERKwxQzZrjDjiMOoAAAAx TLSv1.2 ECDHE-RSA-AES128-SHA256 534 11988 -% 1221587 5392 192445 22422 0 0 192.168.32.7 CH - [2015-05-30 11:19:52.178775] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3919_59&folderId=3481_21&attachmentId=2&token=140065989231089434E18 HTTP/1.1" 200 48559 "https://www.example.com/EMail/message.aspx?&mailId=3919_59&folderId=3481_21&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNESKwxQzZrjDjiMOsAAAAz TLSv1.2 ECDHE-RSA-AES128-SHA256 614 51109 -% 1027776 6268 1671 191 0 0 192.168.32.7 CH - [2015-05-30 11:21:21.040589] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 21608 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNEoawxQzZrjDjjsrAAAABf TLSv1.2 ECDHE-RSA-AES128-SHA256 835 26215 -% 1201282 3423 113549 10962 0 0 192.168.32.7 CH - [2015-05-30 11:21:21.044518] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNEoawxQzZrjDjiMPIAAAA6 TLSv1.2 ECDHE-RSA-AES128-SHA256 851 13371 -% 1500550 3901 486178 4663 0 0 192.168.32.7 CH - [2015-05-30 11:21:27.833421] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNEp6wxQzZrjDjjsrIAAABr TLSv1.2 ECDHE-RSA-AES128-SHA256 1064 566 -% 1177967 6781 170352 196 0 0 192.168.32.7 CH - [2015-05-30 11:21:29.022342] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 20311 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNEqawxQzZrjDjjsrMAAABo TLSv1.2 ECDHE-RSA-AES128-SHA256 518 21054 -% 1463825 3805 399166 6099 0 0 192.168.32.7 CH - [2015-05-30 11:21:37.934203] "GET /EMail/message.aspx?&mailId=3919_58&folderId=3481_21&mailPos=0 HTTP/1.1" 200 11353 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNEsawxQzZrjDjiMPQAAAA8 TLSv1.2 ECDHE-RSA-AES128-SHA256 824 12149 -% 1242147 4622 210399 25944 0 0 192.168.32.7 CH - [2015-05-30 11:21:59.211210] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3919_58&folderId=3481_21&attachmentId=2&token=5526972875145516E18 HTTP/1.1" 200 48891 "https://www.example.com/EMail/message.aspx?&mailId=3919_58&folderId=3481_21&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNEx6wxQzZrjDjjsrkAAABs TLSv1.2 ECDHE-RSA-AES128-SHA256 904 51638 -% 1005824 4755 974151 166 0 0 192.168.32.7 CH - [2015-05-30 11:22:56.951180] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 21609 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNFAKwxQzZrjDjjsr8AAABx TLSv1.2 ECDHE-RSA-AES128-SHA256 760 22527 -% 1231356 2337 145074 9504 0 0 192.168.32.7 CH - [2015-05-30 11:22:56.962078] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNFAKwxQzZrjDjjssAAAAB8 TLSv1.2 ECDHE-RSA-AES128-SHA256 776 9683 -% 1607871 4085 593810 4586 0 0 192.168.32.7 CH - [2015-05-30 11:23:07.477802] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNFC6wxQzZrjDjjssIAAAB2 TLSv1.2 ECDHE-RSA-AES128-SHA256 1064 566 -% 1256609 9842 245975 151 0 0 192.168.32.7 CH - [2015-05-30 11:23:08.745581] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 20312 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNFDKwxQzZrjDjjssMAAAB3 TLSv1.2 ECDHE-RSA-AES128-SHA256 518 20985 -% 1394814 3786 338150 9445 0 0 192.168.156.185 CH - [2015-05-30 11:23:09.447663] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "eb8e6243.5234fd06871ef" VjNFDawxQzZrjDjjssQAAAB4 TLSv1.2 ECDHE-RSA-AES256-SHA384 659 8674 -% 1061560 1899 58133 200 0 0 192.168.32.7 CH - [2015-05-30 11:23:12.257435] "GET /EMail/message.aspx?&mailId=3921_14&folderId=3481_21&mailPos=0 HTTP/1.1" 200 11360 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNFEKwxQzZrjDjjssYAAAB9 TLSv1.2 ECDHE-RSA-AES128-SHA256 534 11972 -% 1553463 4559 523923 23647 0 0 192.168.32.7 CH - [2015-05-30 11:23:16.099341] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3921_14&folderId=3481_21&attachmentId=2&token=45782467920296008E18 HTTP/1.1" 200 90335 "https://www.example.com/EMail/message.aspx?&mailId=3921_14&folderId=3481_21&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNFFKwxQzZrjDjjsscAAAB@ TLSv1.2 ECDHE-RSA-AES128-SHA256 614 94753 -% 1122368 4143 43957 236 0 0 192.168.32.7 CH - [2015-05-30 11:23:40.111568] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 20304 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNFLKwxQzZrjDjjssoAAAB7 TLSv1.2 ECDHE-RSA-AES128-SHA256 760 21215 -% 1605286 2859 534850 11154 0 0 192.168.32.7 CH - [2015-05-30 11:23:40.141684] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNFLKwxQzZrjDjjsssAAAB6 TLSv1.2 ECDHE-RSA-AES128-SHA256 776 9683 -% 1695444 3606 681395 5159 0 0 192.168.32.7 CH - [2015-05-30 11:23:44.826261] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNFMKwxQzZrjDjjss0AAAB- TLSv1.2 ECDHE-RSA-AES128-SHA256 758 389 -% 1252060 5809 245552 180 0 0 192.168.32.7 CH - [2015-05-30 11:23:46.089132] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 19010 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNFMqwxQzZrjDjjss4AAABC TLSv1.2 ECDHE-RSA-AES128-SHA256 518 19742 -% 1289193 3008 243234 6469 0 0 192.168.32.7 CH - [2015-05-30 11:23:49.174045] "GET /EMail/message.aspx?&mailId=3919_57&folderId=3481_21&mailPos=0 HTTP/1.1" 200 11360 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNFNawxQzZrjDjjss8AAABE TLSv1.2 ECDHE-RSA-AES128-SHA256 534 11919 -% 1216638 5010 186980 23642 0 0 192.168.32.7 CH - [2015-05-30 11:23:52.603580] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3919_57&folderId=3481_21&attachmentId=2&token=33911050074099415E18 HTTP/1.1" 200 48814 "https://www.example.com/EMail/message.aspx?&mailId=3919_57&folderId=3481_21&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNFOKwxQzZrjDjjstEAAABG TLSv1.2 ECDHE-RSA-AES128-SHA256 614 51365 -% 1204504 6259 179154 171 0 0 192.168.32.7 CH - [2015-05-30 11:24:39.127985] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 19001 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNFZ6wxQzZrjDjiMQUAAAAM TLSv1.2 ECDHE-RSA-AES128-SHA256 760 19919 -% 1490768 4215 439640 9735 0 0 192.168.32.7 CH - [2015-05-30 11:24:39.141498] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNFZ6wxQzZrjDjiMQYAAAAO TLSv1.2 ECDHE-RSA-AES128-SHA256 776 9683 -% 1716388 4234 701886 3948 0 0 192.168.32.7 CH - [2015-05-30 11:24:48.279691] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNFcKwxQzZrjDjiMQgAAAAQ TLSv1.2 ECDHE-RSA-AES128-SHA256 1048 566 -% 1202576 5797 195965 209 0 0 192.168.32.7 CH - [2015-05-30 11:24:49.493273] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 17707 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNFcawxQzZrjDjiMQkAAAAR TLSv1.2 ECDHE-RSA-AES128-SHA256 518 18377 -% 1482283 3725 449871 9237 0 0 192.168.32.7 CH - [2015-05-30 11:25:16.881837] "GET /EMail/message.aspx?&mailId=3920_29&folderId=3481_21&mailPos=0 HTTP/1.1" 200 11360 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNFjKwxQzZrjDjjstkAAABT TLSv1.2 ECDHE-RSA-AES128-SHA256 824 12096 -% 1127150 4874 93593 27485 0 0 192.168.32.7 CH - [2015-05-30 11:25:32.064372] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3920_29&folderId=3481_21&attachmentId=2&token=76017618295470797E18 HTTP/1.1" 200 48620 "https://www.example.com/EMail/message.aspx?&mailId=3920_29&folderId=3481_21&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNFnKwxQzZrjDjjst0AAABR TLSv1.2 ECDHE-RSA-AES128-SHA256 904 51366 -% 1134827 5214 110322 214 0 0 192.168.32.7 CH - [2015-05-30 11:26:26.026943] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 17698 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNF0qwxQzZrjDjjsuIAAABS TLSv1.2 ECDHE-RSA-AES128-SHA256 835 22242 -% 1552479 3412 524015 5865 0 0 192.168.32.7 CH - [2015-05-30 11:26:26.037899] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNF0qwxQzZrjDjjsuMAAABX TLSv1.2 ECDHE-RSA-AES128-SHA256 819 13371 -% 1731173 3565 717424 4487 0 0 192.168.32.7 CH - [2015-05-30 11:26:33.508639] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNF2awxQzZrjDjiMRcAAAAh TLSv1.2 ECDHE-RSA-AES128-SHA256 1048 566 -% 1595815 9839 585053 211 0 0 192.168.32.7 CH - [2015-05-30 11:26:35.117469] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 16405 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNF26wxQzZrjDjiMxQzZrji TLSv1.2 ECDHE-RSA-AES128-SHA256 518 17081 -% 1333550 4134 321905 5601 0 0 192.168.186.76 CH - [2015-05-30 11:26:58.360966] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNF8qwxQzZrjDjjsugAAABe TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1731156 7125 714099 4527 3 0 192.168.186.76 CH - [2015-05-30 11:27:01.463018] "GET /EMail/message.aspx?&mailId=3923_6&folderId=947_65&mailPos=0 HTTP/1.1" 200 15657 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNF9awxQzZrjDjjsukAAABj TLSv1.2 ECDHE-RSA-AES256-SHA384 710 16340 -% 2470502 8685 415079 41683 3 0 192.168.186.76 CH - [2015-05-30 11:27:10.471472] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5871 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3923_6&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNF-qwxQzZrjDjjsusAAABc TLSv1.2 ECDHE-RSA-AES256-SHA384 1303 13726 -% 839874 5067 0 0 3 0 192.168.32.7 CH - [2015-05-30 11:27:17.995310] "GET /EMail/message.aspx?&mailId=3920_28&folderId=3481_21&mailPos=0 HTTP/1.1" 200 11360 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNGBawxQzZrjDjjsu0AAABm TLSv1.2 ECDHE-RSA-AES128-SHA256 824 12149 -% 1418797 5103 392190 20252 0 0 192.168.32.7 CH - [2015-05-30 11:27:22.700159] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3920_28&folderId=3481_21&attachmentId=2&token=53368107901174291E17 HTTP/1.1" 200 49252 "https://www.example.com/EMail/message.aspx?&mailId=3920_28&folderId=3481_21&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNGCqwxQzZrjDjjsu8AAABf TLSv1.2 ECDHE-RSA-AES128-SHA256 614 51935 -% 1256232 3946 229640 172 0 0 192.168.146.78 CH - [2015-05-30 11:28:15.720870] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8a7e0c2d.5234f9af82d32" VjNGP6wxQzZrjDjjsvgAAABu TLSv1.2 ECDHE-RSA-AES128-SHA256 879 13371 -% 1624556 2857 613606 3055 0 0 192.168.146.78 CH - [2015-05-30 11:28:15.716225] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 51771 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8a7e0c2d.5234f9af82d32" VjNGP6wxQzZrjDjjsvcAAABl TLSv1.2 ECDHE-RSA-AES128-SHA256 863 56794 -% 2230480 3695 693542 18168 0 0 192.168.146.78 CH - [2015-05-30 11:28:18.263735] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8a7e0c2d.5234f9af82d32" VjNGQqwxQzZrjDjjsvoAAABv TLSv1.2 ECDHE-RSA-AES128-SHA256 518 9506 -% 1566666 3688 554614 2752 0 0 192.168.146.78 CH - [2015-05-30 11:28:18.244367] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 51771 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8a7e0c2d.5234f9af82d32" VjNGQqwxQzZrjDjjsvkAAABs TLSv1.2 ECDHE-RSA-AES128-SHA256 502 52929 -% 2810075 2223 281153 20630 0 0 192.168.146.78 CH - [2015-05-30 11:28:23.957645] "GET /EMail/message.aspx?&mailId=3880_10&folderId=2634_79&mailPos=34 HTTP/1.1" 200 19565 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8a7e0c2d.5234f9af82d32" VjNGR6wxQzZrjDjjsvsAAABz TLSv1.2 ECDHE-RSA-AES128-SHA256 550 20302 -% 1528845 3078 481044 42455 0 0 192.168.186.76 CH - [2015-05-30 11:29:46.825600] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3923_6&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNGmqwxQzZrjDjjswoAAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 7975 630 -% 1548231 350842 178367 162 86 0 192.168.186.76 CH - [2015-05-30 11:29:48.389032] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3923_6&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNGnKwxQzZrjDjjswsAAAB- TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 926326 6202 907025 11500 3 0 192.168.186.76 CH - [2015-05-30 11:29:51.412856] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9597 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNGn6wxQzZrjDjjswwAAABC TLSv1.2 ECDHE-RSA-AES256-SHA384 662 10191 -% 1525892 7591 513920 2866 3 0 192.168.186.76 CH - [2015-05-30 11:29:51.414862] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNGn6wxQzZrjDjjsw0AAAB6 TLSv1.2 ECDHE-RSA-AES256-SHA384 1212 9827 -% 1888719 6914 870894 4522 3 0 192.168.186.76 CH - [2015-05-30 11:29:55.543491] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNGo6wxQzZrjDjjsw8AAABJ TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1268567 12726 252007 272 3 0 192.168.186.76 CH - [2015-05-30 11:29:56.823138] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8499 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNGpKwxQzZrjDjjsxEAAABH TLSv1.2 ECDHE-RSA-AES256-SHA384 726 9103 -% 1089463 4815 80469 2649 3 0 192.168.186.76 CH - [2015-05-30 11:29:58.676201] "GET /EMail/message.aspx?&mailId=3921_19&folderId=947_65&mailPos=0 HTTP/1.1" 200 16321 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNGpqwxQzZrjDjjsxIAAABK TLSv1.2 ECDHE-RSA-AES256-SHA384 726 16996 -% 2086431 6083 49371 28475 3 0 192.168.186.76 CH - [2015-05-30 11:30:03.574434] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3921_19&folderId=947_65&attachmentId=3&token=26239918883154806E18 HTTP/1.1" 200 1234259 "https://www.example.com/EMail/message.aspx?&mailId=3921_19&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNGq6wxQzZrjDjjsxUAAABI TLSv1.2 ECDHE-RSA-AES256-SHA384 806 1299916 -% 1558575 8189 156769 200 3 0 192.168.32.7 CH - [2015-05-30 11:30:13.327000] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNGtawxQzZrjDjiMSYAAAAx TLSv1.2 ECDHE-RSA-AES128-SHA256 776 9683 -% 1331752 2524 321425 2726 0 0 192.168.32.7 CH - [2015-05-30 11:30:13.297781] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 16397 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNGtawxQzZrjDjjsxgAAABN TLSv1.2 ECDHE-RSA-AES128-SHA256 760 17242 -% 1443150 2348 429434 9498 0 0 192.168.186.76 CH - [2015-05-30 11:30:36.452637] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3921_19&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNGzKwxQzZrjDjjsx0AAABQ TLSv1.2 ECDHE-RSA-AES256-SHA384 8610 4545 -% 1613429 411457 180893 214 81 0 192.168.186.76 CH - [2015-05-30 11:30:38.078210] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3921_19&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNGzqwxQzZrjDjjsx8AAABd TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 914597 6687 899528 6992 3 0 192.168.186.76 CH - [2015-05-30 11:30:40.188179] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8497 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNG0KwxQzZrjDjjsyAAAABS TLSv1.2 ECDHE-RSA-AES256-SHA384 662 9103 -% 1372415 4272 363749 2663 3 0 192.168.186.76 CH - [2015-05-30 11:30:40.189575] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNG0KwxQzZrjDjiMScAAAAz TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1628547 4863 612891 4511 3 0 192.168.186.76 CH - [2015-05-30 11:30:43.574082] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNG06wxQzZrjDjiMSgAAAAv TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1197372 13075 180390 358 3 0 192.168.186.76 CH - [2015-05-30 11:30:44.782177] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7290 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNG1KwxQzZrjDjiMSkAAAA1 TLSv1.2 ECDHE-RSA-AES256-SHA384 726 7802 -% 796203 7401 782592 3976 3 0 192.168.32.7 CH - [2015-05-30 11:30:56.764013] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNG4KwxQzZrjDjjsyQAAABb TLSv1.2 ECDHE-RSA-AES128-SHA256 1048 566 -% 1235744 6709 228266 200 0 0 192.168.32.7 CH - [2015-05-30 11:30:58.010083] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 15103 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNG4qwxQzZrjDjjsyYAAABe TLSv1.2 ECDHE-RSA-AES128-SHA256 518 15716 -% 1299953 3754 286777 7656 0 0 192.168.157.250 CH - [2015-05-30 11:31:26.917874] "GET /EMail/overview.aspx HTTP/1.1" 200 5285 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "9a9dfc8c.5232e6f8598d3" VjNG-qwxQzZrjDjjsyoAAABg TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1126 9728 -% 1207149 2506 201800 2312 0 0 192.168.157.250 CH - [2015-05-30 11:31:26.926415] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "9a9dfc8c.5232e6f8598d3" VjNG-qwxQzZrjDjjsysAAABi TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1152 13200 -% 1901686 3021 890672 2992 0 0 192.168.157.250 CH - [2015-05-30 11:31:30.577389] "GET /EMail/inbox.aspx HTTP/1.1" 200 9734 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "9a9dfc8c.5232e6f8598d3" VjNHAqwxQzZrjDjjsywAAABn TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 485 10185 -% 1089034 2308 82410 3478 0 0 192.168.157.250 CH - [2015-05-30 11:31:31.740125] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "9a9dfc8c.5232e6f8598d3" VjNHA6wxQzZrjDjjsy0AAABf TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 463 1813 -% 771189 2994 767350 150 0 0 192.168.157.250 CH - [2015-05-30 11:31:37.496893] "GET /EMail/message.aspx?&mailId=3923_4&folderId=2885_96&mailPos=0 HTTP/1.1" 200 24687 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "9a9dfc8c.5232e6f8598d3" VjNHCawxQzZrjDjjsy8AAABr TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 526 25255 -% 1499507 4819 446082 45578 0 0 192.168.146.78 CH - [2015-05-30 11:32:46.161195] "GET /EMail/message.aspx?mailId=3880_10&folderId=2634_79&print=true&showPics=false HTTP/1.1" 200 14725 "https://www.example.com/EMail/message.aspx?&mailId=3880_10&folderId=2634_79&mailPos=34" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8a7e0c2d.5234f9af82d32" VjNHTqwxQzZrjDjjszoAAABz TLSv1.2 ECDHE-RSA-AES128-SHA256 927 19213 -% 1313614 5306 274203 32660 0 0 192.168.32.7 CH - [2015-05-30 11:37:51.462989] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNIf6wxQzZrjDjiMUUAAAAT TLSv1.2 ECDHE-RSA-AES128-SHA256 787 11699 -% 1043657 3700 35173 3712 0 0 192.168.32.7 CH - [2015-05-30 11:38:36.146830] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNIrKwxQzZrjDjjs24AAABr TLSv1.2 ECDHE-RSA-AES128-SHA256 920 630 -% 998602 5262 992316 217 0 0 192.168.32.7 CH - [2015-05-30 11:38:37.156953] "GET /EMail/main.aspx HTTP/1.1" 200 3407 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNIrawxQzZrjDjjs28AAABq TLSv1.2 ECDHE-RSA-AES128-SHA256 486 3882 -% 973488 3250 968384 1159 0 0 192.168.32.7 CH - [2015-05-30 11:38:38.203794] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNIrqwxQzZrjDjjs3AAAABp TLSv1.2 ECDHE-RSA-AES128-SHA256 470 4202 -% 870444 3024 858861 7823 0 0 192.168.32.7 CH - [2015-05-30 11:38:38.232327] "GET /EMail/overview.aspx HTTP/1.1" 200 5302 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNIrqwxQzZrjDjjs3IAAABt TLSv1.2 ECDHE-RSA-AES128-SHA256 760 5963 -% 1257565 1681 252019 3216 0 0 192.168.32.7 CH - [2015-05-30 11:38:38.230481] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNIrqwxQzZrjDjjs3EAAABw TLSv1.2 ECDHE-RSA-AES128-SHA256 792 9683 -% 1669938 2912 656924 4753 0 0 192.168.32.7 CH - [2015-05-30 11:39:02.667023] "GET /EMail/inbox.aspx HTTP/1.1" 200 15103 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNIxqwxQzZrjDjjs3YAAABs TLSv1.2 ECDHE-RSA-AES128-SHA256 760 15893 -% 1401136 2022 391463 6384 0 0 192.168.32.7 CH - [2015-05-30 11:39:34.469940] "GET /EMail/message.aspx?&mailId=3918_45&folderId=3481_21&mailPos=0 HTTP/1.1" 200 11360 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNI5qwxQzZrjDjjs3sAAAB8 TLSv1.2 ECDHE-RSA-AES128-SHA256 808 12096 -% 1295071 3995 267134 22893 0 0 192.168.32.7 CH - [2015-05-30 11:39:55.825471] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3918_45&folderId=3481_21&attachmentId=2&token=35574240702451855E18 HTTP/1.1" 200 92066 "https://www.example.com/EMail/message.aspx?&mailId=3918_45&folderId=3481_21&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNI@6wxQzZrjDjjs38AAAB4 TLSv1.2 ECDHE-RSA-AES128-SHA256 904 96796 -% 867289 6358 821706 176 0 0 192.168.186.76 CH - [2015-05-30 11:41:06.129774] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNJQqwxQzZrjDjiMVQAAAAi TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1545452 5470 531362 2697 3 0 192.168.186.76 CH - [2015-05-30 11:41:08.834288] "GET /EMail/message.aspx?&mailId=3923_7&folderId=947_65&mailPos=0 HTTP/1.1" 200 16164 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNJRKwxQzZrjDjiMVUAAAAj TLSv1.2 ECDHE-RSA-AES256-SHA384 710 16836 -% 1328537 9031 285173 31753 3 0 192.168.186.76 CH - [2015-05-30 11:41:53.539348] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNJcawxQzZrjDjjs48AAABK TLSv1.2 ECDHE-RSA-AES256-SHA384 1261 13742 -% 1300512 7587 282586 3803 3 0 192.168.186.76 CH - [2015-05-30 11:41:56.648316] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNJdKwxQzZrjDjjs5EAAABD TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1300248 8265 288909 204 3 0 192.168.186.76 CH - [2015-05-30 11:41:57.960285] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7291 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNJdawxQzZrjDjjs5IAAABI TLSv1.2 ECDHE-RSA-AES256-SHA384 726 7802 -% 1190503 7269 177628 3620 3 0 192.168.32.7 CH - [2015-05-30 11:43:29.555556] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 15096 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNJ0awxQzZrjDjjs54AAABX TLSv1.2 ECDHE-RSA-AES128-SHA256 835 19581 -% 861104 2279 852768 4703 0 0 192.168.32.7 CH - [2015-05-30 11:43:29.563458] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNJ0awxQzZrjDjjs58AAABa TLSv1.2 ECDHE-RSA-AES128-SHA256 819 13371 -% 1382362 4090 367891 4951 0 0 192.168.32.7 CH - [2015-05-30 11:43:50.555735] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNJ5qwxQzZrjDjjs6QAAABj TLSv1.2 ECDHE-RSA-AES128-SHA256 1064 566 -% 1367063 6114 359951 207 0 0 192.168.32.7 CH - [2015-05-30 11:43:51.933550] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 13800 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNJ56wxQzZrjDjjs6UAAABh TLSv1.2 ECDHE-RSA-AES128-SHA256 518 14420 -% 1319662 2627 309691 6149 0 0 192.168.32.7 CH - [2015-05-30 11:43:55.897562] "GET /EMail/message.aspx?&mailId=3917_29&folderId=3481_21&mailPos=0 HTTP/1.1" 200 11359 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNJ66wxQzZrjDjjs6YAAABc TLSv1.2 ECDHE-RSA-AES128-SHA256 534 11903 -% 1251802 4782 223499 22544 0 0 192.168.32.7 CH - [2015-05-30 11:44:00.133330] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3917_29&folderId=3481_21&attachmentId=2&token=24376280111777168E17 HTTP/1.1" 200 85337 "https://www.example.com/EMail/message.aspx?&mailId=3917_29&folderId=3481_21&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "94eeed3e.5234fa17c1cf4" VjNJ8KwxQzZrjDjjs6gAAABi TLSv1.2 ECDHE-RSA-AES128-SHA256 614 89607 -% 1087271 5449 45746 183 0 0 192.168.32.7 CH - [2015-05-30 11:44:43.080439] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 503 4504 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - - "94eeed3e.5234fa17c1cf4" VjNKG6wxQzZrjDjjs7AAAABp TLSv1.2 ECDHE-RSA-AES128-SHA256 760 5295 -% 5505 2891 0 0 0 0 192.168.32.7 CH - [2015-05-30 11:44:43.104304] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 503 4504 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - - "94eeed3e.5234fa17c1cf4" VjNKG6wxQzZrjDjjs7EAAABt TLSv1.2 ECDHE-RSA-AES128-SHA256 776 5295 -% 4816 2374 0 0 0 0 192.168.213.21 CH - [2015-05-30 12:31:19.049109] "GET /EMail/main.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjNVB6wxQzZrjDjjtSkAAABv TLSv1 ECDHE-RSA-AES256-SHA 656 11777 -% 853994 914 850249 2177 0 0 192.168.213.21 CH - [2015-05-30 12:31:20.112928] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjNVCKwxQzZrjDjiMiwAAAAH TLSv1 ECDHE-RSA-AES256-SHA 821 358 -% 807622 1715 805204 161 0 0 192.168.213.21 CH - [2015-05-30 12:31:20.112472] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjNVCKwxQzZrjDjiMisAAAAG TLSv1 ECDHE-RSA-AES256-SHA 821 358 -% 977639 1814 975060 178 0 0 192.168.213.21 CH - [2015-05-30 12:31:20.108079] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjNVCKwxQzZrjDjjtSoAAAB0 TLSv1 ECDHE-RSA-AES256-SHA 837 358 -% 1011535 2638 8264 113 0 0 192.168.213.21 CH - [2015-05-30 12:31:20.109881] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjNVCKwxQzZrjDjjtSsAAABs TLSv1 ECDHE-RSA-AES256-SHA 853 358 -% 1039280 1771 36995 88 0 0 192.168.213.21 CH - [2015-05-30 12:31:21.295100] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjNVCawxQzZrjDjjtSwAAABy TLSv1 ECDHE-RSA-AES256-SHA 646 213 -% 865940 3386 861664 197 0 0 192.168.213.21 CH - [2015-05-30 12:31:22.001184] "GET /EMail/images/active.gif HTTP/1.1" 304 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjNVCqwxQzZrjDjjtS0AAABx TLSv1 ECDHE-RSA-AES256-SHA 646 213 -% 953563 3139 949430 249 0 0 192.168.213.21 CH - [2015-05-30 12:31:41.093316] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjNVHawxQzZrjDjjtS8AAAB1 TLSv1 ECDHE-RSA-AES256-SHA 984 4257 -% 929262 8801 919199 284 0 0 192.168.213.21 CH - [2015-05-30 12:31:43.395503] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjNVH6wxQzZrjDjiMjAAAAAL TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1821189 4194 808405 3300 0 0 192.168.213.21 CH - [2015-05-30 12:31:44.834119] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjNVIKwxQzZrjDjjtTEAAAB4 TLSv1 ECDHE-RSA-AES256-SHA 952 4049 -% 819328 3504 814710 202 0 0 192.168.213.21 CH - [2015-05-30 12:31:56.737428] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjNVLKwxQzZrjDjjtTMAAAB@ TLSv1 ECDHE-RSA-AES256-SHA 856 4257 -% 971095 3658 966424 257 0 0 192.168.213.21 CH - [2015-05-30 12:31:57.990250] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "4a7439f5.52350c468e4e4" VjNVLawxQzZrjDjjtTQAAABF TLSv1 ECDHE-RSA-AES256-SHA 776 5398 -% 2502 1723 60 123 0 0 192.168.213.21 CH - [2015-05-30 12:31:59.037752] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjNVL6wxQzZrjDjjtTUAAAB7 TLSv1 ECDHE-RSA-AES256-SHA 776 11622 -% 861021 3269 854373 2702 0 0 192.168.213.21 CH - [2015-05-30 12:32:00.191599] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjNVMKwxQzZrjDjjtTcAAABC TLSv1 ECDHE-RSA-AES256-SHA 936 4049 -% 975820 1922 972985 198 0 0 192.168.213.21 CH - [2015-05-30 12:32:00.189028] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjNVMKwxQzZrjDjjtTYAAABE TLSv1 ECDHE-RSA-AES256-SHA 920 4049 -% 979184 3132 975115 144 0 0 192.168.213.21 CH - [2015-05-30 12:32:01.799320] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjNVMawxQzZrjDjjtTgAAABJ TLSv1 ECDHE-RSA-AES256-SHA 962 4049 -% 835140 2209 832010 213 0 0 192.168.76.46 CH - [2015-05-30 12:34:02.897069] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7356 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8fb79114.523426ae3c999" VjNVqqwxQzZrjDjiMkAAAAAd TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1213 11889 -% 961739 7956 949760 2677 6 0 192.168.76.46 CH - [2015-05-30 12:34:33.341963] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8fb79114.523426ae3c999" VjNVyawxQzZrjDjjtUgAAABS TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1758 4442 -% 927549 8052 916778 196 6 0 192.168.76.46 CH - [2015-05-30 12:34:34.283852] "GET /EMail/main.aspx HTTP/1.1" 200 3388 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8fb79114.523426ae3c999" VjNVyqwxQzZrjDjjtUkAAABX TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 950 3804 -% 870744 11464 854958 1871 6 0 192.168.76.46 CH - [2015-05-30 12:34:35.299941] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8fb79114.523426ae3c999" VjNVy6wxQzZrjDjjtUoAAABa TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 895 4128 -% 896371 10474 877720 6625 6 0 192.168.76.46 CH - [2015-05-30 12:34:35.337863] "GET /EMail/overview.aspx HTTP/1.1" 200 5288 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8fb79114.523426ae3c999" VjNVy6wxQzZrjDjiMkQAAAAk TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1464 5848 -% 1267685 14687 248522 2673 6 0 192.168.76.46 CH - [2015-05-30 12:34:35.337862] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8fb79114.523426ae3c999" VjNVy6wxQzZrjDjjtUwAAABZ TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1490 9317 -% 1780696 14861 757204 2744 6 0 192.168.76.46 CH - [2015-05-30 12:34:40.895725] "GET /EMail/inbox.aspx HTTP/1.1" 200 14258 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8fb79114.523426ae3c999" VjNV0KwxQzZrjDjjtU4AAABe TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 898 14739 -% 1257541 7162 242190 5516 6 0 192.168.76.46 CH - [2015-05-30 12:34:42.243738] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8fb79114.523426ae3c999" VjNV0qwxQzZrjDjjtU8AAABj TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 830 1813 -% 894917 8292 884562 176 6 0 192.168.76.46 CH - [2015-05-30 12:34:46.085855] "GET /EMail/message.aspx?&mailId=3922_2&folderId=2890_5&mailPos=0 HTTP/1.1" 200 17511 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8fb79114.523426ae3c999" VjNV1qwxQzZrjDjjtVAAAABh TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 938 18021 -% 1509657 13467 458146 34702 6 0 192.168.76.46 CH - [2015-05-30 12:36:29.709560] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8fb79114.523426ae3c999" VjNWPawxQzZrjDjjtWMAAABx TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1483 547 -% 687105 7327 677639 195 6 0 192.168.76.46 CH - [2015-05-30 12:36:30.710421] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "https://www.example.com/EMail/index.html" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8fb79114.523426ae3c999" VjNWPqwxQzZrjDjjtWUAAAB1 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 914 318 -% 909512 10240 897801 168 6 0 192.168.76.46 CH - [2015-05-30 12:36:31.638387] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "https://www.example.com/EMail/index.html" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "8fb79114.523426ae3c999" VjNWP6wxQzZrjDjjtWYAAAB3 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 896 7758 -% 843123 7404 831517 2881 6 0 192.168.213.22 CH - [2015-05-30 12:37:25.184317] "GET /EMail/moveToFolder.aspx?folderName=Inbox&mailId=3920_25&mailId=3920_19&mailId=3920_18&mailId=3920_17&mailId=3920_16&mailId=3919_43&mailId=3919_39&mailId=3920_13&mailId=3919_38&mailId=3919_37&mailId=3919_34&mailId=3919_32&mailId=3919_31&mailId=3919_30&mailId=3919_29&mailId=3919_28&mailId=3919_27&mailId=3919_26&mailId=3919_25&mailId=3920_12&mailId=3919_23&mailId=3919_21&mailId=3919_20&mailId=3920_11&mailId=3919_19&mailId=3919_18&mailId=3919_17&mailId=3919_12&mailId=3920_8&mailId=3920_7&mailId=3920_6 HTTP/1.1" 200 6380 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNWdawxQzZrjDjjtXEAAABC TLSv1 ECDHE-RSA-AES256-SHA 1272 10662 -% 1765585 16221 745208 3357 0 0 192.168.213.22 CH - [2015-05-30 12:37:36.585658] "GET /EMail/inbox.aspx HTTP/1.1" 200 7290 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNWgKwxQzZrjDjjtXMAAABG TLSv1 ECDHE-RSA-AES256-SHA 840 11558 -% 945224 3135 939130 2283 0 0 192.168.213.22 CH - [2015-05-30 12:37:42.027771] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNWhqwxQzZrjDjiMk0AAAAq TLSv1 ECDHE-RSA-AES256-SHA 856 4257 -% 881739 3621 877132 215 0 0 192.168.213.22 CH - [2015-05-30 12:37:43.178341] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNWh6wxQzZrjDjiMk4AAAAs TLSv1 ECDHE-RSA-AES256-SHA 808 4161 -% 935789 2335 932753 192 0 0 192.168.213.22 CH - [2015-05-30 12:37:45.476935] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNWiawxQzZrjDjjtXQAAABH TLSv1 ECDHE-RSA-AES256-SHA 952 4049 -% 889805 3116 885773 200 0 0 192.168.213.22 CH - [2015-05-30 12:38:59.029886] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7383 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNW06wxQzZrjDjiMlMAAAAz TLSv1 ECDHE-RSA-AES256-SHA 784 11649 -% 879142 4023 872170 2300 0 0 192.168.213.22 CH - [2015-05-30 12:39:16.877732] "GET /EMail/main.aspx HTTP/1.1" 200 3415 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNW5KwxQzZrjDjjtYIAAABd TLSv1 ECDHE-RSA-AES256-SHA 872 7670 -% 972190 3031 967102 1354 0 0 192.168.213.22 CH - [2015-05-30 12:39:18.053600] "GET /EMail/overview.aspx HTTP/1.1" 200 6446 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNW5qwxQzZrjDjjtYMAAABX TLSv1 ECDHE-RSA-AES256-SHA 757 7035 -% 1072164 1784 67772 2128 0 0 192.168.213.22 CH - [2015-05-30 12:39:18.129080] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNW5qwxQzZrjDjiMlYAAAA1 TLSv1 ECDHE-RSA-AES256-SHA 840 7990 -% 1058252 1729 46623 9368 0 0 192.168.213.22 CH - [2015-05-30 12:39:18.051745] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNW5qwxQzZrjDjiMlUAAAA0 TLSv1 ECDHE-RSA-AES256-SHA 773 9379 -% 1683044 2576 671929 3573 0 0 192.168.213.22 CH - [2015-05-30 12:39:22.874058] "GET /EMail/sent.aspx HTTP/1.1" 200 51065 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNW6qwxQzZrjDjiMlgAAAA5 TLSv1 ECDHE-RSA-AES256-SHA 550 51825 -% 2209430 2057 677518 25484 0 0 192.168.213.22 CH - [2015-05-30 12:41:11.878921] "GET /EMail/newMessage.aspx?msg=new HTTP/1.1" 200 12052 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNXV6wxQzZrjDjiMmIAAAAD TLSv1 ECDHE-RSA-AES256-SHA 757 12709 -% 852453 3556 823487 23504 3 3 192.168.213.22 CH - [2015-05-30 12:41:11.878875] "GET /EMail/tree.aspx?sNode-sharedTree=treeNewMsg HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNXV6wxQzZrjDjiMmEAAAAC TLSv1 ECDHE-RSA-AES256-SHA 773 9379 -% 1634588 3797 622772 2782 0 0 192.168.213.22 CH - [2015-05-30 12:41:12.971421] "GET /EMail/scripts/tinymce/tinymce.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNXWKwxQzZrjDjiMmMAAAAB TLSv1 ECDHE-RSA-AES256-SHA 662 213 -% 905015 4704 899405 191 0 0 192.168.213.22 CH - [2015-05-30 12:41:14.137528] "GET /EMail/scripts/tinymce/langs/de.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNXWqwxQzZrjDjiMmUAAAAL TLSv1 ECDHE-RSA-AES256-SHA 662 213 -% 1492525 2220 489536 220 0 0 192.168.213.22 CH - [2015-05-30 12:41:14.149648] "GET /EMail/scripts/tinymce/plugins/charmap/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNXWqwxQzZrjDjiMmcAAAAK TLSv1 ECDHE-RSA-AES256-SHA 885 358 -% 1637724 1949 634771 248 0 0 192.168.213.22 CH - [2015-05-30 12:41:14.106256] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNXWqwxQzZrjDjiMmQAAAAF TLSv1 ECDHE-RSA-AES256-SHA 566 3354 -% 1747357 3084 735189 8370 0 0 192.168.213.22 CH - [2015-05-30 12:41:14.147688] "GET /EMail/scripts/tinymce/themes/modern/theme.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNXWqwxQzZrjDjiMmYAAAAE TLSv1 ECDHE-RSA-AES256-SHA 885 358 -% 1953425 2634 949888 258 0 0 192.168.213.22 CH - [2015-05-30 12:41:14.150626] "GET /EMail/scripts/tinymce/plugins/print/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNXWqwxQzZrjDjiMmgAAAAG TLSv1 ECDHE-RSA-AES256-SHA 885 358 -% 2786524 1967 783936 164 0 0 192.168.213.22 CH - [2015-05-30 12:41:14.155917] "GET /EMail/scripts/tinymce/plugins/searchreplace/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNXWqwxQzZrjDjjtZUAAABu TLSv1 ECDHE-RSA-AES256-SHA 885 358 -% 2921443 2667 917559 277 0 0 192.168.213.22 CH - [2015-05-30 12:41:14.157319] "GET /EMail/scripts/tinymce/plugins/preview/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNXWqwxQzZrjDjiMmkAAAAH TLSv1 ECDHE-RSA-AES256-SHA 885 358 -% 3308418 2470 305128 275 0 0 192.168.213.22 CH - [2015-05-30 12:41:14.161054] "GET /EMail/scripts/tinymce/plugins/paste/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNXWqwxQzZrjDjjtZcAAABw TLSv1 ECDHE-RSA-AES256-SHA 885 358 -% 4141506 2127 138608 153 0 0 192.168.213.22 CH - [2015-05-30 12:41:14.159631] "GET /EMail/scripts/tinymce/plugins/hr/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNXWqwxQzZrjDjjtZYAAABv TLSv1 ECDHE-RSA-AES256-SHA 885 358 -% 4878124 3125 874284 154 0 0 192.168.213.22 CH - [2015-05-30 12:41:14.161293] "GET /EMail/scripts/tinymce/plugins/visualblocks/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNXWqwxQzZrjDjiMmoAAAAJ TLSv1 ECDHE-RSA-AES256-SHA 885 358 -% 5284430 3126 280316 156 0 0 192.168.213.22 CH - [2015-05-30 12:41:14.162402] "GET /EMail/scripts/tinymce/plugins/insertdatetime/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNXWqwxQzZrjDjiMmsAAAAI TLSv1 ECDHE-RSA-AES256-SHA 885 358 -% 6011504 2512 8293 190 0 0 192.168.213.22 CH - [2015-05-30 12:41:14.171092] "GET /EMail/scripts/tinymce/plugins/fullpage/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNXWqwxQzZrjDjjtZgAAABl TLSv1 ECDHE-RSA-AES256-SHA 885 358 -% 6369988 1750 367532 157 0 0 192.168.213.22 CH - [2015-05-30 12:41:15.673531] "GET /EMail/scripts/tinymce/plugins/image/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNXW6wxQzZrjDjiMmwAAAAP TLSv1 ECDHE-RSA-AES256-SHA 678 213 -% 5238048 3162 233850 380 0 0 192.168.213.22 CH - [2015-05-30 12:41:15.846858] "GET /EMail/scripts/tinymce/plugins/table/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNXW6wxQzZrjDjiMm0AAAAM TLSv1 ECDHE-RSA-AES256-SHA 678 213 -% 5166335 3129 162342 174 0 0 192.168.213.22 CH - [2015-05-30 12:41:15.938078] "GET /EMail/scripts/tinymce/plugins/anchor/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNXW6wxQzZrjDjjtZkAAAB0 TLSv1 ECDHE-RSA-AES256-SHA 885 358 -% 5290586 2920 286788 205 0 0 192.168.213.22 CH - [2015-05-30 12:41:16.173837] "GET /EMail/scripts/tinymce/plugins/link/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNXXKwxQzZrjDjiMm4AAAAQ TLSv1 ECDHE-RSA-AES256-SHA 885 358 -% 5228118 3180 224035 256 0 0 192.168.213.22 CH - [2015-05-30 12:41:16.727096] "GET /EMail/scripts/tinymce/plugins/textcolor/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNXXKwxQzZrjDjjtZoAAABs TLSv1 ECDHE-RSA-AES256-SHA 885 358 -% 4757042 2004 754391 153 0 0 192.168.213.22 CH - [2015-05-30 12:41:16.737306] "GET /EMail/scripts/tinymce/plugins/visualchars/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNXXKwxQzZrjDjiMm8AAAAR TLSv1 ECDHE-RSA-AES256-SHA 885 358 -% 4919407 3172 915444 174 0 0 192.168.213.22 CH - [2015-05-30 12:41:21.735406] "GET /EMail/scripts/tinymce/skins/lightgray/skin.min.css HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNXYawxQzZrjDjiMnEAAAAV TLSv1 ECDHE-RSA-AES256-SHA 662 213 -% 940888 3277 936816 155 0 0 192.168.213.22 CH - [2015-05-30 12:41:21.767971] "GET /EMail/scripts/tinymce/skins/lightgray/content.min.css HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNXYawxQzZrjDjjtZsAAAB8 TLSv1 ECDHE-RSA-AES256-SHA 662 213 -% 947152 2773 943552 226 0 0 192.168.213.22 CH - [2015-05-30 12:41:21.763518] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5471 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNXYawxQzZrjDjiMnIAAAAU TLSv1 ECDHE-RSA-AES256-SHA 550 7314 -% 1164438 2201 0 0 0 0 192.168.213.22 CH - [2015-05-30 12:41:22.769528] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce.eot? HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNXYqwxQzZrjDjjtZwAAABz TLSv1 ECDHE-RSA-AES256-SHA 678 213 -% 1008431 2922 4774 109 0 0 192.168.213.22 CH - [2015-05-30 12:41:22.762806] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce-small.eot? HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNXYqwxQzZrjDjiMnMAAAAZ TLSv1 ECDHE-RSA-AES256-SHA 694 213 -% 1021403 3606 16632 126 0 0 192.168.192.35 CH - [2015-05-30 12:41:23.594331] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNXY6wxQzZrjDjiMnQAAAAW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1132 4620 56% 750655 2709 746967 178 0 0 192.168.192.35 CH - [2015-05-30 12:41:23.592505] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNXY6wxQzZrjDjjtZ0AAABx TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1132 5902 22% 827891 3170 823367 216 0 0 192.168.192.35 CH - [2015-05-30 12:41:23.601992] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNXY6wxQzZrjDjjtZ8AAAB3 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1090 5593 -% 1057760 2894 54085 133 0 0 192.168.192.35 CH - [2015-05-30 12:41:23.594806] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNXY6wxQzZrjDjjtZ4AAAB1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1122 11687 22% 1076988 2669 70339 197 0 0 192.168.192.35 CH - [2015-05-30 12:41:23.594724] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNXY6wxQzZrjDjiMnUAAAAY TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1127 8122 23% 1083601 3672 78330 146 0 0 192.168.192.35 CH - [2015-05-30 12:41:24.703345] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNXZKwxQzZrjDjjtaAAAAB2 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 507 1685 -% 738985 2720 735267 269 0 0 192.168.192.35 CH - [2015-05-30 12:41:24.738578] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/css/NNstyle.css" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNXZKwxQzZrjDjiMncAAAAa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 476 1792 -% 926141 1671 923723 221 0 0 192.168.192.35 CH - [2015-05-30 12:41:31.047422] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNXa6wxQzZrjDjjtaEAAAB4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1338 4447 -% 975764 4818 969951 188 0 0 192.168.192.35 CH - [2015-05-30 12:41:32.034800] "GET /EMail/main.aspx HTTP/1.1" 200 3383 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNXbKwxQzZrjDjjtaMAAAB9 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 3799 -% 824341 2508 819351 1862 0 0 192.168.192.35 CH - [2015-05-30 12:41:32.949793] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNXbKwxQzZrjDjjtaQAAAB@ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 4128 -% 1001517 3070 989781 7950 0 0 192.168.192.35 CH - [2015-05-30 12:41:32.981664] "GET /EMail/overview.aspx HTTP/1.1" 200 5288 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNXbKwxQzZrjDjjtaUAAABA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1134 9736 -% 1084716 1624 78465 4061 0 0 192.168.192.35 CH - [2015-05-30 12:41:32.987053] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNXbKwxQzZrjDjjtaYAAABF TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1160 13205 -% 1612439 3508 599449 4347 0 0 192.168.192.35 CH - [2015-05-30 12:41:34.103743] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNXbqwxQzZrjDjjtagAAAB7 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 476 1248 -% 808761 2885 805033 158 0 0 192.168.192.35 CH - [2015-05-30 12:41:34.648387] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNXbqwxQzZrjDjjtakAAAB- TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 518 1260 -% 829146 1959 826283 241 0 0 192.168.192.35 CH - [2015-05-30 12:41:40.804032] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/css/NNstyle.css" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNXdKwxQzZrjDjjtaoAAABC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1116 6114 -% 861548 3939 856662 177 0 0 192.168.192.35 CH - [2015-05-30 12:41:41.235969] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNXdawxQzZrjDjjtasAAABE TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1153 4435 -% 556720 2319 553596 185 0 0 192.168.192.35 CH - [2015-05-30 12:41:41.804224] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNXdawxQzZrjDjjta0AAABG TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 492 676 75% 790330 2904 786541 200 0 0 192.168.192.35 CH - [2015-05-30 12:41:42.644521] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 - - + "955160bb.52350e823588b" VjNXdqwxQzZrjDjjta4AAABJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 389 1554 -% 2242 1491 53 110 0 0 192.168.192.35 CH - [2015-05-30 12:41:42.662677] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNXdqwxQzZrjDjjta8AAABH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 458 318 -% 941390 3098 937404 231 0 0 192.168.192.35 CH - [2015-05-30 12:41:43.620449] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNXd6wxQzZrjDjjtbAAAABO TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 440 7758 -% 834911 2842 829185 2225 0 0 192.168.213.22 CH - [2015-05-30 12:45:33.196466] "GET /EMail/attachost.aspx HTTP/1.1" 200 4989 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNYXawxQzZrjDjjtc8AAABq TLSv1 ECDHE-RSA-AES256-SHA 784 9249 -% 965200 1967 961144 1543 0 0 192.168.213.22 CH - [2015-05-30 12:46:02.580810] "GET /EMail/attachost.aspx HTTP/1.1" 200 4989 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNYeqwxQzZrjDjjtdIAAABu TLSv1 ECDHE-RSA-AES256-SHA 792 9254 -% 853701 2001 849543 1602 0 0 192.168.213.22 CH - [2015-05-30 12:46:09.282670] "GET /EMail/attachost.aspx HTTP/1.1" 200 6409 "https://www.example.com/EMail/attachments.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNYgawxQzZrjDjjtdQAAABv TLSv1 ECDHE-RSA-AES256-SHA 840 10662 -% 877133 2006 872472 2078 0 0 192.168.213.22 CH - [2015-05-30 12:46:25.109308] "GET /EMail/tree.aspx?sNode-sharedTree=treeSent HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNYkawxQzZrjDjiMo8AAAA1 TLSv1 ECDHE-RSA-AES256-SHA 773 9363 -% 1638915 4180 626680 3054 0 0 192.168.213.22 CH - [2015-05-30 12:46:25.175827] "GET /EMail/sent.aspx?dir=desc HTTP/1.1" 200 50972 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNYkawxQzZrjDjiMpAAAAAv TLSv1 ECDHE-RSA-AES256-SHA 840 55581 -% 2265165 4595 751299 15552 0 0 192.168.213.22 CH - [2015-05-30 12:46:37.380049] "GET /EMail/message.aspx?&mailId=3924_5&folderId=1001_10&mailPos=0 HTTP/1.1" 200 11620 "https://www.example.com/EMail/sent.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNYnawxQzZrjDjjtdgAAABz TLSv1 ECDHE-RSA-AES256-SHA 888 15968 -% 1295120 4874 270061 19095 0 0 192.168.213.22 CH - [2015-05-30 12:50:38.448901] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7290 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNZjqwxQzZrjDjjtfYAAABY TLSv1 ECDHE-RSA-AES256-SHA 832 11553 -% 1159246 2031 150765 5524 0 0 192.168.213.22 CH - [2015-05-30 12:50:38.447594] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNZjqwxQzZrjDjiMqcAAAAJ TLSv1 ECDHE-RSA-AES256-SHA 848 13065 -% 1388379 2622 378230 2718 0 0 192.168.192.35 CH - [2015-05-30 13:00:36.077390] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNb5KwxQzZrjDjiMtwAAAAK TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 849 11799 -% 877785 3976 864593 8524 0 0 192.168.192.35 CH - [2015-05-30 13:00:43.625021] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNb66wxQzZrjDjjtj0AAABb TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1263 564 -% 934212 5348 927884 261 0 0 192.168.192.35 CH - [2015-05-30 13:00:44.576335] "GET /EMail/main.aspx HTTP/1.1" 200 3383 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNb7KwxQzZrjDjjtj4AAABe TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 3799 -% 863308 2442 858281 1878 0 0 192.168.192.35 CH - [2015-05-30 13:00:45.528968] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNb7awxQzZrjDjjtj8AAABj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 4128 -% 1171920 1885 161985 7517 0 0 192.168.192.35 CH - [2015-05-30 13:00:45.558554] "GET /EMail/overview.aspx HTTP/1.1" 200 5288 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNb7awxQzZrjDjiMt8AAAAE TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1059 5853 -% 1278873 1821 274880 1710 0 0 192.168.192.35 CH - [2015-05-30 13:00:45.775342] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNb7awxQzZrjDjjtkAAAABh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1085 9322 -% 1670227 2519 659563 3049 0 0 192.168.192.35 CH - [2015-05-30 13:00:48.865353] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNb8KwxQzZrjDjjtkEAAABc TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 511 409 -% 1037533 3455 33220 152 0 0 192.168.192.35 CH - [2015-05-30 13:00:49.956417] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNb8awxQzZrjDjjtkIAAABg TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 458 318 -% 991081 3624 986360 167 0 0 192.168.192.35 CH - [2015-05-30 13:00:50.960591] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNb8qwxQzZrjDjjtkMAAABi TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 440 7758 -% 556452 3037 549132 3511 0 0 192.168.192.35 CH - [2015-05-30 13:10:43.895327] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNeQ6wxQzZrjDjiMwUAAAAy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 849 11799 -% 1040076 3332 32340 3650 0 0 192.168.186.76 CH - [2015-05-30 13:15:27.592889] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNfX6wxQzZrjDjjtrcAAABX TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 12038 -% 1052694 6350 41333 3600 3 0 192.168.186.76 CH - [2015-05-30 13:15:28.676186] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNfYKwxQzZrjDjjtrgAAABV TLSv1.2 ECDHE-RSA-AES256-SHA384 662 7866 -% 815693 6458 804564 2976 3 0 192.168.186.76 CH - [2015-05-30 13:15:32.887565] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNfZKwxQzZrjDjjtrsAAABb TLSv1.2 ECDHE-RSA-AES256-SHA384 822 469 -% 959975 5177 953098 162 3 0 192.168.186.76 CH - [2015-05-30 13:15:33.861456] "GET /EMail/main.aspx HTTP/1.1" 200 3391 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNfZawxQzZrjDjjtrwAAABe TLSv1.2 ECDHE-RSA-AES256-SHA384 678 3898 -% 914890 7173 902837 2870 3 0 192.168.186.76 CH - [2015-05-30 13:15:34.823597] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNfZqwxQzZrjDjjtr0AAABj TLSv1.2 ECDHE-RSA-AES256-SHA384 662 4234 -% 922877 6305 908471 6737 3 0 192.168.186.76 CH - [2015-05-30 13:17:15.310456] "GET /EMail/newMessage.aspx?action=reply&mailId=3925_3&folderId=947_65&showPics=false HTTP/1.1" 200 22874 "https://www.example.com/EMail/message.aspx?&mailId=3925_3&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNfy6wxQzZrjDjjtswAAABy TLSv1.2 ECDHE-RSA-AES256-SHA384 1367 27786 -% 1426386 9046 369009 44276 6 3 192.168.186.76 CH - [2015-05-30 13:17:16.901641] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5871 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3925_3&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNfzKwxQzZrjDjiMykAAAAX TLSv1.2 ECDHE-RSA-AES256-SHA384 1303 13726 -% 582354 4180 0 0 3 0 192.168.186.76 CH - [2015-05-30 13:17:16.816733] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3925_3&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNfzKwxQzZrjDjjts0AAABw TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 1106888 7164 89378 8289 3 0 192.168.186.76 CH - [2015-05-30 13:17:30.970100] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3925_3&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNf2qwxQzZrjDjjttAAAAB0 TLSv1.2 ECDHE-RSA-AES256-SHA384 7985 630 -% 1680419 382107 277422 164 86 0 192.168.186.76 CH - [2015-05-30 13:17:32.662228] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3925_3&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNf3KwxQzZrjDjjttIAAAB8 TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 849804 5935 830374 11543 3 0 192.168.186.76 CH - [2015-05-30 13:17:39.207212] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNf46wxQzZrjDjjttMAAABz TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1580773 9970 562203 2683 3 0 192.168.186.76 CH - [2015-05-30 13:17:43.236500] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNf56wxQzZrjDjjttYAAAB1 TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1199863 12908 184458 258 3 0 192.168.186.76 CH - [2015-05-30 13:17:44.448290] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8461 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNf6KwxQzZrjDjjttcAAAB2 TLSv1.2 ECDHE-RSA-AES256-SHA384 726 9055 -% 1005409 6920 992197 4220 3 0 192.168.186.76 CH - [2015-05-30 13:17:46.337488] "GET /EMail/message.aspx?&mailId=3925_2&folderId=947_65&mailPos=0 HTTP/1.1" 200 16404 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNf6qwxQzZrjDjjttgAAAB5 TLSv1.2 ECDHE-RSA-AES256-SHA384 726 17161 -% 2732146 5026 691052 33318 3 0 192.168.186.76 CH - [2015-05-30 13:17:51.755113] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3925_2&folderId=947_65&attachmentId=3&token=114735643560241741E18 HTTP/1.1" 200 1475739 "https://www.example.com/EMail/message.aspx?&mailId=3925_2&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNf76wxQzZrjDjjttoAAAB9 TLSv1.2 ECDHE-RSA-AES256-SHA384 806 1555720 -% 1812397 6251 259491 266 3 0 192.168.186.76 CH - [2015-05-30 13:18:19.618870] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNgC6wxQzZrjDjjtuAAAAB- TLSv1.2 ECDHE-RSA-AES256-SHA384 1261 13742 -% 1130528 7515 111855 4531 3 0 192.168.186.76 CH - [2015-05-30 13:18:22.903406] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNgDqwxQzZrjDjjtuEAAAB6 TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1090174 8254 79724 151 3 0 192.168.186.76 CH - [2015-05-30 13:18:24.005993] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7290 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNgEKwxQzZrjDjjtuIAAABC TLSv1.2 ECDHE-RSA-AES256-SHA384 726 7802 -% 1056068 4700 45745 3736 3 0 192.168.68.85 CH - [2015-05-30 13:25:00.267088] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "18bf0584.5234fe0ec39b6" VjNhnKwxQzZrjDjjtxkAAAB9 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1195 559 -% 1065138 5290 59067 149 0 0 192.168.68.85 CH - [2015-05-30 13:25:01.351200] "GET /EMail/main.aspx HTTP/1.1" 200 3392 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "18bf0584.5234fe0ec39b6" VjNhnawxQzZrjDjjtxoAAAB@ TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 484 3808 -% 994206 2906 989424 1157 0 0 192.168.68.85 CH - [2015-05-30 13:25:02.428898] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "18bf0584.5234fe0ec39b6" VjNhnqwxQzZrjDjjtxsAAABA TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 485 4128 -% 1080721 2901 69621 7380 0 0 192.168.68.85 CH - [2015-05-30 13:25:02.469397] "GET /EMail/overview.aspx HTTP/1.1" 200 5283 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "18bf0584.5234fe0ec39b6" VjNhnqwxQzZrjDjjtx0AAAB7 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1054 5843 -% 2024174 3480 15701 4209 0 0 192.168.68.85 CH - [2015-05-30 13:25:02.466572] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "18bf0584.5234fe0ec39b6" VjNhnqwxQzZrjDjjtxwAAABF TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1080 9317 -% 2077255 4282 63088 4532 0 0 192.168.68.85 CH - [2015-05-30 13:25:05.626789] "GET /EMail/inbox.aspx HTTP/1.1" 200 13128 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "18bf0584.5234fe0ec39b6" VjNhoawxQzZrjDjjtyAAAABG TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 488 13609 -% 1164583 3085 156085 3985 0 0 192.168.68.85 CH - [2015-05-30 13:25:08.992283] "GET /EMail/message.aspx?&mailId=3924_1&folderId=3481_26&mailPos=0 HTTP/1.1" 200 12590 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "18bf0584.5234fe0ec39b6" VjNhpKwxQzZrjDjjtyMAAABK TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 529 13071 -% 1454590 4908 427834 20823 0 0 192.168.68.85 CH - [2015-05-30 13:25:47.151274] "GET /EMail/newMessage.aspx?action=reply&mailId=3924_1&folderId=3481_26&showPics=false HTTP/1.1" 200 14026 "https://www.example.com/EMail/message.aspx?&mailId=3924_1&folderId=3481_26&mailPos=0" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "18bf0584.5234fe0ec39b6" VjNhy6wxQzZrjDjiM0gAAAA5 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1160 14645 -% 1565980 3392 536250 24481 3 3 192.168.68.85 CH - [2015-05-30 13:25:48.811900] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2942 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3924_1&folderId=3481_26&showPics=false" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "18bf0584.5234fe0ec39b6" VjNhzKwxQzZrjDjiM0kAAAA4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 557 3335 -% 1021523 1844 13864 5288 0 0 192.168.68.85 CH - [2015-05-30 13:25:49.000619] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5879 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3924_1&folderId=3481_26&showPics=false" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "18bf0584.5234fe0ec39b6" VjNhzawxQzZrjDjjtyoAAABN TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1084 7669 -% 970806 3705 0 0 0 0 192.168.186.76 CH - [2015-05-30 13:26:50.509145] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNiCqwxQzZrjDjjtzQAAABe TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1305796 10405 283737 4666 3 0 192.168.186.76 CH - [2015-05-30 13:26:55.401808] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7290 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNiD6wxQzZrjDjjtzYAAABh TLSv1.2 ECDHE-RSA-AES256-SHA384 662 7802 -% 1182105 6666 169500 3765 3 0 192.168.186.76 CH - [2015-05-30 13:27:10.016270] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7290 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNiHqwxQzZrjDjjtzkAAABi TLSv1.2 ECDHE-RSA-AES256-SHA384 1180 7963 -% 1178231 7055 163088 5719 3 0 192.168.186.76 CH - [2015-05-30 13:27:23.774261] "GET /EMail/overview.aspx HTTP/1.1" 200 5537 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjNiK6wxQzZrjDjjtz0AAABk TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 10134 -% 1107236 5792 98217 1803 3 0 192.168.192.35 CH - [2015-05-30 13:27:46.561664] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNiQqwxQzZrjDjjt0IAAABt TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1338 4447 -% 1085919 5002 79925 190 0 0 192.168.192.35 CH - [2015-05-30 13:27:47.670340] "GET /EMail/main.aspx HTTP/1.1" 200 3383 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNiQ6wxQzZrjDjjt0MAAABu TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 3799 -% 990491 3099 984739 1869 0 0 192.168.192.35 CH - [2015-05-30 13:27:48.735788] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNiRKwxQzZrjDjjt0QAAABy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 4128 -% 1013506 2127 1226 9657 0 0 192.168.192.35 CH - [2015-05-30 13:27:48.790972] "GET /EMail/overview.aspx HTTP/1.1" 200 5288 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNiRKwxQzZrjDjjt0UAAABv TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1134 9736 -% 1368183 1820 362946 2828 0 0 192.168.192.35 CH - [2015-05-30 13:27:48.797555] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNiRKwxQzZrjDjjt0YAAABw TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1160 13205 -% 1878133 2174 866861 4444 0 0 192.168.192.35 CH - [2015-05-30 13:27:53.405388] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNiSawxQzZrjDjjt0cAAABl TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 511 409 -% 971484 3473 966856 186 0 0 192.168.192.35 CH - [2015-05-30 13:27:54.440402] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNiSqwxQzZrjDjjt0gAAABs TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 458 318 -% 785516 2234 782555 178 0 0 192.168.192.35 CH - [2015-05-30 13:27:55.239270] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNiS6wxQzZrjDjjt0kAAAB0 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 440 7758 -% 957251 2786 949895 3821 0 0 192.168.68.85 CH - [2015-05-30 13:29:12.936222] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3924_1&folderId=3481_26&showPics=false" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "18bf0584.5234fe0ec39b6" VjNimKwxQzZrjDjjt1cAAABE TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 4531 553 -% 1376049 106190 266942 181 23 0 192.168.68.85 CH - [2015-05-30 13:29:14.335293] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4025 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3924_1&folderId=3481_26&showPics=false" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "18bf0584.5234fe0ec39b6" VjNimqwxQzZrjDjjt1gAAABA TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 632 4447 -% 664991 5369 647315 11744 0 0 192.168.68.85 CH - [2015-05-30 13:29:18.273632] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "18bf0584.5234fe0ec39b6" VjNinqwxQzZrjDjjt1kAAAB7 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 506 409 -% 970415 2246 967550 143 0 0 192.168.68.85 CH - [2015-05-30 13:29:19.288554] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "18bf0584.5234fe0ec39b6" VjNin6wxQzZrjDjjt1oAAABF TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 487 676 75% 990374 2542 986853 287 0 0 192.168.68.85 CH - [2015-05-30 13:29:20.340773] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 - - + "ca42faf0.5235193ab1b25" VjNioKwxQzZrjDjjt1sAAABG TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 310 1627 -% 1243 548 42 97 0 0 192.168.68.85 CH - [2015-05-30 13:29:20.357097] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "18bf0584.5234fe0ec39b6" VjNioKwxQzZrjDjjt1wAAABJ TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 453 318 -% 791246 3684 786666 240 0 0 192.168.68.85 CH - [2015-05-30 13:29:21.168596] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "18bf0584.5234fe0ec39b6" VjNioawxQzZrjDjjt14AAABL TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 435 7758 -% 891521 2863 884338 3604 0 0 192.168.192.35 CH - [2015-05-30 13:31:52.654947] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNjOKwxQzZrjDjjt3YAAABf TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1123 11799 -% 857553 2964 850257 3639 0 0 192.168.192.35 CH - [2015-05-30 13:32:00.366866] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNjQKwxQzZrjDjjt3kAAABo TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1335 4473 -% 955173 5577 948750 139 0 0 192.168.192.35 CH - [2015-05-30 13:32:01.351340] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7524 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNjQawxQzZrjDjjt3oAAABr TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 556 7946 -% 945414 2542 923113 19093 0 0 192.168.192.35 CH - [2015-05-30 13:32:09.315174] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNjSawxQzZrjDjjt30AAABt TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1322 4447 -% 1023271 4816 17643 144 0 0 192.168.192.35 CH - [2015-05-30 13:32:10.364028] "GET /EMail/main.aspx HTTP/1.1" 200 3383 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNjSqwxQzZrjDjjt34AAABu TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 514 3799 -% 773654 3064 767918 1909 0 0 192.168.192.35 CH - [2015-05-30 13:32:11.196872] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNjS6wxQzZrjDjjt38AAABy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 4128 -% 759949 2935 749332 7001 0 0 192.168.192.35 CH - [2015-05-30 13:32:11.233797] "GET /EMail/overview.aspx HTTP/1.1" 200 5289 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNjS6wxQzZrjDjjt4AAAABw TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1134 9737 -% 1189090 2728 183780 1902 0 0 192.168.192.35 CH - [2015-05-30 13:32:11.237248] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNjS6wxQzZrjDjjt4EAAABv TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1160 13205 -% 1591858 3717 576833 5212 0 0 192.168.192.35 CH - [2015-05-30 13:32:13.958083] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNjTawxQzZrjDjjt4MAAABs TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 511 409 -% 826972 3480 822607 190 0 0 192.168.192.35 CH - [2015-05-30 13:32:14.842435] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNjTqwxQzZrjDjjt4QAAAB0 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 458 318 -% 897968 3785 893367 143 0 0 192.168.192.35 CH - [2015-05-30 13:32:15.751696] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNjT6wxQzZrjDjjt4YAAABz TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 440 7758 -% 958414 2891 949767 5060 0 0 192.168.192.35 CH - [2015-05-30 13:41:35.095125] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNlf6wxQzZrjDjjt9oAAABP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1338 4447 -% 1001082 3949 0 157 0 0 192.168.192.35 CH - [2015-05-30 13:41:36.122226] "GET /EMail/main.aspx HTTP/1.1" 200 3383 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNlgKwxQzZrjDjjt9sAAABT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 3799 -% 883795 3136 877651 2275 0 0 192.168.192.35 CH - [2015-05-30 13:41:37.069224] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNlgawxQzZrjDjjt9wAAABN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 4128 -% 935525 4380 922870 7338 0 0 192.168.192.35 CH - [2015-05-30 13:41:37.113172] "GET /EMail/overview.aspx HTTP/1.1" 200 5288 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNlgawxQzZrjDjiM34AAAAy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1134 9736 -% 1092565 2338 86347 3201 0 0 192.168.192.35 CH - [2015-05-30 13:41:37.116995] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNlgawxQzZrjDjjt90AAABR TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1160 13205 -% 1841413 2259 829067 5575 0 0 192.168.192.35 CH - [2015-05-30 13:41:40.107645] "GET /EMail/inbox.aspx HTTP/1.1" 200 8577 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNlhKwxQzZrjDjjt94AAABU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 493 9028 -% 1019685 2267 13460 3136 0 0 192.168.192.35 CH - [2015-05-30 13:41:41.187783] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNlhawxQzZrjDjjt@EAAABY TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 471 527 -% 646586 2849 642826 182 0 0 192.168.192.35 CH - [2015-05-30 13:41:41.187307] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNlhawxQzZrjDjjt@AAAABM TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 468 539 -% 1013296 3028 9438 152 0 0 192.168.192.35 CH - [2015-05-30 13:41:41.191712] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNlhawxQzZrjDjiM38AAAAx TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 471 1813 -% 1106154 2692 102735 137 0 0 192.168.192.35 CH - [2015-05-30 13:41:45.462084] "GET /EMail/message.aspx?&mailId=3924_10&folderId=540_81&mailPos=0 HTTP/1.1" 200 11184 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNliawxQzZrjDjjt@MAAABd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 534 11665 -% 1268790 3126 241724 22975 0 0 192.168.192.35 CH - [2015-05-30 13:41:48.414275] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3924_10&folderId=540_81&attachmentId=2&token=178464931848106675E18 HTTP/1.1" 200 58978 "https://www.example.com/EMail/message.aspx?&mailId=3924_10&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNljKwxQzZrjDjjt@QAAABS TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 640 60644 -% 1006587 5548 990924 149 0 0 192.168.192.35 CH - [2015-05-30 13:43:37.036656] "POST /EMail/MailHandler HTTP/1.1" 503 4504 "https://www.example.com/EMail/message.aspx?&mailId=3924_10&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - - "955160bb.52350e823588b" VjNl@awxQzZrjDjjt-gAAABu TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1383 8955 -% 6516 4041 0 0 0 0 192.168.192.35 CH - [2015-05-30 13:43:37.125765] "GET /EMail/MailHandler HTTP/1.1" 503 4504 "https://www.example.com/EMail/MailHandler" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - - "955160bb.52350e823588b" VjNl@awxQzZrjDjjt-kAAABy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1142 8955 -% 4254 1916 0 0 0 0 192.168.192.35 CH - [2015-05-30 13:43:37.293375] "GET /errordocuments/logo_d.png HTTP/1.1" 200 7515 "https://www.example.com/EMail/MailHandler" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 - - + "955160bb.52350e823588b" VjNl@awxQzZrjDjiM4MAAAA2 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1070 11943 -% 2764 1806 61 126 0 0 192.168.192.35 CH - [2015-05-30 13:43:38.320519] "GET /EMail/favicon.ico HTTP/1.1" 503 4504 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - - "955160bb.52350e823588b" VjNl@qwxQzZrjDjjt-oAAABw TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1084 8955 -% 4443 1957 0 0 0 0 192.168.192.35 CH - [2015-05-30 13:43:38.342867] "GET /EMail/favicon.ico HTTP/1.1" 503 4504 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - - "955160bb.52350e823588b" VjNl@qwxQzZrjDjiM4QAAAA0 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 442 4930 -% 4203 2171 0 0 0 0 192.168.192.35 CH - [2015-05-30 13:43:46.505966] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 503 4504 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - - "955160bb.52350e823588b" VjNmAqwxQzZrjDjiM4UAAAA3 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1123 8955 -% 14869 3903 0 0 0 0 192.168.192.35 CH - [2015-05-30 13:43:51.246149] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 503 4504 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - - "955160bb.52350e823588b" VjNmB6wxQzZrjDjjt-0AAABs TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1123 8955 -% 8907 5853 0 0 0 0 192.168.192.35 CH - [2015-05-30 13:43:54.882560] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNmCqwxQzZrjDjjt-8AAAB0 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1123 11799 -% 1339361 2687 333147 2949 0 0 192.168.192.35 CH - [2015-05-30 13:44:03.428002] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNmE6wxQzZrjDjjuAAAAABz TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1338 4447 -% 1005369 4330 122 179 0 0 192.168.192.35 CH - [2015-05-30 13:44:04.445292] "GET /EMail/main.aspx HTTP/1.1" 200 3383 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNmFKwxQzZrjDjjuAIAAAB3 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 3799 -% 993632 1918 989256 1840 0 0 192.168.192.35 CH - [2015-05-30 13:44:05.544794] "GET /EMail/overview.aspx HTTP/1.1" 200 5288 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNmFawxQzZrjDjjuAUAAAB1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1134 9736 -% 915718 2047 910309 2521 0 0 192.168.192.35 CH - [2015-05-30 13:44:05.501390] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNmFawxQzZrjDjjuAMAAAB2 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 4128 -% 969888 2849 956333 10147 0 0 192.168.192.35 CH - [2015-05-30 13:44:05.540846] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNmFawxQzZrjDjjuAQAAAB4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1160 13205 -% 1980756 4513 962285 4540 0 0 192.168.192.35 CH - [2015-05-30 13:44:09.506471] "GET /EMail/inbox.aspx HTTP/1.1" 200 8569 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNmGawxQzZrjDjjuAYAAAB5 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 493 9020 -% 1824335 2970 816102 4389 0 0 192.168.192.35 CH - [2015-05-30 13:44:11.378018] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNmG6wxQzZrjDjjuAcAAABB TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 471 1878 -% 694401 2933 690713 141 0 0 192.168.192.35 CH - [2015-05-30 13:44:14.668000] "GET /EMail/message.aspx?&mailId=3924_10&folderId=540_81&mailPos=0 HTTP/1.1" 200 11180 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNmHqwxQzZrjDjjuAoAAAB- TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 534 11661 -% 1373727 3620 343824 25054 0 0 192.168.192.35 CH - [2015-05-30 13:44:14.903350] "GET /EMail/message.aspx?&mailId=3924_10&folderId=540_81&mailPos=0 HTTP/1.1" 200 11115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNmHqwxQzZrjDjjuAsAAAB6 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1176 15622 -% 1326734 3074 304098 18596 0 0 192.168.192.35 CH - [2015-05-30 13:44:17.864977] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3924_10&folderId=540_81&attachmentId=2&token=56307126251116902E18 HTTP/1.1" 200 58978 "https://www.example.com/EMail/message.aspx?&mailId=3924_10&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNmIawxQzZrjDjjuAwAAABC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 639 60644 -% 1317909 3936 271884 179 0 0 192.168.192.35 CH - [2015-05-30 13:44:18.061358] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3924_10&folderId=540_81&attachmentId=2&token=56307126251116902E18 HTTP/1.1" 200 58978 "https://www.example.com/EMail/message.aspx?&mailId=3924_10&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNmIqwxQzZrjDjjuA0AAABA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1281 64670 -% 1184772 6212 165906 118 0 0 192.168.192.35 CH - [2015-05-30 13:44:30.597044] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3924_10&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNmLqwxQzZrjDjjuBAAAABO TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1384 4382 -% 1267762 4453 262406 179 0 0 192.168.192.35 CH - [2015-05-30 13:44:31.890875] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7278 "https://www.example.com/EMail/message.aspx?&mailId=3924_10&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNmL6wxQzZrjDjjuBEAAABJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 558 7700 -% 1405600 3918 396880 4084 0 0 192.168.192.35 CH - [2015-05-30 13:44:35.924293] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNmM6wxQzZrjDjjuBQAAABH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 511 409 -% 885745 4055 880844 168 0 0 192.168.192.35 CH - [2015-05-30 13:44:36.858704] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNmNKwxQzZrjDjjuBUAAABK TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 458 318 -% 906442 2908 902753 176 0 0 192.168.192.35 CH - [2015-05-30 13:44:37.776090] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNmNawxQzZrjDjjuBYAAABI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 440 7758 -% 1049937 3088 42877 3270 0 0 192.168.192.35 CH - [2015-05-30 13:48:55.407015] "GET /EMail/overview.aspx HTTP/1.1" 200 5288 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNnN6wxQzZrjDjiM5YAAAAN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1059 5853 -% 1024145 1940 19897 1770 0 0 192.168.192.35 CH - [2015-05-30 13:48:55.439342] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNnN6wxQzZrjDjjuD8AAAB1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1085 9322 -% 1720446 3709 706893 3933 0 0 192.168.192.35 CH - [2015-05-30 13:48:59.132143] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNnO6wxQzZrjDjjuEEAAAB4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 458 318 -% 885744 3989 880687 233 0 0 192.168.192.35 CH - [2015-05-30 13:50:16.897872] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "346f8ab.52351de8166a9" VjNniKwxQzZrjDjiM6IAAAAU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1089 5902 22% 844133 2903 840081 219 0 0 192.168.192.35 CH - [2015-05-30 13:50:16.900719] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "346f8ab.52351de8166a9" VjNniKwxQzZrjDjjuEkAAAB7 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1114 11687 22% 1158188 1768 153904 160 0 0 192.168.192.35 CH - [2015-05-30 13:50:16.900544] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "346f8ab.52351de8166a9" VjNniKwxQzZrjDjiM6MAAAAX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1128 5711 -% 1347860 2844 344400 151 0 0 192.168.192.35 CH - [2015-05-30 13:50:16.900587] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "346f8ab.52351de8166a9" VjNniKwxQzZrjDjjuEgAAABA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1089 4620 56% 1410415 3281 406243 119 0 0 192.168.192.35 CH - [2015-05-30 13:50:16.927004] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "346f8ab.52351de8166a9" VjNniKwxQzZrjDjjuEoAAABF TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1119 8122 23% 1384210 2126 380698 117 0 0 192.168.192.35 CH - [2015-05-30 13:50:18.370936] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "346f8ab.52351de8166a9" VjNniqwxQzZrjDjjuEwAAABO TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 1792 -% 439822 2230 436414 222 0 0 192.168.192.35 CH - [2015-05-30 13:50:18.915818] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "97071f77.52351deaf6fea" VjNniqwxQzZrjDjjuE4AAABJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 880 5756 -% 910182 626 908595 341 0 0 192.168.192.35 CH - [2015-05-30 13:50:25.878224] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "346f8ab.52351de8166a9" VjNnkawxQzZrjDjjuE8AAABD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1130 6114 -% 648278 2613 644791 269 0 0 192.168.192.35 CH - [2015-05-30 13:50:26.658625] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "346f8ab.52351de8166a9" VjNnkqwxQzZrjDjjuFAAAABK TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1297 4447 -% 1020333 3456 15953 223 0 0 192.168.192.35 CH - [2015-05-30 13:50:27.689723] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "346f8ab.52351de8166a9" VjNnk6wxQzZrjDjjuFIAAABP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 491 3812 -% 995670 3184 990718 1155 0 0 192.168.192.35 CH - [2015-05-30 13:50:28.757678] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "346f8ab.52351de8166a9" VjNnlKwxQzZrjDjjuFMAAABT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 426 4141 -% 883492 3061 872550 7205 0 0 192.168.192.35 CH - [2015-05-30 13:50:28.792934] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "346f8ab.52351de8166a9" VjNnlKwxQzZrjDjjuFQAAABN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1070 9749 -% 1132380 1720 126862 3105 0 0 192.168.192.35 CH - [2015-05-30 13:50:28.798255] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "346f8ab.52351de8166a9" VjNnlKwxQzZrjDjjuFUAAABR TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1096 13218 -% 1980598 3617 967086 4097 0 0 192.168.192.35 CH - [2015-05-30 13:50:29.955190] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "346f8ab.52351de8166a9" VjNnlawxQzZrjDjjuFYAAABW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 455 1248 -% 833713 1976 830989 154 0 0 192.168.192.35 CH - [2015-05-30 13:50:30.848572] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "346f8ab.52351de8166a9" VjNnlqwxQzZrjDjjuFcAAABU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 497 1260 -% 969051 2604 965567 222 0 0 192.168.192.35 CH - [2015-05-30 14:02:43.418114] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNqc6wxQzZrjDjjuMAAAAB6 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 849 11799 -% 1133817 2954 126653 3444 0 0 192.168.192.35 CH - [2015-05-30 14:02:55.056724] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNqf6wxQzZrjDjjuMMAAAB7 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1263 564 -% 1061422 4736 55656 228 0 0 192.168.192.35 CH - [2015-05-30 14:02:56.167298] "GET /EMail/main.aspx HTTP/1.1" 200 3383 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNqgKwxQzZrjDjjuMQAAABA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 3799 -% 881275 1948 876924 1811 0 0 192.168.192.35 CH - [2015-05-30 14:02:57.122581] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNqgawxQzZrjDjjuMYAAABL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 4128 -% 955288 2907 937482 14132 0 0 192.168.192.35 CH - [2015-05-30 14:02:57.149914] "GET /EMail/overview.aspx HTTP/1.1" 200 5288 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNqgawxQzZrjDjjuMcAAABJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1059 5853 -% 1275391 1934 269694 3133 0 0 192.168.192.35 CH - [2015-05-30 14:02:57.152530] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNqgawxQzZrjDjjuMgAAABO TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1085 9322 -% 1635039 2142 622584 4672 0 0 192.168.192.35 CH - [2015-05-30 14:03:01.975825] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNqhawxQzZrjDjjuMoAAABH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 511 409 -% 854090 2198 851237 147 0 0 192.168.192.35 CH - [2015-05-30 14:03:02.894609] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNqhqwxQzZrjDjjuMsAAABI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 458 318 -% 996138 2160 993241 139 0 0 192.168.192.35 CH - [2015-05-30 14:03:03.903584] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNqh6wxQzZrjDjjuMwAAABK TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 440 7758 -% 996922 1909 992248 2255 0 0 192.168.212.3 CH - [2015-05-30 14:03:35.027787] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7383 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNqp6wxQzZrjDjjuNEAAABW TLSv1 ECDHE-RSA-AES256-SHA 784 11729 -% 814388 3337 806112 4257 0 0 192.168.212.3 CH - [2015-05-30 14:03:47.786383] "GET /EMail/main.aspx HTTP/1.1" 200 3415 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNqs6wxQzZrjDjjuNUAAABM TLSv1 ECDHE-RSA-AES256-SHA 872 7670 -% 860121 1953 855725 1845 0 0 192.168.212.3 CH - [2015-05-30 14:03:49.272622] "GET /EMail/overview.aspx HTTP/1.1" 200 6445 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNqtawxQzZrjDjjuNkAAABV TLSv1 ECDHE-RSA-AES256-SHA 757 7035 -% 972512 2829 966912 2143 0 0 192.168.212.3 CH - [2015-05-30 14:03:49.076660] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNqtawxQzZrjDjjuNcAAABX TLSv1 ECDHE-RSA-AES256-SHA 840 7990 -% 1176921 1965 166430 7901 0 0 192.168.212.3 CH - [2015-05-30 14:03:49.267030] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNqtawxQzZrjDjjuNgAAABa TLSv1 ECDHE-RSA-AES256-SHA 773 9379 -% 1905256 2585 892860 4556 0 0 192.168.212.3 CH - [2015-05-30 14:03:52.081257] "GET /EMail/inbox.aspx HTTP/1.1" 200 8586 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNquKwxQzZrjDjjuNoAAABb TLSv1 ECDHE-RSA-AES256-SHA 550 9055 -% 1162470 1968 156406 3213 0 0 192.168.212.3 CH - [2015-05-30 14:03:54.906460] "GET /EMail/message.aspx?&mailId=3927_1&folderId=1001_9&mailPos=0 HTTP/1.1" 200 11200 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNquqwxQzZrjDjjuNsAAABj TLSv1 ECDHE-RSA-AES256-SHA 582 11700 -% 1308970 5008 271761 30842 0 0 192.168.212.3 CH - [2015-05-30 14:03:58.307619] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3927_1&folderId=1001_9&attachmentId=2&token=29930552732093066E18 HTTP/1.1" 200 59560 "https://www.example.com/EMail/message.aspx?&mailId=3927_1&folderId=1001_9&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNqvqwxQzZrjDjjuN0AAABh TLSv1 ECDHE-RSA-AES256-SHA 694 61410 -% 1144382 9249 110456 176 0 0 192.168.212.3 CH - [2015-05-30 14:04:11.633314] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNqy6wxQzZrjDjjuOAAAABn TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1725894 6414 709072 4684 0 0 192.168.192.35 CH - [2015-05-30 14:04:36.062060] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNq5KwxQzZrjDjiM9YAAAAT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1048 7916 -% 848680 3936 841841 2265 0 0 192.168.192.35 CH - [2015-05-30 14:04:43.332938] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNq66wxQzZrjDjjuOMAAABk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1263 564 -% 1067158 3067 63305 155 0 0 192.168.192.35 CH - [2015-05-30 14:04:44.543145] "GET /EMail/main.aspx HTTP/1.1" 200 3383 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNq7KwxQzZrjDjjuOQAAABo TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 3799 -% 805494 3118 800549 1161 0 0 192.168.192.35 CH - [2015-05-30 14:04:45.411650] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNq7awxQzZrjDjjuOUAAABr TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 4128 -% 972803 2945 958410 10652 0 0 192.168.192.35 CH - [2015-05-30 14:04:45.432871] "GET /EMail/overview.aspx HTTP/1.1" 200 5288 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNq7awxQzZrjDjiM9kAAAAJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1059 5853 -% 1229324 1696 224158 2884 0 0 192.168.192.35 CH - [2015-05-30 14:04:45.443893] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNq7awxQzZrjDjjuOYAAABq TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1085 9322 -% 1772016 2148 760166 4408 0 0 192.168.192.35 CH - [2015-05-30 14:04:48.723681] "GET /EMail/inbox.aspx HTTP/1.1" 200 7277 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNq8KwxQzZrjDjjuOgAAABt TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 493 7699 -% 1213685 1870 207009 4191 0 0 192.168.192.35 CH - [2015-05-30 14:04:51.410973] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNq86wxQzZrjDjjuOkAAABu TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 511 409 -% 761480 3474 757065 188 0 0 192.168.192.35 CH - [2015-05-30 14:04:52.247956] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNq9KwxQzZrjDjjuOoAAABy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 458 318 -% 795253 2574 791780 242 0 0 192.168.192.35 CH - [2015-05-30 14:04:53.054803] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNq9awxQzZrjDjjuOsAAABw TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 440 7758 -% 965767 2868 959718 2574 0 0 192.168.192.35 CH - [2015-05-30 14:09:14.360153] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNr@qwxQzZrjDjjuQ8AAABY TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1338 4447 -% 1030282 3640 25909 169 0 0 192.168.192.35 CH - [2015-05-30 14:09:15.402502] "GET /EMail/main.aspx HTTP/1.1" 200 3383 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNr@6wxQzZrjDjjuRAAAABQ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 3799 -% 900432 3141 894893 1634 0 0 192.168.192.35 CH - [2015-05-30 14:09:16.371909] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNr-KwxQzZrjDjjuREAAABd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 4128 -% 930236 1950 917344 10291 0 0 192.168.192.35 CH - [2015-05-30 14:09:16.419491] "GET /EMail/overview.aspx HTTP/1.1" 200 5290 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNr-KwxQzZrjDjiM@4AAAAj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1134 9738 -% 1438782 3472 431694 2821 0 0 192.168.192.35 CH - [2015-05-30 14:09:16.427601] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNr-KwxQzZrjDjjuRIAAABM TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1160 13205 -% 1810297 3132 799271 2727 0 0 192.168.213.21 CH - [2015-05-30 14:10:21.079106] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7380 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3491036.523522656fe42" VjNsPawxQzZrjDjjuRkAAABc TLSv1.2 ECDHE-RSA-AES128-SHA256 794 11891 -% 950988 2254 945613 2340 0 0 192.168.213.21 CH - [2015-05-30 14:10:22.291032] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3491036.523522656fe42" VjNsPqwxQzZrjDjjuRwAAABh TLSv1.2 ECDHE-RSA-AES128-SHA256 959 422 -% 1097806 1887 95267 155 0 0 192.168.213.21 CH - [2015-05-30 14:10:22.287162] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3491036.523522656fe42" VjNsPqwxQzZrjDjjuRsAAABg TLSv1.2 ECDHE-RSA-AES128-SHA256 959 422 -% 1117740 2582 114210 195 0 0 192.168.213.21 CH - [2015-05-30 14:10:22.285705] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3491036.523522656fe42" VjNsPqwxQzZrjDjjuRoAAABn TLSv1.2 ECDHE-RSA-AES128-SHA256 991 422 -% 1122520 2655 118967 377 0 0 192.168.213.21 CH - [2015-05-30 14:10:22.292684] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3491036.523522656fe42" VjNsPqwxQzZrjDjjuR0AAABm TLSv1.2 ECDHE-RSA-AES128-SHA256 1007 422 -% 1129954 2306 126750 256 0 0 192.168.213.21 CH - [2015-05-30 14:10:23.984623] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3491036.523522656fe42" VjNsP6wxQzZrjDjjuR4AAABf TLSv1.2 ECDHE-RSA-AES128-SHA256 726 245 -% 859972 2453 856805 156 0 0 192.168.213.21 CH - [2015-05-30 14:10:25.347784] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "507b6f25.52352269820c8" VjNsQawxQzZrjDjjuR8AAABk TLSv1.2 ECDHE-RSA-AES128-SHA256 730 5651 -% 751241 926 749439 163 0 0 192.168.213.21 CH - [2015-05-30 14:10:50.810831] "GET /EMail/images/active.gif HTTP/1.1" 503 4504 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - - "3491036.523522656fe42" VjNsWqwxQzZrjDjjuSMAAABt TLSv1.2 ECDHE-RSA-AES128-SHA256 1050 8983 -% 6752 3160 0 0 0 0 192.168.213.21 CH - [2015-05-30 14:10:56.514401] "POST /EMail/MailHandler HTTP/1.1" 503 4504 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - - "3491036.523522656fe42" VjNsYKwxQzZrjDjjuSYAAABw TLSv1.2 ECDHE-RSA-AES128-SHA256 1039 5295 -% 8523 5570 0 0 0 0 192.168.213.21 CH - [2015-05-30 14:10:56.601679] "GET /errordocuments/logo_d.png HTTP/1.1" 200 7515 "https://www.example.com/EMail/MailHandler" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "3491036.523522656fe42" VjNsYKwxQzZrjDjjuScAAABv TLSv1.2 ECDHE-RSA-AES128-SHA256 831 8155 -% 2965 1941 42 107 0 0 192.168.213.21 CH - [2015-05-30 14:10:56.667325] "GET /EMail/favicon.ico HTTP/1.1" 503 4504 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - - "507b6f25.52352269820c8" VjNsYKwxQzZrjDjjuSgAAABl TLSv1.2 ECDHE-RSA-AES128-SHA256 767 5295 -% 4455 1980 0 0 0 0 192.168.213.21 CH - [2015-05-30 14:10:59.999251] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 503 4504 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - - "3491036.523522656fe42" VjNsY6wxQzZrjDjjuSkAAAB8 TLSv1.2 ECDHE-RSA-AES128-SHA256 566 5118 -% 6658 3687 0 0 0 0 192.168.213.21 CH - [2015-05-30 14:11:00.083711] "GET /EMail/favicon.ico HTTP/1.1" 503 4504 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - - "507b6f25.52352269820c8" VjNsZKwxQzZrjDjjuSoAAABs TLSv1.2 ECDHE-RSA-AES128-SHA256 767 5295 -% 5385 2349 0 0 0 0 192.168.192.35 CH - [2015-05-30 14:11:32.311548] "GET /EMail/inbox.aspx HTTP/1.1" 200 12466 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNshKwxQzZrjDjjuTEAAAB4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1135 16973 -% 2679811 3263 659679 6244 0 0 192.168.192.35 CH - [2015-05-30 14:11:32.108125] "GET /EMail/inbox.aspx HTTP/1.1" 200 12465 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNshKwxQzZrjDjjuTAAAAB1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1135 16972 -% 2990887 2913 976783 8423 0 0 192.168.192.35 CH - [2015-05-30 14:11:36.587583] "GET /EMail/message.aspx?&mailId=3927_7&folderId=540_81&mailPos=0 HTTP/1.1" 200 11318 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNsiKwxQzZrjDjjuTMAAAB9 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 533 11799 -% 1534250 5252 499043 28657 0 0 192.168.192.35 CH - [2015-05-30 14:11:36.818508] "GET /EMail/message.aspx?&mailId=3927_7&folderId=540_81&mailPos=0 HTTP/1.1" 200 11252 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNsiKwxQzZrjDjjuTQAAAB@ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1175 15759 -% 1479346 3397 452993 21899 0 0 192.168.192.35 CH - [2015-05-30 14:11:39.508856] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3927_7&folderId=540_81&attachmentId=2&token=63707479093659935E18 HTTP/1.1" 200 55973 "https://www.example.com/EMail/message.aspx?&mailId=3927_7&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNsi6wxQzZrjDjjuTUAAABE TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 637 57574 -% 1245441 8467 195420 160 0 0 192.168.192.35 CH - [2015-05-30 14:12:05.283673] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3927_7&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNspawxQzZrjDjjuToAAABA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1381 4382 -% 1826395 5809 819776 133 0 0 192.168.192.35 CH - [2015-05-30 14:12:07.148001] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 11168 "https://www.example.com/EMail/message.aspx?&mailId=3927_7&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNsp6wxQzZrjDjjuTwAAABD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 557 11649 -% 2374308 3864 365146 4031 0 0 192.168.192.35 CH - [2015-05-30 14:12:11.224426] "GET /EMail/message.aspx?&mailId=3927_6&folderId=540_81&mailPos=0 HTTP/1.1" 200 11317 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNsq6wxQzZrjDjjuT0AAABL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 557 11798 -% 2171539 5163 141741 23367 0 0 192.168.192.35 CH - [2015-05-30 14:12:11.436178] "GET /EMail/message.aspx?&mailId=3927_6&folderId=540_81&mailPos=0 HTTP/1.1" 200 11252 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNsq6wxQzZrjDjiM-0AAAA1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1199 15730 -% 2204080 2953 178031 22297 0 0 192.168.192.35 CH - [2015-05-30 14:12:14.833954] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3927_6&folderId=540_81&attachmentId=2&token=26228763613647524E18 HTTP/1.1" 200 55298 "https://www.example.com/EMail/message.aspx?&mailId=3927_6&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNsrqwxQzZrjDjiM-4AAAAv TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 637 56870 -% 1812064 6212 781119 155 0 0 192.168.192.35 CH - [2015-05-30 14:12:43.501220] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3927_6&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNsy6wxQzZrjDjjuUMAAABT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1381 4382 -% 1153721 6508 146235 233 0 0 192.168.192.35 CH - [2015-05-30 14:12:44.680579] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 9870 "https://www.example.com/EMail/message.aspx?&mailId=3927_6&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNszKwxQzZrjDjjuUUAAABR TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 557 10321 -% 1061386 5761 50687 3730 0 0 192.168.192.35 CH - [2015-05-30 14:12:47.729688] "GET /EMail/message.aspx?&mailId=3927_5&folderId=540_81&mailPos=0 HTTP/1.1" 200 11320 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNsz6wxQzZrjDjjuUYAAABW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 557 11801 -% 1391751 4586 361179 24999 0 0 192.168.192.35 CH - [2015-05-30 14:12:47.956608] "GET /EMail/message.aspx?&mailId=3927_5&folderId=540_81&mailPos=0 HTTP/1.1" 200 11254 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNsz6wxQzZrjDjjuUcAAABU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1199 15761 -% 1403945 5056 376033 21796 0 0 192.168.192.35 CH - [2015-05-30 14:12:51.144378] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3927_5&folderId=540_81&attachmentId=2&token=127146621849947792E17 HTTP/1.1" 200 56863 "https://www.example.com/EMail/message.aspx?&mailId=3927_5&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNs06wxQzZrjDjjuUgAAABQ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 638 58464 -% 1115784 4438 87556 174 0 0 192.168.192.35 CH - [2015-05-30 14:13:20.482441] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3927_5&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNs8KwxQzZrjDjjuU0AAABX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1381 4382 -% 1133087 4774 127540 180 0 0 192.168.192.35 CH - [2015-05-30 14:13:21.638831] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8574 "https://www.example.com/EMail/message.aspx?&mailId=3927_5&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNs8awxQzZrjDjjuU4AAABZ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 557 9025 -% 1158976 3938 149729 4316 0 0 192.168.192.35 CH - [2015-05-30 14:13:23.988987] "GET /EMail/message.aspx?&mailId=3926_4&folderId=540_81&mailPos=0 HTTP/1.1" 200 11169 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNs86wxQzZrjDjjuU8AAABa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 557 11650 -% 1264236 4696 228959 29566 0 0 192.168.192.35 CH - [2015-05-30 14:13:27.096514] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3926_4&folderId=540_81&attachmentId=2&token=88810848390033408E17 HTTP/1.1" 200 56600 "https://www.example.com/EMail/message.aspx?&mailId=3926_4&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNs96wxQzZrjDjjuVAAAABb TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 637 58201 -% 1131267 6190 101945 170 0 0 192.168.192.35 CH - [2015-05-30 14:17:26.322794] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3928_1&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNt5qwxQzZrjDjiNBAAAAAF TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1306 499 -% 1263331 6538 255357 181 0 0 192.168.192.35 CH - [2015-05-30 14:17:27.615901] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8575 "https://www.example.com/EMail/message.aspx?&mailId=3928_1&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNt56wxQzZrjDjiNBEAAAAO TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 557 9026 -% 1135765 4142 128028 2787 0 0 192.168.192.35 CH - [2015-05-30 14:17:30.863766] "GET /EMail/message.aspx?&mailId=3927_8&folderId=540_81&mailPos=0 HTTP/1.1" 200 11168 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNt6qwxQzZrjDjiNBMAAAAT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 557 11649 -% 1352076 4817 324153 22176 0 0 192.168.192.35 CH - [2015-05-30 14:17:33.379245] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3927_8&folderId=540_81&attachmentId=2&token=43082679952231706E18 HTTP/1.1" 200 58015 "https://www.example.com/EMail/message.aspx?&mailId=3927_8&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNt7awxQzZrjDjiNBQAAAAH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 637 59681 -% 1123513 6476 92601 187 0 0 192.168.192.35 CH - [2015-05-30 14:20:42.805008] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3927_9&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNuqqwxQzZrjDjiNB4AAAAU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1381 4382 -% 1090522 7751 82018 181 0 0 192.168.192.35 CH - [2015-05-30 14:20:43.929108] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7277 "https://www.example.com/EMail/message.aspx?&mailId=3927_9&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNuq6wxQzZrjDjiNB8AAAAX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 557 7699 -% 1054171 2607 48603 2222 0 0 192.168.192.35 CH - [2015-05-30 14:20:46.883101] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNurqwxQzZrjDjiNCAAAAAb TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 511 409 -% 1037872 3479 33598 189 0 0 192.168.192.35 CH - [2015-05-30 14:20:47.970517] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNur6wxQzZrjDjiNCEAAAAZ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 458 318 -% 903765 3042 899814 232 0 0 192.168.192.35 CH - [2015-05-30 14:20:48.886348] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNusKwxQzZrjDjiNCIAAAAW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 440 7758 -% 948315 2911 942473 2279 0 0 192.168.212.3 CH - [2015-05-30 14:21:40.703814] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNu5KwxQzZrjDjjuZ8AAABw TLSv1 ECDHE-RSA-AES256-SHA 848 4252 -% 913050 2777 909457 190 0 0 192.168.212.3 CH - [2015-05-30 14:21:41.797230] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjNu5awxQzZrjDjjuaAAAABv TLSv1 ECDHE-RSA-AES256-SHA 518 325 -% 1387146 3761 382727 184 0 0 192.168.192.35 CH - [2015-05-30 14:22:28.681862] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNvFKwxQzZrjDjjuagAAAB4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1048 7916 -% 942774 3782 935690 2642 0 0 192.168.192.35 CH - [2015-05-30 14:22:36.118177] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNvHKwxQzZrjDjjuaoAAAB5 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1263 564 -% 1059844 3259 55714 191 0 0 192.168.192.35 CH - [2015-05-30 14:22:37.206468] "GET /EMail/main.aspx HTTP/1.1" 200 3383 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNvHawxQzZrjDjjuasAAABB TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 3799 -% 1010046 2959 4483 1886 0 0 192.168.192.35 CH - [2015-05-30 14:22:38.290753] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNvHqwxQzZrjDjjuawAAAB9 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 4128 -% 1121238 3298 101921 15260 0 0 192.168.192.35 CH - [2015-05-30 14:22:38.322048] "GET /EMail/overview.aspx HTTP/1.1" 200 5290 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNvHqwxQzZrjDjiNCkAAAAg TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1059 5855 -% 1288968 1708 283867 2764 0 0 192.168.192.35 CH - [2015-05-30 14:22:38.329230] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNvHqwxQzZrjDjjua0AAAB- TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1085 9322 -% 2122141 3573 108528 4733 0 0 192.168.192.35 CH - [2015-05-30 14:22:41.230983] "GET /EMail/inbox.aspx HTTP/1.1" 200 9874 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNvIawxQzZrjDjjua4AAAB@ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 493 10354 -% 1136852 2976 124992 7569 0 0 192.168.192.35 CH - [2015-05-30 14:22:46.107283] "GET /EMail/message.aspx?&mailId=3928_4&folderId=540_81&mailPos=0 HTTP/1.1" 200 11317 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNvJqwxQzZrjDjjubAAAAB6 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 533 11769 -% 1407524 2894 384272 19237 0 0 192.168.192.35 CH - [2015-05-30 14:22:48.976348] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3928_4&folderId=540_81&attachmentId=2&token=33045292352943683E18 HTTP/1.1" 200 55325 "https://www.example.com/EMail/message.aspx?&mailId=3928_4&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNvKKwxQzZrjDjjubEAAABC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 637 56897 -% 1096390 3895 69844 176 0 0 192.168.192.35 CH - [2015-05-30 14:23:17.770781] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3928_4&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNvRawxQzZrjDjjubUAAABA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1307 499 -% 1132190 6473 124902 174 0 0 192.168.192.35 CH - [2015-05-30 14:23:18.938892] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8577 "https://www.example.com/EMail/message.aspx?&mailId=3928_4&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNvRqwxQzZrjDjjubYAAABD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 557 9028 -% 1053702 3715 43904 4914 0 0 192.168.192.35 CH - [2015-05-30 14:23:21.313723] "GET /EMail/message.aspx?&mailId=3927_10&folderId=540_81&mailPos=0 HTTP/1.1" 200 11178 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNvSawxQzZrjDjjubcAAABL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 558 11630 -% 1271193 3043 241656 25629 0 0 192.168.192.35 CH - [2015-05-30 14:23:24.190883] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3927_10&folderId=540_81&attachmentId=2&token=28023970524208864E17 HTTP/1.1" 200 55896 "https://www.example.com/EMail/message.aspx?&mailId=3927_10&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNvTKwxQzZrjDjjubgAAABJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 639 57497 -% 1093479 3980 65182 143 0 0 192.168.192.35 CH - [2015-05-30 14:23:52.260636] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3927_10&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNvaKwxQzZrjDjjubwAAABK TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1308 499 -% 1037604 6703 30231 173 0 0 192.168.192.35 CH - [2015-05-30 14:23:53.322979] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7278 "https://www.example.com/EMail/message.aspx?&mailId=3927_10&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNvaawxQzZrjDjjub0AAABP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 558 7700 -% 1098026 5897 87634 3381 0 0 192.168.192.35 CH - [2015-05-30 14:23:56.197419] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNvbKwxQzZrjDjjub4AAABN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 511 409 -% 973498 3456 969043 186 0 0 192.168.192.35 CH - [2015-05-30 14:23:57.247227] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNvbawxQzZrjDjjub8AAABT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 458 318 -% 924483 3650 919911 194 0 0 192.168.192.35 CH - [2015-05-30 14:23:58.183216] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNvbqwxQzZrjDjjucAAAABR TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 440 7758 -% 685812 2345 679041 3606 0 0 192.168.192.35 CH - [2015-05-30 14:25:59.838313] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNv56wxQzZrjDjiNDYAAAAt TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1338 4447 -% 894359 3603 889862 341 0 0 192.168.192.35 CH - [2015-05-30 14:26:00.758081] "GET /EMail/main.aspx HTTP/1.1" 200 3383 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNv6KwxQzZrjDjiNDcAAAAu TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 3799 -% 841119 2886 836404 1189 0 0 192.168.192.35 CH - [2015-05-30 14:26:01.665847] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNv6awxQzZrjDjiNDgAAAAw TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 4128 -% 1130786 2883 116680 10434 0 0 192.168.192.35 CH - [2015-05-30 14:26:01.712209] "GET /EMail/overview.aspx HTTP/1.1" 200 5288 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNv6awxQzZrjDjjudgAAABt TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1134 9736 -% 1110991 2160 105340 2783 0 0 192.168.192.35 CH - [2015-05-30 14:26:01.718100] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNv6awxQzZrjDjjudkAAABp TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1160 13205 -% 1716324 3602 705133 2688 0 0 192.168.192.35 CH - [2015-05-30 14:26:04.295559] "GET /EMail/inbox.aspx HTTP/1.1" 200 8574 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNv7KwxQzZrjDjjudoAAABu TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 493 9025 -% 1110688 3040 102556 3808 0 0 192.168.192.35 CH - [2015-05-30 14:26:06.879197] "GET /EMail/message.aspx?&mailId=3928_5&folderId=540_81&mailPos=0 HTTP/1.1" 200 11168 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNv7qwxQzZrjDjjudsAAABy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 533 11649 -% 1374802 3885 349972 19956 0 0 192.168.192.35 CH - [2015-05-30 14:26:10.962308] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3928_5&folderId=540_81&attachmentId=2&token=44445307556779059E18 HTTP/1.1" 200 57212 "https://www.example.com/EMail/message.aspx?&mailId=3928_5&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNv8qwxQzZrjDjjudwAAABw TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 637 58719 -% 1144967 4376 114591 170 0 0 192.168.45.26 CH - [2015-05-30 14:26:36.486187] "GET /EMail/MailHandler?service=createCRL HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "6556f42f.52352607a862b" VjNwDKwxQzZrjDjjueEAAAB0 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 560 8359 -% 1238485 1009 236352 155 0 0 192.168.192.35 CH - [2015-05-30 14:27:55.259591] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3928_5&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNwW6wxQzZrjDjjuekAAABB TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1381 4382 -% 1142611 3954 137706 230 0 0 192.168.192.35 CH - [2015-05-30 14:27:56.438316] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7276 "https://www.example.com/EMail/message.aspx?&mailId=3928_5&folderId=540_81&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNwXKwxQzZrjDjjueoAAAB9 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 557 7698 -% 1101330 4296 93580 2658 0 0 192.168.192.35 CH - [2015-05-30 14:28:00.457958] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNwYKwxQzZrjDjjuewAAAB@ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 511 409 -% 923438 5529 916694 189 0 0 192.168.192.35 CH - [2015-05-30 14:28:01.430867] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNwYawxQzZrjDjjue0AAABE TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 458 318 -% 725044 3418 720627 165 0 0 192.168.192.35 CH - [2015-05-30 14:28:02.167252] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjNwYqwxQzZrjDjjue4AAAB6 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 440 7758 -% 982184 3218 974808 3296 0 0 192.168.81.38 CH - [2015-05-30 14:31:27.187721] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7372 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6c8c6eb1.5234ed7ddd418" VjNxL6wxQzZrjDjjuggAAABZ TLSv1 ECDHE-RSA-AES256-SHA 751 11929 -% 1069131 2759 62247 3341 0 0 192.168.81.38 CH - [2015-05-30 14:31:28.577298] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6c8c6eb1.5234ed7ddd418" VjNxMKwxQzZrjDjjugsAAABe TLSv1 ECDHE-RSA-AES256-SHA 863 5721 -% 760652 2774 756999 200 0 0 192.168.81.38 CH - [2015-05-30 14:31:28.574799] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6c8c6eb1.5234ed7ddd418" VjNxMKwxQzZrjDjjugoAAABb TLSv1 ECDHE-RSA-AES256-SHA 815 5918 22% 805995 2887 801904 159 0 0 192.168.81.38 CH - [2015-05-30 14:31:28.518918] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6c8c6eb1.5234ed7ddd418" VjNxMKwxQzZrjDjjugkAAABa TLSv1 ECDHE-RSA-AES256-SHA 454 2431 14% 909413 3233 904621 126 0 0 192.168.81.38 CH - [2015-05-30 14:31:28.598102] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6c8c6eb1.5234ed7ddd418" VjNxMKwxQzZrjDjjugwAAABj TLSv1 ECDHE-RSA-AES256-SHA 847 12059 22% 1269699 2777 262528 218 0 0 192.168.81.38 CH - [2015-05-30 14:31:29.980567] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6c8c6eb1.5234ed7ddd418" VjNxMawxQzZrjDjjug0AAABc TLSv1 ECDHE-RSA-AES256-SHA 502 1802 -% 909181 3179 905020 258 0 0 192.168.81.38 CH - [2015-05-30 14:31:37.880372] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6c8c6eb1.5234ed7ddd418" VjNxOawxQzZrjDjjug8AAABg TLSv1 ECDHE-RSA-AES256-SHA 831 13265 -% 2007807 2623 995482 4543 0 0 192.168.81.38 CH - [2015-05-30 14:31:40.183771] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6c8c6eb1.5234ed7ddd418" VjNxPKwxQzZrjDjjuhAAAABn TLSv1 ECDHE-RSA-AES256-SHA 518 1274 -% 951010 2381 947921 152 0 0 192.168.81.38 CH - [2015-05-30 14:31:42.285066] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6c8c6eb1.5234ed7ddd418" VjNxPqwxQzZrjDjjuhIAAABf TLSv1 ECDHE-RSA-AES256-SHA 470 538 -% 1070314 2105 67445 193 0 0 192.168.213.21 CH - [2015-05-30 14:44:20.628441] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7383 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjN0NKwxQzZrjDjiNIgAAAAB TLSv1 ECDHE-RSA-AES256-SHA 784 11649 -% 1312036 2817 306240 2387 0 0 192.168.213.21 CH - [2015-05-30 14:44:31.591555] "GET /EMail/main.aspx HTTP/1.1" 200 3415 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjN0P6wxQzZrjDjiNIkAAAAL TLSv1 ECDHE-RSA-AES256-SHA 872 7670 -% 839044 1995 834273 1904 0 0 192.168.213.21 CH - [2015-05-30 14:44:32.743206] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjN0QKwxQzZrjDjiNIsAAAAF TLSv1 ECDHE-RSA-AES256-SHA 840 7990 -% 943673 3368 932070 7499 0 0 192.168.213.21 CH - [2015-05-30 14:44:32.655593] "GET /EMail/overview.aspx HTTP/1.1" 200 6446 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjN0QKwxQzZrjDjiNIoAAAAO TLSv1 ECDHE-RSA-AES256-SHA 757 7035 -% 1202865 2012 196715 3465 0 0 192.168.213.21 CH - [2015-05-30 14:44:32.679314] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjN0QKwxQzZrjDjjuoAAAABQ TLSv1 ECDHE-RSA-AES256-SHA 773 9379 -% 2115034 3732 103838 2762 0 0 192.168.213.21 CH - [2015-05-30 14:44:35.817425] "GET /EMail/inbox.aspx HTTP/1.1" 200 9876 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjN0Q6wxQzZrjDjjuoEAAABd TLSv1 ECDHE-RSA-AES256-SHA 550 10351 -% 828805 3260 819551 4988 0 0 192.168.213.21 CH - [2015-05-30 14:44:38.234668] "GET /EMail/message.aspx?&mailId=3928_6&folderId=1001_9&mailPos=0 HTTP/1.1" 200 11347 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjN0RqwxQzZrjDjjuoIAAABM TLSv1 ECDHE-RSA-AES256-SHA 582 11823 -% 1302452 5098 272114 24182 0 0 192.168.213.21 CH - [2015-05-30 14:44:40.878894] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3928_6&folderId=1001_9&attachmentId=2&token=31048946996473917E18 HTTP/1.1" 200 56068 "https://www.example.com/EMail/message.aspx?&mailId=3928_6&folderId=1001_9&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjN0SKwxQzZrjDjjuoQAAABV TLSv1 ECDHE-RSA-AES256-SHA 694 57827 -% 1156500 5960 127761 238 0 0 192.168.213.21 CH - [2015-05-30 14:47:01.749277] "GET /EMail/newMessage.aspx?msg=new HTTP/1.1" 200 12054 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjN01awxQzZrjDjiNJQAAAAR TLSv1 ECDHE-RSA-AES256-SHA 872 16363 -% 878973 3233 835829 37547 3 3 192.168.213.21 CH - [2015-05-30 14:47:03.698148] "GET /EMail/scripts/tinymce/plugins/hr/plugin.min.js HTTP/1.1" 304 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjN016wxQzZrjDjjupsAAABv TLSv1 ECDHE-RSA-AES256-SHA 968 4049 -% 1455454 2072 452559 215 0 0 192.168.213.21 CH - [2015-05-30 14:47:03.149365] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjN016wxQzZrjDjjupoAAABw TLSv1 ECDHE-RSA-AES256-SHA 856 7190 -% 2022604 3601 9928 8322 0 0 192.168.213.21 CH - [2015-05-30 14:47:25.752287] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 12449 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjN07awxQzZrjDjjuqEAAAB3 TLSv1 ECDHE-RSA-AES256-SHA 757 13109 -% 1228932 3045 221264 3774 0 0 192.168.213.21 CH - [2015-05-30 14:47:25.754976] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "925f76fd.52350d1bcc233" VjN07awxQzZrjDjiNJYAAAAX TLSv1 ECDHE-RSA-AES256-SHA 773 9379 -% 1884452 2482 873744 3815 0 0 192.168.1.78 CH - [2015-05-30 14:52:05.902258] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7365 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "63c7158.52352bba38fb2" VjN2BawxQzZrjDjjutIAAABt TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 986 11975 -% 862974 1238 855321 5821 0 0 192.168.1.78 CH - [2015-05-30 14:52:06.910469] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "63c7158.52352bba38fb2" VjN2BqwxQzZrjDjjutQAAABu TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 459 2427 14% 891243 3034 886798 201 0 0 192.168.213.21 CH - [2015-05-30 14:52:27.156691] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 15041 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjN2G6wxQzZrjDjjutcAAABv TLSv1 ECDHE-RSA-AES256-SHA 872 19392 -% 1458691 3061 449286 5017 0 0 192.168.213.21 CH - [2015-05-30 14:52:30.397154] "GET /EMail/message.aspx?&mailId=3927_15&folderId=1001_9&mailPos=0 HTTP/1.1" 200 11358 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjN2HqwxQzZrjDjjutgAAAB8 TLSv1 ECDHE-RSA-AES256-SHA 888 15696 -% 1413343 4871 388562 18823 0 0 192.168.213.21 CH - [2015-05-30 14:53:46.357229] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/moveToFolder.aspx?folderName=Inbox&mailId=3927_15&mailId=3927_14&mailId=3928_7&mailId=3927_13&mailId=3928_6&mailId=3927_1" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjN2aqwxQzZrjDjjuuYAAAB6 TLSv1 ECDHE-RSA-AES256-SHA 1208 4177 -% 1642711 10119 631723 187 0 0 192.168.213.21 CH - [2015-05-30 14:53:49.356515] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7290 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjN2bawxQzZrjDjjuugAAAB7 TLSv1 ECDHE-RSA-AES256-SHA 872 11558 -% 947692 3493 939447 3950 0 0 192.168.213.21 CH - [2015-05-30 14:53:50.507721] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjN2bqwxQzZrjDjjuusAAABD TLSv1 ECDHE-RSA-AES256-SHA 904 4049 -% 793347 4635 787656 154 0 0 192.168.213.21 CH - [2015-05-30 14:53:50.507171] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjN2bqwxQzZrjDjjuuoAAABL TLSv1 ECDHE-RSA-AES256-SHA 920 6405 14% 1134782 3121 130153 212 0 0 192.168.213.21 CH - [2015-05-30 14:53:54.358174] "GET /EMail/images/tree/folder/pixel.gif HTTP/1.1" 200 807 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjN2cqwxQzZrjDjjuuwAAABH TLSv1 ECDHE-RSA-AES256-SHA 936 5062 -% 1051294 2276 48284 154 0 0 192.168.213.21 CH - [2015-05-30 14:54:20.053977] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/moveToFolder.aspx?folderName=11November15&mailId=3927_15&mailId=3927_14&mailId=3928_7&mailId=3927_13&mailId=3928_6&mailId=3927_1" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjN2jKwxQzZrjDjjuvEAAABR TLSv1 ECDHE-RSA-AES256-SHA 1224 4177 -% 1431829 7236 423721 203 0 0 192.168.213.21 CH - [2015-05-30 14:54:23.854840] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/folder.aspx?dir=desc&folderName=11November15" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjN2j6wxQzZrjDjiNKUAAAAl TLSv1 ECDHE-RSA-AES256-SHA 856 6267 14% 994659 2917 989785 209 0 0 192.168.213.21 CH - [2015-05-30 14:54:23.860547] "GET /EMail/images/Highost.gif HTTP/1.1" 304 - "https://www.example.com/EMail/folder.aspx?dir=desc&folderName=11November15" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjN2j6wxQzZrjDjiNKcAAAAm TLSv1 ECDHE-RSA-AES256-SHA 984 4049 -% 1055193 3490 50848 152 0 0 192.168.213.21 CH - [2015-05-30 14:54:23.857795] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/folder.aspx?dir=desc&folderName=11November15" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjN2j6wxQzZrjDjjuvMAAABU TLSv1 ECDHE-RSA-AES256-SHA 936 4049 -% 1142215 3067 138078 179 0 0 192.168.213.21 CH - [2015-05-30 14:54:23.859387] "GET /EMail/images/attach.gif HTTP/1.1" 304 - "https://www.example.com/EMail/folder.aspx?dir=desc&folderName=11November15" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjN2j6wxQzZrjDjiNKYAAAAn TLSv1 ECDHE-RSA-AES256-SHA 968 4049 -% 1311612 1782 309096 191 0 0 192.168.213.21 CH - [2015-05-30 14:54:28.555849] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjN2lKwxQzZrjDjjuvQAAABd TLSv1 ECDHE-RSA-AES256-SHA 920 4523 75% 1095315 3290 91053 301 0 0 192.168.213.21 CH - [2015-05-30 14:54:29.856521] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjN2lawxQzZrjDjiNKkAAAAs TLSv1 ECDHE-RSA-AES256-SHA 808 4161 -% 846379 3676 841920 137 0 0 192.168.213.21 CH - [2015-05-30 14:54:31.915946] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjN2l6wxQzZrjDjiNKoAAAAu TLSv1 ECDHE-RSA-AES256-SHA 936 4049 -% 1003212 3157 0 427 0 0 192.168.67.127 CH - [2015-05-30 15:27:49.412192] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "9cdfc59c.523533b66ed60" VjN@ZawxQzZrjDjjvAsAAAB2 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 572 8359 -% 1430474 1279 428189 164 0 0 192.168.192.35 CH - [2015-05-30 15:30:14.021537] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "955160bb.52350e823588b" VjN@9qwxQzZrjDjiNT4AAAAI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 849 11889 -% 3546504 3871 539535 2434 0 0 192.168.186.76 CH - [2015-05-30 15:44:23.546783] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOCR6wxQzZrjDjjvJAAAAB@ TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 12038 -% 2563335 6897 551046 3386 3 0 192.168.186.76 CH - [2015-05-30 15:44:26.142861] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOCSqwxQzZrjDjjvJEAAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 662 7866 -% 1557709 6363 545492 3781 3 0 192.168.186.76 CH - [2015-05-30 15:44:29.356607] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOCTawxQzZrjDjjvJIAAABC TLSv1.2 ECDHE-RSA-AES256-SHA384 822 469 -% 1134535 5099 126932 218 3 0 192.168.186.76 CH - [2015-05-30 15:44:30.506740] "GET /EMail/main.aspx HTTP/1.1" 200 3391 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOCTqwxQzZrjDjjvJMAAABF TLSv1.2 ECDHE-RSA-AES256-SHA384 678 3898 -% 1272847 6660 263512 1153 3 0 192.168.186.76 CH - [2015-05-30 15:44:31.830354] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOCT6wxQzZrjDjjvJUAAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 662 4234 -% 1503994 4116 483890 14610 3 0 192.168.186.76 CH - [2015-05-30 15:44:31.830942] "GET /EMail/overview.aspx HTTP/1.1" 200 5535 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOCT6wxQzZrjDjjvJYAAABG TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 10118 -% 1537338 5819 526224 2985 3 0 192.168.186.76 CH - [2015-05-30 15:44:31.828699] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOCT6wxQzZrjDjjvJQAAAB6 TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1752261 6583 737897 2769 3 0 192.168.186.76 CH - [2015-05-30 15:46:29.180001] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5879 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3928_13&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOCxawxQzZrjDjjvKUAAABd TLSv1.2 ECDHE-RSA-AES256-SHA384 1303 13742 -% 2430150 4193 0 0 3 0 192.168.186.76 CH - [2015-05-30 15:46:42.421649] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3928_13&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOC0qwxQzZrjDjiNYYAAAAV TLSv1.2 ECDHE-RSA-AES256-SHA384 7495 630 -% 1602662 249149 332528 239 86 0 192.168.186.76 CH - [2015-05-30 15:46:44.035369] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3928_13&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOC1KwxQzZrjDjiNYcAAAAU TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 987010 5782 972861 6716 3 0 192.168.186.76 CH - [2015-05-30 15:46:45.602952] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8390 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOC1awxQzZrjDjiNYgAAAAX TLSv1.2 ECDHE-RSA-AES256-SHA384 662 8991 -% 1638521 6758 627315 2739 3 0 192.168.212.3 CH - [2015-05-30 15:57:55.572022] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7383 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOFc6wxQzZrjDjiNa4AAAA9 TLSv1 ECDHE-RSA-AES256-SHA 784 11729 -% 1033941 4271 26646 2337 0 0 192.168.212.3 CH - [2015-05-30 15:58:15.401348] "GET /EMail/overview.aspx HTTP/1.1" 200 6448 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOFh6wxQzZrjDjjvRoAAABK TLSv1 ECDHE-RSA-AES256-SHA 757 7035 -% 1126937 2005 121458 2826 0 0 192.168.212.3 CH - [2015-05-30 15:58:15.401248] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOFh6wxQzZrjDjiNbIAAAAB TLSv1 ECDHE-RSA-AES256-SHA 773 9379 -% 2042277 2418 30415 4519 0 0 192.168.212.3 CH - [2015-05-30 15:58:19.211849] "GET /EMail/inbox.aspx HTTP/1.1" 200 26794 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOFi6wxQzZrjDjiNbQAAAAK TLSv1 ECDHE-RSA-AES256-SHA 550 27379 -% 1445441 3070 285349 9147 0 0 192.168.212.3 CH - [2015-05-30 15:58:24.971699] "GET /EMail/message.aspx?&mailId=3927_17&folderId=1001_9&mailPos=14 HTTP/1.1" 200 11342 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOFkKwxQzZrjDjiNbYAAAAE TLSv1 ECDHE-RSA-AES256-SHA 582 11844 -% 1541227 7555 513722 19030 0 0 192.168.212.3 CH - [2015-05-30 15:58:27.682545] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3927_17&folderId=1001_9&attachmentId=2&token=45723309829814528E18 HTTP/1.1" 200 53905 "https://www.example.com/EMail/message.aspx?&mailId=3927_17&folderId=1001_9&mailPos=14" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOFk6wxQzZrjDjiNbcAAAAO TLSv1 ECDHE-RSA-AES256-SHA 694 55556 -% 948000 4611 933264 229 0 0 192.168.212.3 CH - [2015-05-30 15:58:59.379881] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 26786 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOFs6wxQzZrjDjjvR8AAABR TLSv1 ECDHE-RSA-AES256-SHA 872 31215 -% 1928016 3353 742774 10090 0 0 192.168.212.3 CH - [2015-05-30 15:59:03.379339] "GET /EMail/message.aspx?&mailId=3928_8&folderId=1001_9&mailPos=13 HTTP/1.1" 200 11486 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOFt6wxQzZrjDjjvSEAAABQ TLSv1 ECDHE-RSA-AES256-SHA 888 15824 -% 1380155 3067 357832 18356 0 0 192.168.212.3 CH - [2015-05-30 15:59:38.329362] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOF2qwxQzZrjDjjvScAAABe TLSv1 ECDHE-RSA-AES256-SHA 888 13070 -% 1750650 3359 735309 7055 0 0 192.168.212.3 CH - [2015-05-30 15:59:38.326682] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 26778 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOF2qwxQzZrjDjiNbwAAAAP TLSv1 ECDHE-RSA-AES256-SHA 872 31236 -% 1914105 2376 754735 9994 0 0 192.168.212.3 CH - [2015-05-30 15:59:44.979532] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3928_9&folderId=1001_9&attachmentId=2&token=57076442980317348E18 HTTP/1.1" 200 53996 "https://www.example.com/EMail/message.aspx?&mailId=3928_9&folderId=1001_9&mailPos=12" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOF4KwxQzZrjDjjvSgAAABa TLSv1 ECDHE-RSA-AES256-SHA 984 59488 -% 977997 6237 950591 218 0 0 192.168.212.3 CH - [2015-05-30 16:00:11.236435] "GET /EMail/newMessage.aspx?msg=new HTTP/1.1" 200 12053 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOF@6wxQzZrjDjjvS4AAABg TLSv1 ECDHE-RSA-AES256-SHA 872 16400 -% 1290142 2077 266693 19390 3 3 192.168.212.3 CH - [2015-05-30 16:00:11.235896] "GET /EMail/tree.aspx?sNode-sharedTree=treeNewMsg HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOF@6wxQzZrjDjjvS0AAABf TLSv1 ECDHE-RSA-AES256-SHA 888 13070 -% 1569392 2524 556344 5760 0 0 192.168.212.3 CH - [2015-05-30 16:00:12.553813] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOF-KwxQzZrjDjjvS8AAABi TLSv1 ECDHE-RSA-AES256-SHA 805 9379 -% 1360731 5901 347168 2896 0 0 192.168.212.3 CH - [2015-05-30 16:00:12.555566] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 26770 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOF-KwxQzZrjDjjvTAAAABk TLSv1 ECDHE-RSA-AES256-SHA 789 27508 -% 1641089 4929 506655 8030 0 0 192.168.212.3 CH - [2015-05-30 16:00:16.130378] "GET /EMail/message.aspx?&mailId=3927_18&folderId=1001_9&mailPos=11 HTTP/1.1" 200 11490 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOGAKwxQzZrjDjjvTIAAABp TLSv1 ECDHE-RSA-AES256-SHA 598 11967 -% 1573236 4855 543461 24016 0 0 192.168.212.3 CH - [2015-05-30 16:00:19.407375] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3927_18&folderId=1001_9&attachmentId=2&token=96830497374377293E17 HTTP/1.1" 200 55180 "https://www.example.com/EMail/message.aspx?&mailId=3927_18&folderId=1001_9&mailPos=11" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOGA6wxQzZrjDjjvTQAAABu TLSv1 ECDHE-RSA-AES256-SHA 694 56894 -% 1159254 6388 130357 192 0 0 192.168.212.3 CH - [2015-05-30 16:00:44.281725] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 26761 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOGHKwxQzZrjDjjvTcAAABv TLSv1 ECDHE-RSA-AES256-SHA 872 31183 -% 1702673 3501 547568 8027 0 0 192.168.186.76 CH - [2015-05-30 16:01:15.793533] "GET /EMail/newMessage.aspx?action=reply&mailId=3928_21&folderId=947_65&showPics=false HTTP/1.1" 200 18060 "https://www.example.com/EMail/message.aspx?&mailId=3928_21&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOGO6wxQzZrjDjjvT0AAAB2 TLSv1.2 ECDHE-RSA-AES256-SHA384 1367 22885 -% 1294659 5534 250394 35814 6 3 192.168.186.76 CH - [2015-05-30 16:01:17.264808] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5879 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3928_21&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOGPawxQzZrjDjiNcYAAAAY TLSv1.2 ECDHE-RSA-AES256-SHA384 1303 13742 -% 884093 4519 0 0 3 0 192.168.186.76 CH - [2015-05-30 16:01:17.185058] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3928_21&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOGPawxQzZrjDjjvT4AAAB3 TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 999715 6468 986257 5481 3 0 192.168.212.3 CH - [2015-05-30 16:01:17.441584] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOGPawxQzZrjDjiNccAAAAc TLSv1 ECDHE-RSA-AES256-SHA 888 13070 -% 1209543 3689 197824 3369 0 0 192.168.212.3 CH - [2015-05-30 16:01:20.981098] "GET /EMail/message.aspx?&mailId=3928_10&folderId=1001_9&mailPos=9 HTTP/1.1" 200 11495 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOGQKwxQzZrjDjjvT8AAAB4 TLSv1 ECDHE-RSA-AES256-SHA 888 15840 -% 1796498 4858 767786 22823 0 0 192.168.186.76 CH - [2015-05-30 16:01:50.067196] "GET /EMail/draftsExternal.aspx?dir=desc HTTP/1.1" 200 7262 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "280bc544.5234c6c781c1a" VjOGXqwxQzZrjDjjvUMAAAB- TLSv1.2 ECDHE-RSA-AES256-SHA384 1271 4076 -% 1320720 6035 308918 3726 3 0 192.168.186.76 CH - [2015-05-30 16:01:50.075987] "GET /EMail/tree.aspx?sNode-sharedTree=treeDrafts HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "280bc544.5234c6c781c1a" VjOGXqwxQzZrjDjjvUQAAAB@ TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 4076 -% 1712749 6929 694406 4634 3 0 192.168.212.3 CH - [2015-05-30 16:01:50.486596] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOGXqwxQzZrjDjjvUYAAABC TLSv1 ECDHE-RSA-AES256-SHA 888 13070 -% 1561366 2589 552621 2698 0 0 192.168.212.3 CH - [2015-05-30 16:01:54.237598] "GET /EMail/message.aspx?&mailId=3928_11&folderId=1001_9&mailPos=8 HTTP/1.1" 200 11488 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOGYqwxQzZrjDjjvUcAAAB7 TLSv1 ECDHE-RSA-AES256-SHA 888 15803 -% 1217707 5331 184405 27098 0 0 192.168.212.3 CH - [2015-05-30 16:01:56.838590] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3928_11&folderId=1001_9&attachmentId=2&token=75768706073521715E18 HTTP/1.1" 200 56247 "https://www.example.com/EMail/message.aspx?&mailId=3928_11&folderId=1001_9&mailPos=8" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOGZKwxQzZrjDjjvUgAAAB6 TLSv1 ECDHE-RSA-AES256-SHA 984 61839 -% 1086358 4302 59694 189 0 0 192.168.186.76 CH - [2015-05-30 16:02:18.249702] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5879 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3928_20&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOGeqwxQzZrjDjjvUoAAABJ TLSv1.2 ECDHE-RSA-AES256-SHA384 1303 13742 -% 838540 7458 0 0 3 0 192.168.212.3 CH - [2015-05-30 16:02:29.236116] "GET /EMail/message.aspx?&mailId=3927_20&folderId=1001_9&mailPos=7 HTTP/1.1" 200 11489 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOGhawxQzZrjDjjvU0AAABI TLSv1 ECDHE-RSA-AES256-SHA 888 15824 -% 2888081 5195 858195 23499 0 0 192.168.212.3 CH - [2015-05-30 16:02:33.637004] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3927_20&folderId=1001_9&attachmentId=2&token=31790013853931397E18 HTTP/1.1" 200 55367 "https://www.example.com/EMail/message.aspx?&mailId=3927_20&folderId=1001_9&mailPos=7" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOGiawxQzZrjDjjvU8AAABN TLSv1 ECDHE-RSA-AES256-SHA 984 60848 -% 3586823 6823 554708 257 0 0 192.168.186.76 CH - [2015-05-30 16:03:10.777896] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOGrqwxQzZrjDjjvVcAAABS TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1475605 4480 462270 2778 3 0 192.168.212.3 CH - [2015-05-30 16:03:11.397165] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOGr6wxQzZrjDjjvVgAAABV TLSv1 ECDHE-RSA-AES256-SHA 888 13070 -% 1770362 6383 753895 4593 0 0 192.168.186.76 CH - [2015-05-30 16:03:16.206426] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOGtKwxQzZrjDjjvVsAAABb TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1038981 13840 22549 192 3 0 192.168.212.3 CH - [2015-05-30 16:03:16.736756] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3928_12&folderId=1001_9&attachmentId=2&token=46384217778241464E18 HTTP/1.1" 200 61095 "https://www.example.com/EMail/message.aspx?&mailId=3928_12&folderId=1001_9&mailPos=6" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOGtKwxQzZrjDjjvVwAAABa TLSv1 ECDHE-RSA-AES256-SHA 984 66782 -% 1029596 5692 0 230 0 0 192.168.186.76 CH - [2015-05-30 16:03:17.257961] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8479 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOGtawxQzZrjDjjvV0AAABj TLSv1.2 ECDHE-RSA-AES256-SHA384 726 9071 -% 1021874 8378 6788 4482 3 0 192.168.186.76 CH - [2015-05-30 16:03:19.211993] "GET /EMail/message.aspx?&mailId=3928_19&folderId=947_65&mailPos=0 HTTP/1.1" 200 13417 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOGt6wxQzZrjDjjvV4AAABh TLSv1.2 ECDHE-RSA-AES256-SHA384 726 14100 -% 2461807 5703 431484 22252 3 0 192.168.186.76 CH - [2015-05-30 16:03:24.229451] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3928_19&folderId=947_65&attachmentId=3&token=29948519692016915E17 HTTP/1.1" 200 337103 "https://www.example.com/EMail/message.aspx?&mailId=3928_19&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOGvKwxQzZrjDjjvWAAAABm TLSv1.2 ECDHE-RSA-AES256-SHA384 806 355884 -% 1161942 8473 4004 228 3 0 192.168.212.3 CH - [2015-05-30 16:03:43.542861] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOGz6wxQzZrjDjjvWUAAABq TLSv1 ECDHE-RSA-AES256-SHA 888 13070 -% 1775100 2484 765388 2699 0 0 192.168.212.3 CH - [2015-05-30 16:03:47.935014] "GET /EMail/message.aspx?&mailId=3928_14&folderId=1001_9&mailPos=5 HTTP/1.1" 200 11488 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOG06wxQzZrjDjiNdEAAAAm TLSv1 ECDHE-RSA-AES256-SHA 888 15803 -% 1250170 7813 217473 23380 0 0 192.168.186.76 CH - [2015-05-30 16:03:58.735715] "GET /EMail/newMessage.aspx?action=reply&mailId=3928_19&folderId=947_65&showPics=false HTTP/1.1" 200 17641 "https://www.example.com/EMail/message.aspx?&mailId=3928_19&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOG3qwxQzZrjDjiNdQAAAAr TLSv1.2 ECDHE-RSA-AES256-SHA384 1292 18554 -% 1181023 5401 143726 29183 6 3 192.168.186.76 CH - [2015-05-30 16:04:00.318913] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5879 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3928_19&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOG4KwxQzZrjDjiNdYAAAAt TLSv1.2 ECDHE-RSA-AES256-SHA384 710 9666 -% 694649 4202 0 0 3 0 192.168.186.76 CH - [2015-05-30 16:04:00.047369] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3928_19&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOG4KwxQzZrjDjiNdUAAAAs TLSv1.2 ECDHE-RSA-AES256-SHA384 1244 3611 -% 1036796 6382 23656 5270 3 0 192.168.186.76 CH - [2015-05-30 16:04:39.993885] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8478 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOHB6wxQzZrjDjiNd4AAAA0 TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 13147 -% 1511496 5928 501136 2762 3 0 192.168.186.76 CH - [2015-05-30 16:04:39.989054] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOHB6wxQzZrjDjiNd0AAAA2 TLSv1.2 ECDHE-RSA-AES256-SHA384 1261 13742 -% 1538514 5766 524516 2610 3 0 192.168.186.76 CH - [2015-05-30 16:04:43.453455] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOHC6wxQzZrjDjiNd8AAAA5 TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1130429 16101 112109 208 3 0 192.168.186.76 CH - [2015-05-30 16:04:44.597291] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7290 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOHDKwxQzZrjDjiNeAAAAA4 TLSv1.2 ECDHE-RSA-AES256-SHA384 726 7802 -% 1028357 8253 12290 4369 3 0 192.168.212.3 CH - [2015-05-30 16:05:35.198501] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOHP6wxQzZrjDjjvXEAAAB4 TLSv1 ECDHE-RSA-AES256-SHA 880 13065 -% 1923069 3019 912292 2797 0 0 192.168.212.3 CH - [2015-05-30 16:05:35.208609] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 26714 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOHP6wxQzZrjDjjvXIAAAB3 TLSv1 ECDHE-RSA-AES256-SHA 864 31130 -% 1947205 2180 841663 7978 0 0 192.168.212.3 CH - [2015-05-30 16:05:38.763447] "GET /EMail/message.aspx?&mailId=3928_15&folderId=1001_9&mailPos=4 HTTP/1.1" 200 11489 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOHQqwxQzZrjDjjvXQAAAB5 TLSv1 ECDHE-RSA-AES256-SHA 598 11988 -% 1200023 4525 172749 21613 0 0 192.168.212.3 CH - [2015-05-30 16:05:41.750641] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3928_15&folderId=1001_9&attachmentId=2&token=40812866382521222E17 HTTP/1.1" 200 55673 "https://www.example.com/EMail/message.aspx?&mailId=3928_15&folderId=1001_9&mailPos=4" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOHRawxQzZrjDjjvXUAAABB TLSv1 ECDHE-RSA-AES256-SHA 694 57316 -% 1051361 6517 34389 226 0 0 192.168.212.3 CH - [2015-05-30 16:06:15.297671] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOHZ6wxQzZrjDjiNeYAAAA9 TLSv1 ECDHE-RSA-AES256-SHA 888 13070 -% 1680822 3955 669229 2852 0 0 192.168.212.3 CH - [2015-05-30 16:06:57.095749] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOHkawxQzZrjDjiNeoAAAAL TLSv1 ECDHE-RSA-AES256-SHA 888 13070 -% 1766338 3939 752884 4490 0 0 192.168.212.3 CH - [2015-05-30 16:07:00.347666] "GET /EMail/message.aspx?&mailId=3927_22&folderId=1001_9&mailPos=2 HTTP/1.1" 200 11488 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOHlKwxQzZrjDjiNesAAAAF TLSv1 ECDHE-RSA-AES256-SHA 888 15803 -% 1683045 4816 651527 25772 0 0 192.168.212.3 CH - [2015-05-30 16:07:35.544187] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 26690 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOHt6wxQzZrjDjjvYkAAABN TLSv1 ECDHE-RSA-AES256-SHA 872 31119 -% 2179171 3667 18177 15882 0 0 192.168.212.3 CH - [2015-05-30 16:07:42.196482] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3927_23&folderId=1001_9&attachmentId=2&token=72839941712522662E17 HTTP/1.1" 200 60453 "https://www.example.com/EMail/message.aspx?&mailId=3927_23&folderId=1001_9&mailPos=1" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOHvqwxQzZrjDjjvYsAAABY TLSv1 ECDHE-RSA-AES256-SHA 984 66142 -% 1037112 5191 19986 187 0 0 192.168.212.3 CH - [2015-05-30 16:08:43.202954] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOH@6wxQzZrjDjjvZIAAABZ TLSv1 ECDHE-RSA-AES256-SHA 805 9379 -% 1879960 5568 864852 4505 0 0 192.168.212.3 CH - [2015-05-30 16:08:46.508843] "GET /EMail/message.aspx?&mailId=3928_18&folderId=1001_9&mailPos=0 HTTP/1.1" 200 11358 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOH-qwxQzZrjDjjvZQAAABb TLSv1 ECDHE-RSA-AES256-SHA 598 11860 -% 1396507 4326 368175 23083 0 0 192.168.212.3 CH - [2015-05-30 16:08:51.158140] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3928_18&folderId=1001_9&attachmentId=2&token=75246729986550149E18 HTTP/1.1" 200 53648 "https://www.example.com/EMail/message.aspx?&mailId=3928_18&folderId=1001_9&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOIA6wxQzZrjDjjvZYAAABc TLSv1 ECDHE-RSA-AES256-SHA 694 55300 -% 1111698 6441 83840 246 0 0 192.168.212.3 CH - [2015-05-30 16:10:35.852412] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOIa6wxQzZrjDjjvakAAAB8 TLSv1 ECDHE-RSA-AES256-SHA 848 4252 -% 951421 3591 946844 208 0 0 192.168.212.3 CH - [2015-05-30 16:10:36.914538] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOIbKwxQzZrjDjjvasAAABx TLSv1 ECDHE-RSA-AES256-SHA 518 325 -% 924805 2156 921933 207 0 0 192.168.212.3 CH - [2015-05-30 16:10:37.855622] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOIbawxQzZrjDjjvawAAAB0 TLSv1 ECDHE-RSA-AES256-SHA 486 7786 -% 720719 3032 714279 2506 0 0 192.168.212.3 CH - [2015-05-30 16:10:38.719749] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOIbqwxQzZrjDjjva0AAABz TLSv1 ECDHE-RSA-AES256-SHA 614 213 -% 1037282 3297 33287 195 0 0 192.168.212.3 CH - [2015-05-30 16:10:38.756753] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOIbqwxQzZrjDjjva4AAAB4 TLSv1 ECDHE-RSA-AES256-SHA 821 358 -% 1037155 1961 34401 216 0 0 192.168.212.3 CH - [2015-05-30 16:10:38.782501] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOIbqwxQzZrjDjjvbIAAAB5 TLSv1 ECDHE-RSA-AES256-SHA 853 358 -% 1013809 2957 9908 128 0 0 192.168.212.3 CH - [2015-05-30 16:10:38.758035] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOIbqwxQzZrjDjjva8AAAB2 TLSv1 ECDHE-RSA-AES256-SHA 837 358 -% 1156957 2882 153165 243 0 0 192.168.212.3 CH - [2015-05-30 16:10:38.768881] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOIbqwxQzZrjDjjvbAAAAB3 TLSv1 ECDHE-RSA-AES256-SHA 821 358 -% 1254727 1879 252100 202 0 0 192.168.212.3 CH - [2015-05-30 16:10:38.778606] "GET /EMail/scripts/variables_de.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOIbqwxQzZrjDjjvbEAAAB1 TLSv1 ECDHE-RSA-AES256-SHA 853 358 -% 1273390 3307 269232 168 0 0 192.168.212.3 CH - [2015-05-30 16:10:40.146526] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e902675f.52340f26b6ece" VjOIcKwxQzZrjDjjvbMAAABB TLSv1 ECDHE-RSA-AES256-SHA 662 213 -% 950155 3117 946084 255 0 0 192.168.186.76 CH - [2015-05-30 16:15:16.985151] "GET /EMail/sent.aspx?dir=desc HTTP/1.1" 200 47760 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOJhKwxQzZrjDjiNhAAAAAy TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 53128 -% 2991514 6535 660657 14065 3 0 192.168.186.76 CH - [2015-05-30 16:15:20.024186] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/sent.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOJiKwxQzZrjDjiNhEAAAAx TLSv1.2 ECDHE-RSA-AES256-SHA384 694 1978 -% 884960 3993 878930 217 3 0 192.168.186.76 CH - [2015-05-30 16:15:24.750177] "POST /EMail/sent.aspx HTTP/1.1" 200 48054 "https://www.example.com/EMail/sent.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOJjKwxQzZrjDjiNhQAAAAv TLSv1.2 ECDHE-RSA-AES256-SHA384 950 49356 -% 2522149 7622 916661 14591 3 0 192.168.186.76 CH - [2015-05-30 16:15:34.550695] "GET /EMail/tree.aspx?sNode-sharedTree=treeNewMsg HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOJlqwxQzZrjDjjvd0AAABf TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1412679 10888 393383 2651 3 0 192.168.186.76 CH - [2015-05-30 16:15:34.552413] "GET /EMail/newMessage.aspx?msg=new HTTP/1.1" 200 12029 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOJlqwxQzZrjDjjvd4AAABr TLSv1.2 ECDHE-RSA-AES256-SHA384 1271 16784 -% 1413120 5920 383806 21467 6 3 192.168.186.76 CH - [2015-05-30 16:15:36.128657] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5471 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOJmKwxQzZrjDjjveEAAABk TLSv1.2 ECDHE-RSA-AES256-SHA384 662 9250 -% 984600 6373 0 0 3 0 192.168.186.76 CH - [2015-05-30 16:15:36.046705] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOJmKwxQzZrjDjjveAAAABi TLSv1.2 ECDHE-RSA-AES256-SHA384 678 3434 -% 1094983 6422 78066 8551 3 0 192.168.186.76 CH - [2015-05-30 16:17:43.368804] "GET /EMail/attachost.aspx HTTP/1.1" 200 4989 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOKF6wxQzZrjDjjvfQAAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 1132 5659 -% 1045694 6374 35481 2409 3 0 192.168.186.76 CH - [2015-05-30 16:20:22.092406] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOKtqwxQzZrjDjiNiIAAAAC TLSv1.2 ECDHE-RSA-AES256-SHA384 2098 4561 -% 1107159 20263 36719 190 26 0 192.168.186.76 CH - [2015-05-30 16:20:23.217783] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=john.smith@ourindustry.com&bcc= HTTP/1.1" 200 4125 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOKt6wxQzZrjDjiNiMAAAAB TLSv1.2 ECDHE-RSA-AES256-SHA384 806 4634 -% 1011009 5771 0 6975 3 0 192.168.186.76 CH - [2015-05-30 16:20:27.053211] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7290 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOKu6wxQzZrjDjiNiQAAAAL TLSv1.2 ECDHE-RSA-AES256-SHA384 662 7802 -% 1045514 7288 32399 3773 3 0 192.168.197.129 CH - [2015-05-30 16:23:31.546302] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "2fc9116b.523540285dc95" VjOLc6wxQzZrjDjjvi4AAAB1 TLSv1.1 ECDHE-RSA-AES256-SHA 948 11584 22% 1142683 2060 137618 160 0 0 192.168.197.129 CH - [2015-05-30 16:23:31.545502] "GET /EMail/scripts/variables_fr.js HTTP/1.1" 200 1679 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "2fhost.523540285dc95" VjOLc6wxQzZrjDjiNi8AAAAG TLSv1.1 ECDHE-RSA-AES256-SHA 964 6091 27% 1247837 3001 243421 173 0 0 192.168.197.129 CH - [2015-05-30 16:23:40.191160] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/css/NNstyle.css" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "2fhost.523540285dc95" VjOLfKwxQzZrjDjjvi8AAABB TLSv1.1 ECDHE-RSA-AES256-SHA 932 5974 -% 1135250 1888 132561 177 0 0 192.168.197.129 CH - [2015-05-30 16:23:43.072486] "GET /EMail/overview.aspx HTTP/1.1" 200 5293 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "2fhost.523540285dc95" VjOLf6wxQzZrjDjiNjEAAAAR TLSv1.1 ECDHE-RSA-AES256-SHA 996 9622 -% 1243324 2108 237671 2877 0 0 192.168.197.129 CH - [2015-05-30 16:23:42.751440] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8532 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "2fhost.523540285dc95" VjOLfqwxQzZrjDjjvjEAAABE TLSv1.1 ECDHE-RSA-AES256-SHA 646 9378 -% 1993130 2703 982880 3135 0 0 192.168.197.129 CH - [2015-05-30 16:23:44.416337] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "2fhost.523540285dc95" VjOLgKwxQzZrjDjiNjIAAAAQ TLSv1.1 ECDHE-RSA-AES256-SHA 550 1290 -% 948448 2676 944994 137 0 0 192.168.197.129 CH - [2015-05-30 16:23:44.831563] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "2fhost.523540285dc95" VjOLgKwxQzZrjDjjvjIAAAB- TLSv1.1 ECDHE-RSA-AES256-SHA 598 1306 -% 849556 2936 845832 162 0 0 192.168.197.129 CH - [2015-05-30 16:23:45.791665] "GET /EMail/inbox.aspx HTTP/1.1" 200 7285 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "2fhost.523540285dc95" VjOLgawxQzZrjDjjvjMAAABC TLSv1.1 ECDHE-RSA-AES256-SHA 614 7754 -% 900075 1960 895153 2292 0 0 192.168.197.129 CH - [2015-05-30 16:23:46.737782] "GET /EMail/inbox.aspx HTTP/1.1" 200 7284 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "2fhost.523540285dc95" VjOLgqwxQzZrjDjiNjMAAAAS TLSv1.1 ECDHE-RSA-AES256-SHA 614 7754 -% 1041048 1945 36322 2264 0 0 192.168.197.129 CH - [2015-05-30 16:23:47.857768] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "2fhost.523540285dc95" VjOLg6wxQzZrjDjiNjQAAAAV TLSv1.1 ECDHE-RSA-AES256-SHA 550 586 -% 979781 1905 977103 173 0 0 192.168.197.129 CH - [2015-05-30 16:23:55.125716] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7284 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "2fhost.523540285dc95" VjOLi6wxQzZrjDjjvjYAAAB@ TLSv1.1 ECDHE-RSA-AES256-SHA 1028 11606 -% 1156709 2166 151723 2228 0 0 192.168.197.129 CH - [2015-05-30 16:24:02.447837] "GET /EMail/tree.aspx?sNode-sharedTree=treeSent HTTP/1.1" 200 8532 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "2fhost.523540285dc95" VjOLkqwxQzZrjDjjvjkAAABD TLSv1.1 ECDHE-RSA-AES256-SHA 1044 13230 -% 1116653 2408 102438 7410 0 0 192.168.146.78 CH - [2015-05-30 16:24:41.476742] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "20host.5235406c6e686" VjOLuawxQzZrjDjjvj4AAABK TLSv1.2 ECDHE-RSA-AES128-SHA256 703 11875 -% 894723 1196 889097 3699 0 0 192.168.186.76 CH - [2015-05-30 16:28:24.565663] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOMmKwxQzZrjDjjvlwAAABi TLSv1.2 ECDHE-RSA-AES256-SHA384 1399 4545 -% 928934 8093 918430 202 3 0 192.168.186.76 CH - [2015-05-30 16:28:25.508271] "GET /EMail/main.aspx HTTP/1.1" 200 3391 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOMmawxQzZrjDjjvl4AAABy TLSv1.2 ECDHE-RSA-AES256-SHA384 678 3898 -% 976949 5601 967476 1884 3 0 192.168.186.76 CH - [2015-05-30 16:28:26.528197] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOMmqwxQzZrjDjjvl8AAABl TLSv1.2 ECDHE-RSA-AES256-SHA384 662 4234 -% 795072 6316 777019 9649 3 0 192.168.186.76 CH - [2015-05-30 16:28:26.603767] "GET /EMail/overview.aspx HTTP/1.1" 200 5537 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "280bc544.5234c6c781c1a" VjOMmqwxQzZrjDjjvmAAAABt TLSv1.2 ECDHE-RSA-AES256-SHA384 1180 6219 -% 1182672 6371 173132 1745 3 0 192.168.224.139 CH - [2015-05-30 16:58:30.209303] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7920 "-" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOTpqwxQzZrjDjjv18AAABz TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 786 12325 -% 1026231 1883 19689 3923 0 0 192.168.224.139 CH - [2015-05-30 16:58:31.559709] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOTp6wxQzZrjDjiNr0AAAAh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 785 732 56% 681116 2630 677648 133 0 0 192.168.224.139 CH - [2015-05-30 16:58:31.564458] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOTp6wxQzZrjDjiNr4AAAAi TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 772 1823 -% 700544 1645 698400 85 0 0 192.168.224.139 CH - [2015-05-30 16:58:31.559538] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOTp6wxQzZrjDjjv2EAAAB5 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 775 7799 22% 769989 2157 765139 113 0 0 192.168.224.139 CH - [2015-05-30 16:58:31.461596] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOTp6wxQzZrjDjjv2AAAAB4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 532 2421 13% 976504 2943 971843 182 0 0 192.168.224.139 CH - [2015-05-30 16:58:31.564557] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOTp6wxQzZrjDjjv2IAAAB2 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 785 2014 22% 909872 1624 907262 129 0 0 192.168.224.139 CH - [2015-05-30 16:58:32.575121] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOTqKwxQzZrjDjjv2MAAAB3 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 517 2421 13% 671409 2931 667046 143 0 0 192.168.224.139 CH - [2015-05-30 16:58:32.594523] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOTqKwxQzZrjDjiNr8AAAAj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 521 1792 -% 848286 2856 844543 162 0 0 192.168.187.114 CH - [2015-05-30 16:58:33.370404] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "f618be77.523547fe32324" VjOTqawxQzZrjDjiNsAAAAAl TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 572 8359 -% 943559 2047 940373 200 0 0 192.168.224.139 CH - [2015-05-30 16:59:53.351473] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOT@awxQzZrjDjjv20AAAB@ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1461 470 -% 909359 9132 899348 143 0 0 192.168.224.139 CH - [2015-05-30 16:59:54.416540] "GET /EMail/error.aspx HTTP/1.1" 200 3792 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOT@qwxQzZrjDjjv24AAAB6 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 602 4214 -% 850194 3118 836440 9885 0 0 192.168.224.139 CH - [2015-05-30 16:59:55.446515] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/error.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOT@6wxQzZrjDjjv28AAABA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 485 2421 13% 940807 1893 936823 225 0 0 192.168.224.139 CH - [2015-05-30 16:59:56.571399] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/error.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOT-KwxQzZrjDjjv3AAAABD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 470 2545 14% 858614 1913 855155 191 0 0 192.168.224.139 CH - [2015-05-30 17:00:42.096554] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOUKqwxQzZrjDjiNssAAAAy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1463 501 -% 1783964 6838 776245 180 0 0 192.168.224.139 CH - [2015-05-30 17:00:44.085432] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7357 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOULKwxQzZrjDjiNswAAAAx TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 633 7779 -% 894377 2688 886768 4314 0 0 192.168.224.139 CH - [2015-05-30 17:00:45.135532] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOULawxQzZrjDjiNs0AAAAz TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 516 2545 14% 846115 2925 841411 181 0 0 192.168.224.139 CH - [2015-05-30 17:00:45.215425] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOULawxQzZrjDjjv3oAAABY TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 764 4381 23% 858949 3084 853326 157 0 0 192.168.224.139 CH - [2015-05-30 17:00:46.145390] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOULqwxQzZrjDjiNs4AAAA1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 501 2545 14% 1051964 3496 46598 185 0 0 192.168.224.139 CH - [2015-05-30 17:00:58.066593] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOUOqwxQzZrjDjjv30AAABd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1324 559 -% 958494 5374 951886 217 0 0 192.168.224.139 CH - [2015-05-30 17:00:59.240491] "GET /EMail/main.aspx HTTP/1.1" 200 3389 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOUO6wxQzZrjDjjv34AAABM TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 585 3805 -% 928237 3478 922863 1169 0 0 192.168.224.139 CH - [2015-05-30 17:01:00.375354] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOUPKwxQzZrjDjjv38AAABX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 484 2421 13% 869985 3293 865327 121 0 0 192.168.224.139 CH - [2015-05-30 17:01:01.400764] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOUPawxQzZrjDjjv4EAAABV TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 524 4128 -% 819026 3852 806248 8314 0 0 192.168.224.139 CH - [2015-05-30 17:01:01.498442] "GET /EMail/overview.aspx HTTP/1.1" 200 5286 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOUPawxQzZrjDjjv4IAAABZ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 781 5846 -% 1128437 2879 121875 2786 0 0 192.168.224.139 CH - [2015-05-30 17:01:02.415701] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOUPqwxQzZrjDjjv4QAAABb TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 471 2421 13% 785569 2928 780614 415 0 0 192.168.224.139 CH - [2015-05-30 17:01:02.880556] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOUPqwxQzZrjDjjv4YAAABc TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 735 1386 -% 784295 1828 781748 172 0 0 192.168.224.139 CH - [2015-05-30 17:01:02.801072] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOUPqwxQzZrjDjjv4UAAABa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 488 2545 14% 875028 3844 868975 144 0 0 192.168.224.139 CH - [2015-05-30 17:01:01.498477] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOUPawxQzZrjDjjv4MAAABe TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 807 9317 -% 2193276 3549 180035 4424 0 0 192.168.224.139 CH - [2015-05-30 17:01:03.855566] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOUP6wxQzZrjDjjv4cAAABj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 473 2421 13% 565594 2937 561388 141 0 0 192.168.224.139 CH - [2015-05-30 17:01:03.883922] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOUP6wxQzZrjDjjv4kAAABn TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 522 1260 -% 823108 3071 819100 175 0 0 192.168.224.139 CH - [2015-05-30 17:01:03.870499] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOUP6wxQzZrjDjjv4gAAABh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 514 2545 14% 1031308 2725 26872 205 0 0 192.168.224.139 CH - [2015-05-30 17:01:04.964364] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOUQKwxQzZrjDjjv4oAAABm TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 499 2421 13% 924784 3704 919215 186 0 0 192.168.224.139 CH - [2015-05-30 17:01:21.061358] "GET /EMail/inbox.aspx HTTP/1.1" 200 8471 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOUUawxQzZrjDjjv4wAAABo TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1094 9060 -% 1303971 2601 298169 2548 0 0 192.168.224.139 CH - [2015-05-30 17:01:22.598486] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOUUqwxQzZrjDjjv48AAABr TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 730 665 -% 879282 2782 875621 169 0 0 192.168.224.139 CH - [2015-05-30 17:01:22.599886] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOUUqwxQzZrjDjjv5EAAABk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 727 677 -% 878576 2709 875251 83 0 0 192.168.224.139 CH - [2015-05-30 17:01:22.512576] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOUUqwxQzZrjDjjv44AAABf TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 485 2545 14% 973439 2935 968994 106 0 0 192.168.224.139 CH - [2015-05-30 17:01:22.598571] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOUUqwxQzZrjDjjv5AAAABp TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 730 1951 -% 1150401 2783 146889 135 0 0 192.168.224.139 CH - [2015-05-30 17:01:23.925332] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOUU6wxQzZrjDjjv5IAAABu TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 470 2545 14% 969739 2025 966392 174 0 0 192.168.224.139 CH - [2015-05-30 17:01:54.118454] "GET /EMail/message.aspx?&mailId=3928_37&folderId=3514_10&mailPos=0 HTTP/1.1" 200 15857 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOUcqwxQzZrjDjiNtYAAAA7 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1136 16476 -% 2316690 4199 279587 31279 0 0 192.168.224.139 CH - [2015-05-30 17:01:56.678306] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/message.aspx?&mailId=3928_37&folderId=3514_10&mailPos=0" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOUdKwxQzZrjDjjv5UAAABl TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 785 2683 14% 951432 2212 947450 185 0 0 192.168.224.139 CH - [2015-05-30 17:01:57.828615] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/message.aspx?&mailId=3928_37&folderId=3514_10&mailPos=0" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOUdawxQzZrjDjiNtcAAAA8 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 515 2545 14% 867593 1906 864179 182 0 0 192.168.224.139 CH - [2015-05-30 17:03:08.684293] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/message.aspx?&mailId=3928_37&folderId=3514_10&mailPos=0" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOUvKwxQzZrjDjiNtwAAAAD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1084 2226 -% 964962 1945 962372 151 0 0 192.168.224.139 CH - [2015-05-30 17:03:08.759577] "GET /EMail/downloadPDF.aspx HTTP/1.1" 200 4280 "https://www.example.com/EMail/message.aspx?&mailId=3928_37&folderId=3514_10&mailPos=0" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOUvKwxQzZrjDjiNt0AAAAC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 830 4840 -% 947939 1835 944282 1332 0 0 192.168.224.139 CH - [2015-05-30 17:03:09.815009] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/downloadPDF.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOUvawxQzZrjDjiNt4AAAAB TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 491 2421 13% 869108 3905 863076 214 0 0 192.168.224.139 CH - [2015-05-30 17:03:10.824575] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/downloadPDF.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOUvqwxQzZrjDjiNt8AAAAL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 476 2545 14% 823370 2922 818451 471 0 0 192.168.224.139 CH - [2015-05-30 17:03:21.628456] "POST /EMail/MailHandler HTTP/1.1" 200 5596 "https://www.example.com/EMail/message.aspx?&mailId=3928_37&folderId=3514_10&mailPos=0" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOUyawxQzZrjDjiNuEAAAAF TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1382 6259 -% 2902226 5576 895802 147 0 0 192.168.224.139 CH - [2015-05-30 17:03:31.589472] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8463 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOU06wxQzZrjDjjv6IAAAB1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1204 12740 -% 1083462 3447 74734 4351 0 0 192.168.224.139 CH - [2015-05-30 17:03:31.670238] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOU06wxQzZrjDjjv6MAAABB TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 834 9317 -% 1391416 2529 379514 4433 0 0 192.168.224.139 CH - [2015-05-30 17:03:32.864640] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOU1KwxQzZrjDjjv6UAAABE TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 494 2421 13% 883786 2965 878927 184 0 0 192.168.224.139 CH - [2015-05-30 17:03:32.949370] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOU1KwxQzZrjDjjv6YAAAB- TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 739 2016 -% 966955 2900 963208 216 0 0 192.168.224.139 CH - [2015-05-30 17:03:33.969402] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOU1awxQzZrjDjjv6cAAABC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 479 2545 14% 931514 1916 927980 186 0 0 192.168.224.139 CH - [2015-05-30 17:03:35.572511] "GET /EMail/message.aspx?&mailId=3928_37&folderId=3514_10&mailPos=0 HTTP/1.1" 200 15857 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOU16wxQzZrjDjjv6gAAABF TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 578 16338 -% 1442794 4751 402355 33966 0 0 192.168.224.139 CH - [2015-05-30 17:03:37.145470] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/message.aspx?&mailId=3928_37&folderId=3514_10&mailPos=0" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOU2awxQzZrjDjjv6kAAAB7 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 2421 13% 807450 2938 803122 162 0 0 192.168.224.139 CH - [2015-05-30 17:03:38.164477] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/message.aspx?&mailId=3928_37&folderId=3514_10&mailPos=0" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOU2qwxQzZrjDjjv6oAAABG TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 515 2421 13% 849469 2949 845175 140 0 0 192.168.224.139 CH - [2015-05-30 17:03:42.522661] "GET /EMail/downloadPDF.aspx HTTP/1.1" 200 4281 "https://www.example.com/EMail/message.aspx?&mailId=3928_37&folderId=3514_10&mailPos=0" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOU3qwxQzZrjDjjv6wAAAB6 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 575 4703 -% 927612 2940 921665 2228 0 0 192.168.224.139 CH - [2015-05-30 17:03:43.554303] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/downloadPDF.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOU36wxQzZrjDjjv60AAABA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 491 2421 13% 685521 3491 680078 174 0 0 192.168.224.139 CH - [2015-05-30 17:03:44.404355] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/downloadPDF.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOU4KwxQzZrjDjjv64AAABD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 476 2421 13% 802809 3147 798262 148 0 0 192.168.224.139 CH - [2015-05-30 17:03:55.205718] "POST /EMail/MailHandler HTTP/1.1" 200 5611 "https://www.example.com/EMail/message.aspx?&mailId=3928_37&folderId=3514_10&mailPos=0" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOU66wxQzZrjDjjv7AAAABL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1377 6274 -% 1614649 8246 605265 183 0 0 192.168.224.139 CH - [2015-05-30 17:04:18.310401] "GET /EMail/tree.aspx?oNode-sharedTree=treePreferences&sNode-sharedTree=treePreferences HTTP/1.1" 200 10858 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOVAqwxQzZrjDjjv7QAAABI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1182 11738 -% 1398697 4818 382762 4393 0 0 192.168.224.139 CH - [2015-05-30 17:04:20.103593] "GET /EMail/images/tree/folder/pixel.gif HTTP/1.1" 200 807 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePreferences&sNode-sharedTree=treePreferences" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOVBKwxQzZrjDjjv7YAAABT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 803 1357 -% 777676 2887 773906 137 0 0 192.168.224.139 CH - [2015-05-30 17:04:20.003901] "GET /EMail/images/tree/folder/minus-first-node.gif HTTP/1.1" 200 842 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePreferences&sNode-sharedTree=treePreferences" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOVBKwxQzZrjDjjv7UAAABP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 559 1254 -% 913886 1848 911346 131 0 0 192.168.224.139 CH - [2015-05-30 17:04:20.103652] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePreferences&sNode-sharedTree=treePreferences" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOVBKwxQzZrjDjjv7cAAABN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 805 2559 13% 1040898 2865 36500 165 0 0 192.168.224.139 CH - [2015-05-30 17:04:21.235392] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePreferences&sNode-sharedTree=treePreferences" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOVBawxQzZrjDjjv7gAAABW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 535 2421 13% 924103 2140 920250 242 0 0 192.168.224.139 CH - [2015-05-30 17:04:28.080440] "GET /EMail/overview.aspx HTTP/1.1" 200 5286 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePreferences&sNode-sharedTree=treePreferences" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOVDKwxQzZrjDjjv7wAAABU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 847 5846 -% 870030 1639 865018 2794 0 0 192.168.224.139 CH - [2015-05-30 17:04:28.075412] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 10866 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePreferences&sNode-sharedTree=treePreferences" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOVDKwxQzZrjDjjv7sAAABQ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 873 11746 -% 1453642 4004 437923 5149 0 0 192.168.224.139 CH - [2015-05-30 17:04:29.175518] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOVDawxQzZrjDjjv70AAABd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 488 2545 14% 976763 3240 971499 241 0 0 192.168.224.139 CH - [2015-05-30 17:04:30.285391] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOVDqwxQzZrjDjjv74AAABM TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 499 2421 13% 887908 2921 883507 145 0 0 192.168.224.139 CH - [2015-05-30 17:05:25.189443] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOVRawxQzZrjDjiNuwAAAAQ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1112 547 -% 1033978 2552 30644 245 0 0 192.168.224.139 CH - [2015-05-30 17:05:26.399429] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOVRqwxQzZrjDjiNu0AAAAS TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 526 676 75% 810413 2180 807402 264 0 0 192.168.224.139 CH - [2015-05-30 17:05:27.491757] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "https://www.example.com/EMail/index.html" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOVR6wxQzZrjDjiNu4AAAAV TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 543 318 -% 1042663 3406 38511 179 0 0 192.168.224.139 CH - [2015-05-30 17:05:28.625720] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "https://www.example.com/EMail/index.html" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOVSKwxQzZrjDjiNu8AAAAU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 525 7758 -% 841848 2974 834503 3617 0 0 192.168.224.139 CH - [2015-05-30 17:05:29.569403] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOVSawxQzZrjDjiNvAAAAAX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 485 2421 13% 680075 2110 676276 234 0 0 192.168.224.139 CH - [2015-05-30 17:05:30.364542] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "d9796b3c.523547fb2e717" VjOVSqwxQzZrjDjiNvEAAAAb TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 470 2545 14% 825737 3206 820969 142 0 0 192.168.213.21 CH - [2015-05-30 17:10:39.586957] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7383 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOWf6wxQzZrjDjjv@4AAABL TLSv1 ECDHE-RSA-AES256-SHA 704 11809 -% 879941 2243 873201 3718 0 0 192.168.213.21 CH - [2015-05-30 17:10:40.640864] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOWgKwxQzZrjDjiNwwAAAA1 TLSv1 ECDHE-RSA-AES256-SHA 885 358 -% 1070959 3158 66690 272 0 0 192.168.213.21 CH - [2015-05-30 17:10:40.647915] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOWgKwxQzZrjDjjv@8AAABH TLSv1 ECDHE-RSA-AES256-SHA 901 358 -% 1070614 3708 66136 162 0 0 192.168.213.21 CH - [2015-05-30 17:10:40.648746] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOWgKwxQzZrjDjjv-AAAABO TLSv1 ECDHE-RSA-AES256-SHA 869 358 -% 1155987 3730 151434 198 0 0 192.168.213.21 CH - [2015-05-30 17:10:40.651834] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOWgKwxQzZrjDjjv-EAAABK TLSv1 ECDHE-RSA-AES256-SHA 869 358 -% 1251899 2898 247829 206 0 0 192.168.213.21 CH - [2015-05-30 17:10:42.000531] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOWgqwxQzZrjDjjv-IAAABT TLSv1 ECDHE-RSA-AES256-SHA 694 213 -% 916527 2281 913448 205 0 0 192.168.213.21 CH - [2015-05-30 17:10:43.094935] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82399fd7.52354ab61d997" VjOWg6wxQzZrjDjiNw0AAAAv TLSv1 ECDHE-RSA-AES256-SHA 624 5569 -% 899020 703 897391 219 0 0 192.168.213.21 CH - [2015-05-30 17:10:54.065597] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOWjqwxQzZrjDjjv-MAAABP TLSv1 ECDHE-RSA-AES256-SHA 1032 4257 -% 716043 5382 709890 167 0 0 192.168.213.21 CH - [2015-05-30 17:10:54.914044] "GET /EMail/main.aspx HTTP/1.1" 200 3415 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOWjqwxQzZrjDjiNxAAAAA2 TLSv1 ECDHE-RSA-AES256-SHA 872 7670 -% 847904 2104 844163 1137 0 0 192.168.213.21 CH - [2015-05-30 17:10:56.066594] "GET /EMail/overview.aspx HTTP/1.1" 200 6449 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOWkKwxQzZrjDjjv-QAAABW TLSv1 ECDHE-RSA-AES256-SHA 840 10726 -% 1265693 2205 258977 3664 0 0 192.168.213.21 CH - [2015-05-30 17:11:05.709524] "GET /EMail/images/Highost.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOWmawxQzZrjDjjv-YAAABY TLSv1 ECDHE-RSA-AES256-SHA 952 4049 -% 789911 2439 786538 184 0 0 192.168.213.21 CH - [2015-05-30 17:11:05.708876] "GET /EMail/images/msgClosed.png HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOWmawxQzZrjDjjv-UAAABU TLSv1 ECDHE-RSA-AES256-SHA 952 4049 -% 956952 2549 953676 205 0 0 192.168.213.21 CH - [2015-05-30 17:11:05.711435] "GET /EMail/images/msgOpened.png HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOWmawxQzZrjDjiNxQAAAA8 TLSv1 ECDHE-RSA-AES256-SHA 952 4049 -% 963301 2740 959737 178 0 0 192.168.213.21 CH - [2015-05-30 17:11:05.710893] "GET /EMail/images/attach.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOWmawxQzZrjDjiNxMAAAA7 TLSv1 ECDHE-RSA-AES256-SHA 936 4049 -% 1200090 1810 197502 196 0 0 192.168.213.21 CH - [2015-05-30 17:11:39.215841] "GET /EMail/message.aspx?&mailId=3928_28&folderId=1001_9&mailPos=12 HTTP/1.1" 200 11490 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOWu6wxQzZrjDjjv-4AAABa TLSv1 ECDHE-RSA-AES256-SHA 888 15803 -% 1631508 5302 602365 22837 0 0 192.168.213.21 CH - [2015-05-30 17:12:09.213089] "GET /EMail/newMessage.aspx?msg=new HTTP/1.1" 200 12053 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOW2awxQzZrjDjjwAEAAABh TLSv1 ECDHE-RSA-AES256-SHA 872 16400 -% 849726 3743 823108 20851 3 3 192.168.213.21 CH - [2015-05-30 17:12:09.213720] "GET /EMail/tree.aspx?sNode-sharedTree=treeNewMsg HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOW2awxQzZrjDjjwAIAAABm TLSv1 ECDHE-RSA-AES256-SHA 888 13070 -% 1650153 2884 639205 4545 0 0 192.168.213.21 CH - [2015-05-30 17:12:09.542879] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOW2awxQzZrjDjjwAYAAABr TLSv1 ECDHE-RSA-AES256-SHA 805 9379 -% 1775114 2540 764655 3190 0 0 192.168.213.21 CH - [2015-05-30 17:12:09.540295] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 44886 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOW2awxQzZrjDjjwAUAAABo TLSv1 ECDHE-RSA-AES256-SHA 789 45736 -% 2405589 2794 550964 18171 0 0 192.168.213.21 CH - [2015-05-30 17:12:13.920547] "GET /EMail/message.aspx?&mailId=3927_25&folderId=1001_9&mailPos=11 HTTP/1.1" 200 11490 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOW3awxQzZrjDjjwAcAAABp TLSv1 ECDHE-RSA-AES256-SHA 598 12004 -% 1311077 4917 286623 18462 0 0 192.168.213.21 CH - [2015-05-30 17:12:16.324668] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3927_25&folderId=1001_9&attachmentId=2&token=51202580901266606E18 HTTP/1.1" 200 57298 "https://www.example.com/EMail/message.aspx?&mailId=3927_25&folderId=1001_9&mailPos=11" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOW4KwxQzZrjDjjwAgAAABu TLSv1 ECDHE-RSA-AES256-SHA 694 59043 -% 1201788 6580 163322 208 0 0 192.168.213.21 CH - [2015-05-30 17:12:36.709420] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 44878 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOW9KwxQzZrjDjjwAwAAABt TLSv1 ECDHE-RSA-AES256-SHA 872 49448 -% 2475923 3517 147079 13867 0 0 192.168.213.21 CH - [2015-05-30 17:13:03.167032] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOXD6wxQzZrjDjiNxsAAAAK TLSv1 ECDHE-RSA-AES256-SHA 888 13070 -% 1469065 2602 457209 4403 0 0 192.168.213.21 CH - [2015-05-30 17:13:03.216191] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 44870 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOXD6wxQzZrjDjjwBEAAAB0 TLSv1 ECDHE-RSA-AES256-SHA 872 49448 -% 2067873 2323 663698 20031 0 0 192.168.213.21 CH - [2015-05-30 17:13:09.016955] "GET /EMail/message.aspx?&mailId=3928_30&folderId=1001_9&mailPos=9 HTTP/1.1" 200 11483 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOXFawxQzZrjDjjwBIAAAB5 TLSv1 ECDHE-RSA-AES256-SHA 888 15824 -% 1410089 3189 375913 30037 0 0 192.168.213.21 CH - [2015-05-30 17:13:35.464590] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOXL6wxQzZrjDjjwBgAAABE TLSv1 ECDHE-RSA-AES256-SHA 888 13070 -% 1620915 3448 610244 2739 0 0 192.168.213.21 CH - [2015-05-30 17:13:41.965640] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3927_27&folderId=1001_9&attachmentId=2&token=41231024688976957E18 HTTP/1.1" 200 55355 "https://www.example.com/EMail/message.aspx?&mailId=3927_27&folderId=1001_9&mailPos=8" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOXNawxQzZrjDjjwBsAAAB7 TLSv1 ECDHE-RSA-AES256-SHA 984 60832 -% 1075614 7825 46383 420 0 0 192.168.213.21 CH - [2015-05-30 17:14:00.661369] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOXSKwxQzZrjDjjwB8AAABD TLSv1 ECDHE-RSA-AES256-SHA 888 13070 -% 2344231 3526 332905 2964 0 0 192.168.213.21 CH - [2015-05-30 17:14:05.262150] "GET /EMail/message.aspx?&mailId=3927_28&folderId=1001_9&mailPos=7 HTTP/1.1" 200 11488 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOXTawxQzZrjDjjwCEAAABH TLSv1 ECDHE-RSA-AES256-SHA 888 15824 -% 1300030 5713 257976 35151 0 0 192.168.213.21 CH - [2015-05-30 17:14:26.016498] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 44847 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOXYqwxQzZrjDjjwCYAAABW TLSv1 ECDHE-RSA-AES256-SHA 872 49395 -% 2672496 3520 271497 18739 0 0 192.168.213.21 CH - [2015-05-30 17:14:33.166822] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3928_31&folderId=1001_9&attachmentId=2&token=62673405085031782E18 HTTP/1.1" 200 54395 "https://www.example.com/EMail/message.aspx?&mailId=3928_31&folderId=1001_9&mailPos=6" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOXaawxQzZrjDjjwCkAAABQ TLSv1 ECDHE-RSA-AES256-SHA 984 59872 -% 977443 6073 961121 205 0 0 192.168.213.21 CH - [2015-05-30 17:14:56.022231] "GET /EMail/message.aspx?&mailId=3927_29&folderId=1001_9&mailPos=5 HTTP/1.1" 200 11488 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOXgKwxQzZrjDjjwC4AAABV TLSv1 ECDHE-RSA-AES256-SHA 888 15824 -% 1318298 5103 288801 23215 0 0 192.168.213.21 CH - [2015-05-30 17:14:58.863548] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3927_29&folderId=1001_9&attachmentId=2&token=54523525532074957E18 HTTP/1.1" 200 55004 "https://www.example.com/EMail/message.aspx?&mailId=3927_29&folderId=1001_9&mailPos=5" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOXgqwxQzZrjDjjwC8AAABb TLSv1 ECDHE-RSA-AES256-SHA 984 60496 -% 1030652 3963 4986 215 0 0 192.168.213.21 CH - [2015-05-30 17:14:59.965265] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3927_29&folderId=1001_9&attachmentId=2&token=54523525532074957E18 HTTP/1.1" 200 55004 "https://www.example.com/EMail/message.aspx?&mailId=3927_29&folderId=1001_9&mailPos=5" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOXg6wxQzZrjDjjwDAAAABc TLSv1 ECDHE-RSA-AES256-SHA 984 60554 -% 1007198 3903 981596 191 0 0 192.168.213.21 CH - [2015-05-30 17:15:21.764625] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOXmawxQzZrjDjjwDYAAABm TLSv1 ECDHE-RSA-AES256-SHA 805 9379 -% 1793219 2629 783445 2827 0 0 192.168.205.149 CH - [2015-05-30 17:15:24.712545] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "296aac09.52354bb729fb8" VjOXnKwxQzZrjDjiNx8AAAAI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1103 8117 23% 1030064 1736 26397 180 0 0 192.168.205.149 CH - [2015-05-30 17:15:24.711482] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "296aac09.52354bb729fb8" VjOXnKwxQzZrjDjjwDgAAABo TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1073 4615 56% 1047376 1931 44671 140 0 0 192.168.205.149 CH - [2015-05-30 17:15:24.713091] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7161 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "296aac09.52354bb729fb8" VjOXnKwxQzZrjDjjwDkAAABr TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1098 11913 22% 1078525 1755 73135 133 0 0 192.168.205.149 CH - [2015-05-30 17:15:24.714056] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "296aac09.52354bb729fb8" VjOXnKwxQzZrjDjjwDoAAABp TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1073 5897 22% 1227744 2917 223912 119 0 0 192.168.205.149 CH - [2015-05-30 17:15:26.086466] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "296aac09.52354bb729fb8" VjOXnqwxQzZrjDjjwDsAAABu TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 590 1792 -% 666791 2916 662978 172 0 0 192.168.205.149 CH - [2015-05-30 17:15:26.555680] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "855e44b9.52354bc471e20" VjOXnqwxQzZrjDjjwDwAAABi TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 635 5751 -% 951097 501 949936 149 0 0 192.168.213.21 CH - [2015-05-30 17:15:28.611349] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3928_32&folderId=1001_9&attachmentId=2&token=97799696868257882E17 HTTP/1.1" 200 54942 "https://www.example.com/EMail/message.aspx?&mailId=3928_32&folderId=1001_9&mailPos=4" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOXoKwxQzZrjDjjwD0AAABy TLSv1 ECDHE-RSA-AES256-SHA 984 60432 -% 1011596 3966 0 164 0 0 192.168.205.149 CH - [2015-05-30 17:15:39.917823] "GET /EMail/overview.aspx HTTP/1.1" 200 5283 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "296aac09.52354bb729fb8" VjOXq6wxQzZrjDjjwD8AAABv TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1075 9726 -% 1522280 2524 517164 1959 0 0 192.168.205.149 CH - [2015-05-30 17:15:39.920407] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "296aac09.52354bb729fb8" VjOXq6wxQzZrjDjjwEAAAABw TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1101 13200 -% 1607967 3478 597241 2750 0 0 192.168.205.149 CH - [2015-05-30 17:15:41.599738] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "296aac09.52354bb729fb8" VjOXrawxQzZrjDjjwEMAAABx TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 607 1260 -% 608666 1863 606187 136 0 0 192.168.205.149 CH - [2015-05-30 17:15:41.486704] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "296aac09.52354bb729fb8" VjOXrawxQzZrjDjjwEEAAABs TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 565 1248 -% 931491 2926 927657 176 0 0 192.168.205.149 CH - [2015-05-30 17:15:44.851526] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "296aac09.52354bb729fb8" VjOXsKwxQzZrjDjjwEYAAAB4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 561 9179 -% 1383385 3688 371062 3876 0 0 192.168.205.149 CH - [2015-05-30 17:15:44.840949] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8377 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "296aac09.52354bb729fb8" VjOXsKwxQzZrjDjjwEUAAABz TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 544 8828 -% 1555332 3337 546689 4277 0 0 192.168.205.149 CH - [2015-05-30 17:15:46.592841] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "296aac09.52354bb729fb8" VjOXsqwxQzZrjDjjwEgAAAB2 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 569 527 -% 935141 2707 931614 184 0 0 192.168.205.149 CH - [2015-05-30 17:15:46.592537] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "296aac09.52354bb729fb8" VjOXsqwxQzZrjDjjwEcAAAB5 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 566 539 -% 1071634 2952 67940 134 0 0 192.168.205.149 CH - [2015-05-30 17:15:49.365579] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "296aac09.52354bb729fb8" VjOXtawxQzZrjDjjwEkAAAB3 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 566 2088 -% 604660 2961 600850 191 0 0 192.168.205.149 CH - [2015-05-30 17:15:51.073362] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "296aac09.52354bb729fb8" VjOXt6wxQzZrjDjjwEsAAAB1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 835 356 -% 1001396 5875 0 194 0 0 192.168.213.21 CH - [2015-05-30 17:15:50.967292] "GET /EMail/message.aspx?&mailId=3927_30&folderId=1001_9&mailPos=3 HTTP/1.1" 200 11488 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOXtqwxQzZrjDjjwEoAAAB9 TLSv1 ECDHE-RSA-AES256-SHA 888 15824 -% 1167366 4525 133316 28185 0 0 192.168.205.149 CH - [2015-05-30 17:15:52.094628] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7277 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "296aac09.52354bb729fb8" VjOXuKwxQzZrjDjjwE0AAABE TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 594 7699 -% 938796 5915 928423 3717 0 0 192.168.205.149 CH - [2015-05-30 17:15:56.050853] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "296aac09.52354bb729fb8" VjOXvKwxQzZrjDjjwE8AAABF TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 557 409 -% 911776 3479 907315 193 0 0 192.168.205.149 CH - [2015-05-30 17:15:56.984574] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "296aac09.52354bb729fb8" VjOXvKwxQzZrjDjjwFAAAAB7 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 538 676 75% 1065876 3132 61907 221 0 0 192.168.205.149 CH - [2015-05-30 17:15:58.478367] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 - - + "855e44b9.52354bc471e20" VjOXvqwxQzZrjDjjwFEAAABG TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 873 5575 -% 2677 1750 56 119 0 0 192.168.205.149 CH - [2015-05-30 17:15:58.594566] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "296aac09.52354bb729fb8" VjOXvqwxQzZrjDjjwFIAAAB6 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 504 318 -% 878412 2093 875568 184 0 0 192.168.205.149 CH - [2015-05-30 17:15:59.493219] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "296aac09.52354bb729fb8" VjOXv6wxQzZrjDjjwFMAAABJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 486 7758 -% 680498 2889 674651 2335 0 0 192.168.205.149 CH - [2015-05-30 17:16:00.390602] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "296aac09.52354bb729fb8" VjOXwKwxQzZrjDjjwFUAAABL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1167 8117 23% 653512 1939 649488 183 0 0 192.168.205.149 CH - [2015-05-30 17:16:00.401805] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "296aac09.52354bb729fb8" VjOXwKwxQzZrjDjjwFYAAABH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1162 11682 22% 839098 3234 833282 148 0 0 192.168.205.149 CH - [2015-05-30 17:16:00.315453] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "296aac09.52354bb729fb8" VjOXwKwxQzZrjDjjwFQAAABD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 602 2421 13% 925455 2847 921199 96 0 0 192.168.205.149 CH - [2015-05-30 17:16:00.401312] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" www.example.com 192.168.34.16 443 proxy-server - + "296aac09.52354bb729fb8" VjOXwKwxQzZrjDjiNyEAAAAN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1181 4227 -% 1141805 2161 138936 136 0 0 192.168.213.21 CH - [2015-05-30 17:16:16.812763] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOX0KwxQzZrjDjiNyQAAAAR TLSv1 ECDHE-RSA-AES256-SHA 888 13070 -% 1716841 2905 706536 2867 0 0 192.168.213.21 CH - [2015-05-30 17:16:22.865305] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3928_33&folderId=1001_9&attachmentId=2&token=53692284837763123E18 HTTP/1.1" 200 54992 "https://www.example.com/EMail/message.aspx?&mailId=3928_33&folderId=1001_9&mailPos=2" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOX1qwxQzZrjDjjwFoAAABR TLSv1 ECDHE-RSA-AES256-SHA 984 60480 -% 1046631 6337 17936 191 0 0 192.168.213.21 CH - [2015-05-30 17:16:42.468796] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOX6qwxQzZrjDjjwFwAAABQ TLSv1 ECDHE-RSA-AES256-SHA 888 13070 -% 2167149 2626 156270 3597 0 0 192.168.213.21 CH - [2015-05-30 17:16:46.320617] "GET /EMail/message.aspx?&mailId=3927_32&folderId=1001_9&mailPos=1 HTTP/1.1" 200 11488 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOX7qwxQzZrjDjjwF4AAABM TLSv1 ECDHE-RSA-AES256-SHA 888 15824 -% 1301194 3060 277825 19479 0 0 192.168.213.21 CH - [2015-05-30 17:17:08.315570] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 44798 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOYBKwxQzZrjDjjwGEAAABZ TLSv1 ECDHE-RSA-AES256-SHA 872 49347 -% 2031974 2200 723100 14494 0 0 192.168.213.21 CH - [2015-05-30 17:17:14.566539] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3927_33&folderId=1001_9&attachmentId=2&token=104458153302792141E18 HTTP/1.1" 200 54217 "https://www.example.com/EMail/message.aspx?&mailId=3927_33&folderId=1001_9&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOYCqwxQzZrjDjjwGQAAABe TLSv1 ECDHE-RSA-AES256-SHA 984 59696 -% 1341925 5344 314747 229 0 0 192.168.213.21 CH - [2015-05-30 17:17:44.713463] "GET /EMail/moveToFolder.aspx?folderName=Inbox&mailId=3927_33&mailId=3927_32&mailId=3928_33&mailId=3927_30&mailId=3928_32&mailId=3927_29&mailId=3928_31&mailId=3927_28&mailId=3927_27&mailId=3928_30&mailId=3927_26&mailId=3927_25&mailId=3928_28&mailId=3927_24&mailId=3928_18&mailId=3927_23&mailId=3927_22&mailId=3927_21&mailId=3928_15&mailId=3928_14&mailId=3928_12&mailId=3927_20&mailId=3928_11&mailId=3928_10&mailId=3927_19&mailId=3927_18&mailId=3928_9&mailId=3928_8&mailId=3927_17 HTTP/1.1" 200 6269 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOYKKwxQzZrjDjiNzAAAAAe TLSv1 ECDHE-RSA-AES256-SHA 1240 10550 -% 1426567 11332 411400 3223 0 0 192.168.213.21 CH - [2015-05-30 17:17:52.466553] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/moveToFolder.aspx?folderName=Inbox&mailId=3927_33&mailId=3927_32&mailId=3928_33&mailId=3927_30&mailId=3928_32&mailId=3927_29&mailId=3928_31&mailId=3927_28&mailId=3927_27&mailId=3928_30&mailId=3927_26&mailId=3927_25&mailId=3928_28&mailId=3927_24&mailId=3928_18&mailId=3927_23&mailId=3927_22&mailId=3927_21&mailId=3928_15&mailId=3928_14&mailId=3928_12&mailId=3927_20&mailId=3928_11&mailId=3928_10&mailId=3927_19&mailId=3927_18&mailId=3928_9&mailId=3928_8&mailId=3927_17" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOYMKwxQzZrjDjjwGUAAABn TLSv1 ECDHE-RSA-AES256-SHA 2034 4177 -% 3652819 16435 594542 287 0 0 192.168.213.21 CH - [2015-05-30 17:17:56.266754] "GET /EMail/host.html HTTP/1.1" 200 199 "https://www.example.com/EMail/moveToFolder.aspx?folderName=Inbox&mailId=3927_33&mailId=3927_32&mailId=3928_33&mailId=3927_30&mailId=3928_32&mailId=3927_29&mailId=3928_31&mailId=3927_28&mailId=3927_27&mailId=3928_30&mailId=3927_26&mailId=3927_25&mailId=3928_28&mailId=3927_24&mailId=3928_18&mailId=3927_23&mailId=3927_22&mailId=3927_21&mailId=3928_15&mailId=3928_14&mailId=3928_12&mailId=3927_20&mailId=3928_11&mailId=3928_10&mailId=3927_19&mailId=3927_18&mailId=3928_9&mailId=3928_8&mailId=3927_17" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOYNKwxQzZrjDjjwGgAAABk TLSv1 ECDHE-RSA-AES256-SHA 1288 4539 76% 920586 3070 916059 347 0 0 192.168.213.21 CH - [2015-05-30 17:17:58.731428] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOYNqwxQzZrjDjjwGkAAABr TLSv1 ECDHE-RSA-AES256-SHA 928 4044 -% 825316 4901 819451 198 0 0 192.168.213.21 CH - [2015-05-30 17:17:58.779939] "GET /EMail/images/Highost.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOYNqwxQzZrjDjjwGsAAABp TLSv1 ECDHE-RSA-AES256-SHA 944 4044 -% 1052547 3458 47917 230 0 0 192.168.213.21 CH - [2015-05-30 17:17:58.733169] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOYNqwxQzZrjDjjwGoAAABo TLSv1 ECDHE-RSA-AES256-SHA 896 4044 -% 1210179 3112 206146 155 0 0 192.168.213.21 CH - [2015-05-30 17:17:58.777308] "GET /EMail/images/attach.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOYNqwxQzZrjDjiNzEAAAAg TLSv1 ECDHE-RSA-AES256-SHA 944 4044 -% 1191098 4241 185872 158 0 0 192.168.213.21 CH - [2015-05-30 17:18:00.565661] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7291 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOYOKwxQzZrjDjiNzIAAAAk TLSv1 ECDHE-RSA-AES256-SHA 582 7722 -% 968322 3235 960154 4147 0 0 192.168.213.21 CH - [2015-05-30 17:18:00.569761] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOYOKwxQzZrjDjjwGwAAABu TLSv1 ECDHE-RSA-AES256-SHA 598 9234 -% 1403159 2631 391754 4601 0 0 192.168.213.21 CH - [2015-05-30 17:18:02.808274] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOYOqwxQzZrjDjjwG0AAABi TLSv1 ECDHE-RSA-AES256-SHA 566 421 -% 988976 2406 985770 250 0 0 192.168.213.21 CH - [2015-05-30 17:18:03.958578] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOYO6wxQzZrjDjjwG8AAABl TLSv1 ECDHE-RSA-AES256-SHA 518 325 -% 989276 3670 984699 205 0 0 192.168.213.21 CH - [2015-05-30 17:18:04.962069] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOYPKwxQzZrjDjjwHAAAABt TLSv1 ECDHE-RSA-AES256-SHA 486 7786 -% 965199 3086 959212 2256 0 0 192.168.213.21 CH - [2015-05-30 17:18:06.177875] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOYPqwxQzZrjDjjwHIAAABw TLSv1 ECDHE-RSA-AES256-SHA 936 7936 23% 747214 2896 742118 190 0 0 192.168.213.21 CH - [2015-05-30 17:18:06.168997] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "6851dcd3.52354ab2c528d" VjOYPqwxQzZrjDjjwHEAAABv TLSv1 ECDHE-RSA-AES256-SHA 936 4049 -% 1029737 2104 26847 217 0 0 192.168.224.139 CH - [2015-05-30 17:21:27.635129] "GET /apple-touch-icon-152x152-precomposed.png HTTP/1.1" 404 5087 "-" "MobileSafari/601.1 CFNetwork/758.1.6 Darwin/15.0.0" www.example.com 192.168.34.16 443 - - + "a1b6d8ca.52354d1ccc0b9" VjOZB6wxQzZrjDjjwIwAAABP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 620 10710 -% 1900 647 0 0 0 0 192.168.224.139 CH - [2015-05-30 17:21:28.034366] "GET /apple-touch-icon-152x152.png HTTP/1.1" 404 5087 "-" "MobileSafari/601.1 CFNetwork/758.1.6 Darwin/15.0.0" www.example.com 192.168.34.16 443 - - + "a1b6d8ca.52354d1ccc0b9" VjOZCKwxQzZrjDjjwI0AAAB@ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 298 6738 -% 2481 1459 0 0 0 0 192.168.224.139 CH - [2015-05-30 17:21:28.429549] "GET /apple-touch-icon.png HTTP/1.1" 404 5087 "-" "MobileSafari/601.1 CFNetwork/758.1.6 Darwin/15.0.0" www.example.com 192.168.34.16 443 - - + "a1b6d8ca.52354d1ccc0b9" VjOZCKwxQzZrjDjjwI4AAABW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 545 6876 -% 3194 1852 0 0 0 0 192.168.224.139 CH - [2015-05-30 17:21:28.499800] "GET /apple-touch-icon.png HTTP/1.1" 404 5087 "-" "MobileSafari/601.1 CFNetwork/758.1.6 Darwin/15.0.0" www.example.com 192.168.34.16 443 - - + "a1b6d8ca.52354d1ccc0b9" VjOZCKwxQzZrjDjjwI8AAABI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 290 6738 -% 10720 1766 0 0 0 0 192.168.224.139 CH - [2015-05-30 17:21:29.754364] "GET /apple-touch-icon-152x152-precomposed.png HTTP/1.1" 404 5087 "-" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 - - + "a1b6d8ca.52354d1ccc0b9" VjOZCawxQzZrjDjjwJAAAABR TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 359 6738 -% 3234 1983 0 0 0 0 192.168.224.139 CH - [2015-05-30 17:21:30.017610] "GET /apple-touch-icon-152x152.png HTTP/1.1" 404 5087 "-" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 - - + "a1b6d8ca.52354d1ccc0b9" VjOZCqwxQzZrjDjjwJEAAABY TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 347 6738 -% 2999 1796 0 0 0 0 192.168.224.139 CH - [2015-05-30 17:21:30.669340] "GET /apple-touch-icon.png HTTP/1.1" 404 5087 "-" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 - - + "a1b6d8ca.52354d1ccc0b9" VjOZCqwxQzZrjDjjwJIAAABQ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 594 6876 -% 2570 1439 0 0 0 0 192.168.224.139 CH - [2015-05-30 17:21:30.739629] "GET /apple-touch-icon.png HTTP/1.1" 404 5087 "-" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 - - + "a1b6d8ca.52354d1ccc0b9" VjOZCqwxQzZrjDjjwJMAAABd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 339 6738 -% 4447 2638 0 0 0 0 192.168.224.139 CH - [2015-05-30 17:21:30.794323] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 proxy-server - + "a1b6d8ca.52354d1ccc0b9" VjOZCqwxQzZrjDjjwJQAAABM TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 344 1657 -% 1066258 1372 63985 190 0 0 192.168.224.139 CH - [2015-05-30 17:21:41.415368] "GET /apple-touch-icon-152x152-precomposed.png HTTP/1.1" 404 5087 "-" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 - - + "a1b6d8ca.52354d1ccc0b9" VjOZFawxQzZrjDjiN0gAAAA4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 926 6876 -% 3174 1905 0 0 0 0 192.168.224.139 CH - [2015-05-30 17:21:41.470362] "GET /apple-touch-icon-152x152.png HTTP/1.1" 404 5087 "-" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 - - + "a1b6d8ca.52354d1ccc0b9" VjOZFawxQzZrjDjiN0kAAAA6 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 347 6738 -% 4537 2719 0 0 0 0 192.168.224.139 CH - [2015-05-30 17:21:41.520512] "GET /apple-touch-icon.png HTTP/1.1" 404 5087 "-" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 - - + "a1b6d8ca.52354d1ccc0b9" VjOZFawxQzZrjDjiN0oAAAA8 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 339 6738 -% 2320 1446 0 0 0 0 192.168.224.139 CH - [2015-05-30 17:21:41.571290] "GET /apple-touch-icon.png HTTP/1.1" 404 5087 "-" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13B143" www.example.com 192.168.34.16 443 - - + "a1b6d8ca.52354d1ccc0b9" VjOZFawxQzZrjDjiN0sAAAA- TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 339 6738 -% 1914 1132 0 0 0 0 192.168.146.78 CH - [2015-05-30 17:34:44.619274] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7350 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c811830.52355014dc40a" VjOcJKwxQzZrjDjjwQIAAABO TLSv1.2 ECDHE-RSA-AES128-SHA256 703 11859 -% 1012812 1723 6524 3703 0 0 192.168.146.78 CH - [2015-05-30 17:34:48.034789] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c811830.52355014dc40a" VjOcKKwxQzZrjDjjwQMAAABK TLSv1.2 ECDHE-RSA-AES128-SHA256 678 453 -% 1037998 5158 31986 206 0 0 192.168.146.78 CH - [2015-05-30 17:34:49.101737] "GET /EMail/main.aspx HTTP/1.1" 200 3396 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c811830.52355014dc40a" VjOcKawxQzZrjDjjwQUAAABP TLSv1.2 ECDHE-RSA-AES128-SHA256 534 3882 -% 914353 2421 910261 1118 0 0 192.168.146.78 CH - [2015-05-30 17:34:50.130225] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c811830.52355014dc40a" VjOcKqwxQzZrjDjjwQYAAAB@ TLSv1.2 ECDHE-RSA-AES128-SHA256 486 4202 -% 946406 3011 931892 10646 0 0 192.168.146.78 CH - [2015-05-30 17:34:50.227949] "GET /EMail/overview.aspx HTTP/1.1" 200 5304 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c811830.52355014dc40a" VjOcKqwxQzZrjDjjwQgAAABW TLSv1.2 ECDHE-RSA-AES128-SHA256 772 5963 -% 929136 1599 924808 2044 0 0 192.168.146.78 CH - [2015-05-30 17:34:50.211480] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c811830.52355014dc40a" VjOcKqwxQzZrjDjjwQcAAABN TLSv1.2 ECDHE-RSA-AES128-SHA256 804 9683 -% 1829307 4073 818213 2636 0 0 192.168.146.78 CH - [2015-05-30 17:34:52.399055] "GET /EMail/inbox.aspx HTTP/1.1" 200 51840 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c811830.52355014dc40a" VjOcLKwxQzZrjDjjwQkAAABI TLSv1.2 ECDHE-RSA-AES128-SHA256 486 53009 -% 1991963 3225 484619 21717 0 0 192.168.146.78 CH - [2015-05-30 17:34:56.812376] "GET /EMail/message.aspx?&mailId=3927_31&folderId=2634_79&mailPos=0 HTTP/1.1" 200 17371 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c811830.52355014dc40a" VjOcMKwxQzZrjDjjwQoAAABR TLSv1.2 ECDHE-RSA-AES128-SHA256 534 18041 -% 1308785 4572 265590 36330 0 0 192.168.24.142 CH - [2015-05-30 17:48:45.906838] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "a2dc4d58.52355336134fb" VjOfbawxQzZrjDjiN7EAAAAl TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1279 4615 56% 862865 6411 854105 172 3 0 192.168.24.142 CH - [2015-05-30 17:48:45.925910] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "a2dc4d58.52355336134fb" VjOfbawxQzZrjDjjwYYAAABI TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1229 5588 -% 851981 3871 846341 157 3 0 192.168.24.142 CH - [2015-05-30 17:48:45.895685] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "a2dc4d58.52355336134fb" VjOfbawxQzZrjDjiN7AAAAAj TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1279 5897 22% 901104 7629 890676 200 3 0 192.168.24.142 CH - [2015-05-30 17:48:45.924196] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "a2dc4d58.52355336134fb" VjOfbawxQzZrjDjiN7IAAAAo TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1269 11682 22% 1078399 3814 69541 225 3 0 192.168.24.142 CH - [2015-05-30 17:48:47.090020] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/css/NNstyle.css" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "a2dc4d58.52355336134fb" VjOfb6wxQzZrjDjiN7MAAAAm TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 615 1792 -% 992344 6628 983661 175 3 0 192.168.24.142 CH - [2015-05-30 17:49:59.978769] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "a2dc4d58.52355336134fb" VjOft6wxQzZrjDjjwZMAAABc TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1592 4386 -% 1700565 7612 691264 174 3 0 192.168.24.142 CH - [2015-05-30 17:50:16.612073] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "a2dc4d58.52355336134fb" VjOfyKwxQzZrjDjiN7gAAAAt TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1373 559 -% 1097142 6834 88046 217 3 0 192.168.24.142 CH - [2015-05-30 17:50:17.746071] "GET /EMail/main.aspx HTTP/1.1" 200 3391 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "a2dc4d58.52355336134fb" VjOfyawxQzZrjDjiN7kAAAAu TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 661 3807 -% 877512 6578 868387 1142 3 0 192.168.24.142 CH - [2015-05-30 17:50:18.836079] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "a2dc4d58.52355336134fb" VjOfyqwxQzZrjDjiN7oAAAAs TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 629 4128 -% 938486 6731 923946 6358 3 0 192.168.24.142 CH - [2015-05-30 17:50:18.906080] "GET /EMail/overview.aspx HTTP/1.1" 200 5286 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "a2dc4d58.52355336134fb" VjOfyqwxQzZrjDjjwZkAAABr TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1198 5846 -% 1209858 3802 201476 2798 3 0 192.168.24.142 CH - [2015-05-30 17:50:20.160325] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "a2dc4d58.52355336134fb" VjOfzKwxQzZrjDjjwZsAAABo TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 615 1248 -% 921702 6499 913641 173 3 0 192.168.24.142 CH - [2015-05-30 17:50:18.875931] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "a2dc4d58.52355336134fb" VjOfyqwxQzZrjDjjwZgAAABf TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1224 9317 -% 2275650 7208 258191 4341 3 0 192.168.24.142 CH - [2015-05-30 17:50:21.208474] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "a2dc4d58.52355336134fb" VjOfzawxQzZrjDjjwZwAAABu TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 657 1260 -% 877152 4327 871044 190 3 0 192.168.24.142 CH - [2015-05-30 17:50:24.468531] "GET /EMail/inbox.aspx HTTP/1.1" 200 10880 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "a2dc4d58.52355336134fb" VjOf0KwxQzZrjDjjwZ0AAABi TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 632 11332 -% 1163240 6312 152011 3302 3 0 192.168.24.142 CH - [2015-05-30 17:50:25.724027] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "a2dc4d58.52355336134fb" VjOf0awxQzZrjDjjwZ4AAABy TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 607 539 -% 848377 6441 839891 232 3 0 192.168.24.142 CH - [2015-05-30 17:50:25.726451] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "a2dc4d58.52355336134fb" VjOf0awxQzZrjDjjwZ8AAABl TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 610 527 -% 869688 6957 860783 156 3 0 192.168.24.142 CH - [2015-05-30 17:50:25.761852] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "a2dc4d58.52355336134fb" VjOf0awxQzZrjDjiN7wAAAAy TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1177 1951 -% 985656 5811 978172 168 3 0 192.168.24.142 CH - [2015-05-30 17:50:31.336392] "GET /EMail/message.aspx?&mailId=3928_46&folderId=3496_1&mailPos=0 HTTP/1.1" 200 12842 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "a2dc4d58.52355336134fb" VjOf16wxQzZrjDjjwaEAAAB8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 673 13323 -% 1418387 8973 377702 29615 3 0 192.168.24.142 CH - [2015-05-30 17:50:37.214936] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3928_46&folderId=3496_1&attachmentId=3&token=40713388090775107E18 HTTP/1.1" 200 9455 "https://www.example.com/EMail/message.aspx?&mailId=3928_46&folderId=3496_1&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "a2dc4d58.52355336134fb" VjOf3awxQzZrjDjjwaIAAABm TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 821 10057 -% 1151214 5996 139737 178 3 0 192.168.213.23 CH - [2015-05-30 17:56:26.354367] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7383 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhOqwxQzZrjDjjwdIAAABk TLSv1 ECDHE-RSA-AES256-SHA 816 11729 -% 926080 2792 918960 3697 0 0 192.168.213.23 CH - [2015-05-30 17:56:27.444902] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhO6wxQzZrjDjjwdMAAABp TLSv1 ECDHE-RSA-AES256-SHA 662 213 -% 1112370 3138 108405 183 0 0 192.168.213.23 CH - [2015-05-30 17:56:27.470701] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhO6wxQzZrjDjjwdQAAABf TLSv1 ECDHE-RSA-AES256-SHA 885 358 -% 1264941 1840 262475 144 0 0 192.168.213.23 CH - [2015-05-30 17:56:27.473561] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhO6wxQzZrjDjjwdUAAABo TLSv1 ECDHE-RSA-AES256-SHA 869 358 -% 1286742 1952 284203 100 0 0 192.168.213.23 CH - [2015-05-30 17:56:27.497176] "GET /EMail/scripts/variables_de.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhO6wxQzZrjDjiN9cAAAAP TLSv1 ECDHE-RSA-AES256-SHA 901 358 -% 1413357 3534 408905 220 0 0 192.168.213.23 CH - [2015-05-30 17:56:27.497150] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhO6wxQzZrjDjjwdYAAABu TLSv1 ECDHE-RSA-AES256-SHA 901 358 -% 1418950 2927 415058 360 0 0 192.168.213.23 CH - [2015-05-30 17:56:27.499467] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhO6wxQzZrjDjjwdcAAABr TLSv1 ECDHE-RSA-AES256-SHA 869 358 -% 1434800 3663 430039 138 0 0 192.168.213.23 CH - [2015-05-30 17:56:29.038483] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhPawxQzZrjDjiN9gAAAAG TLSv1 ECDHE-RSA-AES256-SHA 694 213 -% 993364 3242 989199 204 0 0 192.168.213.23 CH - [2015-05-30 17:56:37.973605] "GET /EMail/images/active.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhRawxQzZrjDjiN9kAAAAM TLSv1 ECDHE-RSA-AES256-SHA 984 4049 -% 834555 3161 830356 235 0 0 192.168.213.23 CH - [2015-05-30 17:56:39.723646] "GET /EMail/main.aspx HTTP/1.1" 200 3415 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhR6wxQzZrjDjiN9oAAAAQ TLSv1 ECDHE-RSA-AES256-SHA 872 7670 -% 920471 3068 914256 2137 0 0 192.168.213.23 CH - [2015-05-30 17:56:40.874358] "GET /EMail/overview.aspx HTTP/1.1" 200 6445 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhSKwxQzZrjDjjwdoAAABl TLSv1 ECDHE-RSA-AES256-SHA 840 10726 -% 1135562 2050 129191 3681 0 0 192.168.213.23 CH - [2015-05-30 17:56:46.875719] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8590 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhTqwxQzZrjDjiN9wAAAAU TLSv1 ECDHE-RSA-AES256-SHA 840 12907 -% 1039976 3805 29683 5627 0 0 192.168.213.23 CH - [2015-05-30 17:56:48.177128] "GET /EMail/images/msgClosed.png HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhUKwxQzZrjDjjwdwAAAB8 TLSv1 ECDHE-RSA-AES256-SHA 952 4049 -% 1106631 3166 102536 259 0 0 192.168.213.23 CH - [2015-05-30 17:56:50.566402] "GET /EMail/message.aspx?&mailId=3928_39&folderId=1001_9&mailPos=0 HTTP/1.1" 200 11210 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhUqwxQzZrjDjjwd0AAABm TLSv1 ECDHE-RSA-AES256-SHA 888 15552 -% 1276352 4305 247175 23525 0 0 192.168.213.23 CH - [2015-05-30 17:56:53.517510] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3928_39&folderId=1001_9&attachmentId=2&token=37156223603966746E18 HTTP/1.1" 200 55587 "https://www.example.com/EMail/message.aspx?&mailId=3928_39&folderId=1001_9&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhVawxQzZrjDjjwd4AAABs TLSv1 ECDHE-RSA-AES256-SHA 984 61146 -% 1167688 6454 138739 170 0 0 192.168.213.23 CH - [2015-05-30 17:57:19.073642] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhb6wxQzZrjDjjweQAAABB TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1660896 4064 648892 3452 0 0 192.168.213.23 CH - [2015-05-30 17:57:24.174031] "GET /EMail/moveToFolder.aspx?folderName=Inbox&mailId=3928_39 HTTP/1.1" 200 4702 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhdKwxQzZrjDjjweUAAAB9 TLSv1 ECDHE-RSA-AES256-SHA 824 8982 -% 1782064 4208 774614 2465 0 0 192.168.213.23 CH - [2015-05-30 17:57:31.275730] "GET /EMail/host.html HTTP/1.1" 200 199 "https://www.example.com/EMail/moveToFolder.aspx?folderName=Inbox&mailId=3928_39" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhe6wxQzZrjDjjwegAAABF TLSv1 ECDHE-RSA-AES256-SHA 872 4539 76% 843071 2709 839210 406 0 0 192.168.213.23 CH - [2015-05-30 17:57:32.326122] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7290 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhfKwxQzZrjDjjwekAAABG TLSv1 ECDHE-RSA-AES256-SHA 840 11558 -% 1050899 3539 42797 3786 0 0 192.168.213.23 CH - [2015-05-30 17:57:33.501708] "GET /EMail/images/attach.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhfawxQzZrjDjjweoAAABJ TLSv1 ECDHE-RSA-AES256-SHA 869 358 -% 1111581 3165 107540 149 0 0 192.168.213.23 CH - [2015-05-30 17:57:33.501857] "GET /EMail/images/Highost.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhfawxQzZrjDjjwesAAABL TLSv1 ECDHE-RSA-AES256-SHA 869 358 -% 1113635 3067 109755 128 0 0 192.168.213.23 CH - [2015-05-30 17:57:33.579106] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhfawxQzZrjDjjwewAAAB6 TLSv1 ECDHE-RSA-AES256-SHA 904 4049 -% 1230538 2821 227013 151 0 0 192.168.213.23 CH - [2015-05-30 17:57:34.461105] "GET /EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle HTTP/1.1" 200 13683 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhfqwxQzZrjDjjwe0AAABH TLSv1 ECDHE-RSA-AES256-SHA 821 14721 -% 1684355 4583 664469 7127 0 0 192.168.213.23 CH - [2015-05-30 17:57:38.022967] "GET /EMail/tree.aspx?sNode-sharedTree=treePersFolder HTTP/1.1" 200 13932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhgqwxQzZrjDjjwe4AAABO TLSv1 ECDHE-RSA-AES256-SHA 566 14816 -% 1898056 3652 879353 7259 0 0 192.168.213.23 CH - [2015-05-30 17:57:40.018322] "GET /EMail/tree.aspx?sNode-sharedTree=treePersFolder HTTP/1.1" 200 13932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhhKwxQzZrjDjjwe8AAABT TLSv1 ECDHE-RSA-AES256-SHA 856 18652 -% 1948423 4055 932191 4499 0 0 192.168.213.23 CH - [2015-05-30 17:57:43.119532] "GET /EMail/tree.aspx?sNode-sharedTree=treePersFolder HTTP/1.1" 200 13932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhh6wxQzZrjDjjwfAAAAB@ TLSv1 ECDHE-RSA-AES256-SHA 856 18652 -% 1567994 4024 551926 4647 0 0 192.168.213.23 CH - [2015-05-30 17:57:49.740193] "GET /EMail/tree.aspx?sNode-sharedTree=treePersFolder HTTP/1.1" 200 13932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhjawxQzZrjDjjwfIAAABY TLSv1 ECDHE-RSA-AES256-SHA 773 14961 -% 1599376 4160 579555 7374 0 0 192.168.213.23 CH - [2015-05-30 17:57:49.820870] "GET /EMail/folder.aspx?dir=desc&folderName=11November15 HTTP/1.1" 200 47110 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhjawxQzZrjDjjwfMAAABI TLSv1 ECDHE-RSA-AES256-SHA 872 51688 -% 1865748 4231 532464 21632 0 0 192.168.213.23 CH - [2015-05-30 17:57:51.345705] "GET /EMail/tree.aspx?sNode-sharedTree=treePersFolder HTTP/1.1" 200 13932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhj6wxQzZrjDjjwfQAAABR TLSv1 ECDHE-RSA-AES256-SHA 773 14961 -% 1695613 4619 676149 7011 0 0 192.168.213.23 CH - [2015-05-30 17:57:51.687632] "GET /EMail/folder.aspx?dir=desc&folderName=11November15 HTTP/1.1" 200 47110 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhj6wxQzZrjDjjwfUAAABU TLSv1 ECDHE-RSA-AES256-SHA 789 47997 -% 1827063 2675 488543 22896 0 0 192.168.213.23 CH - [2015-05-30 17:57:54.071154] "GET /EMail/folder.aspx?dir=desc&folderName=12Dezember15 HTTP/1.1" 200 6893 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhkqwxQzZrjDjjwfYAAABM TLSv1 ECDHE-RSA-AES256-SHA 872 11174 -% 1007625 3727 1136 2123 0 0 192.168.213.23 CH - [2015-05-30 17:57:55.853511] "GET /EMail/folder.aspx?dir=desc&folderName=11November15 HTTP/1.1" 200 47109 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhk6wxQzZrjDjjwfcAAABX TLSv1 ECDHE-RSA-AES256-SHA 582 47815 -% 2000293 5352 673990 19867 0 0 192.168.213.23 CH - [2015-05-30 17:57:55.856443] "GET /EMail/tree.aspx?sNode-sharedTree=treePersFolder HTTP/1.1" 200 13932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhk6wxQzZrjDjjwfgAAABV TLSv1 ECDHE-RSA-AES256-SHA 566 14816 -% 2225906 3498 206936 7406 0 0 192.168.213.23 CH - [2015-05-30 17:57:58.087352] "GET /EMail/tree.aspx?sNode-sharedTree=treePersFolder HTTP/1.1" 200 13932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhlqwxQzZrjDjjwfwAAABb TLSv1 ECDHE-RSA-AES256-SHA 773 14961 -% 2117180 2458 100283 4598 0 0 192.168.213.23 CH - [2015-05-30 17:57:57.858924] "GET /EMail/folder.aspx?dir=desc&folderName=11November15 HTTP/1.1" 200 47110 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhlawxQzZrjDjjwfsAAABZ TLSv1 ECDHE-RSA-AES256-SHA 789 47997 -% 2374074 4432 989750 13845 0 0 192.168.213.23 CH - [2015-05-30 17:58:01.831265] "GET /EMail/tree.aspx?sNode-sharedTree=treePersFolder HTTP/1.1" 200 13932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhmawxQzZrjDjjwf4AAABq TLSv1 ECDHE-RSA-AES256-SHA 566 14816 -% 1673252 2434 654229 8797 0 0 192.168.213.23 CH - [2015-05-30 17:58:01.828481] "GET /EMail/folder.aspx?dir=desc&folderName=Oktober2015 HTTP/1.1" 200 57459 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhmawxQzZrjDjjwf0AAABg TLSv1 ECDHE-RSA-AES256-SHA 582 58283 -% 2590025 4337 164417 20298 0 0 192.168.213.23 CH - [2015-05-30 17:58:06.981208] "GET /EMail/tree.aspx?cNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle HTTP/1.1" 200 8529 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhnqwxQzZrjDjjwgAAAABh TLSv1 ECDHE-RSA-AES256-SHA 614 9218 -% 1510779 5814 495978 4512 0 0 192.168.213.23 CH - [2015-05-30 17:58:10.876934] "GET /EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle HTTP/1.1" 200 13683 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhoqwxQzZrjDjjwgEAAABk TLSv1 ECDHE-RSA-AES256-SHA 614 14576 -% 1634186 5127 613497 7083 0 0 192.168.213.23 CH - [2015-05-30 17:58:13.873700] "GET /EMail/folder.aspx?dir=desc&folderName=12Dezember15 HTTP/1.1" 200 6893 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhpawxQzZrjDjjwgIAAABp TLSv1 ECDHE-RSA-AES256-SHA 582 7338 -% 987140 2722 980008 3768 0 0 192.168.213.23 CH - [2015-05-30 17:58:13.976283] "GET /EMail/tree.aspx?sNode-sharedTree=treePersFolder HTTP/1.1" 200 13932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhpawxQzZrjDjiN@IAAAAd TLSv1 ECDHE-RSA-AES256-SHA 856 18652 -% 1350751 3076 330959 6375 0 0 192.168.213.23 CH - [2015-05-30 17:58:14.866324] "GET /EMail/folder.aspx?dir=desc&folderName=12Dezember15 HTTP/1.1" 200 6892 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhpqwxQzZrjDjjwgMAAABf TLSv1 ECDHE-RSA-AES256-SHA 789 7483 -% 1092935 4234 85212 2335 0 0 192.168.213.23 CH - [2015-05-30 17:58:15.333356] "GET /EMail/tree.aspx?sNode-sharedTree=treePersFolder HTTP/1.1" 200 13932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhp6wxQzZrjDjjwgQAAABo TLSv1 ECDHE-RSA-AES256-SHA 773 14961 -% 1532640 4463 512521 7478 0 0 192.168.213.23 CH - [2015-05-30 17:58:17.616220] "GET /EMail/tree.aspx?sNode-sharedTree=treePersFolder HTTP/1.1" 200 13932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhqawxQzZrjDjjwgcAAABy TLSv1 ECDHE-RSA-AES256-SHA 566 14816 -% 1433004 3864 414241 7425 0 0 192.168.213.23 CH - [2015-05-30 17:58:17.613514] "GET /EMail/folder.aspx?dir=desc&folderName=11November15 HTTP/1.1" 200 47110 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhqawxQzZrjDjjwgYAAABi TLSv1 ECDHE-RSA-AES256-SHA 582 47815 -% 1811921 4197 479447 15396 0 0 192.168.213.23 CH - [2015-05-30 17:58:19.053919] "GET /EMail/tree.aspx?sNode-sharedTree=treePersFolder HTTP/1.1" 200 13932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhq6wxQzZrjDjjwggAAABw TLSv1 ECDHE-RSA-AES256-SHA 773 14961 -% 1588636 3601 570110 7321 0 0 192.168.213.23 CH - [2015-05-30 17:58:19.441647] "GET /EMail/folder.aspx?dir=desc&folderName=11November15 HTTP/1.1" 200 47109 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhq6wxQzZrjDjjwgkAAABl TLSv1 ECDHE-RSA-AES256-SHA 789 47997 -% 2005266 4341 664123 13771 0 0 192.168.213.23 CH - [2015-05-30 17:58:44.422879] "GET /EMail/tree.aspx?sNode-sharedTree=treePersFolder HTTP/1.1" 200 13932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhxKwxQzZrjDjiN@gAAAAi TLSv1 ECDHE-RSA-AES256-SHA 856 18652 -% 1975904 2583 961465 4509 0 0 192.168.213.23 CH - [2015-05-30 17:58:54.086478] "GET /EMail/tree.aspx?sNode-sharedTree=treePersFolder HTTP/1.1" 200 13932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOhzqwxQzZrjDjjwgwAAABx TLSv1 ECDHE-RSA-AES256-SHA 856 18652 -% 1909068 3983 890328 7269 0 0 192.168.213.23 CH - [2015-05-30 17:59:06.277606] "GET /EMail/tree.aspx?sNode-sharedTree=treePersFolder HTTP/1.1" 200 13932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOh2qwxQzZrjDjjwg4AAAB4 TLSv1 ECDHE-RSA-AES256-SHA 856 18652 -% 1792584 4007 776911 4428 0 0 192.168.213.23 CH - [2015-05-30 18:00:05.528765] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOiFawxQzZrjDjjwhgAAABG TLSv1 ECDHE-RSA-AES256-SHA 808 4161 -% 1034116 3740 29435 200 0 0 192.168.213.23 CH - [2015-05-30 18:00:09.125954] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOiGawxQzZrjDjjwhwAAABD TLSv1 ECDHE-RSA-AES256-SHA 837 358 -% 1059660 2836 55964 206 0 0 192.168.213.23 CH - [2015-05-30 18:00:09.124967] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOiGawxQzZrjDjiN-AAAAAt TLSv1 ECDHE-RSA-AES256-SHA 821 358 -% 1241625 3078 237761 153 0 0 192.168.213.23 CH - [2015-05-30 18:00:09.124796] "GET /EMail/scripts/variables_de.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOiGawxQzZrjDjjwhoAAABH TLSv1 ECDHE-RSA-AES256-SHA 853 358 -% 1417437 4423 412165 178 0 0 192.168.213.23 CH - [2015-05-30 18:00:09.125774] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOiGawxQzZrjDjjwhsAAAB6 TLSv1 ECDHE-RSA-AES256-SHA 821 358 -% 1427638 2819 424030 106 0 0 192.168.213.23 CH - [2015-05-30 18:00:09.126170] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOiGawxQzZrjDjjwh0AAABO TLSv1 ECDHE-RSA-AES256-SHA 853 358 -% 1450191 3989 445115 155 0 0 192.168.213.23 CH - [2015-05-30 18:00:09.172347] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOiGawxQzZrjDjjwh4AAABL TLSv1 ECDHE-RSA-AES256-SHA 904 4049 -% 1627734 2831 624035 185 0 0 192.168.213.23 CH - [2015-05-30 18:00:11.318471] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cca29c06.52350c42acf95" VjOiG6wxQzZrjDjjwh8AAABT TLSv1 ECDHE-RSA-AES256-SHA 952 4049 -% 965656 3189 961611 162 0 0 192.168.127.171 CH - [2015-05-30 23:59:40.736970] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "88f20ed2.5235a61f08dca" VjP2XKwxQzZrjDjjzZkAAABX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 572 8359 -% 900776 1859 897904 154 0 0 192.168.123.174 CH - [2015-05-31 01:20:10.628546] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "7b94a59e.5235b81d2d9c2" VjQJOqwxQzZrjGtmQ2oAAAAh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 572 8359 -% 848973 1386 846371 220 0 0 192.168.140.135 CH - [2015-05-31 08:37:23.756838] "GET /EMail/MailHandler?service=createCRL HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "931c9da5.523619d709f26" VjRvs6wxQzZrjGtnUPwAAABD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 560 8359 -% 849958 1467 847333 231 0 0 192.168.139.214 CH - [2015-05-31 14:53:55.906624] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "65236e16.52366e0097840" VjTH86wxQzZrjGtmTXYAAAAq TLSv1.2 ECDHE-RSA-AES256-SHA384 659 8674 -% 964746 2279 961143 164 0 0 192.168.226.126 CH - [2015-05-31 19:20:43.061064] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7356 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "a98c21a9.5236a9a234348" VjUGe6wxQzZrjGtnaB0AAABM TLSv1.2 ECDHE-RSA-AES256-SHA384 915 11923 -% 1045217 3960 30794 3690 3 0 192.168.226.126 CH - [2015-05-31 19:20:44.635813] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "a98c21a9.5236a9a234348" VjUGfKwxQzZrjGtmUJYAAAA1 TLSv1.2 ECDHE-RSA-AES256-SHA384 948 8053 22% 670881 5478 659991 197 3 0 192.168.226.126 CH - [2015-05-31 19:20:44.523180] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "a98c21a9.5236a9a234348" VjUGfKwxQzZrjGtnaB4AAABP TLSv1.2 ECDHE-RSA-AES256-SHA384 646 2559 13% 862762 4942 854865 200 3 0 192.168.226.126 CH - [2015-05-31 19:20:44.656272] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "a98c21a9.5236a9a234348" VjUGfKwxQzZrjGtnaB8AAABO TLSv1.2 ECDHE-RSA-AES256-SHA384 964 2208 22% 987418 2999 981221 189 3 0 192.168.226.126 CH - [2015-05-31 19:20:44.705018] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "a98c21a9.5236a9a234348" VjUGfKwxQzZrjGtmUJcAAAA2 TLSv1.2 ECDHE-RSA-AES256-SHA384 964 928 56% 938741 4991 931165 137 3 0 192.168.226.126 CH - [2015-05-31 19:20:44.670608] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "a98c21a9.5236a9a234348" VjUGfKwxQzZrjGtnaCAAAABQ TLSv1.2 ECDHE-RSA-AES256-SHA384 964 4788 23% 1135626 5238 127888 170 3 0 192.168.226.126 CH - [2015-05-31 19:20:44.693154] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "a98c21a9.5236a9a234348" VjUGfKwxQzZrjGtnaCEAAABR TLSv1.2 ECDHE-RSA-AES256-SHA384 948 1979 -% 1157415 4827 151138 90 3 0 192.168.226.126 CH - [2015-05-31 19:20:46.131465] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "a98c21a9.5236a9a234348" VjUGfqwxQzZrjGtnaCIAAABS TLSv1.2 ECDHE-RSA-AES256-SHA384 630 1898 -% 903127 4778 895807 171 3 0 192.168.226.126 CH - [2015-05-31 19:20:47.674037] "GET /apple-touch-icon-120x120-precomposed.png HTTP/1.1" 404 5089 "-" "MobileSafari/600.1.4 CFNetwork/711.1.12 Darwin/14.0.0" www.example.com 192.168.34.16 443 - - + "95083797.5236a9a69a6b5" VjUGf6wxQzZrjGtnaCMAAABT TLSv1.2 ECDHE-RSA-AES256-SHA384 771 12891 -% 5855 3046 0 0 3 0 192.168.226.126 CH - [2015-05-31 19:20:47.895075] "GET /apple-touch-icon-120x120.png HTTP/1.1" 404 5089 "-" "MobileSafari/600.1.4 CFNetwork/711.1.12 Darwin/14.0.0" www.example.com 192.168.34.16 443 - - + "95083797.5236a9a69a6b5" VjUGf6wxQzZrjGtnaCQAAABX TLSv1.2 ECDHE-RSA-AES256-SHA384 756 9059 -% 6517 3828 0 0 3 0 192.168.226.126 CH - [2015-05-31 19:20:48.107148] "GET /apple-touch-icon.png HTTP/1.1" 404 5089 "-" "MobileSafari/600.1.4 CFNetwork/711.1.12 Darwin/14.0.0" www.example.com 192.168.34.16 443 - - + "95083797.5236a9a69a6b5" VjUGgKwxQzZrjGtnaCUAAABa TLSv1.2 ECDHE-RSA-AES256-SHA384 740 9059 -% 6777 3985 0 0 3 0 192.168.226.126 CH - [2015-05-31 19:20:48.287010] "GET /apple-touch-icon.png HTTP/1.1" 404 5089 "-" "MobileSafari/600.1.4 CFNetwork/711.1.12 Darwin/14.0.0" www.example.com 192.168.34.16 443 - - + "95083797.5236a9a69a6b5" VjUGgKwxQzZrjGtnaCYAAABd TLSv1.2 ECDHE-RSA-AES256-SHA384 740 9059 -% 6650 3923 0 0 3 0 192.168.226.126 CH - [2015-05-31 19:20:48.367121] "GET /apple-touch-icon-precomposed.png HTTP/1.1" 404 5089 "-" "MobileSafari/600.1.4 CFNetwork/711.1.12 Darwin/14.0.0" www.example.com 192.168.34.16 443 - - + "95083797.5236a9a69a6b5" VjUGgKwxQzZrjGtnaCcAAABc TLSv1.2 ECDHE-RSA-AES256-SHA384 438 8866 -% 6338 3791 0 0 3 0 192.168.226.126 CH - [2015-05-31 19:20:48.563968] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "MobileSafari/600.1.4 CFNetwork/711.1.12 Darwin/14.0.0" www.example.com 192.168.34.16 443 - - + "95083797.5236a9a69a6b5" VjUGgKwxQzZrjGtnaCgAAABg TLSv1.2 ECDHE-RSA-AES256-SHA384 740 1835 -% 4395 2752 59 142 3 0 192.168.167.175 CH - [2015-05-31 23:43:22.817663] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "ca63873.5236e457e107f" VjVECqwxQzZrjGtmU14AAAAc TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 572 8358 -% 894138 2993 889531 460 0 0 192.168.122.90 CH - [2015-05-01 10:05:22.629882] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "2770079d.52376f5ed34fa" VjXV0qwxQzZrjD@ptx4AAAAu TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 572 8359 -% 926561 1358 923927 266 0 0 192.168.40.249 CH - [2015-05-01 12:11:23.500209] "GET /apple-touch-icon-120x120-precomposed.png HTTP/1.1" 404 5087 "-" "MobileSafari/600.1.4 CFNetwork/711.1.12 Darwin/14.0.0" www.example.com 192.168.34.16 443 - - + "a4b7c0be.52378b896eeb1" VjXzW6wxQzZrjD@puykAAAAT TLSv1.2 ECDHE-RSA-AES256-SHA384 771 12891 -% 7065 3039 0 0 3 0 192.168.40.249 CH - [2015-05-01 12:11:23.539420] "GET /apple-touch-icon-120x120.png HTTP/1.1" 404 5087 "-" "MobileSafari/600.1.4 CFNetwork/711.1.12 Darwin/14.0.0" www.example.com 192.168.34.16 443 - - + "a4b7c0be.52378b896eeb1" VjXzW6wxQzZrjD@puyoAAAAV TLSv1.2 ECDHE-RSA-AES256-SHA384 438 8866 -% 4747 2632 0 0 3 0 192.168.40.249 CH - [2015-05-01 12:11:23.577096] "GET /apple-touch-icon.png HTTP/1.1" 404 5087 "-" "MobileSafari/600.1.4 CFNetwork/711.1.12 Darwin/14.0.0" www.example.com 192.168.34.16 443 - - + "a4b7c0be.52378b896eeb1" VjXzW6wxQzZrjD@puysAAAAW TLSv1.2 ECDHE-RSA-AES256-SHA384 422 8866 -% 6592 3970 0 0 3 0 192.168.40.249 CH - [2015-05-01 12:11:23.608077] "GET /apple-touch-icon.png HTTP/1.1" 404 5087 "-" "MobileSafari/600.1.4 CFNetwork/711.1.12 Darwin/14.0.0" www.example.com 192.168.34.16 443 - - + "a4b7c0be.52378b896eeb1" VjXzW6wxQzZrjD@puywAAAAX TLSv1.2 ECDHE-RSA-AES256-SHA384 422 8866 -% 3914 2259 0 0 3 0 192.168.40.249 CH - [2015-05-01 12:11:23.640080] "GET /apple-touch-icon-precomposed.png HTTP/1.1" 404 5087 "-" "MobileSafari/600.1.4 CFNetwork/711.1.12 Darwin/14.0.0" www.example.com 192.168.34.16 443 - - + "a4b7c0be.52378b896eeb1" VjXzW6wxQzZrjD@puy0AAAAY TLSv1.2 ECDHE-RSA-AES256-SHA384 438 8866 -% 3662 2139 0 0 3 0 192.168.40.249 CH - [2015-05-01 12:11:23.679676] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "MobileSafari/600.1.4 CFNetwork/711.1.12 Darwin/14.0.0" www.example.com 192.168.34.16 443 - - + "a4b7c0be.52378b896eeb1" VjXzW6wxQzZrjD@puy4AAAAZ TLSv1.2 ECDHE-RSA-AES256-SHA384 422 1642 -% 7447 5153 68 178 3 0 192.168.60.30 CH - [2015-05-01 14:30:59.974841] "GET /EMail/MailHandler?service=createCRL HTTP/1.1" 200 3877 "-" "Z1-CertServer" www.example.com 192.168.34.16 443 proxy-server - + "606a704f.5237aabddcab9" VjYUE6wxQzZrjD@pv9MAAAAr TLSv1 ECDHE-RSA-AES256-SHA 585 8384 -% 962756 1478 960062 231 0 0 192.168.145.72 CH - [2015-05-01 15:24:26.017612] "GET /favicon.ico HTTP/1.1" 304 - "-" "Mozilla/4.0 (compatible;)" www.example.com 192.168.34.16 443 - - + "7f7241fe.5237b6af61f4c" VjYgmqwxQzZrjD@pwZYAAAA6 TLSv1 AES256-SHA 742 3760 -% 1222 543 47 101 0 0 192.168.84.182 CH - [2015-05-01 23:13:25.853262] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "9ef8d44a.52381f8249586" VjaOhawxQzZrjD@p0JcAAAAl TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1115 11682 22% 793382 2843 786523 244 0 0 192.168.84.182 CH - [2015-05-01 23:13:25.859375] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "9ef8d44a.52381f8249586" VjaOhawxQzZrjD@p0JgAAAAm TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1082 5588 -% 795119 2630 791730 148 0 0 192.168.84.182 CH - [2015-05-01 23:13:25.852020] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "9ef8d44a.52381f8249586" VjaOhawxQzZrjD@p0JYAAAAi TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1125 4615 56% 817352 2657 813869 165 0 0 192.168.84.182 CH - [2015-05-01 23:13:25.828517] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "9ef8d44a.52381f8249586" VjaOhawxQzZrjD@p0JUAAAAj TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1125 5897 22% 1005192 2996 1000 145 0 0 192.168.84.182 CH - [2015-05-01 23:13:26.907962] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/css/NNstyle.css" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "9ef8d44a.52381f8249586" VjaOhqwxQzZrjD@p0JkAAAAo TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 468 1792 -% 835826 4561 830036 203 0 0 192.168.130.96 CH - [2015-05-01 23:37:06.251195] "GET /EMail/main.aspx HTTP/1.1" 200 7336 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "bc728dc1.523824ce37dbb" VjaUEqwxQzZrjD@p0WAAAAA1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 812 11747 -% 1003069 689 997951 3691 0 0 192.168.130.96 CH - [2015-05-01 23:59:14.387495] "GET /EMail/help/external/de/host.html HTTP/1.1" 200 440 "https://www.example.com/EMail/help.aspx?helpTopic=inbox" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "bc728dc1.523824ce37dbb" VjaZQqwxQzZrjD@p0goAAAAm TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 904 4759 64% 913111 2991 908249 761 0 0 192.168.130.96 CH - [2015-05-01 23:59:14.443545] "GET /EMail/help/external/de/help_inbox.html HTTP/1.1" 200 962 "https://www.example.com/EMail/help.aspx?helpTopic=inbox" "Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "bc728dc1.523824ce37dbb" VjaZQqwxQzZrjD@p0gsAAAAi TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 809 1594 47% 869254 2958 863966 1259 0 0 192.168.204.249 CH - [2015-05-02 07:14:59.352804] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "863f93d9.52388b269c0e4" Vjb-Y6wxQzZrjF1R@CcAAAAd TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1104 11942 -% 1041432 10577 24034 4074 6 0 192.168.186.76 CH - [2015-05-02 07:23:48.189756] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcBdKwxQzZrjF1SpNUAAABW TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 11936 22% 955854 6491 944408 403 3 0 192.168.186.76 CH - [2015-05-02 07:23:53.470910] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a70a6ee5.52388d23fbfbe" VjcBeawxQzZrjF1SpNcAAABY TLSv1.2 ECDHE-RSA-AES256-SHA384 711 5894 -% 930682 708 928825 317 0 0 192.168.151.242 CH - [2015-05-02 07:26:44.988877] "GET /EMail/MailHandler?service=createCRL HTTP/1.1" 200 3877 "-" "Microsoft-CryptoAPI/6.1" www.example.com 192.168.34.16 443 proxy-server - + "5488ca07.52388dc78e7cd" VjcCJKwxQzZrjF1SpPYAAAB7 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 734 9001 -% 972227 1359 969344 394 0 0 192.168.169.43 CH - [2015-05-02 07:35:35.369238] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7368 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcEN6wxQzZrjF1R@HEAAAAo TLSv1.2 ECDHE-RSA-AES256-SHA384 733 11939 -% 1061256 2307 54390 3658 0 0 192.168.169.43 CH - [2015-05-02 07:35:36.508606] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcEOKwxQzZrjF1R@HIAAAAq TLSv1.2 ECDHE-RSA-AES256-SHA384 502 2575 14% 830789 2066 827432 155 0 0 192.168.169.43 CH - [2015-05-02 07:35:36.571438] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcEOKwxQzZrjF1SpUIAAABK TLSv1.2 ECDHE-RSA-AES256-SHA384 850 1979 -% 839904 3036 835770 189 0 0 192.168.169.43 CH - [2015-05-02 07:35:36.565457] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcEOKwxQzZrjF1SpUEAAABL TLSv1.2 ECDHE-RSA-AES256-SHA384 802 928 56% 912727 2254 909415 199 0 0 192.168.169.43 CH - [2015-05-02 07:35:36.565383] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcEOKwxQzZrjF1SpUAAAABI TLSv1.2 ECDHE-RSA-AES256-SHA384 834 4485 23% 992925 2942 987716 252 0 0 192.168.169.43 CH - [2015-05-02 07:35:36.571970] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcEOKwxQzZrjF1SpUMAAABJ TLSv1.2 ECDHE-RSA-AES256-SHA384 834 8781 22% 1004603 1776 0 107 0 0 192.168.169.43 CH - [2015-05-02 07:35:37.725885] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcEOawxQzZrjF1SpUQAAABM TLSv1.2 ECDHE-RSA-AES256-SHA384 534 1898 -% 887194 3009 883051 184 0 0 192.168.169.43 CH - [2015-05-02 07:35:40.348797] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcEPKwxQzZrjF1SpUUAAABO TLSv1.2 ECDHE-RSA-AES256-SHA384 534 2186 -% 809899 3609 805420 152 0 0 192.168.169.43 CH - [2015-05-02 07:35:52.219340] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcESKwxQzZrjF1SpUcAAABS TLSv1.2 ECDHE-RSA-AES256-SHA384 994 662 -% 1234138 3723 229557 217 0 0 192.168.169.43 CH - [2015-05-02 07:35:53.475528] "GET /EMail/main.aspx HTTP/1.1" 200 3400 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcESawxQzZrjF1SpUgAAABR TLSv1.2 ECDHE-RSA-AES256-SHA384 534 3914 -% 903771 3005 898915 1167 0 0 192.168.169.43 CH - [2015-05-02 07:35:54.487502] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcESqwxQzZrjF1SpUkAAABT TLSv1.2 ECDHE-RSA-AES256-SHA384 486 4234 -% 1211639 2003 202398 6482 0 0 192.168.169.43 CH - [2015-05-02 07:35:54.657976] "GET /EMail/overview.aspx HTTP/1.1" 200 5300 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcESqwxQzZrjF1SpUsAAABU TLSv1.2 ECDHE-RSA-AES256-SHA384 802 6011 -% 1250898 3162 244554 2487 0 0 192.168.169.43 CH - [2015-05-02 07:35:54.493800] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcESqwxQzZrjF1SpUoAAABQ TLSv1.2 ECDHE-RSA-AES256-SHA384 834 9859 -% 1599885 3793 589167 2842 0 0 192.168.169.43 CH - [2015-05-02 07:35:56.158826] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcETKwxQzZrjF1SpUwAAABV TLSv1.2 ECDHE-RSA-AES256-SHA384 550 1370 -% 962638 1925 959786 248 0 0 192.168.169.43 CH - [2015-05-02 07:35:56.478089] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcETKwxQzZrjF1SpU0AAABX TLSv1.2 ECDHE-RSA-AES256-SHA384 518 1354 -% 868964 2925 865171 191 0 0 192.168.169.43 CH - [2015-05-02 07:36:00.198902] "GET /EMail/inbox.aspx HTTP/1.1" 200 8595 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcEUKwxQzZrjF1SpU8AAABa TLSv1.2 ECDHE-RSA-AES256-SHA384 486 9199 -% 1052244 3887 44857 2563 0 0 192.168.169.43 CH - [2015-05-02 07:36:02.829691] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcEUqwxQzZrjF1SpVEAAABb TLSv1.2 ECDHE-RSA-AES256-SHA384 818 827 -% 771170 2063 768314 192 0 0 192.168.169.43 CH - [2015-05-02 07:36:02.990722] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcEUqwxQzZrjF1SpVIAAABc TLSv1.2 ECDHE-RSA-AES256-SHA384 502 634 -% 625242 2974 621485 104 0 0 192.168.169.43 CH - [2015-05-02 07:36:02.829601] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcEUqwxQzZrjF1SpVAAAABY TLSv1.2 ECDHE-RSA-AES256-SHA384 818 2107 -% 1023111 2488 19498 442 0 0 192.168.169.43 CH - [2015-05-02 07:36:04.727028] "GET /EMail/message.aspx?&mailId=3927_44&folderId=75_57&mailPos=0 HTTP/1.1" 200 13013 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcEVKwxQzZrjF1SpVMAAABZ TLSv1.2 ECDHE-RSA-AES256-SHA384 534 13700 -% 1255590 3229 247142 3974 0 0 192.168.169.43 CH - [2015-05-02 07:36:09.890225] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3927_44&folderId=75_57&attachmentId=2&token=-43383192692888945E18 HTTP/1.1" 200 67200 "https://www.example.com/EMail/message.aspx?&mailId=3927_44&folderId=75_57&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcEWawxQzZrjF1SpVQAAABd TLSv1.2 ECDHE-RSA-AES256-SHA384 630 71180 -% 1329809 6520 283089 208 0 0 192.168.169.43 CH - [2015-05-02 07:43:05.616351] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8587 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcF@awxQzZrjF1SpZsAAABn TLSv1.2 ECDHE-RSA-AES256-SHA384 877 13064 -% 1277418 3310 270499 2844 0 0 192.168.169.43 CH - [2015-05-02 07:43:05.602718] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcF@awxQzZrjF1R@IcAAAA@ TLSv1.2 ECDHE-RSA-AES256-SHA384 893 13547 -% 1709508 2607 697542 4844 0 0 192.168.169.43 CH - [2015-05-02 07:43:06.952635] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcF@qwxQzZrjF1SpZwAAABo TLSv1.2 ECDHE-RSA-AES256-SHA384 518 1978 -% 911188 4015 906113 203 0 0 192.168.169.43 CH - [2015-05-02 07:43:09.152826] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcF-awxQzZrjF1SpZ0AAABp TLSv1.2 ECDHE-RSA-AES256-SHA384 790 405 -% 1463977 6748 456107 283 0 0 192.168.169.43 CH - [2015-05-02 07:43:10.637619] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7291 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcF-qwxQzZrjF1SpZ8AAABr TLSv1.2 ECDHE-RSA-AES256-SHA384 534 7802 -% 1032777 2330 27696 2217 0 0 192.168.169.43 CH - [2015-05-02 07:43:14.147272] "GET /EMail/trash.aspx?dir=desc HTTP/1.1" 200 8680 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcGAqwxQzZrjF1SpaEAAABt TLSv1.2 ECDHE-RSA-AES256-SHA384 486 9279 -% 1217615 2926 210843 2786 0 0 192.168.169.43 CH - [2015-05-02 07:43:14.191875] "GET /EMail/tree.aspx?sNode-sharedTree=treeTrash HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcGAqwxQzZrjF1SpaIAAABv TLSv1.2 ECDHE-RSA-AES256-SHA384 818 9859 -% 1277730 2722 267702 3032 0 0 192.168.169.43 CH - [2015-05-02 07:43:17.836325] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/trash.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcGBawxQzZrjF1SpaMAAABu TLSv1.2 ECDHE-RSA-AES256-SHA384 790 405 -% 1114950 7652 106418 273 0 0 192.168.169.43 CH - [2015-05-02 07:43:18.971951] "GET /EMail/trash.aspx?returnedFromDelete=true HTTP/1.1" 200 7279 "https://www.example.com/EMail/trash.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcGBqwxQzZrjF1SpaQAAABx TLSv1.2 ECDHE-RSA-AES256-SHA384 534 7786 -% 1019991 3771 11417 3959 0 0 192.168.169.43 CH - [2015-05-02 07:43:23.093753] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcGC6wxQzZrjF1SpaYAAABw TLSv1.2 ECDHE-RSA-AES256-SHA384 502 453 -% 979626 4320 974400 209 0 0 192.168.169.43 CH - [2015-05-02 07:43:24.096887] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcGDKwxQzZrjF1SpacAAABz TLSv1.2 ECDHE-RSA-AES256-SHA384 486 815 75% 986274 3049 982064 366 0 0 192.168.169.43 CH - [2015-05-02 07:43:25.267117] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "2327b1ec.52388fc4ba272" VjcGDawxQzZrjF1SpaoAAAB2 TLSv1.2 ECDHE-RSA-AES256-SHA384 717 5523 -% 1986 1210 42 115 0 0 192.168.169.43 CH - [2015-05-02 07:43:25.170605] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcGDawxQzZrjF1SpakAAAB1 TLSv1.2 ECDHE-RSA-AES256-SHA384 454 373 -% 963908 3886 958713 213 0 0 192.168.169.43 CH - [2015-05-02 07:43:26.156165] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcGDqwxQzZrjF1SpasAAAB4 TLSv1.2 ECDHE-RSA-AES256-SHA384 438 7866 -% 1025712 2416 20272 2338 0 0 192.168.169.43 CH - [2015-05-02 07:43:27.241191] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcGD6wxQzZrjF1SpawAAAB6 TLSv1.2 ECDHE-RSA-AES256-SHA384 566 2793 14% 948101 3214 943295 162 0 0 192.168.169.43 CH - [2015-05-02 07:43:27.299724] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcGD6wxQzZrjF1Spa0AAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 866 2208 22% 994750 2825 990351 233 0 0 192.168.169.43 CH - [2015-05-02 07:43:27.312734] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcGD6wxQzZrjF1SpbAAAAB5 TLSv1.2 ECDHE-RSA-AES256-SHA384 898 8053 22% 1042285 2651 34573 254 0 0 192.168.169.43 CH - [2015-05-02 07:43:27.306637] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcGD6wxQzZrjF1Spa4AAAB9 TLSv1.2 ECDHE-RSA-AES256-SHA384 898 4485 23% 1115284 3408 110219 162 0 0 192.168.169.43 CH - [2015-05-02 07:43:27.306718] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcGD6wxQzZrjF1Spa8AAAB@ TLSv1.2 ECDHE-RSA-AES256-SHA384 866 928 56% 1142350 3686 137859 126 0 0 192.168.169.43 CH - [2015-05-02 07:43:27.315387] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcGD6wxQzZrjF1SpbEAAAB8 TLSv1.2 ECDHE-RSA-AES256-SHA384 914 454 -% 1300360 2050 297539 149 0 0 192.168.169.43 CH - [2015-05-02 07:43:28.554682] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "82ba4ce5.52388fc15de16" VjcGEKwxQzZrjF1SpbIAAAB- TLSv1.2 ECDHE-RSA-AES256-SHA384 598 261 -% 846531 2098 843500 202 0 0 192.168.32.7 CH - [2015-05-02 07:47:05.296493] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8624ab96.523892535526d" VjcG6awxQzZrjF1R@JIAAAAL TLSv1.2 ECDHE-RSA-AES128-SHA256 627 5651 -% 5274108 723 272502 244 0 0 192.168.32.7 CH - [2015-05-02 07:48:22.535525] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "8624ab96.523892535526d" VjcHNqwxQzZrjF1R@JgAAAAR TLSv1.2 ECDHE-RSA-AES128-SHA256 616 1787 -% 2101 1378 44 112 0 0 192.168.109.18 CH - [2015-05-02 08:04:06.009255] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "431869b4.52389620c29a7" VjcK5qwxQzZrjF1Spm8AAABH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 636 11955 -% 1258015 732 254548 2198 0 0 192.168.109.18 CH - [2015-05-02 08:04:07.426653] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "431869b4.52389620c29a7" VjcK56wxQzZrjF1SpnIAAABI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 877 700 56% 797256 2908 793476 162 0 0 192.168.109.18 CH - [2015-05-02 08:04:07.312747] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "431869b4.52389620c29a7" VjcK56wxQzZrjF1SpnAAAABK TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 744 5897 22% 1133835 2097 130749 153 0 0 192.168.109.18 CH - [2015-05-02 08:04:07.313194] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "431869b4.52389620c29a7" VjcK56wxQzZrjF1SpnEAAABL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 417 2427 14% 1148116 2994 143434 185 0 0 192.168.109.18 CH - [2015-05-02 08:04:19.361531] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "431869b4.52389620c29a7" VjcK86wxQzZrjF1SpnYAAABP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1143 4442 -% 1189070 5722 182388 165 0 0 192.168.109.18 CH - [2015-05-02 08:04:20.575426] "GET /EMail/main.aspx HTTP/1.1" 200 3399 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "431869b4.52389620c29a7" VjcK9KwxQzZrjF1SpngAAABR TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 470 3815 -% 873724 2004 869574 1664 0 0 192.168.109.18 CH - [2015-05-02 08:04:21.623662] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "431869b4.52389620c29a7" VjcK9awxQzZrjF1SpnkAAABT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 446 4141 -% 1129499 2986 115615 10153 0 0 192.168.109.18 CH - [2015-05-02 08:04:21.626126] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "431869b4.52389620c29a7" VjcK9awxQzZrjF1R@MwAAAAG TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1011 13213 -% 1560314 4535 547294 3691 0 0 192.168.109.18 CH - [2015-05-02 08:04:23.225114] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "431869b4.52389620c29a7" VjcK96wxQzZrjF1R@M0AAAAH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 517 1260 -% 1025277 3282 21266 189 0 0 192.168.109.18 CH - [2015-05-02 08:04:25.138087] "GET /EMail/inbox.aspx HTTP/1.1" 200 15261 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "431869b4.52389620c29a7" VjcK@awxQzZrjF1R@M4AAAAI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 15742 -% 1272528 3494 259525 8074 0 0 192.168.109.18 CH - [2015-05-02 08:04:26.460392] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "431869b4.52389620c29a7" VjcK@qwxQzZrjF1SpnoAAABU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 470 1813 -% 813267 1910 810692 154 0 0 192.168.109.18 CH - [2015-05-02 08:04:26.455963] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "431869b4.52389620c29a7" VjcK@qwxQzZrjF1R@M8AAAAJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 467 539 -% 958311 2984 954414 193 0 0 192.168.109.18 CH - [2015-05-02 08:04:26.592840] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "431869b4.52389620c29a7" VjcK@qwxQzZrjF1SpnsAAABQ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1007 5899 -% 831965 3659 827486 170 0 0 192.168.109.18 CH - [2015-05-02 08:05:09.368874] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "431869b4.52389620c29a7" VjcLJawxQzZrjF1SpogAAABj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1072 11682 22% 868855 1759 864662 199 0 0 192.168.109.18 CH - [2015-05-02 08:05:09.332908] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "431869b4.52389620c29a7" VjcLJawxQzZrjF1SpocAAABg TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1045 4615 56% 1059355 2337 55886 226 0 0 192.168.109.18 CH - [2015-05-02 08:05:10.438507] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "431869b4.52389620c29a7" VjcLJqwxQzZrjF1SpokAAABk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 558 206 -% 974436 3008 970585 196 0 0 192.168.32.7 CH - [2015-05-02 08:13:21.838616] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8924817a.52389832d7218" VjcNEawxQzZrjF1SptsAAAB4 TLSv1.2 ECDHE-RSA-AES128-SHA256 659 11875 -% 1112058 906 107011 3402 0 0 192.168.32.7 CH - [2015-05-02 08:13:23.301625] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8924817a.52389832d7218" VjcNE6wxQzZrjF1SptwAAAB6 TLSv1.2 ECDHE-RSA-AES128-SHA256 454 2527 14% 956815 2563 952611 214 0 0 192.168.32.7 CH - [2015-05-02 08:13:23.329640] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8924817a.52389832d7218" VjcNE6wxQzZrjF1Spt0AAAB5 TLSv1.2 ECDHE-RSA-AES128-SHA256 744 864 56% 929290 2536 925388 202 0 0 192.168.32.7 CH - [2015-05-02 08:13:23.336943] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8924817a.52389832d7218" VjcNE6wxQzZrjF1R@OMAAAAc TLSv1.2 ECDHE-RSA-AES128-SHA256 760 7973 22% 924058 3112 917125 166 0 0 192.168.32.7 CH - [2015-05-02 08:13:23.335200] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8924817a.52389832d7218" VjcNE6wxQzZrjF1Spt4AAAB7 TLSv1.2 ECDHE-RSA-AES128-SHA256 744 2144 22% 956824 3332 952024 221 0 0 192.168.32.7 CH - [2015-05-02 08:13:23.337583] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8924817a.52389832d7218" VjcNE6wxQzZrjF1Spt8AAAB@ TLSv1.2 ECDHE-RSA-AES128-SHA256 776 1931 -% 1332273 3249 328107 194 0 0 192.168.32.7 CH - [2015-05-02 08:13:23.346735] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8924817a.52389832d7218" VjcNE6wxQzZrjF1SpuAAAAB9 TLSv1.2 ECDHE-RSA-AES128-SHA256 760 4660 23% 1342112 1787 338420 163 0 0 192.168.32.7 CH - [2015-05-02 08:13:24.757944] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8924817a.52389832d7218" VjcNFKwxQzZrjF1SpuEAAAB8 TLSv1.2 ECDHE-RSA-AES128-SHA256 486 1866 -% 946863 2990 943032 153 0 0 192.168.32.7 CH - [2015-05-02 08:13:25.804968] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d478bd83.523898369f7a8" VjcNFawxQzZrjF1SpuMAAABA TLSv1.2 ECDHE-RSA-AES128-SHA256 627 5651 -% 513783 992 511891 166 0 0 192.168.32.7 CH - [2015-05-02 08:14:05.980917] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8924817a.52389832d7218" VjcNPawxQzZrjF1SpukAAAB3 TLSv1.2 ECDHE-RSA-AES128-SHA256 712 8011 -% 863440 2038 856987 3649 0 0 192.168.32.7 CH - [2015-05-02 08:15:29.666294] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8924817a.52389832d7218" VjcNkawxQzZrjF1SpvcAAABQ TLSv1.2 ECDHE-RSA-AES128-SHA256 712 8011 -% 875551 1992 870490 2461 0 0 192.168.32.7 CH - [2015-05-02 08:16:37.662426] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8924817a.52389832d7218" VjcN1awxQzZrjF1SpwAAAABZ TLSv1.2 ECDHE-RSA-AES128-SHA256 712 8011 -% 1081105 2345 75685 2267 0 0 192.168.144.21 CH - [2015-05-02 08:22:57.450752] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9648d7eb.52389a57c9700" VjcPUawxQzZrjF1Sp0MAAABj TLSv1.2 ECDHE-RSA-AES256-SHA384 646 5699 -% 1130276 898 128491 167 0 0 192.168.186.76 CH - [2015-05-02 08:34:35.645415] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "d43b4c4b.52388d1dbd27f" VjcSC6wxQzZrjF1Sp7UAAABN TLSv1.2 ECDHE-RSA-AES256-SHA384 1271 4076 -% 1079316 5575 71480 237 3 0 192.168.186.76 CH - [2015-05-02 08:34:37.821344] "GET /EMail/overview.aspx HTTP/1.1" 200 5535 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcSDawxQzZrjF1R@RwAAAAa TLSv1.2 ECDHE-RSA-AES256-SHA384 1180 6203 -% 1595190 5630 586229 1836 3 0 192.168.186.76 CH - [2015-05-02 08:34:37.821207] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcSDawxQzZrjF1Sp7YAAABa TLSv1.2 ECDHE-RSA-AES256-SHA384 1212 9827 -% 1998019 5645 981859 4679 3 0 192.168.186.76 CH - [2015-05-02 08:34:39.456104] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcSD6wxQzZrjF1R@R0AAAAb TLSv1.2 ECDHE-RSA-AES256-SHA384 694 1354 -% 819661 6575 811432 176 3 0 192.168.186.76 CH - [2015-05-02 08:34:39.878783] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcSD6wxQzZrjF1Sp7cAAABb TLSv1.2 ECDHE-RSA-AES256-SHA384 726 1370 -% 622497 9740 610799 185 3 0 192.168.186.76 CH - [2015-05-02 08:34:40.799655] "GET /EMail/inbox.aspx HTTP/1.1" 200 9685 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcSEKwxQzZrjF1Sp7gAAABc TLSv1.2 ECDHE-RSA-AES256-SHA384 662 10287 -% 1104927 6542 90836 5036 3 0 192.168.186.76 CH - [2015-05-02 08:34:41.944797] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcSEawxQzZrjF1R@R4AAAAe TLSv1.2 ECDHE-RSA-AES256-SHA384 678 634 -% 1066722 6530 57424 205 3 0 192.168.186.76 CH - [2015-05-02 08:34:41.944303] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcSEawxQzZrjF1Sp7kAAABY TLSv1.2 ECDHE-RSA-AES256-SHA384 678 634 -% 1067429 6727 58033 118 3 0 192.168.186.76 CH - [2015-05-02 08:35:38.780849] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3927_49&folderId=947_65&attachmentId=4&token=-75999274412898652E18 HTTP/1.1" 200 966138 "https://www.example.com/EMail/message.aspx?&mailId=3927_49&folderId=947_65&mailPos=1" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcSSqwxQzZrjF1Sp8UAAABo TLSv1.2 ECDHE-RSA-AES256-SHA384 1399 1022355 -% 1514186 7134 108447 211 3 0 192.168.186.76 CH - [2015-05-02 08:35:58.058550] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3927_49&folderId=947_65&attachmentId=3&token=-75999274412898652E18 HTTP/1.1" 200 966136 "https://www.example.com/EMail/message.aspx?&mailId=3927_49&folderId=947_65&mailPos=1" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcSXqwxQzZrjF1Sp8gAAABq TLSv1.2 ECDHE-RSA-AES256-SHA384 1399 1022275 -% 1521016 8257 169606 201 3 0 192.168.186.76 CH - [2015-05-02 08:37:28.521198] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/message.aspx?&mailId=3927_49&folderId=947_65&mailPos=1" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcSuKwxQzZrjF1R@SkAAAAo TLSv1.2 ECDHE-RSA-AES256-SHA384 1244 2347 -% 972486 4372 966591 150 3 0 192.168.223.134 CH - [2015-05-02 08:37:31.521064] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7375 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b2f72e87.52389d995d828" VjcSu6wxQzZrjF1Sp9YAAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 765 11939 -% 971967 3246 963822 3887 0 0 192.168.186.76 CH - [2015-05-02 08:37:30.767505] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3927_49&folderId=947_65&attachmentId=3&token=-75999274412898652E18 HTTP/1.1" 200 966136 "https://www.example.com/EMail/message.aspx?&mailId=3927_49&folderId=947_65&mailPos=1" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcSuqwxQzZrjF1R@SoAAAAq TLSv1.2 ECDHE-RSA-AES256-SHA384 806 1016239 -% 2031137 9867 156158 171 3 0 192.168.223.134 CH - [2015-05-02 08:37:32.578816] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b2f72e87.52389d995d828" VjcSvKwxQzZrjF1Sp9cAAAB9 TLSv1.2 ECDHE-RSA-AES256-SHA384 534 2575 14% 841903 3770 836721 165 0 0 192.168.223.134 CH - [2015-05-02 08:37:32.656641] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b2f72e87.52389d995d828" VjcSvKwxQzZrjF1R@SsAAAAr TLSv1.2 ECDHE-RSA-AES256-SHA384 850 928 56% 893696 2635 889924 241 0 0 192.168.223.134 CH - [2015-05-02 08:37:32.669056] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b2f72e87.52389d995d828" VjcSvKwxQzZrjF1Sp9oAAABA TLSv1.2 ECDHE-RSA-AES256-SHA384 866 4485 23% 1075744 2099 71593 276 0 0 192.168.223.134 CH - [2015-05-02 08:37:32.661260] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b2f72e87.52389d995d828" VjcSvKwxQzZrjF1R@SwAAAAp TLSv1.2 ECDHE-RSA-AES256-SHA384 850 2208 22% 1094533 4592 88622 150 0 0 192.168.223.134 CH - [2015-05-02 08:37:32.665206] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7239 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b2f72e87.52389d995d828" VjcSvKwxQzZrjF1Sp9gAAAB- TLSv1.2 ECDHE-RSA-AES256-SHA384 866 8829 22% 1170059 2182 164177 170 0 0 192.168.223.134 CH - [2015-05-02 08:37:32.666279] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b2f72e87.52389d995d828" VjcSvKwxQzZrjF1Sp9kAAAB8 TLSv1.2 ECDHE-RSA-AES256-SHA384 882 1979 -% 1367161 2133 364423 152 0 0 192.168.223.134 CH - [2015-05-02 08:37:33.978528] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b2f72e87.52389d995d828" VjcSvawxQzZrjF1Sp9sAAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 566 1898 -% 799387 2079 796609 158 0 0 192.168.223.134 CH - [2015-05-02 08:37:35.213978] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4a2907a1.52389d9ce319a" VjcSv6wxQzZrjF1Sp9wAAABD TLSv1.2 ECDHE-RSA-AES256-SHA384 669 5699 -% 902479 778 900962 178 0 0 192.168.186.76 CH - [2015-05-02 08:37:47.854167] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9669 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcSy6wxQzZrjF1Sp98AAABF TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 14347 -% 1342829 6906 331097 2975 3 0 192.168.223.134 CH - [2015-05-02 08:38:08.429145] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "b2f72e87.52389d995d828" VjcS4KwxQzZrjF1R@TEAAAAw TLSv1.2 ECDHE-RSA-AES256-SHA384 882 193 -% 909684 2043 906965 159 0 0 192.168.223.134 CH - [2015-05-02 08:38:08.895501] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b2f72e87.52389d995d828" VjcS4KwxQzZrjF1Sp@IAAABH TLSv1.2 ECDHE-RSA-AES256-SHA384 1042 662 -% 1024787 6632 16933 403 0 0 192.168.223.134 CH - [2015-05-02 08:38:09.946157] "GET /EMail/main.aspx HTTP/1.1" 200 3407 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b2f72e87.52389d995d828" VjcS4awxQzZrjF1Sp@MAAABI TLSv1.2 ECDHE-RSA-AES256-SHA384 566 3914 -% 837131 3337 831759 1131 0 0 192.168.223.134 CH - [2015-05-02 08:38:10.861724] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b2f72e87.52389d995d828" VjcS4qwxQzZrjF1Sp@QAAABJ TLSv1.2 ECDHE-RSA-AES256-SHA384 518 4234 -% 1038687 3011 24342 10495 0 0 192.168.223.134 CH - [2015-05-02 08:38:10.937411] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b2f72e87.52389d995d828" VjcS4qwxQzZrjF1R@TIAAAAy TLSv1.2 ECDHE-RSA-AES256-SHA384 834 6011 -% 1275442 2950 269275 2595 0 0 192.168.223.134 CH - [2015-05-02 08:38:10.936852] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b2f72e87.52389d995d828" VjcS4qwxQzZrjF1Sp@UAAABK TLSv1.2 ECDHE-RSA-AES256-SHA384 850 9859 -% 1305820 4487 290807 5648 0 0 192.168.223.134 CH - [2015-05-02 08:38:12.304513] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b2f72e87.52389d995d828" VjcS5KwxQzZrjF1Sp@YAAABL TLSv1.2 ECDHE-RSA-AES256-SHA384 582 1370 -% 702287 2397 699072 219 0 0 192.168.223.134 CH - [2015-05-02 08:38:12.273443] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b2f72e87.52389d995d828" VjcS5KwxQzZrjF1R@TMAAAAz TLSv1.2 ECDHE-RSA-AES256-SHA384 534 1354 -% 1023870 3031 19835 226 0 0 192.168.223.134 CH - [2015-05-02 08:38:18.471885] "GET /EMail/newMessage.aspx?msg=new HTTP/1.1" 200 12046 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b2f72e87.52389d995d828" VjcS6qwxQzZrjF1Sp@gAAABO TLSv1.2 ECDHE-RSA-AES256-SHA384 834 12917 -% 884075 2265 858054 21364 3 3 192.168.223.134 CH - [2015-05-02 08:38:18.488373] "GET /EMail/tree.aspx?sNode-sharedTree=treeNewMsg HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b2f72e87.52389d995d828" VjcS6qwxQzZrjF1Sp@kAAABS TLSv1.2 ECDHE-RSA-AES256-SHA384 850 9859 -% 1477923 2145 466462 4860 0 0 192.168.223.134 CH - [2015-05-02 08:38:19.423621] "GET /EMail/scripts/tinymce/tinymce.min.js HTTP/1.1" 200 101964 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b2f72e87.52389d995d828" VjcS66wxQzZrjF1Sp@oAAABP TLSv1.2 ECDHE-RSA-AES256-SHA384 534 105226 33% 883595 2393 845141 211 0 0 192.168.223.134 CH - [2015-05-02 08:38:20.621234] "GET /EMail/scripts/tinymce/plugins/visualblocks/plugin.min.js HTTP/1.1" 200 525 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b2f72e87.52389d995d828" VjcS7KwxQzZrjF1Sp@4AAABN TLSv1.2 ECDHE-RSA-AES256-SHA384 882 1360 43% 1283623 2819 279780 152 0 0 192.168.223.134 CH - [2015-05-02 08:38:20.623366] "GET /EMail/scripts/tinymce/plugins/fullpage/plugin.min.js HTTP/1.1" 200 2325 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b2f72e87.52389d995d828" VjcS7KwxQzZrjF1R@TcAAAA2 TLSv1.2 ECDHE-RSA-AES256-SHA384 866 3237 36% 1283127 3021 278727 160 0 0 192.168.223.134 CH - [2015-05-02 08:38:20.594870] "GET /EMail/scripts/tinymce/plugins/print/plugin.min.js HTTP/1.1" 200 182 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b2f72e87.52389d995d828" VjcS7KwxQzZrjF1Sp@0AAABU TLSv1.2 ECDHE-RSA-AES256-SHA384 866 1008 55% 1325837 2921 321469 325 0 0 192.168.223.134 CH - [2015-05-02 08:38:20.588933] "GET /EMail/scripts/tinymce/themes/modern/theme.min.js HTTP/1.1" 200 2651 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b2f72e87.52389d995d828" VjcS7KwxQzZrjF1R@TUAAAA1 TLSv1.2 ECDHE-RSA-AES256-SHA384 866 3557 41% 1331951 2256 328046 395 0 0 192.168.223.134 CH - [2015-05-02 08:38:20.615266] "GET /EMail/scripts/tinymce/plugins/preview/plugin.min.js HTTP/1.1" 200 737 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b2f72e87.52389d995d828" VjcS7KwxQzZrjF1R@TYAAAA0 TLSv1.2 ECDHE-RSA-AES256-SHA384 866 1568 51% 1305645 2759 302118 102 0 0 192.168.223.134 CH - [2015-05-02 08:38:20.494431] "GET /EMail/scripts/tinymce/langs/de.js HTTP/1.1" 200 2969 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b2f72e87.52389d995d828" VjcS7KwxQzZrjF1Sp@wAAABT TLSv1.2 ECDHE-RSA-AES256-SHA384 534 3684 38% 1426914 2930 422596 104 0 0 192.168.223.134 CH - [2015-05-02 08:38:20.487963] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b2f72e87.52389d995d828" VjcS7KwxQzZrjF1Sp@sAAABR TLSv1.2 ECDHE-RSA-AES256-SHA384 534 3434 -% 1447348 3019 434618 8871 0 0 192.168.223.134 CH - [2015-05-02 08:38:20.631021] "GET /EMail/scripts/tinymce/plugins/hr/plugin.min.js HTTP/1.1" 200 191 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "b2f72e87.52389d995d828" VjcS7KwxQzZrjF1Sp-AAAABa TLSv1.2 ECDHE-RSA-AES256-SHA384 866 193 53% 1440023 2867 436247 196 0 0 192.168.223.134 CH - [2015-05-02 08:38:20.628431] "GET /EMail/scripts/tinymce/plugins/searchreplace/plugin.min.js HTTP/1.1" 200 2586 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "b2f72e87.52389d995d828" VjcS7KwxQzZrjF1Sp@8AAABQ TLSv1.2 ECDHE-RSA-AES256-SHA384 882 193 40% 1674205 2825 670338 154 0 0 192.168.223.134 CH - [2015-05-02 08:38:20.648205] "GET /EMail/scripts/tinymce/plugins/charmap/plugin.min.js HTTP/1.1" 200 2698 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "b2f72e87.52389d995d828" VjcS7KwxQzZrjF1Sp-IAAABV TLSv1.2 ECDHE-RSA-AES256-SHA384 866 193 38% 1934270 2964 929553 247 0 0 192.168.223.134 CH - [2015-05-02 08:38:20.648283] "GET /EMail/scripts/tinymce/plugins/insertdatetime/plugin.min.js HTTP/1.1" 200 867 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "b2f72e87.52389d995d828" VjcS7KwxQzZrjF1Sp-MAAABW TLSv1.2 ECDHE-RSA-AES256-SHA384 882 193 42% 1935364 2935 931080 145 0 0 192.168.223.134 CH - [2015-05-02 08:38:20.632018] "GET /EMail/scripts/tinymce/plugins/paste/plugin.min.js HTTP/1.1" 200 6239 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "b2f72e87.52389d995d828" VjcS7KwxQzZrjF1Sp-EAAABX TLSv1.2 ECDHE-RSA-AES256-SHA384 866 193 40% 1953072 4229 946017 167 0 0 192.168.223.134 CH - [2015-05-02 08:38:21.935140] "GET /EMail/scripts/tinymce/plugins/table/plugin.min.js HTTP/1.1" 200 9166 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "b2f72e87.52389d995d828" VjcS7awxQzZrjF1R@TgAAAA3 TLSv1.2 ECDHE-RSA-AES256-SHA384 550 0 32% 797011 2026 791695 203 0 0 192.168.223.134 CH - [2015-05-02 08:38:21.928540] "GET /EMail/scripts/tinymce/plugins/image/plugin.min.js HTTP/1.1" 200 2136 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "b2f72e87.52389d995d828" VjcS7awxQzZrjF1Sp-QAAABb TLSv1.2 ECDHE-RSA-AES256-SHA384 550 0 42% 861127 4052 855773 143 0 0 192.168.223.134 CH - [2015-05-02 08:38:57.132414] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "4a2907a1.52389d9ce319a" VjcTEawxQzZrjF1Sp-kAAABn TLSv1.2 ECDHE-RSA-AES256-SHA384 658 1835 -% 4412 2840 135 215 0 0 192.168.186.76 CH - [2015-05-02 08:39:48.237322] "GET /EMail/newMessage.aspx?action=reply&mailId=3928_48&folderId=947_65&showPics=false HTTP/1.1" 200 23792 "https://www.example.com/EMail/message.aspx?&mailId=3928_48&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcTRKwxQzZrjF1R@T0AAAA@ TLSv1.2 ECDHE-RSA-AES256-SHA384 1367 28698 -% 1294609 7901 234681 48021 6 3 192.168.186.76 CH - [2015-05-02 08:39:49.571473] "GET /EMail/scripts/tinymce/tinymce.min.js HTTP/1.1" 200 101970 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3928_48&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcTRawxQzZrjF1R@T4AAAA- TLSv1.2 ECDHE-RSA-AES256-SHA384 1335 109100 33% 1058321 6638 7602 195 3 0 192.168.186.76 CH - [2015-05-02 08:39:50.720717] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3928_48&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcTRqwxQzZrjF1R@T8AAAAA TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 1014787 6378 0 9398 3 0 192.168.186.76 CH - [2015-05-02 08:39:50.804709] "GET /EMail/scripts/tinymce/plugins/preview/plugin.min.js HTTP/1.1" 200 737 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3928_48&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcTRqwxQzZrjF1SqAQAAABw TLSv1.2 ECDHE-RSA-AES256-SHA384 1276 1536 51% 946115 4189 939827 161 3 0 192.168.186.76 CH - [2015-05-02 08:39:50.732551] "GET /EMail/scripts/tinymce/langs/de.js HTTP/1.1" 200 2969 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3928_48&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcTRqwxQzZrjF1R@UAAAAAE TLSv1.2 ECDHE-RSA-AES256-SHA384 742 3684 38% 1071789 6105 62108 227 3 0 192.168.186.76 CH - [2015-05-02 08:39:51.306046] "GET /EMail/scripts/tinymce/plugins/searchreplace/plugin.min.js HTTP/1.1" 200 2586 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3928_48&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcTR6wxQzZrjF1R@UEAAAAB TLSv1.2 ECDHE-RSA-AES256-SHA384 1351 7376 40% 718057 4290 711217 277 3 0 192.168.186.76 CH - [2015-05-02 08:39:51.305895] "GET /EMail/scripts/tinymce/plugins/fullpage/plugin.min.js HTTP/1.1" 200 2325 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3928_48&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcTR6wxQzZrjF1SqAUAAAB0 TLSv1.2 ECDHE-RSA-AES256-SHA384 1351 7120 36% 1416797 4393 409868 230 3 0 192.168.186.76 CH - [2015-05-02 08:39:51.756991] "GET /EMail/scripts/tinymce/plugins/visualblocks/plugin.min.js HTTP/1.1" 200 525 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3928_48&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcTR6wxQzZrjF1R@UIAAAAC TLSv1.2 ECDHE-RSA-AES256-SHA384 758 1167 43% 1078535 6758 69883 151 3 0 192.168.186.76 CH - [2015-05-02 08:39:51.807958] "GET /EMail/scripts/tinymce/plugins/charmap/plugin.min.js HTTP/1.1" 200 2698 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3928_48&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcTR6wxQzZrjF1SqAcAAABz TLSv1.2 ECDHE-RSA-AES256-SHA384 1276 3573 38% 1250276 4768 243632 168 3 0 192.168.186.76 CH - [2015-05-02 08:39:51.767851] "GET /EMail/scripts/tinymce/plugins/hr/plugin.min.js HTTP/1.1" 200 191 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3928_48&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcTR6wxQzZrjF1SqAYAAAB2 TLSv1.2 ECDHE-RSA-AES256-SHA384 758 831 53% 1311581 4581 304886 152 3 0 192.168.186.76 CH - [2015-05-02 08:39:51.816596] "GET /EMail/scripts/tinymce/plugins/anchor/plugin.min.js HTTP/1.1" 200 339 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3928_48&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcTR6wxQzZrjF1R@UMAAAAF TLSv1.2 ECDHE-RSA-AES256-SHA384 758 975 63% 1363360 3813 357680 159 3 0 192.168.186.76 CH - [2015-05-02 08:39:52.038870] "GET /EMail/scripts/tinymce/plugins/visualchars/plugin.min.js HTTP/1.1" 200 608 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3928_48&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcTSKwxQzZrjF1R@UQAAAAD TLSv1.2 ECDHE-RSA-AES256-SHA384 758 1247 54% 1141331 7660 131816 115 3 0 192.168.186.76 CH - [2015-05-02 08:39:53.682023] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5879 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3928_48&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcTSawxQzZrjF1R@UYAAAAI TLSv1.2 ECDHE-RSA-AES256-SHA384 710 9666 -% 1039918 6392 0 0 3 0 192.168.186.76 CH - [2015-05-02 08:39:53.681673] "GET /EMail/scripts/tinymce/skins/lightgray/content.min.css HTTP/1.1" 200 588 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3928_48&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcTSawxQzZrjF1R@UUAAAAH TLSv1.2 ECDHE-RSA-AES256-SHA384 742 1231 38% 1201755 6624 193196 207 3 0 192.168.186.76 CH - [2015-05-02 08:40:52.987562] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3928_48&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcThKwxQzZrjF1SqA8AAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 9938 4545 -% 1851840 592482 239346 219 66 0 192.168.186.76 CH - [2015-05-02 08:40:54.852276] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3928_48&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcThqwxQzZrjF1SqBAAAABD TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 923793 7944 902877 11150 3 0 192.168.223.134 CH - [2015-05-02 08:41:24.434128] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cb748708.52389e777d0d0" VjcTpKwxQzZrjF1SqBYAAABH TLSv1.2 ECDHE-RSA-AES256-SHA384 669 5699 -% 858723 1242 855998 223 0 0 192.168.186.76 CH - [2015-05-02 08:45:25.957042] "GET /EMail/newMessage.aspx?msg=new HTTP/1.1" 200 12030 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "d43b4c4b.52388d1dbd27f" VjcUlawxQzZrjF1SqD8AAABy TLSv1.2 ECDHE-RSA-AES256-SHA384 1196 161 -% 1542981 7274 512464 21287 6 3 192.168.186.76 CH - [2015-05-02 08:45:27.014286] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcUl6wxQzZrjF1SqEAAAABw TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1230201 6808 216208 2856 3 0 192.168.186.76 CH - [2015-05-02 08:45:57.095925] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcUtawxQzZrjF1SqEYAAAB6 TLSv1.2 ECDHE-RSA-AES256-SHA384 1474 566 -% 1382208 10422 370062 164 3 0 192.168.186.76 CH - [2015-05-02 08:45:58.490988] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7291 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcUtqwxQzZrjF1SqEcAAAB5 TLSv1.2 ECDHE-RSA-AES256-SHA384 726 7802 -% 925418 7548 913990 2299 3 0 192.168.1.78 CH - [2015-05-02 08:52:22.427744] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWNqwxQzZrjF1SqIEAAABz TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1106 5902 22% 828656 2871 824662 158 0 0 192.168.1.78 CH - [2015-05-02 08:52:22.404775] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWNqwxQzZrjF1SqIAAAAB1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1141 8122 23% 879442 1774 875961 230 0 0 192.168.1.78 CH - [2015-05-02 08:52:22.457713] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWNqwxQzZrjF1SqIMAAAB2 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1106 4620 56% 889116 3645 884464 229 0 0 192.168.1.78 CH - [2015-05-02 08:52:22.402841] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWNqwxQzZrjF1SqH8AAAB0 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1150 5711 -% 1037873 2105 35088 150 0 0 192.168.1.78 CH - [2015-05-02 08:52:22.427834] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWNqwxQzZrjF1SqIIAAAB4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1136 12018 22% 1180754 3050 173428 200 0 0 192.168.1.78 CH - [2015-05-02 08:52:23.775959] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWN6wxQzZrjF1SqIUAAAB5 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 506 1792 -% 1037005 2519 33511 214 0 0 192.168.1.78 CH - [2015-05-02 08:52:23.726865] "GET /EMail/scripts/csshover.htc HTTP/1.1" 200 4255 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWN6wxQzZrjF1SqIQAAAB6 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 360 4676 -% 1087618 3190 83602 101 0 0 192.168.1.78 CH - [2015-05-02 08:52:24.603310] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWOKwxQzZrjF1SqIYAAAB@ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 504 2088 -% 958191 2129 955350 173 0 0 192.168.1.78 CH - [2015-05-02 08:52:25.674322] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Win64; x64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "c38124d6.5238a0ee18a52" VjcWOawxQzZrjF1SqIcAAAB7 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 936 5756 -% 649575 1214 647225 179 0 0 192.168.1.78 CH - [2015-05-02 08:52:31.350002] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWP6wxQzZrjF1SqIoAAAB- TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1320 4447 -% 1107743 3837 103205 172 0 0 192.168.1.78 CH - [2015-05-02 08:52:32.348157] "GET /EMail/images/active.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWQKwxQzZrjF1SqIsAAAB8 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1241 4322 -% 942718 2191 939684 236 0 0 192.168.1.78 CH - [2015-05-02 08:52:32.473673] "GET /EMail/main.aspx HTTP/1.1" 200 3397 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWQKwxQzZrjF1SqIwAAABE TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 507 3813 -% 826380 2192 821654 2014 0 0 192.168.1.78 CH - [2015-05-02 08:52:33.140038] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWQawxQzZrjF1SqI0AAABD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1243 4232 -% 915276 3439 910979 165 0 0 192.168.1.78 CH - [2015-05-02 08:52:33.385861] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWQawxQzZrjF1SqI4AAABC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 528 2427 14% 852197 3964 846371 242 0 0 192.168.1.78 CH - [2015-05-02 08:52:33.395703] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWQawxQzZrjF1SqI8AAABF TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 525 1876 22% 878408 4346 872709 143 0 0 192.168.1.78 CH - [2015-05-02 08:52:33.444260] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWQawxQzZrjF1SqJEAAAB3 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1209 8122 23% 956651 2092 952138 225 0 0 192.168.1.78 CH - [2015-05-02 08:52:33.437868] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWQawxQzZrjF1SqJAAAABB TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1172 4620 56% 1159915 2736 155992 276 0 0 192.168.1.78 CH - [2015-05-02 08:52:33.438004] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWQawxQzZrjF1R@XIAAAA6 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1204 12018 22% 1263609 2684 257113 170 0 0 192.168.1.78 CH - [2015-05-02 08:52:34.835245] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWQqwxQzZrjF1SqJIAAABH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 485 7771 -% 956042 2585 950262 2628 0 0 192.168.1.78 CH - [2015-05-02 08:52:34.834700] "GET /EMail/host.aspx HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWQqwxQzZrjF1R@XMAAAA7 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 457 7771 -% 982176 2151 975810 3608 0 0 192.168.1.78 CH - [2015-05-02 08:52:34.836619] "GET /EMail/overview.aspx HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWQqwxQzZrjF1SqJMAAABI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 459 7771 -% 1046180 2821 38832 3636 0 0 192.168.1.78 CH - [2015-05-02 08:52:35.903644] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWQ6wxQzZrjF1SqJUAAABK TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 586 7992 22% 1090678 3124 83021 225 0 0 192.168.1.78 CH - [2015-05-02 08:52:35.902732] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWQ6wxQzZrjF1SqJQAAABJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 554 594 56% 1141216 3837 136389 172 0 0 192.168.1.78 CH - [2015-05-02 08:52:35.901192] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWQ6wxQzZrjF1R@XQAAAA8 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 558 2427 14% 1159524 3080 154612 220 0 0 192.168.1.78 CH - [2015-05-02 08:52:36.017063] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWRKwxQzZrjF1R@XYAAAA@ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1242 4232 -% 1139985 1783 137544 145 0 0 192.168.1.78 CH - [2015-05-02 08:52:35.904320] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWQ6wxQzZrjF1SqJYAAABL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 555 1876 22% 1398711 4567 392398 225 0 0 192.168.1.78 CH - [2015-05-02 08:52:36.015765] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWRKwxQzZrjF1R@XUAAAA9 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1239 8269 23% 1326352 2459 321683 211 0 0 192.168.1.78 CH - [2015-05-02 08:52:37.417876] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWRawxQzZrjF1R@XcAAAA- TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 206 -% 703881 2997 700037 158 0 0 192.168.1.78 CH - [2015-05-02 08:52:37.423433] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWRawxQzZrjF1SqJcAAABM TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 486 7771 -% 881068 2211 874319 3921 0 0 192.168.1.78 CH - [2015-05-02 08:52:37.430677] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWRawxQzZrjF1R@XgAAAAA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 598 206 -% 1223310 2577 219950 166 0 0 192.168.1.78 CH - [2015-05-02 08:52:38.428950] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWRqwxQzZrjF1R@XoAAAAC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 526 1876 22% 826078 1700 823300 226 0 0 192.168.1.78 CH - [2015-05-02 08:52:38.434278] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWRqwxQzZrjF1SqJkAAABS TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 525 594 56% 868856 1779 866210 158 0 0 192.168.1.78 CH - [2015-05-02 08:52:38.422343] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWRqwxQzZrjF1SqJgAAABO TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 529 2427 14% 1057156 2280 53382 233 0 0 192.168.1.78 CH - [2015-05-02 08:52:38.436309] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWRqwxQzZrjF1SqJsAAABN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 562 4243 23% 1298197 1762 294769 206 0 0 192.168.1.78 CH - [2015-05-02 08:52:38.496152] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWRqwxQzZrjF1SqJwAAABU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1213 4232 -% 1297056 1816 294629 145 0 0 192.168.1.78 CH - [2015-05-02 08:52:38.436054] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWRqwxQzZrjF1SqJoAAABP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 557 7992 22% 1445069 3000 437774 196 0 0 192.168.1.78 CH - [2015-05-02 08:52:39.997640] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWR6wxQzZrjF1SqJ4AAABR TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 206 -% 807091 2099 804261 191 0 0 192.168.1.78 CH - [2015-05-02 08:52:40.059865] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWSKwxQzZrjF1SqJ8AAABc TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 569 206 -% 952161 3184 947970 261 0 0 192.168.1.78 CH - [2015-05-02 08:52:52.603153] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7365 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWVKwxQzZrjF1SqKIAAABd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1081 11813 -% 801135 2473 795131 2769 0 0 192.168.1.78 CH - [2015-05-02 08:52:53.545258] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWVawxQzZrjF1SqKMAAABe TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 555 2427 14% 714069 3397 708933 260 0 0 192.168.1.78 CH - [2015-05-02 08:52:53.590086] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWVawxQzZrjF1R@X4AAAAH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1200 5902 22% 974185 3067 969220 252 0 0 192.168.1.78 CH - [2015-05-02 08:52:53.583998] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWVawxQzZrjF1R@XsAAAAF TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1199 4620 56% 1011505 3874 6633 179 0 0 192.168.1.78 CH - [2015-05-02 08:52:53.587479] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWVawxQzZrjF1R@X0AAAAD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1236 8122 23% 1069099 3339 63441 178 0 0 192.168.1.78 CH - [2015-05-02 08:52:53.584033] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7239 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWVawxQzZrjF1R@XwAAAAI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1231 12067 22% 1205089 4770 196183 192 0 0 192.168.1.78 CH - [2015-05-02 08:52:53.584033] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWVawxQzZrjF1R@XwAAAAJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1239 4232 -% 1220610 4773 214655 119 0 0 192.168.1.78 CH - [2015-05-02 08:52:54.853537] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWVqwxQzZrjF1R@YAAAAAL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 595 206 -% 1056918 3044 53069 158 0 0 192.168.1.78 CH - [2015-05-02 08:52:54.847494] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWVqwxQzZrjF1R@X8AAAAK TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 206 -% 1143684 3019 139706 180 0 0 192.168.192.35 CH - [2015-05-02 08:52:55.735065] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcWV6wxQzZrjF1SqKUAAABQ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1127 8122 23% 662267 2573 658261 140 0 0 192.168.192.35 CH - [2015-05-02 08:52:55.730739] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcWV6wxQzZrjF1R@YEAAAAM TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1122 12018 22% 1027346 2020 21291 181 0 0 192.168.192.35 CH - [2015-05-02 08:52:55.732849] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcWV6wxQzZrjF1SqKQAAABa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1132 4620 56% 1035796 2765 32042 191 0 0 192.168.192.35 CH - [2015-05-02 08:52:55.736083] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcWV6wxQzZrjF1SqKcAAABf TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1132 5902 22% 1087821 2111 84485 180 0 0 192.168.192.35 CH - [2015-05-02 08:52:55.735925] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcWV6wxQzZrjF1SqKYAAABh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1090 5593 -% 1320396 2317 317404 378 0 0 192.168.192.35 CH - [2015-05-02 08:52:56.838813] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcWWKwxQzZrjF1R@YIAAAAN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 507 1685 -% 987479 3075 983361 226 0 0 192.168.192.35 CH - [2015-05-02 08:52:56.914509] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/css/NNstyle.css" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcWWKwxQzZrjF1SqKgAAABj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 476 1792 -% 934036 2071 931131 303 0 0 192.168.192.35 CH - [2015-05-02 08:53:03.783800] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcWX6wxQzZrjF1SqKsAAABW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1338 4447 -% 1215170 3275 211062 211 0 0 192.168.192.35 CH - [2015-05-02 08:53:05.010525] "GET /EMail/main.aspx HTTP/1.1" 200 3383 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcWYawxQzZrjF1SqKwAAABX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 3799 -% 1006879 4306 0 1834 0 0 192.168.192.35 CH - [2015-05-02 08:53:06.087866] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcWYqwxQzZrjF1SqK0AAABb TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 4128 -% 987967 2969 977701 6462 0 0 192.168.192.35 CH - [2015-05-02 08:53:06.120175] "GET /EMail/overview.aspx HTTP/1.1" 200 5289 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcWYqwxQzZrjF1SqK4AAABi TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1134 9737 -% 1669850 2540 664812 1985 0 0 192.168.192.35 CH - [2015-05-02 08:53:06.128299] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcWYqwxQzZrjF1SqK8AAABk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1160 13205 -% 1709336 4264 697149 3047 0 0 192.168.192.35 CH - [2015-05-02 08:53:07.828974] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcWY6wxQzZrjF1SqLAAAABl TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 476 1248 -% 681299 2240 678345 164 0 0 192.168.192.35 CH - [2015-05-02 08:53:07.888330] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcWY6wxQzZrjF1SqLEAAABm TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 518 1260 -% 996519 2169 993396 233 0 0 192.168.192.35 CH - [2015-05-02 08:53:09.124343] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/css/NNstyle.css" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcWZawxQzZrjF1SqLMAAABo TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 474 2088 -% 944477 2216 941170 284 0 0 192.168.192.35 CH - [2015-05-02 08:53:09.516102] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcWZawxQzZrjF1SqLQAAABp TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 511 409 -% 813371 2672 809838 252 0 0 192.168.192.35 CH - [2015-05-02 08:53:10.340750] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcWZqwxQzZrjF1SqLUAAABr TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 492 676 75% 976599 2970 972500 364 0 0 192.168.192.35 CH - [2015-05-02 08:53:11.383354] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 - - + "9d058361.5238a109cd61d" VjcWZ6wxQzZrjF1SqLYAAABq TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 389 1554 -% 3043 1888 56 118 0 0 192.168.192.35 CH - [2015-05-02 08:53:11.429693] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcWZ6wxQzZrjF1SqLcAAABs TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 458 318 -% 600845 3590 596403 171 0 0 192.168.192.35 CH - [2015-05-02 08:53:12.044057] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcWaKwxQzZrjF1SqLgAAABt TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 440 7758 -% 577825 2005 572312 2915 0 0 192.168.1.78 CH - [2015-05-02 08:53:16.448473] "GET /EMail/images/active.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWbKwxQzZrjF1R@YQAAAAP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1241 4232 -% 849712 3169 845679 216 0 0 192.168.1.78 CH - [2015-05-02 08:53:17.416827] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWbawxQzZrjF1R@YUAAAAQ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 672 421 -% 969804 3207 965724 221 0 0 192.168.1.78 CH - [2015-05-02 08:53:18.402652] "GET /EMail/main.aspx HTTP/1.1" 200 3397 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWbqwxQzZrjF1R@YYAAAAR TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 507 3813 -% 870725 1922 866291 1915 0 0 192.168.1.78 CH - [2015-05-02 08:53:19.349583] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWb6wxQzZrjF1R@YgAAAAU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 528 2551 14% 1111367 3278 106570 172 0 0 192.168.1.78 CH - [2015-05-02 08:53:19.394371] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWb6wxQzZrjF1R@YwAAAAX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1204 11687 22% 1090889 1758 86833 107 0 0 192.168.1.78 CH - [2015-05-02 08:53:19.388314] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWb6wxQzZrjF1R@YkAAAAT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1173 5902 22% 1126582 1940 123797 111 0 0 192.168.1.78 CH - [2015-05-02 08:53:19.389918] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWb6wxQzZrjF1R@YoAAAAY TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1209 8122 23% 1230419 2890 225919 178 0 0 192.168.1.78 CH - [2015-05-02 08:53:19.390601] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWb6wxQzZrjF1R@YsAAAAV TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1172 4620 56% 1324142 2573 320476 219 0 0 192.168.1.78 CH - [2015-05-02 08:53:20.841715] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWcKwxQzZrjF1R@Y0AAAAW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 457 4141 -% 986677 3469 975949 6640 0 0 192.168.1.78 CH - [2015-05-02 08:53:20.844823] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWcKwxQzZrjF1R@Y8AAAAa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 485 9192 -% 1756161 2749 744335 4845 0 0 192.168.1.78 CH - [2015-05-02 08:53:20.844505] "GET /EMail/overview.aspx HTTP/1.1" 200 5303 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWcKwxQzZrjF1R@Y4AAAAZ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 459 5725 -% 1934652 3205 928827 1778 0 0 192.168.1.78 CH - [2015-05-02 08:53:21.882358] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWcawxQzZrjF1R@ZIAAAAd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 2427 14% 914488 3382 909741 158 0 0 192.168.1.78 CH - [2015-05-02 08:53:21.879499] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWcawxQzZrjF1R@ZAAAAAb TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 526 594 56% 1085717 3281 81332 198 0 0 192.168.1.78 CH - [2015-05-02 08:53:21.881471] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWcawxQzZrjF1R@ZEAAAAe TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 527 1876 22% 1110998 2700 107321 114 0 0 192.168.1.78 CH - [2015-05-02 08:53:21.941885] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWcawxQzZrjF1SqLsAAABx TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1214 4232 -% 1327845 1985 324983 265 0 0 192.168.1.78 CH - [2015-05-02 08:53:21.923414] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7239 "https://www.example.com/EMail/header.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWcawxQzZrjF1SqLoAAABu TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1206 12067 22% 1380904 2885 373954 141 0 0 192.168.1.78 CH - [2015-05-02 08:53:22.720750] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWcqwxQzZrjF1R@ZMAAAAc TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 528 1260 -% 652044 4398 646494 176 0 0 192.168.1.78 CH - [2015-05-02 08:53:22.868575] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWcqwxQzZrjF1R@ZQAAAAf TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 486 1248 -% 747695 2247 744704 214 0 0 192.168.1.78 CH - [2015-05-02 08:53:23.396984] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWc6wxQzZrjF1R@ZUAAAAg TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 206 -% 779383 2742 775607 164 0 0 192.168.1.78 CH - [2015-05-02 08:53:23.499627] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWc6wxQzZrjF1SqL0AAABw TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 206 -% 809497 2167 806636 153 0 0 192.168.1.78 CH - [2015-05-02 08:53:23.402025] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWc6wxQzZrjF1SqLwAAABy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 206 -% 951360 2966 947664 104 0 0 192.168.1.78 CH - [2015-05-02 08:53:23.505215] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWc6wxQzZrjF1R@ZYAAAAh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 570 206 -% 1028469 2482 25118 243 0 0 192.168.1.78 CH - [2015-05-02 08:53:25.642624] "GET /EMail/inbox.aspx HTTP/1.1" 200 9878 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWdawxQzZrjF1R@ZcAAAAj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 460 10329 -% 1212711 3038 205701 3077 0 0 192.168.1.78 CH - [2015-05-02 08:53:27.054495] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWd6wxQzZrjF1R@ZkAAAAk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 478 539 -% 1164950 2742 161301 215 0 0 192.168.1.78 CH - [2015-05-02 08:53:27.053773] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWd6wxQzZrjF1SqL4AAABz TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 525 594 56% 1165758 2082 162762 152 0 0 192.168.1.78 CH - [2015-05-02 08:53:27.042419] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWd6wxQzZrjF1R@ZgAAAAi TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 529 2427 14% 1262807 3115 257956 209 0 0 192.168.1.78 CH - [2015-05-02 08:53:27.054130] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWd6wxQzZrjF1SqL8AAAB1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 526 1876 22% 1257762 2540 253964 183 0 0 192.168.1.78 CH - [2015-05-02 08:53:27.129750] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWd6wxQzZrjF1SqMAAAAB2 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1129 5904 -% 1352065 3544 347251 181 0 0 192.168.1.78 CH - [2015-05-02 08:53:27.055287] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWd6wxQzZrjF1R@ZsAAAAl TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 481 527 -% 1473573 2077 470767 196 0 0 192.168.1.78 CH - [2015-05-02 08:53:27.054550] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWd6wxQzZrjF1R@ZoAAAAm TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 557 7661 22% 1483295 2775 476201 201 0 0 192.168.1.78 CH - [2015-05-02 08:53:27.059958] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWd6wxQzZrjF1R@ZwAAAAn TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 481 1813 -% 1587627 2434 584434 149 0 0 192.168.1.78 CH - [2015-05-02 08:53:28.622946] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWeKwxQzZrjF1R@Z4AAAAq TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 206 -% 713345 2238 709770 594 0 0 192.168.1.78 CH - [2015-05-02 08:53:30.922022] "GET /EMail/message.aspx?&mailId=3928_57&folderId=2582_34&mailPos=0 HTTP/1.1" 200 11314 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWeqwxQzZrjF1R@Z8AAAAr TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 502 11795 -% 1290455 5186 264999 19281 0 0 192.168.1.78 CH - [2015-05-02 08:53:32.325995] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/message.aspx?&mailId=3928_57&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWfKwxQzZrjF1R@aIAAAAt TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 570 594 56% 972579 3058 968571 158 0 0 192.168.1.78 CH - [2015-05-02 08:53:32.326819] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/message.aspx?&mailId=3928_57&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWfKwxQzZrjF1SqMIAAAB4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 602 7661 22% 1003238 3014 0 170 0 0 192.168.1.78 CH - [2015-05-02 08:53:32.324960] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/message.aspx?&mailId=3928_57&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWfKwxQzZrjF1R@aEAAAAs TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 571 1876 22% 1288616 3061 284479 169 0 0 192.168.1.78 CH - [2015-05-02 08:53:32.324015] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/message.aspx?&mailId=3928_57&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWfKwxQzZrjF1R@aAAAAAp TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 574 2551 14% 1290375 3159 285780 110 0 0 192.168.1.78 CH - [2015-05-02 08:53:33.441962] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWfawxQzZrjF1SqMMAAAB5 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 206 -% 931231 3031 927297 206 0 0 192.168.1.78 CH - [2015-05-02 08:53:36.906895] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3928_57&folderId=2582_34&attachmentId=2&token=-37711943873544791E18 HTTP/1.1" 200 49271 "https://www.example.com/EMail/message.aspx?&mailId=3928_57&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWgKwxQzZrjF1SqMQAAAB6 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 609 50648 -% 1066596 7248 40170 188 0 0 192.168.1.78 CH - [2015-05-02 08:54:01.055029] "GET /EMail/images/active.gif HTTP/1.1" 304 - "https://www.example.com/EMail/message.aspx?&mailId=3928_57&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWmawxQzZrjF1R@aYAAAAx TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1260 4232 -% 962227 2407 958862 203 0 0 192.168.1.78 CH - [2015-05-02 08:54:01.470753] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3928_57&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWmawxQzZrjF1SqMgAAABA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1384 4382 -% 1099683 4667 94163 209 0 0 192.168.1.78 CH - [2015-05-02 08:54:02.586093] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8585 "https://www.example.com/EMail/message.aspx?&mailId=3928_57&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWmqwxQzZrjF1SqMkAAAB- TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 551 9036 -% 1176970 2549 171087 2679 0 0 192.168.1.78 CH - [2015-05-02 08:54:03.860180] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWm6wxQzZrjF1SqMoAAAB8 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 553 2427 14% 978894 2170 975384 172 0 0 192.168.1.78 CH - [2015-05-02 08:54:03.861446] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWm6wxQzZrjF1R@acAAAA2 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 550 1876 22% 1007219 3111 2745 562 0 0 192.168.1.78 CH - [2015-05-02 08:54:03.987956] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWm6wxQzZrjF1SqM0AAABD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1229 11687 22% 1024962 2039 19818 176 0 0 192.168.1.78 CH - [2015-05-02 08:54:03.901519] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWm6wxQzZrjF1SqMsAAABE TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1197 4620 56% 1148853 2324 145829 109 0 0 192.168.1.78 CH - [2015-05-02 08:54:03.905021] "GET /EMail/images/Highost.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWm6wxQzZrjF1R@agAAAA1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1241 4231 -% 1152394 1850 149933 152 0 0 192.168.1.78 CH - [2015-05-02 08:54:03.908014] "GET /EMail/images/msgOpened.png HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWm6wxQzZrjF1SqMwAAABG TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1242 4232 -% 1362078 2105 358938 149 0 0 192.168.1.78 CH - [2015-05-02 08:54:05.122635] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWnawxQzZrjF1SqM4AAABC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 206 -% 922268 2087 918914 488 0 0 192.168.1.78 CH - [2015-05-02 08:54:06.616813] "GET /EMail/message.aspx?&mailId=3919_16&folderId=2582_34&mailPos=0 HTTP/1.1" 200 11208 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWnqwxQzZrjF1SqM8AAABF TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 526 11660 -% 1284262 3296 258765 21496 0 0 192.168.1.78 CH - [2015-05-02 08:54:08.022772] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/message.aspx?&mailId=3919_16&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWoKwxQzZrjF1SqNAAAAB3 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 571 1876 22% 993456 2984 989299 170 0 0 192.168.1.78 CH - [2015-05-02 08:54:08.027035] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/message.aspx?&mailId=3919_16&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWoKwxQzZrjF1SqNEAAABB TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 602 7661 22% 1104402 3155 96999 249 0 0 192.168.1.78 CH - [2015-05-02 08:54:08.031290] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/message.aspx?&mailId=3919_16&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWoKwxQzZrjF1SqNIAAABH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 574 2427 14% 1162146 3226 157649 165 0 0 192.168.1.78 CH - [2015-05-02 08:54:08.024794] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/message.aspx?&mailId=3919_16&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWoKwxQzZrjF1R@akAAAA0 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 570 594 56% 1266328 2586 263003 156 0 0 192.168.1.78 CH - [2015-05-02 08:54:09.222353] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWoawxQzZrjF1SqNMAAABI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 206 -% 765360 3332 761077 240 0 0 192.168.1.78 CH - [2015-05-02 08:54:14.976153] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3919_16&folderId=2582_34&attachmentId=2&token=-30623308698464236E18 HTTP/1.1" 200 55613 "https://www.example.com/EMail/message.aspx?&mailId=3919_16&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcWpqwxQzZrjF1SqNUAAABJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1257 61211 -% 1382156 8982 351070 221 0 0 192.168.1.78 CH - [2015-05-02 08:55:06.235003] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3919_16&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcW2qwxQzZrjF1SqOAAAABZ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1383 4382 -% 1141424 6935 133272 291 0 0 192.168.1.78 CH - [2015-05-02 08:55:07.391634] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7290 "https://www.example.com/EMail/message.aspx?&mailId=3919_16&folderId=2582_34&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcW26wxQzZrjF1SqOEAAABd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 551 7712 -% 1010348 3084 3933 2791 0 0 192.168.1.78 CH - [2015-05-02 08:55:08.489773] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcW3KwxQzZrjF1SqOIAAABe TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 553 2427 14% 757018 2325 753179 241 0 0 192.168.1.78 CH - [2015-05-02 08:55:08.533257] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcW3KwxQzZrjF1SqOMAAABa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1198 5902 22% 970968 6114 963448 156 0 0 192.168.1.78 CH - [2015-05-02 08:55:08.537215] "GET /EMail/images/Highost.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcW3KwxQzZrjF1R@a0AAAA8 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1241 4231 -% 1024118 2447 20919 152 0 0 192.168.1.78 CH - [2015-05-02 08:55:08.538528] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcW3KwxQzZrjF1SqOQAAABQ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1197 4620 56% 1191475 1960 188685 151 0 0 192.168.1.78 CH - [2015-05-02 08:55:08.539179] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcW3KwxQzZrjF1SqOUAAABf TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1229 12018 22% 1226075 1899 219747 181 0 0 192.168.1.78 CH - [2015-05-02 08:55:09.864481] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "f67d838e.5238a0e9d226d" VjcW3awxQzZrjF1SqOYAAABh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 206 -% 1010744 2497 7452 255 0 0 192.168.108.242 CH - [2015-05-02 09:06:11.109311] "GET /EMail/MailHandler?service=createCRL HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "55e02bf9.5238a4014adbf" VjcZc6wxQzZrjF1SqUcAAABD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 560 8359 -% 1364793 1209 362382 201 0 0 192.168.206.215 CH - [2015-05-02 09:06:13.238465] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd (unknown version) CFNetwork/520.5.1 Darwin/11.4.2 (x86_64) (iMac11%2C1)" www.example.com 192.168.34.16 443 proxy-server - - "603b0bfe.5238a40352ac1" VjcZdawxQzZrjF1SqUgAAABE TLSv1 ECDHE-RSA-AES256-SHA 507 8347 -% 989015 1339 986459 206 0 0 192.168.183.52 CH - [2015-05-02 09:07:53.246802] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "fba94823.5238a462b2c52" VjcZ2awxQzZrjF1SqVkAAABP TLSv1.2 ECDHE-RSA-AES256-SHA384 659 8674 -% 822088 1347 819647 195 0 0 192.168.161.182 CH - [2015-05-02 09:09:22.013707] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "e5b32176.5238a4b75a60b" VjcaMqwxQzZrjF1SqWYAAABV TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 572 8359 -% 927879 2311 924632 165 0 0 192.168.146.78 CH - [2015-05-02 09:21:36.452974] "GET /EMail/main.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a5048a48.5238a64e91555" VjcdEKwxQzZrjF1SqdoAAABY TLSv1.2 ECDHE-RSA-AES128-SHA256 703 11795 -% 899328 1347 893476 3647 0 0 192.168.146.78 CH - [2015-05-02 09:21:58.570598] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a5048a48.5238a64e91555" VjcdJqwxQzZrjF1R@gcAAAAd TLSv1.2 ECDHE-RSA-AES128-SHA256 916 630 -% 1119134 3533 114874 170 0 0 192.168.146.78 CH - [2015-05-02 09:21:59.733646] "GET /EMail/main.aspx HTTP/1.1" 200 3402 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a5048a48.5238a64e91555" VjcdJ6wxQzZrjF1R@ggAAAAb TLSv1.2 ECDHE-RSA-AES128-SHA256 486 3882 -% 761309 2423 757113 1194 0 0 192.168.146.78 CH - [2015-05-02 09:22:00.662947] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a5048a48.5238a64e91555" VjcdKKwxQzZrjF1R@gkAAAAe TLSv1.2 ECDHE-RSA-AES128-SHA256 470 4202 -% 776570 2248 766467 7216 0 0 192.168.146.78 CH - [2015-05-02 09:22:00.765249] "GET /EMail/overview.aspx HTTP/1.1" 200 5300 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a5048a48.5238a64e91555" VjcdKKwxQzZrjF1R@goAAAAc TLSv1.2 ECDHE-RSA-AES128-SHA256 756 5963 -% 1518799 2601 513790 1816 0 0 192.168.146.78 CH - [2015-05-02 09:22:00.768978] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a5048a48.5238a64e91555" VjcdKKwxQzZrjF1SqdwAAABd TLSv1.2 ECDHE-RSA-AES128-SHA256 788 9683 -% 1811511 2233 801872 2897 0 0 192.168.146.78 CH - [2015-05-02 09:22:05.384820] "GET /EMail/inbox.aspx HTTP/1.1" 200 18368 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a5048a48.5238a64e91555" VjcdLawxQzZrjF1Sqd8AAABQ TLSv1.2 ECDHE-RSA-AES128-SHA256 470 19049 -% 1417144 2511 389880 7830 0 0 192.168.146.78 CH - [2015-05-02 09:22:13.998937] "GET /EMail/message.aspx?&mailId=3894_5&folderId=3465_69&mailPos=0 HTTP/1.1" 200 25552 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a5048a48.5238a64e91555" VjcdNawxQzZrjF1SqeEAAABh TLSv1.2 ECDHE-RSA-AES128-SHA256 804 26532 -% 1282784 3118 204814 69968 0 0 192.168.146.78 CH - [2015-05-02 09:23:02.158245] "GET /EMail/inbox.aspx HTTP/1.1" 200 18368 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a5048a48.5238a64e91555" VjcdZqwxQzZrjF1SqeoAAABn TLSv1.2 ECDHE-RSA-AES128-SHA256 756 19279 -% 1398001 2341 364718 7473 0 0 192.168.223.134 CH - [2015-05-02 09:24:02.126245] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7383 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" VjcdoqwxQzZrjF1R@hEAAAAl TLSv1.2 ECDHE-RSA-AES256-SHA384 781 11955 -% 1012042 2434 6454 2274 0 0 192.168.223.134 CH - [2015-05-02 09:24:03.428493] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" Vjcdo6wxQzZrjF1R@hIAAAAm TLSv1.2 ECDHE-RSA-AES256-SHA384 534 2575 14% 1212930 3207 208274 158 0 0 192.168.223.134 CH - [2015-05-02 09:24:03.718216] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" Vjcdo6wxQzZrjF1R@hMAAAAn TLSv1.2 ECDHE-RSA-AES256-SHA384 850 928 56% 938557 2786 934651 113 0 0 192.168.223.134 CH - [2015-05-02 09:24:03.777501] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" Vjcdo6wxQzZrjF1R@hQAAAAq TLSv1.2 ECDHE-RSA-AES256-SHA384 882 4788 23% 882549 2292 877923 97 0 0 192.168.223.134 CH - [2015-05-02 09:24:03.778566] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" Vjcdo6wxQzZrjF1SqfQAAABu TLSv1.2 ECDHE-RSA-AES256-SHA384 882 8781 22% 1075993 1814 69957 216 0 0 192.168.223.134 CH - [2015-05-02 09:24:03.846933] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" Vjcdo6wxQzZrjF1R@hUAAAAo TLSv1.2 ECDHE-RSA-AES256-SHA384 850 2208 22% 1230080 2889 225875 153 0 0 192.168.223.134 CH - [2015-05-02 09:24:03.777458] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" Vjcdo6wxQzZrjF1SqfMAAABx TLSv1.2 ECDHE-RSA-AES256-SHA384 898 1979 -% 1300077 2833 296469 129 0 0 192.168.223.134 CH - [2015-05-02 09:24:05.271859] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" VjcdpawxQzZrjF1R@hYAAAAr TLSv1.2 ECDHE-RSA-AES256-SHA384 582 1898 -% 845901 2163 842965 206 0 0 192.168.223.134 CH - [2015-05-02 09:24:18.017098] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" VjcdsqwxQzZrjF1SqfgAAAB1 TLSv1.2 ECDHE-RSA-AES256-SHA384 1042 710 -% 958114 4663 952754 174 0 0 192.168.223.134 CH - [2015-05-02 09:24:19.011253] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7556 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" Vjcds6wxQzZrjF1SqfkAAAB2 TLSv1.2 ECDHE-RSA-AES256-SHA384 630 8074 -% 995453 4778 969620 20373 0 0 192.168.223.134 CH - [2015-05-02 09:24:36.284528] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" VjcdxKwxQzZrjF1SqfwAAAB5 TLSv1.2 ECDHE-RSA-AES256-SHA384 1042 662 -% 882863 3984 878078 189 0 0 192.168.223.134 CH - [2015-05-02 09:24:37.226035] "GET /EMail/main.aspx HTTP/1.1" 200 3415 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" VjcdxawxQzZrjF1Sqf0AAAB6 TLSv1.2 ECDHE-RSA-AES256-SHA384 582 3930 -% 701867 2490 696772 1607 0 0 192.168.223.134 CH - [2015-05-02 09:24:37.979416] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" VjcdxawxQzZrjF1Sqf4AAAB@ TLSv1.2 ECDHE-RSA-AES256-SHA384 518 4234 -% 953778 2991 938467 11613 0 0 192.168.223.134 CH - [2015-05-02 09:24:38.094894] "GET /EMail/overview.aspx HTTP/1.1" 200 5302 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" VjcdxqwxQzZrjF1SqgAAAAB9 TLSv1.2 ECDHE-RSA-AES256-SHA384 834 6011 -% 1493020 1862 488416 2230 0 0 192.168.223.134 CH - [2015-05-02 09:24:38.091426] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" VjcdxqwxQzZrjF1Sqf8AAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 850 9859 -% 1890042 2421 879747 3033 0 0 192.168.223.134 CH - [2015-05-02 09:24:39.659187] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" Vjcdx6wxQzZrjF1SqgEAAABA TLSv1.2 ECDHE-RSA-AES256-SHA384 534 1354 -% 1007528 2094 4565 205 0 0 192.168.223.134 CH - [2015-05-02 09:24:40.070200] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" VjcdyKwxQzZrjF1SqgIAAAB- TLSv1.2 ECDHE-RSA-AES256-SHA384 582 1370 -% 992429 2943 988597 206 0 0 192.168.223.134 CH - [2015-05-02 09:24:46.201169] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9876 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" VjcdzqwxQzZrjF1SqgUAAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 834 10672 -% 1198804 3030 191451 3325 0 0 192.168.223.134 CH - [2015-05-02 09:24:46.236899] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" VjcdzqwxQzZrjF1SqgYAAABG TLSv1.2 ECDHE-RSA-AES256-SHA384 850 9859 -% 1576530 4108 564476 2861 0 0 192.168.223.134 CH - [2015-05-02 09:24:47.580352] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" Vjcdz6wxQzZrjF1SqgoAAABB TLSv1.2 ECDHE-RSA-AES256-SHA384 866 2107 -% 871257 1771 868674 217 0 0 192.168.223.134 CH - [2015-05-02 09:24:47.481704] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" Vjcdz6wxQzZrjF1SqgcAAABC TLSv1.2 ECDHE-RSA-AES256-SHA384 534 634 -% 1077843 2151 74898 212 0 0 192.168.223.134 CH - [2015-05-02 09:24:47.572286] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" Vjcdz6wxQzZrjF1SqggAAABF TLSv1.2 ECDHE-RSA-AES256-SHA384 866 827 -% 1020559 2121 17398 238 0 0 192.168.223.134 CH - [2015-05-02 09:24:47.577574] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" Vjcdz6wxQzZrjF1SqgkAAAB3 TLSv1.2 ECDHE-RSA-AES256-SHA384 866 2171 -% 1073135 1840 70313 276 0 0 192.168.211.14 CH - [2015-05-02 09:24:51.841051] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7368 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "67b609eb.5238a82e1b01b" Vjcd06wxQzZrjF1SqgsAAABH TLSv1.1 ECDHE-RSA-AES256-SHA 633 11841 -% 1013438 1608 8650 2514 0 0 192.168.211.14 CH - [2015-05-02 09:24:52.964655] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "67b609eb.5238a82e1b01b" Vjcd1KwxQzZrjF1Sqg0AAABM TLSv1.1 ECDHE-RSA-AES256-SHA 734 4325 23% 656798 1854 653436 167 0 0 192.168.211.14 CH - [2015-05-02 09:24:52.924284] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "67b609eb.5238a82e1b01b" Vjcd1KwxQzZrjF1SqgwAAABK TLSv1.1 ECDHE-RSA-AES256-SHA 470 2649 14% 810446 3082 805855 165 0 0 192.168.211.14 CH - [2015-05-02 09:24:52.966747] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "67b609eb.5238a82e1b01b" Vjcd1KwxQzZrjF1Sqg4AAABI TLSv1.1 ECDHE-RSA-AES256-SHA 734 7893 22% 917459 2845 911931 172 0 0 192.168.211.14 CH - [2015-05-02 09:24:52.969578] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "67b609eb.5238a82e1b01b" Vjcd1KwxQzZrjF1SqhAAAABL TLSv1.1 ECDHE-RSA-AES256-SHA 702 2096 22% 938725 2244 934867 227 0 0 192.168.211.14 CH - [2015-05-02 09:24:52.964121] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "67b609eb.5238a82e1b01b" Vjcd1KwxQzZrjF1R@hkAAAAu TLSv1.1 ECDHE-RSA-AES256-SHA 750 1883 -% 1019787 1808 17042 183 0 0 192.168.211.14 CH - [2015-05-02 09:24:52.968118] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "67b609eb.5238a82e1b01b" Vjcd1KwxQzZrjF1Sqg8AAABJ TLSv1.1 ECDHE-RSA-AES256-SHA 702 816 56% 1201861 2702 198079 204 0 0 192.168.211.14 CH - [2015-05-02 09:24:54.216744] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "67b609eb.5238a82e1b01b" Vjcd1qwxQzZrjF1SqhMAAABO TLSv1.1 ECDHE-RSA-AES256-SHA 518 1834 -% 905041 1981 902369 180 0 0 192.168.211.14 CH - [2015-05-02 09:24:54.205047] "GET /EMail/scripts/csshover.htc HTTP/1.1" 200 4255 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "67b609eb.5238a82e1b01b" Vjcd1qwxQzZrjF1SqhIAAABS TLSv1.1 ECDHE-RSA-AES256-SHA 358 4714 -% 967767 4208 962387 155 0 0 192.168.223.134 CH - [2015-05-02 09:24:57.573341] "GET /EMail/message.aspx?&mailId=3928_54&folderId=1769_32&mailPos=0 HTTP/1.1" 200 11333 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" Vjcd2awxQzZrjF1SqhUAAABU TLSv1.2 ECDHE-RSA-AES256-SHA384 882 12197 -% 1216402 6179 187775 20801 0 0 192.168.223.134 CH - [2015-05-02 09:25:02.024009] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3928_54&folderId=1769_32&attachmentId=2&token=-52594350837172562E18 HTTP/1.1" 200 48210 "https://www.example.com/EMail/message.aspx?&mailId=3928_54&folderId=1769_32&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" Vjcd3qwxQzZrjF1SqhYAAABP TLSv1.2 ECDHE-RSA-AES256-SHA384 662 51317 -% 1055463 4418 32256 388 0 0 192.168.223.134 CH - [2015-05-02 09:25:14.615966] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/message.aspx?&mailId=3928_54&folderId=1769_32&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" Vjcd6qwxQzZrjF1SqhsAAABa TLSv1.2 ECDHE-RSA-AES256-SHA384 898 2379 -% 936415 1981 933589 197 0 0 192.168.223.134 CH - [2015-05-02 09:25:18.603813] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9867 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" Vjcd7qwxQzZrjF1Sqh0AAABf TLSv1.2 ECDHE-RSA-AES256-SHA384 518 10463 -% 1144410 3439 136578 3336 0 0 192.168.223.134 CH - [2015-05-02 09:25:18.709223] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" Vjcd7qwxQzZrjF1Sqh4AAABh TLSv1.2 ECDHE-RSA-AES256-SHA384 850 9859 -% 1428901 3872 416038 4513 0 0 192.168.211.14 CH - [2015-05-02 09:25:23.421340] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "67b609eb.5238a82e1b01b" Vjcd86wxQzZrjF1SqiAAAABg TLSv1.1 ECDHE-RSA-AES256-SHA 750 2283 -% 821739 4886 815703 225 0 0 192.168.223.134 CH - [2015-05-02 09:25:23.100646] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" Vjcd86wxQzZrjF1Sqh8AAABj TLSv1.2 ECDHE-RSA-AES256-SHA384 838 405 -% 1491177 10767 479390 252 0 0 192.168.211.14 CH - [2015-05-02 09:25:23.764630] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "67b609eb.5238a82e1b01b" Vjcd86wxQzZrjF1R@hsAAAAw TLSv1.1 ECDHE-RSA-AES256-SHA 894 598 -% 1086775 5318 80306 222 0 0 192.168.223.134 CH - [2015-05-02 09:25:24.621187] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7291 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" Vjcd9KwxQzZrjF1SqiIAAABX TLSv1.2 ECDHE-RSA-AES256-SHA384 566 7802 -% 1149562 3346 141610 3785 0 0 192.168.211.14 CH - [2015-05-02 09:25:24.861446] "GET /EMail/main.aspx HTTP/1.1" 200 3400 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "67b609eb.5238a82e1b01b" Vjcd9KwxQzZrjF1R@hwAAAAy TLSv1.1 ECDHE-RSA-AES256-SHA 518 3850 -% 952357 2651 947266 1780 0 0 192.168.211.14 CH - [2015-05-02 09:25:25.878993] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "67b609eb.5238a82e1b01b" Vjcd9awxQzZrjF1R@h0AAAAz TLSv1.1 ECDHE-RSA-AES256-SHA 470 4186 -% 996590 3105 980906 11817 0 0 192.168.211.14 CH - [2015-05-02 09:25:25.900874] "GET /EMail/overview.aspx HTTP/1.1" 200 5303 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "67b609eb.5238a82e1b01b" Vjcd9awxQzZrjF1SqiMAAABb TLSv1.1 ECDHE-RSA-AES256-SHA 702 5931 -% 1472448 2996 466915 1832 0 0 192.168.211.14 CH - [2015-05-02 09:25:25.905892] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "67b609eb.5238a82e1b01b" Vjcd9awxQzZrjF1SqiQAAABi TLSv1.1 ECDHE-RSA-AES256-SHA 734 9555 -% 1538561 3581 527886 2733 0 0 192.168.211.14 CH - [2015-05-02 09:25:27.398538] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "67b609eb.5238a82e1b01b" Vjcd96wxQzZrjF1R@h4AAAAx TLSv1.1 ECDHE-RSA-AES256-SHA 502 1290 -% 918656 2976 915010 159 0 0 192.168.211.14 CH - [2015-05-02 09:25:27.488756] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "67b609eb.5238a82e1b01b" Vjcd96wxQzZrjF1SqiYAAABl TLSv1.1 ECDHE-RSA-AES256-SHA 534 1306 -% 864661 3052 860696 165 0 0 192.168.211.14 CH - [2015-05-02 09:25:33.981015] "GET /EMail/inbox.aspx HTTP/1.1" 200 18632 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "67b609eb.5238a82e1b01b" Vjcd-awxQzZrjF1SqicAAABn TLSv1.1 ECDHE-RSA-AES256-SHA 702 19402 -% 1229480 2791 193170 10105 0 0 192.168.211.14 CH - [2015-05-02 09:25:35.398500] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "67b609eb.5238a82e1b01b" Vjcd-6wxQzZrjF1R@iAAAAA1 TLSv1.1 ECDHE-RSA-AES256-SHA 718 2075 -% 697470 1782 694882 233 0 0 192.168.211.14 CH - [2015-05-02 09:25:35.259252] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "67b609eb.5238a82e1b01b" Vjcd-6wxQzZrjF1SqikAAABo TLSv1.1 ECDHE-RSA-AES256-SHA 486 570 -% 913354 2039 910492 237 0 0 192.168.211.14 CH - [2015-05-02 09:25:35.393508] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "67b609eb.5238a82e1b01b" Vjcd-6wxQzZrjF1SqioAAABp TLSv1.1 ECDHE-RSA-AES256-SHA 718 2011 -% 943452 2344 940417 154 0 0 192.168.211.14 CH - [2015-05-02 09:25:35.396117] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "67b609eb.5238a82e1b01b" Vjcd-6wxQzZrjF1R@h8AAAA2 TLSv1.1 ECDHE-RSA-AES256-SHA 718 747 -% 965829 2960 962041 159 0 0 192.168.211.14 CH - [2015-05-02 09:25:39.147103] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "67b609eb.5238a82e1b01b" VjceA6wxQzZrjF1R@iEAAAA4 TLSv1.1 ECDHE-RSA-AES256-SHA 486 2122 -% 922167 3005 918199 285 0 0 192.168.211.14 CH - [2015-05-02 09:25:52.802077] "GET /EMail/message.aspx?&mailId=3927_38&folderId=2022_66&mailPos=0 HTTP/1.1" 200 11361 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "67b609eb.5238a82e1b01b" VjceEKwxQzZrjF1Sqi4AAABt TLSv1.1 ECDHE-RSA-AES256-SHA 750 12085 -% 1220794 3116 198271 18589 0 0 192.168.223.134 CH - [2015-05-02 09:25:54.023099] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" VjceEqwxQzZrjF1R@iIAAAA0 TLSv1.2 ECDHE-RSA-AES256-SHA384 850 646 -% 1013993 3647 9428 215 0 0 192.168.223.134 CH - [2015-05-02 09:25:55.068850] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" VjceE6wxQzZrjF1R@iMAAAA5 TLSv1.2 ECDHE-RSA-AES256-SHA384 518 815 75% 986029 3033 982008 230 0 0 192.168.223.134 CH - [2015-05-02 09:25:56.137077] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" VjceFKwxQzZrjF1R@iQAAAA3 TLSv1.2 ECDHE-RSA-AES256-SHA384 486 373 -% 930927 2404 927809 197 0 0 192.168.223.134 CH - [2015-05-02 09:25:57.096390] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" VjceFawxQzZrjF1R@iUAAAA6 TLSv1.2 ECDHE-RSA-AES256-SHA384 454 7866 -% 852866 1952 847624 2727 0 0 192.168.223.134 CH - [2015-05-02 09:25:58.019815] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" VjceFqwxQzZrjF1R@iYAAAA7 TLSv1.2 ECDHE-RSA-AES256-SHA384 582 2575 14% 857148 1973 853612 220 0 0 192.168.223.134 CH - [2015-05-02 09:25:58.112455] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" VjceFqwxQzZrjF1SqjEAAABx TLSv1.2 ECDHE-RSA-AES256-SHA384 930 4485 23% 982518 1829 978940 208 0 0 192.168.223.134 CH - [2015-05-02 09:25:58.112874] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" VjceFqwxQzZrjF1R@igAAAA8 TLSv1.2 ECDHE-RSA-AES256-SHA384 930 454 -% 1015841 2796 12308 130 0 0 192.168.223.134 CH - [2015-05-02 09:25:58.107789] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" VjceFqwxQzZrjF1R@icAAAA@ TLSv1.2 ECDHE-RSA-AES256-SHA384 898 2208 22% 1059519 2003 56600 135 0 0 192.168.223.134 CH - [2015-05-02 09:25:58.113134] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" VjceFqwxQzZrjF1SqjIAAABw TLSv1.2 ECDHE-RSA-AES256-SHA384 930 8053 22% 1304255 2736 297138 313 0 0 192.168.223.134 CH - [2015-05-02 09:25:58.114379] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" VjceFqwxQzZrjF1R@ikAAAA9 TLSv1.2 ECDHE-RSA-AES256-SHA384 898 928 56% 1310957 2508 307496 151 0 0 192.168.211.14 CH - [2015-05-02 09:25:58.881709] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3927_38&folderId=2022_66&attachmentId=2&token=-62357768704206221E17 HTTP/1.1" 200 47816 "https://www.example.com/EMail/message.aspx?&mailId=3927_38&folderId=2022_66&mailPos=0" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "67b609eb.5238a82e1b01b" VjceFqwxQzZrjF1SqjMAAABy TLSv1.1 ECDHE-RSA-AES256-SHA 614 49893 -% 894447 6797 869295 229 0 0 192.168.223.134 CH - [2015-05-02 09:25:59.524393] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "65564632.5238a7feb19a5" VjceF6wxQzZrjF1SqjQAAABz TLSv1.2 ECDHE-RSA-AES256-SHA384 630 261 -% 787056 3387 782512 471 0 0 192.168.192.35 CH - [2015-05-02 09:34:16.370985] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcgCKwxQzZrjF1SqnkAAAB7 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1338 4447 -% 1102949 3284 98826 214 0 0 192.168.192.35 CH - [2015-05-02 09:34:17.497974] "GET /EMail/main.aspx HTTP/1.1" 200 3383 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcgCawxQzZrjF1SqnoAAABA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 3799 -% 924898 2973 919340 1846 0 0 192.168.192.35 CH - [2015-05-02 09:34:18.483058] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcgCqwxQzZrjF1SqnsAAAB- TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 4128 -% 854499 2946 844556 6339 0 0 192.168.192.35 CH - [2015-05-02 09:34:18.526475] "GET /EMail/overview.aspx HTTP/1.1" 200 5290 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcgCqwxQzZrjF1SqnwAAABD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1134 9738 -% 1287445 2797 281222 2703 0 0 192.168.192.35 CH - [2015-05-02 09:34:18.528085] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcgCqwxQzZrjF1Sqn0AAAB8 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1160 13205 -% 2107890 3563 95606 4574 0 0 192.168.192.35 CH - [2015-05-02 09:34:22.057035] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcgDqwxQzZrjF1Sqn8AAABG TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 511 409 -% 581704 3534 577379 178 0 0 192.168.192.35 CH - [2015-05-02 09:34:22.693323] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcgDqwxQzZrjF1SqoAAAABB TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 458 318 -% 917591 2300 914671 145 0 0 192.168.192.35 CH - [2015-05-02 09:34:23.622500] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcgD6wxQzZrjF1SqoEAAABC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 440 7758 -% 845677 2927 836853 5004 0 0 192.168.132.2 CH - [2015-05-02 09:39:13.458580] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "Microsoft-CryptoAPI/6.1" www.example.com 192.168.34.16 443 proxy-server - + "2b9ce4c9.5238ab63ced94" VjchMawxQzZrjF1SqrAAAAB0 TLSv1 ECDHE-RSA-AES256-SHA 528 8384 -% 912330 1383 909884 251 0 0 192.168.186.76 CH - [2015-05-02 09:42:16.983516] "GET /EMail/overview.aspx HTTP/1.1" 200 5537 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjch6KwxQzZrjF1SqswAAABY TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 10134 -% 1197548 10567 181699 3250 3 0 192.168.186.76 CH - [2015-05-02 09:45:02.262558] "GET /EMail/inbox.aspx HTTP/1.1" 200 10685 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcijqwxQzZrjF1SquQAAABt TLSv1.2 ECDHE-RSA-AES256-SHA384 1180 11525 -% 1112964 4821 101835 3707 3 0 192.168.186.76 CH - [2015-05-02 09:45:05.345358] "GET /EMail/message.aspx?&mailId=3928_67&folderId=947_65&mailPos=0 HTTP/1.1" 200 16557 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcikawxQzZrjF1SqugAAABz TLSv1.2 ECDHE-RSA-AES256-SHA384 710 17305 -% 1422601 9335 361927 47500 3 0 192.168.186.76 CH - [2015-05-02 09:45:08.202400] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3928_67&folderId=947_65&attachmentId=3&token=-82488030086680576E18 HTTP/1.1" 200 1955549 "https://www.example.com/EMail/message.aspx?&mailId=3928_67&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcilKwxQzZrjF1SqukAAAB1 TLSv1.2 ECDHE-RSA-AES256-SHA384 806 2060267 -% 1805486 6468 112517 202 3 0 192.168.186.76 CH - [2015-05-02 09:45:20.223266] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5879 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3928_67&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcioKwxQzZrjF1SquwAAAB4 TLSv1.2 ECDHE-RSA-AES256-SHA384 1303 13742 -% 936002 4880 0 0 3 0 192.168.186.76 CH - [2015-05-02 09:45:53.784628] "GET /EMail/newMessage.aspx?action=reply&mailId=3927_70&folderId=947_65&showPics=false HTTP/1.1" 200 23613 "https://www.example.com/EMail/message.aspx?&mailId=3927_70&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjciwawxQzZrjF1SqvIAAABD TLSv1.2 ECDHE-RSA-AES256-SHA384 1367 28522 -% 1210163 9445 154660 42104 6 3 192.168.186.76 CH - [2015-05-02 09:45:55.178923] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5879 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3927_70&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjciw6wxQzZrjF1SqvUAAAB- TLSv1.2 ECDHE-RSA-AES256-SHA384 1303 13742 -% 527689 6498 0 0 3 0 192.168.186.76 CH - [2015-05-02 09:45:55.082785] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3927_70&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjciw6wxQzZrjF1SqvQAAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 980712 6498 963781 8262 3 0 192.168.186.76 CH - [2015-05-02 09:46:53.782973] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3927_70&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjci-awxQzZrjF1Sqv8AAABL TLSv1.2 ECDHE-RSA-AES256-SHA384 7015 630 -% 1410743 279878 82098 272 86 0 192.168.186.76 CH - [2015-05-02 09:46:55.203352] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3927_70&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjci-6wxQzZrjF1SqwAAAABJ TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 959784 6064 934702 17533 3 0 192.168.186.76 CH - [2015-05-02 09:46:58.687193] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 10711 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcjAqwxQzZrjF1SqwEAAABO TLSv1.2 ECDHE-RSA-AES256-SHA384 662 11396 -% 923492 7006 910351 4123 3 0 192.168.146.78 CH - [2015-05-02 09:47:33.123227] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "241cc4a6.5238ad405349b" VjcjJawxQzZrjF1R@nQAAAAN TLSv1.2 ECDHE-RSA-AES128-SHA256 639 5651 -% 813039 706 811476 223 0 0 192.168.186.76 CH - [2015-05-02 09:47:37.488211] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcjKawxQzZrjF1SqwkAAABZ TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1441330 5791 428128 2829 3 0 192.168.186.76 CH - [2015-05-02 09:47:54.608512] "GET /EMail/newMessage.aspx?action=reply&mailId=3927_69&folderId=947_65&showPics=false HTTP/1.1" 200 26213 "https://www.example.com/EMail/message.aspx?&mailId=3927_69&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcjOqwxQzZrjF1SqwwAAABa TLSv1.2 ECDHE-RSA-AES256-SHA384 1292 27284 -% 1259871 10679 162065 55296 6 3 192.168.186.76 CH - [2015-05-02 09:47:56.053838] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5879 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3927_69&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcjPKwxQzZrjF1Sqw4AAABf TLSv1.2 ECDHE-RSA-AES256-SHA384 710 9666 -% 787694 4208 0 0 3 0 192.168.186.76 CH - [2015-05-02 09:47:55.952119] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3927_69&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjcjO6wxQzZrjF1Sqw0AAABQ TLSv1.2 ECDHE-RSA-AES256-SHA384 1244 3611 -% 989424 6533 973655 7464 3 0 192.168.146.78 CH - [2015-05-02 09:48:22.700389] "GET /EMail HTTP/1.1" 302 223 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "-" VjcjVqwxQzZrjF1SqxIAAABj TLSv1.2 ECDHE-RSA-AES128-SHA256 767 4531 -% 1736 452 858 455 0 0 192.168.146.78 CH - [2015-05-02 09:48:22.711948] "GET /EMail/login.aspx HTTP/1.1" 200 7335 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3a8be9a2.5238ad3d27c5f" VjcjVqwxQzZrjF1SqxMAAABX TLSv1.2 ECDHE-RSA-AES128-SHA256 454 7818 -% 945973 3174 939725 2301 0 0 192.168.184.223 CH - [2015-05-02 09:50:57.865656] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7909 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "73f8184b.5238ae03953b8" Vjcj8awxQzZrjF1SqyoAAAB4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1020 12314 -% 1042873 4633 32153 4161 6 0 192.168.184.223 CH - [2015-05-02 09:50:59.125933] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "73f8184b.5238ae03953b8" Vjcj86wxQzZrjF1SqysAAAB6 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 758 2421 13% 850734 5100 842554 183 6 0 192.168.184.223 CH - [2015-05-02 09:50:59.225488] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "73f8184b.5238ae03953b8" Vjcj86wxQzZrjF1R@oQAAAAf TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1011 2014 22% 862689 8728 851667 169 6 0 192.168.184.223 CH - [2015-05-02 09:50:59.240844] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "73f8184b.5238ae03953b8" Vjcj86wxQzZrjF1R@oYAAAAh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 998 1823 -% 909189 8306 898993 122 6 0 192.168.184.223 CH - [2015-05-02 09:50:59.240781] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7160 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "73f8184b.5238ae03953b8" Vjcj86wxQzZrjF1R@oUAAAAj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1001 8028 22% 1008221 8397 0 170 6 0 192.168.184.223 CH - [2015-05-02 09:50:59.241065] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "73f8184b.5238ae03953b8" Vjcj86wxQzZrjF1R@ocAAAAg TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1011 732 56% 1175465 9291 164695 130 6 0 192.168.184.223 CH - [2015-05-02 09:51:00.585735] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "73f8184b.5238ae03953b8" Vjcj9KwxQzZrjF1SqywAAAB@ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 747 1792 -% 1048420 7871 39163 124 6 0 192.168.184.223 CH - [2015-05-02 09:51:55.028342] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "73f8184b.5238ae03953b8" VjckK6wxQzZrjF1SqzUAAABC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1662 470 -% 933506 8606 922558 196 6 0 192.168.184.223 CH - [2015-05-02 09:51:56.048534] "GET /EMail/error.aspx HTTP/1.1" 200 3744 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "73f8184b.5238ae03953b8" VjckLKwxQzZrjF1SqzYAAABF TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 828 4166 -% 898093 5323 877244 13789 6 0 192.168.184.223 CH - [2015-05-02 09:52:56.504932] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "73f8184b.5238ae03953b8" VjckaKwxQzZrjF1Sq0AAAABN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1678 470 -% 1044113 10672 30743 174 6 0 192.168.184.223 CH - [2015-05-02 09:52:57.665528] "GET /EMail/error.aspx HTTP/1.1" 200 3744 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_0_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13A452 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "73f8184b.5238ae03953b8" VjckaawxQzZrjF1Sq0EAAABU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 828 4166 -% 977429 6394 958838 10723 6 0 192.168.186.76 CH - [2015-05-02 09:59:01.454117] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjcl1awxQzZrjF1Sq3gAAABI TLSv1.2 ECDHE-RSA-AES256-SHA384 1261 13742 -% 1542904 5024 530038 2821 3 0 192.168.186.76 CH - [2015-05-02 09:59:05.007392] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjcl2awxQzZrjF1Sq3oAAABO TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1168391 13080 153223 229 3 0 192.168.186.76 CH - [2015-05-02 09:59:06.190358] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8465 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjcl2qwxQzZrjF1Sq3sAAABS TLSv1.2 ECDHE-RSA-AES256-SHA384 726 9071 -% 831857 5462 822043 2768 3 0 192.168.90.199 CH - [2015-05-02 10:01:23.290190] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7371 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" VjcmY6wxQzZrjF1Sq5EAAABo TLSv1 ECDHE-RSA-AES256-SHA 622 11793 -% 927140 1960 921680 2837 0 0 192.168.90.199 CH - [2015-05-02 10:01:24.279328] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" VjcmZKwxQzZrjF1Sq5MAAABr TLSv1 ECDHE-RSA-AES256-SHA 707 2032 22% 943698 2586 939935 134 0 0 192.168.90.199 CH - [2015-05-02 10:01:24.247889] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" VjcmZKwxQzZrjF1Sq5IAAABp TLSv1 ECDHE-RSA-AES256-SHA 491 2431 14% 975180 3217 970588 181 0 0 192.168.90.199 CH - [2015-05-02 10:01:24.284281] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" VjcmZKwxQzZrjF1Sq5QAAABq TLSv1 ECDHE-RSA-AES256-SHA 707 752 56% 1111607 2679 108116 162 0 0 192.168.90.199 CH - [2015-05-02 10:01:24.288635] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" VjcmZKwxQzZrjF1R@qoAAAAL TLSv1 ECDHE-RSA-AES256-SHA 723 8173 22% 1350967 3398 343035 214 0 0 192.168.90.199 CH - [2015-05-02 10:01:24.292139] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" VjcmZKwxQzZrjF1R@qsAAAAK TLSv1 ECDHE-RSA-AES256-SHA 739 4245 23% 1535765 2535 531024 217 0 0 192.168.90.199 CH - [2015-05-02 10:01:24.422829] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" VjcmZKwxQzZrjF1Sq5UAAABs TLSv1 ECDHE-RSA-AES256-SHA 739 1835 -% 1635376 3095 631266 209 0 0 192.168.90.199 CH - [2015-05-02 10:01:25.857568] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" VjcmZawxQzZrjF1R@qwAAAAM TLSv1 ECDHE-RSA-AES256-SHA 523 1802 -% 904645 3039 900473 290 0 0 192.168.90.199 CH - [2015-05-02 10:01:26.780043] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" VjcmZqwxQzZrjF1R@q0AAAAN TLSv1 ECDHE-RSA-AES256-SHA 379 1578 -% 928796 1946 925974 170 0 0 192.168.90.199 CH - [2015-05-02 10:02:39.383558] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" Vjcmr6wxQzZrjF1Sq6QAAAB9 TLSv1 ECDHE-RSA-AES256-SHA 739 2235 -% 853098 2240 850047 205 0 0 192.168.90.199 CH - [2015-05-02 10:03:31.176949] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" Vjcm46wxQzZrjF1Sq64AAAB3 TLSv1 ECDHE-RSA-AES256-SHA 883 566 -% 944808 5699 938081 263 0 0 192.168.90.199 CH - [2015-05-02 10:03:32.131080] "GET /EMail/main.aspx HTTP/1.1" 200 3403 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" Vjcm5KwxQzZrjF1Sq68AAABH TLSv1 ECDHE-RSA-AES256-SHA 523 3818 -% 879182 3082 873209 2157 0 0 192.168.90.199 CH - [2015-05-02 10:03:33.050395] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" Vjcm5awxQzZrjF1Sq7AAAABM TLSv1 ECDHE-RSA-AES256-SHA 475 4154 -% 953503 2073 942721 8136 0 0 192.168.90.199 CH - [2015-05-02 10:03:33.085426] "GET /EMail/overview.aspx HTTP/1.1" 200 5302 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" Vjcm5awxQzZrjF1Sq7IAAABK TLSv1 ECDHE-RSA-AES256-SHA 691 5883 -% 1409802 2820 403281 2881 0 0 192.168.90.199 CH - [2015-05-02 10:03:33.085056] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" Vjcm5awxQzZrjF1Sq7EAAABT TLSv1 ECDHE-RSA-AES256-SHA 723 9379 -% 1934979 3776 922250 4933 0 0 192.168.90.199 CH - [2015-05-02 10:03:34.518447] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" Vjcm5qwxQzZrjF1Sq7MAAABL TLSv1 ECDHE-RSA-AES256-SHA 507 1258 -% 897323 3561 892583 284 0 0 192.168.90.199 CH - [2015-05-02 10:03:35.047297] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" Vjcm56wxQzZrjF1Sq7QAAABI TLSv1 ECDHE-RSA-AES256-SHA 539 1274 -% 934721 3297 930424 204 0 0 192.168.90.199 CH - [2015-05-02 10:03:37.997953] "GET /EMail/inbox.aspx HTTP/1.1" 200 8716 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" Vjcm6awxQzZrjF1Sq7gAAABN TLSv1 ECDHE-RSA-AES256-SHA 475 9199 -% 1059905 2592 51818 4513 0 0 192.168.90.199 CH - [2015-05-02 10:03:39.086549] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" Vjcm66wxQzZrjF1Sq7oAAABP TLSv1 ECDHE-RSA-AES256-SHA 491 554 -% 923302 1973 920560 202 0 0 192.168.90.199 CH - [2015-05-02 10:03:39.120531] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" Vjcm66wxQzZrjF1Sq7sAAABR TLSv1 ECDHE-RSA-AES256-SHA 707 1963 -% 1086805 1880 84184 242 0 0 192.168.90.199 CH - [2015-05-02 10:03:39.086477] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" Vjcm66wxQzZrjF1Sq7kAAABU TLSv1 ECDHE-RSA-AES256-SHA 491 538 -% 1124957 2008 122287 97 0 0 192.168.90.199 CH - [2015-05-02 10:03:47.068534] "GET /EMail/message.aspx?&mailId=3928_42&folderId=2737_23&mailPos=0 HTTP/1.1" 200 11214 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" Vjcm86wxQzZrjF1Sq74AAABZ TLSv1 ECDHE-RSA-AES256-SHA 739 11840 -% 1234667 3582 205560 24672 0 0 192.168.186.76 CH - [2015-05-02 10:03:51.872991] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5879 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3927_76&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjcm96wxQzZrjF1R@rEAAAAS TLSv1.2 ECDHE-RSA-AES256-SHA384 1277 13742 -% 950212 4572 0 0 3 0 192.168.90.199 CH - [2015-05-02 10:03:52.835371] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3928_42&folderId=2737_23&attachmentId=2&token=-44454441999880305E18 HTTP/1.1" 200 47229 "https://www.example.com/EMail/message.aspx?&mailId=3928_42&folderId=2737_23&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" Vjcm@KwxQzZrjF1Sq8AAAABd TLSv1 ECDHE-RSA-AES256-SHA 619 48678 -% 1095254 5743 79176 186 0 0 192.168.90.199 CH - [2015-05-02 10:06:08.777223] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8708 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" VjcngKwxQzZrjF1Sq9YAAABu TLSv1 ECDHE-RSA-AES256-SHA 691 9328 -% 1076268 3729 67014 4537 0 0 192.168.90.199 CH - [2015-05-02 10:06:08.814727] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" VjcngKwxQzZrjF1Sq9cAAABx TLSv1 ECDHE-RSA-AES256-SHA 723 9379 -% 1502624 2449 492626 3658 0 0 192.168.90.199 CH - [2015-05-02 10:06:09.899800] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" VjcngawxQzZrjF1Sq9kAAABy TLSv1 ECDHE-RSA-AES256-SHA 507 1882 -% 818947 1871 816342 197 0 0 192.168.90.199 CH - [2015-05-02 10:06:53.085556] "GET /EMail/message.aspx?&mailId=3928_42&folderId=2737_23&mailPos=0 HTTP/1.1" 200 11214 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" VjcnrawxQzZrjF1Sq@MAAAB7 TLSv1 ECDHE-RSA-AES256-SHA 814 15526 -% 1444208 3117 416106 24171 0 0 192.168.90.199 CH - [2015-05-02 10:06:57.490522] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3928_42&folderId=2737_23&attachmentId=2&token=-36777260619064842E18 HTTP/1.1" 200 47229 "https://www.example.com/EMail/message.aspx?&mailId=3928_42&folderId=2737_23&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" VjcnsawxQzZrjF1Sq@QAAABA TLSv1 ECDHE-RSA-AES256-SHA 619 48773 -% 2037734 3997 11838 250 0 0 192.168.90.199 CH - [2015-05-02 10:07:12.139763] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8709 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" VjcnwKwxQzZrjF1Sq@gAAABG TLSv1 ECDHE-RSA-AES256-SHA 691 9328 -% 1293543 2781 287281 2848 0 0 192.168.90.199 CH - [2015-05-02 10:07:12.141592] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" VjcnwKwxQzZrjF1Sq@kAAABE TLSv1 ECDHE-RSA-AES256-SHA 723 9379 -% 1683274 2612 673952 2729 0 0 192.168.90.199 CH - [2015-05-02 10:07:40.422588] "GET /EMail/message.aspx?&mailId=3928_42&folderId=2737_23&mailPos=0 HTTP/1.1" 200 11214 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" Vjcn3KwxQzZrjF1Sq@8AAABK TLSv1 ECDHE-RSA-AES256-SHA 739 11861 -% 1098067 3491 72039 21771 0 0 192.168.90.199 CH - [2015-05-02 10:07:43.281866] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3928_42&folderId=2737_23&attachmentId=2&token=-31175931310820243E17 HTTP/1.1" 200 47229 "https://www.example.com/EMail/message.aspx?&mailId=3928_42&folderId=2737_23&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" Vjcn36wxQzZrjF1Sq-EAAABL TLSv1 ECDHE-RSA-AES256-SHA 619 48773 -% 1128425 3872 106372 186 0 0 192.168.90.199 CH - [2015-05-02 10:08:34.655006] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8708 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" VjcoEqwxQzZrjF1Sq-kAAABR TLSv1 ECDHE-RSA-AES256-SHA 691 9328 -% 1388804 2319 382883 2785 0 0 192.168.90.199 CH - [2015-05-02 10:08:34.658516] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" VjcoEqwxQzZrjF1Sq-oAAABU TLSv1 ECDHE-RSA-AES256-SHA 723 9379 -% 1677734 2229 668941 2985 0 0 192.168.192.35 CH - [2015-05-02 10:08:55.063065] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcoJ6wxQzZrjF1Sq-4AAABC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 849 11889 -% 1042387 4084 33622 3755 0 0 192.168.192.35 CH - [2015-05-02 10:09:02.455217] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcoLqwxQzZrjF1SrAAAAABa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1263 564 -% 1049229 3523 44785 145 0 0 192.168.192.35 CH - [2015-05-02 10:09:03.520459] "GET /EMail/main.aspx HTTP/1.1" 200 3383 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcoL6wxQzZrjF1SrAIAAABf TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 3799 -% 913976 2947 908468 1809 0 0 192.168.192.35 CH - [2015-05-02 10:09:04.522624] "GET /EMail/overview.aspx HTTP/1.1" 200 5289 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcoMKwxQzZrjF1SrAQAAABQ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1059 5854 -% 864141 1898 858182 3136 0 0 192.168.192.35 CH - [2015-05-02 10:09:04.495828] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcoMKwxQzZrjF1SrAMAAABV TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 4128 -% 979389 3486 968961 6207 0 0 192.168.192.35 CH - [2015-05-02 10:09:04.527101] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcoMKwxQzZrjF1R@r8AAAAg TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1085 9322 -% 1837056 3860 826446 2845 0 0 192.168.192.35 CH - [2015-05-02 10:09:09.510091] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcoNawxQzZrjF1R@sAAAAAl TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 481 7773 -% 916179 3055 910077 2520 0 0 192.168.192.35 CH - [2015-05-02 10:09:19.479501] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcoP6wxQzZrjF1R@sIAAAAk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1263 564 -% 1038432 3399 34326 151 0 0 192.168.192.35 CH - [2015-05-02 10:09:20.540653] "GET /EMail/main.aspx HTTP/1.1" 200 3383 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcoQKwxQzZrjF1R@sMAAAAm TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 3799 -% 857593 3241 852513 1202 0 0 192.168.90.199 CH - [2015-05-02 10:09:20.932244] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" VjcoQKwxQzZrjF1SrAYAAABW TLSv1 ECDHE-RSA-AES256-SHA 995 502 -% 1249929 9703 239441 155 0 0 192.168.192.35 CH - [2015-05-02 10:09:21.457029] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcoQawxQzZrjF1R@sUAAAAq TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 4128 -% 977185 3409 962412 10625 0 0 192.168.192.35 CH - [2015-05-02 10:09:21.475081] "GET /EMail/overview.aspx HTTP/1.1" 200 5289 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcoQawxQzZrjF1SrAcAAABj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1059 5854 -% 1157576 3669 150373 2835 0 0 192.168.192.35 CH - [2015-05-02 10:09:21.483905] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcoQawxQzZrjF1R@sYAAAAo TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1085 9322 -% 1770560 2286 759667 4767 0 0 192.168.90.199 CH - [2015-05-02 10:09:22.192460] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7290 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" VjcoQqwxQzZrjF1SrAgAAABX TLSv1 ECDHE-RSA-AES256-SHA 539 7722 -% 1164068 3975 157072 2337 0 0 192.168.192.35 CH - [2015-05-02 10:09:24.189029] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcoRKwxQzZrjF1R@sgAAAAt TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 511 409 -% 977243 2640 973779 182 0 0 192.168.192.35 CH - [2015-05-02 10:09:25.232303] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcoRawxQzZrjF1R@skAAAAs TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 458 318 -% 973537 2236 970654 150 0 0 192.168.192.35 CH - [2015-05-02 10:09:26.221829] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcoRqwxQzZrjF1R@soAAAAp TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 440 7758 -% 985323 2750 978206 3778 0 0 192.168.90.199 CH - [2015-05-02 10:09:47.015371] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" VjcoW6wxQzZrjF1SrAoAAABb TLSv1 ECDHE-RSA-AES256-SHA 707 566 -% 943307 2332 940302 151 0 0 192.168.90.199 CH - [2015-05-02 10:09:47.966888] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" VjcoW6wxQzZrjF1SrAsAAABi TLSv1 ECDHE-RSA-AES256-SHA 475 687 75% 935252 3086 931008 299 0 0 192.168.90.199 CH - [2015-05-02 10:09:48.931278] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "f0f48e2b.5238b05808c4e" VjcoXKwxQzZrjF1SrAwAAABl TLSv1 ECDHE-RSA-AES256-SHA 315 1562 -% 2706 1947 51 129 0 0 192.168.90.199 CH - [2015-05-02 10:09:48.958779] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" VjcoXKwxQzZrjF1SrA0AAABm TLSv1 ECDHE-RSA-AES256-SHA 443 325 -% 708232 3153 704298 172 0 0 192.168.90.199 CH - [2015-05-02 10:09:49.675377] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" VjcoXawxQzZrjF1SrA4AAABo TLSv1 ECDHE-RSA-AES256-SHA 427 7786 -% 802616 3233 796495 2176 0 0 192.168.90.199 CH - [2015-05-02 10:09:50.495723] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" VjcoXqwxQzZrjF1SrA8AAABt TLSv1 ECDHE-RSA-AES256-SHA 555 2431 14% 737570 2112 734208 165 0 0 192.168.90.199 CH - [2015-05-02 10:09:50.537773] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" VjcoXqwxQzZrjF1R@s4AAAAy TLSv1 ECDHE-RSA-AES256-SHA 771 752 56% 868899 2350 865343 163 0 0 192.168.90.199 CH - [2015-05-02 10:09:50.540127] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" VjcoXqwxQzZrjF1R@s8AAAAz TLSv1 ECDHE-RSA-AES256-SHA 787 7813 22% 927906 1938 922605 258 0 0 192.168.90.199 CH - [2015-05-02 10:09:50.532918] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" VjcoXqwxQzZrjF1SrBAAAABr TLSv1 ECDHE-RSA-AES256-SHA 771 2032 22% 939218 2983 935098 132 0 0 192.168.90.199 CH - [2015-05-02 10:09:50.542369] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" VjcoXqwxQzZrjF1R@tAAAAAx TLSv1 ECDHE-RSA-AES256-SHA 803 4245 23% 1132343 1915 128493 200 0 0 192.168.90.199 CH - [2015-05-02 10:09:50.548480] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" VjcoXqwxQzZrjF1R@tEAAAA1 TLSv1 ECDHE-RSA-AES256-SHA 803 358 -% 1182013 1804 179353 215 0 0 192.168.90.199 CH - [2015-05-02 10:09:51.698167] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f0f48e2b.5238b05808c4e" VjcoX6wxQzZrjF1R@tMAAAA4 TLSv1 ECDHE-RSA-AES256-SHA 587 213 -% 795841 3007 792057 168 0 0 192.168.146.78 CH - [2015-05-02 10:10:19.099370] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7355 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d6fae0a.5238b257058ea" Vjcoe6wxQzZrjF1SrBYAAABx TLSv1.2 ECDHE-RSA-AES128-SHA256 703 11875 -% 873821 1511 868730 2906 0 0 192.168.146.78 CH - [2015-05-02 10:10:20.088262] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7160 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d6fae0a.5238b257058ea" VjcofKwxQzZrjF1R@tcAAAA3 TLSv1.2 ECDHE-RSA-AES128-SHA256 804 8403 22% 814753 2379 809932 176 0 0 192.168.146.78 CH - [2015-05-02 10:10:20.085118] "GET /EMail/scripts/variables_en.js HTTP/1.1" 200 2091 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d6fae0a.5238b257058ea" VjcofKwxQzZrjF1R@tYAAAA6 TLSv1.2 ECDHE-RSA-AES128-SHA256 820 2917 24% 911908 2748 907950 183 0 0 192.168.146.78 CH - [2015-05-02 10:10:20.035923] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d6fae0a.5238b257058ea" VjcofKwxQzZrjF1SrBcAAABy TLSv1.2 ECDHE-RSA-AES128-SHA256 502 2527 14% 969682 3638 964531 129 0 0 192.168.146.78 CH - [2015-05-02 10:10:20.076755] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d6fae0a.5238b257058ea" VjcofKwxQzZrjF1SrBgAAABz TLSv1.2 ECDHE-RSA-AES128-SHA256 820 1931 -% 1154813 3336 150517 163 0 0 192.168.146.78 CH - [2015-05-02 10:10:20.092967] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d6fae0a.5238b257058ea" VjcofKwxQzZrjF1SrBkAAAB1 TLSv1.2 ECDHE-RSA-AES128-SHA256 788 864 56% 1358411 3432 354076 221 0 0 192.168.146.78 CH - [2015-05-02 10:10:20.095399] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d6fae0a.5238b257058ea" VjcofKwxQzZrjF1SrBoAAAB2 TLSv1.2 ECDHE-RSA-AES128-SHA256 788 2144 22% 1356932 1912 354037 114 0 0 192.168.146.78 CH - [2015-05-02 10:10:21.521119] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d6fae0a.5238b257058ea" VjcofawxQzZrjF1SrBsAAAB0 TLSv1.2 ECDHE-RSA-AES128-SHA256 550 1866 -% 901939 3313 897651 220 0 0 192.168.146.78 CH - [2015-05-02 10:10:26.548725] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d6fae0a.5238b257058ea" VjcogqwxQzZrjF1SrB4AAAB6 TLSv1.2 ECDHE-RSA-AES128-SHA256 534 2154 -% 896891 3152 892739 209 0 0 192.168.146.78 CH - [2015-05-02 10:10:37.498854] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d6fae0a.5238b257058ea" VjcojawxQzZrjF1R@tkAAAA8 TLSv1.2 ECDHE-RSA-AES128-SHA256 964 662 -% 1066381 3609 61949 222 0 0 192.168.146.78 CH - [2015-05-02 10:10:38.576089] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7519 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d6fae0a.5238b257058ea" VjcojqwxQzZrjF1R@toAAAA@ TLSv1.2 ECDHE-RSA-AES128-SHA256 582 7994 -% 972423 3331 946195 22160 0 0 192.168.146.78 CH - [2015-05-02 10:10:45.340067] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d6fae0a.5238b257058ea" VjcolawxQzZrjF1SrCAAAAB9 TLSv1.2 ECDHE-RSA-AES128-SHA256 964 662 -% 967750 5564 961290 165 0 0 192.168.146.78 CH - [2015-05-02 10:10:46.318720] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7519 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d6fae0a.5238b257058ea" VjcolqwxQzZrjF1SrCEAAAB7 TLSv1.2 ECDHE-RSA-AES128-SHA256 582 7994 -% 817664 3516 793418 19477 0 0 192.168.146.78 CH - [2015-05-02 10:10:53.423546] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d6fae0a.5238b257058ea" VjconawxQzZrjF1SrCMAAAB8 TLSv1.2 ECDHE-RSA-AES128-SHA256 964 662 -% 1261173 5886 254392 207 0 0 192.168.146.78 CH - [2015-05-02 10:10:54.693947] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7519 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d6fae0a.5238b257058ea" VjconqwxQzZrjF1SrCUAAAB- TLSv1.2 ECDHE-RSA-AES128-SHA256 582 7994 -% 971588 2535 955361 13136 0 0 192.168.146.78 CH - [2015-05-02 10:11:19.357083] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d6fae0a.5238b257058ea" Vjcot6wxQzZrjF1R@uAAAAAG TLSv1.2 ECDHE-RSA-AES128-SHA256 964 662 -% 1165137 5182 158926 220 0 0 192.168.146.78 CH - [2015-05-02 10:11:20.531658] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7519 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d6fae0a.5238b257058ea" VjcouKwxQzZrjF1R@uEAAAAC TLSv1.2 ECDHE-RSA-AES128-SHA256 582 7994 -% 919588 3916 897131 17743 0 0 192.168.146.78 CH - [2015-05-02 10:11:26.013534] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d6fae0a.5238b257058ea" VjcovqwxQzZrjF1R@uMAAAAF TLSv1.2 ECDHE-RSA-AES128-SHA256 678 485 -% 1033028 5400 26629 240 0 0 192.168.146.78 CH - [2015-05-02 10:11:27.056405] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7519 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d6fae0a.5238b257058ea" Vjcov6wxQzZrjF1R@uQAAAAD TLSv1.2 ECDHE-RSA-AES128-SHA256 582 7994 -% 909721 3966 891298 13800 0 0 192.168.146.78 CH - [2015-05-02 10:11:38.987721] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d6fae0a.5238b257058ea" VjcoyqwxQzZrjF1SrCkAAABF TLSv1.2 ECDHE-RSA-AES128-SHA256 964 662 -% 1046249 5403 39856 216 0 0 192.168.146.78 CH - [2015-05-02 10:11:40.050256] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7519 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d6fae0a.5238b257058ea" VjcozKwxQzZrjF1SrCoAAAB3 TLSv1.2 ECDHE-RSA-AES128-SHA256 582 7994 -% 1127137 3964 104748 17697 0 0 192.168.146.78 CH - [2015-05-02 10:12:20.343597] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d6fae0a.5238b257058ea" Vjco9KwxQzZrjF1SrDIAAABS TLSv1.2 ECDHE-RSA-AES128-SHA256 964 662 -% 655220 3558 650973 161 0 0 192.168.146.78 CH - [2015-05-02 10:12:21.010716] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7519 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d6fae0a.5238b257058ea" Vjco9awxQzZrjF1SrDMAAABO TLSv1.2 ECDHE-RSA-AES128-SHA256 582 7994 -% 987622 2926 967182 16920 0 0 192.168.146.78 CH - [2015-05-02 10:12:24.548826] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d6fae0a.5238b257058ea" Vjco@KwxQzZrjF1SrDQAAABN TLSv1.2 ECDHE-RSA-AES128-SHA256 678 485 -% 931037 5319 924764 207 0 0 192.168.146.78 CH - [2015-05-02 10:12:25.490440] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7519 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d6fae0a.5238b257058ea" Vjco@awxQzZrjF1SrDUAAABc TLSv1.2 ECDHE-RSA-AES128-SHA256 582 7994 -% 944747 2545 922605 19037 0 0 192.168.146.79 CH - [2015-05-02 10:13:36.566494] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7356 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "ddd1d2a9.5238b313574de" VjcpQKwxQzZrjF1SrEEAAABQ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 778 11767 -% 1035313 1884 30380 2410 0 0 192.168.146.79 CH - [2015-05-02 10:13:37.752082] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "ddd1d2a9.5238b313574de" VjcpQawxQzZrjF1SrEMAAABg TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 524 2421 13% 1028142 3036 23224 214 0 0 192.168.146.79 CH - [2015-05-02 10:13:37.789792] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "ddd1d2a9.5238b313574de" VjcpQawxQzZrjF1SrEQAAABW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 777 2014 22% 1054960 2360 51298 209 0 0 192.168.146.79 CH - [2015-05-02 10:13:37.794906] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "ddd1d2a9.5238b313574de" VjcpQawxQzZrjF1SrEUAAABX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 777 732 56% 1193824 2955 189771 158 0 0 192.168.146.79 CH - [2015-05-02 10:13:37.807874] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "ddd1d2a9.5238b313574de" VjcpQawxQzZrjF1SrEcAAABk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 772 4234 23% 1181523 3753 176043 137 0 0 192.168.146.79 CH - [2015-05-02 10:13:37.817426] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7239 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "ddd1d2a9.5238b313574de" VjcpQawxQzZrjF1SrEgAAABb TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 767 8179 22% 1177030 1914 171741 110 0 0 192.168.146.79 CH - [2015-05-02 10:13:37.794908] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "ddd1d2a9.5238b313574de" VjcpQawxQzZrjF1SrEYAAABj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 764 1823 -% 1208916 3036 204981 120 0 0 192.168.146.79 CH - [2015-05-02 10:13:39.049342] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "ddd1d2a9.5238b313574de" VjcpQ6wxQzZrjF1SrEkAAABi TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 509 2545 14% 678846 3045 674346 158 0 0 192.168.146.79 CH - [2015-05-02 10:13:39.067235] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "ddd1d2a9.5238b313574de" VjcpQ6wxQzZrjF1SrEoAAABl TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 513 1792 -% 781177 2695 777883 137 0 0 192.168.146.79 CH - [2015-05-02 10:13:47.434958] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "ddd1d2a9.5238b313574de" VjcpS6wxQzZrjF1SrE0AAABr TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1330 590 -% 1116331 5449 109876 196 0 0 192.168.146.79 CH - [2015-05-02 10:13:48.626304] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7529 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "ddd1d2a9.5238b313574de" VjcpTKwxQzZrjF1SrE4AAABp TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 624 7951 -% 924328 3548 897696 22250 0 0 192.168.146.79 CH - [2015-05-02 10:13:49.673965] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "ddd1d2a9.5238b313574de" VjcpTawxQzZrjF1SrE8AAABn TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 524 2545 14% 971216 2957 966587 186 0 0 192.168.146.79 CH - [2015-05-02 10:13:50.720687] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "ddd1d2a9.5238b313574de" VjcpTqwxQzZrjF1SrFAAAABq TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 509 2545 14% 955943 2038 952291 168 0 0 192.168.146.78 CH - [2015-05-02 10:14:37.287159] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d6fae0a.5238b257058ea" VjcpfawxQzZrjF1SrFgAAAB1 TLSv1.2 ECDHE-RSA-AES128-SHA256 964 662 -% 973374 3313 969261 207 0 0 192.168.146.78 CH - [2015-05-02 10:14:38.271993] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7519 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d6fae0a.5238b257058ea" VjcpfqwxQzZrjF1SrFkAAAB2 TLSv1.2 ECDHE-RSA-AES128-SHA256 582 7994 -% 970829 2572 954428 13235 0 0 192.168.146.78 CH - [2015-05-02 10:14:39.145674] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d6fae0a.5238b257058ea" Vjcpf6wxQzZrjF1SrFoAAAB0 TLSv1.2 ECDHE-RSA-AES128-SHA256 964 662 -% 951277 5256 945068 224 0 0 192.168.146.78 CH - [2015-05-02 10:14:40.108172] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7519 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d6fae0a.5238b257058ea" VjcpgKwxQzZrjF1SrFsAAAB4 TLSv1.2 ECDHE-RSA-AES128-SHA256 582 7994 -% 757087 4647 736899 14906 0 0 192.168.146.78 CH - [2015-05-02 10:14:45.794902] "GET /EMail/requestPassword.aspx HTTP/1.1" 200 4302 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d6fae0a.5238b257058ea" VjcphawxQzZrjF1SrFwAAAB6 TLSv1.2 ECDHE-RSA-AES128-SHA256 454 4778 -% 1008331 3023 992392 12176 0 0 192.168.146.78 CH - [2015-05-02 10:14:54.016064] "POST /EMail/MailHandler?service=requestPassword HTTP/1.1" 303 - "https://www.example.com/EMail/requestPassword.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d6fae0a.5238b257058ea" VjcpjqwxQzZrjF1SrF8AAAB7 TLSv1.2 ECDHE-RSA-AES128-SHA256 964 566 -% 2933660 6073 926750 161 0 0 192.168.146.78 CH - [2015-05-02 10:14:55.884648] "POST /EMail/MailHandler?service=requestPassword HTTP/1.1" 303 - "https://www.example.com/EMail/requestPassword.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d6fae0a.5238b257058ea" Vjcpj6wxQzZrjF1SrGAAAABA TLSv1.2 ECDHE-RSA-AES128-SHA256 964 566 -% 3036970 3660 32369 178 0 0 192.168.146.78 CH - [2015-05-02 10:14:58.938848] "GET /EMail/requestPasswordFeedback.aspx?way=email HTTP/1.1" 200 3612 "https://www.example.com/EMail/requestPassword.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3d6fae0a.5238b257058ea" VjcpkqwxQzZrjF1SrGMAAABG TLSv1.2 ECDHE-RSA-AES128-SHA256 550 4090 -% 862240 3648 847629 10200 0 0 192.168.109.18 CH - [2015-05-02 10:15:28.319766] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4236f97c.5238b37083e40" VjcpsKwxQzZrjF1SrGkAAABH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 935 4442 -% 982011 3378 977940 186 0 0 192.168.109.18 CH - [2015-05-02 10:15:29.325256] "GET /EMail/main.aspx HTTP/1.1" 200 3399 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4236f97c.5238b37083e40" VjcpsawxQzZrjF1SrGoAAABT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 470 3815 -% 893353 2108 888681 1844 0 0 192.168.109.18 CH - [2015-05-02 10:15:30.267179] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4236f97c.5238b37083e40" VjcpsqwxQzZrjF1SrGsAAABL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 446 4141 -% 938881 2964 928074 7080 0 0 192.168.109.18 CH - [2015-05-02 10:15:30.339405] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4236f97c.5238b37083e40" VjcpsqwxQzZrjF1SrGwAAABI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 936 9298 -% 2200889 2502 191623 2880 0 0 192.168.109.18 CH - [2015-05-02 10:15:33.247983] "GET /EMail/inbox.aspx HTTP/1.1" 200 15246 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4236f97c.5238b37083e40" VjcptawxQzZrjF1SrG0AAABJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 15727 -% 981945 2714 968337 7823 0 0 192.168.109.18 CH - [2015-05-02 10:15:38.159059] "GET /EMail/message.aspx?&mailId=3927_42&folderId=2002_56&mailPos=0 HTTP/1.1" 200 13187 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4236f97c.5238b37083e40" VjcpuqwxQzZrjF1SrG8AAABO TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 491 13668 -% 1205142 6108 193217 4040 0 0 192.168.109.18 CH - [2015-05-02 10:15:42.579642] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3927_42&folderId=2002_56&attachmentId=2&token=-30094606903759263E18 HTTP/1.1" 200 1536 "https://www.example.com/EMail/message.aspx?&mailId=3927_42&folderId=2002_56&mailPos=0" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "4236f97c.5238b37083e40" VjcpvqwxQzZrjF1SrHAAAABN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 598 0 -% 1045710 6195 38489 244 0 0 192.168.109.18 CH - [2015-05-02 10:16:41.775500] "GET /EMail/overview.aspx HTTP/1.1" 200 5300 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4236f97c.5238b37083e40" Vjcp@awxQzZrjF1SrHoAAABh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1015 9743 -% 1294658 3403 288754 1776 0 0 192.168.78.164 CH - [2015-05-02 10:18:22.507914] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7355 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" VjcqXqwxQzZrjF1SrIoAAABr TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1183 11766 -% 1013488 6184 944 4613 3 0 192.168.78.164 CH - [2015-05-02 10:18:24.230751] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" VjcqYKwxQzZrjF1SrIsAAABn TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1174 2014 22% 819195 7091 810356 142 3 0 192.168.78.164 CH - [2015-05-02 10:18:24.443136] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" VjcqYKwxQzZrjF1SrI0AAABv TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1164 8130 22% 795265 6762 782857 246 3 0 192.168.78.164 CH - [2015-05-02 10:18:24.301568] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" VjcqYKwxQzZrjF1R@voAAAAc TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1174 732 56% 958859 9760 947543 122 3 0 192.168.78.164 CH - [2015-05-02 10:18:24.372801] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" VjcqYKwxQzZrjF1SrIwAAABq TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1176 2683 14% 902869 5999 894949 95 3 0 192.168.78.164 CH - [2015-05-02 10:18:24.509991] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" VjcqYKwxQzZrjF1SrI4AAABs TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1169 4234 23% 1019779 9209 7368 204 3 0 192.168.78.164 CH - [2015-05-02 10:18:25.698237] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" VjcqYawxQzZrjF1SrI8AAABw TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 906 1685 -% 970587 11155 957193 176 3 0 192.168.78.164 CH - [2015-05-02 10:18:25.776479] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" VjcqYawxQzZrjF1R@vsAAAAf TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 910 1792 -% 959683 10460 946660 214 3 0 192.168.78.164 CH - [2015-05-02 10:18:30.583989] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" VjcqZqwxQzZrjF1SrJIAAABx TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1475 1705 -% 824899 12030 810741 171 3 0 192.168.78.164 CH - [2015-05-02 10:18:30.649848] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" VjcqZqwxQzZrjF1SrJMAAABy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1163 2226 -% 848940 8098 838896 151 3 0 192.168.78.164 CH - [2015-05-02 10:18:34.676558] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" VjcqaqwxQzZrjF1SrJQAAAB1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1160 421 -% 1040146 14261 21473 162 3 0 192.168.78.164 CH - [2015-05-02 10:18:35.803061] "GET /EMail/main.aspx HTTP/1.1" 200 3387 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" Vjcqa6wxQzZrjF1SrJUAAAB2 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 990 3803 -% 930649 8955 918231 1171 3 0 192.168.78.164 CH - [2015-05-02 10:18:42.095737] "GET /EMail/main.aspx HTTP/1.1" 200 3387 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" VjcqcqwxQzZrjF1SrJoAAABD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1161 3941 -% 993462 6400 984408 1181 3 0 192.168.78.164 CH - [2015-05-02 10:18:42.184702] "GET /EMail/main.aspx HTTP/1.1" 200 3387 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" VjcqcqwxQzZrjF1SrJsAAAB@ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1135 3941 -% 1020446 7855 8923 1872 3 0 192.168.109.18 CH - [2015-05-02 10:18:42.018920] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4236f97c.5238b37083e40" VjcqcqwxQzZrjF1SrJkAAAB9 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 966 9298 -% 1238954 4473 226639 3708 0 0 192.168.78.164 CH - [2015-05-02 10:18:43.617028] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" Vjcqc6wxQzZrjF1SrJ0AAAB8 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1290 4381 23% 839293 10802 825479 188 3 0 192.168.78.164 CH - [2015-05-02 10:18:43.508928] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" Vjcqc6wxQzZrjF1SrJwAAAB- TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1039 1876 22% 994765 6854 984843 170 3 0 192.168.78.164 CH - [2015-05-02 10:18:43.593388] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" Vjcqc6wxQzZrjF1R@vwAAAAh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1285 8130 22% 943168 6795 931637 155 3 0 192.168.78.164 CH - [2015-05-02 10:18:43.656847] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" Vjcqc6wxQzZrjF1SrJ4AAABA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 931 4128 -% 1057833 8456 41588 6468 3 0 192.168.78.164 CH - [2015-05-02 10:18:43.929012] "GET /EMail/overview.aspx HTTP/1.1" 200 5287 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" Vjcqc6wxQzZrjF1R@v0AAAAj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1188 5847 -% 1405044 6692 395398 1697 3 0 192.168.78.164 CH - [2015-05-02 10:18:44.853808] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" VjcqdKwxQzZrjF1SrKAAAABF TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 882 1792 -% 874386 10680 861331 176 3 0 192.168.78.164 CH - [2015-05-02 10:18:43.873573] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" Vjcqc6wxQzZrjF1SrJ8AAABG TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1214 9317 -% 1928819 7585 913146 3261 3 0 192.168.78.164 CH - [2015-05-02 10:18:45.442604] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" VjcqdawxQzZrjF1R@v4AAAAl TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 887 1248 -% 1039875 7000 31330 181 3 0 192.168.78.164 CH - [2015-05-02 10:18:45.930210] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" VjcqdawxQzZrjF1SrKEAAAB3 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 929 1260 -% 979296 6593 970859 194 3 0 192.168.109.18 CH - [2015-05-02 10:18:46.306735] "GET /EMail/inbox.aspx HTTP/1.1" 200 15246 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4236f97c.5238b37083e40" VjcqdqwxQzZrjF1SrKIAAABM TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 15727 -% 1209660 3689 199829 4607 0 0 192.168.78.164 CH - [2015-05-02 10:18:50.686998] "GET /EMail/inbox.aspx HTTP/1.1" 200 8584 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" VjcqeqwxQzZrjF1SrKUAAABL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 934 9035 -% 1088784 6918 77895 2566 3 0 192.168.78.164 CH - [2015-05-02 10:18:51.968889] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" Vjcqe6wxQzZrjF1SrKYAAABI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 879 539 -% 999202 6140 991106 184 3 0 192.168.78.164 CH - [2015-05-02 10:18:52.216690] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" VjcqfKwxQzZrjF1SrKcAAABJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1137 1951 -% 1023585 6674 14746 177 3 0 192.168.78.164 CH - [2015-05-02 10:18:52.281767] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" VjcqfKwxQzZrjF1SrKgAAABS TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1137 665 -% 969155 7432 960469 124 3 0 192.168.78.164 CH - [2015-05-02 10:18:55.637860] "GET /EMail/message.aspx?&mailId=3927_65&folderId=951_34&mailPos=0 HTTP/1.1" 200 11161 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" Vjcqf6wxQzZrjF1SrKkAAABO TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 975 11613 -% 1358285 14800 317049 24299 3 0 192.168.78.164 CH - [2015-05-02 10:18:59.301865] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3927_65&folderId=951_34&attachmentId=2&token=-35132472360104694E18 HTTP/1.1" 200 48487 "https://www.example.com/EMail/message.aspx?&mailId=3927_65&folderId=951_34&mailPos=0" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" Vjcqg6wxQzZrjF1SrKoAAABN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1081 49893 -% 1133232 9129 53309 207 3 0 192.168.109.18 CH - [2015-05-02 10:20:03.610366] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4236f97c.5238b37083e40" Vjcqw6wxQzZrjF1SrLgAAABX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1004 4430 -% 1110140 3393 105546 334 0 0 192.168.109.18 CH - [2015-05-02 10:20:04.823259] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4236f97c.5238b37083e40" VjcqxKwxQzZrjF1SrLkAAABk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 414 318 -% 971252 2545 967884 168 0 0 192.168.109.18 CH - [2015-05-02 10:20:05.817547] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4236f97c.5238b37083e40" VjcqxawxQzZrjF1SrLoAAABb TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 396 7771 -% 892943 2673 887588 2154 0 0 192.168.109.18 CH - [2015-05-02 10:20:06.809948] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "4236f97c.5238b37083e40" VjcqxqwxQzZrjF1SrLwAAABi TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 970 105 56% 941297 3140 937148 229 0 0 192.168.109.18 CH - [2015-05-02 10:20:06.739621] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1150 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "4236f97c.5238b37083e40" VjcqxqwxQzZrjF1SrLsAAABj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 512 0 12% 1036897 2040 33509 176 0 0 192.168.109.18 CH - [2015-05-02 10:20:06.845461] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 2143 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "4236f97c.5238b37083e40" VjcqxqwxQzZrjF1R@wIAAAAo TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1002 105 24% 1029689 2933 24788 272 0 0 192.168.109.18 CH - [2015-05-02 10:20:06.851524] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "4236f97c.5238b37083e40" VjcqxqwxQzZrjF1SrL0AAABl TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1016 105 -% 1197187 1717 194368 159 0 0 192.168.72.50 CH - [2015-05-02 10:22:53.836754] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "25aa254b.5238b525ba340" VjcrbawxQzZrjF1SrNwAAABA TLSv1.2 ECDHE-RSA-AES256-SHA384 1277 5667 -% 918887 6769 910071 208 6 0 192.168.72.50 CH - [2015-05-02 10:22:53.835587] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "25aa254b.5238b525ba340" VjcrbawxQzZrjF1SrNsAAABB TLSv1.2 ECDHE-RSA-AES256-SHA384 1245 5896 22% 1132499 6074 124036 216 6 0 192.168.78.164 CH - [2015-05-02 10:24:02.315182] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3927_65&folderId=951_34&mailPos=0" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" VjcrsqwxQzZrjF1R@wkAAAAw TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1856 4182 -% 1315109 12041 300509 179 3 0 192.168.78.164 CH - [2015-05-02 10:24:03.716146] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7277 "https://www.example.com/EMail/message.aspx?&mailId=3927_65&folderId=951_34&mailPos=0" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" Vjcrs6wxQzZrjF1R@woAAAAy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1030 7699 -% 1047809 7099 35630 3281 3 0 192.168.78.164 CH - [2015-05-02 10:24:07.216027] "GET /EMail/overview.aspx HTTP/1.1" 200 5287 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" Vjcrt6wxQzZrjF1SrOsAAABU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1218 5847 -% 851478 7499 839411 2775 3 0 192.168.78.164 CH - [2015-05-02 10:24:07.161265] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" Vjcrt6wxQzZrjF1SrOoAAABR TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1244 9317 -% 1566107 9348 547840 3665 3 0 192.168.78.164 CH - [2015-05-02 10:24:14.099010] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" VjcrvqwxQzZrjF1SrOwAAABY TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1207 547 -% 963296 11228 949748 226 3 0 192.168.78.164 CH - [2015-05-02 10:24:26.147344] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" VjcryqwxQzZrjF1SrPAAAABd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1156 547 -% 923305 10799 910613 148 3 0 192.168.78.164 CH - [2015-05-02 10:24:26.203114] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" VjcryqwxQzZrjF1R@wwAAAAx TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1182 547 -% 1034551 7402 24798 325 3 0 192.168.78.164 CH - [2015-05-02 10:24:27.157917] "GET /EMail/index.html HTTP/1.1" 200 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" Vjcry6wxQzZrjF1SrPEAAABh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 882 676 75% 904202 8865 893273 250 3 0 192.168.78.164 CH - [2015-05-02 10:24:27.323889] "GET /EMail/index.html HTTP/1.1" 200 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" Vjcry6wxQzZrjF1R@w0AAAA1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 908 676 75% 924788 7644 914651 322 3 0 192.168.78.164 CH - [2015-05-02 10:24:28.358562] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "https://www.example.com/EMail/index.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" VjcrzKwxQzZrjF1SrPIAAABa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 950 318 -% 881162 10728 868517 132 3 0 192.168.78.164 CH - [2015-05-02 10:24:28.568149] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "https://www.example.com/EMail/index.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" VjcrzKwxQzZrjF1R@w4AAAA4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 950 318 -% 895062 9257 883643 182 3 0 192.168.78.164 CH - [2015-05-02 10:24:29.547034] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "https://www.example.com/EMail/index.html" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7" www.example.com 192.168.34.16 443 proxy-server - + "15dac076.5238b4240938a" VjcrzawxQzZrjF1R@w8AAAA0 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 932 7758 -% 968526 20266 944008 2458 3 0 192.168.254.25 CH - [2015-05-02 10:30:27.553048] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7372 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "fd7613e7.5238b6d77e318" VjctM6wxQzZrjF1SrSwAAABC TLSv1 ECDHE-RSA-AES256-SHA 624 11809 -% 979021 1558 974655 2259 0 0 192.168.254.25 CH - [2015-05-02 10:30:41.536943] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "fd7613e7.5238b6d77e318" VjctQawxQzZrjF1SrS8AAABa TLSv1 ECDHE-RSA-AES256-SHA 901 566 -% 1077065 3821 72565 165 0 0 192.168.254.25 CH - [2015-05-02 10:30:42.623130] "GET /EMail/main.aspx HTTP/1.1" 200 3404 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "fd7613e7.5238b6d77e318" VjctQqwxQzZrjF1SrTAAAABf TLSv1 ECDHE-RSA-AES256-SHA 539 3834 -% 848523 3245 842982 1172 0 0 192.168.254.25 CH - [2015-05-02 10:30:44.932972] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "fd7613e7.5238b6d77e318" VjctRKwxQzZrjF1SrTEAAABV TLSv1 ECDHE-RSA-AES256-SHA 475 4154 -% 965109 3339 949043 11905 0 0 192.168.254.25 CH - [2015-05-02 10:30:45.057803] "GET /EMail/overview.aspx HTTP/1.1" 200 5304 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "fd7613e7.5238b6d77e318" VjctRawxQzZrjF1SrTMAAABg TLSv1 ECDHE-RSA-AES256-SHA 693 5883 -% 1315910 4114 307449 3042 0 0 192.168.254.25 CH - [2015-05-02 10:30:45.047825] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "fd7613e7.5238b6d77e318" VjctRawxQzZrjF1SrTIAAABQ TLSv1 ECDHE-RSA-AES256-SHA 725 9379 -% 1498961 4048 488236 2928 0 0 192.168.254.25 CH - [2015-05-02 10:30:52.060553] "GET /EMail/newMessage.aspx?msg=new HTTP/1.1" 200 12043 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "fd7613e7.5238b6d77e318" VjctTKwxQzZrjF1R@yMAAAAN TLSv1 ECDHE-RSA-AES256-SHA 741 12656 -% 1024388 3381 995375 24188 3 3 192.168.254.25 CH - [2015-05-02 10:30:52.088197] "GET /EMail/tree.aspx?sNode-sharedTree=treeNewMsg HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "fd7613e7.5238b6d77e318" VjctTKwxQzZrjF1SrTYAAABk TLSv1 ECDHE-RSA-AES256-SHA 757 9379 -% 1293551 3606 280378 5656 0 0 192.168.254.25 CH - [2015-05-02 10:30:54.248111] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "fd7613e7.5238b6d77e318" VjctTqwxQzZrjF1R@yQAAAAO TLSv1 ECDHE-RSA-AES256-SHA 491 3354 -% 949795 3233 939633 6269 0 0 192.168.254.25 CH - [2015-05-02 10:30:57.908233] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5471 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "fd7613e7.5238b6d77e318" VjctUawxQzZrjF1SrTcAAABb TLSv1 ECDHE-RSA-AES256-SHA 475 7314 -% 878809 2054 0 0 0 0 192.168.254.25 CH - [2015-05-02 10:31:41.768298] "GET /EMail/attachost.aspx HTTP/1.1" 200 4991 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "fd7613e7.5238b6d77e318" VjctfawxQzZrjF1SrUEAAABq TLSv1 ECDHE-RSA-AES256-SHA 645 5563 -% 940782 3056 934324 2563 0 0 192.168.254.25 CH - [2015-05-02 10:33:13.509981] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/attachost.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "fd7613e7.5238b6d77e318" Vjct2awxQzZrjF1SrVIAAAB8 TLSv1 ECDHE-RSA-AES256-SHA 572427 486 -% 2580492 3338 67595 220 0 0 192.168.254.25 CH - [2015-05-02 10:33:16.180517] "GET /EMail/attachost.aspx HTTP/1.1" 200 6490 "https://www.example.com/EMail/attachments.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "fd7613e7.5238b6d77e318" Vjct3KwxQzZrjF1SrVMAAABE TLSv1 ECDHE-RSA-AES256-SHA 507 6906 -% 846534 3128 840530 2005 0 0 192.168.192.35 CH - [2015-05-02 10:41:42.302595] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" Vjcv1qwxQzZrjF1SraIAAABc TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 849 11889 -% 1050914 2819 43784 3621 0 0 192.168.192.35 CH - [2015-05-02 10:41:50.023902] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" Vjcv3qwxQzZrjF1SraUAAABZ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1263 564 -% 1107864 3414 103767 145 0 0 192.168.192.35 CH - [2015-05-02 10:41:51.151205] "GET /EMail/main.aspx HTTP/1.1" 200 3383 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" Vjcv36wxQzZrjF1SraYAAABY TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 3799 -% 649325 1903 644978 1945 0 0 192.168.192.35 CH - [2015-05-02 10:41:51.872337] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" Vjcv36wxQzZrjF1SracAAABe TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 4128 -% 734511 4107 720831 8930 0 0 192.168.192.35 CH - [2015-05-02 10:41:51.894647] "GET /EMail/overview.aspx HTTP/1.1" 200 5289 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" Vjcv36wxQzZrjF1SragAAABC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1059 5854 -% 1032019 1994 27859 1686 0 0 192.168.192.35 CH - [2015-05-02 10:41:51.903036] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" Vjcv36wxQzZrjF1R@0IAAAAp TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1085 9322 -% 1481811 2174 472245 3388 0 0 192.168.192.35 CH - [2015-05-02 10:41:54.914686] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" Vjcv4qwxQzZrjF1R@0MAAAAu TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 511 409 -% 920852 3444 916515 195 0 0 192.168.192.35 CH - [2015-05-02 10:41:55.906913] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" Vjcv46wxQzZrjF1R@0QAAAAv TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 458 318 -% 868561 3636 864008 172 0 0 192.168.192.35 CH - [2015-05-02 10:41:56.786709] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" Vjcv5KwxQzZrjF1R@0UAAAAw TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 440 7758 -% 947850 2985 941296 2791 0 0 192.168.254.25 CH - [2015-05-02 10:46:57.192320] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "fd7613e7.5238b6d77e318" VjcxEawxQzZrjF1SrdcAAABT TLSv1 ECDHE-RSA-AES256-SHA 2042 4236 -% 1121421 25578 93548 404 26 0 192.168.254.25 CH - [2015-05-02 10:46:58.320909] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc= HTTP/1.1" 200 3928 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "fd7613e7.5238b6d77e318" VjcxEqwxQzZrjF1SrdgAAABL TLSv1 ECDHE-RSA-AES256-SHA 587 4362 -% 989068 3194 974100 11114 0 0 192.168.72.50 CH - [2015-05-02 10:53:28.735764] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e1552c9.5238bbf2ef079" VjcymKwxQzZrjF1SrhwAAABc TLSv1.2 ECDHE-RSA-AES256-SHA384 1602 4350 -% 925446 13201 910059 220 6 0 192.168.72.50 CH - [2015-05-02 10:53:29.679414] "GET /EMail/main.aspx HTTP/1.1" 200 3400 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e1552c9.5238bbf2ef079" VjcymawxQzZrjF1Srh0AAABZ TLSv1.2 ECDHE-RSA-AES256-SHA384 1014 3914 -% 870069 7926 858462 1925 6 0 192.168.72.50 CH - [2015-05-02 10:53:31.024404] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e1552c9.5238bbf2ef079" Vjcym6wxQzZrjF1Srh4AAABY TLSv1.2 ECDHE-RSA-AES256-SHA384 966 4234 -% 1165802 12175 145560 6463 6 0 192.168.72.50 CH - [2015-05-02 10:53:31.741200] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e1552c9.5238bbf2ef079" Vjcym6wxQzZrjF1R@2MAAAAP TLSv1.2 ECDHE-RSA-AES256-SHA384 1325 9699 -% 1484071 9619 471027 2063 6 0 192.168.72.50 CH - [2015-05-02 10:53:33.265923] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e1552c9.5238bbf2ef079" VjcynawxQzZrjF1R@2QAAAAS TLSv1.2 ECDHE-RSA-AES256-SHA384 998 1354 -% 1081996 9429 69474 231 6 0 192.168.72.50 CH - [2015-05-02 10:53:39.935682] "GET /EMail/inbox.aspx HTTP/1.1" 200 16695 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e1552c9.5238bbf2ef079" Vjcyo6wxQzZrjF1SriAAAABC TLSv1.2 ECDHE-RSA-AES256-SHA384 1282 17642 -% 1326652 10019 304593 8866 6 0 192.168.72.50 CH - [2015-05-02 10:53:41.352451] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e1552c9.5238bbf2ef079" VjcypawxQzZrjF1SriIAAABa TLSv1.2 ECDHE-RSA-AES256-SHA384 1298 827 -% 726023 12163 711748 235 6 0 192.168.72.50 CH - [2015-05-02 10:53:41.314855] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e1552c9.5238bbf2ef079" VjcypawxQzZrjF1SriEAAABd TLSv1.2 ECDHE-RSA-AES256-SHA384 982 634 -% 975931 9074 965311 161 6 0 192.168.72.50 CH - [2015-05-02 10:53:41.355559] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e1552c9.5238bbf2ef079" VjcypawxQzZrjF1SriMAAABh TLSv1.2 ECDHE-RSA-AES256-SHA384 1298 2171 -% 1201005 13679 185126 172 6 0 192.168.72.50 CH - [2015-05-02 10:53:41.357120] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e1552c9.5238bbf2ef079" VjcypawxQzZrjF1SriQAAABf TLSv1.2 ECDHE-RSA-AES256-SHA384 1298 2107 -% 1203707 15381 186672 100 6 0 192.168.72.50 CH - [2015-05-02 10:53:50.160678] "GET /EMail/message.aspx?&mailId=3919_50&folderId=1175_93&mailPos=0 HTTP/1.1" 200 13150 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e1552c9.5238bbf2ef079" VjcyrqwxQzZrjF1SricAAABQ TLSv1.2 ECDHE-RSA-AES256-SHA384 1330 14021 -% 1273928 8935 258621 4313 6 0 192.168.72.50 CH - [2015-05-02 10:53:57.644598] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e1552c9.5238bbf2ef079" VjcytawxQzZrjF1SrigAAABW TLSv1.2 ECDHE-RSA-AES256-SHA384 1298 2379 -% 942277 11780 928731 161 6 0 192.168.72.50 CH - [2015-05-02 10:53:58.738485] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e1552c9.5238bbf2ef079" VjcytqwxQzZrjF1SrioAAABk TLSv1.2 ECDHE-RSA-AES256-SHA384 982 453 -% 831613 13539 806725 235 6 0 192.168.72.50 CH - [2015-05-02 10:53:59.579638] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e1552c9.5238bbf2ef079" Vjcyt6wxQzZrjF1SriwAAABi TLSv1.2 ECDHE-RSA-AES256-SHA384 966 815 75% 701239 8556 690294 337 6 0 192.168.72.50 CH - [2015-05-02 10:54:00.343102] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "8e1552c9.5238bbf2ef079" VjcyuKwxQzZrjF1Sri0AAABj TLSv1.2 ECDHE-RSA-AES256-SHA384 806 1642 -% 8533 6984 51 100 6 0 192.168.72.50 CH - [2015-05-02 10:54:00.799100] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e1552c9.5238bbf2ef079" VjcyuKwxQzZrjF1Sri4AAABl TLSv1.2 ECDHE-RSA-AES256-SHA384 934 373 -% 952311 10494 939716 202 6 0 192.168.72.50 CH - [2015-05-02 10:54:01.772411] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e1552c9.5238bbf2ef079" VjcyuawxQzZrjF1Sri8AAABm TLSv1.2 ECDHE-RSA-AES256-SHA384 918 7866 -% 1046191 7626 32436 4252 6 0 192.168.72.50 CH - [2015-05-02 10:54:02.894516] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7161 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e1552c9.5238bbf2ef079" VjcyuqwxQzZrjF1SrjIAAABp TLSv1.2 ECDHE-RSA-AES256-SHA384 1378 8579 22% 859725 7788 847662 204 6 0 192.168.72.50 CH - [2015-05-02 10:54:02.861787] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e1552c9.5238bbf2ef079" VjcyuqwxQzZrjF1SrjAAAABo TLSv1.2 ECDHE-RSA-AES256-SHA384 1046 2793 14% 929459 9783 917333 164 6 0 192.168.72.50 CH - [2015-05-02 10:54:02.894121] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e1552c9.5238bbf2ef079" VjcyuqwxQzZrjF1SrjEAAABr TLSv1.2 ECDHE-RSA-AES256-SHA384 1362 928 56% 1114312 7717 104378 233 6 0 192.168.72.50 CH - [2015-05-02 10:54:02.915888] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e1552c9.5238bbf2ef079" VjcyuqwxQzZrjF1SrjUAAABv TLSv1.2 ECDHE-RSA-AES256-SHA384 1394 454 -% 1098533 7462 89672 100 6 0 192.168.72.50 CH - [2015-05-02 10:54:02.901983] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e1552c9.5238bbf2ef079" VjcyuqwxQzZrjF1SrjMAAABt TLSv1.2 ECDHE-RSA-AES256-SHA384 1362 2208 22% 1128122 7780 118546 283 6 0 192.168.72.50 CH - [2015-05-02 10:54:02.903221] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e1552c9.5238bbf2ef079" VjcyuqwxQzZrjF1SrjQAAABn TLSv1.2 ECDHE-RSA-AES256-SHA384 1394 4788 23% 1161743 7289 151146 279 6 0 192.168.72.50 CH - [2015-05-02 10:54:04.116476] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "8e1552c9.5238bbf2ef079" VjcyvKwxQzZrjF1SrjYAAABq TLSv1.2 ECDHE-RSA-AES256-SHA384 1078 261 -% 901458 11109 888280 258 6 0 192.168.192.35 CH - [2015-05-02 10:54:09.070321] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjcywawxQzZrjF1SrjgAAABw TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 849 11799 -% 944097 3974 935728 3621 0 0 192.168.32.7 CH - [2015-05-02 10:57:23.819150] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjczg6wxQzZrjF1SrlQAAABS TLSv1.2 ECDHE-RSA-AES128-SHA256 659 11875 -% 1008165 910 2275 3889 0 0 192.168.32.7 CH - [2015-05-02 10:57:25.004804] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" VjczhawxQzZrjF1SrlUAAABO TLSv1.2 ECDHE-RSA-AES128-SHA256 454 2713 14% 838746 2098 835247 164 0 0 192.168.32.7 CH - [2015-05-02 10:57:25.041199] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" VjczhawxQzZrjF1SrlcAAABR TLSv1.2 ECDHE-RSA-AES128-SHA256 760 7973 22% 933199 2766 926028 213 0 0 192.168.32.7 CH - [2015-05-02 10:57:25.041497] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" VjczhawxQzZrjF1SrlgAAABP TLSv1.2 ECDHE-RSA-AES128-SHA256 744 2144 22% 1073578 2760 69715 164 0 0 192.168.32.7 CH - [2015-05-02 10:57:25.041004] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" VjczhawxQzZrjF1R@3QAAAAg TLSv1.2 ECDHE-RSA-AES128-SHA256 760 4405 23% 1113558 4447 107116 249 0 0 192.168.32.7 CH - [2015-05-02 10:57:25.039499] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" VjczhawxQzZrjF1SrlYAAABU TLSv1.2 ECDHE-RSA-AES128-SHA256 744 864 56% 1215150 3065 210868 152 0 0 192.168.32.7 CH - [2015-05-02 10:57:25.045910] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" VjczhawxQzZrjF1R@3UAAAAj TLSv1.2 ECDHE-RSA-AES128-SHA256 776 1931 -% 1246025 2827 242267 190 0 0 192.168.32.7 CH - [2015-05-02 10:57:26.471171] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" VjczhqwxQzZrjF1R@3YAAAAl TLSv1.2 ECDHE-RSA-AES128-SHA256 486 1866 -% 724151 2961 720220 217 0 0 192.168.32.7 CH - [2015-05-02 10:57:37.437484] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" VjczkawxQzZrjF1SrloAAABZ TLSv1.2 ECDHE-RSA-AES128-SHA256 776 2331 -% 878378 3109 874364 203 0 0 192.168.32.7 CH - [2015-05-02 10:57:38.339444] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" VjczkqwxQzZrjF1SrlsAAABY TLSv1.2 ECDHE-RSA-AES128-SHA256 630 453 -% 1104172 3449 100019 183 0 0 192.168.32.7 CH - [2015-05-02 10:57:39.456033] "GET /EMail/main.aspx HTTP/1.1" 200 3407 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjczk6wxQzZrjF1SrlwAAABe TLSv1.2 ECDHE-RSA-AES128-SHA256 486 3882 -% 893020 3119 888062 1227 0 0 192.168.32.7 CH - [2015-05-02 10:57:40.480929] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" VjczlKwxQzZrjF1Srl0AAABN TLSv1.2 ECDHE-RSA-AES128-SHA256 470 4202 -% 1031423 2813 20851 7009 0 0 192.168.32.7 CH - [2015-05-02 10:57:40.512353] "GET /EMail/overview.aspx HTTP/1.1" 200 5305 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" VjczlKwxQzZrjF1Srl8AAABa TLSv1.2 ECDHE-RSA-AES128-SHA256 760 5963 -% 1184403 1674 179260 2834 0 0 192.168.32.7 CH - [2015-05-02 10:57:40.511762] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" VjczlKwxQzZrjF1Srl4AAABC TLSv1.2 ECDHE-RSA-AES128-SHA256 792 9683 -% 1689718 2229 679066 4369 0 0 192.168.32.7 CH - [2015-05-02 10:57:41.736311] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" VjczlawxQzZrjF1SrmEAAABh TLSv1.2 ECDHE-RSA-AES128-SHA256 502 1322 -% 832695 3103 828566 204 0 0 192.168.32.7 CH - [2015-05-02 10:57:42.270534] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" VjczlqwxQzZrjF1SrmIAAABf TLSv1.2 ECDHE-RSA-AES128-SHA256 534 1338 -% 599963 2096 596985 208 0 0 192.168.32.7 CH - [2015-05-02 10:57:45.236086] "GET /EMail/inbox.aspx HTTP/1.1" 200 24195 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" VjczmawxQzZrjF1SrmMAAABg TLSv1.2 ECDHE-RSA-AES128-SHA256 470 24926 -% 1356556 2026 240646 9177 0 0 192.168.32.7 CH - [2015-05-02 10:57:46.776917] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" VjczmqwxQzZrjF1SrmYAAABW TLSv1.2 ECDHE-RSA-AES128-SHA256 776 2059 -% 940641 2856 937009 156 0 0 192.168.32.7 CH - [2015-05-02 10:57:46.745949] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" VjczmqwxQzZrjF1SrmUAAABQ TLSv1.2 ECDHE-RSA-AES128-SHA256 486 602 -% 995400 2063 992593 177 0 0 192.168.32.7 CH - [2015-05-02 10:57:46.743993] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" VjczmqwxQzZrjF1SrmQAAABV TLSv1.2 ECDHE-RSA-AES128-SHA256 486 602 -% 1014679 2276 11791 128 0 0 192.168.32.7 CH - [2015-05-02 10:57:46.781124] "GET /EMail/images/msgOpenedReplied.png HTTP/1.1" 200 717 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" VjczmqwxQzZrjF1SrmcAAABX TLSv1.2 ECDHE-RSA-AES128-SHA256 792 1371 -% 1064075 2759 60524 141 0 0 192.168.32.7 CH - [2015-05-02 10:58:54.992740] "GET /EMail/message.aspx?&mailId=3927_67&folderId=3481_21&mailPos=0 HTTP/1.1" 200 11367 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjcz3qwxQzZrjF1SrnIAAABt TLSv1.2 ECDHE-RSA-AES128-SHA256 808 12165 -% 1199703 3279 176104 19178 0 0 192.168.32.7 CH - [2015-05-02 10:58:58.528407] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3927_67&folderId=3481_21&attachmentId=2&token=-76899382338774835E18 HTTP/1.1" 200 87055 "https://www.example.com/EMail/message.aspx?&mailId=3927_67&folderId=3481_21&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjcz4qwxQzZrjF1SrnMAAABn TLSv1.2 ECDHE-RSA-AES128-SHA256 614 91319 -% 1057358 5320 15591 201 0 0 192.168.32.7 CH - [2015-05-02 10:59:56.064820] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 24187 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc0HKwxQzZrjF1R@34AAAAp TLSv1.2 ECDHE-RSA-AES128-SHA256 760 25103 -% 1220693 2463 115617 7881 0 0 192.168.223.134 CH - [2015-05-02 10:59:56.219307] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7371 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3769adb3.5238bd6e397ab" Vjc0HKwxQzZrjF1SroAAAAB4 TLSv1.2 ECDHE-RSA-AES256-SHA384 957 11939 -% 1102149 4068 93683 2404 3 0 192.168.32.7 CH - [2015-05-02 10:59:56.086095] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc0HKwxQzZrjF1Srn8AAABD TLSv1.2 ECDHE-RSA-AES128-SHA256 776 9683 -% 1446857 3476 436282 4012 0 0 192.168.32.7 CH - [2015-05-02 10:59:57.347835] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc0HawxQzZrjF1R@38AAAAu TLSv1.2 ECDHE-RSA-AES128-SHA256 502 1946 -% 995255 2398 991938 306 0 0 192.168.223.134 CH - [2015-05-02 10:59:57.404049] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3769adb3.5238bd6e397ab" Vjc0HawxQzZrjF1SroEAAAB@ TLSv1.2 ECDHE-RSA-AES256-SHA384 710 2575 14% 952843 5490 944477 156 3 0 192.168.223.134 CH - [2015-05-02 10:59:57.496204] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3769adb3.5238bd6e397ab" Vjc0HawxQzZrjF1SroIAAAB9 TLSv1.2 ECDHE-RSA-AES256-SHA384 1042 8781 22% 1043080 7899 30235 160 3 0 192.168.223.134 CH - [2015-05-02 10:59:57.497377] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3769adb3.5238bd6e397ab" Vjc0HawxQzZrjF1SroMAAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 1058 1979 -% 1071053 8151 60582 196 3 0 192.168.223.134 CH - [2015-05-02 10:59:57.505606] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3769adb3.5238bd6e397ab" Vjc0HawxQzZrjF1SroYAAAB- TLSv1.2 ECDHE-RSA-AES256-SHA384 1026 2208 22% 1101235 7822 90754 232 3 0 192.168.223.134 CH - [2015-05-02 10:59:57.498817] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3769adb3.5238bd6e397ab" Vjc0HawxQzZrjF1SroQAAAB8 TLSv1.2 ECDHE-RSA-AES256-SHA384 1026 928 56% 1141709 8052 131859 133 3 0 192.168.223.134 CH - [2015-05-02 10:59:57.499479] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3769adb3.5238bd6e397ab" Vjc0HawxQzZrjF1SroUAAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 1042 4485 23% 1269226 7889 258874 170 3 0 192.168.223.134 CH - [2015-05-02 10:59:58.834524] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3769adb3.5238bd6e397ab" Vjc0HqwxQzZrjF1SrocAAABF TLSv1.2 ECDHE-RSA-AES256-SHA384 742 1898 -% 935618 9737 923536 249 3 0 192.168.223.134 CH - [2015-05-02 10:59:59.595907] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3769adb3.5238bd6e397ab" Vjc0H6wxQzZrjF1SrogAAABG TLSv1.2 ECDHE-RSA-AES256-SHA384 742 2186 -% 772815 4928 765608 180 3 0 192.168.32.7 CH - [2015-05-02 11:00:00.689036] "GET /EMail/message.aspx?&mailId=3928_16&folderId=3481_21&mailPos=1 HTTP/1.1" 200 11503 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc0IKwxQzZrjF1R@4AAAAAv TLSv1.2 ECDHE-RSA-AES128-SHA256 518 12116 -% 1242432 3659 212395 25048 0 0 192.168.32.7 CH - [2015-05-02 11:00:03.610059] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3928_16&folderId=3481_21&attachmentId=2&token=-109594341517928998E18 HTTP/1.1" 200 48247 "https://www.example.com/EMail/message.aspx?&mailId=3928_16&folderId=3481_21&mailPos=1" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc0I6wxQzZrjF1R@4IAAAAz TLSv1.2 ECDHE-RSA-AES128-SHA256 614 50789 -% 1155300 5906 128647 185 0 0 192.168.223.134 CH - [2015-05-02 11:00:04.574950] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3769adb3.5238bd6e397ab" Vjc0JKwxQzZrjF1SrosAAABM TLSv1.2 ECDHE-RSA-AES256-SHA384 886 501 -% 1041781 6072 33143 245 3 0 192.168.223.134 CH - [2015-05-02 11:00:05.650641] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7544 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3769adb3.5238bd6e397ab" Vjc0JawxQzZrjF1Sro0AAABT TLSv1.2 ECDHE-RSA-AES256-SHA384 774 8058 -% 934225 9299 910412 12902 3 0 192.168.223.134 CH - [2015-05-02 11:00:13.099613] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3769adb3.5238bd6e397ab" Vjc0LawxQzZrjF1Sro4AAABL TLSv1.2 ECDHE-RSA-AES256-SHA384 1202 662 -% 1172096 7661 161716 218 3 0 192.168.223.134 CH - [2015-05-02 11:00:14.295567] "GET /EMail/main.aspx HTTP/1.1" 200 3403 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3769adb3.5238bd6e397ab" Vjc0LqwxQzZrjF1Sro8AAABI TLSv1.2 ECDHE-RSA-AES256-SHA384 742 3914 -% 705556 7933 694793 1349 3 0 192.168.223.134 CH - [2015-05-02 11:00:15.091780] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3769adb3.5238bd6e397ab" Vjc0L6wxQzZrjF1SrpAAAABJ TLSv1.2 ECDHE-RSA-AES256-SHA384 694 4234 -% 764810 7218 743150 12633 3 0 192.168.223.134 CH - [2015-05-02 11:00:15.179362] "GET /EMail/overview.aspx HTTP/1.1" 200 5303 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3769adb3.5238bd6e397ab" Vjc0L6wxQzZrjF1SrpIAAABO TLSv1.2 ECDHE-RSA-AES256-SHA384 1010 6011 -% 1352418 4999 344255 1741 3 0 192.168.223.134 CH - [2015-05-02 11:00:15.181452] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3769adb3.5238bd6e397ab" Vjc0L6wxQzZrjF1SrpMAAABS TLSv1.2 ECDHE-RSA-AES256-SHA384 1042 9859 -% 2239929 5762 224513 4603 3 0 192.168.223.134 CH - [2015-05-02 11:00:16.591534] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3769adb3.5238bd6e397ab" Vjc0MKwxQzZrjF1SrpQAAABP TLSv1.2 ECDHE-RSA-AES256-SHA384 726 1354 -% 990703 5480 964635 160 3 0 192.168.223.134 CH - [2015-05-02 11:00:17.480278] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3769adb3.5238bd6e397ab" Vjc0MawxQzZrjF1SrpUAAABU TLSv1.2 ECDHE-RSA-AES256-SHA384 758 1370 -% 837383 4959 830896 158 3 0 192.168.223.134 CH - [2015-05-02 11:00:22.147990] "GET /EMail/inbox.aspx HTTP/1.1" 200 9875 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3769adb3.5238bd6e397ab" Vjc0NqwxQzZrjF1SrpYAAABc TLSv1.2 ECDHE-RSA-AES256-SHA384 694 10479 -% 1202959 7868 188249 4550 3 0 192.168.223.134 CH - [2015-05-02 11:00:23.405438] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3769adb3.5238bd6e397ab" Vjc0N6wxQzZrjF1SrpcAAABZ TLSv1.2 ECDHE-RSA-AES256-SHA384 710 634 -% 654970 5723 647684 157 3 0 192.168.223.134 CH - [2015-05-02 11:00:23.482827] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3769adb3.5238bd6e397ab" Vjc0N6wxQzZrjF1R@4QAAAAx TLSv1.2 ECDHE-RSA-AES256-SHA384 1026 2171 -% 769494 5355 761378 169 3 0 192.168.223.134 CH - [2015-05-02 11:00:23.483225] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3769adb3.5238bd6e397ab" Vjc0N6wxQzZrjF1SrpgAAABe TLSv1.2 ECDHE-RSA-AES256-SHA384 1026 827 -% 1064327 8981 53441 159 3 0 192.168.223.134 CH - [2015-05-02 11:00:23.483460] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3769adb3.5238bd6e397ab" Vjc0N6wxQzZrjF1SrpkAAABY TLSv1.2 ECDHE-RSA-AES256-SHA384 1026 2107 -% 1106584 8877 95552 150 3 0 192.168.223.134 CH - [2015-05-02 11:01:14.173391] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7371 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3769adb3.5238bd6e397ab" Vjc0aqwxQzZrjF1SrqAAAABg TLSv1.2 ECDHE-RSA-AES256-SHA384 994 8075 -% 1078248 8265 62388 4985 3 0 192.168.223.134 CH - [2015-05-02 11:01:29.418146] "GET /EMail/message.aspx?&mailId=3927_53&folderId=3240_82&mailPos=0 HTTP/1.1" 200 11326 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3769adb3.5238bd6e397ab" Vjc0eawxQzZrjF1R@4wAAAA@ TLSv1.2 ECDHE-RSA-AES256-SHA384 1058 12197 -% 1379664 9708 344024 23804 3 0 192.168.223.134 CH - [2015-05-02 11:01:38.167765] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3927_53&folderId=3240_82&attachmentId=2&token=-146667070680170035E18 HTTP/1.1" 200 48806 "https://www.example.com/EMail/message.aspx?&mailId=3927_53&folderId=3240_82&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3769adb3.5238bd6e397ab" Vjc0gqwxQzZrjF1SrqMAAABk TLSv1.2 ECDHE-RSA-AES256-SHA384 1154 51863 -% 1181000 7158 162341 387 3 0 192.168.223.134 CH - [2015-05-02 11:01:38.696072] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0gqwxQzZrjF1SrqUAAABi TLSv1.2 ECDHE-RSA-AES256-SHA384 973 5896 22% 885817 1727 883131 194 0 0 192.168.223.134 CH - [2015-05-02 11:01:38.698893] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0gqwxQzZrjF1SrqYAAABj TLSv1.2 ECDHE-RSA-AES256-SHA384 1005 8173 23% 926080 1748 922677 160 0 0 192.168.223.134 CH - [2015-05-02 11:01:38.693275] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0gqwxQzZrjF1SrqQAAABl TLSv1.2 ECDHE-RSA-AES256-SHA384 1005 4142 -% 1008609 2085 5724 208 0 0 192.168.223.134 CH - [2015-05-02 11:01:48.705991] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0jKwxQzZrjF1R@44AAAA- TLSv1.2 ECDHE-RSA-AES256-SHA384 962 4788 23% 768817 1927 765289 185 0 0 192.168.223.134 CH - [2015-05-02 11:01:48.706130] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0jKwxQzZrjF1SrqoAAABq TLSv1.2 ECDHE-RSA-AES256-SHA384 962 8781 22% 1050544 2946 42520 259 0 0 192.168.223.134 CH - [2015-05-02 11:01:48.705087] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0jKwxQzZrjF1SrqkAAABn TLSv1.2 ECDHE-RSA-AES256-SHA384 930 928 56% 1075674 3338 71408 167 0 0 192.168.223.134 CH - [2015-05-02 11:01:48.707794] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0jKwxQzZrjF1SrqsAAABs TLSv1.2 ECDHE-RSA-AES256-SHA384 930 2208 22% 1095803 2316 92632 171 0 0 192.168.223.134 CH - [2015-05-02 11:01:48.709160] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0jKwxQzZrjF1SrqwAAABw TLSv1.2 ECDHE-RSA-AES256-SHA384 962 454 -% 1172869 2478 169462 187 0 0 192.168.223.134 CH - [2015-05-02 11:01:49.880542] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0jawxQzZrjF1Srq0AAABu TLSv1.2 ECDHE-RSA-AES256-SHA384 662 261 -% 899800 3048 895724 161 0 0 192.168.223.134 CH - [2015-05-02 11:01:51.126855] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3769adb3.5238bd6e397ab" Vjc0j6wxQzZrjF1Srq4AAABz TLSv1.2 ECDHE-RSA-AES256-SHA384 1026 646 -% 957806 5205 951080 214 3 0 192.168.223.134 CH - [2015-05-02 11:01:52.107541] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3769adb3.5238bd6e397ab" Vjc0kKwxQzZrjF1Srq8AAABx TLSv1.2 ECDHE-RSA-AES256-SHA384 694 815 75% 965139 7417 953593 448 3 0 192.168.223.134 CH - [2015-05-02 11:01:53.141431] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3769adb3.5238bd6e397ab" Vjc0kawxQzZrjF1SrrAAAABy TLSv1.2 ECDHE-RSA-AES256-SHA384 662 373 -% 1031128 5685 23305 280 3 0 192.168.223.134 CH - [2015-05-02 11:01:54.194496] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "3769adb3.5238bd6e397ab" Vjc0kqwxQzZrjF1SrrEAAAB1 TLSv1.2 ECDHE-RSA-AES256-SHA384 646 7866 -% 887476 7312 874434 3733 3 0 192.168.223.134 CH - [2015-05-02 11:01:55.244013] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "3769adb3.5238bd6e397ab" Vjc0k6wxQzZrjF1SrrQAAAB6 TLSv1.2 ECDHE-RSA-AES256-SHA384 1106 193 23% 943730 7160 931862 284 3 0 192.168.223.134 CH - [2015-05-02 11:01:55.133637] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1150 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "3769adb3.5238bd6e397ab" Vjc0k6wxQzZrjF1SrrIAAAB2 TLSv1.2 ECDHE-RSA-AES256-SHA384 774 0 12% 1055050 6350 45881 270 3 0 192.168.223.134 CH - [2015-05-02 11:01:55.242221] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "3769adb3.5238bd6e397ab" Vjc0k6wxQzZrjF1SrrMAAAB0 TLSv1.2 ECDHE-RSA-AES256-SHA384 1074 193 56% 1042900 7565 33466 201 3 0 192.168.223.134 CH - [2015-05-02 11:01:55.268806] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "3769adb3.5238bd6e397ab" Vjc0k6wxQzZrjF1SrrUAAAB4 TLSv1.2 ECDHE-RSA-AES256-SHA384 1122 193 -% 1052805 8391 42206 153 3 0 192.168.223.134 CH - [2015-05-02 11:01:55.266643] "GET /EMail/scripts/shost.js HTTP/1.1" 200 2305 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "3769adb3.5238bd6e397ab" Vjc0k6wxQzZrjF1R@5AAAAAA TLSv1.2 ECDHE-RSA-AES256-SHA384 1106 193 26% 1094476 5799 86660 359 3 0 192.168.223.134 CH - [2015-05-02 11:01:55.271107] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "3769adb3.5238bd6e397ab" Vjc0k6wxQzZrjF1SrrYAAAB5 TLSv1.2 ECDHE-RSA-AES256-SHA384 1074 193 22% 1302985 9517 291166 151 3 0 192.168.223.134 CH - [2015-05-02 11:02:04.007585] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0nKwxQzZrjF1SrrgAAAB@ TLSv1.2 ECDHE-RSA-AES256-SHA384 1026 662 -% 1135266 4239 129765 209 0 0 192.168.223.134 CH - [2015-05-02 11:02:05.175019] "GET /EMail/main.aspx HTTP/1.1" 200 3403 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0nawxQzZrjF1SrrkAAAB9 TLSv1.2 ECDHE-RSA-AES256-SHA384 566 3914 -% 882097 3194 876858 1182 0 0 192.168.223.134 CH - [2015-05-02 11:02:06.094402] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0nqwxQzZrjF1SrroAAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 582 2793 14% 945991 2432 941877 167 0 0 192.168.223.134 CH - [2015-05-02 11:02:06.166715] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0nqwxQzZrjF1R@5IAAAAC TLSv1.2 ECDHE-RSA-AES256-SHA384 898 928 56% 962153 3176 957958 185 0 0 192.168.223.134 CH - [2015-05-02 11:02:06.169061] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0nqwxQzZrjF1SrrsAAAB- TLSv1.2 ECDHE-RSA-AES256-SHA384 898 2208 22% 1075501 2362 72025 215 0 0 192.168.223.134 CH - [2015-05-02 11:02:06.175204] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0nqwxQzZrjF1Srr0AAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 930 4485 23% 1072198 1690 68432 313 0 0 192.168.223.134 CH - [2015-05-02 11:02:06.171490] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0nqwxQzZrjF1SrrwAAAB8 TLSv1.2 ECDHE-RSA-AES256-SHA384 930 8781 22% 1268816 1741 262779 161 0 0 192.168.223.134 CH - [2015-05-02 11:02:07.525969] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0n6wxQzZrjF1Srr4AAABF TLSv1.2 ECDHE-RSA-AES256-SHA384 518 4234 -% 1034489 2101 25590 6231 0 0 192.168.223.134 CH - [2015-05-02 11:02:07.534510] "GET /EMail/overview.aspx HTTP/1.1" 200 5302 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0n6wxQzZrjF1Srr8AAABA TLSv1.2 ECDHE-RSA-AES256-SHA384 518 5818 -% 1658603 1860 654080 1809 0 0 192.168.223.134 CH - [2015-05-02 11:02:08.610175] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0oKwxQzZrjF1SrsEAAABB TLSv1.2 ECDHE-RSA-AES256-SHA384 582 2575 14% 779195 3455 774329 190 0 0 192.168.223.134 CH - [2015-05-02 11:02:07.534510] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0n6wxQzZrjF1SrsAAAABG TLSv1.2 ECDHE-RSA-AES256-SHA384 534 9666 -% 1949927 4307 938868 4502 0 0 192.168.223.134 CH - [2015-05-02 11:02:08.717293] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0oKwxQzZrjF1SrsQAAABH TLSv1.2 ECDHE-RSA-AES256-SHA384 930 454 -% 876029 2881 872416 200 0 0 192.168.223.134 CH - [2015-05-02 11:02:08.611028] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0oKwxQzZrjF1SrsIAAABK TLSv1.2 ECDHE-RSA-AES256-SHA384 582 735 56% 1086701 3482 82162 202 0 0 192.168.223.134 CH - [2015-05-02 11:02:08.610599] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0oKwxQzZrjF1R@5QAAAAF TLSv1.2 ECDHE-RSA-AES256-SHA384 582 2015 22% 1179693 3497 174979 153 0 0 192.168.223.134 CH - [2015-05-02 11:02:08.715468] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7239 "https://www.example.com/EMail/header.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0oKwxQzZrjF1SrsMAAAB3 TLSv1.2 ECDHE-RSA-AES256-SHA384 930 8829 22% 1144447 2854 137646 165 0 0 192.168.223.134 CH - [2015-05-02 11:02:09.244064] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0oawxQzZrjF1SrsUAAABM TLSv1.2 ECDHE-RSA-AES256-SHA384 534 1354 -% 833761 2042 830681 298 0 0 192.168.223.134 CH - [2015-05-02 11:02:09.535217] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0oawxQzZrjF1SrsYAAABT TLSv1.2 ECDHE-RSA-AES256-SHA384 582 1370 -% 969306 3315 965000 163 0 0 192.168.223.134 CH - [2015-05-02 11:02:09.942581] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0oawxQzZrjF1SrscAAABL TLSv1.2 ECDHE-RSA-AES256-SHA384 630 261 -% 856932 2279 853938 156 0 0 192.168.223.134 CH - [2015-05-02 11:02:13.252668] "GET /EMail/inbox.aspx HTTP/1.1" 200 9867 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0pawxQzZrjF1SrsgAAABI TLSv1.2 ECDHE-RSA-AES256-SHA384 518 10463 -% 1003097 2911 995787 3491 0 0 192.168.223.134 CH - [2015-05-02 11:02:14.354449] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0pqwxQzZrjF1SrssAAABO TLSv1.2 ECDHE-RSA-AES256-SHA384 582 735 56% 927593 2114 924716 165 0 0 192.168.223.134 CH - [2015-05-02 11:02:14.355759] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0pqwxQzZrjF1SrswAAABS TLSv1.2 ECDHE-RSA-AES256-SHA384 534 634 -% 936519 1998 933572 161 0 0 192.168.223.134 CH - [2015-05-02 11:02:14.353768] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0pqwxQzZrjF1SrskAAABR TLSv1.2 ECDHE-RSA-AES256-SHA384 582 2015 22% 956051 2132 953006 115 0 0 192.168.223.134 CH - [2015-05-02 11:02:14.354229] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0pqwxQzZrjF1SrsoAAABJ TLSv1.2 ECDHE-RSA-AES256-SHA384 582 2575 14% 966726 2218 963327 132 0 0 192.168.223.134 CH - [2015-05-02 11:02:14.355736] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0pqwxQzZrjF1R@5UAAAAD TLSv1.2 ECDHE-RSA-AES256-SHA384 614 8588 22% 1048679 1749 43636 156 0 0 192.168.223.134 CH - [2015-05-02 11:02:14.358476] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0pqwxQzZrjF1Srs0AAABP TLSv1.2 ECDHE-RSA-AES256-SHA384 534 634 -% 1257943 1976 255202 217 0 0 192.168.223.134 CH - [2015-05-02 11:02:15.561015] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0p6wxQzZrjF1Srs8AAABU TLSv1.2 ECDHE-RSA-AES256-SHA384 850 2171 -% 827528 2251 824430 204 0 0 192.168.223.134 CH - [2015-05-02 11:02:21.596518] "GET /EMail/message.aspx?&mailId=3927_53&folderId=3240_82&mailPos=0 HTTP/1.1" 200 11320 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0rawxQzZrjF1SrtAAAABZ TLSv1.2 ECDHE-RSA-AES256-SHA384 866 12112 -% 1328356 4940 297406 25074 0 0 192.168.223.134 CH - [2015-05-02 11:02:23.073047] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/message.aspx?&mailId=3927_53&folderId=3240_82&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0r6wxQzZrjF1SrtMAAABN TLSv1.2 ECDHE-RSA-AES256-SHA384 946 928 56% 797654 3326 793287 193 0 0 192.168.223.134 CH - [2015-05-02 11:02:22.981462] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/message.aspx?&mailId=3927_53&folderId=3240_82&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0rqwxQzZrjF1SrtEAAABe TLSv1.2 ECDHE-RSA-AES256-SHA384 630 2793 14% 963599 2578 959349 141 0 0 192.168.223.134 CH - [2015-05-02 11:02:23.071890] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/message.aspx?&mailId=3927_53&folderId=3240_82&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0r6wxQzZrjF1R@5cAAAAJ TLSv1.2 ECDHE-RSA-AES256-SHA384 946 2208 22% 990877 3121 986751 159 0 0 192.168.223.134 CH - [2015-05-02 11:02:23.072165] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7239 "https://www.example.com/EMail/message.aspx?&mailId=3927_53&folderId=3240_82&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0r6wxQzZrjF1SrtIAAABY TLSv1.2 ECDHE-RSA-AES256-SHA384 978 8829 22% 994844 1938 988832 130 0 0 192.168.223.134 CH - [2015-05-02 11:02:25.899007] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3927_53&folderId=3240_82&attachmentId=2&token=-50935933211487918E18 HTTP/1.1" 200 48806 "https://www.example.com/EMail/message.aspx?&mailId=3927_53&folderId=3240_82&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc0sawxQzZrjF1SrtUAAABa TLSv1.2 ECDHE-RSA-AES256-SHA384 662 51909 -% 1102544 5538 77412 169 0 0 192.168.192.35 CH - [2015-05-02 11:03:16.709350] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" Vjc05KwxQzZrjF1Srt8AAABo TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 849 11799 -% 861485 3855 853261 3611 0 0 192.168.192.35 CH - [2015-05-02 11:03:23.661055] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" Vjc066wxQzZrjF1SruEAAABk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1263 564 -% 1039242 5056 33132 260 0 0 192.168.192.35 CH - [2015-05-02 11:03:24.723804] "GET /EMail/main.aspx HTTP/1.1" 200 3383 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" Vjc07KwxQzZrjF1SruIAAABi TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 3799 -% 1123743 1966 119457 1727 0 0 192.168.192.35 CH - [2015-05-02 11:03:25.958261] "GET /EMail/overview.aspx HTTP/1.1" 200 5287 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" Vjc07awxQzZrjF1R@5kAAAAK TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1059 5852 -% 1020470 2858 15155 1737 0 0 192.168.192.35 CH - [2015-05-02 11:03:25.932595] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" Vjc07awxQzZrjF1SruMAAABj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 4128 -% 1127398 1928 118447 6507 0 0 192.168.192.35 CH - [2015-05-02 11:03:25.964006] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" Vjc07awxQzZrjF1SruQAAABl TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1085 9322 -% 1998927 3878 985922 4687 0 0 192.168.192.35 CH - [2015-05-02 11:03:29.121578] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" Vjc08awxQzZrjF1SrucAAABV TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 511 409 -% 1003392 2326 393 143 0 0 192.168.192.35 CH - [2015-05-02 11:03:30.181908] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" Vjc08qwxQzZrjF1SrugAAABq TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 458 318 -% 1147550 2915 143847 210 0 0 192.168.192.35 CH - [2015-05-02 11:03:31.342017] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" Vjc086wxQzZrjF1SrukAAABn TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 440 7758 -% 734114 4187 726836 2480 0 0 192.168.223.134 CH - [2015-05-02 11:04:30.772968] "GET /EMail/images/active.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc1LqwxQzZrjF1SrvQAAABD TLSv1.2 ECDHE-RSA-AES256-SHA384 946 454 -% 1065609 2141 62768 154 0 0 192.168.223.134 CH - [2015-05-02 11:04:31.252402] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc1L6wxQzZrjF1SrvUAAAB4 TLSv1.2 ECDHE-RSA-AES256-SHA384 850 646 -% 910326 3856 905507 269 0 0 192.168.223.134 CH - [2015-05-02 11:04:32.184641] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc1MKwxQzZrjF1SrvYAAAB5 TLSv1.2 ECDHE-RSA-AES256-SHA384 518 815 75% 905973 2552 902411 246 0 0 192.168.223.134 CH - [2015-05-02 11:04:33.154087] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc1MawxQzZrjF1SrvcAAABr TLSv1.2 ECDHE-RSA-AES256-SHA384 486 373 -% 758499 2407 755266 222 0 0 192.168.223.134 CH - [2015-05-02 11:04:33.933884] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc1MawxQzZrjF1SrvgAAAB@ TLSv1.2 ECDHE-RSA-AES256-SHA384 454 7866 -% 973110 2698 967487 2236 0 0 192.168.223.134 CH - [2015-05-02 11:04:34.963146] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc1MqwxQzZrjF1SrvoAAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 582 2015 22% 1111683 1821 108420 249 0 0 192.168.223.134 CH - [2015-05-02 11:04:34.960007] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc1MqwxQzZrjF1SrvkAAAB9 TLSv1.2 ECDHE-RSA-AES256-SHA384 582 2793 14% 1116076 2832 111739 111 0 0 192.168.223.134 CH - [2015-05-02 11:04:35.036722] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc1M6wxQzZrjF1SrvsAAAB- TLSv1.2 ECDHE-RSA-AES256-SHA384 930 8781 22% 1178916 3345 171615 221 0 0 192.168.223.134 CH - [2015-05-02 11:04:35.077878] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc1M6wxQzZrjF1R@5wAAAAO TLSv1.2 ECDHE-RSA-AES256-SHA384 898 928 56% 1203657 1794 201110 191 0 0 192.168.223.134 CH - [2015-05-02 11:04:35.046840] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc1M6wxQzZrjF1SrvwAAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 930 4788 23% 1235389 3009 230772 130 0 0 192.168.223.134 CH - [2015-05-02 11:04:35.066459] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc1M6wxQzZrjF1Srv0AAAB8 TLSv1.2 ECDHE-RSA-AES256-SHA384 930 454 -% 1280302 2255 276993 235 0 0 192.168.223.134 CH - [2015-05-02 11:04:36.352627] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1ab475a0.5238bdc6c3268" Vjc1NKwxQzZrjF1Srv4AAABF TLSv1.2 ECDHE-RSA-AES256-SHA384 630 261 -% 540590 2344 537411 197 0 0 192.168.32.7 CH - [2015-05-02 11:04:40.486888] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc1OKwxQzZrjF1SrwEAAABG TLSv1.2 ECDHE-RSA-AES128-SHA256 819 13371 -% 1803558 2439 794351 2763 0 0 192.168.32.7 CH - [2015-05-02 11:04:40.463847] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 24179 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc1OKwxQzZrjF1SrwAAAABB TLSv1.2 ECDHE-RSA-AES128-SHA256 835 28775 -% 1863860 2617 759106 7360 0 0 192.168.32.7 CH - [2015-05-02 11:04:44.068661] "GET /EMail/message.aspx?&mailId=3928_3&folderId=3481_21&mailPos=2 HTTP/1.1" 200 11489 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc1PKwxQzZrjF1SrwIAAABH TLSv1.2 ECDHE-RSA-AES128-SHA256 518 12100 -% 1305288 3212 281516 19707 0 0 192.168.32.7 CH - [2015-05-02 11:04:47.285755] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3928_3&folderId=3481_21&attachmentId=2&token=-80534103644809933E18 HTTP/1.1" 200 49326 "https://www.example.com/EMail/message.aspx?&mailId=3928_3&folderId=3481_21&mailPos=2" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc1P6wxQzZrjF1SrwMAAABK TLSv1.2 ECDHE-RSA-AES128-SHA256 614 51824 -% 1068478 4852 44589 222 0 0 192.168.32.7 CH - [2015-05-02 11:05:11.013211] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 24171 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc1V6wxQzZrjF1SrwcAAABI TLSv1.2 ECDHE-RSA-AES128-SHA256 760 25087 -% 1618667 2298 502077 12424 0 0 192.168.32.7 CH - [2015-05-02 11:05:11.042766] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc1V6wxQzZrjF1SrwgAAABc TLSv1.2 ECDHE-RSA-AES128-SHA256 776 9683 -% 1943480 3931 932972 2799 0 0 192.168.32.7 CH - [2015-05-02 11:05:14.929295] "GET /EMail/message.aspx?&mailId=3927_4&folderId=3481_21&mailPos=3 HTTP/1.1" 200 11487 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc1WqwxQzZrjF1SrwkAAABO TLSv1.2 ECDHE-RSA-AES128-SHA256 518 12100 -% 1269712 4937 238288 25252 0 0 192.168.32.7 CH - [2015-05-02 11:05:17.917915] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3927_4&folderId=3481_21&attachmentId=2&token=-43004808036889882E18 HTTP/1.1" 200 48416 "https://www.example.com/EMail/message.aspx?&mailId=3927_4&folderId=3481_21&mailPos=3" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc1XawxQzZrjF1SrwoAAABS TLSv1.2 ECDHE-RSA-AES128-SHA256 614 50965 -% 1107261 6297 82674 187 0 0 192.168.32.7 CH - [2015-05-02 11:05:49.901681] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc1fawxQzZrjF1SrxMAAABd TLSv1.2 ECDHE-RSA-AES128-SHA256 776 9683 -% 1134809 2546 125590 2917 0 0 192.168.32.7 CH - [2015-05-02 11:05:49.880150] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 24163 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc1fawxQzZrjF1SrxIAAABY TLSv1.2 ECDHE-RSA-AES128-SHA256 760 25071 -% 1533326 2663 420530 11221 0 0 192.168.212.1 CH - [2015-05-02 11:05:51.612048] "GET /EMail/images/icon10.ico HTTP/1.1" 304 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2bf75eb9.5238bec127490" Vjc1f6wxQzZrjF1R@6QAAAAW TLSv1 ECDHE-RSA-AES256-SHA 816 4204 -% 924049 3805 917905 243 3 0 192.168.32.7 CH - [2015-05-02 11:05:53.645646] "GET /EMail/message.aspx?&mailId=3926_2&folderId=3481_21&mailPos=4 HTTP/1.1" 200 11488 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc1gawxQzZrjF1SrxQAAABC TLSv1.2 ECDHE-RSA-AES128-SHA256 518 12100 -% 1450198 5141 425594 18337 0 0 192.168.32.7 CH - [2015-05-02 11:05:57.699659] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3926_2&folderId=3481_21&attachmentId=2&token=-49027198583605524E18 HTTP/1.1" 200 48717 "https://www.example.com/EMail/message.aspx?&mailId=3926_2&folderId=3481_21&mailPos=4" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc1hawxQzZrjF1SrxUAAABa TLSv1.2 ECDHE-RSA-AES128-SHA256 614 51269 -% 1406821 5273 381945 210 0 0 192.168.212.1 CH - [2015-05-02 11:05:58.845607] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9b4101d.5238bebd3071f" Vjc1hqwxQzZrjF1SrxYAAABh TLSv1 ECDHE-RSA-AES256-SHA 1016 4257 -% 1058413 5211 52329 183 0 0 192.168.212.1 CH - [2015-05-02 11:06:01.189960] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9b4101d.5238bebd3071f" Vjc1iawxQzZrjF1R@6UAAAAa TLSv1 ECDHE-RSA-AES256-SHA 824 7990 -% 1333611 2124 321360 9565 0 0 192.168.212.1 CH - [2015-05-02 11:06:01.191194] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9b4101d.5238bebd3071f" Vjc1iawxQzZrjF1SrxkAAABQ TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 2267221 3665 254630 4873 0 0 192.168.212.1 CH - [2015-05-02 11:06:03.240885] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9b4101d.5238bebd3071f" Vjc1i6wxQzZrjF1SrxoAAABX TLSv1 ECDHE-RSA-AES256-SHA 952 4049 -% 1052014 3199 47979 202 0 0 192.168.212.1 CH - [2015-05-02 11:06:04.690962] "GET /EMail/inbox.aspx HTTP/1.1" 200 8591 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9b4101d.5238bebd3071f" Vjc1jKwxQzZrjF1SrxsAAABk TLSv1 ECDHE-RSA-AES256-SHA 840 12907 -% 1066895 3389 57798 4442 0 0 192.168.186.76 CH - [2015-05-02 11:06:06.895182] "GET /EMail/overview.aspx HTTP/1.1" 200 5537 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjc1jqwxQzZrjF1SrxwAAABo TLSv1.2 ECDHE-RSA-AES256-SHA384 1229 10134 -% 1243860 4609 236089 1756 3 0 192.168.212.1 CH - [2015-05-02 11:06:08.142440] "GET /EMail/message.aspx?&mailId=3927_80&folderId=1001_9&mailPos=0 HTTP/1.1" 200 11217 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9b4101d.5238bebd3071f" Vjc1kKwxQzZrjF1Srx0AAABv TLSv1 ECDHE-RSA-AES256-SHA 872 15531 -% 1295261 5359 261751 27186 0 0 192.168.212.1 CH - [2015-05-02 11:06:11.841958] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3927_80&folderId=1001_9&attachmentId=2&token=-36727262649312082E18 HTTP/1.1" 200 55093 "https://www.example.com/EMail/message.aspx?&mailId=3927_80&folderId=1001_9&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9b4101d.5238bebd3071f" Vjc1k6wxQzZrjF1R@6cAAAAb TLSv1 ECDHE-RSA-AES256-SHA 984 60650 -% 1157906 4288 129098 253 0 0 192.168.32.7 CH - [2015-05-02 11:06:19.109937] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc1m6wxQzZrjF1SryAAAABV TLSv1.2 ECDHE-RSA-AES128-SHA256 776 9683 -% 1480329 3916 467247 4898 0 0 192.168.32.7 CH - [2015-05-02 11:06:19.062682] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 24156 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc1m6wxQzZrjF1Srx8AAABl TLSv1.2 ECDHE-RSA-AES128-SHA256 760 25071 -% 1611563 2987 436228 11335 0 0 192.168.186.76 CH - [2015-05-02 11:06:19.489947] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3927_81&folderId=947_65&attachmentId=3&token=-188102408865215002E18 HTTP/1.1" 200 368413 "https://www.example.com/EMail/message.aspx?&mailId=3927_81&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjc1m6wxQzZrjF1SryEAAABp TLSv1.2 ECDHE-RSA-AES256-SHA384 1399 386141 -% 2243907 10423 130961 212 3 0 192.168.32.7 CH - [2015-05-02 11:06:22.711732] "GET /EMail/message.aspx?&mailId=3926_1&folderId=3481_21&mailPos=5 HTTP/1.1" 200 11489 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc1nqwxQzZrjF1SryMAAABn TLSv1.2 ECDHE-RSA-AES128-SHA256 518 12100 -% 1281279 4261 254618 20783 0 0 192.168.32.7 CH - [2015-05-02 11:06:26.695502] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3926_1&folderId=3481_21&attachmentId=2&token=-81428478865238682E18 HTTP/1.1" 200 48583 "https://www.example.com/EMail/message.aspx?&mailId=3926_1&folderId=3481_21&mailPos=5" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc1oqwxQzZrjF1SryQAAABs TLSv1.2 ECDHE-RSA-AES128-SHA256 614 51125 -% 1068784 7070 42287 197 0 0 192.168.186.76 CH - [2015-05-02 11:06:40.480441] "GET /EMail/newMessage.aspx?action=reply&mailId=3927_81&folderId=947_65&showPics=false HTTP/1.1" 200 25599 "https://www.example.com/EMail/message.aspx?&mailId=3927_81&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjc1sKwxQzZrjF1SrygAAABx TLSv1.2 ECDHE-RSA-AES256-SHA384 1292 26660 -% 1152800 5815 85036 48341 6 3 192.168.186.76 CH - [2015-05-02 11:06:41.731453] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3927_81&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjc1sawxQzZrjF1SrykAAABy TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 1072493 4357 58957 7960 3 0 192.168.32.7 CH - [2015-05-02 11:06:47.759220] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc1t6wxQzZrjF1SrysAAAB2 TLSv1.2 ECDHE-RSA-AES128-SHA256 776 9683 -% 1541982 4027 529307 4504 0 0 192.168.32.7 CH - [2015-05-02 11:06:47.733467] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 24147 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc1t6wxQzZrjF1SryoAAAB6 TLSv1.2 ECDHE-RSA-AES128-SHA256 760 25055 -% 1630935 3512 515622 8240 0 0 192.168.32.7 CH - [2015-05-02 11:06:51.027261] "GET /EMail/message.aspx?&mailId=3924_11&folderId=3481_21&mailPos=6 HTTP/1.1" 200 11498 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc1u6wxQzZrjF1Sry4AAAB4 TLSv1.2 ECDHE-RSA-AES128-SHA256 518 12116 -% 1448428 5720 406584 34662 0 0 192.168.32.7 CH - [2015-05-02 11:06:55.734858] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3924_11&folderId=3481_21&attachmentId=2&token=-42872621391974154E18 HTTP/1.1" 200 48847 "https://www.example.com/EMail/message.aspx?&mailId=3924_11&folderId=3481_21&mailPos=6" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc1v6wxQzZrjF1Sry8AAAB5 TLSv1.2 ECDHE-RSA-AES128-SHA256 614 51190 -% 1024221 6607 8295 171 0 0 192.168.186.76 CH - [2015-05-02 11:06:57.920144] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjc1wawxQzZrjF1R@6oAAAAh TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1819176 4675 805004 4262 3 0 192.168.186.76 CH - [2015-05-02 11:07:00.866201] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjc1xKwxQzZrjF1R@6sAAAAg TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1249616 8413 239387 192 3 0 192.168.186.76 CH - [2015-05-02 11:07:02.129736] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 9564 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjc1xqwxQzZrjF1R@6wAAAAj TLSv1.2 ECDHE-RSA-AES256-SHA384 726 10159 -% 1168318 4997 156206 4998 3 0 192.168.212.1 CH - [2015-05-02 11:07:01.793484] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9b4101d.5238bebd3071f" Vjc1xawxQzZrjF1SrzIAAAB7 TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1809562 2797 799946 2887 0 0 192.168.186.76 CH - [2015-05-02 11:07:04.279668] "GET /EMail/message.aspx?&mailId=3928_88&folderId=947_65&mailPos=0 HTTP/1.1" 200 16468 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjc1yKwxQzZrjF1R@60AAAAl TLSv1.2 ECDHE-RSA-AES256-SHA384 726 17225 -% 1222431 9274 181373 29114 3 0 192.168.212.1 CH - [2015-05-02 11:07:09.097635] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9b4101d.5238bebd3071f" Vjc1zawxQzZrjF1SrzMAAABE TLSv1 ECDHE-RSA-AES256-SHA 840 4523 75% 959006 2190 955522 440 0 0 192.168.212.1 CH - [2015-05-02 11:07:10.258599] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "2bf75eb9.5238bec127490" Vjc1zqwxQzZrjF1R@64AAAAi TLSv1 ECDHE-RSA-AES256-SHA 773 1707 -% 7162 4721 74 156 3 0 192.168.212.1 CH - [2015-05-02 11:07:11.446291] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9b4101d.5238bebd3071f" Vjc1z6wxQzZrjF1SrzYAAABG TLSv1 ECDHE-RSA-AES256-SHA 776 11622 -% 914097 2160 907915 3347 0 0 192.168.212.1 CH - [2015-05-02 11:07:12.597316] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9b4101d.5238bebd3071f" Vjc10KwxQzZrjF1SrzcAAABH TLSv1 ECDHE-RSA-AES256-SHA 904 4049 -% 1065177 2183 62166 218 0 0 192.168.186.76 CH - [2015-05-02 11:07:13.472604] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3928_88&folderId=947_65&attachmentId=3&token=-40675985485921731E18 HTTP/1.1" 200 648203 "https://www.example.com/EMail/message.aspx?&mailId=3928_88&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjc10awxQzZrjF1SrzgAAABK TLSv1.2 ECDHE-RSA-AES256-SHA384 1324 683925 -% 1339088 10276 35006 407 3 0 192.168.32.7 CH - [2015-05-02 11:07:19.428561] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc116wxQzZrjF1SrzoAAABL TLSv1.2 ECDHE-RSA-AES128-SHA256 776 9683 -% 1697774 2692 686383 4475 0 0 192.168.32.7 CH - [2015-05-02 11:07:19.420626] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 24139 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc116wxQzZrjF1SrzkAAABM TLSv1.2 ECDHE-RSA-AES128-SHA256 760 25055 -% 1989090 2769 873278 12088 0 0 192.168.32.7 CH - [2015-05-02 11:07:23.018751] "GET /EMail/message.aspx?&mailId=3925_4&folderId=3481_21&mailPos=7 HTTP/1.1" 200 11488 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc126wxQzZrjF1Srz0AAABO TLSv1.2 ECDHE-RSA-AES128-SHA256 518 12100 -% 1432376 7816 389817 33344 0 0 192.168.186.76 CH - [2015-05-02 11:07:24.793130] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5879 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3928_88&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjc13KwxQzZrjF1Srz4AAABR TLSv1.2 ECDHE-RSA-AES256-SHA384 1303 13742 -% 988857 4105 0 0 3 0 192.168.32.7 CH - [2015-05-02 11:07:29.649014] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3925_4&folderId=3481_21&attachmentId=2&token=-12315687151362072E17 HTTP/1.1" 200 90174 "https://www.example.com/EMail/message.aspx?&mailId=3925_4&folderId=3481_21&mailPos=7" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc14awxQzZrjF1Srz8AAABJ TLSv1.2 ECDHE-RSA-AES128-SHA256 904 94786 -% 1148704 6532 104326 221 0 0 192.168.186.76 CH - [2015-05-02 11:07:37.416099] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3928_88&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjc16awxQzZrjF1Sr0IAAABU TLSv1.2 ECDHE-RSA-AES256-SHA384 9713 630 -% 1722874 567575 134965 214 71 0 192.168.186.76 CH - [2015-05-02 11:07:39.150153] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3928_88&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjc166wxQzZrjF1Sr0MAAABZ TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 956851 9963 938499 6715 3 0 192.168.186.76 CH - [2015-05-02 11:07:41.671859] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9563 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjc17awxQzZrjF1Sr0UAAABe TLSv1.2 ECDHE-RSA-AES256-SHA384 662 10159 -% 1341673 4390 332628 3067 3 0 192.168.32.7 CH - [2015-05-02 11:08:14.361232] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc2DqwxQzZrjF1R@7QAAAAr TLSv1.2 ECDHE-RSA-AES128-SHA256 776 9683 -% 1363976 2665 354651 2760 0 0 192.168.32.7 CH - [2015-05-02 11:08:14.343911] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 24131 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc2DqwxQzZrjF1R@7MAAAAo TLSv1.2 ECDHE-RSA-AES128-SHA256 760 25039 -% 1923930 3239 840680 7428 0 0 192.168.32.7 CH - [2015-05-02 11:08:18.254382] "GET /EMail/message.aspx?&mailId=3924_4&folderId=3481_21&mailPos=8 HTTP/1.1" 200 11488 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc2EqwxQzZrjF1R@7UAAAAt TLSv1.2 ECDHE-RSA-AES128-SHA256 518 12100 -% 973220 4937 946883 19856 0 0 192.168.32.7 CH - [2015-05-02 11:08:21.833090] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3924_4&folderId=3481_21&attachmentId=2&token=-66077990563110216E18 HTTP/1.1" 200 60021 "https://www.example.com/EMail/message.aspx?&mailId=3924_4&folderId=3481_21&mailPos=8" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc2FawxQzZrjF1R@7YAAAAs TLSv1.2 ECDHE-RSA-AES128-SHA256 614 63170 -% 1296267 6661 264494 194 0 0 192.168.186.76 CH - [2015-05-02 11:08:30.914994] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3928_87&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjc2HqwxQzZrjF1Sr0sAAABg TLSv1.2 ECDHE-RSA-AES256-SHA384 9436 4545 -% 2000644 555502 420400 169 71 0 192.168.186.76 CH - [2015-05-02 11:08:32.928801] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3928_87&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjc2IKwxQzZrjF1Sr00AAABQ TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 984408 7235 966003 9560 3 0 192.168.186.76 CH - [2015-05-02 11:08:34.574242] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8385 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjc2IqwxQzZrjF1Sr04AAABb TLSv1.2 ECDHE-RSA-AES256-SHA384 662 8991 -% 1281170 4100 270936 4037 3 0 192.168.186.76 CH - [2015-05-02 11:08:34.575678] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjc2IqwxQzZrjF1Sr08AAABh TLSv1.2 ECDHE-RSA-AES256-SHA384 1261 13742 -% 1418690 4899 405671 2848 3 0 192.168.186.76 CH - [2015-05-02 11:08:37.871361] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjc2JawxQzZrjF1Sr1AAAABX TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1182522 8123 172607 232 3 0 192.168.186.76 CH - [2015-05-02 11:08:39.090644] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7292 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjc2J6wxQzZrjF1Sr1EAAABm TLSv1.2 ECDHE-RSA-AES256-SHA384 726 7802 -% 1085601 5116 73959 3778 3 0 192.168.32.7 CH - [2015-05-02 11:08:40.893321] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc2KKwxQzZrjF1Sr1MAAABi TLSv1.2 ECDHE-RSA-AES128-SHA256 776 9683 -% 1623322 4814 609285 4637 0 0 192.168.32.7 CH - [2015-05-02 11:08:40.860346] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 24123 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc2KKwxQzZrjF1Sr1IAAABk TLSv1.2 ECDHE-RSA-AES128-SHA256 760 25039 -% 1782315 3828 560747 11041 0 0 192.168.32.7 CH - [2015-05-02 11:08:44.507968] "GET /EMail/message.aspx?&mailId=3924_3&folderId=3481_21&mailPos=9 HTTP/1.1" 200 11489 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc2LKwxQzZrjF1Sr1YAAABj TLSv1.2 ECDHE-RSA-AES128-SHA256 518 12100 -% 1234567 3973 201284 27902 0 0 192.168.32.7 CH - [2015-05-02 11:08:48.041940] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3924_3&folderId=3481_21&attachmentId=2&token=-53684569699357624E18 HTTP/1.1" 200 60744 "https://www.example.com/EMail/message.aspx?&mailId=3924_3&folderId=3481_21&mailPos=9" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc2MKwxQzZrjF1Sr1cAAABt TLSv1.2 ECDHE-RSA-AES128-SHA256 614 63890 -% 1054295 5739 22791 225 0 0 192.168.32.7 CH - [2015-05-02 11:09:05.068606] "GET /EMail/newMessage.aspx?msg=new HTTP/1.1" 200 12046 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc2QawxQzZrjF1Sr1wAAABn TLSv1.2 ECDHE-RSA-AES128-SHA256 776 12837 -% 1230924 2488 196901 29249 3 3 192.168.32.7 CH - [2015-05-02 11:09:05.097244] "GET /EMail/tree.aspx?sNode-sharedTree=treeNewMsg HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc2QawxQzZrjF1R@7gAAAAu TLSv1.2 ECDHE-RSA-AES128-SHA256 776 9683 -% 1457212 2471 444848 5225 0 0 192.168.32.7 CH - [2015-05-02 11:09:06.415096] "GET /EMail/scripts/tinymce/tinymce.min.js HTTP/1.1" 200 66050 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "f4480e48.5238bcdce268e" Vjc2QqwxQzZrjF1Sr10AAABs TLSv1.2 ECDHE-RSA-AES128-SHA256 502 14358 35% 964692 3451 937413 174 0 0 192.168.32.7 CH - [2015-05-02 11:09:07.358272] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 24115 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc2Q6wxQzZrjF1R@7kAAAAv TLSv1.2 ECDHE-RSA-AES128-SHA256 470 24846 -% 1235572 4781 122488 8127 0 0 192.168.32.7 CH - [2015-05-02 11:09:07.409616] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc2Q6wxQzZrjF1R@7oAAAAw TLSv1.2 ECDHE-RSA-AES128-SHA256 776 9683 -% 1466735 3745 454330 4601 0 0 192.168.32.7 CH - [2015-05-02 11:09:10.102170] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 24114 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc2RqwxQzZrjF1R@7sAAAAy TLSv1.2 ECDHE-RSA-AES128-SHA256 470 24846 -% 1555784 4940 421678 9645 0 0 192.168.32.7 CH - [2015-05-02 11:09:10.125609] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc2RqwxQzZrjF1R@7wAAAAz TLSv1.2 ECDHE-RSA-AES128-SHA256 486 9506 -% 1690521 4609 678965 2977 0 0 192.168.32.7 CH - [2015-05-02 11:09:12.051077] "GET /EMail/message.aspx?&mailId=3925_1&folderId=3481_21&mailPos=10 HTTP/1.1" 200 11489 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc2SKwxQzZrjF1R@74AAAA1 TLSv1.2 ECDHE-RSA-AES128-SHA256 518 12100 -% 1235113 3238 206956 23684 0 0 192.168.32.7 CH - [2015-05-02 11:09:14.844467] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3925_1&folderId=3481_21&attachmentId=2&token=-78047382430403901E18 HTTP/1.1" 200 61020 "https://www.example.com/EMail/message.aspx?&mailId=3925_1&folderId=3481_21&mailPos=10" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc2SqwxQzZrjF1R@78AAAAx TLSv1.2 ECDHE-RSA-AES128-SHA256 614 64162 -% 1121764 6741 90707 220 0 0 192.168.32.7 CH - [2015-05-02 11:09:32.396930] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc2XKwxQzZrjF1Sr2MAAAB2 TLSv1.2 ECDHE-RSA-AES128-SHA256 776 9683 -% 1640510 3803 627971 4413 0 0 192.168.32.7 CH - [2015-05-02 11:09:32.363044] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 24108 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc2XKwxQzZrjF1Sr2IAAABy TLSv1.2 ECDHE-RSA-AES128-SHA256 760 25023 -% 1697433 2732 576222 7825 0 0 192.168.32.7 CH - [2015-05-02 11:09:36.022950] "GET /EMail/message.aspx?&mailId=3924_2&folderId=3481_21&mailPos=11 HTTP/1.1" 200 11490 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc2YKwxQzZrjF1Sr2QAAAB0 TLSv1.2 ECDHE-RSA-AES128-SHA256 518 12100 -% 1277244 5532 238167 31717 0 0 192.168.32.7 CH - [2015-05-02 11:09:40.463767] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3924_2&folderId=3481_21&attachmentId=2&token=-58212830449506079E18 HTTP/1.1" 200 81898 "https://www.example.com/EMail/message.aspx?&mailId=3924_2&folderId=3481_21&mailPos=11" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc2ZKwxQzZrjF1Sr2UAAABD TLSv1.2 ECDHE-RSA-AES128-SHA256 614 85838 -% 1144492 4002 107001 195 0 0 192.168.32.7 CH - [2015-05-02 11:09:57.407830] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 24099 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f4480e48.5238bcdce268e" Vjc2dawxQzZrjF1R@8IAAAA5 TLSv1.2 ECDHE-RSA-AES128-SHA256 835 28695 -% 1804801 3536 698586 11761 0 0 192.168.32.7 CH - [2015-05-02 11:19:22.918795] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc4qqwxQzZrjF1Sr8oAAABo TLSv1.2 ECDHE-RSA-AES128-SHA256 659 11875 -% 960566 1095 956457 2282 0 0 192.168.32.7 CH - [2015-05-02 11:19:24.173535] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc4rKwxQzZrjF1Sr8wAAABi TLSv1.2 ECDHE-RSA-AES128-SHA256 744 2144 22% 709496 3557 704911 153 0 0 192.168.32.7 CH - [2015-05-02 11:19:24.112119] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc4rKwxQzZrjF1Sr8sAAABv TLSv1.2 ECDHE-RSA-AES128-SHA256 454 2713 14% 986960 3606 981611 184 0 0 192.168.32.7 CH - [2015-05-02 11:19:24.181386] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc4rKwxQzZrjF1Sr80AAABj TLSv1.2 ECDHE-RSA-AES128-SHA256 760 4660 23% 1124874 2819 120227 209 0 0 192.168.32.7 CH - [2015-05-02 11:19:24.181763] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc4rKwxQzZrjF1Sr84AAABk TLSv1.2 ECDHE-RSA-AES128-SHA256 744 864 56% 1177226 2821 173476 198 0 0 192.168.32.7 CH - [2015-05-02 11:19:24.186950] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc4rKwxQzZrjF1Sr88AAABt TLSv1.2 ECDHE-RSA-AES128-SHA256 776 1931 -% 1231654 2851 227813 152 0 0 192.168.32.7 CH - [2015-05-02 11:19:24.186975] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc4rKwxQzZrjF1Sr9AAAABq TLSv1.2 ECDHE-RSA-AES128-SHA256 760 8573 22% 1323430 3719 315114 235 0 0 192.168.32.7 CH - [2015-05-02 11:19:25.612648] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc4rawxQzZrjF1Sr9EAAABV TLSv1.2 ECDHE-RSA-AES128-SHA256 486 1866 -% 933600 2046 930846 159 0 0 192.168.32.7 CH - [2015-05-02 11:19:37.705527] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc4uawxQzZrjF1Sr9MAAABp TLSv1.2 ECDHE-RSA-AES128-SHA256 920 630 -% 1031171 4492 25817 240 0 0 192.168.32.7 CH - [2015-05-02 11:19:38.761689] "GET /EMail/main.aspx HTTP/1.1" 200 3407 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc4uqwxQzZrjF1Sr9QAAABn TLSv1.2 ECDHE-RSA-AES128-SHA256 486 3882 -% 895815 3109 887965 3246 0 0 192.168.32.7 CH - [2015-05-02 11:19:39.753404] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc4u6wxQzZrjF1Sr9UAAABs TLSv1.2 ECDHE-RSA-AES128-SHA256 470 4202 -% 970491 2555 956509 10771 0 0 192.168.32.7 CH - [2015-05-02 11:19:39.818414] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc4u6wxQzZrjF1Sr9cAAABu TLSv1.2 ECDHE-RSA-AES128-SHA256 760 5963 -% 1459823 2943 451193 4697 0 0 192.168.32.7 CH - [2015-05-02 11:19:39.817248] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc4u6wxQzZrjF1Sr9YAAABw TLSv1.2 ECDHE-RSA-AES128-SHA256 792 9683 -% 2036648 2644 26946 3065 0 0 192.168.32.7 CH - [2015-05-02 11:19:41.342098] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc4vawxQzZrjF1Sr9oAAAB2 TLSv1.2 ECDHE-RSA-AES128-SHA256 502 1322 -% 846341 2273 843015 232 0 0 192.168.32.7 CH - [2015-05-02 11:19:42.030560] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc4vqwxQzZrjF1Sr9sAAABy TLSv1.2 ECDHE-RSA-AES128-SHA256 534 1338 -% 827670 1995 824877 185 0 0 192.168.32.7 CH - [2015-05-02 11:19:43.209456] "GET /EMail/inbox.aspx HTTP/1.1" 200 8589 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc4v6wxQzZrjF1Sr9wAAAB0 TLSv1.2 ECDHE-RSA-AES128-SHA256 470 9135 -% 1033169 2588 27052 2629 0 0 192.168.32.7 CH - [2015-05-02 11:19:44.319066] "GET /EMail/images/msgOpenedReplied.png HTTP/1.1" 200 717 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc4wKwxQzZrjF1Sr98AAAB5 TLSv1.2 ECDHE-RSA-AES128-SHA256 502 1194 -% 768436 2742 765050 169 0 0 192.168.32.7 CH - [2015-05-02 11:19:44.318118] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc4wKwxQzZrjF1Sr94AAAB4 TLSv1.2 ECDHE-RSA-AES128-SHA256 486 602 -% 888593 1817 886147 161 0 0 192.168.32.7 CH - [2015-05-02 11:19:44.316317] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc4wKwxQzZrjF1Sr90AAABD TLSv1.2 ECDHE-RSA-AES128-SHA256 486 602 -% 890626 2194 887717 106 0 0 192.168.32.7 CH - [2015-05-02 11:19:46.547298] "GET /EMail/message.aspx?&mailId=3914_1&folderId=3481_21&mailPos=0 HTTP/1.1" 200 11317 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc4wqwxQzZrjF1Sr@AAAABr TLSv1.2 ECDHE-RSA-AES128-SHA256 518 11924 -% 1186341 4777 153217 27317 0 0 192.168.32.7 CH - [2015-05-02 11:19:54.649178] "GET /EMail/inbox.aspx HTTP/1.1" 200 8589 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc4yqwxQzZrjF1R@9oAAAAP TLSv1.2 ECDHE-RSA-AES128-SHA256 760 9312 -% 1107667 3095 99213 4282 0 0 192.168.32.7 CH - [2015-05-02 11:19:54.997828] "GET /EMail/overview.aspx HTTP/1.1" 200 5301 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc4yqwxQzZrjF1Sr@EAAAB6 TLSv1.2 ECDHE-RSA-AES128-SHA256 760 5963 -% 915249 2319 909240 2880 0 0 192.168.32.7 CH - [2015-05-02 11:19:55.192145] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc4y6wxQzZrjF1Sr@IAAAB@ TLSv1.2 ECDHE-RSA-AES128-SHA256 712 8011 -% 896233 2886 890396 2366 0 0 192.168.32.7 CH - [2015-05-02 11:20:05.517332] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc41awxQzZrjF1R@9sAAAAR TLSv1.2 ECDHE-RSA-AES128-SHA256 920 630 -% 950428 5570 943996 156 0 0 192.168.32.7 CH - [2015-05-02 11:20:06.492080] "GET /EMail/main.aspx HTTP/1.1" 200 3407 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc41qwxQzZrjF1R@9wAAAAU TLSv1.2 ECDHE-RSA-AES128-SHA256 486 3882 -% 886221 3396 879877 2246 0 0 192.168.32.7 CH - [2015-05-02 11:20:07.467103] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc416wxQzZrjF1R@90AAAAX TLSv1.2 ECDHE-RSA-AES128-SHA256 470 4202 -% 1032805 3081 19535 9367 0 0 192.168.32.7 CH - [2015-05-02 11:20:07.531375] "GET /EMail/overview.aspx HTTP/1.1" 200 5302 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc416wxQzZrjF1R@94AAAAT TLSv1.2 ECDHE-RSA-AES128-SHA256 760 5963 -% 1290410 3295 284253 2032 0 0 192.168.32.7 CH - [2015-05-02 11:20:07.529712] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc416wxQzZrjF1Sr@cAAABA TLSv1.2 ECDHE-RSA-AES128-SHA256 792 9683 -% 2037368 4785 23262 4837 0 0 192.168.32.7 CH - [2015-05-02 11:20:11.295640] "GET /EMail/inbox.aspx HTTP/1.1" 200 8589 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc426wxQzZrjF1Sr@gAAABG TLSv1.2 ECDHE-RSA-AES128-SHA256 470 9135 -% 1209854 4183 200906 3567 0 0 192.168.32.7 CH - [2015-05-02 11:20:15.691060] "GET /EMail/message.aspx?&mailId=3914_1&folderId=3481_21&mailPos=0 HTTP/1.1" 200 11323 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc436wxQzZrjF1Sr@oAAABH TLSv1.2 ECDHE-RSA-AES128-SHA256 518 11871 -% 1172144 4771 142928 23633 0 0 192.168.32.7 CH - [2015-05-02 11:20:43.320126] "GET /EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle HTTP/1.1" 200 9413 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc4@6wxQzZrjF1Sr-AAAABM TLSv1.2 ECDHE-RSA-AES128-SHA256 856 10616 -% 1292469 5237 273825 8093 0 0 192.168.32.7 CH - [2015-05-02 11:20:44.677624] "GET /EMail/images/tree/folder/minus-first-node.gif HTTP/1.1" 200 842 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc4-KwxQzZrjF1Sr-EAAAB- TLSv1.2 ECDHE-RSA-AES128-SHA256 582 1322 -% 932883 2046 930106 166 0 0 192.168.32.7 CH - [2015-05-02 11:20:44.839164] "GET /EMail/images/tree/folder/vertical-sign.gif HTTP/1.1" 200 811 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc4-KwxQzZrjF1Sr-MAAABT TLSv1.2 ECDHE-RSA-AES128-SHA256 872 1467 -% 926750 2085 923828 304 0 0 192.168.32.7 CH - [2015-05-02 11:20:44.823408] "GET /EMail/images/tree/folder/pixel.gif HTTP/1.1" 200 807 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc4-KwxQzZrjF1Sr-IAAABR TLSv1.2 ECDHE-RSA-AES128-SHA256 856 1467 -% 1032893 3230 28759 163 0 0 192.168.32.7 CH - [2015-05-02 11:20:47.173204] "GET /EMail/tree.aspx?cNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle HTTP/1.1" 200 8529 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc4-6wxQzZrjF1Sr-QAAABO TLSv1.2 ECDHE-RSA-AES128-SHA256 614 9490 -% 1557222 3317 546672 3327 0 0 192.168.32.7 CH - [2015-05-02 11:21:12.370485] "GET /EMail/overview.aspx HTTP/1.1" 200 5302 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc5GKwxQzZrjF1Sr-sAAABe TLSv1.2 ECDHE-RSA-AES128-SHA256 760 5963 -% 1015839 3115 10067 1780 0 0 192.168.32.7 CH - [2015-05-02 11:21:12.376819] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc5GKwxQzZrjF1Sr-wAAABd TLSv1.2 ECDHE-RSA-AES128-SHA256 792 9683 -% 1533164 3817 522212 2777 0 0 192.168.32.7 CH - [2015-05-02 11:21:21.319716] "GET /EMail/tree.aspx?oNode-sharedTree=treePreferences&sNode-sharedTree=treePreferences HTTP/1.1" 200 10871 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc5IawxQzZrjF1Sr-0AAABY TLSv1.2 ECDHE-RSA-AES128-SHA256 856 12210 -% 1279091 5700 262106 5744 0 0 192.168.32.7 CH - [2015-05-02 11:21:25.255390] "GET /EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle HTTP/1.1" 200 11754 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePreferences&sNode-sharedTree=treePreferences" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc5JawxQzZrjF1Sr-8AAABa TLSv1.2 ECDHE-RSA-AES128-SHA256 598 12982 -% 1383967 5079 368758 4313 0 0 192.168.32.7 CH - [2015-05-02 11:21:28.858315] "GET /EMail/folderOverview.aspx HTTP/1.1" 200 4649 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc5KKwxQzZrjF1SsAAAAABW TLSv1.2 ECDHE-RSA-AES128-SHA256 470 5130 -% 1442136 3069 436013 2241 0 0 192.168.32.7 CH - [2015-05-02 11:21:29.012771] "GET /EMail/tree.aspx?sNode-sharedTree=treePerFolderOverView HTTP/1.1" 200 11763 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc5KawxQzZrjF1SsAEAAABg TLSv1.2 ECDHE-RSA-AES128-SHA256 792 13159 -% 1580530 4212 566399 4036 0 0 192.168.32.7 CH - [2015-05-02 11:21:37.097239] "GET /EMail/preferences.aspx HTTP/1.1" 200 7131 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc5MawxQzZrjF1SsAUAAABh TLSv1.2 ECDHE-RSA-AES128-SHA256 760 7787 -% 1197637 2129 191786 3197 0 0 192.168.32.7 CH - [2015-05-02 11:21:37.086724] "GET /EMail/tree.aspx?sNode-sharedTree=treeUserPreferences HTTP/1.1" 200 11763 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc5MawxQzZrjF1SsAQAAABb TLSv1.2 ECDHE-RSA-AES128-SHA256 792 13175 -% 1529539 2725 514870 5843 0 0 192.168.32.7 CH - [2015-05-02 11:21:43.217475] "GET /EMail/tree.aspx?cNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle HTTP/1.1" 200 10870 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc5N6wxQzZrjF1SsAgAAABo TLSv1.2 ECDHE-RSA-AES128-SHA256 534 12033 -% 1402558 3245 390471 4146 0 0 192.168.32.7 CH - [2015-05-02 11:21:46.869464] "GET /EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle HTTP/1.1" 200 11754 "https://www.example.com/EMail/tree.aspx?cNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc5OqwxQzZrjF1SsAkAAABi TLSv1.2 ECDHE-RSA-AES128-SHA256 614 12982 -% 1505421 3507 490918 5178 0 0 192.168.32.7 CH - [2015-05-02 11:21:49.425801] "GET /EMail/tree.aspx?sNode-sharedTree=treePerFolderOverView HTTP/1.1" 200 11763 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc5PawxQzZrjF1SsAsAAABj TLSv1.2 ECDHE-RSA-AES128-SHA256 792 13159 -% 1405102 4150 389184 5713 0 0 192.168.32.7 CH - [2015-05-02 11:21:49.354999] "GET /EMail/folderOverview.aspx HTTP/1.1" 200 4649 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc5PawxQzZrjF1SsAoAAABv TLSv1.2 ECDHE-RSA-AES128-SHA256 470 5130 -% 1636550 3081 630643 1943 0 0 192.168.32.7 CH - [2015-05-02 11:21:52.081746] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/folderOverview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc5QKwxQzZrjF1SsAwAAABk TLSv1.2 ECDHE-RSA-AES128-SHA256 502 2154 -% 842754 2051 840026 154 0 0 192.168.32.7 CH - [2015-05-02 11:22:36.147144] "GET /EMail/tree.aspx?cNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle HTTP/1.1" 200 10870 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc5bKwxQzZrjF1SsBYAAABu TLSv1.2 ECDHE-RSA-AES128-SHA256 824 12210 -% 1678265 6106 660314 6116 0 0 192.168.32.7 CH - [2015-05-02 11:22:41.268069] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8589 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc5cawxQzZrjF1SsBcAAABw TLSv1.2 ECDHE-RSA-AES128-SHA256 470 9135 -% 1008092 3282 0 5054 0 0 192.168.32.7 CH - [2015-05-02 11:22:41.348921] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 10879 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc5cawxQzZrjF1SsBgAAAB2 TLSv1.2 ECDHE-RSA-AES128-SHA256 776 12226 -% 1400361 2528 386480 5651 0 0 192.168.32.7 CH - [2015-05-02 11:22:46.818037] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8589 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc5dqwxQzZrjF1SsBoAAAB0 TLSv1.2 ECDHE-RSA-AES128-SHA256 470 9135 -% 1384938 2518 377808 3821 0 0 192.168.32.7 CH - [2015-05-02 11:22:46.822916] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 10879 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc5dqwxQzZrjF1SsBsAAAB5 TLSv1.2 ECDHE-RSA-AES128-SHA256 486 12049 -% 1535965 3692 523303 3666 0 0 192.168.32.7 CH - [2015-05-02 11:22:54.834837] "GET /EMail/message.aspx?&mailId=3914_1&folderId=3481_21&mailPos=0 HTTP/1.1" 200 11322 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc5fqwxQzZrjF1R@@QAAAAd TLSv1.2 ECDHE-RSA-AES128-SHA256 808 12048 -% 1150105 4993 118483 25504 0 0 192.168.186.76 CH - [2015-05-02 11:23:13.579963] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8390 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjc5kawxQzZrjF1SsB8AAAB6 TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 13067 -% 1192723 6703 179161 4339 3 0 192.168.186.76 CH - [2015-05-02 11:23:13.574026] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjc5kawxQzZrjF1R@@gAAAAf TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1511010 4604 496455 4728 3 0 192.168.186.76 CH - [2015-05-02 11:23:16.760887] "GET /EMail/message.aspx?&mailId=3927_82&folderId=947_65&mailPos=0 HTTP/1.1" 200 16043 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjc5lKwxQzZrjF1R@@kAAAAh TLSv1.2 ECDHE-RSA-AES256-SHA384 710 16724 -% 1337904 8390 295185 31442 3 0 192.168.32.7 CH - [2015-05-02 11:24:08.056557] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3914_1&folderId=3481_21&attachmentId=2&token=-32875091622377313E18 HTTP/1.1" 200 55086 "https://www.example.com/EMail/message.aspx?&mailId=3914_1&folderId=3481_21&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc5yKwxQzZrjF1R@@0AAAAi TLSv1.2 ECDHE-RSA-AES128-SHA256 904 58021 -% 1087215 4710 60827 202 0 0 192.168.186.76 CH - [2015-05-02 11:24:59.524616] "GET /EMail/newMessage.aspx?action=reply&mailId=3927_82&folderId=947_65&showPics=false HTTP/1.1" 200 23717 "https://www.example.com/EMail/message.aspx?&mailId=3927_82&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjc5@6wxQzZrjF1SsC0AAABI TLSv1.2 ECDHE-RSA-AES256-SHA384 1292 24719 -% 1448836 7559 383406 44118 6 3 192.168.186.76 CH - [2015-05-02 11:25:01.073712] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3927_82&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjc5-awxQzZrjF1SsC4AAABc TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 992591 6243 978362 6001 3 0 192.168.186.76 CH - [2015-05-02 11:26:33.143331] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjc6WawxQzZrjF1R@-cAAAAu TLSv1.2 ECDHE-RSA-AES256-SHA384 1261 13742 -% 2122844 4793 110475 2820 3 0 192.168.186.76 CH - [2015-05-02 11:26:36.920701] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjc6XKwxQzZrjF1R@-oAAAA2 TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1061612 8670 50534 205 3 0 192.168.186.76 CH - [2015-05-02 11:26:37.994727] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7291 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjc6XawxQzZrjF1R@-sAAAAy TLSv1.2 ECDHE-RSA-AES256-SHA384 726 7802 -% 1136173 7433 124250 3025 3 0 192.168.32.7 CH - [2015-05-02 11:30:27.066228] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc7Q6wxQzZrjF1SsGAAAAB8 TLSv1.2 ECDHE-RSA-AES128-SHA256 851 4302 -% 856540 3595 852123 154 0 0 192.168.32.7 CH - [2015-05-02 11:30:27.947310] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc7Q6wxQzZrjF1SsGEAAABE TLSv1.2 ECDHE-RSA-AES128-SHA256 470 767 75% 896908 3349 892027 507 0 0 192.168.32.7 CH - [2015-05-02 11:30:28.924002] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc7RKwxQzZrjF1SsGIAAABF TLSv1.2 ECDHE-RSA-AES128-SHA256 438 357 -% 698788 3491 694271 174 0 0 192.168.32.7 CH - [2015-05-02 11:30:29.645652] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc7RawxQzZrjF1SsGMAAABA TLSv1.2 ECDHE-RSA-AES128-SHA256 422 7834 -% 773255 2935 767211 2238 0 0 192.168.32.7 CH - [2015-05-02 11:30:30.486710] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc7RqwxQzZrjF1SsGQAAABB TLSv1.2 ECDHE-RSA-AES128-SHA256 550 2527 14% 947490 3196 942272 243 0 0 192.168.32.7 CH - [2015-05-02 11:30:30.582951] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc7RqwxQzZrjF1SsGUAAABH TLSv1.2 ECDHE-RSA-AES128-SHA256 872 422 -% 985938 3277 981706 201 0 0 192.168.32.7 CH - [2015-05-02 11:30:30.577843] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc7RqwxQzZrjF1R-AoAAAAB TLSv1.2 ECDHE-RSA-AES128-SHA256 856 7973 22% 1061003 2911 54260 226 0 0 192.168.32.7 CH - [2015-05-02 11:30:30.569856] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc7RqwxQzZrjF1R-AkAAAAA TLSv1.2 ECDHE-RSA-AES128-SHA256 824 2144 22% 1080734 2297 77284 94 0 0 192.168.32.7 CH - [2015-05-02 11:30:30.583822] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc7RqwxQzZrjF1R-AsAAAA- TLSv1.2 ECDHE-RSA-AES128-SHA256 824 864 56% 1089314 2673 85762 130 0 0 192.168.32.7 CH - [2015-05-02 11:30:30.584386] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc7RqwxQzZrjF1SsGYAAABG TLSv1.2 ECDHE-RSA-AES128-SHA256 856 4405 23% 1289593 2993 284375 215 0 0 192.168.32.7 CH - [2015-05-02 11:30:31.927291] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "4f8da1a2.5238c1c6e038b" Vjc7R6wxQzZrjF1SsGcAAAB3 TLSv1.2 ECDHE-RSA-AES128-SHA256 582 245 -% 952688 3113 948542 255 0 0 192.168.67.98 CH - [2015-05-02 11:53:55.784319] "GET /EMail/MailHandler?service=createCRL HTTP/1.1" 200 3877 "-" "Microsoft-CryptoAPI/6.1" www.example.com 192.168.34.16 443 proxy-server - + "f0450a92.5238c97fb6e7f" VjdAw6wxQzZrjF1SsXsAAABa TLSv1 ECDHE-RSA-AES256-SHA 519 8384 -% 960363 2504 956629 157 0 0 192.168.67.98 CH - [2015-05-02 11:56:48.901334] "GET /EMail/login.aspx HTTP/1.1" 200 7322 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdBcKwxQzZrjF1SsZgAAABr TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 365 7907 -% 979948 541 975030 3797 0 0 192.168.67.98 CH - [2015-05-02 11:56:50.486517] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdBcqwxQzZrjF1SsZoAAAB9 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1030 2014 22% 856350 1854 853637 139 0 0 192.168.67.98 CH - [2015-05-02 11:56:50.475254] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdBcqwxQzZrjF1SsZkAAAB6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 465 2545 14% 965040 2662 960260 204 0 0 192.168.67.98 CH - [2015-05-02 11:56:50.488752] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdBcqwxQzZrjF1SsZsAAAB@ TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1030 732 56% 976021 1734 973653 100 0 0 192.168.67.98 CH - [2015-05-02 11:56:50.835662] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdBcqwxQzZrjF1SsZwAAAB7 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1021 1705 -% 903345 2696 899817 132 0 0 192.168.67.98 CH - [2015-05-02 11:56:51.469782] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdBc6wxQzZrjF1SsZ0AAAB8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 480 1685 -% 671367 2703 667590 130 0 0 192.168.67.98 CH - [2015-05-02 11:56:51.967130] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/css/NNstyle.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdBc6wxQzZrjF1SsZ8AAABF TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 490 1792 -% 935211 1937 932496 188 0 0 192.168.67.98 CH - [2015-05-02 11:57:18.273442] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/css/NNstyle.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdBjqwxQzZrjF1R-GAAAAAf TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1055 2226 -% 672977 3015 669038 166 0 0 192.168.67.98 CH - [2015-05-02 11:57:27.608055] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdBl6wxQzZrjF1SsaYAAABc TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1020 8130 22% 803608 4611 795250 140 0 0 192.168.67.98 CH - [2015-05-02 11:57:27.609127] "GET /EMail/scripts/variables_en.js HTTP/1.1" 200 2091 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdBl6wxQzZrjF1SsacAAABL TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1025 2759 24% 1038905 4086 33260 179 0 0 192.168.67.98 CH - [2015-05-02 11:57:54.504682] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdBsqwxQzZrjF1R-GEAAAAh TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1211 599 -% 1026243 4312 21168 183 0 0 192.168.67.98 CH - [2015-05-02 11:57:56.115809] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7515 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdBtKwxQzZrjF1R-GIAAAAg TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 543 7937 -% 845863 4341 821558 19306 0 0 192.168.67.98 CH - [2015-05-02 11:58:06.373726] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdBvqwxQzZrjF1SsbAAAABe TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1250 599 -% 944887 6074 937846 195 0 0 192.168.67.98 CH - [2015-05-02 11:58:07.431226] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7515 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdBv6wxQzZrjF1SsbEAAABd TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 582 7937 -% 961306 3192 942297 15188 0 0 192.168.67.98 CH - [2015-05-02 11:59:17.514259] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCBawxQzZrjF1Ssb0AAABo TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1249 559 -% 995825 5710 989087 252 0 0 192.168.67.98 CH - [2015-05-02 11:59:18.541656] "GET /EMail/main.aspx HTTP/1.1" 200 3397 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCBqwxQzZrjF1Ssb4AAABi TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 542 3813 -% 883916 2013 880271 1323 0 0 192.168.67.98 CH - [2015-05-02 11:59:19.728081] "GET /EMail/scripts/variables_fr.js HTTP/1.1" 200 1679 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCB6wxQzZrjF1Ssb8AAABj TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 457 2180 27% 957461 2939 953151 179 0 0 192.168.67.98 CH - [2015-05-02 11:59:21.068706] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCCawxQzZrjF1SscAAAABt TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 504 4128 -% 1129416 3097 118190 7403 0 0 192.168.67.98 CH - [2015-05-02 11:59:21.097851] "GET /EMail/overview.aspx HTTP/1.1" 200 5294 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCCawxQzZrjF1SscIAAABv TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1073 5854 -% 1545213 2538 539179 2813 0 0 192.168.67.98 CH - [2015-05-02 11:59:21.089521] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8532 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCCawxQzZrjF1SscEAAABk TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1099 9324 -% 1854119 3247 842162 4780 0 0 192.168.67.98 CH - [2015-05-02 11:59:23.719287] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCC6wxQzZrjF1SscUAAABl TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 490 1248 -% 832197 2487 828416 645 0 0 192.168.67.98 CH - [2015-05-02 11:59:23.719372] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCC6wxQzZrjF1SscYAAABp TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 532 1260 -% 947561 2409 944294 192 0 0 192.168.67.98 CH - [2015-05-02 11:59:34.960333] "GET /EMail/tree.aspx?oNode-sharedTree=treePreferences&sNode-sharedTree=treePreferences HTTP/1.1" 200 10871 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCFqwxQzZrjF1SscgAAABz TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1165 11751 -% 1489186 4736 474223 4906 0 0 192.168.67.98 CH - [2015-05-02 11:59:36.440592] "GET /EMail/tree.aspx?oNode-sharedTree=treePreferences&sNode-sharedTree=treePreferences HTTP/1.1" 200 10871 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCGKwxQzZrjF1SsckAAABx TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1165 11751 -% 1496346 3536 482484 5315 0 0 192.168.67.98 CH - [2015-05-02 11:59:38.025289] "GET /EMail/images/tree/folder/minus-first-node.gif HTTP/1.1" 200 842 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePreferences&sNode-sharedTree=treePreferences" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCGqwxQzZrjF1SscoAAABs TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 569 1254 -% 905807 2174 902931 152 0 0 192.168.67.98 CH - [2015-05-02 11:59:38.036885] "GET /EMail/images/tree/folder/pixel.gif HTTP/1.1" 200 807 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePreferences&sNode-sharedTree=treePreferences" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCGqwxQzZrjF1SscsAAABw TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1125 1357 -% 901562 1676 899314 115 0 0 192.168.67.98 CH - [2015-05-02 11:59:43.417238] "GET /EMail/tree.aspx?sNode-sharedTree=treeCertManag HTTP/1.1" 200 10879 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePreferences&sNode-sharedTree=treePreferences" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCH6wxQzZrjF1Ssc0AAAB0 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 599 11621 -% 1574928 3991 562623 3871 0 0 192.168.67.98 CH - [2015-05-02 11:59:43.391981] "GET /EMail/certificates.aspx? HTTP/1.1" 200 9723 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePreferences&sNode-sharedTree=treePreferences" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCH6wxQzZrjF1SscwAAABy TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 577 10174 -% 1950708 1970 943750 4169 0 0 192.168.67.98 CH - [2015-05-02 11:59:45.626166] "GET /EMail/images/lockBlueSmall.gif HTTP/1.1" 200 913 "https://www.example.com/EMail/certificates.aspx?" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCIawxQzZrjF1Ssc8AAAB4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 497 1325 -% 915209 1744 912767 208 0 0 192.168.67.98 CH - [2015-05-02 11:59:45.637737] "GET /EMail/images/keyLocationDBwithPKey.gif HTTP/1.1" 200 1003 "https://www.example.com/EMail/certificates.aspx?" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCIawxQzZrjF1R-GkAAAAq TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1072 1555 -% 1071936 1760 69586 129 0 0 192.168.67.98 CH - [2015-05-02 11:59:45.625301] "GET /EMail/images/signedSmall.gif HTTP/1.1" 200 915 "https://www.example.com/EMail/certificates.aspx?" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCIawxQzZrjF1Ssc4AAAB5 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 495 1327 -% 1108662 2066 105819 211 0 0 192.168.67.98 CH - [2015-05-02 11:59:45.638478] "GET /EMail/images/hackenRoles.gif HTTP/1.1" 200 845 "https://www.example.com/EMail/certificates.aspx?" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCIawxQzZrjF1R-GoAAAAr TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1062 1395 -% 1125497 2822 121792 168 0 0 192.168.67.98 CH - [2015-05-02 11:59:57.055390] "GET /EMail/certificateOpen.aspx?keyId=2264_55&userId=1202_12 HTTP/1.1" 200 6956 "https://www.example.com/EMail/certificates.aspx?" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCLawxQzZrjF1SsdIAAAB6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1118 7510 -% 1313157 3969 306050 2188 0 0 192.168.67.98 CH - [2015-05-02 12:00:00.677465] "GET /EMail/certificateOpen.aspx?tab=1&popup=true&keyId=2264_55 HTTP/1.1" 200 16294 "https://www.example.com/EMail/certificateOpen.aspx?keyId=2264_55&userId=1202_12" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCMKwxQzZrjF1SsdMAAAB@ TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 584 16769 -% 1670376 4213 632020 31827 0 0 192.168.67.98 CH - [2015-05-02 12:00:03.086401] "GET /EMail/images/field.png HTTP/1.1" 200 330 "https://www.example.com/EMail/certificateOpen.aspx?tab=1&popup=true&keyId=2264_55" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCM6wxQzZrjF1SsdUAAAB8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 522 742 -% 852747 2177 849829 146 0 0 192.168.67.98 CH - [2015-05-02 12:00:05.057038] "GET /EMail/certificateOpen.aspx?tab=2&popup=true&keyId=2264_55 HTTP/1.1" 200 6112 "https://www.example.com/EMail/certificateOpen.aspx?tab=1&popup=true&keyId=2264_55" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCNawxQzZrjF1SsdgAAABK TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 586 6528 -% 1702820 5529 685530 11046 0 0 192.168.67.98 CH - [2015-05-02 12:00:07.119337] "GET /EMail/images/blackDot.png HTTP/1.1" 200 179 "https://www.example.com/EMail/certificateOpen.aspx?tab=2&popup=true&keyId=2264_55" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCN6wxQzZrjF1SsdoAAABA TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1092 729 -% 1039144 3077 35263 168 0 0 192.168.67.98 CH - [2015-05-02 12:00:07.117358] "GET /EMail/images/whiteDot.png HTTP/1.1" 200 179 "https://www.example.com/EMail/certificateOpen.aspx?tab=2&popup=true&keyId=2264_55" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCN6wxQzZrjF1SsdkAAAB3 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 525 591 -% 1114215 2902 110405 152 0 0 192.168.67.98 CH - [2015-05-02 12:00:26.978668] "GET /EMail/overview.aspx HTTP/1.1" 200 5295 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeCertManag" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCSqwxQzZrjF1Ssd4AAABO TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1104 5855 -% 1145795 3114 139109 2793 0 0 192.168.67.98 CH - [2015-05-02 12:00:26.980696] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 10879 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeCertManag" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCSqwxQzZrjF1Ssd8AAABM TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1130 11759 -% 1341105 3791 328743 3479 0 0 192.168.67.98 CH - [2015-05-02 12:00:29.454915] "GET /EMail/MailHandler?service=downloadCert&type=root&token=-197033593529305882E18 HTTP/1.1" 200 1165 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCTawxQzZrjF1SseAAAABS TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 572 1638 -% 1139275 4831 132973 191 0 0 192.168.67.98 CH - [2015-05-02 12:00:36.835203] "GET /EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle HTTP/1.1" 200 11758 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCVKwxQzZrjF1SseMAAABZ TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1173 12667 -% 1422486 5103 404928 6531 0 0 192.168.67.98 CH - [2015-05-02 12:00:38.597575] "GET /EMail/images/tree/folder/vertical-sign.gif HTTP/1.1" 200 811 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCVqwxQzZrjF1SseQAAABN TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 574 1223 -% 836440 3113 832605 127 0 0 192.168.67.98 CH - [2015-05-02 12:00:39.860686] "GET /EMail/certificates.aspx? HTTP/1.1" 200 9723 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCV6wxQzZrjF1SseUAAABJ TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 585 10174 -% 1641437 3264 633164 4086 0 0 192.168.67.98 CH - [2015-05-02 12:00:40.126158] "GET /EMail/tree.aspx?sNode-sharedTree=treeCertManag HTTP/1.1" 200 11767 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePerFolderToggle&sNode-sharedTree=treePerFolderToggle" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCWKwxQzZrjF1SseYAAABe TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1174 12676 -% 1575847 2600 564010 3754 0 0 192.168.67.98 CH - [2015-05-02 12:01:40.676641] "GET /EMail/certificateOpen.aspx?keyId=2264_55&userId=1202_12 HTTP/1.1" 200 6953 "https://www.example.com/EMail/certificates.aspx?" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdClKwxQzZrjF1Sse8AAABi TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1118 7507 -% 1437029 4242 429008 2948 0 0 192.168.67.98 CH - [2015-05-02 12:01:46.117424] "GET /EMail/certificateOpen.aspx?tab=1&popup=true&keyId=2264_55 HTTP/1.1" 200 16294 "https://www.example.com/EMail/certificateOpen.aspx?keyId=2264_55&userId=1202_12" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCmqwxQzZrjF1SsfIAAABV TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 584 16769 -% 1297156 5861 257049 32432 0 0 192.168.67.98 CH - [2015-05-02 12:02:13.347140] "GET /EMail/changePassword.aspx HTTP/1.1" 200 5195 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeCertManag" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCtawxQzZrjF1SsfUAAABx TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 905 9638 -% 1063477 2069 59190 1709 0 0 192.168.67.98 CH - [2015-05-02 12:02:13.329953] "GET /EMail/tree.aspx?sNode-sharedTree=treeChangePwd HTTP/1.1" 200 11767 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeCertManag" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCtawxQzZrjF1SsfQAAABs TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 926 16559 -% 1669498 2661 654612 6491 0 0 192.168.67.98 CH - [2015-05-02 12:02:16.251349] "GET /EMail/overview.aspx HTTP/1.1" 200 5294 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeChangePwd" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCuKwxQzZrjF1SsfYAAAB2 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 537 5716 -% 1142371 3115 135683 2803 0 0 192.168.67.98 CH - [2015-05-02 12:02:16.253409] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 11767 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeChangePwd" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCuKwxQzZrjF1SsfcAAAB0 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 563 12538 -% 1526150 2267 512792 5628 0 0 192.168.67.98 CH - [2015-05-02 12:02:21.069139] "GET /EMail/newMessage.aspx?msg=new HTTP/1.1" 200 12068 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCvawxQzZrjF1SsfgAAABy TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 546 12549 -% 986002 2416 960580 21033 3 3 192.168.67.98 CH - [2015-05-02 12:02:21.178689] "GET /EMail/tree.aspx?sNode-sharedTree=treeNewMsg HTTP/1.1" 200 11767 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCvawxQzZrjF1SsfkAAAB4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 560 12538 -% 1459831 2873 447498 3857 0 0 192.168.67.98 CH - [2015-05-02 12:02:22.216250] "GET /EMail/scripts/tinymce/tinymce.min.js HTTP/1.1" 200 101935 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCvqwxQzZrjF1SsfoAAAB5 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 478 103666 33% 974409 3401 922033 200 0 0 192.168.67.98 CH - [2015-05-02 12:02:23.504880] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2907 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCv6wxQzZrjF1SsfsAAABD TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 525 3300 -% 1044073 3157 32529 7745 0 0 192.168.67.98 CH - [2015-05-02 12:02:23.611017] "GET /EMail/scripts/tinymce/langs/fr.js HTTP/1.1" 200 2883 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCv6wxQzZrjF1SsfwAAABr TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 475 3413 38% 1150778 3042 145978 176 0 0 192.168.67.98 CH - [2015-05-02 12:02:24.554120] "GET /EMail/scripts/tinymce/plugins/searchreplace/plugin.min.js HTTP/1.1" 200 2586 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCwKwxQzZrjF1Ssf0AAAB9 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 499 3116 40% 1030307 1976 27274 166 0 0 192.168.67.98 CH - [2015-05-02 12:02:24.767205] "GET /EMail/scripts/tinymce/plugins/fullpage/plugin.min.js HTTP/1.1" 200 2325 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCwKwxQzZrjF1Ssf4AAAB6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 494 2855 36% 948235 2983 944213 143 0 0 192.168.67.98 CH - [2015-05-02 12:02:25.589711] "GET /EMail/scripts/tinymce/plugins/link/plugin.min.js HTTP/1.1" 200 1835 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCwawxQzZrjF1SsgAAAABE TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 490 2336 41% 1012460 2311 9063 197 0 0 192.168.67.98 CH - [2015-05-02 12:02:25.720724] "GET /EMail/scripts/tinymce/plugins/anchor/plugin.min.js HTTP/1.1" 200 339 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCwawxQzZrjF1SsgEAAAB7 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 492 838 63% 999410 1951 996667 186 0 0 192.168.67.98 CH - [2015-05-02 12:02:27.740365] "GET /EMail/scripts/tinymce/skins/lightgray/skin.min.css HTTP/1.1" 200 6042 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCw6wxQzZrjF1SsgIAAABF TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 507 6830 17% 977205 1871 970672 170 0 0 192.168.67.98 CH - [2015-05-02 12:02:27.745250] "GET /EMail/scripts/tinymce/skins/lightgray/content.min.css HTTP/1.1" 200 588 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCw6wxQzZrjF1SsgMAAAB8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 510 1081 38% 1013870 1690 11462 120 0 0 192.168.67.98 CH - [2015-05-02 12:02:29.115368] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce-small.woff HTTP/1.1" 200 7848 "https://www.example.com/EMail/scripts/tinymce/skins/lightgray/skin.min.css" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCxawxQzZrjF1SsgQAAABB TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 584 8276 -% 876408 2448 872986 198 0 0 192.168.67.98 CH - [2015-05-02 12:02:32.239416] "GET /EMail/tree.aspx?oNode-sharedTree=treePreferences&sNode-sharedTree=treePreferences HTTP/1.1" 200 11759 "https://www.example.com/EMail/tree.aspx?cNode-sharedTree=treePreferences&sNode-sharedTree=treePreferences" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCyKwxQzZrjF1SsgUAAABK TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 634 12530 -% 1435426 3470 422632 4034 0 0 192.168.67.98 CH - [2015-05-02 12:02:36.228317] "GET /EMail/preferences.aspx HTTP/1.1" 200 7142 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePreferences&sNode-sharedTree=treePreferences" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCzKwxQzZrjF1SsgcAAAB3 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 575 7564 -% 1573160 3199 567096 2233 0 0 192.168.67.98 CH - [2015-05-02 12:02:36.475326] "GET /EMail/tree.aspx?sNode-sharedTree=treeUserPreferences HTTP/1.1" 200 11767 "https://www.example.com/EMail/tree.aspx?oNode-sharedTree=treePreferences&sNode-sharedTree=treePreferences" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdCzKwxQzZrjF1SsggAAAB1 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1247 16559 -% 1554831 3939 541254 3945 0 0 192.168.67.98 CH - [2015-05-02 12:03:01.004435] "GET /EMail/tree.aspx?sNode-sharedTree=treeCertManag HTTP/1.1" 200 11767 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeCertManag" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdC5awxQzZrjF1Ssg0AAABT TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1206 16559 -% 1501468 2225 489949 3951 0 0 192.168.67.98 CH - [2015-05-02 12:03:00.994595] "GET /EMail/certificates.aspx? HTTP/1.1" 200 9722 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeCertManag" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0.2 Waterfox/40.0.2" www.example.com 192.168.34.16 443 proxy-server - + "de2995b2.5238ca24cfcd6" VjdC5KwxQzZrjF1SsgwAAABL TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1184 14194 -% 1576847 2779 568117 5106 0 0 192.168.186.76 CH - [2015-05-02 12:04:47.553688] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdDT6wxQzZrjF1SsiEAAABh TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 12038 -% 849676 31719 812256 3637 3 0 192.168.186.76 CH - [2015-05-02 12:04:48.450225] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "d43b4c4b.52388d1dbd27f" VjdDUKwxQzZrjF1SsiIAAABb TLSv1.2 ECDHE-RSA-AES256-SHA384 662 0 -% 1009295 6467 0 2208 3 0 192.168.186.76 CH - [2015-05-02 12:04:52.454039] "GET /EMail/overview.aspx HTTP/1.1" 200 5538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdDVKwxQzZrjF1SsiMAAABX TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 10134 -% 1102731 6641 92214 2019 3 0 192.168.192.35 CH - [2015-05-02 12:13:42.787796] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdFZqwxQzZrjF1SsnYAAAB5 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 849 11799 -% 905604 3818 898094 2789 0 0 192.168.192.35 CH - [2015-05-02 12:26:53.580574] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdIfawxQzZrjF1R-L0AAAAG TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 849 11799 -% 942655 2493 937523 2101 0 0 192.168.192.35 CH - [2015-05-02 12:27:00.875441] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdIhKwxQzZrjF1SsvUAAAB6 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1263 564 -% 1143898 3156 139992 200 0 0 192.168.192.35 CH - [2015-05-02 12:27:02.047276] "GET /EMail/main.aspx HTTP/1.1" 200 3383 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdIhqwxQzZrjF1SsvYAAABE TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 3799 -% 907728 2268 903816 1126 0 0 192.168.192.35 CH - [2015-05-02 12:27:03.051219] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdIh6wxQzZrjF1SsvcAAAB7 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 4128 -% 1376188 2945 366385 6226 0 0 192.168.192.35 CH - [2015-05-02 12:27:03.074212] "GET /EMail/overview.aspx HTTP/1.1" 200 5289 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdIh6wxQzZrjF1R-L8AAAAC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1059 5854 -% 1444433 2731 439185 1885 0 0 192.168.192.35 CH - [2015-05-02 12:27:03.081443] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdIh6wxQzZrjF1SsvgAAABF TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1085 9322 -% 1734468 3784 721947 4031 0 0 192.168.192.35 CH - [2015-05-02 12:27:07.058848] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdIi6wxQzZrjF1SsvsAAABK TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 511 409 -% 914086 2948 910362 206 0 0 192.168.192.35 CH - [2015-05-02 12:27:08.034512] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdIjKwxQzZrjF1SsvwAAABA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 458 318 -% 665806 3641 661280 168 0 0 192.168.192.35 CH - [2015-05-02 12:27:08.713892] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdIjKwxQzZrjF1Ssv0AAAB3 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 440 7758 -% 587698 1974 582996 2252 0 0 192.168.96.46 CH - [2015-05-02 12:31:02.307869] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7366 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "46host.5238d1cb17c1d" VjdJdqwxQzZrjF1R-MsAAAAR TLSv1 AES256-SHA 885 11449 -% 924962 2789 917491 3926 0 0 192.168.96.46 CH - [2015-05-02 12:31:03.336898] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "46host.5238d1cb17c1d" VjdJd6wxQzZrjF1R-MwAAAAU TLSv1 AES256-SHA 678 213 -% 916784 3109 912881 148 0 0 192.168.96.46 CH - [2015-05-02 12:31:03.761854] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "46host.5238d1cb17c1d" VjdJd6wxQzZrjF1SsyMAAABs TLSv1 AES256-SHA 1141 3700 -% 947495 3389 943111 197 0 0 192.168.96.46 CH - [2015-05-02 12:31:03.781293] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "46host.5238d1cb17c1d" VjdJd6wxQzZrjF1SsyQAAABz TLSv1 AES256-SHA 1093 3700 -% 973428 3785 968637 146 0 0 192.168.96.46 CH - [2015-05-02 12:31:04.848040] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "46host.5238d1cb17c1d" VjdJeKwxQzZrjF1SsyUAAAB2 TLSv1 AES256-SHA 582 213 -% 905640 2274 902569 203 0 0 192.168.96.46 CH - [2015-05-02 12:31:06.120939] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "7f718ff8.5238d1cebaaeb" VjdJeqwxQzZrjF1R-M0AAAAX TLSv1 AES256-SHA 837 5225 -% 868872 894 867074 268 0 0 192.168.96.46 CH - [2015-05-02 12:31:12.499676] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7539 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "46host.5238d1cb17c1d" VjdJgKwxQzZrjF1SsycAAABw TLSv1 AES256-SHA 1037 11461 -% 959514 3741 935411 19407 0 0 192.168.96.46 CH - [2015-05-02 12:31:18.459050] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "46host.5238d1cb17c1d" VjdJhqwxQzZrjF1R-M8AAAAY TLSv1 AES256-SHA 1021 3936 -% 1160572 4846 154856 186 0 0 192.168.96.46 CH - [2015-05-02 12:31:19.744834] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7539 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "46host.5238d1cb17c1d" VjdJh6wxQzZrjF1SsykAAABD TLSv1 AES256-SHA 1037 11461 -% 956080 2789 939559 13151 0 0 192.168.139.241 CH - [2015-05-02 12:33:18.341909] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7834 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdJ-qwxQzZrjF1R-NEAAAAV TLSv1.2 ECDHE-RSA-AES256-SHA384 772 12387 -% 907182 3138 900264 2781 0 0 192.168.139.241 CH - [2015-05-02 12:33:19.390988] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdJ-6wxQzZrjF1R-NMAAAAd TLSv1.2 ECDHE-RSA-AES256-SHA384 841 2208 22% 839867 1968 836631 203 0 0 192.168.139.241 CH - [2015-05-02 12:33:19.392895] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdJ-6wxQzZrjF1R-NQAAAAe TLSv1.2 ECDHE-RSA-AES256-SHA384 889 1979 -% 893864 2791 890100 156 0 0 192.168.139.241 CH - [2015-05-02 12:33:19.352725] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdJ-6wxQzZrjF1R-NIAAAAZ TLSv1.2 ECDHE-RSA-AES256-SHA384 550 2575 14% 956703 2107 953343 115 0 0 192.168.139.241 CH - [2015-05-02 12:33:19.392898] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdJ-6wxQzZrjF1R-NUAAAAb TLSv1.2 ECDHE-RSA-AES256-SHA384 841 928 56% 1079463 2827 75275 206 0 0 192.168.139.241 CH - [2015-05-02 12:33:19.398841] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdJ-6wxQzZrjF1Ss0EAAABI TLSv1.2 ECDHE-RSA-AES256-SHA384 873 8781 22% 1114310 2009 108558 165 0 0 192.168.139.241 CH - [2015-05-02 12:33:20.670233] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdKAKwxQzZrjF1R-NYAAAAc TLSv1.2 ECDHE-RSA-AES256-SHA384 582 1898 -% 770133 2737 766604 179 0 0 192.168.139.241 CH - [2015-05-02 12:33:20.667263] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdKAKwxQzZrjF1Ss0IAAABP TLSv1.2 ECDHE-RSA-AES256-SHA384 390 1658 -% 821587 3226 817521 154 0 0 192.168.96.46 CH - [2015-05-02 12:33:52.496283] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7366 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "46host.5238d1cb17c1d" VjdKIKwxQzZrjF1Ss0wAAABd TLSv1 AES256-SHA 957 11285 -% 953839 2593 948157 2527 0 0 192.168.96.46 CH - [2015-05-02 12:33:58.369800] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7539 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "46host.5238d1cb17c1d" VjdKJqwxQzZrjF1Ss00AAABf TLSv1 AES256-SHA 1037 11461 -% 949389 3991 925824 18875 0 0 192.168.139.241 CH - [2015-05-02 12:34:25.161955] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdKQawxQzZrjF1Ss1MAAABi TLSv1.2 ECDHE-RSA-AES256-SHA384 937 2379 -% 835809 2831 831810 365 0 0 192.168.139.241 CH - [2015-05-02 12:34:27.431055] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdKQ6wxQzZrjF1Ss1QAAABv TLSv1.2 ECDHE-RSA-AES256-SHA384 902 373 -% 928746 6966 920982 172 0 0 192.168.139.241 CH - [2015-05-02 12:34:28.379260] "GET /EMail/error.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdKRKwxQzZrjF1Ss1UAAABk TLSv1.2 ECDHE-RSA-AES256-SHA384 630 4234 -% 783305 4121 767318 10992 0 0 192.168.139.241 CH - [2015-05-02 12:34:35.674786] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7834 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdKS6wxQzZrjF1Ss1gAAABt TLSv1.2 ECDHE-RSA-AES256-SHA384 857 8539 -% 934609 4963 924736 3975 0 0 192.168.139.241 CH - [2015-05-02 12:35:34.575971] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdKhqwxQzZrjF1Ss2MAAAB4 TLSv1.2 ECDHE-RSA-AES256-SHA384 1193 614 -% 1589220 6808 581685 183 0 0 192.168.139.241 CH - [2015-05-02 12:35:36.185251] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7375 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdKiKwxQzZrjF1Ss2QAAABD TLSv1.2 ECDHE-RSA-AES256-SHA384 662 7882 -% 898691 6182 888242 3233 0 0 192.168.139.241 CH - [2015-05-02 12:35:37.214836] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdKiawxQzZrjF1Ss2UAAAB5 TLSv1.2 ECDHE-RSA-AES256-SHA384 598 4276 23% 805182 4593 798023 246 0 0 192.168.139.241 CH - [2015-05-02 12:35:45.380120] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdKkawxQzZrjF1Ss2YAAABr TLSv1.2 ECDHE-RSA-AES256-SHA384 1065 662 -% 962177 4926 956237 210 0 0 192.168.139.241 CH - [2015-05-02 12:35:46.355054] "GET /EMail/main.aspx HTTP/1.1" 200 3407 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdKkqwxQzZrjF1Ss2cAAAB@ TLSv1.2 ECDHE-RSA-AES256-SHA384 614 3914 -% 889912 4238 883643 1250 0 0 192.168.139.241 CH - [2015-05-02 12:35:47.367619] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdKk6wxQzZrjF1Ss2gAAAB9 TLSv1.2 ECDHE-RSA-AES256-SHA384 550 4234 -% 909085 2804 896491 9324 0 0 192.168.139.241 CH - [2015-05-02 12:35:47.404489] "GET /EMail/overview.aspx HTTP/1.1" 200 5300 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdKk6wxQzZrjF1Ss2oAAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 857 6011 -% 1440114 3097 433514 2872 0 0 192.168.139.241 CH - [2015-05-02 12:35:47.401668] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdKk6wxQzZrjF1Ss2kAAAB6 TLSv1.2 ECDHE-RSA-AES256-SHA384 889 9859 -% 1663177 4036 652340 2988 0 0 192.168.139.241 CH - [2015-05-02 12:35:48.949032] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdKlKwxQzZrjF1Ss2sAAAB8 TLSv1.2 ECDHE-RSA-AES256-SHA384 582 1354 -% 862456 4425 856979 422 0 0 192.168.139.241 CH - [2015-05-02 12:35:49.149659] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdKlawxQzZrjF1Ss2wAAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 614 1370 -% 890706 4058 885641 226 0 0 192.168.139.241 CH - [2015-05-02 12:35:57.061098] "GET /EMail/inbox.aspx HTTP/1.1" 200 8580 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdKnawxQzZrjF1Ss24AAABB TLSv1.2 ECDHE-RSA-AES256-SHA384 857 9376 -% 1135647 4573 125704 3955 0 0 192.168.139.241 CH - [2015-05-02 12:35:58.299106] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdKnqwxQzZrjF1Ss28AAABK TLSv1.2 ECDHE-RSA-AES256-SHA384 566 634 -% 790035 2737 786543 198 0 0 192.168.139.241 CH - [2015-05-02 12:35:58.331740] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdKnqwxQzZrjF1Ss3AAAABA TLSv1.2 ECDHE-RSA-AES256-SHA384 889 827 -% 975612 4225 970483 206 0 0 192.168.139.241 CH - [2015-05-02 12:35:58.336468] "GET /EMail/images/Highprio.gif HTTP/1.1" 200 91 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdKnqwxQzZrjF1Ss3EAAAB1 TLSv1.2 ECDHE-RSA-AES256-SHA384 873 795 -% 1127201 2483 123842 191 0 0 192.168.139.241 CH - [2015-05-02 12:35:58.338409] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdKnqwxQzZrjF1Ss3IAAAB3 TLSv1.2 ECDHE-RSA-AES256-SHA384 889 2107 -% 1171622 3945 166937 129 0 0 192.168.139.241 CH - [2015-05-02 12:36:01.742519] "GET /EMail/message.aspx?&mailId=3929_6&folderId=3514_71&mailPos=0 HTTP/1.1" 200 23959 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdKoawxQzZrjF1Ss3QAAABH TLSv1.2 ECDHE-RSA-AES256-SHA384 598 24798 -% 2539914 5590 477554 50296 0 0 192.168.139.241 CH - [2015-05-02 12:36:13.119919] "GET /EMail/message.aspx?&mailId=3929_6&folderId=3514_71&getFromPOP3=N&showPics=true HTTP/1.1" 200 23891 "https://www.example.com/EMail/message.aspx?&mailId=3929_6&folderId=3514_71&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdKrawxQzZrjF1Ss3cAAABL TLSv1.2 ECDHE-RSA-AES256-SHA384 969 24911 -% 1344522 6651 285101 46479 0 0 192.168.139.241 CH - [2015-05-02 12:36:19.532069] "GET /EMail/downloadPDF.aspx HTTP/1.1" 200 4294 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdKs6wxQzZrjF1Ss3kAAABM TLSv1.2 ECDHE-RSA-AES256-SHA384 809 5003 -% 972672 4685 963195 3730 0 0 192.168.139.241 CH - [2015-05-02 12:36:36.485644] "GET /EMail/message.aspx?&mailId=3929_6&folderId=3514_71&getFromPOP3=N&showPics=false HTTP/1.1" 200 23960 "https://www.example.com/EMail/message.aspx?&mailId=3929_6&folderId=3514_71&getFromPOP3=N&showPics=true" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdKxKwxQzZrjF1Ss3wAAAB- TLSv1.2 ECDHE-RSA-AES256-SHA384 985 24991 -% 1465380 9493 404401 45100 0 0 192.168.139.241 CH - [2015-05-02 12:36:40.871357] "GET /EMail/downloadPDF.aspx HTTP/1.1" 200 4293 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdKyKwxQzZrjF1Ss30AAABI TLSv1.2 ECDHE-RSA-AES256-SHA384 502 4810 -% 880101 4449 872377 2233 0 0 192.168.139.241 CH - [2015-05-02 12:36:48.008610] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3929_6&folderId=3514_71&attachmentId=3&token=-36559424131623301E18 HTTP/1.1" 200 653797 "https://www.example.com/EMail/message.aspx?&mailId=3929_6&folderId=3514_71&getFromPOP3=N&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdK0KwxQzZrjF1R-OQAAAAs TLSv1.2 ECDHE-RSA-AES256-SHA384 1033 686969 -% 1376847 6031 17636 238 0 0 192.168.139.241 CH - [2015-05-02 12:37:24.241621] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3929_6&folderId=3514_71&attachmentId=4&token=-36559424131623301E18 HTTP/1.1" 200 233543 "https://www.example.com/EMail/message.aspx?&mailId=3929_6&folderId=3514_71&getFromPOP3=N&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdK9KwxQzZrjF1Ss4UAAABY TLSv1.2 ECDHE-RSA-AES256-SHA384 1033 245013 -% 1343673 7986 122069 226 0 0 192.168.139.241 CH - [2015-05-02 12:41:58.789444] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdMBqwxQzZrjF1R-PoAAAAH TLSv1.2 ECDHE-RSA-AES256-SHA384 948 4334 -% 1027785 7203 19251 207 0 0 192.168.139.241 CH - [2015-05-02 12:41:59.829273] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdMB6wxQzZrjF1R-PsAAAAC TLSv1.2 ECDHE-RSA-AES256-SHA384 550 815 75% 899027 4350 893681 231 0 0 192.168.139.241 CH - [2015-05-02 12:42:00.774051] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "af20b21a.5238d24cd3315" VjdMCKwxQzZrjF1R-PwAAAAF TLSv1.2 ECDHE-RSA-AES256-SHA384 358 1642 -% 4290 3240 61 160 0 0 192.168.139.241 CH - [2015-05-02 12:42:00.822118] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdMCKwxQzZrjF1Ss6oAAAB6 TLSv1.2 ECDHE-RSA-AES256-SHA384 825 566 -% 901456 4609 896069 160 0 0 192.168.139.241 CH - [2015-05-02 12:42:01.764740] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdMCawxQzZrjF1Ss6sAAAB8 TLSv1.2 ECDHE-RSA-AES256-SHA384 502 7866 -% 961268 4776 950635 4814 0 0 192.168.139.241 CH - [2015-05-02 12:42:02.845473] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdMCqwxQzZrjF1Ss6wAAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 630 2575 14% 777430 3939 771917 163 0 0 192.168.139.241 CH - [2015-05-02 12:42:02.903771] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdMCqwxQzZrjF1Ss68AAABK TLSv1.2 ECDHE-RSA-AES256-SHA384 969 454 -% 914568 3927 909764 217 0 0 192.168.139.241 CH - [2015-05-02 12:42:02.879990] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdMCqwxQzZrjF1Ss60AAABF TLSv1.2 ECDHE-RSA-AES256-SHA384 937 928 56% 994974 2404 991655 171 0 0 192.168.139.241 CH - [2015-05-02 12:42:02.885431] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdMCqwxQzZrjF1R-P4AAAAJ TLSv1.2 ECDHE-RSA-AES256-SHA384 953 8781 22% 1014630 3624 6088 182 0 0 192.168.139.241 CH - [2015-05-02 12:42:02.846178] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdMCqwxQzZrjF1R-P0AAAAD TLSv1.2 ECDHE-RSA-AES256-SHA384 630 2015 22% 1132245 3551 127487 192 0 0 192.168.139.241 CH - [2015-05-02 12:42:02.887496] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdMCqwxQzZrjF1Ss64AAABB TLSv1.2 ECDHE-RSA-AES256-SHA384 969 4485 23% 1204766 4704 197824 231 0 0 192.168.139.241 CH - [2015-05-02 12:42:04.217055] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "af20b21a.5238d24cd3315" VjdMDKwxQzZrjF1Ss7AAAABA TLSv1.2 ECDHE-RSA-AES256-SHA384 662 261 -% 807704 4067 802601 273 0 0 192.168.192.35 CH - [2015-05-02 12:42:06.919820] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdMDqwxQzZrjF1Ss7IAAAB3 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1338 4447 -% 967637 4613 961945 372 0 0 192.168.192.35 CH - [2015-05-02 12:42:07.912317] "GET /EMail/main.aspx HTTP/1.1" 200 3383 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdMD6wxQzZrjF1Ss7MAAABG TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 3799 -% 863345 1890 859824 1137 0 0 192.168.192.35 CH - [2015-05-02 12:42:08.863371] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdMEKwxQzZrjF1Ss7UAAABH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 4128 -% 962603 2131 950870 9102 0 0 192.168.192.35 CH - [2015-05-02 12:42:08.911913] "GET /EMail/overview.aspx HTTP/1.1" 200 5289 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdMEKwxQzZrjF1R-P8AAAAL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1134 9737 -% 992498 2801 986046 2982 0 0 192.168.192.35 CH - [2015-05-02 12:42:08.920131] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdMEKwxQzZrjF1R-QAAAAAI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1160 13205 -% 1828398 2129 817921 4698 0 0 192.168.192.35 CH - [2015-05-02 12:42:12.034493] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdMFKwxQzZrjF1R-QEAAAAK TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 511 409 -% 993835 5334 987360 153 0 0 192.168.192.35 CH - [2015-05-02 12:42:13.093611] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdMFawxQzZrjF1R-QIAAAAM TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 458 318 -% 692635 3065 688852 141 0 0 192.168.192.35 CH - [2015-05-02 12:42:13.812768] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdMFawxQzZrjF1R-QMAAAAN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 440 7758 -% 926038 2899 917547 4743 0 0 192.168.104.36 CH - [2015-05-02 12:43:06.990984] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "33477aaf.5238d47ccf287" VjdMSqwxQzZrjF1Ss70AAABI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1129 5711 -% 831786 2172 828931 150 0 0 192.168.104.36 CH - [2015-05-02 12:43:06.992417] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "33477aaf.5238d47ccf287" VjdMSqwxQzZrjF1R-QcAAAAR TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1087 6577 14% 1056538 1938 53340 169 0 0 192.168.104.36 CH - [2015-05-02 12:43:07.118483] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "33477aaf.5238d47ccf287" VjdMS6wxQzZrjF1R-QgAAAAS TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1115 12018 22% 1119222 2068 113331 214 0 0 192.168.104.36 CH - [2015-05-02 12:43:07.118989] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "33477aaf.5238d47ccf287" VjdMS6wxQzZrjF1Ss74AAABU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1085 4620 56% 1202484 2845 198677 170 0 0 192.168.104.36 CH - [2015-05-02 12:43:07.212285] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "33477aaf.5238d47ccf287" VjdMS6wxQzZrjF1Ss78AAABP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1120 8269 23% 1130673 3003 125802 150 0 0 192.168.104.36 CH - [2015-05-02 12:43:09.206087] "GET /EMail/scripts/csshover.htc HTTP/1.1" 200 4255 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "33477aaf.5238d47ccf287" VjdMTawxQzZrjF1Ss8EAAABN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 340 4676 -% 997764 1895 995034 217 0 0 192.168.104.36 CH - [2015-05-02 12:43:09.287460] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "33477aaf.5238d47ccf287" VjdMTawxQzZrjF1Ss8IAAABJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 483 1792 -% 956412 3063 952060 145 0 0 192.168.104.36 CH - [2015-05-02 12:43:10.292540] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "33477aaf.5238d47ccf287" VjdMTqwxQzZrjF1Ss8MAAABe TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 337 1567 -% 916585 2923 912703 154 0 0 192.168.104.36 CH - [2015-05-02 12:43:15.830988] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "33477aaf.5238d47ccf287" VjdMU6wxQzZrjF1Ss8QAAABW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 481 2088 -% 903079 3081 898801 286 0 0 192.168.104.36 CH - [2015-05-02 12:43:16.459040] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "33477aaf.5238d47ccf287" VjdMVKwxQzZrjF1Ss8UAAABa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1297 4447 -% 915644 4219 910475 190 0 0 192.168.104.36 CH - [2015-05-02 12:43:17.393105] "GET /EMail/main.aspx HTTP/1.1" 200 3394 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "33477aaf.5238d47ccf287" VjdMVawxQzZrjF1Ss8YAAABC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 484 3810 -% 876238 3108 870855 1603 0 0 192.168.104.36 CH - [2015-05-02 12:43:18.584692] "GET /EMail/overview.aspx HTTP/1.1" 200 5303 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "33477aaf.5238d47ccf287" VjdMVqwxQzZrjF1R-QoAAAAT TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1089 9751 -% 1111082 2467 105224 2718 0 0 192.168.104.36 CH - [2015-05-02 12:43:18.497263] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "33477aaf.5238d47ccf287" VjdMVqwxQzZrjF1Ss8gAAABg TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 437 4141 -% 1277819 2731 264180 10164 0 0 192.168.104.36 CH - [2015-05-02 12:43:18.542383] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "33477aaf.5238d47ccf287" VjdMVqwxQzZrjF1Ss8kAAABf TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1115 13218 -% 2120812 3149 107430 3240 0 0 192.168.104.36 CH - [2015-05-02 12:43:19.739285] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "33477aaf.5238d47ccf287" VjdMV6wxQzZrjF1R-QwAAAAY TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 466 1248 -% 972576 3080 968552 205 0 0 192.168.104.36 CH - [2015-05-02 12:43:20.725646] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "33477aaf.5238d47ccf287" VjdMWKwxQzZrjF1Ss8oAAABQ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 508 1260 -% 809299 2995 805470 173 0 0 192.168.104.36 CH - [2015-05-02 12:43:21.650305] "GET /EMail/inbox.aspx HTTP/1.1" 200 53031 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "33477aaf.5238d47ccf287" VjdMWawxQzZrjF1Ss8sAAABh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 440 53773 -% 2102941 1874 611654 16340 0 0 192.168.104.36 CH - [2015-05-02 12:43:23.829122] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "33477aaf.5238d47ccf287" VjdMW6wxQzZrjF1Ss8wAAABb TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 458 539 -% 704340 2335 701252 200 0 0 192.168.104.36 CH - [2015-05-02 12:43:23.882239] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "33477aaf.5238d47ccf287" VjdMW6wxQzZrjF1Ss84AAABm TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1111 5904 -% 838015 2347 834615 245 0 0 192.168.104.36 CH - [2015-05-02 12:43:23.840125] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "33477aaf.5238d47ccf287" VjdMW6wxQzZrjF1Ss80AAABX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 461 1813 -% 893205 3496 888808 181 0 0 192.168.104.36 CH - [2015-05-02 12:43:23.834076] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "33477aaf.5238d47ccf287" VjdMW6wxQzZrjF1R-Q0AAAAW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 461 527 -% 1001475 1784 0 161 0 0 192.168.104.36 CH - [2015-05-02 12:43:26.240198] "GET /EMail/message.aspx?&mailId=3928_96&folderId=2833_44&mailPos=0 HTTP/1.1" 200 11354 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "33477aaf.5238d47ccf287" VjdMXqwxQzZrjF1R-Q4AAAAa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 482 11835 -% 1434751 3260 403303 27319 0 0 192.168.104.36 CH - [2015-05-02 12:43:30.277999] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3928_96&folderId=2833_44&attachmentId=2&token=-54666522125537444E18 HTTP/1.1" 200 57908 "https://www.example.com/EMail/message.aspx?&mailId=3928_96&folderId=2833_44&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "33477aaf.5238d47ccf287" VjdMYqwxQzZrjF1R-Q8AAAAV TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 589 59574 -% 1137944 4601 110047 195 0 0 192.168.104.36 CH - [2015-05-02 12:43:49.797454] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "33477aaf.5238d47ccf287" VjdMdawxQzZrjF1R-RAAAAAd TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1109 6114 -% 965480 3129 961336 259 0 0 192.168.104.36 CH - [2015-05-02 12:43:51.140831] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "33477aaf.5238d47ccf287" VjdMd6wxQzZrjF1R-REAAAAe TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 458 409 -% 885273 2971 881457 208 0 0 192.168.104.36 CH - [2015-05-02 12:43:52.036631] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "33477aaf.5238d47ccf287" VjdMeKwxQzZrjF1R-RIAAAAZ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 439 676 75% 965851 3062 961482 348 0 0 192.168.104.36 CH - [2015-05-02 12:43:53.120741] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 - - + "33477aaf.5238d47ccf287" VjdMeawxQzZrjF1R-RMAAAAb TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 278 1554 -% 3417 2486 59 140 0 0 192.168.104.36 CH - [2015-05-02 12:43:53.178313] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "33477aaf.5238d47ccf287" VjdMeawxQzZrjF1R-RQAAAAc TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 405 318 -% 863838 3340 859745 168 0 0 192.168.104.36 CH - [2015-05-02 12:43:54.056766] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "33477aaf.5238d47ccf287" VjdMeqwxQzZrjF1R-RUAAAAf TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 387 7771 -% 941660 3381 933591 3834 0 0 192.168.104.36 CH - [2015-05-02 12:43:55.098886] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "33477aaf.5238d47ccf287" VjdMe6wxQzZrjF1Ss9UAAABt TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1156 5902 22% 679808 2535 676205 161 0 0 192.168.104.36 CH - [2015-05-02 12:43:55.046792] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "33477aaf.5238d47ccf287" VjdMe6wxQzZrjF1R-RYAAAAh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 509 2427 14% 826360 3145 821773 163 0 0 192.168.104.36 CH - [2015-05-02 12:43:55.109793] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "33477aaf.5238d47ccf287" VjdMe6wxQzZrjF1Ss9YAAABn TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1187 11687 22% 896613 3124 889447 248 0 0 192.168.104.36 CH - [2015-05-02 12:43:55.163584] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "33477aaf.5238d47ccf287" VjdMe6wxQzZrjF1R-xQzZrjl TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1195 4232 -% 868412 1998 865783 144 0 0 192.168.104.36 CH - [2015-05-02 12:43:55.113611] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "33477aaf.5238d47ccf287" VjdMe6wxQzZrjF1R-RgAAAAj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1192 8122 23% 939566 1989 934396 254 0 0 192.168.104.36 CH - [2015-05-02 12:43:55.101870] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "33477aaf.5238d47ccf287" VjdMe6wxQzZrjF1R-RcAAAAg TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1155 4620 56% 1004863 4856 0 158 0 0 192.168.104.36 CH - [2015-05-02 12:43:56.164464] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "33477aaf.5238d47ccf287" VjdMfKwxQzZrjF1R-RoAAAAi TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 549 206 -% 630101 3104 626201 160 0 0 192.168.186.76 CH - [2015-05-02 12:49:19.283846] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdNv6wxQzZrjF1StAMAAABW TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 12038 -% 1135391 7699 119820 4429 3 0 192.168.186.76 CH - [2015-05-02 12:49:19.283911] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdNv6wxQzZrjF1R-TEAAAA@ TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 12038 -% 1138971 7632 125074 3905 3 0 192.168.186.76 CH - [2015-05-02 12:49:20.473089] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdNwKwxQzZrjF1R-TIAAAAE TLSv1.2 ECDHE-RSA-AES256-SHA384 662 7866 -% 838257 6690 827651 2200 3 0 192.168.186.76 CH - [2015-05-02 12:49:22.454847] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdNwqwxQzZrjF1R-TMAAAAA TLSv1.2 ECDHE-RSA-AES256-SHA384 822 469 -% 945320 8521 934688 165 3 0 192.168.186.76 CH - [2015-05-02 12:49:23.414382] "GET /EMail/main.aspx HTTP/1.1" 200 3391 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdNw6wxQzZrjF1R-TQAAAAB TLSv1.2 ECDHE-RSA-AES256-SHA384 678 3898 -% 870568 7940 858875 2315 3 0 192.168.186.76 CH - [2015-05-02 12:49:24.324501] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdNxKwxQzZrjF1R-TUAAAA9 TLSv1.2 ECDHE-RSA-AES256-SHA384 662 4234 -% 974918 6350 956189 10357 3 0 192.168.186.76 CH - [2015-05-02 12:49:24.326467] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdNxKwxQzZrjF1StAYAAABd TLSv1.2 ECDHE-RSA-AES256-SHA384 694 9666 -% 1831592 7422 815395 3705 3 0 192.168.192.35 CH - [2015-05-02 12:49:36.549179] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdN0KwxQzZrjF1StAgAAABg TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 849 11799 -% 1092986 4258 84096 3823 0 0 192.168.192.35 CH - [2015-05-02 12:49:43.605313] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdN16wxQzZrjF1StAkAAABf TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1263 564 -% 1001519 5031 0 157 0 0 192.168.192.35 CH - [2015-05-02 12:49:44.627920] "GET /EMail/main.aspx HTTP/1.1" 200 3383 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdN2KwxQzZrjF1StAsAAABh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 3799 -% 923464 2984 918587 1183 0 0 192.168.192.35 CH - [2015-05-02 12:49:45.619609] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdN2awxQzZrjF1StAwAAABb TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 4128 -% 1017568 2191 3082 11471 0 0 192.168.192.35 CH - [2015-05-02 12:49:45.644772] "GET /EMail/overview.aspx HTTP/1.1" 200 5289 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdN2awxQzZrjF1StA0AAABX TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1059 5854 -% 1164001 1860 158717 2813 0 0 192.168.192.35 CH - [2015-05-02 12:49:45.652364] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdN2awxQzZrjF1StA4AAABm TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1085 9322 -% 1712568 2128 702702 3964 0 0 192.168.192.35 CH - [2015-05-02 12:49:49.281771] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdN3awxQzZrjF1StA8AAABo TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 511 409 -% 974545 3272 970322 190 0 0 192.168.192.35 CH - [2015-05-02 12:49:50.315576] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdN3qwxQzZrjF1StBAAAABi TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 458 318 -% 975507 3481 971249 148 0 0 192.168.192.35 CH - [2015-05-02 12:49:51.302793] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdN36wxQzZrjF1StBEAAABv TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 440 7758 -% 938570 1975 931564 4333 0 0 192.168.212.2 CH - [2015-05-02 12:50:58.291864] "GET /EMail/main.aspx HTTP/1.1" 200 3415 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9b4101d.5238bebd3071f" VjdOIqwxQzZrjF1StBwAAABs TLSv1 ECDHE-RSA-AES256-SHA 872 7670 -% 981249 3534 974964 1911 0 0 192.168.186.76 CH - [2015-05-02 12:51:19.247078] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdON6wxQzZrjF1StB8AAABw TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1690076 5083 676765 2763 3 0 192.168.186.76 CH - [2015-05-02 12:51:22.968376] "GET /EMail/message.aspx?&mailId=3927_87&folderId=947_65&mailPos=2 HTTP/1.1" 200 16210 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdOOqwxQzZrjF1StCAAAABy TLSv1.2 ECDHE-RSA-AES256-SHA384 710 16884 -% 1236451 9012 189755 34720 3 0 192.168.212.2 CH - [2015-05-02 12:51:50.695776] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9875 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9b4101d.5238bebd3071f" VjdOVqwxQzZrjF1StCUAAABr TLSv1 ECDHE-RSA-AES256-SHA 840 14187 -% 1135439 2022 127587 5074 0 0 192.168.212.2 CH - [2015-05-02 12:51:50.692815] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "9b4101d.5238bebd3071f" VjdOVqwxQzZrjF1StCQAAAB@ TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1615376 3223 603257 4808 0 0 192.168.186.76 CH - [2015-05-02 12:52:11.812912] "GET /EMail/newMessage.aspx?action=reply&mailId=3927_87&folderId=947_65&showPics=false HTTP/1.1" 200 24023 "https://www.example.com/EMail/message.aspx?&mailId=3927_87&folderId=947_65&mailPos=2" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdOa6wxQzZrjF1StCoAAABF TLSv1.2 ECDHE-RSA-AES256-SHA384 1292 25023 -% 1062002 12994 0 41570 6 3 192.168.186.76 CH - [2015-05-02 12:52:12.950735] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3927_87&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdObKwxQzZrjF1StCsAAABB TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 894634 7894 876193 9029 3 0 192.168.186.76 CH - [2015-05-02 12:52:31.481097] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdOf6wxQzZrjF1StDAAAAB3 TLSv1.2 ECDHE-RSA-AES256-SHA384 1261 13742 -% 1665853 7471 648295 4471 3 0 192.168.186.76 CH - [2015-05-02 12:52:35.426985] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdOg6wxQzZrjF1StDIAAABT TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1122050 13078 106266 274 3 0 192.168.186.76 CH - [2015-05-02 12:52:36.567375] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 9486 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdOhKwxQzZrjF1StDQAAABL TLSv1.2 ECDHE-RSA-AES256-SHA384 726 10079 -% 1011772 7743 0 3089 3 0 192.168.186.76 CH - [2015-05-02 12:52:38.183292] "GET /EMail/message.aspx?&mailId=3927_90&folderId=947_65&mailPos=0 HTTP/1.1" 200 16235 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdOhqwxQzZrjF1StDUAAABM TLSv1.2 ECDHE-RSA-AES256-SHA384 726 16916 -% 1300641 8188 246030 43985 3 0 192.168.186.76 CH - [2015-05-02 12:56:05.033328] "GET /EMail/newMessage.aspx?action=reply&mailId=3927_90&folderId=947_65&showPics=false HTTP/1.1" 200 24036 "https://www.example.com/EMail/message.aspx?&mailId=3927_90&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdPVawxQzZrjF1StFUAAABu TLSv1.2 ECDHE-RSA-AES256-SHA384 1292 25023 -% 1259552 5621 198259 43347 6 3 192.168.186.76 CH - [2015-05-02 12:56:06.357280] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3927_90&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdPVqwxQzZrjF1StFYAAABp TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 965153 6659 950906 5604 3 0 192.168.186.76 CH - [2015-05-02 12:56:22.057359] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdPZqwxQzZrjF1StFkAAABz TLSv1.2 ECDHE-RSA-AES256-SHA384 1261 13742 -% 1415321 4654 398782 5753 3 0 192.168.186.76 CH - [2015-05-02 12:56:25.701920] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdPaawxQzZrjF1StFoAAAB0 TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1091744 11807 77911 215 3 0 192.168.186.76 CH - [2015-05-02 12:56:26.806925] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8383 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdPaqwxQzZrjF1StFsAAABw TLSv1.2 ECDHE-RSA-AES256-SHA384 726 8975 -% 1159742 5573 149645 2661 3 0 192.168.186.76 CH - [2015-05-02 12:56:28.788672] "GET /EMail/message.aspx?&mailId=3929_5&folderId=947_65&mailPos=0 HTTP/1.1" 200 15995 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdPbKwxQzZrjF1StFwAAABy TLSv1.2 ECDHE-RSA-AES256-SHA384 726 16676 -% 1346773 8333 303697 32111 3 0 192.168.186.76 CH - [2015-05-02 12:57:29.940668] "GET /EMail/newMessage.aspx?action=reply&mailId=3929_5&folderId=947_65&showPics=false HTTP/1.1" 200 23613 "https://www.example.com/EMail/message.aspx?&mailId=3929_5&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdPqawxQzZrjF1StGUAAAB8 TLSv1.2 ECDHE-RSA-AES256-SHA384 1292 24607 -% 1324627 8648 250124 53023 6 3 192.168.186.76 CH - [2015-05-02 12:57:31.325650] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3929_5&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdPq6wxQzZrjF1StGcAAABK TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 947018 5193 933686 6011 3 0 192.168.186.76 CH - [2015-05-02 12:57:31.414190] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5871 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3929_5&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdPq6wxQzZrjF1R-VUAAAAg TLSv1.2 ECDHE-RSA-AES256-SHA384 1228 9811 -% 879204 9110 0 0 3 0 192.168.2.26 CH - [2015-05-02 13:14:06.801500] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7373 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "86a82af8.5238db6bdba5c" VjdTjqwxQzZrjF1R-YIAAAAX TLSv1.2 ECDHE-RSA-AES256-SHA384 749 11939 -% 974391 2199 967453 3740 0 0 192.168.2.26 CH - [2015-05-02 13:14:07.806553] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "86a82af8.5238db6bdba5c" VjdTj6wxQzZrjF1R-YMAAAAT TLSv1.2 ECDHE-RSA-AES256-SHA384 502 2575 14% 720554 2774 716385 164 0 0 192.168.2.26 CH - [2015-05-02 13:14:07.821958] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "86a82af8.5238db6bdba5c" VjdTj6wxQzZrjF1R-YUAAAAW TLSv1.2 ECDHE-RSA-AES256-SHA384 866 1979 -% 961066 1876 958152 227 0 0 192.168.2.26 CH - [2015-05-02 13:14:07.823619] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "86a82af8.5238db6bdba5c" VjdTj6wxQzZrjF1StQoAAABj TLSv1.2 ECDHE-RSA-AES256-SHA384 850 4485 23% 962823 2707 957915 160 0 0 192.168.2.26 CH - [2015-05-02 13:14:07.806508] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "86a82af8.5238db6bdba5c" VjdTj6wxQzZrjF1StQgAAABv TLSv1.2 ECDHE-RSA-AES256-SHA384 861 5896 22% 1007220 2847 3436 124 0 0 192.168.2.26 CH - [2015-05-02 13:14:07.821524] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "86a82af8.5238db6bdba5c" VjdTj6wxQzZrjF1R-YQAAAAY TLSv1.2 ECDHE-RSA-AES256-SHA384 850 8781 22% 1054175 2418 47598 200 0 0 192.168.2.26 CH - [2015-05-02 13:14:07.822260] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "86a82af8.5238db6bdba5c" VjdTj6wxQzZrjF1StQkAAABk TLSv1.2 ECDHE-RSA-AES256-SHA384 818 928 56% 1077882 1846 74849 227 0 0 192.168.2.26 CH - [2015-05-02 13:14:08.935422] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "86a82af8.5238db6bdba5c" VjdTkKwxQzZrjF1StQsAAABq TLSv1.2 ECDHE-RSA-AES256-SHA384 550 1898 -% 842654 3100 838302 290 0 0 192.168.2.26 CH - [2015-05-02 13:14:09.802007] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "86a82af8.5238db6bdba5c" VjdTkawxQzZrjF1StQwAAABt TLSv1.2 ECDHE-RSA-AES256-SHA384 390 1658 -% 973398 3340 968268 229 0 0 192.168.128.10 CH - [2015-05-02 13:15:46.725977] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7346 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "564133d4.5238dbcb27459" VjdT8qwxQzZrjF1StR4AAABE TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 680 11952 -% 871029 2075 864486 3650 0 0 192.168.128.10 CH - [2015-05-02 13:15:47.694677] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "564133d4.5238dbcb27459" VjdT86wxQzZrjF1StR8AAAB6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 468 2545 14% 905982 3072 901035 203 0 0 192.168.128.10 CH - [2015-05-02 13:15:49.298705] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "564133d4.5238dbcb27459" VjdT9awxQzZrjF1StSAAAAB7 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 483 1685 -% 971474 4028 966208 185 0 0 192.168.186.76 CH - [2015-05-02 13:20:16.198057] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdVAKwxQzZrjF1StUwAAABx TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1574252 4541 561388 3519 3 0 192.168.186.76 CH - [2015-05-02 13:20:18.774562] "GET /EMail/message.aspx?&mailId=3929_12&folderId=947_65&mailPos=0 HTTP/1.1" 200 16505 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdVAqwxQzZrjF1StU0AAABl TLSv1.2 ECDHE-RSA-AES256-SHA384 710 17257 -% 1251755 5757 210516 33117 3 0 192.168.186.76 CH - [2015-05-02 13:20:23.465230] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3929_12&folderId=947_65&attachmentId=3&token=-67736336650767411E18 HTTP/1.1" 200 809964 "https://www.example.com/EMail/message.aspx?&mailId=3929_12&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdVB6wxQzZrjF1StU8AAABp TLSv1.2 ECDHE-RSA-AES256-SHA384 806 854018 -% 1392969 10438 35691 230 3 0 192.168.186.76 CH - [2015-05-02 13:20:56.664770] "GET /EMail/newMessage.aspx?action=reply&mailId=3929_12&folderId=947_65&showPics=false HTTP/1.1" 200 24360 "https://www.example.com/EMail/message.aspx?&mailId=3929_12&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdVKKwxQzZrjF1StVQAAABw TLSv1.2 ECDHE-RSA-AES256-SHA384 1367 29274 -% 1199831 5410 144005 46661 6 3 192.168.186.76 CH - [2015-05-02 13:20:57.939651] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3929_12&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdVKawxQzZrjF1StVUAAABy TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 881860 10579 864538 4994 3 0 192.168.186.76 CH - [2015-05-02 13:20:58.021412] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5879 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3929_12&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdVKqwxQzZrjF1StVYAAAB4 TLSv1.2 ECDHE-RSA-AES256-SHA384 1303 13742 -% 849869 6909 0 0 3 0 192.168.186.76 CH - [2015-05-02 13:21:11.949398] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3929_12&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdVN6wxQzZrjF1StVsAAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 7511 630 -% 1475937 315633 140812 224 76 0 192.168.186.76 CH - [2015-05-02 13:21:13.440552] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3929_12&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdVOawxQzZrjF1StVwAAAB6 TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 906134 9278 884786 9806 3 0 192.168.128.10 CH - [2015-05-02 13:24:05.151916] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdV5awxQzZrjF1StXgAAABd TLSv1.2 ECDHE-RSA-AES128-SHA256 1043 5832 22% 1031349 10064 19049 152 6 0 192.168.128.10 CH - [2015-05-02 13:24:05.227976] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdV5awxQzZrjF1R-aEAAAA1 TLSv1.2 ECDHE-RSA-AES128-SHA256 1000 864 56% 1095854 5619 88087 191 6 0 192.168.128.10 CH - [2015-05-02 13:24:05.269494] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdV5awxQzZrjF1StXkAAABg TLSv1.2 ECDHE-RSA-AES128-SHA256 1032 4660 23% 1090173 9859 76807 189 6 0 192.168.128.10 CH - [2015-05-02 13:24:05.320938] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdV5awxQzZrjF1StXsAAABQ TLSv1.2 ECDHE-RSA-AES128-SHA256 1032 1931 -% 1060458 7098 51377 181 6 0 192.168.128.10 CH - [2015-05-02 13:24:05.289811] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7161 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdV5awxQzZrjF1StXoAAABC TLSv1.2 ECDHE-RSA-AES128-SHA256 1032 8403 22% 1334606 5319 323458 209 6 0 192.168.128.10 CH - [2015-05-02 13:24:06.654484] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdV5qwxQzZrjF1StXwAAABf TLSv1.2 ECDHE-RSA-AES128-SHA256 758 1866 -% 706344 6006 698221 197 6 0 192.168.128.10 CH - [2015-05-02 13:24:07.390349] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdV56wxQzZrjF1StX0AAABh TLSv1.2 ECDHE-RSA-AES128-SHA256 598 1626 -% 950671 8880 940214 154 6 0 192.168.128.10 CH - [2015-05-02 13:24:27.712633] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "f17b1662.5238dda594215" VjdV@6wxQzZrjF1StYIAAABi TLSv1.2 ECDHE-RSA-AES128-SHA256 1048 177 -% 926866 6158 919251 148 6 0 192.168.128.10 CH - [2015-05-02 13:24:28.093956] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdV-KwxQzZrjF1StYMAAABj TLSv1.2 ECDHE-RSA-AES128-SHA256 1192 630 -% 1043004 7116 34131 223 6 0 192.168.128.10 CH - [2015-05-02 13:24:29.152118] "GET /EMail/main.aspx HTTP/1.1" 200 3405 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdV-awxQzZrjF1StYQAAABv TLSv1.2 ECDHE-RSA-AES128-SHA256 758 3882 -% 923786 8736 911728 1273 6 0 192.168.128.10 CH - [2015-05-02 13:24:30.233417] "GET /EMail/overview.aspx HTTP/1.1" 200 5300 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdV-qwxQzZrjF1StYYAAABq TLSv1.2 ECDHE-RSA-AES128-SHA256 984 5963 -% 764922 7445 754372 1698 6 0 192.168.128.10 CH - [2015-05-02 13:24:30.154525] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdV-qwxQzZrjF1StYUAAABk TLSv1.2 ECDHE-RSA-AES128-SHA256 694 4202 -% 948593 9394 929273 7752 6 0 192.168.128.10 CH - [2015-05-02 13:24:31.026385] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdV-6wxQzZrjF1StYcAAABt TLSv1.2 ECDHE-RSA-AES128-SHA256 726 1322 -% 806115 5297 798829 152 6 0 192.168.128.10 CH - [2015-05-02 13:24:30.243033] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdV-qwxQzZrjF1R-aIAAAAx TLSv1.2 ECDHE-RSA-AES128-SHA256 1016 9683 -% 1647176 7728 629369 4671 6 0 192.168.128.10 CH - [2015-05-02 13:24:31.931833] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdV-6wxQzZrjF1R-aMAAAA4 TLSv1.2 ECDHE-RSA-AES128-SHA256 774 1338 -% 952245 8561 941507 212 6 0 192.168.128.10 CH - [2015-05-02 13:24:36.508922] "GET /EMail/inbox.aspx HTTP/1.1" 200 11117 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdWBKwxQzZrjF1R-aQAAAA0 TLSv1.2 ECDHE-RSA-AES128-SHA256 694 11663 -% 1209689 8808 193300 5773 6 0 192.168.128.10 CH - [2015-05-02 13:24:37.777236] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdWBawxQzZrjF1R-aUAAAA5 TLSv1.2 ECDHE-RSA-AES128-SHA256 710 602 -% 830649 8605 819800 196 6 0 192.168.128.10 CH - [2015-05-02 13:24:37.837681] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdWBawxQzZrjF1StYoAAABx TLSv1.2 ECDHE-RSA-AES128-SHA256 1016 2123 -% 843010 8517 832342 196 6 0 192.168.128.10 CH - [2015-05-02 13:24:37.855816] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdWBawxQzZrjF1StYsAAABu TLSv1.2 ECDHE-RSA-AES128-SHA256 1016 779 -% 979675 7401 970818 155 6 0 192.168.128.10 CH - [2015-05-02 13:24:45.980545] "GET /EMail/message.aspx?&mailId=3928_43&folderId=3281_12&mailPos=0 HTTP/1.1" 200 15592 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdWDawxQzZrjF1StY0AAABp TLSv1.2 ECDHE-RSA-AES128-SHA256 1032 16389 -% 1293836 7747 245996 37002 6 0 192.168.128.10 CH - [2015-05-02 13:25:06.987688] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3928_43&folderId=3281_12&attachmentId=3&token=-46044424629443656E18 HTTP/1.1" 200 12164 "https://www.example.com/EMail/message.aspx?&mailId=3928_43&folderId=3281_12&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdWIqwxQzZrjF1StZEAAABy TLSv1.2 ECDHE-RSA-AES128-SHA256 1144 13427 -% 1118247 7648 104463 219 6 0 192.168.128.10 CH - [2015-05-02 13:25:58.041927] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/message.aspx?&mailId=3928_43&folderId=3281_12&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdWVqwxQzZrjF1R-a0AAAA- TLSv1.2 ECDHE-RSA-AES128-SHA256 1048 2331 -% 1055260 5744 47984 153 6 0 192.168.128.10 CH - [2015-05-02 13:26:01.987533] "GET /EMail/downloadPDF.aspx HTTP/1.1" 200 4294 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdWWawxQzZrjF1R-a4AAAAH TLSv1.2 ECDHE-RSA-AES128-SHA256 646 4778 -% 868926 8333 855362 2312 6 0 192.168.128.10 CH - [2015-05-02 13:26:11.668798] "POST /EMail/MailHandler HTTP/1.1" 200 15617 "https://www.example.com/EMail/message.aspx?&mailId=3928_43&folderId=3281_12&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdWY6wxQzZrjF1R-a8AAAAG TLSv1.2 ECDHE-RSA-AES128-SHA256 1240 16713 -% 1748271 13672 731220 222 6 0 192.168.128.10 CH - [2015-05-02 13:29:25.430954] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 11117 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdXJawxQzZrjF1StbsAAABX TLSv1.2 ECDHE-RSA-AES128-SHA256 1075 15597 -% 1410004 5591 399157 3683 6 0 192.168.128.10 CH - [2015-05-02 13:29:25.413125] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdXJawxQzZrjF1StboAAABb TLSv1.2 ECDHE-RSA-AES128-SHA256 1091 13371 -% 1575060 6416 559165 4280 6 0 192.168.128.10 CH - [2015-05-02 13:29:33.700266] "GET /EMail/message.aspx?&mailId=3927_35&folderId=3281_12&mailPos=1 HTTP/1.1" 200 16319 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdXLawxQzZrjF1Stb4AAABi TLSv1.2 ECDHE-RSA-AES128-SHA256 1032 17109 -% 1339663 7033 297082 32534 6 0 192.168.128.10 CH - [2015-05-02 13:29:38.979295] "GET /EMail/downloadPDF.aspx HTTP/1.1" 200 4294 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdXMqwxQzZrjF1StcAAAABv TLSv1.2 ECDHE-RSA-AES128-SHA256 646 4778 -% 904697 6021 894503 2277 6 0 192.168.128.10 CH - [2015-05-02 13:29:48.210857] "POST /EMail/MailHandler HTTP/1.1" 200 2228753 "https://www.example.com/EMail/message.aspx?&mailId=3927_35&folderId=3281_12&mailPos=1" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdXPKwxQzZrjF1R-bkAAAAN TLSv1.2 ECDHE-RSA-AES128-SHA256 1240 2287368 -% 2668562 13178 216288 256 6 0 192.168.128.10 CH - [2015-05-02 13:30:25.507519] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3927_35&folderId=3281_12&attachmentId=4&token=-67480745872552305E18 HTTP/1.1" 200 98483 "https://www.example.com/EMail/message.aspx?&mailId=3927_35&folderId=3281_12&mailPos=1" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdXYawxQzZrjF1StcoAAAB0 TLSv1.2 ECDHE-RSA-AES128-SHA256 1144 103435 -% 844217 8185 793243 201 6 0 192.168.128.10 CH - [2015-05-02 13:31:17.905087] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3927_35&folderId=3281_12&attachmentId=3&token=-67480745872552305E18 HTTP/1.1" 200 3051523 "https://www.example.com/EMail/message.aspx?&mailId=3927_35&folderId=3281_12&mailPos=1" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdXlawxQzZrjF1R-b0AAAAX TLSv1.2 ECDHE-RSA-AES128-SHA256 1144 3183952 -% 1885466 11020 175318 250 6 0 192.168.128.10 CH - [2015-05-02 13:31:54.540847] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3927_35&folderId=3281_12&attachmentId=5&token=-67480745872552305E18 HTTP/1.1" 200 18832 "https://www.example.com/EMail/message.aspx?&mailId=3927_35&folderId=3281_12&mailPos=1" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdXuqwxQzZrjF1StdkAAAB1 TLSv1.2 ECDHE-RSA-AES128-SHA256 1144 20258 -% 1007037 13025 0 236 6 0 192.168.165.46 CH - [2015-05-02 13:32:06.588169] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7370 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cfhost.5238df719f709" VjdXxqwxQzZrjF1StdwAAABG TLSv1.2 ECDHE-RSA-AES128-SHA256 687 11891 -% 804973 1990 799688 2575 0 0 192.168.165.46 CH - [2015-05-02 13:32:07.500479] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cfhost.5238df719f709" VjdXx6wxQzZrjF1Std0AAAB3 TLSv1.2 ECDHE-RSA-AES128-SHA256 470 2713 14% 938194 2042 934423 224 0 0 192.168.165.46 CH - [2015-05-02 13:32:07.558531] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cfhost.5238df719f709" VjdXx6wxQzZrjF1Std8AAABT TLSv1.2 ECDHE-RSA-AES128-SHA256 756 864 56% 1039517 1758 36800 248 0 0 192.168.165.46 CH - [2015-05-02 13:32:07.558104] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cfhost.5238df719f709" VjdXx6wxQzZrjF1R-b8AAAAW TLSv1.2 ECDHE-RSA-AES128-SHA256 788 4405 23% 1076385 2573 72266 165 0 0 192.168.165.46 CH - [2015-05-02 13:32:07.553863] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7239 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cfc9ac0c.5238df719f709" VjdXx6wxQzZrjF1Std4AAABH TLSv1.2 ECDHE-RSA-AES128-SHA256 788 8621 22% 1113063 3145 106209 138 0 0 192.168.165.46 CH - [2015-05-02 13:32:07.559124] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cfhost.5238df719f709" VjdXx6wxQzZrjF1SteAAAABL TLSv1.2 ECDHE-RSA-AES128-SHA256 788 1931 -% 1357738 3232 353684 153 0 0 192.168.165.46 CH - [2015-05-02 13:32:08.861779] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cfhost.5238df719f709" VjdXyKwxQzZrjF1SteMAAABS TLSv1.2 ECDHE-RSA-AES128-SHA256 518 1866 -% 946939 2988 943261 170 0 0 192.168.165.46 CH - [2015-05-02 13:32:11.293370] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "cfhost.5238df719f709" VjdXy6wxQzZrjF1SteQAAABR TLSv1.2 ECDHE-RSA-AES128-SHA256 518 0 -% 769025 3412 764640 203 0 0 192.168.165.46 CH - [2015-05-02 13:32:11.617423] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cfhost.5238df719f709" VjdXy6wxQzZrjF1SteUAAAB- TLSv1.2 ECDHE-RSA-AES128-SHA256 646 453 -% 778038 3347 773749 178 0 0 192.168.165.46 CH - [2015-05-02 13:32:12.420569] "GET /EMail/main.aspx HTTP/1.1" 200 3402 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cfhost.5238df719f709" VjdXzKwxQzZrjF1SteYAAABI TLSv1.2 ECDHE-RSA-AES128-SHA256 518 3882 -% 977761 2057 973171 1823 0 0 192.168.165.46 CH - [2015-05-02 13:32:13.517981] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cfc9ac0c.5238df719f709" VjdXzawxQzZrjF1StecAAABU TLSv1.2 ECDHE-RSA-AES128-SHA256 454 4202 -% 1123678 3499 108727 10650 0 0 192.168.165.46 CH - [2015-05-02 13:32:13.530186] "GET /EMail/overview.aspx HTTP/1.1" 200 5302 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cfhost.5238df719f709" VjdXzawxQzZrjF1StegAAABZ TLSv1.2 ECDHE-RSA-AES128-SHA256 454 5786 -% 1518294 2883 511204 3372 0 0 192.168.165.46 CH - [2015-05-02 13:32:13.529630] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cfhost.5238df719f709" VjdXzawxQzZrjF1R-cAAAAAY TLSv1.2 ECDHE-RSA-AES128-SHA256 486 9506 -% 1752007 3875 740211 3841 0 0 192.168.165.46 CH - [2015-05-02 13:32:15.089883] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cfhost.5238df719f709" VjdXz6wxQzZrjF1StekAAABN TLSv1.2 ECDHE-RSA-AES128-SHA256 486 1322 -% 970194 2121 967363 212 0 0 192.168.165.46 CH - [2015-05-02 13:32:15.349955] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cfhost.5238df719f709" VjdXz6wxQzZrjF1R-cEAAAAa TLSv1.2 ECDHE-RSA-AES128-SHA256 534 1338 -% 964514 3970 959730 171 0 0 192.168.165.46 CH - [2015-05-02 13:32:17.517258] "GET /EMail/inbox.aspx HTTP/1.1" 200 22055 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cfhost.5238df719f709" VjdX0awxQzZrjF1R-cIAAAAV TLSv1.2 ECDHE-RSA-AES128-SHA256 470 22798 -% 1352584 2630 272378 7741 0 0 192.168.165.46 CH - [2015-05-02 13:32:18.998386] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cfhost.5238df719f709" VjdX0qwxQzZrjF1Ste4AAABY TLSv1.2 ECDHE-RSA-AES128-SHA256 772 2123 -% 885969 2796 881982 440 0 0 192.168.165.46 CH - [2015-05-02 13:32:18.948724] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cfhost.5238df719f709" VjdX0qwxQzZrjF1Ste0AAABW TLSv1.2 ECDHE-RSA-AES128-SHA256 486 1882 -% 992028 1959 989278 399 0 0 192.168.165.46 CH - [2015-05-02 13:32:18.946071] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cfc9ac0c.5238df719f709" VjdX0qwxQzZrjF1StewAAABP TLSv1.2 ECDHE-RSA-AES128-SHA256 486 602 -% 1068149 2012 65201 158 0 0 192.168.165.46 CH - [2015-05-02 13:32:18.945527] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cfhost.5238df719f709" VjdX0qwxQzZrjF1R-cMAAAAd TLSv1.2 ECDHE-RSA-AES128-SHA256 486 602 -% 1131155 1941 128051 240 0 0 192.168.165.46 CH - [2015-05-02 13:32:18.997941] "GET /EMail/images/msgOpenedReplied.png HTTP/1.1" 200 717 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cfhost.5238df719f709" VjdX0qwxQzZrjF1R-cQAAAAe TLSv1.2 ECDHE-RSA-AES128-SHA256 772 1371 -% 1121166 2105 117925 247 0 0 192.168.165.46 CH - [2015-05-02 13:32:21.261191] "GET /EMail/message.aspx?&mailId=3927_94&folderId=3239_41&mailPos=0 HTTP/1.1" 200 14476 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cfhost.5238df719f709" VjdX1awxQzZrjF1R-cUAAAAZ TLSv1.2 ECDHE-RSA-AES128-SHA256 502 15092 -% 1409133 4492 375522 27631 0 0 192.168.165.46 CH - [2015-05-02 13:32:25.222087] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/message.aspx?&mailId=3927_94&folderId=3239_41&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cfhost.5238df719f709" VjdX2awxQzZrjF1R-cYAAAAb TLSv1.2 ECDHE-RSA-AES128-SHA256 518 2154 -% 1034328 2324 30908 329 0 0 192.168.165.46 CH - [2015-05-02 13:32:26.447980] "GET /EMail/message.aspx?mailId=3927_94&folderId=3239_41&print=true&showPics=false HTTP/1.1" 200 9494 "https://www.example.com/EMail/message.aspx?&mailId=3927_94&folderId=3239_41&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cfhost.5238df719f709" VjdX2qwxQzZrjF1Ste8AAABa TLSv1.2 ECDHE-RSA-AES128-SHA256 895 13912 -% 1294338 6370 267680 19052 0 0 192.168.165.46 CH - [2015-05-02 13:32:52.342117] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3927_94&folderId=3239_41&attachmentId=3&token=-222069625103294822E18 HTTP/1.1" 200 21789 "https://www.example.com/EMail/message.aspx?&mailId=3927_94&folderId=3239_41&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cfhost.5238df719f709" VjdX9KwxQzZrjF1StfYAAABm TLSv1.2 ECDHE-RSA-AES128-SHA256 900 23372 -% 1030151 3966 18931 223 0 0 192.168.26.54 CH - [2015-05-02 13:33:29.358237] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7360 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "dd776f0f.5238dfc08ef9d" VjdYGawxQzZrjF1R-ckAAAAh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 782 11771 -% 851319 2035 846235 2320 0 0 192.168.26.54 CH - [2015-05-02 13:33:31.246175] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3596 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "101e524b.5238dfc25be5f" VjdYG6wxQzZrjF1R-csAAAAj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 687 4540 23% 820715 737 818212 150 0 0 192.168.26.54 CH - [2015-05-02 13:33:31.198676] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1963 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "a879657c.5238dfc2504d4" VjdYG6wxQzZrjF1R-coAAAAl TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 439 2704 14% 962642 618 960464 150 0 0 192.168.26.54 CH - [2015-05-02 13:33:31.251310] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b06866.5238dfc25d26e" VjdYG6wxQzZrjF1R-cwAAAAg TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 692 2175 22% 1022492 408 20986 218 0 0 192.168.26.54 CH - [2015-05-02 13:33:31.258898] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "467b2a7.5238dfc25f012" VjdYG6wxQzZrjF1R-c4AAAAk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 679 1985 -% 1056768 571 55361 186 0 0 192.168.26.54 CH - [2015-05-02 13:33:31.253284] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "42b08341.5238dfc25da24" VjdYG6wxQzZrjF1Stf0AAABk TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 692 895 56% 1141819 383 140547 201 0 0 192.168.26.54 CH - [2015-05-02 13:33:31.256307] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "2d1cd9f2.5238dfc25e5f3" VjdYG6wxQzZrjF1R-c0AAAAi TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 682 7962 22% 1201519 349 198483 362 0 0 192.168.26.54 CH - [2015-05-02 13:33:32.537010] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "b0f2d78e.5238dfc3970b2" VjdYHKwxQzZrjF1R-c8AAAAn TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 428 1955 -% 979913 702 978416 152 0 0 192.168.26.54 CH - [2015-05-02 13:33:48.580631] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "abd7d92e.5238dfd2e3f17" VjdYLKwxQzZrjF1StgAAAABV TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1251 632 -% 970767 2125 967996 157 0 0 192.168.26.54 CH - [2015-05-02 13:33:49.623568] "GET /EMail/main.aspx HTTP/1.1" 200 7336 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "cdba8378.5238dfd3e2910" VjdYLawxQzZrjF1StgIAAABu TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 508 7921 -% 1036898 780 33209 2224 0 0 192.168.26.54 CH - [2015-05-02 13:34:09.451091] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7360 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "2eb4ded5.5238dfe6cb453" VjdYQawxQzZrjF1StgYAAABz TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 995 8083 -% 663619 1764 658697 2807 0 0 192.168.26.54 CH - [2015-05-02 13:34:25.809460] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "73a94d54.5238dff665034" VjdYUawxQzZrjF1StgoAAABy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1251 632 -% 1190703 3182 186510 200 0 0 192.168.26.54 CH - [2015-05-02 13:34:27.096126] "GET /EMail/main.aspx HTTP/1.1" 200 7336 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" www.example.com 192.168.34.16 443 proxy-server - + "90host.5238dff79f23e" VjdYU6wxQzZrjF1StgsAAAB4 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 508 7921 -% 861654 801 857851 2373 0 0 192.168.128.10 CH - [2015-05-02 13:38:17.757772] "GET /EMail/sent.aspx?dir=desc HTTP/1.1" 200 7221 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdZOawxQzZrjF1StjQAAABm TLSv1.2 ECDHE-RSA-AES128-SHA256 1075 11571 -% 998226 6420 985596 3937 6 0 192.168.128.10 CH - [2015-05-02 13:38:17.757237] "GET /EMail/tree.aspx?sNode-sharedTree=treeSent HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdZOawxQzZrjF1StjMAAABh TLSv1.2 ECDHE-RSA-AES128-SHA256 1091 13371 -% 1574046 6976 558609 2807 6 0 192.168.128.10 CH - [2015-05-02 13:38:23.078099] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 11116 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdZP6wxQzZrjF1StjUAAABX TLSv1.2 ECDHE-RSA-AES128-SHA256 710 11732 -% 1378772 6132 367341 3477 6 0 192.168.128.10 CH - [2015-05-02 13:38:23.084996] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdZP6wxQzZrjF1StjYAAABb TLSv1.2 ECDHE-RSA-AES128-SHA256 726 9506 -% 1513308 6124 497340 5072 6 0 192.168.128.10 CH - [2015-05-02 13:38:29.341223] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdZRawxQzZrjF1StjkAAABj TLSv1.2 ECDHE-RSA-AES128-SHA256 710 437 -% 814197 6224 806251 189 6 0 192.168.128.10 CH - [2015-05-02 13:38:30.170391] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdZRqwxQzZrjF1StjoAAABv TLSv1.2 ECDHE-RSA-AES128-SHA256 694 767 75% 941392 7071 931624 315 6 0 192.168.128.10 CH - [2015-05-02 13:38:31.173097] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "f17b1662.5238dda594215" VjdZR6wxQzZrjF1StjsAAABq TLSv1.2 ECDHE-RSA-AES128-SHA256 534 1610 -% 6400 5032 44 97 6 0 192.168.128.10 CH - [2015-05-02 13:38:31.191965] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdZR6wxQzZrjF1StjwAAABk TLSv1.2 ECDHE-RSA-AES128-SHA256 662 357 -% 956473 5587 949274 204 6 0 192.168.128.10 CH - [2015-05-02 13:38:32.163925] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdZSKwxQzZrjF1Stj0AAABt TLSv1.2 ECDHE-RSA-AES128-SHA256 646 7834 -% 678128 9117 664710 2809 6 0 192.168.128.10 CH - [2015-05-02 13:38:32.861535] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdZSKwxQzZrjF1Stj4AAABn TLSv1.2 ECDHE-RSA-AES128-SHA256 774 2527 14% 904506 5736 895767 217 6 0 192.168.128.10 CH - [2015-05-02 13:38:33.023290] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdZSawxQzZrjF1StkEAAABu TLSv1.2 ECDHE-RSA-AES128-SHA256 1096 422 -% 857806 5367 850188 191 6 0 192.168.128.10 CH - [2015-05-02 13:38:33.013986] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdZSawxQzZrjF1StkAAAABV TLSv1.2 ECDHE-RSA-AES128-SHA256 1064 864 56% 895385 5301 888329 136 6 0 192.168.128.10 CH - [2015-05-02 13:38:33.023420] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdZSawxQzZrjF1StkIAAABx TLSv1.2 ECDHE-RSA-AES128-SHA256 1064 2144 22% 1081932 6211 72507 210 6 0 192.168.128.10 CH - [2015-05-02 13:38:33.013233] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdZSawxQzZrjF1Stj8AAABl TLSv1.2 ECDHE-RSA-AES128-SHA256 1080 8573 22% 1092595 6032 79545 169 6 0 192.168.128.10 CH - [2015-05-02 13:38:33.024164] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdZSawxQzZrjF1StkMAAABp TLSv1.2 ECDHE-RSA-AES128-SHA256 1096 4405 23% 1138705 5305 128225 291 6 0 192.168.128.10 CH - [2015-05-02 13:38:34.197318] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "f17b1662.5238dda594215" VjdZSqwxQzZrjF1StkYAAAB0 TLSv1.2 ECDHE-RSA-AES128-SHA256 806 245 -% 898979 8738 887881 246 6 0 192.168.165.46 CH - [2015-05-02 13:38:41.857427] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cfc9ac0c.5238df719f709" VjdZUawxQzZrjF1StkcAAABw TLSv1.2 ECDHE-RSA-AES128-SHA256 847 4302 -% 957174 3540 952905 212 0 0 192.168.165.46 CH - [2015-05-02 13:38:42.839235] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cfc9ac0c.5238df719f709" VjdZUqwxQzZrjF1StkgAAABy TLSv1.2 ECDHE-RSA-AES128-SHA256 454 767 75% 867644 3183 863159 274 0 0 192.168.165.46 CH - [2015-05-02 13:38:43.760766] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cfhost.5238df719f709" VjdZU6wxQzZrjF1StkkAAAB4 TLSv1.2 ECDHE-RSA-AES128-SHA256 422 357 -% 960354 2471 957205 153 0 0 192.168.165.46 CH - [2015-05-02 13:38:44.745652] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cfhost.5238df719f709" VjdZVKwxQzZrjF1StksAAAB5 TLSv1.2 ECDHE-RSA-AES128-SHA256 406 7834 -% 955817 3045 948483 3427 0 0 192.168.165.46 CH - [2015-05-02 13:38:45.747988] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cfhost.5238df719f709" VjdZVawxQzZrjF1StkwAAABs TLSv1.2 ECDHE-RSA-AES128-SHA256 895 5832 22% 846592 2496 842789 208 0 0 192.168.165.46 CH - [2015-05-02 13:38:45.800796] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cfc9ac0c.5238df719f709" VjdZVawxQzZrjF1Stk8AAAB9 TLSv1.2 ECDHE-RSA-AES128-SHA256 852 7973 22% 822946 2699 816408 202 0 0 192.168.165.46 CH - [2015-05-02 13:38:45.754546] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cfhost.5238df719f709" VjdZVawxQzZrjF1Stk0AAABr TLSv1.2 ECDHE-RSA-AES128-SHA256 534 2527 14% 939061 2970 934395 168 0 0 192.168.165.46 CH - [2015-05-02 13:38:45.800432] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cfhost.5238df719f709" VjdZVawxQzZrjF1Stk4AAAB6 TLSv1.2 ECDHE-RSA-AES128-SHA256 852 4660 23% 1039178 2000 35245 225 0 0 192.168.165.46 CH - [2015-05-02 13:38:45.804123] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cfhost.5238df719f709" VjdZVawxQzZrjF1StlAAAAB@ TLSv1.2 ECDHE-RSA-AES128-SHA256 820 864 56% 1066102 2592 62474 198 0 0 192.168.165.46 CH - [2015-05-02 13:38:45.805130] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cfhost.5238df719f709" VjdZVawxQzZrjF1R-d0AAAA4 TLSv1.2 ECDHE-RSA-AES128-SHA256 852 422 -% 1290824 1785 288388 156 0 0 192.168.165.46 CH - [2015-05-02 13:38:46.917349] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "cfhost.5238df719f709" VjdZVqwxQzZrjF1StlEAAAB7 TLSv1.2 ECDHE-RSA-AES128-SHA256 566 245 -% 734250 2153 731237 245 0 0 192.168.192.35 CH - [2015-05-02 13:40:58.894518] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdZ2qwxQzZrjF1StmUAAABN TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1123 11889 -% 1058586 2528 52935 2502 0 0 192.168.192.35 CH - [2015-05-02 13:41:06.132527] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdZ4qwxQzZrjF1R-ecAAAAB TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1338 4447 -% 1186844 3258 182607 458 0 0 192.168.192.35 CH - [2015-05-02 13:41:07.334822] "GET /EMail/main.aspx HTTP/1.1" 200 3383 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdZ46wxQzZrjF1R-egAAAA9 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 3799 -% 818617 3174 812770 1833 0 0 192.168.192.35 CH - [2015-05-02 13:41:08.215046] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdZ5KwxQzZrjF1R-ekAAAA- TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 4128 -% 842352 2227 831971 7591 0 0 192.168.192.35 CH - [2015-05-02 13:41:08.266518] "GET /EMail/overview.aspx HTTP/1.1" 200 5289 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdZ5KwxQzZrjF1R-eoAAAAG TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1134 9737 -% 1207049 1734 203034 1795 0 0 192.168.192.35 CH - [2015-05-02 13:41:08.274077] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdZ5KwxQzZrjF1R-esAAAAH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1160 13205 -% 1938053 2445 927115 4600 0 0 192.168.192.35 CH - [2015-05-02 13:41:12.230566] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdZ6KwxQzZrjF1R-ewAAAAC TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 511 409 -% 891267 2318 888226 213 0 0 192.168.192.35 CH - [2015-05-02 13:41:13.200170] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdZ6awxQzZrjF1R-e0AAAAF TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 458 318 -% 937064 2231 934238 127 0 0 192.168.192.35 CH - [2015-05-02 13:41:14.149402] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdZ6qwxQzZrjF1R-e4AAAAJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 440 7758 -% 2114146 1971 109486 2188 0 0 192.168.186.76 CH - [2015-05-02 13:55:13.145900] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjddMawxQzZrjF1R-hIAAAAp TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 12038 -% 1065208 4880 56333 2491 3 0 192.168.186.76 CH - [2015-05-02 13:55:13.145665] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjddMawxQzZrjF1R-hEAAAAv TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 12038 -% 1083813 5388 74469 2410 3 0 192.168.186.76 CH - [2015-05-02 13:55:14.289856] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjddMqwxQzZrjF1R-hQAAAAw TLSv1.2 ECDHE-RSA-AES256-SHA384 662 7866 -% 900358 6346 888379 3747 3 0 192.168.186.76 CH - [2015-05-02 13:55:14.260373] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "d43b4c4b.52388d1dbd27f" VjddMqwxQzZrjF1R-hMAAAAu TLSv1.2 ECDHE-RSA-AES256-SHA384 662 0 -% 986433 4331 978638 2171 3 0 192.168.186.76 CH - [2015-05-02 13:55:18.291970] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjddNqwxQzZrjF1R-hYAAAAy TLSv1.2 ECDHE-RSA-AES256-SHA384 822 469 -% 969013 8310 958805 161 3 0 192.168.186.76 CH - [2015-05-02 13:55:19.282451] "GET /EMail/main.aspx HTTP/1.1" 200 3391 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjddN6wxQzZrjF1R-hgAAAA1 TLSv1.2 ECDHE-RSA-AES256-SHA384 678 3898 -% 881027 4417 872333 1948 3 0 192.168.186.76 CH - [2015-05-02 13:55:20.228120] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjddOKwxQzZrjF1R-hkAAAAx TLSv1.2 ECDHE-RSA-AES256-SHA384 662 4234 -% 1309903 4626 297277 6366 3 0 192.168.186.76 CH - [2015-05-02 13:55:20.229420] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjddOKwxQzZrjF1StvUAAABq TLSv1.2 ECDHE-RSA-AES256-SHA384 1212 9827 -% 1968152 5702 951183 4966 3 0 192.168.186.76 CH - [2015-05-02 13:55:23.287205] "GET /EMail/inbox.aspx HTTP/1.1" 200 9765 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjddO6wxQzZrjF1StvYAAABk TLSv1.2 ECDHE-RSA-AES256-SHA384 662 10367 -% 824716 6094 811410 4990 3 0 192.168.186.76 CH - [2015-05-02 13:55:27.550967] "GET /EMail/message.aspx?&mailId=3929_14&folderId=947_65&mailPos=0 HTTP/1.1" 200 16569 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjddP6wxQzZrjF1StvgAAAB2 TLSv1.2 ECDHE-RSA-AES256-SHA384 710 17321 -% 1332973 8379 287377 34009 3 0 192.168.186.76 CH - [2015-05-02 13:55:31.497412] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3929_14&folderId=947_65&attachmentId=3&token=-119567570233639696E17 HTTP/1.1" 200 1606789 "https://www.example.com/EMail/message.aspx?&mailId=3929_14&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjddQ6wxQzZrjF1StvkAAABz TLSv1.2 ECDHE-RSA-AES256-SHA384 806 1659772 -% 2311008 6303 83352 248 3 0 192.168.186.76 CH - [2015-05-02 13:55:55.221335] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5879 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3929_14&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjddW6wxQzZrjF1Stv0AAABx TLSv1.2 ECDHE-RSA-AES256-SHA384 1303 13742 -% 748318 4778 0 0 3 0 192.168.186.76 CH - [2015-05-02 13:56:06.943666] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3929_14&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjddZqwxQzZrjF1StwAAAAB0 TLSv1.2 ECDHE-RSA-AES256-SHA384 7442 4545 -% 1480151 312526 107067 209 76 0 192.168.186.76 CH - [2015-05-02 13:56:08.454116] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3929_14&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjddaKwxQzZrjF1StwEAAABy TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 914324 7927 896786 7590 3 0 192.168.186.76 CH - [2015-05-02 13:56:11.575086] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 9763 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjdda6wxQzZrjF1StwIAAABD TLSv1.2 ECDHE-RSA-AES256-SHA384 662 10367 -% 959013 19960 934266 3017 3 0 192.168.186.76 CH - [2015-05-02 13:56:48.519264] "GET /EMail/newMessage.aspx?action=reply&mailId=3927_95&folderId=947_65&showPics=false HTTP/1.1" 200 24370 "https://www.example.com/EMail/message.aspx?&mailId=3927_95&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjddkKwxQzZrjF1StwgAAABs TLSv1.2 ECDHE-RSA-AES256-SHA384 1367 29274 -% 1163174 6104 105015 47516 6 3 192.168.186.76 CH - [2015-05-02 13:56:49.779080] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3927_95&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjddkawxQzZrjF1StwoAAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 938545 6471 920843 9257 3 0 192.168.186.76 CH - [2015-05-02 13:58:02.140349] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8546 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjdd2qwxQzZrjF1StxEAAABG TLSv1.2 ECDHE-RSA-AES256-SHA384 1154 9312 -% 1079710 5168 67470 4686 3 0 192.168.18.22 CH - [2015-05-02 14:00:29.469079] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "4host.5238e5c99dd97" VjdebawxQzZrjF1R-jAAAAAQ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 572 8358 -% 980852 1266 978388 183 0 0 192.168.212.1 CH - [2015-05-02 14:14:31.622824] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7383 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" Vjdht6wxQzZrjF1St64AAABt TLSv1 ECDHE-RSA-AES256-SHA 704 11809 -% 1045076 2222 39841 2385 0 0 192.168.212.1 CH - [2015-05-02 14:14:32.812942] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" VjdhuKwxQzZrjF1St7AAAABz TLSv1 ECDHE-RSA-AES256-SHA 662 213 -% 696263 3514 691744 202 0 0 192.168.212.1 CH - [2015-05-02 14:14:32.857066] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" VjdhuKwxQzZrjF1St7UAAABu TLSv1 ECDHE-RSA-AES256-SHA 869 358 -% 1052856 2972 49155 157 0 0 192.168.212.1 CH - [2015-05-02 14:14:32.845549] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" VjdhuKwxQzZrjF1St7IAAABp TLSv1 ECDHE-RSA-AES256-SHA 885 358 -% 1127597 2885 123825 223 0 0 192.168.212.1 CH - [2015-05-02 14:14:32.845251] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" VjdhuKwxQzZrjF1St7EAAABn TLSv1 ECDHE-RSA-AES256-SHA 869 358 -% 1129755 3312 125494 130 0 0 192.168.212.1 CH - [2015-05-02 14:14:32.852651] "GET /EMail/scripts/variables_de.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" VjdhuKwxQzZrjF1St7MAAABx TLSv1 ECDHE-RSA-AES256-SHA 901 358 -% 1281914 4482 276523 249 0 0 192.168.212.1 CH - [2015-05-02 14:14:32.853361] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" VjdhuKwxQzZrjF1St7QAAABV TLSv1 ECDHE-RSA-AES256-SHA 901 358 -% 1289177 4224 283925 141 0 0 192.168.212.1 CH - [2015-05-02 14:14:34.263122] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" VjdhuqwxQzZrjF1St7YAAABl TLSv1 ECDHE-RSA-AES256-SHA 694 213 -% 973478 3199 969475 165 0 0 192.168.212.1 CH - [2015-05-02 14:14:41.740028] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7556 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" VjdhwawxQzZrjF1St7gAAAB0 TLSv1 ECDHE-RSA-AES256-SHA 920 11830 -% 1028927 3135 12497 12609 0 0 192.168.212.1 CH - [2015-05-02 14:14:55.041921] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" Vjdhz6wxQzZrjF1St7oAAAB4 TLSv1 ECDHE-RSA-AES256-SHA 1032 4305 -% 1036876 5239 30514 229 0 0 192.168.212.1 CH - [2015-05-02 14:15:28.044872] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" Vjdh8KwxQzZrjF1St8QAAABB TLSv1 ECDHE-RSA-AES256-SHA 1032 4257 -% 788062 5668 781242 290 0 0 192.168.212.1 CH - [2015-05-02 14:15:28.941649] "GET /EMail/main.aspx HTTP/1.1" 200 3415 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" Vjdh8KwxQzZrjF1St8UAAABG TLSv1 ECDHE-RSA-AES256-SHA 872 7670 -% 840985 2200 837066 1154 0 0 192.168.212.1 CH - [2015-05-02 14:15:30.041117] "GET /EMail/overview.aspx HTTP/1.1" 200 6448 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" Vjdh8qwxQzZrjF1St8YAAABO TLSv1 ECDHE-RSA-AES256-SHA 840 10726 -% 1131516 2026 126753 2217 0 0 192.168.212.1 CH - [2015-05-02 14:15:31.441650] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" Vjdh86wxQzZrjF1St8cAAABT TLSv1 ECDHE-RSA-AES256-SHA 952 4049 -% 836804 3213 832571 211 0 0 192.168.212.1 CH - [2015-05-02 14:15:37.992654] "GET /EMail/newMessage.aspx?msg=new HTTP/1.1" 200 12054 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" Vjdh@awxQzZrjF1St8oAAABR TLSv1 ECDHE-RSA-AES256-SHA 872 16363 -% 1172668 2394 142844 24964 3 3 192.168.212.1 CH - [2015-05-02 14:15:39.442385] "GET /EMail/scripts/tinymce/tinymce.min.js HTTP/1.1" 200 102332 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" Vjdh@6wxQzZrjF1St8sAAABU TLSv1 ECDHE-RSA-AES256-SHA 856 108596 33% 986258 2062 950934 219 0 0 192.168.212.1 CH - [2015-05-02 14:15:40.675046] "GET /EMail/scripts/tinymce/plugins/print/plugin.min.js HTTP/1.1" 200 182 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" Vjdh-KwxQzZrjF1St8wAAABN TLSv1 ECDHE-RSA-AES256-SHA 789 848 55% 1204598 2480 200596 268 0 0 192.168.212.1 CH - [2015-05-02 14:15:40.679596] "GET /EMail/scripts/tinymce/plugins/hr/plugin.min.js HTTP/1.1" 200 191 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" Vjdh-KwxQzZrjF1R-msAAAAM TLSv1 ECDHE-RSA-AES256-SHA 789 848 53% 1200257 1831 197766 108 0 0 192.168.212.1 CH - [2015-05-02 14:15:40.678525] "GET /EMail/scripts/tinymce/plugins/insertdatetime/plugin.min.js HTTP/1.1" 200 867 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" Vjdh-KwxQzZrjF1St80AAABJ TLSv1 ECDHE-RSA-AES256-SHA 805 1520 42% 1202893 3379 198559 104 0 0 192.168.212.1 CH - [2015-05-02 14:15:40.680014] "GET /EMail/scripts/tinymce/plugins/charmap/plugin.min.js HTTP/1.1" 200 2698 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" Vjdh-KwxQzZrjF1R-mwAAAAQ TLSv1 ECDHE-RSA-AES256-SHA 789 3381 38% 1310030 2452 306592 133 0 0 192.168.212.1 CH - [2015-05-02 14:15:40.679159] "GET /EMail/scripts/tinymce/plugins/fullpage/plugin.min.js HTTP/1.1" 200 2325 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" Vjdh-KwxQzZrjF1R-moAAAAN TLSv1 ECDHE-RSA-AES256-SHA 789 3013 36% 1338350 2575 334674 104 0 0 192.168.212.1 CH - [2015-05-02 14:15:40.681232] "GET /EMail/scripts/tinymce/plugins/visualblocks/plugin.min.js HTTP/1.1" 200 525 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" Vjdh-KwxQzZrjF1St9AAAABW TLSv1 ECDHE-RSA-AES256-SHA 805 1184 43% 1494890 2032 491796 160 0 0 192.168.212.1 CH - [2015-05-02 14:15:40.681242] "GET /EMail/scripts/tinymce/plugins/paste/plugin.min.js HTTP/1.1" 200 6239 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" Vjdh-KwxQzZrjF1St9EAAABY TLSv1 ECDHE-RSA-AES256-SHA 789 6933 40% 1541378 2498 536457 163 0 0 192.168.212.1 CH - [2015-05-02 14:15:40.680894] "GET /EMail/scripts/tinymce/plugins/searchreplace/plugin.min.js HTTP/1.1" 200 2586 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" Vjdh-KwxQzZrjF1St88AAABP TLSv1 ECDHE-RSA-AES256-SHA 805 3269 40% 1558660 2831 554352 149 0 0 192.168.212.1 CH - [2015-05-02 14:15:40.745677] "GET /EMail/scripts/tinymce/themes/modern/theme.min.js HTTP/1.1" 200 2651 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" Vjdh-KwxQzZrjF1St9IAAABA TLSv1 ECDHE-RSA-AES256-SHA 872 7024 41% 1510083 2562 506261 191 0 0 192.168.212.1 CH - [2015-05-02 14:15:40.680872] "GET /EMail/scripts/tinymce/plugins/preview/plugin.min.js HTTP/1.1" 200 737 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" Vjdh-KwxQzZrjF1St84AAABe TLSv1 ECDHE-RSA-AES256-SHA 789 1392 51% 1637509 2984 633492 184 0 0 192.168.212.1 CH - [2015-05-02 14:15:41.983606] "GET /EMail/scripts/tinymce/plugins/link/plugin.min.js HTTP/1.1" 200 1835 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" Vjdh-awxQzZrjF1St9UAAABQ TLSv1 ECDHE-RSA-AES256-SHA 789 2496 41% 648546 1721 645121 434 0 0 192.168.212.1 CH - [2015-05-02 14:15:42.269565] "GET /EMail/scripts/tinymce/plugins/visualchars/plugin.min.js HTTP/1.1" 200 608 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" Vjdh-qwxQzZrjF1St9gAAABh TLSv1 ECDHE-RSA-AES256-SHA 805 1264 54% 441428 3211 437308 144 0 0 192.168.212.1 CH - [2015-05-02 14:15:41.969656] "GET /EMail/scripts/tinymce/plugins/anchor/plugin.min.js HTTP/1.1" 200 339 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" Vjdh-awxQzZrjF1St9QAAABg TLSv1 ECDHE-RSA-AES256-SHA 789 992 63% 742067 2082 739178 162 0 0 192.168.212.1 CH - [2015-05-02 14:15:41.909869] "GET /EMail/scripts/tinymce/plugins/textcolor/plugin.min.js HTTP/1.1" 200 1647 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" Vjdh-awxQzZrjF1R-m0AAAAO TLSv1 ECDHE-RSA-AES256-SHA 582 2159 44% 803364 2158 800367 105 0 0 192.168.212.1 CH - [2015-05-02 14:15:40.747899] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" Vjdh-KwxQzZrjF1St9MAAABZ TLSv1 ECDHE-RSA-AES256-SHA 856 7190 -% 1978816 2382 967490 8374 0 0 192.168.212.1 CH - [2015-05-02 14:15:42.073325] "GET /EMail/scripts/tinymce/plugins/table/plugin.min.js HTTP/1.1" 200 9181 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" Vjdh-qwxQzZrjF1St9YAAABC TLSv1 ECDHE-RSA-AES256-SHA 789 10194 32% 702364 2081 697523 174 0 0 192.168.212.1 CH - [2015-05-02 14:15:42.092696] "GET /EMail/scripts/tinymce/plugins/image/plugin.min.js HTTP/1.1" 200 2136 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" Vjdh-qwxQzZrjF1St9cAAABf TLSv1 ECDHE-RSA-AES256-SHA 789 2821 42% 865313 1895 862157 201 0 0 192.168.212.1 CH - [2015-05-02 14:15:43.020728] "GET /EMail/scripts/tinymce/skins/lightgray/skin.min.css HTTP/1.1" 200 6020 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" Vjdh-6wxQzZrjF1St9oAAABb TLSv1 ECDHE-RSA-AES256-SHA 566 6548 17% 714693 2734 708752 232 0 0 192.168.212.1 CH - [2015-05-02 14:15:43.053991] "GET /EMail/scripts/tinymce/skins/lightgray/content.min.css HTTP/1.1" 200 588 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" Vjdh-6wxQzZrjF1St9sAAABj TLSv1 ECDHE-RSA-AES256-SHA 566 1087 38% 933101 3303 928290 219 0 0 192.168.212.1 CH - [2015-05-02 14:15:43.840355] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce.eot? HTTP/1.1" 200 10024 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" Vjdh-6wxQzZrjF1St9wAAABv TLSv1 ECDHE-RSA-AES256-SHA 598 10532 -% 872430 3597 867599 206 0 0 192.168.212.1 CH - [2015-05-02 14:15:43.843011] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce-small.eot? HTTP/1.1" 200 10316 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" Vjdh-6wxQzZrjF1R-m4AAAAR TLSv1 ECDHE-RSA-AES256-SHA 598 10820 -% 1008727 3160 3988 169 0 0 192.168.212.1 CH - [2015-05-02 14:15:57.276848] "GET /EMail/images/attach.gif HTTP/1.1" 304 - "https://www.example.com/EMail/attachost.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" VjdiDawxQzZrjF1St@AAAABt TLSv1 ECDHE-RSA-AES256-SHA 952 4049 -% 957048 3142 953072 203 0 0 192.168.212.1 CH - [2015-05-02 14:16:24.944514] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" VjdiKKwxQzZrjF1St@4AAABr TLSv1 ECDHE-RSA-AES256-SHA 2098 4241 -% 1128709 21245 62099 162 33 0 192.168.212.1 CH - [2015-05-02 14:16:26.196567] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc= HTTP/1.1" 200 3928 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "87f89883.5238e8ecc1ca8" VjdiKqwxQzZrjF1St@8AAAB@ TLSv1 ECDHE-RSA-AES256-SHA 920 8198 -% 842772 5303 830323 6506 0 0 192.168.96.45 CH - [2015-05-02 14:21:49.149830] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7366 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "9ebe5b91.5238ea8e03e86" VjdjbawxQzZrjF1SuDwAAABH TLSv1 AES256-SHA 885 11449 -% 853346 1398 844405 6467 0 0 192.168.96.45 CH - [2015-05-02 14:21:50.119115] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "9ebe5b91.5238ea8e03e86" VjdjbqwxQzZrjF1SuD0AAABL TLSv1 AES256-SHA 598 2569 14% 998387 3215 993615 176 0 0 192.168.96.45 CH - [2015-05-02 14:21:50.449023] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "9ebe5b91.5238ea8e03e86" VjdjbqwxQzZrjF1SuD4AAABI TLSv1 AES256-SHA 1093 3700 -% 968782 3181 964781 145 0 0 192.168.96.45 CH - [2015-05-02 14:21:50.485585] "GET /EMail/scripts/variables_de.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "9ebe5b91.5238ea8e03e86" VjdjbqwxQzZrjF1SuD8AAABU TLSv1 AES256-SHA 1125 3700 -% 1123665 1951 121048 151 0 0 192.168.96.45 CH - [2015-05-02 14:21:53.255836] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "844fcee0.5238ea91ee59c" VjdjcawxQzZrjF1SuEEAAABW TLSv1 AES256-SHA 837 5225 -% 948438 1116 946488 177 0 0 192.168.96.45 CH - [2015-05-02 14:21:59.931934] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "9ebe5b91.5238ea8e03e86" Vjdjd6wxQzZrjF1SuEMAAABm TLSv1 AES256-SHA 1101 3696 -% 813021 2083 810237 159 0 0 192.168.96.45 CH - [2015-05-02 14:22:00.833268] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "9ebe5b91.5238ea8e03e86" VjdjeKwxQzZrjF1SuEUAAABA TLSv1 AES256-SHA 1133 3696 -% 847714 2080 844853 194 0 0 192.168.96.45 CH - [2015-05-02 14:22:03.429404] "GET /EMail/images/attach.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "9ebe5b91.5238ea8e03e86" Vjdje6wxQzZrjF1SuEYAAABe TLSv1 AES256-SHA 1085 3696 -% 858745 3356 854534 192 0 0 192.168.96.45 CH - [2015-05-02 14:22:05.152309] "GET /EMail/message.aspx?&mailId=3928_38&folderId=1157_50&mailPos=0 HTTP/1.1" 200 11210 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "9ebe5b91.5238ea8e03e86" VjdjfawxQzZrjF1SuEcAAABh TLSv1 AES256-SHA 1021 15162 -% 1321197 3255 291779 25369 0 0 192.168.96.45 CH - [2015-05-02 14:22:24.285175] "GET /EMail/inbox.aspx HTTP/1.1" 200 8585 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "9ebe5b91.5238ea8e03e86" VjdjkKwxQzZrjF1SuEwAAABf TLSv1 AES256-SHA 989 12538 -% 921385 3377 912668 4383 0 0 192.168.96.45 CH - [2015-05-02 14:22:25.384241] "GET /EMail/images/msgOpened.png HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "9ebe5b91.5238ea8e03e86" VjdjkawxQzZrjF1SuE0AAABj TLSv1 AES256-SHA 1085 3696 -% 883514 2353 880147 199 0 0 192.168.96.45 CH - [2015-05-02 14:22:29.994534] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7291 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "9ebe5b91.5238ea8e03e86" VjdjlawxQzZrjF1SuE8AAABk TLSv1 AES256-SHA 1005 11205 -% 1103399 2599 98066 2189 0 0 192.168.96.45 CH - [2015-05-02 14:22:34.684899] "GET /favicon.ico HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0)" www.example.com 192.168.34.16 443 - - + "844fcee0.5238ea91ee59c" VjdjmqwxQzZrjF1SuFEAAABz TLSv1 AES256-SHA 925 3680 -% 3353 2181 238 155 0 0 192.168.96.45 CH - [2015-05-02 14:22:34.738183] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "9ebe5b91.5238ea8e03e86" VjdjmqwxQzZrjF1R-pIAAAA3 TLSv1 AES256-SHA 941 3808 -% 898328 3375 894004 266 0 0 192.168.96.45 CH - [2015-05-02 14:22:37.036978] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "9ebe5b91.5238ea8e03e86" VjdjnawxQzZrjF1SuFIAAABp TLSv1 AES256-SHA 1069 3696 -% 1130839 2090 127961 187 0 0 192.168.96.45 CH - [2015-05-02 14:22:37.038654] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "9ebe5b91.5238ea8e03e86" VjdjnawxQzZrjF1SuFMAAABu TLSv1 AES256-SHA 1037 3696 -% 1185577 2596 182278 157 0 0 192.168.96.45 CH - [2015-05-02 14:22:38.440935] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "9ebe5b91.5238ea8e03e86" VjdjnqwxQzZrjF1SuFUAAABl TLSv1 AES256-SHA 1085 3696 -% 791753 2158 788935 144 0 0 192.168.81.38 CH - [2015-05-02 14:37:32.780865] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7372 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "813c0d55.52389689be860" VjdnHKwxQzZrjF1R-s0AAAA5 TLSv1 ECDHE-RSA-AES256-SHA 751 11929 -% 938932 3074 931401 3765 0 0 192.168.81.38 CH - [2015-05-02 14:37:34.007926] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "813c0d55.52389689be860" VjdnHqwxQzZrjF1R-s4AAAA3 TLSv1 ECDHE-RSA-AES256-SHA 454 2431 14% 749190 3103 744269 272 0 0 192.168.81.38 CH - [2015-05-02 14:37:34.150427] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "813c0d55.52389689be860" VjdnHqwxQzZrjF1SuNQAAAB4 TLSv1 ECDHE-RSA-AES256-SHA 847 8131 23% 1209644 2033 205574 208 0 0 192.168.81.38 CH - [2015-05-02 14:37:34.143265] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "813c0d55.52389689be860" VjdnHqwxQzZrjF1SuNMAAAB9 TLSv1 ECDHE-RSA-AES256-SHA 847 11699 22% 1280750 3085 274850 169 0 0 192.168.81.38 CH - [2015-05-02 14:37:35.541008] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "813c0d55.52389689be860" VjdnH6wxQzZrjF1SuNYAAAB6 TLSv1 ECDHE-RSA-AES256-SHA 502 1802 -% 922722 3187 918434 167 0 0 192.168.81.38 CH - [2015-05-02 14:37:36.510161] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "813c0d55.52389689be860" VjdnIKwxQzZrjF1SuNcAAAB7 TLSv1 ECDHE-RSA-AES256-SHA 342 1578 -% 971940 3217 967917 170 0 0 192.168.81.38 CH - [2015-05-02 14:37:45.670998] "GET /EMail/overview.aspx HTTP/1.1" 200 5304 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "813c0d55.52389689be860" VjdnKawxQzZrjF1R-tAAAAA7 TLSv1 ECDHE-RSA-AES256-SHA 815 9769 -% 1619502 2907 614191 1778 0 0 192.168.81.38 CH - [2015-05-02 14:37:45.670404] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "813c0d55.52389689be860" VjdnKawxQzZrjF1R-s8AAAA6 TLSv1 ECDHE-RSA-AES256-SHA 831 13265 -% 1766785 4089 754357 4220 0 0 192.168.81.38 CH - [2015-05-02 14:37:47.726265] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "813c0d55.52389689be860" VjdnK6wxQzZrjF1R-tIAAAAE TLSv1 ECDHE-RSA-AES256-SHA 518 1274 -% 584005 2122 581061 292 0 0 192.168.81.38 CH - [2015-05-02 14:37:47.554374] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "813c0d55.52389689be860" VjdnK6wxQzZrjF1R-tEAAAA8 TLSv1 ECDHE-RSA-AES256-SHA 470 1258 -% 961425 2252 958421 156 0 0 192.168.81.38 CH - [2015-05-02 14:37:50.937314] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "813c0d55.52389689be860" VjdnLqwxQzZrjF1R-tQAAAAA TLSv1 ECDHE-RSA-AES256-SHA 470 1818 -% 1040533 3024 36589 233 0 0 192.168.81.38 CH - [2015-05-02 14:37:50.936551] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "813c0d55.52389689be860" VjdnLqwxQzZrjF1R-tMAAAA@ TLSv1 ECDHE-RSA-AES256-SHA 470 538 -% 1072352 4670 66529 153 0 0 192.168.81.38 CH - [2015-05-02 14:39:16.138786] "GET /EMail/tree.aspx?sNode-sharedTree=treeTrash HTTP/1.1" 200 8538 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "813c0d55.52389689be860" VjdnhKwxQzZrjF1SuOcAAABS TLSv1 ECDHE-RSA-AES256-SHA 863 13265 -% 1548555 4208 535616 4490 0 0 192.168.81.38 CH - [2015-05-02 14:40:08.136281] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3929_22&folderId=587_4&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "813c0d55.52389689be860" VjdnuKwxQzZrjF1SuPEAAABY TLSv1 ECDHE-RSA-AES256-SHA 1055 4388 -% 1253358 6780 245572 238 0 0 192.168.81.38 CH - [2015-05-02 14:40:09.748201] "GET /EMail/trash.aspx?returnedFromDelete=true HTTP/1.1" 200 22629 "https://www.example.com/EMail/message.aspx?&mailId=3929_22&folderId=587_4&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "813c0d55.52389689be860" VjdnuawxQzZrjF1SuPIAAABP TLSv1 ECDHE-RSA-AES256-SHA 534 23198 -% 2151280 3964 347828 11382 0 0 192.168.81.38 CH - [2015-05-02 14:40:15.100960] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/trash.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "813c0d55.52389689be860" Vjdnv6wxQzZrjF1SuPQAAABi TLSv1 ECDHE-RSA-AES256-SHA 934 357 -% 3931724 14904 915980 164 0 0 192.168.81.38 CH - [2015-05-02 14:40:19.154545] "GET /EMail/trash.aspx?returnedFromDelete=true HTTP/1.1" 200 7279 "https://www.example.com/EMail/trash.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "813c0d55.52389689be860" Vjdnw6wxQzZrjF1SuPYAAABd TLSv1 ECDHE-RSA-AES256-SHA 518 7722 -% 995655 2712 989896 2371 0 0 192.168.192.35 CH - [2015-05-02 14:44:38.892609] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdoxqwxQzZrjF1SuSQAAAB3 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 849 11889 -% 887688 4355 879789 2788 0 0 192.168.238.39 CH - [2015-05-02 14:50:35.354858] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7918 "-" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 proxy-server - + "f45c470f.5238f0fc40aea" VjdqK6wxQzZrjF1SuWMAAAB3 TLSv1 DHE-RSA-AES128-SHA 1019 12775 -% 953439 1519 948160 2882 0 0 192.168.238.39 CH - [2015-05-02 14:50:36.854027] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 proxy-server - + "f45c470f.5238f0fc40aea" VjdqLKwxQzZrjF1SuWQAAABH TLSv1 DHE-RSA-AES128-SHA 678 2431 13% 970533 2097 966696 219 0 0 192.168.238.39 CH - [2015-05-02 14:50:38.334412] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 proxy-server - + "f45c470f.5238f0fc40aea" VjdqLqwxQzZrjF1SuWUAAABS TLSv1 DHE-RSA-AES128-SHA 1083 6156 22% 1111989 3712 106727 296 0 0 192.168.238.39 CH - [2015-05-02 14:50:40.594091] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 proxy-server - + "f45c470f.5238f0fc40aea" VjdqMKwxQzZrjF1SuWcAAABR TLSv1 DHE-RSA-AES128-SHA 742 1690 -% 959849 2139 957023 161 0 0 192.168.238.39 CH - [2015-05-02 14:50:40.815233] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 proxy-server - + "f45c470f.5238f0fc40aea" VjdqMKwxQzZrjF1SuWgAAAB- TLSv1 DHE-RSA-AES128-SHA 742 1802 -% 804099 3141 800142 162 0 0 192.168.238.39 CH - [2015-05-02 14:50:41.863680] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 proxy-server - + "f45c470f.5238f0fc40aea" VjdqMawxQzZrjF1SuWkAAABJ TLSv1 DHE-RSA-AES128-SHA 742 1578 -% 800430 3386 796049 197 0 0 192.168.227.193 CH - [2015-05-02 14:53:47.738015] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "Microsoft-CryptoAPI/6.1" www.example.com 192.168.34.16 443 proxy-server - + "d3a45f2d.5238f1b3b939f" Vjdq66wxQzZrjF1SuYgAAABx TLSv1 ECDHE-RSA-AES256-SHA 533 8384 -% 877073 1361 874615 227 0 0 192.168.238.39 CH - [2015-05-02 14:54:41.824814] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 proxy-server - + "f45c470f.5238f0fc40aea" VjdrIawxQzZrjF1SuZIAAAB4 TLSv1 DHE-RSA-AES128-SHA 1435 4609 -% 1055904 5650 49680 208 0 0 192.168.238.39 CH - [2015-05-02 14:54:43.132795] "GET /EMail/error.aspx HTTP/1.1" 200 3759 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 proxy-server - + "f45c470f.5238f0fc40aea" VjdrI6wxQzZrjF1SuZQAAAB6 TLSv1 DHE-RSA-AES128-SHA 774 4202 -% 902160 3315 891403 6743 0 0 192.168.238.39 CH - [2015-05-02 14:54:44.456936] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/error.aspx" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 proxy-server - + "f45c470f.5238f0fc40aea" VjdrJKwxQzZrjF1SuZUAAAB7 TLSv1 DHE-RSA-AES128-SHA 758 2431 13% 888100 4450 881652 247 0 0 192.168.238.39 CH - [2015-05-02 14:54:45.978389] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/error.aspx" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 proxy-server - + "f45c470f.5238f0fc40aea" VjdrJawxQzZrjF1SuZYAAAB@ TLSv1 DHE-RSA-AES128-SHA 1147 12297 22% 1015197 2231 7863 338 0 0 192.168.238.39 CH - [2015-05-02 14:56:19.205858] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/error.aspx" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 proxy-server - + "f45c470f.5238f0fc40aea" Vjdrg6wxQzZrjF1SuaUAAABH TLSv1 DHE-RSA-AES128-SHA 1163 6156 22% 843084 2903 839008 158 0 0 192.168.238.39 CH - [2015-05-02 14:56:19.371727] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/error.aspx" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 proxy-server - + "f45c470f.5238f0fc40aea" Vjdrg6wxQzZrjF1SuaYAAABN TLSv1 DHE-RSA-AES128-SHA 1147 11937 22% 922739 2046 918260 169 0 0 192.168.238.39 CH - [2015-05-02 14:56:28.088682] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7920 "-" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 proxy-server - + "f45c470f.5238f0fc40aea" VjdrjKwxQzZrjF1SuagAAAB- TLSv1 DHE-RSA-AES128-SHA 1099 12615 -% 990084 7245 977984 3949 0 0 192.168.238.39 CH - [2015-05-02 14:57:28.397761] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 proxy-server - + "f45c470f.5238f0fc40aea" VjdryKwxQzZrjF1SubAAAABP TLSv1 DHE-RSA-AES128-SHA 1435 4610 -% 890627 9129 880514 206 0 0 192.168.238.39 CH - [2015-05-02 14:57:29.475840] "GET /EMail/error.aspx HTTP/1.1" 200 3773 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 proxy-server - + "f45c470f.5238f0fc40aea" VjdryawxQzZrjF1SubEAAABm TLSv1 DHE-RSA-AES128-SHA 774 4218 -% 829076 3161 817791 7480 0 0 192.168.238.39 CH - [2015-05-02 14:57:30.558268] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/error.aspx" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 proxy-server - + "f45c470f.5238f0fc40aea" VjdryqwxQzZrjF1SubMAAABi TLSv1 DHE-RSA-AES128-SHA 758 2431 13% 985934 2181 982265 385 0 0 192.168.238.39 CH - [2015-05-02 14:57:31.817610] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7239 "https://www.example.com/EMail/error.aspx" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 proxy-server - + "f45c470f.5238f0fc40aea" Vjdry6wxQzZrjF1SubQAAABd TLSv1 DHE-RSA-AES128-SHA 1147 12345 22% 927124 3295 919698 226 0 0 192.168.238.39 CH - [2015-05-02 14:57:48.469942] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7920 "-" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 proxy-server - + "f45c470f.5238f0fc40aea" Vjdr3KwxQzZrjF1R-wcAAAA3 TLSv1 DHE-RSA-AES128-SHA 1099 12615 -% 634917 4137 627402 2727 0 0 192.168.238.39 CH - [2015-05-02 14:59:25.801670] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 proxy-server - + "f45c470f.5238f0fc40aea" VjdsPawxQzZrjF1SucQAAABt TLSv1 DHE-RSA-AES128-SHA 1067 8369 23% 989730 2148 985743 189 0 0 192.168.238.39 CH - [2015-05-02 14:59:57.862124] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 proxy-server - + "f45c470f.5238f0fc40aea" VjdsXawxQzZrjF1SuckAAABu TLSv1 DHE-RSA-AES128-SHA 1307 4690 -% 998599 3618 994247 171 0 0 192.168.238.39 CH - [2015-05-02 14:59:59.386823] "GET /EMail/main.aspx HTTP/1.1" 200 3388 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 proxy-server - + "f45c470f.5238f0fc40aea" VjdsX6wxQzZrjF1SucoAAABw TLSv1 DHE-RSA-AES128-SHA 758 3818 -% 951226 3595 944913 1850 0 0 192.168.238.39 CH - [2015-05-02 15:00:01.563578] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 proxy-server - + "f45c470f.5238f0fc40aea" VjdsYawxQzZrjF1SucsAAABl TLSv1 DHE-RSA-AES128-SHA 758 2585 14% 978963 4760 972790 172 0 0 192.168.238.39 CH - [2015-05-02 15:00:05.826436] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 proxy-server - + "f45c470f.5238f0fc40aea" VjdsZawxQzZrjF1Suc4AAABy TLSv1 DHE-RSA-AES128-SHA 1147 4876 56% 759468 3026 755477 205 0 0 192.168.238.39 CH - [2015-05-02 15:00:05.880958] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7239 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 proxy-server - + "f45c470f.5238f0fc40aea" VjdsZawxQzZrjF1R-xMAAAAF TLSv1 DHE-RSA-AES128-SHA 1147 12345 22% 920941 2206 914791 196 0 0 192.168.238.39 CH - [2015-05-02 15:00:08.480991] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 proxy-server - + "f45c470f.5238f0fc40aea" VjdsaKwxQzZrjF1Suc8AAABr TLSv1 DHE-RSA-AES128-SHA 726 9218 -% 1439979 2672 429038 4560 0 0 192.168.238.39 CH - [2015-05-02 15:00:09.963381] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 proxy-server - + "f45c470f.5238f0fc40aea" VjdsaawxQzZrjF1R-xQAAAAD TLSv1 DHE-RSA-AES128-SHA 758 1887 22% 1154493 3102 150010 208 0 0 192.168.238.39 CH - [2015-05-02 15:00:13.921448] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/header.aspx" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 proxy-server - + "f45c470f.5238f0fc40aea" VjdsbawxQzZrjF1SudAAAAB9 TLSv1 DHE-RSA-AES128-SHA 1147 11937 22% 1123048 2525 116656 198 0 0 192.168.238.39 CH - [2015-05-02 15:00:18.043908] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 proxy-server - + "f45c470f.5238f0fc40aea" VjdscqwxQzZrjF1SudIAAAB6 TLSv1 DHE-RSA-AES128-SHA 742 1274 -% 973028 2080 970227 159 0 0 192.168.238.39 CH - [2015-05-02 15:00:51.321225] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7160 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 proxy-server - + "f45c470f.5238f0fc40aea" Vjdsk6wxQzZrjF1SudgAAABK TLSv1 DHE-RSA-AES128-SHA 1147 12191 22% 929106 3200 921394 223 0 0 192.168.238.39 CH - [2015-05-02 15:00:51.921155] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 proxy-server - + "f45c470f.5238f0fc40aea" Vjdsk6wxQzZrjF1SudkAAABF TLSv1 DHE-RSA-AES128-SHA 1163 6156 22% 937994 2059 934674 227 0 0 192.168.238.39 CH - [2015-05-02 15:00:54.643510] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 proxy-server - + "f45c470f.5238f0fc40aea" VjdslqwxQzZrjF1SudwAAAB1 TLSv1 DHE-RSA-AES128-SHA 694 1818 -% 840173 3337 836019 225 0 0 192.168.238.39 CH - [2015-05-02 15:00:54.523887] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 proxy-server - + "f45c470f.5238f0fc40aea" VjdslqwxQzZrjF1SudsAAABc TLSv1 DHE-RSA-AES128-SHA 694 538 -% 1080163 2323 77038 205 0 0 192.168.238.39 CH - [2015-05-02 15:01:08.000025] "GET /EMail/message.aspx?&mailId=3929_33&folderId=3313_9&mailPos=0 HTTP/1.1" 200 13652 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 proxy-server - + "f45c470f.5238f0fc40aea" VjdspKwxQzZrjF1Sud8AAABG TLSv1 DHE-RSA-AES128-SHA 1147 18433 -% 1385988 4056 350133 30682 0 0 192.168.238.39 CH - [2015-05-02 15:01:18.259512] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/message.aspx?&mailId=3929_33&folderId=3313_9&mailPos=0" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 proxy-server - + "f45c470f.5238f0fc40aea" VjdsrqwxQzZrjF1R-xgAAAAM TLSv1 DHE-RSA-AES128-SHA 1195 6156 22% 1238673 3192 234054 178 0 0 192.168.238.39 CH - [2015-05-02 15:02:05.943078] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 proxy-server - + "f45c470f.5238f0fc40aea" Vjds3awxQzZrjF1R-xwAAAAP TLSv1 DHE-RSA-AES128-SHA 1131 4690 -% 908359 2437 904903 218 0 0 192.168.238.39 CH - [2015-05-02 15:02:06.062442] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 proxy-server - + "f45c470f.5238f0fc40aea" Vjds3qwxQzZrjF1SuegAAABL TLSv1 DHE-RSA-AES128-SHA 1099 6455 -% 961029 3154 956829 232 0 0 192.168.238.39 CH - [2015-05-02 15:02:07.724215] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 proxy-server - + "f45c470f.5238f0fc40aea" Vjds36wxQzZrjF1R-x0AAAAO TLSv1 DHE-RSA-AES128-SHA 694 687 75% 1084803 3164 80268 342 0 0 192.168.238.39 CH - [2015-05-02 15:02:09.963295] "GET /favicon.ico HTTP/1.1" 200 1150 "https://www.example.com/EMail/index.html" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 - - + "f45c470f.5238f0fc40aea" Vjds4awxQzZrjF1SueoAAABU TLSv1 DHE-RSA-AES128-SHA 630 1562 -% 2981 2007 56 152 0 0 192.168.238.39 CH - [2015-05-02 15:02:10.123504] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "https://www.example.com/EMail/index.html" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 proxy-server - + "f45c470f.5238f0fc40aea" Vjds4qwxQzZrjF1R-x4AAAAR TLSv1 DHE-RSA-AES128-SHA 726 325 -% 2971614 2466 968316 221 0 0 192.168.238.39 CH - [2015-05-02 15:02:14.506913] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "https://www.example.com/EMail/index.html" "Mozilla/5.0 (Linux; U; Android 2.3.3; de-ch; SAMSUNG GT-I9100/I9100BUKG2 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" www.example.com 192.168.34.16 443 proxy-server - + "f45c470f.5238f0fc40aea" Vjds5qwxQzZrjF1R-x8AAAAS TLSv1 DHE-RSA-AES128-SHA 694 7770 -% 2459585 2972 453645 2233 0 0 192.168.192.35 CH - [2015-05-02 15:02:31.333817] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" Vjds96wxQzZrjF1Sue4AAABA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 849 11799 -% 1048387 2962 42498 2212 0 0 192.168.76.48 CH - [2015-05-02 15:09:35.257831] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "5e7f0285.5238f53b594e7" Vjdun6wxQzZrjF1SujAAAABe TLSv1.2 ECDHE-RSA-AES128-SHA256 666 11875 -% 832524 920 827031 3728 0 0 192.168.76.48 CH - [2015-05-02 15:09:36.144035] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "5e7f0285.5238f53b594e7" VjduoKwxQzZrjF1SujEAAABh TLSv1.2 ECDHE-RSA-AES128-SHA256 454 2527 14% 1895175 2834 890351 214 0 0 192.168.76.48 CH - [2015-05-02 15:09:36.210187] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "5e7f0285.5238f53b594e7" VjduoKwxQzZrjF1R-zYAAAAq TLSv1.2 ECDHE-RSA-AES128-SHA256 767 4405 23% 1946446 3094 940986 249 0 0 192.168.76.48 CH - [2015-05-02 15:09:36.220383] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "5e7f0285.5238f53b594e7" VjduoKwxQzZrjF1R-zgAAAAs TLSv1.2 ECDHE-RSA-AES128-SHA256 735 864 56% 2730790 2163 727632 204 0 0 192.168.76.48 CH - [2015-05-02 15:09:36.212013] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "5e7f0285.5238f53b594e7" VjduoKwxQzZrjF1R-zcAAAAt TLSv1.2 ECDHE-RSA-AES128-SHA256 767 1931 -% 3051708 2936 47849 226 0 0 192.168.76.48 CH - [2015-05-02 15:09:36.221887] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "5e7f0285.5238f53b594e7" VjduoKwxQzZrjF1SujIAAABo TLSv1.2 ECDHE-RSA-AES128-SHA256 735 2144 22% 3217536 1922 214259 208 0 0 192.168.76.48 CH - [2015-05-02 15:09:36.227215] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "5e7f0285.5238f53b594e7" VjduoKwxQzZrjF1SujMAAABQ TLSv1.2 ECDHE-RSA-AES128-SHA256 767 8573 22% 3216005 1641 210169 152 0 0 192.168.76.48 CH - [2015-05-02 15:09:39.520168] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "5e7f0285.5238f53b594e7" Vjduo6wxQzZrjF1SujQAAABg TLSv1.2 ECDHE-RSA-AES128-SHA256 502 1866 -% 2206728 2777 202967 216 0 0 192.168.76.48 CH - [2015-05-02 15:09:41.762077] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "5e7f0285.5238f53b594e7" VjdupawxQzZrjF1SujYAAABX TLSv1.2 ECDHE-RSA-AES128-SHA256 374 1626 -% 2481893 2941 477773 275 0 0 192.168.192.35 CH - [2015-05-02 15:14:18.936782] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdvuqwxQzZrjF1R-0sAAAA@ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1123 11799 -% 2747664 2432 742331 2392 0 0 192.168.192.35 CH - [2015-05-02 15:14:21.655061] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdvvawxQzZrjF1Sul0AAABH TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1123 11799 -% 1622957 6148 613751 2108 0 0 192.168.192.35 CH - [2015-05-02 15:14:29.136660] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdvxawxQzZrjF1SumAAAAB- TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1338 4447 -% 1014837 4997 9036 155 0 0 192.168.192.35 CH - [2015-05-02 15:14:30.172013] "GET /EMail/main.aspx HTTP/1.1" 200 3383 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdvxqwxQzZrjF1SumEAAABJ TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 3799 -% 724760 3003 719759 1306 0 0 192.168.192.35 CH - [2015-05-02 15:14:30.989962] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdvxqwxQzZrjF1SumIAAABL TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 4128 -% 2365544 2735 351344 10562 0 0 192.168.192.35 CH - [2015-05-02 15:14:31.062380] "GET /EMail/overview.aspx HTTP/1.1" 200 5291 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" Vjdvx6wxQzZrjF1SumMAAABU TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1134 9739 -% 2424902 2180 418713 2959 0 0 192.168.192.35 CH - [2015-05-02 15:14:31.069161] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" Vjdvx6wxQzZrjF1SumQAAABI TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1160 13205 -% 3104210 3133 93214 3961 0 0 192.168.192.35 CH - [2015-05-02 15:14:35.240091] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" Vjdvy6wxQzZrjF1SumYAAABW TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 511 409 -% 2416617 3876 411700 253 0 0 192.168.192.35 CH - [2015-05-02 15:14:37.708098] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" VjdvzawxQzZrjF1SumcAAABY TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 458 318 -% 2880083 2359 876965 165 0 0 192.168.192.35 CH - [2015-05-02 15:14:40.622065] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" Vjdv0KwxQzZrjF1SumkAAABA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 440 7758 -% 1259999 3134 253996 2193 0 0 192.168.159.106 CH - [2015-05-02 15:15:14.242853] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7923 "-" "Mozilla/5.0 (Linux; Android 5.0.1; SAMSUNG GT-I9505 Build/LRX22C) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "c1d091b7.5238f67ea1525" Vjdv8qwxQzZrjF1SunAAAABZ TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 977 12523 -% 2009902 2928 348 4706 3 0 192.168.159.106 CH - [2015-05-02 15:15:16.321815] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Linux; Android 5.0.1; SAMSUNG GT-I9505 Build/LRX22C) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "c1d091b7.5238f67ea1525" Vjdv9KwxQzZrjF1SunIAAABX TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 737 2421 13% 1686490 5303 677952 227 3 0 192.168.159.106 CH - [2015-05-02 15:20:55.553909] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7358 "-" "Mozilla/5.0 (Linux; Android 5.0.1; SAMSUNG GT-I9505 Build/LRX22C) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "c1d091b7.5238f67ea1525" VjdxR6wxQzZrjF1SuqcAAABA TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1363 11801 -% 805445 4201 797654 2181 3 0 192.168.186.76 CH - [2015-05-02 15:26:05.262121] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdyfawxQzZrjF1R-3QAAAAs TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 12038 -% 1087938 4255 77879 3684 3 0 192.168.186.76 CH - [2015-05-02 15:26:05.261975] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdyfawxQzZrjF1R-3MAAAAt TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 12038 -% 1142134 4462 132070 3632 3 0 192.168.186.76 CH - [2015-05-02 15:26:06.385664] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "d43b4c4b.52388d1dbd27f" VjdyfqwxQzZrjF1R-3UAAAAp TLSv1.2 ECDHE-RSA-AES256-SHA384 662 0 -% 963000 6563 950745 3606 3 0 192.168.186.76 CH - [2015-05-02 15:26:06.437310] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdyfqwxQzZrjF1R-3YAAAAv TLSv1.2 ECDHE-RSA-AES256-SHA384 662 7866 -% 1214610 6256 202415 3646 3 0 192.168.186.76 CH - [2015-05-02 15:26:08.568179] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdygKwxQzZrjF1R-3cAAAAw TLSv1.2 ECDHE-RSA-AES256-SHA384 822 469 -% 1691743 8532 680576 239 3 0 192.168.186.76 CH - [2015-05-02 15:26:10.272809] "GET /EMail/main.aspx HTTP/1.1" 200 3391 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdygqwxQzZrjF1R-3gAAAAu TLSv1.2 ECDHE-RSA-AES256-SHA384 678 3898 -% 859834 4962 851220 1673 3 0 192.168.186.76 CH - [2015-05-02 15:26:11.177338] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjdyg6wxQzZrjF1R-3kAAAA2 TLSv1.2 ECDHE-RSA-AES256-SHA384 662 4234 -% 1026237 4147 7831 12303 3 0 192.168.186.76 CH - [2015-05-02 15:26:11.179520] "GET /EMail/overview.aspx HTTP/1.1" 200 5537 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjdyg6wxQzZrjF1SutkAAABN TLSv1.2 ECDHE-RSA-AES256-SHA384 1180 6219 -% 1267441 5967 258104 1855 3 0 192.168.186.76 CH - [2015-05-02 15:26:11.179015] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjdyg6wxQzZrjF1SutgAAABH TLSv1.2 ECDHE-RSA-AES256-SHA384 1212 9827 -% 1592807 4478 578157 4556 3 0 192.168.186.76 CH - [2015-05-02 15:26:14.844911] "GET /EMail/inbox.aspx HTTP/1.1" 200 8393 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdyhqwxQzZrjF1SutsAAABJ TLSv1.2 ECDHE-RSA-AES256-SHA384 662 8991 -% 3460418 5963 447847 4284 3 0 192.168.186.76 CH - [2015-05-02 15:26:19.396912] "GET /EMail/message.aspx?&mailId=3930_16&folderId=947_65&mailPos=0 HTTP/1.1" 200 15892 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjdyi6wxQzZrjF1Sut0AAABU TLSv1.2 ECDHE-RSA-AES256-SHA384 710 16564 -% 2784475 5387 742389 34069 3 0 192.168.186.76 CH - [2015-05-02 15:27:01.942173] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdytawxQzZrjF1SuuIAAABA TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 2352666 4761 337815 4526 3 0 192.168.186.76 CH - [2015-05-02 15:27:05.966208] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" VjdyuawxQzZrjF1SuuQAAABi TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1182986 13221 166892 201 3 0 192.168.186.76 CH - [2015-05-02 15:27:07.160664] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7291 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d43b4c4b.52388d1dbd27f" Vjdyu6wxQzZrjF1SuuUAAABd TLSv1.2 ECDHE-RSA-AES256-SHA384 726 7802 -% 1848100 7414 836694 2531 3 0 192.168.178.60 CH - [2015-05-02 15:32:11.843647] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "760545b4.5238fa491703f" Vjdz66wxQzZrjF1R-44AAAAD TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 572 8359 -% 1046569 1302 44111 196 0 0 192.168.121.148 CH - [2015-05-02 15:47:19.751839] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e6854fa5.5238fdaaf049f" Vjd3d6wxQzZrjF1R-7EAAAAt TLSv1.2 ECDHE-RSA-AES256-SHA384 669 5699 -% 988031 678 986639 170 0 0 192.168.192.35 CH - [2015-05-02 15:48:18.221790] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" Vjd3sqwxQzZrjF1Su7MAAABx TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 849 11799 -% 900259 2556 894784 2365 0 0 192.168.121.148 CH - [2015-05-02 15:51:15.644027] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "e6854fa5.5238fdaaf049f" Vjd4Y6wxQzZrjF1R-70AAAA5 TLSv1.2 ECDHE-RSA-AES256-SHA384 658 1835 -% 2244 1511 43 114 0 0 192.168.1.78 CH - [2015-05-02 15:53:48.557546] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7365 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "2a0e3d3f.5238ff1dbb8ea" Vjd4-KwxQzZrjF1Su@oAAABq TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 986 11976 -% 1607112 2059 601974 2411 0 0 192.168.1.78 CH - [2015-05-02 15:53:50.282685] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "2a0e3d3f.5238ff1dbb8ea" Vjd4-qwxQzZrjF1Su@wAAAB2 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 460 2427 14% 1503447 3181 498902 160 0 0 192.168.192.35 CH - [2015-05-02 15:58:25.359906] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" Vjd6EawxQzZrjF1SvBYAAABa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 849 11799 -% 1630567 2406 623907 3624 0 0 192.168.192.35 CH - [2015-05-02 16:05:08.644137] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7351 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" Vjd7pKwxQzZrjF1SvFcAAABA TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1123 11799 -% 1096754 4590 87332 3903 0 0 192.168.192.35 CH - [2015-05-02 16:05:16.526460] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" Vjd7rKwxQzZrjF1SvFgAAABm TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1338 4447 -% 1082389 5313 76176 164 0 0 192.168.192.35 CH - [2015-05-02 16:05:17.650179] "GET /EMail/main.aspx HTTP/1.1" 200 3383 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" Vjd7rawxQzZrjF1SvFkAAABi TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 530 3799 -% 798786 3157 793746 1226 0 0 192.168.192.35 CH - [2015-05-02 16:05:18.513144] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" Vjd7rqwxQzZrjF1SvFsAAABe TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 490 4128 -% 1601172 1985 591937 6746 0 0 192.168.192.35 CH - [2015-05-02 16:05:18.558633] "GET /EMail/overview.aspx HTTP/1.1" 200 5291 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" Vjd7rqwxQzZrjF1SvFwAAABh TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1134 9739 -% 3615955 2753 609520 2795 0 0 192.168.192.35 CH - [2015-05-02 16:05:18.566054] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" Vjd7rqwxQzZrjF1R-@sAAAAo TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1160 13205 -% 5112620 3846 102111 2745 0 0 192.168.192.35 CH - [2015-05-02 16:05:23.834888] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" Vjd7s6wxQzZrjF1R-@wAAAAq TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 511 409 -% 1986854 2287 983877 186 0 0 192.168.192.35 CH - [2015-05-02 16:05:25.915504] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.3) Gecko/20100101 Firefox/38.3 ZSBP37" www.example.com 192.168.34.16 443 proxy-server - + "9d058361.5238a109cd61d" Vjd7tawxQzZrjF1R-@0AAAAs TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 458 318 -% 2178154 2207 175160 166 0 0 192.168.215.195 CH - [2015-05-02 16:12:44.533866] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd (unknown version) CFNetwork/520.5.1 Darwin/11.4.2 (x86_64) (iMac10%2C1)" www.example.com 192.168.34.16 443 proxy-server - - "28host.523903591586a" Vjd9bKwxQzZrjF1SvJ0AAABg TLSv1 ECDHE-RSA-AES256-SHA 507 8347 -% 898168 1854 894978 160 0 0 192.168.104.36 CH - [2015-05-02 16:41:42.828250] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7362 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "33477aaf.5238d47ccf287" VjeENqwxQzZrjF1SvdEAAABP TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1052 11900 -% 1206324 2794 198697 4148 0 0 192.168.96.45 CH - [2015-05-02 16:51:02.110406] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7366 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "9ebe5b91.5238ea8e03e86" VjeGZqwxQzZrjF1SvjMAAAB6 TLSv1 AES256-SHA 981 11369 -% 937538 4330 929029 3342 0 0 192.168.96.45 CH - [2015-05-02 16:51:03.066903] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7366 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "9ebe5b91.5238ea8e03e86" VjeGZ6wxQzZrjF1SvjQAAAB4 TLSv1 AES256-SHA 981 11369 -% 1048318 2898 42342 2263 0 0 192.168.96.45 CH - [2015-05-02 16:51:07.555421] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "9ebe5b91.5238ea8e03e86" VjeGa6wxQzZrjF1SvjYAAAB@ TLSv1 AES256-SHA 630 421 -% 1139384 5146 133340 181 0 0 192.168.96.45 CH - [2015-05-02 16:51:08.871529] "GET /EMail/main.aspx HTTP/1.1" 200 3398 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "9ebe5b91.5238ea8e03e86" VjeGbKwxQzZrjF1SvjgAAABE TLSv1 AES256-SHA 614 3818 -% 886182 3182 880405 1857 0 0 192.168.96.45 CH - [2015-05-02 16:51:09.842951] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "9ebe5b91.5238ea8e03e86" VjeGbawxQzZrjF1SvjkAAABs TLSv1 AES256-SHA 582 4154 -% 823336 3089 811990 7511 0 0 192.168.96.45 CH - [2015-05-02 16:51:10.294079] "GET /EMail/overview.aspx HTTP/1.1" 200 5302 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "9ebe5b91.5238ea8e03e86" VjeGbqwxQzZrjF1SvjoAAABF TLSv1 AES256-SHA 1013 9225 -% 1123599 2761 117368 2856 0 0 192.168.96.45 CH - [2015-05-02 16:51:15.395287] "GET /EMail/message.aspx?&mailId=3929_70&folderId=1157_50&mailPos=0 HTTP/1.1" 200 11209 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "9ebe5b91.5238ea8e03e86" VjeGc6wxQzZrjF1SvjwAAAB1 TLSv1 AES256-SHA 1021 15199 -% 1523953 3317 495459 24010 0 0 192.168.96.45 CH - [2015-05-02 16:51:42.973543] "GET /EMail/inbox.aspx HTTP/1.1" 200 8585 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "9ebe5b91.5238ea8e03e86" VjeGjqwxQzZrjF1SvkEAAABO TLSv1 AES256-SHA 989 12538 -% 1039650 3104 31247 4395 0 0 192.168.96.45 CH - [2015-05-02 16:51:46.026214] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "9ebe5b91.5238ea8e03e86" VjeGkqwxQzZrjF1SvkMAAABH TLSv1 AES256-SHA 1133 3840 -% 1207269 9094 197449 163 0 0 192.168.96.45 CH - [2015-05-02 16:51:49.474915] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "9ebe5b91.5238ea8e03e86" VjeGlawxQzZrjF1SvkUAAAB- TLSv1 AES256-SHA 1005 3904 -% 823689 3778 818959 221 0 0 192.168.96.45 CH - [2015-05-02 16:51:51.625294] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "9ebe5b91.5238ea8e03e86" VjeGl6wxQzZrjF1SvkYAAABP TLSv1 AES256-SHA 925 11269 -% 891534 3295 885191 2298 0 0 192.168.96.45 CH - [2015-05-02 16:51:52.722303] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "9ebe5b91.5238ea8e03e86" VjeGmKwxQzZrjF1SvkcAAABU TLSv1 AES256-SHA 1037 3696 -% 756174 2423 753045 150 0 0 192.168.96.45 CH - [2015-05-02 16:51:53.063093] "GET /EMail/scripts/variables_de.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "9ebe5b91.5238ea8e03e86" VjeGmawxQzZrjF1SvkgAAABd TLSv1 AES256-SHA 1109 3700 -% 679279 2081 676321 188 0 0 192.168.96.45 CH - [2015-05-02 16:51:53.964957] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "9ebe5b91.5238ea8e03e86" VjeGmawxQzZrjF1SvkkAAABi TLSv1 AES256-SHA 694 213 -% 797648 3315 793121 186 0 0 192.168.223.134 CH - [2015-05-02 16:58:57.107541] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7370 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "69818b.52390dad37655" VjeIQawxQzZrjF1RAKIAAAAk TLSv1.2 ECDHE-RSA-AES256-SHA384 765 11923 -% 908486 2327 903214 2221 0 0 192.168.223.134 CH - [2015-05-02 16:58:58.090457] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "69818b.52390dad37655" VjeIQqwxQzZrjF1RAKMAAAAi TLSv1.2 ECDHE-RSA-AES256-SHA384 518 2575 14% 1028752 3088 24178 189 0 0 192.168.223.134 CH - [2015-05-02 16:58:58.170185] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "69818b.52390dad37655" VjeIQqwxQzZrjF1SvpQAAAB2 TLSv1.2 ECDHE-RSA-AES256-SHA384 834 2208 22% 949603 2005 946569 142 0 0 192.168.223.134 CH - [2015-05-02 16:58:58.166867] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "69818b.52390dad37655" VjeIQqwxQzZrjF1SvpIAAABq TLSv1.2 ECDHE-RSA-AES256-SHA384 866 8781 22% 1076354 2032 69926 211 0 0 192.168.223.134 CH - [2015-05-02 16:58:58.167879] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "69818b.52390dad37655" VjeIQqwxQzZrjF1SvpMAAABv TLSv1.2 ECDHE-RSA-AES256-SHA384 834 928 56% 1115290 1959 112591 179 0 0 192.168.223.134 CH - [2015-05-02 16:58:58.175207] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "69818b.52390dad37655" VjeIQqwxQzZrjF1RAKQAAAAn TLSv1.2 ECDHE-RSA-AES256-SHA384 882 1979 -% 1124355 1657 121926 179 0 0 192.168.223.134 CH - [2015-05-02 16:58:58.240776] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "69818b.52390dad37655" VjeIQqwxQzZrjF1RAKUAAAAm TLSv1.2 ECDHE-RSA-AES256-SHA384 866 4788 23% 1148823 3782 143318 168 0 0 192.168.223.134 CH - [2015-05-02 16:58:59.482790] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "69818b.52390dad37655" VjeIQ6wxQzZrjF1RAKYAAAAr TLSv1.2 ECDHE-RSA-AES256-SHA384 566 1898 -% 815399 1992 812542 233 0 0 192.168.223.134 CH - [2015-05-02 16:59:00.645329] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "b9dc98b0.52390db0971d1" VjeIRKwxQzZrjF1SvpUAAABz TLSv1.2 ECDHE-RSA-AES256-SHA384 669 5699 -% 910051 1109 908071 163 0 0 192.168.223.134 CH - [2015-05-02 16:59:01.550290] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "69818b.52390dad37655" VjeIRawxQzZrjF1RAKcAAAAo TLSv1.2 ECDHE-RSA-AES256-SHA384 566 2186 -% 813737 2024 810815 249 0 0 192.168.223.134 CH - [2015-05-02 16:59:03.122377] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "69818b.52390dad37655" VjeIR6wxQzZrjF1RAKgAAAAq TLSv1.2 ECDHE-RSA-AES256-SHA384 726 501 -% 1196032 5363 189665 234 0 0 192.168.223.134 CH - [2015-05-02 16:59:04.346335] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7543 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "69818b.52390dad37655" VjeISKwxQzZrjF1RAKkAAAAs TLSv1.2 ECDHE-RSA-AES256-SHA384 598 8058 -% 1006111 4243 987085 13987 0 0 192.168.223.134 CH - [2015-05-02 16:59:23.215727] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "69818b.52390dad37655" VjeIW6wxQzZrjF1SvpsAAABw TLSv1.2 ECDHE-RSA-AES256-SHA384 1042 694 -% 963109 5542 956720 184 0 0 192.168.223.134 CH - [2015-05-02 16:59:24.346146] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7543 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "69818b.52390dad37655" VjeIXKwxQzZrjF1Svp0AAAB0 TLSv1.2 ECDHE-RSA-AES256-SHA384 598 8058 -% 983232 3943 960974 17590 0 0 192.168.223.134 CH - [2015-05-02 16:59:25.446999] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "69818b.52390dad37655" VjeIXawxQzZrjF1Svp4AAABD TLSv1.2 ECDHE-RSA-AES256-SHA384 694 501 -% 957081 3619 952462 232 0 0 192.168.223.134 CH - [2015-05-02 16:59:26.435419] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7543 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "69818b.52390dad37655" VjeIXqwxQzZrjF1Svp8AAAB5 TLSv1.2 ECDHE-RSA-AES256-SHA384 598 8058 -% 781399 2571 757900 20191 0 0 192.168.223.134 CH - [2015-05-02 17:00:03.783355] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "69818b.52390dad37655" VjeIg6wxQzZrjF1SvqkAAABF TLSv1.2 ECDHE-RSA-AES256-SHA384 1026 662 -% 1192520 5235 186296 229 0 0 192.168.223.134 CH - [2015-05-02 17:00:05.002165] "GET /EMail/main.aspx HTTP/1.1" 200 3402 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "69818b.52390dad37655" VjeIhawxQzZrjF1SvqsAAAB1 TLSv1.2 ECDHE-RSA-AES256-SHA384 566 3914 -% 964633 3111 958811 1850 0 0 192.168.223.134 CH - [2015-05-02 17:00:06.015576] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "69818b.52390dad37655" VjeIhqwxQzZrjF1SvqwAAABM TLSv1.2 ECDHE-RSA-AES256-SHA384 518 4234 -% 883921 3179 869298 10540 0 0 192.168.223.134 CH - [2015-05-02 17:00:06.106433] "GET /EMail/overview.aspx HTTP/1.1" 200 5300 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "69818b.52390dad37655" VjeIhqwxQzZrjF1Svq4AAABG TLSv1.2 ECDHE-RSA-AES256-SHA384 834 6011 -% 1143040 1897 137899 2458 0 0 192.168.223.134 CH - [2015-05-02 17:00:06.105979] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "69818b.52390dad37655" VjeIhqwxQzZrjF1Svq0AAABB TLSv1.2 ECDHE-RSA-AES256-SHA384 850 9859 -% 1813536 2614 802367 4763 0 0 192.168.223.134 CH - [2015-05-02 17:00:07.302554] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "69818b.52390dad37655" VjeIh6wxQzZrjF1Svq8AAABT TLSv1.2 ECDHE-RSA-AES256-SHA384 534 1354 -% 976195 2240 973214 213 0 0 192.168.223.134 CH - [2015-05-02 17:00:07.970184] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "69818b.52390dad37655" VjeIh6wxQzZrjF1SvrAAAAB3 TLSv1.2 ECDHE-RSA-AES256-SHA384 582 1370 -% 723678 2040 720788 158 0 0 192.168.223.134 CH - [2015-05-02 17:00:13.818255] "GET /EMail/inbox.aspx HTTP/1.1" 200 8583 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "69818b.52390dad37655" VjeIjawxQzZrjF1RAKoAAAAt TLSv1.2 ECDHE-RSA-AES256-SHA384 834 9376 -% 1252957 2060 245858 4307 0 0 192.168.223.134 CH - [2015-05-02 17:00:15.127508] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "69818b.52390dad37655" VjeIj6wxQzZrjF1RAKwAAAAv TLSv1.2 ECDHE-RSA-AES256-SHA384 534 634 -% 945247 3042 941377 201 0 0 192.168.223.134 CH - [2015-05-02 17:00:15.205008] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "69818b.52390dad37655" VjeIj6wxQzZrjF1SvrMAAABN TLSv1.2 ECDHE-RSA-AES256-SHA384 850 2107 -% 1031078 2878 27385 300 0 0 192.168.223.134 CH - [2015-05-02 17:00:15.202919] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "69818b.52390dad37655" VjeIj6wxQzZrjF1SvrIAAABS TLSv1.2 ECDHE-RSA-AES256-SHA384 850 827 -% 1039534 3003 35750 118 0 0 192.168.223.134 CH - [2015-05-02 17:00:19.550045] "GET /EMail/message.aspx?&mailId=3927_52&folderId=952_1&mailPos=0 HTTP/1.1" 200 11145 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "69818b.52390dad37655" VjeIk6wxQzZrjF1SvrQAAABH TLSv1.2 ECDHE-RSA-AES256-SHA384 550 11743 -% 1331565 3070 305131 22505 0 0 192.168.223.134 CH - [2015-05-02 17:00:23.049993] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3927_52&folderId=952_1&attachmentId=2&token=-43436537376957998E18 HTTP/1.1" 200 47869 "https://www.example.com/EMail/message.aspx?&mailId=3927_52&folderId=952_1&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "69818b.52390dad37655" VjeIl6wxQzZrjF1SvrYAAABR TLSv1.2 ECDHE-RSA-AES256-SHA384 662 50726 -% 896363 5755 871460 224 0 0 192.168.223.134 CH - [2015-05-02 17:01:02.193890] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "69818b.52390dad37655" VjeIvqwxQzZrjF1RAK0AAAAw TLSv1.2 ECDHE-RSA-AES256-SHA384 850 646 -% 866585 3627 861859 219 0 0 192.168.223.134 CH - [2015-05-02 17:01:03.084970] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "69818b.52390dad37655" VjeIv6wxQzZrjF1RAK4AAAAu TLSv1.2 ECDHE-RSA-AES256-SHA384 518 815 75% 923347 3066 919348 234 0 0 192.168.223.134 CH - [2015-05-02 17:01:04.137845] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "b9dc98b0.52390db0971d1" VjeIwKwxQzZrjF1Svr4AAABU TLSv1.2 ECDHE-RSA-AES256-SHA384 658 1835 -% 2653 1739 53 133 0 0 192.168.223.134 CH - [2015-05-02 17:01:04.066303] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "69818b.52390dad37655" VjeIwKwxQzZrjF1RALAAAAAz TLSv1.2 ECDHE-RSA-AES256-SHA384 486 373 -% 935416 3550 931044 181 0 0 192.168.223.134 CH - [2015-05-02 17:01:05.026103] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "69818b.52390dad37655" VjeIwawxQzZrjF1RALEAAAAy TLSv1.2 ECDHE-RSA-AES256-SHA384 470 7866 -% 1009924 2358 4718 2259 0 0 192.168.223.134 CH - [2015-05-02 17:01:06.099072] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1150 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "69818b.52390dad37655" VjeIwqwxQzZrjF1RALIAAAA1 TLSv1.2 ECDHE-RSA-AES256-SHA384 582 0 12% 1006382 3056 2151 165 0 0 192.168.223.134 CH - [2015-05-02 17:01:06.195567] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "69818b.52390dad37655" VjeIwqwxQzZrjF1SvsMAAABe TLSv1.2 ECDHE-RSA-AES256-SHA384 930 193 -% 1074809 1702 72344 219 0 0 192.168.223.134 CH - [2015-05-02 17:01:06.195289] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "69818b.52390dad37655" VjeIwqwxQzZrjF1SvsIAAABo TLSv1.2 ECDHE-RSA-AES256-SHA384 930 193 23% 1092993 1810 89628 160 0 0 192.168.223.134 CH - [2015-05-02 17:01:06.191297] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "69818b.52390dad37655" VjeIwqwxQzZrjF1SvsEAAABi TLSv1.2 ECDHE-RSA-AES256-SHA384 898 193 56% 1121891 1845 119238 147 0 0 192.168.223.134 CH - [2015-05-02 17:01:06.182419] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "69818b.52390dad37655" VjeIwqwxQzZrjF1SvsAAAABd TLSv1.2 ECDHE-RSA-AES256-SHA384 898 193 22% 1174701 2143 171655 153 0 0 192.168.223.134 CH - [2015-05-02 17:01:06.201489] "GET /EMail/scripts/shost.js HTTP/1.1" 200 2305 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "69818b.52390dad37655" VjeIwqwxQzZrjF1SvsQAAABh TLSv1.2 ECDHE-RSA-AES256-SHA384 930 193 26% 1156952 1754 154203 134 0 0 192.168.81.38 CH - [2015-05-02 17:19:51.397756] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7368 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7b5e03ef.523912596697c" VjeNJ6wxQzZrjF1Sv20AAABN TLSv1 ECDHE-RSA-AES256-SHA 703 11993 -% 978771 1905 973705 2499 0 0 192.168.81.38 CH - [2015-05-02 17:19:52.640870] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7b5e03ef.523912596697c" VjeNKKwxQzZrjF1Sv24AAABS TLSv1 ECDHE-RSA-AES256-SHA 454 2431 14% 951610 3085 946788 217 0 0 192.168.81.38 CH - [2015-05-02 17:19:52.697219] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7b5e03ef.523912596697c" VjeNKKwxQzZrjF1RAPEAAAAx TLSv1 ECDHE-RSA-AES256-SHA 847 8290 23% 1149287 3535 143915 163 0 0 192.168.81.38 CH - [2015-05-02 17:19:52.697004] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7b5e03ef.523912596697c" VjeNKKwxQzZrjF1Sv28AAABH TLSv1 ECDHE-RSA-AES256-SHA 847 5721 -% 1220412 2826 216846 139 0 0 192.168.81.38 CH - [2015-05-02 17:19:52.703925] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7b5e03ef.523912596697c" VjeNKKwxQzZrjF1Sv3AAAABW TLSv1 ECDHE-RSA-AES256-SHA 847 12059 22% 1279340 2546 272689 182 0 0 192.168.81.38 CH - [2015-05-02 17:19:54.075006] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7b5e03ef.523912596697c" VjeNKqwxQzZrjF1Sv3EAAABR TLSv1 ECDHE-RSA-AES256-SHA 502 1802 -% 779109 2141 776103 230 0 0 192.168.81.38 CH - [2015-05-02 17:19:54.798650] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7b5e03ef.523912596697c" VjeNKqwxQzZrjF1Sv3IAAAB- TLSv1 ECDHE-RSA-AES256-SHA 502 2090 -% 796969 3262 792495 520 0 0 192.168.81.38 CH - [2015-05-02 17:19:55.632399] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7b5e03ef.523912596697c" VjeNK6wxQzZrjF1Sv3MAAABJ TLSv1 ECDHE-RSA-AES256-SHA 342 1578 -% 727011 3063 723132 171 0 0 192.168.81.38 CH - [2015-05-02 17:20:00.566579] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7b5e03ef.523912596697c" VjeNMKwxQzZrjF1Sv3UAAABY TLSv1 ECDHE-RSA-AES256-SHA 630 421 -% 1113396 3197 109264 299 0 0 192.168.81.38 CH - [2015-05-02 17:20:01.804372] "GET /EMail/main.aspx HTTP/1.1" 200 3400 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7b5e03ef.523912596697c" VjeNMawxQzZrjF1Sv3cAAABA TLSv1 ECDHE-RSA-AES256-SHA 502 3818 -% 797172 2057 793463 1123 0 0 192.168.81.38 CH - [2015-05-02 17:20:02.775214] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7b5e03ef.523912596697c" VjeNMqwxQzZrjF1Sv3gAAABI TLSv1 ECDHE-RSA-AES256-SHA 518 2431 14% 874802 2952 870088 210 0 0 192.168.81.38 CH - [2015-05-02 17:20:02.827978] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7b5e03ef.523912596697c" VjeNMqwxQzZrjF1Sv3kAAABU TLSv1 ECDHE-RSA-AES256-SHA 911 8131 23% 1098959 3205 93509 209 0 0 192.168.81.38 CH - [2015-05-02 17:20:04.107518] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7b5e03ef.523912596697c" VjeNNKwxQzZrjF1Sv3wAAABd TLSv1 ECDHE-RSA-AES256-SHA 470 9234 -% 2338737 4178 326324 4317 0 0 192.168.81.38 CH - [2015-05-02 17:20:05.543016] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7b5e03ef.523912596697c" VjeNNawxQzZrjF1Sv34AAABZ TLSv1 ECDHE-RSA-AES256-SHA 911 4244 -% 1198592 2091 195678 212 0 0 192.168.81.38 CH - [2015-05-02 17:20:05.489301] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7b5e03ef.523912596697c" VjeNNawxQzZrjF1Sv30AAABh TLSv1 ECDHE-RSA-AES256-SHA 518 1887 22% 1350782 2687 346958 186 0 0 192.168.81.38 CH - [2015-05-02 17:20:06.647775] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7b5e03ef.523912596697c" VjeNNqwxQzZrjF1Sv38AAABg TLSv1 ECDHE-RSA-AES256-SHA 518 1274 -% 701189 3250 696806 247 0 0 192.168.81.38 CH - [2015-05-02 17:20:27.268513] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7b5e03ef.523912596697c" VjeNS6wxQzZrjF1Sv4QAAABf TLSv1 ECDHE-RSA-AES256-SHA 911 11699 22% 1054152 2152 49264 162 0 0 192.168.81.38 CH - [2015-05-02 17:20:27.267962] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7b5e03ef.523912596697c" VjeNS6wxQzZrjF1Sv4MAAABC TLSv1 ECDHE-RSA-AES256-SHA 879 5918 22% 1439748 2697 435663 236 0 0 192.168.81.38 CH - [2015-05-02 17:20:27.272456] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7b5e03ef.523912596697c" VjeNS6wxQzZrjF1Sv4cAAABk TLSv1 ECDHE-RSA-AES256-SHA 831 5913 -% 1554581 1921 551841 162 0 0 192.168.81.38 CH - [2015-05-02 17:20:27.270471] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7b5e03ef.523912596697c" VjeNS6wxQzZrjF1Sv4YAAABj TLSv1 ECDHE-RSA-AES256-SHA 831 5849 -% 1605076 2362 601743 149 0 0 192.168.81.38 CH - [2015-05-02 17:20:27.269542] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7b5e03ef.523912596697c" VjeNS6wxQzZrjF1Sv4UAAABb TLSv1 ECDHE-RSA-AES256-SHA 831 4569 -% 1636297 1971 633368 344 0 0 192.168.81.38 CH - [2015-05-02 17:20:31.322157] "GET /EMail/message.aspx?&mailId=3927_61&folderId=551_17&mailPos=0 HTTP/1.1" 200 11305 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7b5e03ef.523912596697c" VjeNT6wxQzZrjF1Sv4kAAABv TLSv1 ECDHE-RSA-AES256-SHA 486 11812 -% 1207347 3206 181272 21776 0 0 192.168.81.38 CH - [2015-05-02 17:20:32.755910] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/message.aspx?&mailId=3927_61&folderId=551_17&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7b5e03ef.523912596697c" VjeNUKwxQzZrjF1Sv4wAAABp TLSv1 ECDHE-RSA-AES256-SHA 566 2431 14% 782854 3107 778284 193 0 0 192.168.81.38 CH - [2015-05-02 17:20:32.756370] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/message.aspx?&mailId=3927_61&folderId=551_17&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7b5e03ef.523912596697c" VjeNUKwxQzZrjF1Sv40AAABn TLSv1 ECDHE-RSA-AES256-SHA 566 607 56% 1114346 2848 110445 278 0 0 192.168.81.38 CH - [2015-05-02 17:20:32.755897] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/message.aspx?&mailId=3927_61&folderId=551_17&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7b5e03ef.523912596697c" VjeNUKwxQzZrjF1Sv4sAAABz TLSv1 ECDHE-RSA-AES256-SHA 566 1887 22% 1149740 3114 145179 160 0 0 192.168.81.38 CH - [2015-05-02 17:22:39.850399] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7b5e03ef.523912596697c" VjeNz6wxQzZrjF1Sv6EAAAB1 TLSv1 ECDHE-RSA-AES256-SHA 767 4356 -% 1127204 3590 122663 267 0 0 192.168.81.38 CH - [2015-05-02 17:22:41.094161] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7b5e03ef.523912596697c" VjeN0awxQzZrjF1Sv6IAAABM TLSv1 ECDHE-RSA-AES256-SHA 390 7786 -% 982350 2067 975739 3786 0 0 192.168.81.38 CH - [2015-05-02 17:22:42.284378] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7b5e03ef.523912596697c" VjeN0qwxQzZrjF1Sv6QAAABB TLSv1 ECDHE-RSA-AES256-SHA 518 2569 14% 1006105 2622 2153 197 0 0 192.168.81.38 CH - [2015-05-02 17:22:42.338617] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7b5e03ef.523912596697c" VjeN0qwxQzZrjF1Sv6UAAABT TLSv1 ECDHE-RSA-AES256-SHA 911 11699 22% 995121 3713 988462 183 0 0 192.168.81.38 CH - [2015-05-02 17:22:42.342869] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "7b5e03ef.523912596697c" VjeN0qwxQzZrjF1Sv6YAAAB3 TLSv1 ECDHE-RSA-AES256-SHA 911 4244 -% 1062203 3608 57239 150 0 0 192.168.96.46 CH - [2015-05-02 17:28:51.762708] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7539 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "46host.5238d1cb17c1d" VjePQ6wxQzZrjF1Sv9kAAAB7 TLSv1 AES256-SHA 1037 11461 -% 977678 3011 961212 12902 0 0 192.168.96.46 CH - [2015-05-02 17:28:58.357886] "GET /EMail/main.aspx HTTP/1.1" 200 3398 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "46host.5238d1cb17c1d" VjePSqwxQzZrjF1Sv9sAAAB@ TLSv1 AES256-SHA 1005 7301 -% 1071709 2210 67830 1128 0 0 192.168.96.46 CH - [2015-05-02 17:28:59.870601] "GET /EMail/overview.aspx HTTP/1.1" 200 5302 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "46host.5238d1cb17c1d" VjePS6wxQzZrjF1RARIAAAAV TLSv1 AES256-SHA 1013 9225 -% 1085473 1869 81132 1713 0 0 192.168.96.46 CH - [2015-05-02 17:28:59.839148] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "46host.5238d1cb17c1d" VjePS6wxQzZrjF1Sv90AAABc TLSv1 AES256-SHA 1029 12721 -% 1776095 2570 767074 2715 0 0 192.168.96.46 CH - [2015-05-02 17:29:01.019478] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "46host.5238d1cb17c1d" VjePTawxQzZrjF1RARMAAAAY TLSv1 AES256-SHA 614 1258 -% 822641 3085 818596 205 0 0 192.168.96.46 CH - [2015-05-02 17:29:01.686018] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "46host.5238d1cb17c1d" VjePTawxQzZrjF1Sv94AAABF TLSv1 AES256-SHA 662 1274 -% 891303 3129 887390 164 0 0 192.168.96.46 CH - [2015-05-02 17:29:04.188310] "GET /EMail/inbox.aspx HTTP/1.1" 200 8593 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "46host.5238d1cb17c1d" VjePUKwxQzZrjF1Sv98AAAB1 TLSv1 AES256-SHA 598 9071 -% 1048152 3168 39649 4384 0 0 192.168.96.46 CH - [2015-05-02 17:29:05.305759] "GET /EMail/images/Highost.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "46c89293.5238d1cb17c1d" VjePUawxQzZrjF1Sv@AAAABM TLSv1 AES256-SHA 694 213 -% 788064 2922 784390 146 0 0 192.168.96.46 CH - [2015-05-02 17:29:05.304521] "GET /EMail/images/msgClosed.png HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "46host.5238d1cb17c1d" VjePUawxQzZrjF1RARQAAAAZ TLSv1 AES256-SHA 694 213 -% 1009258 3203 5268 152 0 0 192.168.96.46 CH - [2015-05-02 17:29:05.405769] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "46host.5238d1cb17c1d" VjePUawxQzZrjF1Sv@EAAABG TLSv1 AES256-SHA 1005 4037 -% 1000673 3751 0 145 0 0 192.168.96.46 CH - [2015-05-02 17:29:10.307968] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3929_76&folderId=1157_50&attachmentId=2&token=-68416651806149642E18 HTTP/1.1" 200 55347 "https://www.example.com/EMail/message.aspx?&mailId=3929_76&folderId=1157_50&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "46host.5238d1cb17c1d" VjePVqwxQzZrjF1Sv@QAAABO TLSv1 AES256-SHA 1133 60553 -% 1218166 6358 189786 193 0 0 192.168.96.46 CH - [2015-05-02 17:29:32.059521] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3929_76&folderId=1157_50&attachmentId=2&token=-68416651806149642E18 HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3929_76&folderId=1157_50&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "46host.5238d1cb17c1d" VjePbKwxQzZrjF1Sv@gAAABR TLSv1 AES256-SHA 1133 3808 -% 1142259 6509 134839 206 0 0 192.168.96.46 CH - [2015-05-02 17:29:37.359937] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7366 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "46host.5238d1cb17c1d" VjePcawxQzZrjF1Sv@oAAABP TLSv1 AES256-SHA 1037 11285 -% 947704 2590 942358 2197 0 0 192.168.194.238 CH - [2015-05-02 18:16:39.048802] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7370 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "bhost.52391f0b30a62" Vjead6wxQzZrjF1SwaMAAABg TLSv1 ECDHE-RSA-AES256-SHA 711 11793 -% 903202 1306 898070 3160 0 0 192.168.194.238 CH - [2015-05-02 18:16:40.016685] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "bhost.52391f0b30a62" VjeaeKwxQzZrjF1RAaMAAAAw TLSv1 ECDHE-RSA-AES256-SHA 812 4245 23% 684880 2197 681137 239 0 0 192.168.194.238 CH - [2015-05-02 18:16:40.016086] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "bhost.52391f0b30a62" VjeaeKwxQzZrjF1RAaEAAAAt TLSv1 ECDHE-RSA-AES256-SHA 812 2032 22% 751030 2802 746723 226 0 0 192.168.194.238 CH - [2015-05-02 18:16:40.016105] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7160 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "bca2ac1.52391f0b30a62" VjeaeKwxQzZrjF1RAaIAAAAv TLSv1 ECDHE-RSA-AES256-SHA 812 8067 22% 1005413 2801 0 185 0 0 192.168.194.238 CH - [2015-05-02 18:16:40.003012] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "bhost.52391f0b30a62" VjeaeKwxQzZrjF1SwaQAAABL TLSv1 ECDHE-RSA-AES256-SHA 603 2431 14% 1018877 3121 13893 160 0 0 192.168.194.238 CH - [2015-05-02 18:16:40.712347] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "bhost.52391f0b30a62" VjeaeKwxQzZrjF1RAaQAAAA2 TLSv1 ECDHE-RSA-AES256-SHA 603 607 56% 476297 2110 473141 229 0 0 192.168.194.238 CH - [2015-05-02 18:16:41.324885] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "bhost.52391f0b30a62" VjeaeawxQzZrjF1RAaUAAAAu TLSv1 ECDHE-RSA-AES256-SHA 603 1690 -% 962920 2727 959403 165 0 0 192.168.194.238 CH - [2015-05-02 18:16:41.330358] "GET /EMail/scripts/csshover.htc HTTP/1.1" 200 4255 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "bhost.52391f0b30a62" VjeaeawxQzZrjF1RAaYAAAAz TLSv1 ECDHE-RSA-AES256-SHA 491 4682 -% 1066017 2714 62532 157 0 0 192.168.194.238 CH - [2015-05-02 18:16:41.411072] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - X "bhost.52391f0b30a62" VjeaeawxQzZrjF1SwaUAAABX TLSv1 ECDHE-RSA-AES256-SHA 603 0 -% 1074559 1916 71970 152 0 0 192.168.194.238 CH - [2015-05-02 18:16:42.232479] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - X "bhost.52391f0b30a62" VjeaeqwxQzZrjF1RAacAAAAy TLSv1 ECDHE-RSA-AES256-SHA 603 0 -% 940996 3375 936650 202 0 0 192.168.194.238 CH - [2015-05-02 18:16:42.430075] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "bhost.52391f0b30a62" VjeaeqwxQzZrjF1RAagAAAA1 TLSv1 ECDHE-RSA-AES256-SHA 603 1802 -% 963286 2321 960131 200 0 0 192.168.194.238 CH - [2015-05-02 18:16:49.928389] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "bhost.52391f0b30a62" VjeagawxQzZrjF1RAaoAAAA4 TLSv1 ECDHE-RSA-AES256-SHA 1148 598 -% 1012591 4706 7053 178 0 0 192.168.194.238 CH - [2015-05-02 18:16:50.948369] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7543 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "bhost.52391f0b30a62" VjeagqwxQzZrjF1RAasAAAA0 TLSv1 ECDHE-RSA-AES256-SHA 843 7978 -% 1027654 3944 5331 17691 0 0 192.168.194.238 CH - [2015-05-02 18:18:26.929102] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7370 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "bhost.52391f0b30a62" Vjea4qwxQzZrjF1SwbUAAABV TLSv1 ECDHE-RSA-AES256-SHA 748 7947 -% 1045719 4631 36339 3799 0 0 192.168.194.238 CH - [2015-05-02 18:18:28.029115] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "bhost.52391f0b30a62" Vjea5KwxQzZrjF1RAbAAAAAE TLSv1 ECDHE-RSA-AES256-SHA 908 4404 23% 969695 2460 965142 231 0 0 192.168.194.238 CH - [2015-05-02 18:18:28.013634] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "bhost.52391f0b30a62" Vjea5KwxQzZrjF1SwbYAAABu TLSv1 ECDHE-RSA-AES256-SHA 699 2431 14% 985207 2084 981502 165 0 0 192.168.194.238 CH - [2015-05-02 18:18:28.026633] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7160 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "bca2ac1.52391f0b30a62" Vjea5KwxQzZrjF1SwbcAAAB0 TLSv1 ECDHE-RSA-AES256-SHA 908 8067 22% 1118071 1870 111834 213 0 0 192.168.194.238 CH - [2015-05-02 18:18:28.027629] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "bhost.52391f0b30a62" Vjea5KwxQzZrjF1SwbkAAABw TLSv1 ECDHE-RSA-AES256-SHA 892 752 56% 1188732 1751 185956 356 0 0 192.168.194.238 CH - [2015-05-02 18:18:28.027138] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "bhost.52391f0b30a62" Vjea5KwxQzZrjF1SwbgAAABl TLSv1 ECDHE-RSA-AES256-SHA 892 2032 22% 1192942 2592 188848 148 0 0 192.168.194.238 CH - [2015-05-02 18:18:29.365307] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "bhost.52391f0b30a62" Vjea5awxQzZrjF1SwbwAAABr TLSv1 ECDHE-RSA-AES256-SHA 587 213 -% 823013 2933 819190 200 0 0 192.168.194.238 CH - [2015-05-02 18:18:29.359541] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "bhost.52391f0b30a62" Vjea5awxQzZrjF1RAbEAAAA8 TLSv1 ECDHE-RSA-AES256-SHA 683 213 -% 829707 2996 825851 146 0 0 192.168.194.238 CH - [2015-05-02 18:18:29.429188] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "bhost.52391f0b30a62" Vjea5awxQzZrjF1Swb0AAABy TLSv1 ECDHE-RSA-AES256-SHA 699 213 -% 1034720 2938 31026 155 0 0 192.168.194.238 CH - [2015-05-02 18:18:30.717524] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - X "bhost.52391f0b30a62" Vjea5qwxQzZrjF1Swb4AAAB9 TLSv1 ECDHE-RSA-AES256-SHA 603 0 -% 930006 3122 925917 268 0 0 192.168.194.238 CH - [2015-05-02 18:18:37.708281] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "bhost.52391f0b30a62" Vjea7awxQzZrjF1Swb8AAAB6 TLSv1 ECDHE-RSA-AES256-SHA 1148 598 -% 1083361 5752 76795 180 0 0 192.168.194.238 CH - [2015-05-02 18:18:38.798197] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7543 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "bhost.52391f0b30a62" Vjea7qwxQzZrjF1SwcEAAAB7 TLSv1 ECDHE-RSA-AES256-SHA 843 7978 -% 720201 4049 699209 16304 0 0 192.168.111.138 CH - [2015-05-02 18:26:18.748222] "GET /EMail/registerRecipient.aspx?emailAddress=john.smith@example.com HTTP/1.1" 200 7926 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "14400de4.5239213408d3e" VjecuqwxQzZrjF1SwgwAAABO TLSv1.2 ECDHE-RSA-AES256-SHA384 769 12683 -% 711139 1331 706902 2325 0 0 192.168.111.138 CH - [2015-05-02 18:26:19.708352] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "14400de4.5239213408d3e" Vjecu6wxQzZrjF1Swg4AAABS TLSv1.2 ECDHE-RSA-AES256-SHA384 1200 4816 56% 738562 2029 735514 243 0 0 192.168.111.138 CH - [2015-05-02 18:26:19.596311] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "14400de4.5239213408d3e" Vjecu6wxQzZrjF1Swg0AAABN TLSv1.2 ECDHE-RSA-AES256-SHA384 502 2575 14% 857404 3080 851993 225 0 0 192.168.111.138 CH - [2015-05-02 18:26:19.740424] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "14400de4.5239213408d3e" Vjecu6wxQzZrjF1Swg8AAABH TLSv1.2 ECDHE-RSA-AES256-SHA384 1232 12669 22% 875104 2874 867565 216 0 0 192.168.111.138 CH - [2015-05-02 18:26:19.740488] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/registerRecipient.aspx?emailAddress=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "14400de4.5239213408d3e" Vjecu6wxQzZrjF1SwhAAAABW TLSv1.2 ECDHE-RSA-AES256-SHA384 1248 5867 -% 1173617 2724 170108 183 0 0 192.168.111.138 CH - [2015-05-02 18:26:22.002408] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a673b36a.52392137234e8" VjecvqwxQzZrjF1SwhEAAABR TLSv1.2 ECDHE-RSA-AES256-SHA384 673 5899 -% 961021 1087 958940 225 0 0 192.168.111.138 CH - [2015-05-02 18:30:56.261376] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3929_91&folderId=3514_48&showPics=false" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "14400de4.5239213408d3e" Vjed0KwxQzZrjF1Swj8AAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 8614 4550 -% 2223034 449995 0 216 73 0 192.168.111.138 CH - [2015-05-02 18:30:58.629021] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4043 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3929_91&folderId=3514_48&showPics=false" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "14400de4.5239213408d3e" Vjed0qwxQzZrjF1SwkAAAABK TLSv1.2 ECDHE-RSA-AES256-SHA384 662 4554 -% 865523 5886 845375 13585 0 0 192.168.111.138 CH - [2015-05-02 18:31:05.188854] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "14400de4.5239213408d3e" Vjed2awxQzZrjF1RAdQAAAAh TLSv1.2 ECDHE-RSA-AES256-SHA384 881 4534 -% 1003888 3615 0 288 0 0 192.168.111.138 CH - [2015-05-02 18:31:06.433860] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "14400de4.5239213408d3e" Vjed2qwxQzZrjF1RAdUAAAAg TLSv1.2 ECDHE-RSA-AES256-SHA384 486 815 75% 846940 3119 842434 555 0 0 192.168.111.138 CH - [2015-05-02 18:31:07.549309] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "14400de4.5239213408d3e" Vjed26wxQzZrjF1RAdYAAAAk TLSv1.2 ECDHE-RSA-AES256-SHA384 454 373 -% 957233 3574 952715 227 0 0 192.168.111.138 CH - [2015-05-02 18:31:08.645173] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "14400de4.5239213408d3e" Vjed3KwxQzZrjF1RAdcAAAAi TLSv1.2 ECDHE-RSA-AES256-SHA384 438 7866 -% 841205 4180 832315 3673 0 0 192.168.111.138 CH - [2015-05-02 18:31:09.563850] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "14400de4.5239213408d3e" Vjed3awxQzZrjF1RAdgAAAAn TLSv1.2 ECDHE-RSA-AES256-SHA384 566 2575 14% 782720 3112 777836 265 0 0 192.168.75.156 CH - [2015-05-02 18:45:30.431255] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "Microsoft-CryptoAPI/10.0" www.example.com 192.168.34.16 443 proxy-server - + "9cfd387d.5239257e5d717" VjehOqwxQzZrjF1SwtAAAABa TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 550 8554 -% 842832 1964 839615 247 0 0 192.168.151.78 CH - [2015-05-02 19:13:12.281721] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjenuKwxQzZrjF1Sw9EAAABo TLSv1.2 ECDHE-RSA-AES256-SHA384 1053 5896 22% 934164 7393 924002 207 3 0 192.168.151.78 CH - [2015-05-02 19:13:14.982029] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "e6854fa5.5238fdaaf049f" VjenuqwxQzZrjF1Sw9MAAABd TLSv1.2 ECDHE-RSA-AES256-SHA384 797 5635 -% 840546 3133 836583 176 0 0 192.168.229.15 CH - [2015-05-02 21:25:30.710521] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7356 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "b16b3632.52394941e79f9" VjfGuqwxQzZrjF1SyNsAAABP TLSv1.2 ECDHE-RSA-AES256-SHA384 915 11923 -% 1405099 4046 397312 2276 3 0 192.168.229.15 CH - [2015-05-02 21:25:32.314528] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "b16b3632.52394941e79f9" VjfGvKwxQzZrjF1SyN0AAABa TLSv1.2 ECDHE-RSA-AES256-SHA384 646 2777 14% 1049122 4779 40989 185 3 0 192.168.229.15 CH - [2015-05-02 21:25:32.548226] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "b16b3632.52394941e79f9" VjfGvKwxQzZrjF1SyN8AAABA TLSv1.2 ECDHE-RSA-AES256-SHA384 964 2208 22% 835395 4750 828456 121 3 0 192.168.229.15 CH - [2015-05-02 21:25:32.604190] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "b16b3632.52394941e79f9" VjfGvKwxQzZrjF1SyOAAAABm TLSv1.2 ECDHE-RSA-AES256-SHA384 948 8053 22% 884861 3147 876502 164 3 0 192.168.229.15 CH - [2015-05-02 21:25:32.620292] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "b16b3632.52394941e79f9" VjfGvKwxQzZrjF1SyOIAAABo TLSv1.2 ECDHE-RSA-AES256-SHA384 948 1979 -% 1059397 4785 52304 165 3 0 192.168.229.15 CH - [2015-05-02 21:25:32.530335] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "b16b3632.52394941e79f9" VjfGvKwxQzZrjF1SyN4AAABe TLSv1.2 ECDHE-RSA-AES256-SHA384 964 4485 23% 1189072 5014 180936 175 3 0 192.168.229.15 CH - [2015-05-02 21:25:32.612302] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "b16b3632.52394941e79f9" VjfGvKwxQzZrjF1SyOEAAABI TLSv1.2 ECDHE-RSA-AES256-SHA384 964 928 56% 1240421 4736 233591 397 3 0 192.168.229.15 CH - [2015-05-02 21:25:34.152461] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "b16b3632.52394941e79f9" VjfGvqwxQzZrjF1SyOMAAABU TLSv1.2 ECDHE-RSA-AES256-SHA384 630 1898 -% 906305 5058 899317 176 3 0 192.168.229.15 CH - [2015-05-02 21:33:03.911443] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "b16b3632.52394941e79f9" VjfIf6wxQzZrjF1SySgAAABj TLSv1.2 ECDHE-RSA-AES256-SHA384 1336 4382 -% 998899 5267 987904 259 3 0 192.168.229.15 CH - [2015-05-02 21:33:05.143248] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7529 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "b16b3632.52394941e79f9" VjfIgawxQzZrjF1SySkAAABb TLSv1.2 ECDHE-RSA-AES256-SHA384 742 8042 -% 940568 3648 912832 21578 3 0 192.168.229.15 CH - [2015-05-02 21:33:21.095187] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "b16b3632.52394941e79f9" VjfIkawxQzZrjF1SyS0AAABz TLSv1.2 ECDHE-RSA-AES256-SHA384 1261 662 -% 1154966 6920 137333 153 3 0 192.168.229.15 CH - [2015-05-02 21:33:22.431423] "GET /EMail/main.aspx HTTP/1.1" 200 3388 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "b16b3632.52394941e79f9" VjfIkqwxQzZrjF1SyS4AAABv TLSv1.2 ECDHE-RSA-AES256-SHA384 710 3898 -% 895470 5092 887893 1114 3 0 192.168.229.15 CH - [2015-05-02 21:33:23.585664] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "b16b3632.52394941e79f9" VjfIk6wxQzZrjF1SyS8AAABp TLSv1.2 ECDHE-RSA-AES256-SHA384 662 4218 -% 964159 5112 945246 12131 3 0 192.168.229.15 CH - [2015-05-02 21:33:23.759132] "GET /EMail/overview.aspx HTTP/1.1" 200 5291 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "b16b3632.52394941e79f9" VjfIk6wxQzZrjF1SyTEAAABD TLSv1.2 ECDHE-RSA-AES256-SHA384 980 5995 -% 952943 2806 947283 1649 3 0 192.168.229.15 CH - [2015-05-02 21:33:24.889268] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "b16b3632.52394941e79f9" VjfIlKwxQzZrjF1SyTIAAABu TLSv1.2 ECDHE-RSA-AES256-SHA384 614 1354 -% 919737 3241 914583 179 3 0 192.168.229.15 CH - [2015-05-02 21:33:23.742391] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "b16b3632.52394941e79f9" VjfIk6wxQzZrjF1SyTAAAABV TLSv1.2 ECDHE-RSA-AES256-SHA384 996 9843 -% 2138199 3637 125168 4419 3 0 192.168.229.15 CH - [2015-05-02 21:33:26.289506] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "b16b3632.52394941e79f9" VjfIlqwxQzZrjF1SyTMAAAB0 TLSv1.2 ECDHE-RSA-AES256-SHA384 662 1370 -% 810267 5040 803181 177 3 0 192.168.229.15 CH - [2015-05-02 21:33:30.863385] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "b16b3632.52394941e79f9" VjfImqwxQzZrjF1SyTYAAAB9 TLSv1.2 ECDHE-RSA-AES256-SHA384 1000 646 -% 1004271 5591 0 194 3 0 192.168.229.15 CH - [2015-05-02 21:33:32.185498] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "b16b3632.52394941e79f9" VjfInKwxQzZrjF1SyTcAAAB4 TLSv1.2 ECDHE-RSA-AES256-SHA384 662 815 75% 888858 5056 881353 289 3 0 192.168.229.15 CH - [2015-05-02 21:33:33.344343] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "https://www.example.com/EMail/index.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "b16b3632.52394941e79f9" VjfInawxQzZrjF1SyTgAAAB6 TLSv1.2 ECDHE-RSA-AES256-SHA384 678 373 -% 967952 5821 960498 189 3 0 192.168.229.15 CH - [2015-05-02 21:33:34.483445] "GET /EMail/login.aspx HTTP/1.1" 200 7336 "https://www.example.com/EMail/index.html" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4" www.example.com 192.168.34.16 443 proxy-server - + "b16b3632.52394941e79f9" VjfInqwxQzZrjF1SyTkAAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 662 7850 -% 865303 5175 854484 3584 3 0 192.168.15.149 CH - [2015-05-03 03:42:03.732937] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "Wget/1.16.1 (openbsd5.7)" www.example.com 192.168.34.16 443 proxy-server - + "7cda7620.52399d6c4a3c9" Vjge@6wxQzZrjHMHcQoAAAA0 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 690 8554 -% 931661 1480 929196 155 0 0 192.168.32.7 CH - [2015-05-03 07:13:42.538708] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7377 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "dfd36f68.5239ccbad09d4" VjhQlqwxQzZrjHMJSY0AAABF TLSv1.2 ECDHE-RSA-AES128-SHA256 691 11907 -% 989930 2070 983335 3553 0 0 192.168.32.7 CH - [2015-05-03 07:13:43.637822] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "dfd36f68.5239ccbad09d4" VjhQl6wxQzZrjHMJSY4AAABG TLSv1.2 ECDHE-RSA-AES128-SHA256 486 2713 14% 893193 3611 888070 178 0 0 192.168.32.7 CH - [2015-05-03 07:13:43.841855] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "dfd36f68.5239ccbad09d4" VjhQl6wxQzZrjHMJSZIAAABL TLSv1.2 ECDHE-RSA-AES128-SHA256 792 7973 22% 723029 3311 715477 495 0 0 192.168.32.7 CH - [2015-05-03 07:13:43.681176] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "dfd36f68.5239ccbad09d4" VjhQl6wxQzZrjHMJSY8AAABI TLSv1.2 ECDHE-RSA-AES128-SHA256 776 864 56% 1065197 2254 61966 198 0 0 192.168.32.7 CH - [2015-05-03 07:13:43.682096] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "dfd36f68.5239ccbad09d4" VjhQl6wxQzZrjHMJSZAAAABH TLSv1.2 ECDHE-RSA-AES128-SHA256 776 2144 22% 1068331 2376 64574 210 0 0 192.168.32.7 CH - [2015-05-03 07:13:43.682212] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "dfd36f68.5239ccbad09d4" VjhQl6wxQzZrjHMHc90AAAAh TLSv1.2 ECDHE-RSA-AES128-SHA256 808 1931 -% 1119947 2819 116045 221 0 0 192.168.32.7 CH - [2015-05-03 07:13:43.685125] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "dfd36f68.5239ccbad09d4" VjhQl6wxQzZrjHMJSZEAAABJ TLSv1.2 ECDHE-RSA-AES128-SHA256 808 4660 23% 1274146 2023 270330 169 0 0 192.168.32.7 CH - [2015-05-03 07:13:45.036893] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "dfd36f68.5239ccbad09d4" VjhQmawxQzZrjHMJSZMAAABK TLSv1.2 ECDHE-RSA-AES128-SHA256 534 1866 -% 913536 2640 910188 179 0 0 192.168.32.7 CH - [2015-05-03 07:13:51.899978] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "dfd36f68.5239ccbad09d4" VjhQn6wxQzZrjHMJSZUAAABN TLSv1.2 ECDHE-RSA-AES128-SHA256 808 2331 -% 874137 3130 870116 147 0 0 192.168.32.7 CH - [2015-05-03 07:13:52.268810] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "dfd36f68.5239ccbad09d4" VjhQoKwxQzZrjHMJSZYAAABO TLSv1.2 ECDHE-RSA-AES128-SHA256 968 630 -% 1113847 4017 109097 162 0 0 192.168.32.7 CH - [2015-05-03 07:13:53.395050] "GET /EMail/main.aspx HTTP/1.1" 200 3409 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "dfd36f68.5239ccbad09d4" VjhQoawxQzZrjHMJSZcAAABQ TLSv1.2 ECDHE-RSA-AES128-SHA256 534 3898 -% 866802 3047 861286 1676 0 0 192.168.32.7 CH - [2015-05-03 07:13:54.346122] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "dfd36f68.5239ccbad09d4" VjhQoqwxQzZrjHMJSZgAAABR TLSv1.2 ECDHE-RSA-AES128-SHA256 470 4202 -% 571667 2004 559120 9969 0 0 192.168.32.7 CH - [2015-05-03 07:13:54.371636] "GET /EMail/overview.aspx HTTP/1.1" 200 5304 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "dfd36f68.5239ccbad09d4" VjhQoqwxQzZrjHMJSZkAAABU TLSv1.2 ECDHE-RSA-AES128-SHA256 760 5963 -% 1170992 3392 164267 2509 0 0 192.168.32.7 CH - [2015-05-03 07:13:54.372414] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "dfd36f68.5239ccbad09d4" VjhQoqwxQzZrjHMJSZoAAABS TLSv1.2 ECDHE-RSA-AES128-SHA256 792 9683 -% 1582060 3050 571137 4056 0 0 192.168.32.7 CH - [2015-05-03 07:13:55.584877] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "dfd36f68.5239ccbad09d4" VjhQo6wxQzZrjHMJSZsAAABT TLSv1.2 ECDHE-RSA-AES128-SHA256 502 1322 -% 920447 3045 916634 133 0 0 192.168.32.7 CH - [2015-05-03 07:13:56.007999] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "dfd36f68.5239ccbad09d4" VjhQpKwxQzZrjHMJSZwAAABV TLSv1.2 ECDHE-RSA-AES128-SHA256 534 1338 -% 943714 3026 939717 199 0 0 192.168.32.7 CH - [2015-05-03 07:13:58.111949] "GET /EMail/inbox.aspx HTTP/1.1" 200 10133 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "dfd36f68.5239ccbad09d4" VjhQpqwxQzZrjHMJSZ4AAABX TLSv1.2 ECDHE-RSA-AES128-SHA256 470 10687 -% 1207454 3271 199800 3277 0 0 192.168.32.7 CH - [2015-05-03 07:13:59.382941] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "dfd36f68.5239ccbad09d4" VjhQp6wxQzZrjHMJSaEAAABb TLSv1.2 ECDHE-RSA-AES128-SHA256 486 602 -% 811025 2997 807042 212 0 0 192.168.32.7 CH - [2015-05-03 07:13:59.382540] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "dfd36f68.5239ccbad09d4" VjhQp6wxQzZrjHMJSaAAAABZ TLSv1.2 ECDHE-RSA-AES128-SHA256 486 602 -% 928196 3356 923976 144 0 0 192.168.32.7 CH - [2015-05-03 07:13:59.409048] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "dfd36f68.5239ccbad09d4" VjhQp6wxQzZrjHMJSaMAAABa TLSv1.2 ECDHE-RSA-AES128-SHA256 776 2123 -% 1083406 3104 79267 253 0 0 192.168.32.7 CH - [2015-05-03 07:13:59.384405] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "dfd36f68.5239ccbad09d4" VjhQp6wxQzZrjHMJSaIAAABc TLSv1.2 ECDHE-RSA-AES128-SHA256 486 1882 -% 1117159 2751 113537 97 0 0 192.168.32.7 CH - [2015-05-03 07:14:01.729475] "GET /EMail/message.aspx?&mailId=3929_82&folderId=3232_82&mailPos=0 HTTP/1.1" 200 11369 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "dfd36f68.5239ccbad09d4" VjhQqawxQzZrjHMJSaQAAABe TLSv1.2 ECDHE-RSA-AES128-SHA256 518 11988 -% 1370474 4778 331307 33159 0 0 192.168.32.7 CH - [2015-05-03 07:14:05.659763] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3929_82&folderId=3232_82&attachmentId=2&token=-53956078183265495E18 HTTP/1.1" 200 48133 "https://www.example.com/EMail/message.aspx?&mailId=3929_82&folderId=3232_82&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "dfd36f68.5239ccbad09d4" VjhQrawxQzZrjHMJSaUAAABd TLSv1.2 ECDHE-RSA-AES128-SHA256 614 50677 -% 1040133 7351 20532 204 0 0 192.168.109.18 CH - [2015-05-03 07:14:29.023161] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1chost.5239ccd1c8a8e" VjhQxawxQzZrjHMJSaoAAABj TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1068 556 -% 1028774 7502 20228 157 0 0 192.168.109.18 CH - [2015-05-03 07:14:30.081356] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7540 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1chost.5239ccd1c8a8e" VjhQxqwxQzZrjHMJSasAAABl TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 499 7962 -% 918760 4035 894601 19431 0 0 192.168.109.18 CH - [2015-05-03 07:14:38.175377] "GET /EMail/overview.aspx HTTP/1.1" 200 5300 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1chost.5239ccd1c8a8e" VjhQzqwxQzZrjHMJSa4AAABo TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 985 9743 -% 1226810 3102 221303 1751 0 0 192.168.109.18 CH - [2015-05-03 07:14:38.145942] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1chost.5239ccd1c8a8e" VjhQzqwxQzZrjHMJSa0AAABn TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1011 13213 -% 1823253 3426 812184 3742 0 0 192.168.32.7 CH - [2015-05-03 07:14:39.736180] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/message.aspx?&mailId=3929_82&folderId=3232_82&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "dfd36f68.5239ccbad09d4" VjhQz6wxQzZrjHMJSbAAAABp TLSv1.2 ECDHE-RSA-AES128-SHA256 824 2331 -% 948327 2038 945610 292 0 0 192.168.32.7 CH - [2015-05-03 07:14:40.532679] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3929_82&folderId=3232_82&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "dfd36f68.5239ccbad09d4" VjhQ0KwxQzZrjHMJSbEAAABr TLSv1.2 ECDHE-RSA-AES128-SHA256 1000 566 -% 1182543 7827 173728 208 0 0 192.168.109.18 CH - [2015-05-03 07:14:41.904618] "GET /EMail/inbox.aspx HTTP/1.1" 200 15246 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1chost.5239ccd1c8a8e" VjhQ0awxQzZrjHMJSbMAAABv TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 449 15727 -% 909490 2051 897176 9209 0 0 192.168.32.7 CH - [2015-05-03 07:14:41.726002] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8708 "https://www.example.com/EMail/message.aspx?&mailId=3929_82&folderId=3232_82&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "dfd36f68.5239ccbad09d4" VjhQ0awxQzZrjHMJSbIAAABs TLSv1.2 ECDHE-RSA-AES128-SHA256 566 9263 -% 1101523 3961 92504 4194 0 0 192.168.109.18 CH - [2015-05-03 07:14:45.604400] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1cc11a89.5239ccd1c8a8e" VjhQ1awxQzZrjHMJSbQAAABt TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 467 409 -% 905670 2739 902240 185 0 0 192.168.109.18 CH - [2015-05-03 07:14:46.640882] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1chost.5239ccd1c8a8e" VjhQ1qwxQzZrjHMJSbUAAABw TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 414 318 -% 915416 2577 912060 210 0 0 192.168.32.7 CH - [2015-05-03 07:14:47.175513] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "dfd36f68.5239ccbad09d4" VjhQ16wxQzZrjHMJSbcAAABu TLSv1.2 ECDHE-RSA-AES128-SHA256 774 389 -% 1099834 10027 88929 192 0 0 192.168.109.18 CH - [2015-05-03 07:14:47.585737] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1chost.5239ccd1c8a8e" VjhQ16wxQzZrjHMJSbgAAABy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 396 7771 -% 927780 2416 920634 4068 0 0 192.168.32.7 CH - [2015-05-03 07:14:48.287547] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7292 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "dfd36f68.5239ccbad09d4" VjhQ2KwxQzZrjHMJSbkAAABz TLSv1.2 ECDHE-RSA-AES128-SHA256 534 7770 -% 875967 5645 865000 4495 0 0 192.168.109.18 CH - [2015-05-03 07:14:48.653331] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1chost.5239ccd1c8a8e" VjhQ2KwxQzZrjHMJSbsAAAB1 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 970 700 56% 863967 2887 860127 134 0 0 192.168.109.18 CH - [2015-05-03 07:14:48.558064] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1chost.5239ccd1c8a8e" VjhQ2KwxQzZrjHMJSboAAAB0 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 512 2427 14% 959280 3099 954423 213 0 0 192.168.109.18 CH - [2015-05-03 07:14:48.682616] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1chost.5239ccd1c8a8e" VjhQ2KwxQzZrjHMJSbwAAAB2 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 1016 312 -% 1103167 4068 98047 171 0 0 192.168.32.7 CH - [2015-05-03 07:14:50.995592] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "dfd36f68.5239ccbad09d4" VjhQ2qwxQzZrjHMJSb0AAAB3 TLSv1.2 ECDHE-RSA-AES128-SHA256 486 437 -% 957005 4197 951399 298 0 0 192.168.32.7 CH - [2015-05-03 07:14:51.965006] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "dfd36f68.5239ccbad09d4" VjhQ26wxQzZrjHMJSb4AAAB4 TLSv1.2 ECDHE-RSA-AES128-SHA256 470 767 75% 860757 1953 857965 247 0 0 192.168.32.7 CH - [2015-05-03 07:14:52.893764] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "dfd36f68.5239ccbad09d4" VjhQ3KwxQzZrjHMJSb8AAAB5 TLSv1.2 ECDHE-RSA-AES128-SHA256 438 357 -% 842553 2821 838963 196 0 0 192.168.32.7 CH - [2015-05-03 07:14:53.746803] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "dfd36f68.5239ccbad09d4" VjhQ3awxQzZrjHMJScAAAAB6 TLSv1.2 ECDHE-RSA-AES128-SHA256 422 7834 -% 947902 2686 942458 2161 0 0 192.168.32.7 CH - [2015-05-03 07:14:54.738218] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "dfd36f68.5239ccbad09d4" VjhQ3qwxQzZrjHMJScEAAAB7 TLSv1.2 ECDHE-RSA-AES128-SHA256 550 2527 14% 770082 2765 765627 269 0 0 192.168.32.7 CH - [2015-05-03 07:14:54.769367] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "dfd36f68.5239ccbad09d4" VjhQ3qwxQzZrjHMHc@IAAAAm TLSv1.2 ECDHE-RSA-AES128-SHA256 856 7973 22% 829104 2055 823011 281 0 0 192.168.32.7 CH - [2015-05-03 07:14:54.771898] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "dfd36f68.5239ccbad09d4" VjhQ3qwxQzZrjHMJScMAAAB8 TLSv1.2 ECDHE-RSA-AES128-SHA256 824 864 56% 979525 1715 976956 251 0 0 192.168.32.7 CH - [2015-05-03 07:14:54.774168] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "dfd36f68.5239ccbad09d4" VjhQ3qwxQzZrjHMHc@MAAAAn TLSv1.2 ECDHE-RSA-AES128-SHA256 872 422 -% 997971 1951 995021 163 0 0 192.168.32.7 CH - [2015-05-03 07:14:54.775554] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "dfd36f68.5239ccbad09d4" VjhQ3qwxQzZrjHMJScQAAAB@ TLSv1.2 ECDHE-RSA-AES128-SHA256 856 4405 23% 999583 1915 996349 111 0 0 192.168.32.7 CH - [2015-05-03 07:14:54.770380] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "dfd36f68.5239ccbad09d4" VjhQ3qwxQzZrjHMJScIAAAB9 TLSv1.2 ECDHE-RSA-AES128-SHA256 824 2144 22% 1014478 1991 11747 93 0 0 192.168.32.7 CH - [2015-05-03 07:14:55.890299] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "dfd36f68.5239ccbad09d4" VjhQ36wxQzZrjHMJScUAAAB- TLSv1.2 ECDHE-RSA-AES128-SHA256 582 245 -% 668230 3112 664172 203 0 0 192.168.186.76 CH - [2015-05-03 07:20:33.235168] "GET /EMail/main.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" VjhSMawxQzZrjHMHc-gAAAA@ TLSv1.2 ECDHE-RSA-AES256-SHA384 919 12118 -% 862677 2794 855913 2601 3 0 192.168.81.38 CH - [2015-05-03 07:32:33.593186] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a96e01a8.5239d0f05fe89" VjhVAawxQzZrjHMJSmwAAABv TLSv1 ECDHE-RSA-AES256-SHA 863 5721 -% 683032 1886 680434 194 0 0 192.168.81.38 CH - [2015-05-03 07:32:33.590362] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a96e01a8.5239d0f05fe89" VjhVAawxQzZrjHMJSmsAAABr TLSv1 ECDHE-RSA-AES256-SHA 847 11699 22% 852711 2113 847974 157 0 0 192.168.81.38 CH - [2015-05-03 07:32:33.593574] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a96e01a8.5239d0f05fe89" VjhVAawxQzZrjHMHdBoAAAAk TLSv1 ECDHE-RSA-AES256-SHA 815 5918 22% 1184177 2099 180752 389 0 0 192.168.81.38 CH - [2015-05-03 07:32:42.734402] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a96e01a8.5239d0f05fe89" VjhVCqwxQzZrjHMJSm4AAABt TLSv1 ECDHE-RSA-AES256-SHA 831 13265 -% 1843293 2546 834103 2948 0 0 192.168.81.38 CH - [2015-05-03 07:32:44.659252] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a96e01a8.5239d0f05fe89" VjhVDKwxQzZrjHMJSnAAAABw TLSv1 ECDHE-RSA-AES256-SHA 518 1274 -% 846878 2365 843494 273 0 0 192.168.81.38 CH - [2015-05-03 07:32:50.829239] "GET /EMail/inbox.aspx HTTP/1.1" 200 12483 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a96e01a8.5239d0f05fe89" VjhVEqwxQzZrjHMJSnIAAABy TLSv1 ECDHE-RSA-AES256-SHA 815 17027 -% 1236078 3121 226846 5057 0 0 192.168.81.38 CH - [2015-05-03 07:32:52.315584] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a96e01a8.5239d0f05fe89" VjhVFKwxQzZrjHMJSnMAAABz TLSv1 ECDHE-RSA-AES256-SHA 470 554 -% 976732 2200 973659 169 0 0 192.168.81.38 CH - [2015-05-03 07:32:52.366954] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a96e01a8.5239d0f05fe89" VjhVFKwxQzZrjHMJSnQAAAB1 TLSv1 ECDHE-RSA-AES256-SHA 831 5849 -% 971589 2184 968636 148 0 0 192.168.81.38 CH - [2015-05-03 07:34:12.049205] "GET /EMail/message.aspx?&mailId=3930_51&folderId=587_1&mailPos=0 HTTP/1.1" 200 11349 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a96e01a8.5239d0f05fe89" VjhVZKwxQzZrjHMJSoQAAABD TLSv1 ECDHE-RSA-AES256-SHA 879 15891 -% 1711311 3510 681849 24421 0 0 192.168.81.38 CH - [2015-05-03 07:34:30.323831] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3930_51&folderId=587_1&attachmentId=2&token=-102423629698613901E18 HTTP/1.1" 200 54967 "https://www.example.com/EMail/message.aspx?&mailId=3930_51&folderId=587_1&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a96e01a8.5239d0f05fe89" VjhVdqwxQzZrjHMJSocAAABL TLSv1 ECDHE-RSA-AES256-SHA 959 60453 -% 3024230 4501 113584 175 0 0 192.168.81.38 CH - [2015-05-03 07:34:43.419758] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3930_51&folderId=587_1&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a96e01a8.5239d0f05fe89" VjhVg6wxQzZrjHMJSooAAABJ TLSv1 ECDHE-RSA-AES256-SHA 1055 4388 -% 1129504 5523 123111 220 0 0 192.168.81.38 CH - [2015-05-03 07:34:44.656563] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 9887 "https://www.example.com/EMail/message.aspx?&mailId=3930_51&folderId=587_1&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a96e01a8.5239d0f05fe89" VjhVhKwxQzZrjHMJSowAAABM TLSv1 ECDHE-RSA-AES256-SHA 534 10367 -% 1127318 2553 119418 4615 0 0 192.168.81.38 CH - [2015-05-03 07:36:21.088678] "GET /EMail/message.aspx?&mailId=3930_33&folderId=587_1&mailPos=0 HTTP/1.1" 200 11197 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a96e01a8.5239d0f05fe89" VjhV5awxQzZrjHMJSp4AAABh TLSv1 ECDHE-RSA-AES256-SHA 879 15731 -% 1263827 4799 232500 25466 0 0 192.168.81.38 CH - [2015-05-03 07:36:25.279449] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3930_33&folderId=587_1&attachmentId=2&token=-23161137794866212E18 HTTP/1.1" 200 54673 "https://www.example.com/EMail/message.aspx?&mailId=3930_33&folderId=587_1&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "a96e01a8.5239d0f05fe89" VjhV6awxQzZrjHMJSqAAAABf TLSv1 ECDHE-RSA-AES256-SHA 598 56324 -% 1077047 4921 51040 284 0 0 192.168.169.43 CH - [2015-05-03 07:38:22.060493] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7368 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhWXqwxQzZrjHMJSq8AAABy TLSv1.2 ECDHE-RSA-AES256-SHA384 733 11939 -% 959765 1307 955529 2343 0 0 192.168.169.43 CH - [2015-05-03 07:38:23.161232] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhWX6wxQzZrjHMJSrIAAAB4 TLSv1.2 ECDHE-RSA-AES256-SHA384 802 928 56% 911008 3001 906734 233 0 0 192.168.169.43 CH - [2015-05-03 07:38:23.109819] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhWX6wxQzZrjHMJSrEAAABu TLSv1.2 ECDHE-RSA-AES256-SHA384 845 5896 22% 995261 3178 991105 136 0 0 192.168.169.43 CH - [2015-05-03 07:38:23.103024] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhWX6wxQzZrjHMJSrAAAAB1 TLSv1.2 ECDHE-RSA-AES256-SHA384 502 2793 14% 1035734 2048 32223 146 0 0 192.168.169.43 CH - [2015-05-03 07:38:23.161232] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7160 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhWX6wxQzZrjHMJSrIAAAB3 TLSv1.2 ECDHE-RSA-AES256-SHA384 834 8579 22% 1045201 3023 39088 163 0 0 192.168.169.43 CH - [2015-05-03 07:38:23.167652] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhWX6wxQzZrjHMJSrMAAAB0 TLSv1.2 ECDHE-RSA-AES256-SHA384 850 1979 -% 1138476 2796 134900 215 0 0 192.168.169.43 CH - [2015-05-03 07:38:23.167916] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhWX6wxQzZrjHMHdCwAAAA2 TLSv1.2 ECDHE-RSA-AES256-SHA384 834 4485 23% 1176217 2942 171042 174 0 0 192.168.169.43 CH - [2015-05-03 07:38:24.501591] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhWYKwxQzZrjHMHdC4AAAA4 TLSv1.2 ECDHE-RSA-AES256-SHA384 534 1898 -% 806403 2870 802485 237 0 0 192.168.169.43 CH - [2015-05-03 07:38:33.321704] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhWaawxQzZrjHMJSrUAAAB5 TLSv1.2 ECDHE-RSA-AES256-SHA384 850 2379 -% 930366 3017 926409 293 0 0 192.168.169.43 CH - [2015-05-03 07:38:35.425192] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhWa6wxQzZrjHMJSrcAAAB8 TLSv1.2 ECDHE-RSA-AES256-SHA384 678 469 -% 968362 3439 963839 446 0 0 192.168.169.43 CH - [2015-05-03 07:38:36.434748] "GET /EMail/main.aspx HTTP/1.1" 200 3400 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhWbKwxQzZrjHMJSrgAAAB@ TLSv1.2 ECDHE-RSA-AES256-SHA384 534 3914 -% 1023494 2752 18149 1807 0 0 192.168.169.43 CH - [2015-05-03 07:38:37.619502] "GET /EMail/overview.aspx HTTP/1.1" 200 5300 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhWbawxQzZrjHMJSrwAAABB TLSv1.2 ECDHE-RSA-AES256-SHA384 802 6011 -% 817733 2818 809144 5081 0 0 192.168.169.43 CH - [2015-05-03 07:38:37.568885] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhWbawxQzZrjHMJSroAAAB- TLSv1.2 ECDHE-RSA-AES256-SHA384 486 4234 -% 1066985 2455 55539 7995 0 0 192.168.169.43 CH - [2015-05-03 07:38:38.495386] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhWbqwxQzZrjHMJSr0AAABA TLSv1.2 ECDHE-RSA-AES256-SHA384 518 1354 -% 819122 2406 815841 199 0 0 192.168.169.43 CH - [2015-05-03 07:38:37.575401] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhWbawxQzZrjHMJSrsAAAB6 TLSv1.2 ECDHE-RSA-AES256-SHA384 834 9859 -% 2117134 4859 103594 4565 0 0 192.168.169.43 CH - [2015-05-03 07:38:39.761646] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhWb6wxQzZrjHMJSr4AAABC TLSv1.2 ECDHE-RSA-AES256-SHA384 550 1370 -% 803241 3320 798843 238 0 0 192.168.169.43 CH - [2015-05-03 07:38:41.153295] "GET /EMail/inbox.aspx HTTP/1.1" 200 8595 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhWcawxQzZrjHMJSr8AAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 486 9199 -% 1084275 3413 74977 4880 0 0 192.168.169.43 CH - [2015-05-03 07:38:42.297837] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhWcqwxQzZrjHMJSsAAAABD TLSv1.2 ECDHE-RSA-AES256-SHA384 502 634 -% 990694 3551 986295 157 0 0 192.168.169.43 CH - [2015-05-03 07:38:42.304808] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhWcqwxQzZrjHMJSsEAAABG TLSv1.2 ECDHE-RSA-AES256-SHA384 502 634 -% 1102051 2420 98947 142 0 0 192.168.169.43 CH - [2015-05-03 07:38:42.304819] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhWcqwxQzZrjHMJSsIAAABF TLSv1.2 ECDHE-RSA-AES256-SHA384 502 1914 -% 1203052 2644 199409 153 0 0 192.168.169.43 CH - [2015-05-03 07:38:47.098320] "GET /EMail/message.aspx?&mailId=3930_55&folderId=75_57&mailPos=0 HTTP/1.1" 200 13014 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhWd6wxQzZrjHMJSsQAAABI TLSv1.2 ECDHE-RSA-AES256-SHA384 534 13700 -% 1465865 3523 456233 4824 0 0 192.168.169.43 CH - [2015-05-03 07:38:51.408923] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3930_55&folderId=75_57&attachmentId=2&token=-68764041075328195E18 HTTP/1.1" 200 48512 "https://www.example.com/EMail/message.aspx?&mailId=3930_55&folderId=75_57&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhWe6wxQzZrjHMJSsYAAABK TLSv1.2 ECDHE-RSA-AES256-SHA384 630 51573 -% 1062560 6273 37299 226 0 0 192.168.169.43 CH - [2015-05-03 07:44:17.747488] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 8586 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhXwawxQzZrjHMJSvYAAAB9 TLSv1.2 ECDHE-RSA-AES256-SHA384 877 13064 -% 1487649 3467 479836 3305 0 0 192.168.169.43 CH - [2015-05-03 07:44:17.753755] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhXwawxQzZrjHMHdEIAAAAL TLSv1.2 ECDHE-RSA-AES256-SHA384 893 13547 -% 1629011 3022 617970 4037 0 0 192.168.169.43 CH - [2015-05-03 07:44:19.295683] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhXw6wxQzZrjHMJSvcAAABB TLSv1.2 ECDHE-RSA-AES256-SHA384 518 1978 -% 1014587 2159 11732 166 0 0 192.168.169.43 CH - [2015-05-03 07:44:21.427490] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhXxawxQzZrjHMJSvkAAABA TLSv1.2 ECDHE-RSA-AES256-SHA384 790 405 -% 1329895 8837 320129 159 0 0 192.168.169.43 CH - [2015-05-03 07:44:22.778702] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7291 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhXxqwxQzZrjHMJSvsAAABC TLSv1.2 ECDHE-RSA-AES256-SHA384 534 7802 -% 966951 3304 959970 2865 0 0 192.168.169.43 CH - [2015-05-03 07:44:25.687632] "GET /EMail/trash.aspx?dir=desc HTTP/1.1" 200 8680 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhXyawxQzZrjHMJSvwAAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 486 9279 -% 1638371 3836 628965 4573 0 0 192.168.169.43 CH - [2015-05-03 07:44:25.741185] "GET /EMail/tree.aspx?sNode-sharedTree=treeTrash HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhXyawxQzZrjHMHdEMAAAAM TLSv1.2 ECDHE-RSA-AES256-SHA384 818 9859 -% 1710860 2975 699248 4441 0 0 192.168.169.43 CH - [2015-05-03 07:44:28.807243] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/trash.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhXzKwxQzZrjHMHdEQAAAAN TLSv1.2 ECDHE-RSA-AES256-SHA384 790 405 -% 1163467 10257 152172 163 0 0 192.168.169.43 CH - [2015-05-03 07:44:29.990852] "GET /EMail/trash.aspx?returnedFromDelete=true HTTP/1.1" 200 7279 "https://www.example.com/EMail/trash.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhXzawxQzZrjHMHdEUAAAAQ TLSv1.2 ECDHE-RSA-AES256-SHA384 534 7786 -% 959464 3786 951714 3173 0 0 192.168.169.43 CH - [2015-05-03 07:45:51.150756] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhYH6wxQzZrjHMJSwcAAABO TLSv1.2 ECDHE-RSA-AES256-SHA384 818 646 -% 946725 2594 943429 160 0 0 192.168.169.43 CH - [2015-05-03 07:45:52.117986] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhYIKwxQzZrjHMJSwkAAABU TLSv1.2 ECDHE-RSA-AES256-SHA384 486 815 75% 930062 3212 925518 413 0 0 192.168.169.43 CH - [2015-05-03 07:45:53.163438] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhYIawxQzZrjHMJSwoAAABS TLSv1.2 ECDHE-RSA-AES256-SHA384 454 373 -% 923006 3064 919160 208 0 0 192.168.169.43 CH - [2015-05-03 07:45:54.107672] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhYIqwxQzZrjHMJSwwAAABT TLSv1.2 ECDHE-RSA-AES256-SHA384 438 7866 -% 988866 2756 983254 2284 0 0 192.168.169.43 CH - [2015-05-03 07:45:55.176680] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhYI6wxQzZrjHMJSw4AAABQ TLSv1.2 ECDHE-RSA-AES256-SHA384 866 2208 22% 943523 2780 939135 203 0 0 192.168.169.43 CH - [2015-05-03 07:45:55.170143] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhYI6wxQzZrjHMJSw0AAABV TLSv1.2 ECDHE-RSA-AES256-SHA384 566 2575 14% 956221 3151 951369 193 0 0 192.168.169.43 CH - [2015-05-03 07:45:55.231244] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhYI6wxQzZrjHMJSxAAAABX TLSv1.2 ECDHE-RSA-AES256-SHA384 914 454 -% 981667 2047 978381 195 0 0 192.168.169.43 CH - [2015-05-03 07:45:55.231271] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhYI6wxQzZrjHMJSxEAAABY TLSv1.2 ECDHE-RSA-AES256-SHA384 866 928 56% 1113816 2190 110519 152 0 0 192.168.169.43 CH - [2015-05-03 07:45:55.236606] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhYI6wxQzZrjHMHdE4AAAAY TLSv1.2 ECDHE-RSA-AES256-SHA384 898 8781 22% 1113901 2033 108996 116 0 0 192.168.169.43 CH - [2015-05-03 07:45:55.231234] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhYI6wxQzZrjHMJSw8AAABb TLSv1.2 ECDHE-RSA-AES256-SHA384 898 4788 23% 1133504 2340 129308 127 0 0 192.168.169.43 CH - [2015-05-03 07:45:56.484649] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "d6eb239f.5239d23dcbfcd" VjhYJKwxQzZrjHMJSxIAAABZ TLSv1.2 ECDHE-RSA-AES256-SHA384 598 261 -% 848135 3255 843983 177 0 0 192.168.32.7 CH - [2015-05-03 07:51:07.901429] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhZW6wxQzZrjHMJS0QAAABS TLSv1.2 ECDHE-RSA-AES128-SHA256 659 11875 -% 923619 682 918453 3707 0 0 192.168.32.7 CH - [2015-05-03 07:51:08.985878] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhZXKwxQzZrjHMJS0cAAABV TLSv1.2 ECDHE-RSA-AES128-SHA256 744 2144 22% 855404 2697 850737 316 0 0 192.168.32.7 CH - [2015-05-03 07:51:08.985943] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhZXKwxQzZrjHMJS0gAAABX TLSv1.2 ECDHE-RSA-AES128-SHA256 744 864 56% 885759 2629 881724 379 0 0 192.168.32.7 CH - [2015-05-03 07:51:08.934679] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhZXKwxQzZrjHMJS0YAAABQ TLSv1.2 ECDHE-RSA-AES128-SHA256 454 2527 14% 1024241 2366 19647 250 0 0 192.168.32.7 CH - [2015-05-03 07:51:08.989343] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhZXKwxQzZrjHMJS0kAAABb TLSv1.2 ECDHE-RSA-AES128-SHA256 760 4405 23% 1088996 2533 84256 466 0 0 192.168.32.7 CH - [2015-05-03 07:51:08.990632] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhZXKwxQzZrjHMJS0oAAABY TLSv1.2 ECDHE-RSA-AES128-SHA256 760 7973 22% 1101409 2735 94799 163 0 0 192.168.32.7 CH - [2015-05-03 07:51:08.992484] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhZXKwxQzZrjHMJS0sAAABZ TLSv1.2 ECDHE-RSA-AES128-SHA256 776 1931 -% 1159699 3519 155146 212 0 0 192.168.32.7 CH - [2015-05-03 07:51:10.269621] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhZXqwxQzZrjHMJS0wAAABa TLSv1.2 ECDHE-RSA-AES128-SHA256 486 1866 -% 807045 3188 803122 164 0 0 192.168.32.7 CH - [2015-05-03 07:51:18.397513] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhZZqwxQzZrjHMJS04AAABe TLSv1.2 ECDHE-RSA-AES128-SHA256 920 630 -% 1029360 5617 22846 161 0 0 192.168.32.7 CH - [2015-05-03 07:51:19.444927] "GET /EMail/main.aspx HTTP/1.1" 200 3407 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhZZ6wxQzZrjHMJS08AAABg TLSv1.2 ECDHE-RSA-AES128-SHA256 486 3882 -% 621815 2027 618108 1155 0 0 192.168.32.7 CH - [2015-05-03 07:51:20.170218] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhZaKwxQzZrjHMJS1AAAABd TLSv1.2 ECDHE-RSA-AES128-SHA256 470 4202 -% 695198 2189 685478 6858 0 0 192.168.32.7 CH - [2015-05-03 07:51:20.212772] "GET /EMail/overview.aspx HTTP/1.1" 200 5303 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhZaKwxQzZrjHMJS1EAAABh TLSv1.2 ECDHE-RSA-AES128-SHA256 760 5963 -% 1311521 2769 305771 2297 0 0 192.168.32.7 CH - [2015-05-03 07:51:20.210992] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhZaKwxQzZrjHMHdF8AAAAq TLSv1.2 ECDHE-RSA-AES128-SHA256 792 9683 -% 1516658 2432 507426 2756 0 0 192.168.32.7 CH - [2015-05-03 07:51:21.578984] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhZaawxQzZrjHMJS1IAAABi TLSv1.2 ECDHE-RSA-AES128-SHA256 502 1322 -% 942538 3199 938343 191 0 0 192.168.32.7 CH - [2015-05-03 07:51:21.783252] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhZaawxQzZrjHMHdGAAAAAr TLSv1.2 ECDHE-RSA-AES128-SHA256 534 1338 -% 806089 2088 803343 153 0 0 192.168.32.7 CH - [2015-05-03 07:51:23.703830] "GET /EMail/inbox.aspx HTTP/1.1" 200 13797 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhZa6wxQzZrjHMHdGEAAAAt TLSv1.2 ECDHE-RSA-AES128-SHA256 470 14420 -% 1260124 3007 250541 5215 0 0 192.168.32.7 CH - [2015-05-03 07:51:25.025359] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhZbawxQzZrjHMHdGIAAAAu TLSv1.2 ECDHE-RSA-AES128-SHA256 486 602 -% 808405 3205 804415 150 0 0 192.168.32.7 CH - [2015-05-03 07:51:25.069266] "GET /EMail/images/msgOpenedReplied.png HTTP/1.1" 200 717 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhZbawxQzZrjHMHdGMAAAAs TLSv1.2 ECDHE-RSA-AES128-SHA256 792 1371 -% 913228 2426 910185 123 0 0 192.168.32.7 CH - [2015-05-03 07:51:25.024145] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhZbawxQzZrjHMJS1MAAABk TLSv1.2 ECDHE-RSA-AES128-SHA256 486 602 -% 1002329 2619 0 151 0 0 192.168.32.7 CH - [2015-05-03 07:51:25.025824] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhZbawxQzZrjHMJS1QAAABf TLSv1.2 ECDHE-RSA-AES128-SHA256 486 1882 -% 1014356 2304 11427 124 0 0 192.168.32.7 CH - [2015-05-03 07:51:27.694554] "GET /EMail/message.aspx?&mailId=3929_97&folderId=3481_21&mailPos=3 HTTP/1.1" 200 11499 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhZb6wxQzZrjHMJS1UAAABj TLSv1.2 ECDHE-RSA-AES128-SHA256 518 12116 -% 1325962 3397 296921 24537 0 0 192.168.32.7 CH - [2015-05-03 07:51:33.711589] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3929_97&folderId=3481_21&attachmentId=2&token=-47456005397865984E18 HTTP/1.1" 200 48859 "https://www.example.com/EMail/message.aspx?&mailId=3929_97&folderId=3481_21&mailPos=3" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhZdawxQzZrjHMJS1YAAABl TLSv1.2 ECDHE-RSA-AES128-SHA256 614 51413 -% 1054737 4777 31025 165 0 0 192.168.32.7 CH - [2015-05-03 07:51:58.885805] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/message.aspx?&mailId=3929_97&folderId=3481_21&mailPos=3" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhZjqwxQzZrjHMJS1wAAABv TLSv1.2 ECDHE-RSA-AES128-SHA256 824 2331 -% 938915 3225 934626 195 0 0 192.168.32.7 CH - [2015-05-03 07:51:59.632103] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3929_97&folderId=3481_21&mailPos=3" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhZj6wxQzZrjHMHdGcAAAAy TLSv1.2 ECDHE-RSA-AES128-SHA256 1000 566 -% 1128077 4582 122742 164 0 0 192.168.32.7 CH - [2015-05-03 07:52:00.774661] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 12495 "https://www.example.com/EMail/message.aspx?&mailId=3929_97&folderId=3481_21&mailPos=3" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhZkKwxQzZrjHMHdGgAAAAz TLSv1.2 ECDHE-RSA-AES128-SHA256 566 13039 -% 1217527 2577 206194 7119 0 0 192.168.32.7 CH - [2015-05-03 07:52:03.482596] "GET /EMail/message.aspx?&mailId=3930_57&folderId=3481_21&mailPos=2 HTTP/1.1" 200 11504 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhZk6wxQzZrjHMHdGkAAAA0 TLSv1.2 ECDHE-RSA-AES128-SHA256 534 12116 -% 1228867 3115 199805 25099 0 0 192.168.32.7 CH - [2015-05-03 07:52:06.576938] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3930_57&folderId=3481_21&attachmentId=2&token=-208457317223354957E18 HTTP/1.1" 200 47893 "https://www.example.com/EMail/message.aspx?&mailId=3930_57&folderId=3481_21&mailPos=2" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhZlqwxQzZrjHMHdGsAAAA3 TLSv1.2 ECDHE-RSA-AES128-SHA256 614 50437 -% 1550346 6289 525930 218 0 0 192.168.32.7 CH - [2015-05-03 07:52:39.119545] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3930_57&folderId=3481_21&mailPos=2" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhZt6wxQzZrjHMJS2IAAABw TLSv1.2 ECDHE-RSA-AES128-SHA256 1000 566 -% 1181598 5069 175814 223 0 0 192.168.32.7 CH - [2015-05-03 07:52:40.317695] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 12492 "https://www.example.com/EMail/message.aspx?&mailId=3930_57&folderId=3481_21&mailPos=2" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhZuKwxQzZrjHMJS2QAAAB4 TLSv1.2 ECDHE-RSA-AES128-SHA256 566 13108 -% 1247407 4870 234092 7156 0 0 192.168.32.7 CH - [2015-05-03 07:52:44.541129] "GET /EMail/message.aspx?&mailId=3930_58&folderId=3481_21&mailPos=2 HTTP/1.1" 200 11504 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhZvKwxQzZrjHMJS2UAAABu TLSv1.2 ECDHE-RSA-AES128-SHA256 534 12116 -% 1453683 5420 428532 18659 0 0 192.168.32.7 CH - [2015-05-03 07:52:48.319203] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3930_58&folderId=3481_21&attachmentId=2&token=-167916003996523776E18 HTTP/1.1" 200 48327 "https://www.example.com/EMail/message.aspx?&mailId=3930_58&folderId=3481_21&mailPos=2" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhZwKwxQzZrjHMJS2YAAAB1 TLSv1.2 ECDHE-RSA-AES128-SHA256 614 50869 -% 1163209 7821 136380 210 0 0 192.168.32.7 CH - [2015-05-03 07:53:15.536662] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3930_58&folderId=3481_21&mailPos=2" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhZ26wxQzZrjHMJS2oAAAB5 TLSv1.2 ECDHE-RSA-AES128-SHA256 1000 566 -% 1265453 7133 257248 207 0 0 192.168.32.7 CH - [2015-05-03 07:53:16.819421] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 12493 "https://www.example.com/EMail/message.aspx?&mailId=3930_58&folderId=3481_21&mailPos=2" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhZ3KwxQzZrjHMJS2sAAAB7 TLSv1.2 ECDHE-RSA-AES128-SHA256 566 13108 -% 1195233 3860 185879 4023 0 0 192.168.32.7 CH - [2015-05-03 07:53:19.366447] "GET /EMail/message.aspx?&mailId=3930_60&folderId=3481_21&mailPos=2 HTTP/1.1" 200 11498 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhZ36wxQzZrjHMJS20AAAB@ TLSv1.2 ECDHE-RSA-AES128-SHA256 534 12116 -% 1491783 5142 458285 26967 0 0 192.168.32.7 CH - [2015-05-03 07:53:22.601798] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3930_60&folderId=3481_21&attachmentId=2&token=-24737019808691461E18 HTTP/1.1" 200 49126 "https://www.example.com/EMail/message.aspx?&mailId=3930_60&folderId=3481_21&mailPos=2" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhZ4qwxQzZrjHMJS24AAAB9 TLSv1.2 ECDHE-RSA-AES128-SHA256 614 51669 -% 1135201 4649 111329 161 0 0 192.168.32.7 CH - [2015-05-03 07:53:53.316594] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3930_60&folderId=3481_21&mailPos=2" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhaAawxQzZrjHMJS3IAAABA TLSv1.2 ECDHE-RSA-AES128-SHA256 1000 566 -% 1345791 4184 340797 214 0 0 192.168.32.7 CH - [2015-05-03 07:53:54.679546] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 11190 "https://www.example.com/EMail/message.aspx?&mailId=3930_60&folderId=3481_21&mailPos=2" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhaAqwxQzZrjHMJS3MAAABC TLSv1.2 ECDHE-RSA-AES128-SHA256 566 11743 -% 1087916 4047 78860 4242 0 0 192.168.32.7 CH - [2015-05-03 07:53:57.378278] "GET /EMail/message.aspx?&mailId=3931_5&folderId=3481_21&mailPos=1 HTTP/1.1" 200 11488 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhaBawxQzZrjHMJS3QAAABE TLSv1.2 ECDHE-RSA-AES128-SHA256 534 12047 -% 1487009 3457 450448 32216 0 0 192.168.32.7 CH - [2015-05-03 07:54:00.407639] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3931_5&folderId=3481_21&attachmentId=2&token=-73744470309510687E18 HTTP/1.1" 200 49013 "https://www.example.com/EMail/message.aspx?&mailId=3931_5&folderId=3481_21&mailPos=1" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhaCKwxQzZrjHMJS3YAAABG TLSv1.2 ECDHE-RSA-AES128-SHA256 614 51557 -% 1194960 6143 170433 309 0 0 192.168.32.7 CH - [2015-05-03 07:54:33.834574] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3931_5&folderId=3481_21&mailPos=1" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhaKawxQzZrjHMJS3sAAABK TLSv1.2 ECDHE-RSA-AES128-SHA256 1000 566 -% 1233064 6921 225243 187 0 0 192.168.32.7 CH - [2015-05-03 07:54:35.084337] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 9891 "https://www.example.com/EMail/message.aspx?&mailId=3931_5&folderId=3481_21&mailPos=1" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhaK6wxQzZrjHMJS3wAAABJ TLSv1.2 ECDHE-RSA-AES128-SHA256 566 10447 -% 1529878 4144 521055 3732 0 0 192.168.32.7 CH - [2015-05-03 07:54:37.993650] "GET /EMail/message.aspx?&mailId=3930_61&folderId=3481_21&mailPos=0 HTTP/1.1" 200 11366 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhaLawxQzZrjHMJS30AAABM TLSv1.2 ECDHE-RSA-AES128-SHA256 534 11988 -% 1355965 4916 330130 19646 0 0 192.168.32.7 CH - [2015-05-03 07:54:40.810293] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3930_61&folderId=3481_21&attachmentId=2&token=-62567707484623852E18 HTTP/1.1" 200 49115 "https://www.example.com/EMail/message.aspx?&mailId=3930_61&folderId=3481_21&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhaMKwxQzZrjHMJS38AAABP TLSv1.2 ECDHE-RSA-AES128-SHA256 614 51462 -% 1142199 6228 117052 215 0 0 192.168.32.7 CH - [2015-05-03 07:54:59.844586] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3930_61&folderId=3481_21&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhaQ6wxQzZrjHMJS4QAAABS TLSv1.2 ECDHE-RSA-AES128-SHA256 1000 566 -% 1246376 5752 239647 208 0 0 192.168.32.7 CH - [2015-05-03 07:55:01.107053] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8590 "https://www.example.com/EMail/message.aspx?&mailId=3930_61&folderId=3481_21&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhaRawxQzZrjHMJS4UAAABT TLSv1.2 ECDHE-RSA-AES128-SHA256 566 9135 -% 1139890 2552 133253 3302 0 0 192.168.123.36 CH - [2015-05-03 07:55:38.851986] "GET /EMail/main.aspx HTTP/1.1" 200 3393 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "152dabe1.5239d4dbaad6a" VjhaaqwxQzZrjHMJS40AAABg TLSv1 ECDHE-RSA-AES256-SHA 1076 7641 -% 821727 2066 773378 1832 0 0 192.168.123.36 CH - [2015-05-03 07:55:39.820485] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "152dabe1.5239d4dbaad6a" Vjhaa6wxQzZrjHMJS5EAAABi TLSv1 ECDHE-RSA-AES256-SHA 1015 7813 22% 977178 1857 971824 174 0 0 192.168.123.36 CH - [2015-05-03 07:55:39.767587] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "152dabe1.5239d4dbaad6a" Vjhaa6wxQzZrjHMJS44AAABh TLSv1 ECDHE-RSA-AES256-SHA 784 2431 13% 1038497 2111 29433 171 0 0 192.168.123.36 CH - [2015-05-03 07:55:39.767931] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "152dabe1.5239d4dbaad6a" Vjhaa6wxQzZrjHMJS48AAABd TLSv1 ECDHE-RSA-AES256-SHA 1044 4430 56% 1072795 2458 24561 175 0 0 192.168.123.36 CH - [2015-05-03 07:55:39.819881] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "152dabe1.5239d4dbaad6a" Vjhaa6wxQzZrjHMJS5AAAABk TLSv1 ECDHE-RSA-AES256-SHA 1031 4245 23% 1219135 1762 215555 171 0 0 192.168.123.36 CH - [2015-05-03 07:55:41.055040] "GET /EMail/overview.aspx HTTP/1.1" 200 5289 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "152dabe1.5239d4dbaad6a" VjhabawxQzZrjHMJS5QAAABl TLSv1 ECDHE-RSA-AES256-SHA 768 5722 -% 914505 1823 904915 2600 0 0 192.168.123.36 CH - [2015-05-03 07:55:41.054582] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "152dabe1.5239d4dbaad6a" VjhabawxQzZrjHMJS5MAAABj TLSv1 ECDHE-RSA-AES256-SHA 800 9218 -% 1325085 2805 310759 3065 0 0 192.168.123.36 CH - [2015-05-03 07:55:41.054079] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "152dabe1.5239d4dbaad6a" VjhabawxQzZrjHMJS5IAAABf TLSv1 ECDHE-RSA-AES256-SHA 768 4138 -% 1355966 3048 341500 6448 0 0 192.168.123.36 CH - [2015-05-03 07:55:41.998362] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "152dabe1.5239d4dbaad6a" VjhabawxQzZrjHMJS5YAAABo TLSv1 ECDHE-RSA-AES256-SHA 784 1887 22% 867316 1766 859618 170 0 0 192.168.123.36 CH - [2015-05-03 07:55:41.997653] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "152dabe1.5239d4dbaad6a" VjhabawxQzZrjHMJS5UAAABq TLSv1 ECDHE-RSA-AES256-SHA 784 2431 13% 1081991 2260 73058 231 0 0 192.168.123.36 CH - [2015-05-03 07:55:42.052269] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "152dabe1.5239d4dbaad6a" VjhabqwxQzZrjHMJS5cAAABm TLSv1 ECDHE-RSA-AES256-SHA 1015 8173 22% 1284243 1933 278788 159 0 0 192.168.123.36 CH - [2015-05-03 07:55:42.421297] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "152dabe1.5239d4dbaad6a" VjhabqwxQzZrjHMJS5gAAABn TLSv1 ECDHE-RSA-AES256-SHA 800 213 -% 963366 2532 955627 154 0 0 192.168.123.36 CH - [2015-05-03 07:55:42.440373] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "152dabe1.5239d4dbaad6a" VjhabqwxQzZrjHMJS5oAAABv TLSv1 ECDHE-RSA-AES256-SHA 848 213 -% 951103 2048 943785 116 0 0 192.168.123.36 CH - [2015-05-03 07:55:42.876692] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "152dabe1.5239d4dbaad6a" VjhabqwxQzZrjHMJS5sAAABr TLSv1 ECDHE-RSA-AES256-SHA 784 213 -% 905525 3129 897153 170 0 0 192.168.123.36 CH - [2015-05-03 07:55:43.654393] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "152dabe1.5239d4dbaad6a" Vjhab6wxQzZrjHMJS50AAABx TLSv1 ECDHE-RSA-AES256-SHA 784 213 -% 697819 2119 690479 171 0 0 192.168.123.36 CH - [2015-05-03 07:55:43.609051] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/css/NNstyle.css" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "152dabe1.5239d4dbaad6a" Vjhab6wxQzZrjHMJS5wAAABs TLSv1 ECDHE-RSA-AES256-SHA 800 2431 13% 1081426 3572 71886 161 0 0 192.168.123.36 CH - [2015-05-03 07:55:44.704513] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "152dabe1.5239d4dbaad6a" VjhacKwxQzZrjHMJS54AAABt TLSv1 ECDHE-RSA-AES256-SHA 688 1578 -% 872785 3231 864199 134 0 0 192.168.123.36 CH - [2015-05-03 07:56:22.867966] "GET /EMail/inbox.aspx HTTP/1.1" 200 9571 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "152dabe1.5239d4dbaad6a" VjhalqwxQzZrjHMJS6QAAAB1 TLSv1 ECDHE-RSA-AES256-SHA 999 10192 -% 1181387 1935 174289 4392 0 0 192.168.123.36 CH - [2015-05-03 07:56:24.109813] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "152dabe1.5239d4dbaad6a" VjhamKwxQzZrjHMJS6UAAAB3 TLSv1 ECDHE-RSA-AES256-SHA 688 1882 -% 926701 2477 919036 165 0 0 192.168.123.36 CH - [2015-05-03 07:56:27.450312] "GET /EMail/message.aspx?&mailId=3931_4&folderId=3514_62&mailPos=0 HTTP/1.1" 200 17878 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "152dabe1.5239d4dbaad6a" Vjham6wxQzZrjHMJS6YAAAB0 TLSv1 ECDHE-RSA-AES256-SHA 784 18446 -% 1534349 5914 479923 40264 0 0 192.168.186.76 CH - [2015-05-03 08:10:48.163423] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" Vjhd@KwxQzZrjHMJTCsAAABD TLSv1.2 ECDHE-RSA-AES256-SHA384 1399 4545 -% 1138992 5796 130850 161 3 0 192.168.186.76 CH - [2015-05-03 08:10:49.332866] "GET /EMail/main.aspx HTTP/1.1" 200 3391 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" Vjhd@awxQzZrjHMJTCwAAABG TLSv1.2 ECDHE-RSA-AES256-SHA384 678 3898 -% 996664 5275 987144 2369 3 0 192.168.186.76 CH - [2015-05-03 08:10:50.393952] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" Vjhd@qwxQzZrjHMJTC0AAABL TLSv1.2 ECDHE-RSA-AES256-SHA384 662 4234 -% 1002368 6913 985426 8460 3 0 192.168.186.76 CH - [2015-05-03 08:10:50.397998] "GET /EMail/overview.aspx HTTP/1.1" 200 5540 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" Vjhd@qwxQzZrjHMJTC4AAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 10134 -% 1156915 6398 145317 3296 3 0 192.168.186.76 CH - [2015-05-03 08:12:53.284545] "GET /EMail/newMessage.aspx?action=reply&mailId=3931_7&folderId=947_65&showPics=false HTTP/1.1" 200 25757 "https://www.example.com/EMail/message.aspx?&mailId=3931_7&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" VjhedawxQzZrjHMJTEMAAABc TLSv1.2 ECDHE-RSA-AES256-SHA384 1292 26820 -% 1143786 5310 66152 46630 6 3 192.168.186.76 CH - [2015-05-03 08:12:54.617298] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5872 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3931_7&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" VjhedqwxQzZrjHMJTEUAAABg TLSv1.2 ECDHE-RSA-AES256-SHA384 710 9650 -% 993468 6634 0 0 3 0 192.168.186.76 CH - [2015-05-03 08:13:11.642395] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" Vjheh6wxQzZrjHMJTEkAAABl TLSv1.2 ECDHE-RSA-AES256-SHA384 1261 13742 -% 2341176 4747 328551 3236 3 0 192.168.186.76 CH - [2015-05-03 08:13:15.276922] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" Vjhei6wxQzZrjHMJTEsAAABf TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 723548 12009 709691 158 3 0 192.168.186.76 CH - [2015-05-03 08:13:16.038630] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8483 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" VjhejKwxQzZrjHMJTEwAAABp TLSv1.2 ECDHE-RSA-AES256-SHA384 726 9087 -% 750232 7160 735075 5170 3 0 192.168.186.76 CH - [2015-05-03 08:13:34.254631] "GET /EMail/message.aspx?&mailId=3931_8&folderId=947_65&mailPos=0 HTTP/1.1" 200 17280 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" VjhenqwxQzZrjHMJTFAAAABn TLSv1.2 ECDHE-RSA-AES256-SHA384 1244 18202 -% 1382438 5958 327557 40716 3 0 192.168.186.76 CH - [2015-05-03 08:13:39.203667] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3931_8&folderId=947_65&attachmentId=3&token=-85531823094535846E17 HTTP/1.1" 200 1493658 "https://www.example.com/EMail/message.aspx?&mailId=3931_8&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" Vjheo6wxQzZrjHMJTFIAAABr TLSv1.2 ECDHE-RSA-AES256-SHA384 806 1543252 -% 3704980 9422 58897 226 3 0 192.168.186.76 CH - [2015-05-03 08:20:04.355803] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3931_8&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" VjhgJKwxQzZrjHMHdMYAAAAS TLSv1.2 ECDHE-RSA-AES256-SHA384 7650 4545 -% 1628101 316854 289726 241 81 0 192.168.186.76 CH - [2015-05-03 08:20:05.996061] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3931_8&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" VjhgJawxQzZrjHMHdMcAAAAT TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 908425 9158 889079 7988 3 0 192.168.186.76 CH - [2015-05-03 08:21:35.383961] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" Vjhgf6wxQzZrjHMJTJoAAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 1212 9827 -% 1326189 6625 310411 4209 3 0 192.168.186.76 CH - [2015-05-03 08:21:38.749121] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" VjhggqwxQzZrjHMJTJsAAABu TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1153181 13324 137960 163 3 0 192.168.186.76 CH - [2015-05-03 08:21:39.915686] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7292 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" Vjhgg6wxQzZrjHMJTJwAAAB@ TLSv1.2 ECDHE-RSA-AES256-SHA384 726 7802 -% 1121153 6456 109825 2817 3 0 192.168.144.21 CH - [2015-05-03 08:24:08.347120] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7369 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "96eb2cbd.5239dc78dc1f0" VjhhGKwxQzZrjHMJTLcAAABb TLSv1.2 ECDHE-RSA-AES256-SHA384 726 11939 -% 817211 2088 810315 3920 0 0 192.168.144.21 CH - [2015-05-03 08:24:09.633856] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "96eb2cbd.5239dc78dc1f0" VjhhGawxQzZrjHMJTLkAAABZ TLSv1.2 ECDHE-RSA-AES256-SHA384 795 2208 22% 834426 2381 830560 200 0 0 192.168.144.21 CH - [2015-05-03 08:24:09.478039] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "96eb2cbd.5239dc78dc1f0" VjhhGawxQzZrjHMJTLgAAABY TLSv1.2 ECDHE-RSA-AES256-SHA384 486 2575 14% 1001166 3176 0 122 0 0 192.168.144.21 CH - [2015-05-03 08:24:09.554332] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "96eb2cbd.5239dc78dc1f0" VjhhGawxQzZrjHMHdNIAAAAe TLSv1.2 ECDHE-RSA-AES256-SHA384 795 928 56% 1047106 2995 43153 151 0 0 192.168.144.21 CH - [2015-05-03 08:24:09.642739] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "96eb2cbd.5239dc78dc1f0" VjhhGawxQzZrjHMHdNQAAAAg TLSv1.2 ECDHE-RSA-AES256-SHA384 827 8053 22% 961185 2234 955565 154 0 0 192.168.144.21 CH - [2015-05-03 08:24:09.640168] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "96eb2cbd.5239dc78dc1f0" VjhhGawxQzZrjHMHdNMAAAAf TLSv1.2 ECDHE-RSA-AES256-SHA384 827 1979 -% 1006297 1717 3968 131 0 0 192.168.144.21 CH - [2015-05-03 08:24:09.673726] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "96eb2cbd.5239dc78dc1f0" VjhhGawxQzZrjHMJTLoAAABa TLSv1.2 ECDHE-RSA-AES256-SHA384 827 4788 23% 1205093 1870 201250 192 0 0 192.168.144.21 CH - [2015-05-03 08:24:11.241703] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "96eb2cbd.5239dc78dc1f0" VjhhG6wxQzZrjHMJTLsAAABe TLSv1.2 ECDHE-RSA-AES256-SHA384 534 1898 -% 885841 4473 880124 373 0 0 192.168.144.21 CH - [2015-05-03 08:24:12.005018] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "96eb2cbd.5239dc78dc1f0" VjhhHKwxQzZrjHMHdNUAAAAh TLSv1.2 ECDHE-RSA-AES256-SHA384 534 0 -% 886732 2033 883841 199 0 0 192.168.144.21 CH - [2015-05-03 08:24:12.729662] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "96eb2cbd.5239dc78dc1f0" VjhhHKwxQzZrjHMJTLwAAABc TLSv1.2 ECDHE-RSA-AES256-SHA384 662 469 -% 985127 5249 978861 258 0 0 192.168.144.21 CH - [2015-05-03 08:24:13.728833] "GET /EMail/main.aspx HTTP/1.1" 200 3401 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "96eb2cbd.5239dc78dc1f0" VjhhHawxQzZrjHMJTL4AAABi TLSv1.2 ECDHE-RSA-AES256-SHA384 534 3914 -% 896023 2060 892342 1119 0 0 192.168.144.21 CH - [2015-05-03 08:24:14.719024] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "96eb2cbd.5239dc78dc1f0" VjhhHqwxQzZrjHMJTL8AAABh TLSv1.2 ECDHE-RSA-AES256-SHA384 470 4234 -% 974390 2080 964648 7095 0 0 192.168.144.21 CH - [2015-05-03 08:24:14.721880] "GET /EMail/overview.aspx HTTP/1.1" 200 5304 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "96eb2cbd.5239dc78dc1f0" VjhhHqwxQzZrjHMHdNcAAAAk TLSv1.2 ECDHE-RSA-AES256-SHA384 470 5818 -% 1336210 2732 329864 2859 0 0 192.168.144.21 CH - [2015-05-03 08:24:14.721171] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "96eb2cbd.5239dc78dc1f0" VjhhHqwxQzZrjHMHdNYAAAAj TLSv1.2 ECDHE-RSA-AES256-SHA384 502 9666 -% 2323574 3510 313163 3010 0 0 192.168.144.21 CH - [2015-05-03 08:24:16.143772] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "96eb2cbd.5239dc78dc1f0" VjhhIKwxQzZrjHMHdNgAAAAi TLSv1.2 ECDHE-RSA-AES256-SHA384 502 1354 -% 1107520 2511 104201 195 0 0 192.168.144.21 CH - [2015-05-03 08:24:17.098249] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "96eb2cbd.5239dc78dc1f0" VjhhIawxQzZrjHMHdNkAAAAl TLSv1.2 ECDHE-RSA-AES256-SHA384 550 1370 -% 986199 3072 982115 199 0 0 192.168.144.21 CH - [2015-05-03 08:24:33.270581] "GET /EMail/inbox.aspx HTTP/1.1" 200 8597 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "96eb2cbd.5239dc78dc1f0" VjhhMawxQzZrjHMHdNoAAAAm TLSv1.2 ECDHE-RSA-AES256-SHA384 795 9392 -% 1337266 2406 331346 2816 0 0 192.168.144.21 CH - [2015-05-03 08:24:34.683139] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "96eb2cbd.5239dc78dc1f0" VjhhMqwxQzZrjHMHdNsAAAAn TLSv1.2 ECDHE-RSA-AES256-SHA384 502 634 -% 957492 2983 953696 163 0 0 192.168.144.21 CH - [2015-05-03 08:24:34.730393] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "96eb2cbd.5239dc78dc1f0" VjhhMqwxQzZrjHMHdNwAAAAo TLSv1.2 ECDHE-RSA-AES256-SHA384 811 827 -% 1105750 2022 102990 170 0 0 192.168.144.21 CH - [2015-05-03 08:24:34.739045] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "96eb2cbd.5239dc78dc1f0" VjhhMqwxQzZrjHMJTMQAAABf TLSv1.2 ECDHE-RSA-AES256-SHA384 811 2107 -% 1119020 1743 116541 145 0 0 192.168.144.21 CH - [2015-05-03 08:24:36.512901] "GET /EMail/message.aspx?&mailId=3930_54&folderId=1094_6&mailPos=0 HTTP/1.1" 200 13023 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "96eb2cbd.5239dc78dc1f0" VjhhNKwxQzZrjHMJTMYAAABo TLSv1.2 ECDHE-RSA-AES256-SHA384 518 13700 -% 1245682 3326 237261 4099 0 0 192.168.144.21 CH - [2015-05-03 08:24:40.044647] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3930_54&folderId=1094_6&attachmentId=2&token=-56377311688794685E18 HTTP/1.1" 200 16000 "https://www.example.com/EMail/message.aspx?&mailId=3930_54&folderId=1094_6&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "96eb2cbd.5239dc78dc1f0" VjhhOKwxQzZrjHMJTMcAAABq TLSv1.2 ECDHE-RSA-AES256-SHA384 630 17170 -% 1029446 4195 20888 215 0 0 192.168.144.21 CH - [2015-05-03 08:25:08.323049] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "96eb2cbd.5239dc78dc1f0" VjhhVKwxQzZrjHMJTNAAAAB4 TLSv1.2 ECDHE-RSA-AES256-SHA384 811 2379 -% 822375 3329 817875 283 0 0 192.168.144.21 CH - [2015-05-03 08:25:10.619797] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3930_54&folderId=1094_6&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "96eb2cbd.5239dc78dc1f0" VjhhVqwxQzZrjHMJTNEAAAB1 TLSv1.2 ECDHE-RSA-AES256-SHA384 726 405 -% 1630216 4137 625364 156 0 0 192.168.144.21 CH - [2015-05-03 08:25:12.266454] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7292 "https://www.example.com/EMail/message.aspx?&mailId=3930_54&folderId=1094_6&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "96eb2cbd.5239dc78dc1f0" VjhhWKwxQzZrjHMJTNIAAAB3 TLSv1.2 ECDHE-RSA-AES256-SHA384 566 7802 -% 988794 3842 982018 2253 0 0 192.168.144.21 CH - [2015-05-03 08:25:12.956457] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "96eb2cbd.5239dc78dc1f0" VjhhWKwxQzZrjHMHdN0AAAAp TLSv1.2 ECDHE-RSA-AES256-SHA384 811 646 -% 917094 3883 911979 378 0 0 192.168.144.21 CH - [2015-05-03 08:25:13.886196] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "96eb2cbd.5239dc78dc1f0" VjhhWawxQzZrjHMHdN4AAAAq TLSv1.2 ECDHE-RSA-AES256-SHA384 470 815 75% 1054569 2066 51482 311 0 0 192.168.144.21 CH - [2015-05-03 08:25:15.003857] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "96eb2cbd.5239dc78dc1f0" VjhhW6wxQzZrjHMHdOAAAAAt TLSv1.2 ECDHE-RSA-AES256-SHA384 438 373 -% 894428 3729 889803 155 0 0 192.168.144.21 CH - [2015-05-03 08:25:15.911620] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "96eb2cbd.5239dc78dc1f0" VjhhW6wxQzZrjHMHdOEAAAAu TLSv1.2 ECDHE-RSA-AES256-SHA384 422 7866 -% 940395 3298 932590 3652 0 0 192.168.144.21 CH - [2015-05-03 08:25:16.898188] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "96eb2cbd.5239dc78dc1f0" VjhhXKwxQzZrjHMHdOMAAAAs TLSv1.2 ECDHE-RSA-AES256-SHA384 550 2575 14% 995175 2853 991043 158 0 0 192.168.144.21 CH - [2015-05-03 08:25:16.900825] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "96eb2cbd.5239dc78dc1f0" VjhhXKwxQzZrjHMJTNMAAAB0 TLSv1.2 ECDHE-RSA-AES256-SHA384 550 2015 22% 998455 3283 994193 105 0 0 192.168.144.21 CH - [2015-05-03 08:25:16.968667] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "96eb2cbd.5239dc78dc1f0" VjhhXKwxQzZrjHMJTNUAAAB5 TLSv1.2 ECDHE-RSA-AES256-SHA384 891 4485 23% 1009082 3635 3875 158 0 0 192.168.144.21 CH - [2015-05-03 08:25:16.966405] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "96eb2cbd.5239dc78dc1f0" VjhhXKwxQzZrjHMJTNQAAAB2 TLSv1.2 ECDHE-RSA-AES256-SHA384 859 928 56% 1127162 3790 122440 188 0 0 192.168.144.21 CH - [2015-05-03 08:25:16.969878] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "96eb2cbd.5239dc78dc1f0" VjhhXKwxQzZrjHMJTNcAAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 891 454 -% 1175358 3044 171656 144 0 0 192.168.144.21 CH - [2015-05-03 08:25:16.969091] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "96eb2cbd.5239dc78dc1f0" VjhhXKwxQzZrjHMJTNYAAAB8 TLSv1.2 ECDHE-RSA-AES256-SHA384 891 8053 22% 1193307 3735 187110 109 0 0 192.168.144.21 CH - [2015-05-03 08:25:18.266819] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "96eb2cbd.5239dc78dc1f0" VjhhXqwxQzZrjHMJTNgAAABu TLSv1.2 ECDHE-RSA-AES256-SHA384 582 261 -% 909918 3141 905569 343 0 0 192.168.32.7 CH - [2015-05-03 08:34:36.203723] "GET /EMail/overview.aspx HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhjjKwxQzZrjHMJTTsAAABk TLSv1.2 ECDHE-RSA-AES128-SHA256 835 11795 -% 1144785 3305 137193 3318 0 0 192.168.32.7 CH - [2015-05-03 08:34:36.256179] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhjjKwxQzZrjHMJTTwAAABl TLSv1.2 ECDHE-RSA-AES128-SHA256 867 11795 -% 1100647 4344 92966 2549 0 0 192.168.32.7 CH - [2015-05-03 08:34:37.464859] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhjjawxQzZrjHMJTT0AAABj TLSv1.2 ECDHE-RSA-AES128-SHA256 470 7834 -% 912836 2455 907512 2181 0 0 192.168.32.7 CH - [2015-05-03 08:34:45.007476] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhjlawxQzZrjHMJTT8AAABp TLSv1.2 ECDHE-RSA-AES128-SHA256 920 662 -% 728514 4070 723704 166 0 0 192.168.32.7 CH - [2015-05-03 08:34:45.752924] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7548 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhjlawxQzZrjHMJTUAAAABo TLSv1.2 ECDHE-RSA-AES128-SHA256 534 8026 -% 941042 3057 924959 12499 0 0 192.168.32.7 CH - [2015-05-03 08:34:50.794477] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhjmqwxQzZrjHMJTUEAAABq TLSv1.2 ECDHE-RSA-AES128-SHA256 662 453 -% 983835 3908 978906 249 0 0 192.168.32.7 CH - [2015-05-03 08:34:51.795848] "GET /EMail/main.aspx HTTP/1.1" 200 3407 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" Vjhjm6wxQzZrjHMJTUIAAABm TLSv1.2 ECDHE-RSA-AES128-SHA256 534 3882 -% 826150 3217 820425 1853 0 0 192.168.32.7 CH - [2015-05-03 08:34:52.692093] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhjnKwxQzZrjHMJTUQAAABv TLSv1.2 ECDHE-RSA-AES128-SHA256 470 4202 -% 985415 3120 971737 9703 0 0 192.168.32.7 CH - [2015-05-03 08:34:52.731831] "GET /EMail/overview.aspx HTTP/1.1" 200 5303 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhjnKwxQzZrjHMHdP4AAAAK TLSv1.2 ECDHE-RSA-AES128-SHA256 760 5963 -% 1148660 2357 142347 3160 0 0 192.168.32.7 CH - [2015-05-03 08:34:52.732955] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhjnKwxQzZrjHMJTUUAAABr TLSv1.2 ECDHE-RSA-AES128-SHA256 792 9683 -% 1878183 3690 865607 4752 0 0 192.168.32.7 CH - [2015-05-03 08:34:55.523050] "GET /EMail/inbox.aspx HTTP/1.1" 200 12495 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" Vjhjn6wxQzZrjHMJTUcAAABt TLSv1.2 ECDHE-RSA-AES128-SHA256 470 13108 -% 1222524 3070 212110 5888 0 0 192.168.32.7 CH - [2015-05-03 08:35:01.520681] "GET /EMail/message.aspx?&mailId=3931_13&folderId=3481_21&mailPos=2 HTTP/1.1" 200 11498 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhjpawxQzZrjHMJTUgAAABx TLSv1.2 ECDHE-RSA-AES128-SHA256 518 12116 -% 1536043 4795 507014 23002 0 0 192.168.32.7 CH - [2015-05-03 08:35:04.630233] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3931_13&folderId=3481_21&attachmentId=2&token=-28610471601165368E18 HTTP/1.1" 200 48884 "https://www.example.com/EMail/message.aspx?&mailId=3931_13&folderId=3481_21&mailPos=2" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhjqKwxQzZrjHMJTUoAAABy TLSv1.2 ECDHE-RSA-AES128-SHA256 614 51429 -% 1040100 6249 14089 187 0 0 192.168.32.7 CH - [2015-05-03 08:35:12.395236] "GET /EMail/overview.aspx HTTP/1.1" 200 5302 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhjsKwxQzZrjHMHdQIAAAAO TLSv1.2 ECDHE-RSA-AES128-SHA256 760 5963 -% 1189982 2047 184714 2630 0 0 192.168.32.7 CH - [2015-05-03 08:35:12.415008] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhjsKwxQzZrjHMHdQMAAAAP TLSv1.2 ECDHE-RSA-AES128-SHA256 792 9683 -% 1557658 4000 545236 4511 0 0 192.168.32.7 CH - [2015-05-03 08:35:16.263314] "GET /EMail/inbox.aspx HTTP/1.1" 200 12488 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhjtKwxQzZrjHMHdQYAAAAU TLSv1.2 ECDHE-RSA-AES128-SHA256 470 13108 -% 1122464 2034 115336 4027 0 0 192.168.32.7 CH - [2015-05-03 08:35:17.447432] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhjtawxQzZrjHMHdQcAAAAV TLSv1.2 ECDHE-RSA-AES128-SHA256 486 1946 -% 935250 3017 931367 156 0 0 192.168.32.7 CH - [2015-05-03 08:35:22.890758] "GET /EMail/message.aspx?&mailId=3931_13&folderId=3481_21&mailPos=2 HTTP/1.1" 200 11498 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhjuqwxQzZrjHMHdQgAAAAW TLSv1.2 ECDHE-RSA-AES128-SHA256 518 12047 -% 1180665 4955 144367 30280 0 0 192.168.32.7 CH - [2015-05-03 08:35:33.188106] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3931_13&folderId=3481_21&attachmentId=2&token=-40226486663645056E18 HTTP/1.1" 200 48884 "https://www.example.com/EMail/message.aspx?&mailId=3931_13&folderId=3481_21&mailPos=2" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhjxawxQzZrjHMJTU0AAAB1 TLSv1.2 ECDHE-RSA-AES128-SHA256 904 51431 -% 1160408 4331 146058 239 0 0 192.168.32.7 CH - [2015-05-03 08:36:09.946079] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3931_13&folderId=3481_21&mailPos=2" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" Vjhj6awxQzZrjHMJTVIAAAB7 TLSv1.2 ECDHE-RSA-AES128-SHA256 1000 566 -% 1217031 4141 212080 256 0 0 192.168.32.7 CH - [2015-05-03 08:36:11.180385] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 11193 "https://www.example.com/EMail/message.aspx?&mailId=3931_13&folderId=3481_21&mailPos=2" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" Vjhj66wxQzZrjHMJTVMAAAB8 TLSv1.2 ECDHE-RSA-AES128-SHA256 566 11743 -% 1069815 3815 60190 4640 0 0 192.168.211.14 CH - [2015-05-03 08:36:16.408556] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7368 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "287790ab.5239df2f317ec" Vjhj8KwxQzZrjHMJTVQAAABu TLSv1.1 ECDHE-RSA-AES256-SHA 633 11841 -% 958103 1509 953653 2403 0 0 192.168.211.14 CH - [2015-05-03 08:36:17.442319] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "287790ab.5239df2f317ec" Vjhj8awxQzZrjHMJTVYAAAB9 TLSv1.1 ECDHE-RSA-AES256-SHA 750 1883 -% 894194 2932 890420 147 0 0 192.168.211.14 CH - [2015-05-03 08:36:17.413476] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "287790ab.5239df2f317ec" Vjhj8awxQzZrjHMJTVUAAAB@ TLSv1.1 ECDHE-RSA-AES256-SHA 470 2479 14% 1023396 3053 18961 187 0 0 192.168.211.14 CH - [2015-05-03 08:36:17.451904] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "287790ab.5239df2f317ec" Vjhj8awxQzZrjHMJTVgAAABB TLSv1.1 ECDHE-RSA-AES256-SHA 702 816 56% 1049934 1709 47486 129 0 0 192.168.211.14 CH - [2015-05-03 08:36:17.443335] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "287790ab.5239df2f317ec" Vjhj8awxQzZrjHMJTVcAAAB- TLSv1.1 ECDHE-RSA-AES256-SHA 702 2096 22% 1168039 3176 163525 159 0 0 192.168.211.14 CH - [2015-05-03 08:36:17.448978] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7197 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "287790ab.5239df2f317ec" Vjhj8awxQzZrjHMHdRAAAAAd TLSv1.1 ECDHE-RSA-AES256-SHA 734 8381 22% 1235660 1757 230629 164 0 0 192.168.211.14 CH - [2015-05-03 08:36:17.448370] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "287790ab.5239df2f317ec" Vjhj8awxQzZrjHMHdQ8AAAAe TLSv1.1 ECDHE-RSA-AES256-SHA 734 4532 23% 1239483 2470 235445 101 0 0 192.168.32.7 CH - [2015-05-03 08:36:17.759829] "GET /EMail/message.aspx?&mailId=3930_64&folderId=3481_21&mailPos=1 HTTP/1.1" 200 11497 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" Vjhj8awxQzZrjHMJTVkAAAB6 TLSv1.2 ECDHE-RSA-AES128-SHA256 824 12293 -% 1779870 4812 755194 18828 0 0 192.168.211.14 CH - [2015-05-03 08:36:18.900128] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "287790ab.5239df2f317ec" Vjhj8qwxQzZrjHMJTVsAAABC TLSv1.1 ECDHE-RSA-AES256-SHA 518 1834 -% 736577 2120 733647 207 0 0 192.168.211.14 CH - [2015-05-03 08:36:18.891547] "GET /EMail/scripts/csshover.htc HTTP/1.1" 200 4255 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "287790ab.5239df2f317ec" Vjhj8qwxQzZrjHMJTVoAAABA TLSv1.1 ECDHE-RSA-AES256-SHA 358 4714 -% 993437 1961 990784 148 0 0 192.168.32.7 CH - [2015-05-03 08:36:21.005717] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3930_64&folderId=3481_21&attachmentId=2&token=-62962385238104074E18 HTTP/1.1" 200 47867 "https://www.example.com/EMail/message.aspx?&mailId=3930_64&folderId=3481_21&mailPos=1" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" Vjhj9awxQzZrjHMJTVwAAABD TLSv1.2 ECDHE-RSA-AES128-SHA256 614 50421 -% 1076386 4054 53940 158 0 0 192.168.211.14 CH - [2015-05-03 08:36:41.704920] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "287790ab.5239df2f317ec" VjhkCawxQzZrjHMHdRUAAAAj TLSv1.1 ECDHE-RSA-AES256-SHA 894 598 -% 1077711 4183 72653 196 0 0 192.168.211.14 CH - [2015-05-03 08:36:42.840308] "GET /EMail/main.aspx HTTP/1.1" 200 3400 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "287790ab.5239df2f317ec" VjhkCqwxQzZrjHMHdRYAAAAi TLSv1.1 ECDHE-RSA-AES256-SHA 518 3850 -% 865545 2100 861559 1246 0 0 192.168.211.14 CH - [2015-05-03 08:36:43.858962] "GET /EMail/overview.aspx HTTP/1.1" 200 5304 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "287790ab.5239df2f317ec" VjhkC6wxQzZrjHMHdRgAAAAm TLSv1.1 ECDHE-RSA-AES256-SHA 702 5931 -% 675761 3177 670156 1741 0 0 192.168.211.14 CH - [2015-05-03 08:36:43.864913] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "287790ab.5239df2f317ec" VjhkC6wxQzZrjHMJTV0AAABG TLSv1.1 ECDHE-RSA-AES256-SHA 702 4347 -% 1054091 1744 43324 8576 0 0 192.168.211.14 CH - [2015-05-03 08:36:44.576935] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "287790ab.5239df2f317ec" VjhkDKwxQzZrjHMHdxQzZrjn TLSv1.1 ECDHE-RSA-AES256-SHA 502 1290 -% 855438 2395 852167 188 0 0 192.168.211.14 CH - [2015-05-03 08:36:43.781978] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "287790ab.5239df2f317ec" VjhkC6wxQzZrjHMHdRcAAAAl TLSv1.1 ECDHE-RSA-AES256-SHA 502 9394 -% 2003290 4104 992530 2730 0 0 192.168.211.14 CH - [2015-05-03 08:36:45.837513] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "287790ab.5239df2f317ec" VjhkDawxQzZrjHMJTV8AAABE TLSv1.1 ECDHE-RSA-AES256-SHA 534 1306 -% 830008 2048 827147 206 0 0 192.168.32.7 CH - [2015-05-03 08:36:48.613551] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3930_64&folderId=3481_21&mailPos=1" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhkEKwxQzZrjHMJTWEAAABI TLSv1.2 ECDHE-RSA-AES128-SHA256 1000 566 -% 880394 10988 868385 183 0 0 192.168.211.14 CH - [2015-05-03 08:36:48.444425] "GET /EMail/inbox.aspx HTTP/1.1" 200 20063 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "287790ab.5239df2f317ec" VjhkEKwxQzZrjHMHdRoAAAAo TLSv1.1 ECDHE-RSA-AES256-SHA 470 20718 -% 1344299 3132 291511 9993 0 0 192.168.211.14 CH - [2015-05-03 08:36:49.854518] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "287790ab.5239df2f317ec" VjhkEawxQzZrjHMJTWQAAABJ TLSv1.1 ECDHE-RSA-AES256-SHA 718 2075 -% 681832 2833 678141 160 0 0 192.168.211.14 CH - [2015-05-03 08:36:49.831978] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "287790ab.5239df2f317ec" VjhkEawxQzZrjHMHdRwAAAAr TLSv1.1 ECDHE-RSA-AES256-SHA 486 1850 -% 812862 2726 809256 219 0 0 192.168.32.7 CH - [2015-05-03 08:36:49.510897] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 9892 "https://www.example.com/EMail/message.aspx?&mailId=3930_64&folderId=3481_21&mailPos=1" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhkEawxQzZrjHMJTWIAAABK TLSv1.2 ECDHE-RSA-AES128-SHA256 566 10447 -% 1158383 2558 152005 3070 0 0 192.168.211.14 CH - [2015-05-03 08:36:49.830201] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "287790ab.5239df2f317ec" VjhkEawxQzZrjHMHdRsAAAAp TLSv1.1 ECDHE-RSA-AES256-SHA 486 586 -% 853914 3772 849481 102 0 0 192.168.211.14 CH - [2015-05-03 08:36:49.831893] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "287790ab.5239df2f317ec" VjhkEawxQzZrjHMJTWMAAABF TLSv1.1 ECDHE-RSA-AES256-SHA 486 570 -% 1038138 2788 34516 176 0 0 192.168.32.7 CH - [2015-05-03 08:36:52.791795] "GET /EMail/message.aspx?&mailId=3931_20&folderId=3481_21&mailPos=0 HTTP/1.1" 200 11367 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhkFKwxQzZrjHMJTWUAAABN TLSv1.2 ECDHE-RSA-AES128-SHA256 534 11919 -% 1281637 3223 246102 31449 0 0 192.168.32.7 CH - [2015-05-03 08:36:55.193644] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3931_20&folderId=3481_21&attachmentId=2&token=-74338215932316447E18 HTTP/1.1" 200 48103 "https://www.example.com/EMail/message.aspx?&mailId=3931_20&folderId=3481_21&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhkF6wxQzZrjHMJTWcAAABM TLSv1.2 ECDHE-RSA-AES128-SHA256 614 50454 -% 1149796 4852 125912 222 0 0 192.168.211.14 CH - [2015-05-03 08:36:58.133121] "GET /EMail/message.aspx?&mailId=3930_45&folderId=2022_66&mailPos=1 HTTP/1.1" 200 11492 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "287790ab.5239df2f317ec" VjhkGqwxQzZrjHMJTWgAAABP TLSv1.1 ECDHE-RSA-AES256-SHA 750 12176 -% 1825685 4640 795393 24638 0 0 192.168.211.14 CH - [2015-05-03 08:37:01.274544] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/message.aspx?&mailId=3930_45&folderId=2022_66&mailPos=1" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "287790ab.5239df2f317ec" VjhkHawxQzZrjHMJTWkAAABO TLSv1.1 ECDHE-RSA-AES256-SHA 534 2122 -% 1058701 3370 54539 150 0 0 192.168.211.14 CH - [2015-05-03 08:37:07.523581] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3930_45&folderId=2022_66&attachmentId=2&token=-49454506260287908E18 HTTP/1.1" 200 47456 "https://www.example.com/EMail/message.aspx?&mailId=3930_45&folderId=2022_66&mailPos=1" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "287790ab.5239df2f317ec" VjhkI6wxQzZrjHMHdR8AAAAu TLSv1.1 ECDHE-RSA-AES256-SHA 846 49543 -% 1081175 4352 57837 182 0 0 192.168.32.7 CH - [2015-05-03 08:37:12.721438] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3931_20&folderId=3481_21&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhkKKwxQzZrjHMHdSAAAAAv TLSv1.2 ECDHE-RSA-AES128-SHA256 1000 566 -% 1562029 5033 555746 253 0 0 192.168.32.7 CH - [2015-05-03 08:37:14.299739] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8590 "https://www.example.com/EMail/message.aspx?&mailId=3931_20&folderId=3481_21&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhkKqwxQzZrjHMHdSEAAAAs TLSv1.2 ECDHE-RSA-AES128-SHA256 566 9135 -% 1085271 4459 76828 3147 0 0 192.168.32.7 CH - [2015-05-03 08:37:17.428369] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhkLawxQzZrjHMHdSIAAAAw TLSv1.2 ECDHE-RSA-AES128-SHA256 774 389 -% 1196506 6271 189511 153 0 0 192.168.32.7 CH - [2015-05-03 08:37:18.641621] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7291 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "2e6e2eb0.5239d51828df5" VjhkLqwxQzZrjHMHdSMAAAAx TLSv1.2 ECDHE-RSA-AES128-SHA256 534 7770 -% 1115224 3149 104787 6090 0 0 192.168.121.148 CH - [2015-05-03 08:37:38.116624] "GET /EMail/main.aspx HTTP/1.1" 200 7349 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhkQqwxQzZrjHMJTXEAAABZ TLSv1.2 ECDHE-RSA-AES256-SHA384 1069 11843 -% 832635 4742 823830 2480 3 0 192.168.211.14 CH - [2015-05-03 08:37:52.882639] "GET /EMail/inbox.aspx HTTP/1.1" 200 20055 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "287790ab.5239df2f317ec" VjhkUKwxQzZrjHMJTXMAAABS TLSv1.1 ECDHE-RSA-AES256-SHA 702 20879 -% 1547864 4090 506819 6899 0 0 192.168.211.14 CH - [2015-05-03 08:37:56.554845] "GET /EMail/message.aspx?&mailId=3930_48&folderId=2022_66&mailPos=0 HTTP/1.1" 200 11361 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "287790ab.5239df2f317ec" VjhkVKwxQzZrjHMJTXQAAABa TLSv1.1 ECDHE-RSA-AES256-SHA 518 11924 -% 1558073 4597 528472 23891 0 0 192.168.211.14 CH - [2015-05-03 08:38:00.930412] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3930_48&folderId=2022_66&attachmentId=2&token=-31223367058269179E18 HTTP/1.1" 200 47821 "https://www.example.com/EMail/message.aspx?&mailId=3930_48&folderId=2022_66&mailPos=0" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "287790ab.5239df2f317ec" VjhkWKwxQzZrjHMJTXYAAABg TLSv1.1 ECDHE-RSA-AES256-SHA 614 49893 -% 1276780 4213 252136 420 0 0 192.168.211.14 CH - [2015-05-03 08:39:24.069799] "GET /EMail/message.aspx?&mailId=3927_38&folderId=2022_66&mailPos=2 HTTP/1.1" 200 11492 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "287790ab.5239df2f317ec" VjhkrKwxQzZrjHMJTX8AAABp TLSv1.1 ECDHE-RSA-AES256-SHA 750 12229 -% 1233875 5208 197353 29690 0 0 192.168.211.14 CH - [2015-05-03 08:39:27.547724] "GET /EMail/inbox.aspx HTTP/1.1" 200 20047 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "287790ab.5239df2f317ec" Vjhkr6wxQzZrjHMJTYEAAABq TLSv1.1 ECDHE-RSA-AES256-SHA 470 20702 -% 1309735 2009 259794 9179 0 0 192.168.211.14 CH - [2015-05-03 08:40:55.735137] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "287790ab.5239df2f317ec" VjhlB6wxQzZrjHMJTYoAAABw TLSv1.1 ECDHE-RSA-AES256-SHA 718 598 -% 924607 2798 921033 207 0 0 192.168.211.14 CH - [2015-05-03 08:40:56.669347] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "287790ab.5239df2f317ec" VjhlCKwxQzZrjHMJTYsAAAB4 TLSv1.1 ECDHE-RSA-AES256-SHA 470 735 75% 992629 2483 989221 243 0 0 192.168.211.14 CH - [2015-05-03 08:40:57.749118] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "287790ab.5239df2f317ec" VjhlCawxQzZrjHMJTY0AAAB3 TLSv1.1 ECDHE-RSA-AES256-SHA 438 341 -% 958350 3898 953523 459 0 0 192.168.211.14 CH - [2015-05-03 08:40:58.715211] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "287790ab.5239df2f317ec" VjhlCqwxQzZrjHMJTY4AAAB0 TLSv1.1 ECDHE-RSA-AES256-SHA 422 7818 -% 865165 4755 857050 2434 0 0 192.168.211.14 CH - [2015-05-03 08:40:59.613920] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "287790ab.5239df2f317ec" VjhlC6wxQzZrjHMJTZAAAAB2 TLSv1.1 ECDHE-RSA-AES256-SHA 534 2479 14% 829122 3321 823948 201 0 0 192.168.211.14 CH - [2015-05-03 08:41:40.206884] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "287790ab.5239df2f317ec" VjhlNKwxQzZrjHMJTZcAAAB6 TLSv1.1 ECDHE-RSA-AES256-SHA 665 5457 -% 921396 3203 917436 149 0 0 192.168.211.14 CH - [2015-05-03 08:42:09.904861] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7368 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)" www.example.com 192.168.34.16 443 proxy-server - + "287790ab.5239df2f317ec" VjhlUawxQzZrjHMJTZ0AAABH TLSv1.1 ECDHE-RSA-AES256-SHA 686 7995 -% 853554 3008 846215 3678 0 0 192.168.186.76 CH - [2015-05-03 08:54:08.340329] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" VjhoIKwxQzZrjHMJTgEAAABr TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 12038 -% 992117 6329 981737 2207 3 0 192.168.186.76 CH - [2015-05-03 08:54:09.396757] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "1e86a579.5239ce427c4e0" VjhoIawxQzZrjHMJTgIAAABt TLSv1.2 ECDHE-RSA-AES256-SHA384 662 0 -% 817322 6138 807167 2486 3 0 192.168.186.76 CH - [2015-05-03 08:54:28.032672] "GET /EMail/overview.aspx HTTP/1.1" 200 5537 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" VjhoNKwxQzZrjHMHdW0AAAA9 TLSv1.2 ECDHE-RSA-AES256-SHA384 1229 10134 -% 1323486 7876 310906 2768 3 0 192.168.186.76 CH - [2015-05-03 08:54:28.030193] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" VjhoNKwxQzZrjHMHdWwAAAA@ TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1676252 8292 658019 4149 3 0 192.168.186.76 CH - [2015-05-03 08:54:31.228376] "GET /EMail/inbox.aspx HTTP/1.1" 200 8495 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" VjhoN6wxQzZrjHMHdW8AAAAB TLSv1.2 ECDHE-RSA-AES256-SHA384 662 9087 -% 1068620 6753 57403 2771 3 0 192.168.186.76 CH - [2015-05-03 08:54:33.468389] "GET /EMail/message.aspx?&mailId=3931_18&folderId=947_65&mailPos=0 HTTP/1.1" 200 16512 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" VjhoOawxQzZrjHMHdXAAAAA- TLSv1.2 ECDHE-RSA-AES256-SHA384 710 17273 -% 1519963 8271 472484 36323 3 0 192.168.186.76 CH - [2015-05-03 08:54:36.830104] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3931_18&folderId=947_65&attachmentId=3&token=-83114314657325888E17 HTTP/1.1" 200 1638745 "https://www.example.com/EMail/message.aspx?&mailId=3931_18&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" VjhoPKwxQzZrjHMHdXEAAAAE TLSv1.2 ECDHE-RSA-AES256-SHA384 806 1692080 -% 5034693 10716 44192 171 3 0 192.168.186.76 CH - [2015-05-03 08:55:12.128764] "GET /EMail/newMessage.aspx?action=reply&mailId=3931_18&folderId=947_65&showPics=false HTTP/1.1" 200 24377 "https://www.example.com/EMail/message.aspx?&mailId=3931_18&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" VjhoYKwxQzZrjHMJTg0AAAB9 TLSv1.2 ECDHE-RSA-AES256-SHA384 1266 25375 -% 1135069 9502 50068 56284 6 3 192.168.186.76 CH - [2015-05-03 08:55:44.132577] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" VjhogKwxQzZrjHMJThQAAABA TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1490363 8652 471233 5117 3 0 192.168.186.76 CH - [2015-05-03 08:55:46.789690] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" VjhogqwxQzZrjHMJThUAAABG TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1200078 11486 185992 207 3 0 192.168.186.76 CH - [2015-05-03 08:55:48.021178] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7291 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" VjhohKwxQzZrjHMJThYAAABE TLSv1.2 ECDHE-RSA-AES256-SHA384 726 7802 -% 1019305 5606 9880 2273 3 0 192.168.79.137 CH - [2015-05-03 09:00:18.218647] "GET /EMail/login.aspx HTTP/1.1" 200 7343 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhpkqwxQzZrjHMJTkIAAAB4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 355 7928 -% 1133079 520 128223 3698 0 0 192.168.79.137 CH - [2015-05-03 09:00:19.559878] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" Vjhpk6wxQzZrjHMJTkQAAAB5 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1020 2014 22% 1411948 3147 407240 139 0 0 192.168.79.137 CH - [2015-05-03 09:00:19.486733] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1967 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" Vjhpk6wxQzZrjHMJTkMAAAB3 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 455 2545 14% 1487512 2294 483392 96 0 0 192.168.79.137 CH - [2015-05-03 09:00:19.575686] "GET /EMail/scripts/variables_fr.js HTTP/1.1" 200 1679 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" Vjhpk6wxQzZrjHMJTkcAAAB7 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1015 2318 27% 1411007 2674 407376 90 0 0 192.168.79.137 CH - [2015-05-03 09:00:19.560500] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" Vjhpk6wxQzZrjHMJTkUAAAB0 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1020 732 56% 1445764 3550 441210 103 0 0 192.168.79.137 CH - [2015-05-03 09:00:19.569588] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7203 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" Vjhpk6wxQzZrjHMJTkYAAAB2 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1010 8078 22% 1524459 3084 517710 140 0 0 192.168.79.137 CH - [2015-05-03 09:00:19.577572] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" Vjhpk6wxQzZrjHMJTkgAAAB8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1019 1705 -% 2191485 1880 188876 165 0 0 192.168.79.137 CH - [2015-05-03 09:00:21.193215] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/css/NNstyle.css" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhplawxQzZrjHMJTkoAAAB9 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 480 1792 -% 1125726 1715 123219 129 0 0 192.168.79.137 CH - [2015-05-03 09:00:21.157984] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhplawxQzZrjHMJTkkAAABu TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 470 1685 -% 1160957 2833 156992 194 0 0 192.168.79.137 CH - [2015-05-03 09:00:48.052889] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/css/NNstyle.css" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhpsKwxQzZrjHMJTlAAAABD TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1045 2226 -% 953511 3081 949665 122 0 0 192.168.79.137 CH - [2015-05-03 09:00:48.516972] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhpsKwxQzZrjHMJTlEAAABL TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1206 559 -% 754423 4800 748760 200 0 0 192.168.79.137 CH - [2015-05-03 09:00:49.310831] "GET /EMail/main.aspx HTTP/1.1" 200 3393 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhpsawxQzZrjHMJTlIAAABA TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 493 3809 -% 632793 2920 627155 2008 0 0 192.168.79.137 CH - [2015-05-03 09:00:50.078410] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhpsqwxQzZrjHMJTlMAAABG TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 494 4128 -% 981081 2943 968595 8831 0 0 192.168.79.137 CH - [2015-05-03 09:00:50.156085] "GET /EMail/overview.aspx HTTP/1.1" 200 5297 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhpsqwxQzZrjHMJTlUAAABH TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1063 5857 -% 1398192 3055 391425 3176 0 0 192.168.79.137 CH - [2015-05-03 09:00:50.079373] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8532 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhpsqwxQzZrjHMJTlQAAABE TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 522 9186 -% 1781477 3422 769389 4835 0 0 192.168.79.137 CH - [2015-05-03 09:00:51.628308] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" Vjhps6wxQzZrjHMJTlYAAABI TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 480 1248 -% 978228 3169 974224 160 0 0 192.168.79.137 CH - [2015-05-03 09:00:51.984134] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" Vjhps6wxQzZrjHMJTlcAAABJ TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 522 1260 -% 1027191 1921 24616 128 0 0 192.168.79.137 CH - [2015-05-03 09:00:55.170699] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8532 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" Vjhpt6wxQzZrjHMJTloAAABN TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 549 9186 -% 1236560 3782 224241 4589 0 0 192.168.79.137 CH - [2015-05-03 09:00:55.169576] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 22376 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" Vjhpt6wxQzZrjHMJTlkAAABF TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 532 22915 -% 1467843 2812 366892 12989 0 0 192.168.79.137 CH - [2015-05-03 09:00:56.801650] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhpuKwxQzZrjHMJTlwAAABR TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1051 665 -% 863147 2010 860269 172 0 0 192.168.79.137 CH - [2015-05-03 09:00:56.801653] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhpuKwxQzZrjHMJTlwAAABO TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 481 539 -% 895664 1995 892991 98 0 0 192.168.79.137 CH - [2015-05-03 09:00:56.877393] "GET /EMail/images/Highprio.gif HTTP/1.1" 200 91 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhpuKwxQzZrjHMJTl8AAABU TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1050 639 -% 998257 2952 994448 169 0 0 192.168.79.137 CH - [2015-05-03 09:00:56.803402] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhpuKwxQzZrjHMJTl0AAABM TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1051 2016 -% 1116896 1634 114617 125 0 0 192.168.79.137 CH - [2015-05-03 09:00:56.833363] "GET /EMail/images/msgOpenedReplied.png HTTP/1.1" 200 717 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhpuKwxQzZrjHMJTl4AAABW TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 491 1129 -% 1160534 2644 157202 132 0 0 192.168.79.137 CH - [2015-05-03 09:01:01.922375] "GET /EMail/newMessage.aspx?msg=new HTTP/1.1" 200 12063 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhpvawxQzZrjHMJTmAAAABV TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 533 12544 -% 1082341 3309 39151 24038 3 3 192.168.79.137 CH - [2015-05-03 09:01:01.923976] "GET /EMail/tree.aspx?sNode-sharedTree=treeNewMsg HTTP/1.1" 200 8532 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeInbox" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhpvawxQzZrjHMJTmEAAABT TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 547 9186 -% 1401817 3856 390687 2946 0 0 192.168.79.137 CH - [2015-05-03 09:01:03.165259] "GET /EMail/scripts/tinymce/tinymce.min.js HTTP/1.1" 200 102049 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" Vjhpv6wxQzZrjHMJTmIAAABX TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 468 103460 33% 1432563 3045 859294 329 0 0 192.168.79.137 CH - [2015-05-03 09:01:04.789740] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2907 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhpwKwxQzZrjHMJTmMAAABS TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 515 3300 -% 867088 2134 856012 8346 0 0 192.168.79.137 CH - [2015-05-03 09:01:04.832803] "GET /EMail/scripts/tinymce/plugins/print/plugin.min.js HTTP/1.1" 200 182 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhpwKwxQzZrjHMJTmYAAABb TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1048 819 55% 1068417 1680 65851 125 0 0 192.168.79.137 CH - [2015-05-03 09:01:04.831622] "GET /EMail/scripts/tinymce/themes/modern/theme.min.js HTTP/1.1" 200 2651 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhpwKwxQzZrjHMJTmUAAABQ TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1047 3319 41% 1102902 2689 98863 135 0 0 192.168.79.137 CH - [2015-05-03 09:01:04.831379] "GET /EMail/scripts/tinymce/langs/fr.js HTTP/1.1" 200 2883 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhpwKwxQzZrjHMJTmQAAABe TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 465 3413 38% 1166363 2867 158875 157 0 0 192.168.79.137 CH - [2015-05-03 09:01:04.834295] "GET /EMail/scripts/tinymce/plugins/preview/plugin.min.js HTTP/1.1" 200 737 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhpwKwxQzZrjHMJTmcAAABY TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1050 1375 51% 1254837 1908 251886 220 0 0 192.168.79.137 CH - [2015-05-03 09:01:04.835134] "GET /EMail/scripts/tinymce/plugins/paste/plugin.min.js HTTP/1.1" 200 6256 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhpwKwxQzZrjHMHdYMAAAAV TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1048 7124 40% 1423981 2816 418538 166 0 0 192.168.79.137 CH - [2015-05-03 09:01:05.695320] "GET /EMail/scripts/tinymce/plugins/searchreplace/plugin.min.js HTTP/1.1" 200 2586 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhpwawxQzZrjHMJTmkAAABa TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 489 3116 40% 803270 3082 799165 128 0 0 192.168.79.137 CH - [2015-05-03 09:01:05.938560] "GET /EMail/scripts/tinymce/plugins/fullpage/plugin.min.js HTTP/1.1" 200 2325 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhpwawxQzZrjHMJTmoAAABg TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 484 2855 36% 981249 2169 977881 140 0 0 192.168.79.137 CH - [2015-05-03 09:01:06.033390] "GET /EMail/scripts/tinymce/plugins/insertdatetime/plugin.min.js HTTP/1.1" 200 867 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhpwqwxQzZrjHMJTmwAAABi TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 490 1367 42% 1001144 3569 0 196 0 0 192.168.79.137 CH - [2015-05-03 09:01:06.128396] "GET /EMail/scripts/tinymce/plugins/visualblocks/plugin.min.js HTTP/1.1" 200 525 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhpwqwxQzZrjHMJTm0AAABh TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 488 1025 43% 1037209 2722 33647 106 0 0 192.168.79.137 CH - [2015-05-03 09:01:05.973388] "GET /EMail/scripts/tinymce/plugins/charmap/plugin.min.js HTTP/1.1" 200 2698 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhpwawxQzZrjHMJTmsAAABc TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 483 3228 38% 1192514 2160 189304 122 0 0 192.168.79.137 CH - [2015-05-03 09:01:06.541125] "GET /EMail/scripts/tinymce/plugins/link/plugin.min.js HTTP/1.1" 200 1835 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhpwqwxQzZrjHMJTm4AAABd TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 480 2336 41% 649687 3225 645362 124 0 0 192.168.79.137 CH - [2015-05-03 09:01:06.298603] "GET /EMail/scripts/tinymce/plugins/hr/plugin.min.js HTTP/1.1" 200 191 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhpwqwxQzZrjHMHdYQAAAAW TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 478 690 53% 961713 2914 958079 117 0 0 192.168.79.137 CH - [2015-05-03 09:01:06.963172] "GET /EMail/scripts/tinymce/plugins/anchor/plugin.min.js HTTP/1.1" 200 339 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhpwqwxQzZrjHMJTnAAAABl TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 482 838 63% 805381 4010 800376 173 0 0 192.168.79.137 CH - [2015-05-03 09:01:07.072355] "GET /EMail/scripts/tinymce/plugins/textcolor/plugin.min.js HTTP/1.1" 200 1647 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" Vjhpw6wxQzZrjHMJTnEAAABj TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 485 2148 44% 698999 2893 694871 128 0 0 192.168.79.137 CH - [2015-05-03 09:01:07.203190] "GET /EMail/scripts/tinymce/plugins/visualchars/plugin.min.js HTTP/1.1" 200 608 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" Vjhpw6wxQzZrjHMJTnIAAABf TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 487 1108 54% 757975 2975 753910 172 0 0 192.168.79.137 CH - [2015-05-03 09:01:07.204793] "GET /EMail/scripts/tinymce/plugins/image/plugin.min.js HTTP/1.1" 200 2136 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" Vjhpw6wxQzZrjHMJTnMAAABp TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 481 2666 42% 1208484 3368 204154 125 0 0 192.168.79.137 CH - [2015-05-03 09:01:07.229137] "GET /EMail/scripts/tinymce/plugins/table/plugin.min.js HTTP/1.1" 200 9158 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" Vjhpw6wxQzZrjHMJTnQAAABo TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 481 9889 32% 1199862 2810 193481 134 0 0 192.168.79.137 CH - [2015-05-03 09:01:08.674337] "GET /EMail/scripts/tinymce/skins/lightgray/skin.min.css HTTP/1.1" 200 6020 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhpxKwxQzZrjHMJTnUAAABq TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 497 6544 17% 782876 1958 776063 240 0 0 192.168.79.137 CH - [2015-05-03 09:01:08.676053] "GET /EMail/scripts/tinymce/skins/lightgray/content.min.css HTTP/1.1" 200 588 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhpxKwxQzZrjHMJTnYAAABm TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 500 1081 38% 1008511 2821 4690 172 0 0 192.168.79.137 CH - [2015-05-03 09:01:08.677060] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5472 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhpxKwxQzZrjHMHdYUAAAAX TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 475 7123 -% 1025086 2656 0 0 0 0 192.168.79.137 CH - [2015-05-03 09:01:09.561827] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce-small.woff HTTP/1.1" 200 7848 "https://www.example.com/EMail/scripts/tinymce/skins/lightgray/skin.min.css" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhpxawxQzZrjHMJTncAAABn TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 574 8276 -% 785355 2389 782300 135 0 0 192.168.79.137 CH - [2015-05-03 09:02:01.603292] "GET /EMail/attachost.aspx HTTP/1.1" 200 4956 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" Vjhp@awxQzZrjHMHdYgAAAAa TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1080 5510 -% 902627 1916 898083 2001 0 0 192.168.79.137 CH - [2015-05-03 09:02:51.504336] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/attachost.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhqK6wxQzZrjHMJToUAAAB2 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 88795 476 -% 1461591 3671 303861 157 0 0 192.168.79.137 CH - [2015-05-03 09:02:53.030545] "GET /EMail/attachost.aspx HTTP/1.1" 200 6414 "https://www.example.com/EMail/attachments.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhqLawxQzZrjHMJToYAAAB8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 506 6830 -% 907702 2808 900624 3533 0 0 192.168.79.137 CH - [2015-05-03 09:03:01.838763] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/attachost.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhqNawxQzZrjHMJTocAAAB9 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 352009 476 -% 1652197 3306 0 169 0 0 192.168.79.137 CH - [2015-05-03 09:03:03.552656] "GET /EMail/attachost.aspx HTTP/1.1" 200 6504 "https://www.example.com/EMail/attachments.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhqN6wxQzZrjHMJTogAAABu TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 506 6920 -% 900861 2331 895684 2017 0 0 192.168.79.137 CH - [2015-05-03 09:03:39.922844] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhqW6wxQzZrjHMJTo8AAABL TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1593 535 -% 1206316 32178 171717 252 18 0 192.168.79.137 CH - [2015-05-03 09:03:41.168550] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc= HTTP/1.1" 200 3902 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhqXawxQzZrjHMJTpAAAABA TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 572 4324 -% 1019791 4989 7625 6535 0 0 192.168.79.137 CH - [2015-05-03 09:03:45.429867] "GET /EMail/newMessage.aspx?msg=new HTTP/1.1" 200 12063 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeNewMsg" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhqYawxQzZrjHMJTpEAAABG TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 534 12515 -% 887893 3481 856476 26377 3 3 192.168.79.137 CH - [2015-05-03 09:03:45.508166] "GET /EMail/tree.aspx?sNode-sharedTree=treeNewMsg HTTP/1.1" 200 8532 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeNewMsg" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhqYawxQzZrjHMJTpIAAABH TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1115 9324 -% 1660644 3848 647242 7382 0 0 192.168.79.137 CH - [2015-05-03 09:03:46.715900] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5472 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhqYqwxQzZrjHMJTpQAAABE TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1042 7261 -% 687511 2951 0 0 0 0 192.168.79.137 CH - [2015-05-03 09:03:46.486714] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2907 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhqYqwxQzZrjHMJTpMAAABN TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 515 3300 -% 929857 2188 921794 5062 0 0 192.168.79.137 CH - [2015-05-03 09:04:37.174738] "GET /EMail/attachost.aspx HTTP/1.1" 200 4956 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhqlawxQzZrjHMJTp4AAABX TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1080 5510 -% 813664 2926 807488 2527 0 0 192.168.121.148 CH - [2015-05-03 09:04:46.184386] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhqnqwxQzZrjHMJTp8AAABZ TLSv1.2 ECDHE-RSA-AES256-SHA384 1277 4350 -% 1096232 6698 86257 298 3 0 192.168.79.137 CH - [2015-05-03 09:04:46.855144] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/attachost.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhqnqwxQzZrjHMJTqAAAABS TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 85834 476 -% 1090054 3313 0 163 0 0 192.168.121.148 CH - [2015-05-03 09:04:47.326436] "GET /EMail/main.aspx HTTP/1.1" 200 3409 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" Vjhqn6wxQzZrjHMJTqEAAABb TLSv1.2 ECDHE-RSA-AES256-SHA384 742 3930 -% 953309 8123 940755 2163 3 0 192.168.79.137 CH - [2015-05-03 09:04:47.984839] "GET /EMail/attachost.aspx HTTP/1.1" 200 6421 "https://www.example.com/EMail/attachments.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" Vjhqn6wxQzZrjHMJTqMAAABe TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 506 6837 -% 1052780 3145 45601 3236 0 0 192.168.121.148 CH - [2015-05-03 09:04:48.458094] "GET /EMail/overview.aspx HTTP/1.1" 200 5300 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhqoKwxQzZrjHMJTqUAAABa TLSv1.2 ECDHE-RSA-AES256-SHA384 1042 6011 -% 1176322 8288 162879 2931 3 0 192.168.121.148 CH - [2015-05-03 09:04:48.396028] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhqoKwxQzZrjHMJTqQAAABY TLSv1.2 ECDHE-RSA-AES256-SHA384 726 4234 -% 1259388 8271 236256 13102 3 0 192.168.121.148 CH - [2015-05-03 09:04:48.542842] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhqoKwxQzZrjHMJTqYAAABk TLSv1.2 ECDHE-RSA-AES256-SHA384 1058 9859 -% 1948260 5515 935650 2647 3 0 192.168.121.148 CH - [2015-05-03 09:04:52.057090] "GET /EMail/inbox.aspx HTTP/1.1" 200 9676 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhqpKwxQzZrjHMJTqgAAABi TLSv1.2 ECDHE-RSA-AES256-SHA384 726 10271 -% 648788 6412 637764 3000 3 0 192.168.121.148 CH - [2015-05-03 09:04:55.629023] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" Vjhqp6wxQzZrjHMJTqkAAABh TLSv1.2 ECDHE-RSA-AES256-SHA384 742 2186 -% 851856 7471 842223 144 3 0 192.168.121.148 CH - [2015-05-03 09:05:10.325158] "GET /EMail/message.aspx?&mailId=3929_87&folderId=3516_10&mailPos=0 HTTP/1.1" 200 17258 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhqtqwxQzZrjHMHdZcAAAAr TLSv1.2 ECDHE-RSA-AES256-SHA384 1074 18202 -% 1913045 10211 856443 41218 3 0 192.168.121.148 CH - [2015-05-03 09:05:15.957414] "GET /EMail/newMessage.aspx?action=reply&mailId=3929_87&folderId=3516_10&showPics=false HTTP/1.1" 200 25169 "https://www.example.com/EMail/message.aspx?&mailId=3929_87&folderId=3516_10&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" Vjhqu6wxQzZrjHMHdZgAAAAp TLSv1.2 ECDHE-RSA-AES256-SHA384 822 26083 -% 1267121 12163 201852 48910 6 3 192.168.121.148 CH - [2015-05-03 09:05:17.301046] "GET /EMail/scripts/tinymce/tinymce.min.js HTTP/1.1" 200 102425 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3929_87&folderId=3516_10&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhqvawxQzZrjHMHdZkAAAAq TLSv1.2 ECDHE-RSA-AES256-SHA384 806 108282 33% 959490 8311 908052 197 3 0 192.168.121.148 CH - [2015-05-03 09:05:18.635334] "GET /EMail/scripts/tinymce/langs/de.js HTTP/1.1" 200 2969 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3929_87&folderId=3516_10&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhqvqwxQzZrjHMHdZsAAAAu TLSv1.2 ECDHE-RSA-AES256-SHA384 1106 3877 38% 1157698 4976 149601 193 3 0 192.168.121.148 CH - [2015-05-03 09:05:18.451461] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3929_87&folderId=3516_10&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhqvqwxQzZrjHMHdZoAAAAt TLSv1.2 ECDHE-RSA-AES256-SHA384 790 3434 -% 1351214 5208 335860 8347 3 0 192.168.121.148 CH - [2015-05-03 09:05:18.637085] "GET /EMail/scripts/tinymce/themes/modern/theme.min.js HTTP/1.1" 200 2651 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3929_87&folderId=3516_10&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhqvqwxQzZrjHMJTq8AAABq TLSv1.2 ECDHE-RSA-AES256-SHA384 1122 3557 41% 1300482 4849 293538 137 3 0 192.168.121.148 CH - [2015-05-03 09:05:18.657897] "GET /EMail/scripts/tinymce/plugins/searchreplace/plugin.min.js HTTP/1.1" 200 2586 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3929_87&folderId=3516_10&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhqvqwxQzZrjHMHdZ0AAAAs TLSv1.2 ECDHE-RSA-AES256-SHA384 1138 3493 40% 1280072 5926 272376 104 3 0 192.168.121.148 CH - [2015-05-03 09:05:18.661649] "GET /EMail/scripts/tinymce/plugins/paste/plugin.min.js HTTP/1.1" 200 6239 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3929_87&folderId=3516_10&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhqvqwxQzZrjHMJTrEAAABn TLSv1.2 ECDHE-RSA-AES256-SHA384 1122 7157 40% 1491594 4654 484453 157 3 0 192.168.121.148 CH - [2015-05-03 09:05:18.640437] "GET /EMail/scripts/tinymce/plugins/print/plugin.min.js HTTP/1.1" 200 182 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3929_87&folderId=3516_10&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhqvqwxQzZrjHMJTrAAAABm TLSv1.2 ECDHE-RSA-AES256-SHA384 1122 1008 55% 1518355 4955 511531 163 3 0 192.168.121.148 CH - [2015-05-03 09:05:18.652741] "GET /EMail/scripts/tinymce/plugins/preview/plugin.min.js HTTP/1.1" 200 737 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3929_87&folderId=3516_10&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhqvqwxQzZrjHMHdZwAAAAv TLSv1.2 ECDHE-RSA-AES256-SHA384 1138 1568 51% 1506130 7983 496103 106 3 0 192.168.121.148 CH - [2015-05-03 09:05:18.662817] "GET /EMail/scripts/tinymce/plugins/insertdatetime/plugin.min.js HTTP/1.1" 200 867 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3929_87&folderId=3516_10&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhqvqwxQzZrjHMJTrIAAABv TLSv1.2 ECDHE-RSA-AES256-SHA384 1138 1696 42% 2022851 6868 13255 249 3 0 192.168.121.148 CH - [2015-05-03 09:05:18.666335] "GET /EMail/scripts/tinymce/plugins/visualblocks/plugin.min.js HTTP/1.1" 200 525 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3929_87&folderId=3516_10&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhqvqwxQzZrjHMJTrQAAABs TLSv1.2 ECDHE-RSA-AES256-SHA384 1138 1360 43% 2098864 6932 89782 110 3 0 192.168.121.148 CH - [2015-05-03 09:05:18.665787] "GET /EMail/scripts/tinymce/plugins/charmap/plugin.min.js HTTP/1.1" 200 2698 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3929_87&folderId=3516_10&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhqvqwxQzZrjHMJTrMAAABr TLSv1.2 ECDHE-RSA-AES256-SHA384 1138 3605 38% 2099415 5133 91626 235 3 0 192.168.121.148 CH - [2015-05-03 09:05:19.920084] "GET /EMail/scripts/tinymce/plugins/textcolor/plugin.min.js HTTP/1.1" 200 1647 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3929_87&folderId=3516_10&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" Vjhqv6wxQzZrjHMHdZ8AAAAz TLSv1.2 ECDHE-RSA-AES256-SHA384 1138 2480 44% 934474 4892 927324 203 3 0 192.168.121.148 CH - [2015-05-03 09:05:18.667472] "GET /EMail/scripts/tinymce/plugins/hr/plugin.min.js HTTP/1.1" 200 191 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3929_87&folderId=3516_10&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhqvqwxQzZrjHMJTrUAAABz TLSv1.2 ECDHE-RSA-AES256-SHA384 1122 1024 53% 2228175 5457 220743 186 3 0 192.168.121.148 CH - [2015-05-03 09:05:19.996428] "GET /EMail/scripts/tinymce/plugins/table/plugin.min.js HTTP/1.1" 200 9166 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3929_87&folderId=3516_10&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" Vjhqv6wxQzZrjHMHdaAAAAA2 TLSv1.2 ECDHE-RSA-AES256-SHA384 1122 10170 32% 966979 5882 956790 174 3 0 192.168.121.148 CH - [2015-05-03 09:05:19.248797] "GET /EMail/scripts/tinymce/plugins/anchor/plugin.min.js HTTP/1.1" 200 339 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3929_87&folderId=3516_10&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" Vjhqv6wxQzZrjHMJTrYAAABt TLSv1.2 ECDHE-RSA-AES256-SHA384 1138 1168 63% 1737328 8070 727589 166 3 0 192.168.121.148 CH - [2015-05-03 09:05:18.684101] "GET /EMail/scripts/tinymce/plugins/link/plugin.min.js HTTP/1.1" 200 1835 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3929_87&folderId=3516_10&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhqvqwxQzZrjHMHdZ4AAAAw TLSv1.2 ECDHE-RSA-AES256-SHA384 1122 2672 41% 2338317 4556 331296 200 3 0 192.168.121.148 CH - [2015-05-03 09:05:20.290820] "GET /EMail/scripts/tinymce/plugins/image/plugin.min.js HTTP/1.1" 200 2136 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3929_87&folderId=3516_10&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhqwKwxQzZrjHMJTrkAAAB5 TLSv1.2 ECDHE-RSA-AES256-SHA384 1122 3045 42% 991855 9023 980254 201 3 0 192.168.121.148 CH - [2015-05-03 09:05:20.214741] "GET /EMail/scripts/tinymce/plugins/fullpage/plugin.min.js HTTP/1.1" 200 2325 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3929_87&folderId=3516_10&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhqwKwxQzZrjHMHdaEAAAA3 TLSv1.2 ECDHE-RSA-AES256-SHA384 1138 3237 36% 1240973 8301 229982 220 3 0 192.168.121.148 CH - [2015-05-03 09:05:20.006249] "GET /EMail/scripts/tinymce/plugins/visualchars/plugin.min.js HTTP/1.1" 200 608 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3929_87&folderId=3516_10&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhqwKwxQzZrjHMJTrgAAABw TLSv1.2 ECDHE-RSA-AES256-SHA384 1138 1440 54% 1492814 5074 485994 146 3 0 192.168.121.148 CH - [2015-05-03 09:05:21.775160] "GET /EMail/scripts/tinymce/skins/lightgray/skin.min.css HTTP/1.1" 200 6020 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3929_87&folderId=3516_10&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhqwawxQzZrjHMJTroAAAB3 TLSv1.2 ECDHE-RSA-AES256-SHA384 790 6740 17% 953680 8185 939948 227 3 0 192.168.121.148 CH - [2015-05-03 09:05:21.805726] "GET /EMail/scripts/tinymce/skins/lightgray/content.min.css HTTP/1.1" 200 588 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3929_87&folderId=3516_10&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhqwawxQzZrjHMHdaIAAAA4 TLSv1.2 ECDHE-RSA-AES256-SHA384 790 1231 38% 1119563 7862 108724 221 3 0 192.168.121.148 CH - [2015-05-03 09:05:21.806653] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5888 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3929_87&folderId=3516_10&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhqwawxQzZrjHMJTrsAAAB7 TLSv1.2 ECDHE-RSA-AES256-SHA384 774 9666 -% 1119231 8278 0 0 3 0 192.168.121.148 CH - [2015-05-03 09:05:22.791830] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce-small.eot? HTTP/1.1" 200 10316 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3929_87&folderId=3516_10&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhqwqwxQzZrjHMHdaMAAAA1 TLSv1.2 ECDHE-RSA-AES256-SHA384 822 11012 -% 606753 8073 596148 234 3 0 192.168.121.148 CH - [2015-05-03 09:05:22.793169] "GET /EMail/scripts/tinymce/skins/lightgray/fonts/tinymce.eot? HTTP/1.1" 200 10024 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3929_87&folderId=3516_10&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhqwqwxQzZrjHMJTrwAAAB0 TLSv1.2 ECDHE-RSA-AES256-SHA384 822 10724 -% 856338 7751 846542 168 3 0 192.168.79.137 CH - [2015-05-03 09:05:32.999405] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhqzKwxQzZrjHMJTr8AAABu TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1348 4418 -% 1113059 12745 97987 140 18 0 192.168.79.137 CH - [2015-05-03 09:05:34.155272] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc= HTTP/1.1" 200 3902 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" VjhqzqwxQzZrjHMJTsAAAAB@ TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 572 4324 -% 1026922 5484 12174 8608 0 0 192.168.79.137 CH - [2015-05-03 09:05:38.015237] "GET /EMail/newMessage.aspx?msg=new HTTP/1.1" 200 12065 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeNewMsg" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" Vjhq0qwxQzZrjHMJTsEAAABB TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 534 12546 -% 1036967 3260 3826 27637 3 3 192.168.79.137 CH - [2015-05-03 09:05:39.255000] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2907 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" Vjhq06wxQzZrjHMJTsIAAAB- TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 515 3300 -% 979338 2945 970726 4944 0 0 192.168.79.137 CH - [2015-05-03 09:05:39.658940] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5472 "https://www.example.com/EMail/newMessage.aspx?msg=new" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0" www.example.com 192.168.34.16 443 proxy-server - + "f6af154a.5239e48e35e97" Vjhq06wxQzZrjHMHdaUAAAA7 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 1117 11144 -% 1036976 1871 0 0 0 0 192.168.121.148 CH - [2015-05-03 09:07:02.300728] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3929_87&folderId=3516_10&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhrJqwxQzZrjHMJTswAAABI TLSv1.2 ECDHE-RSA-AES256-SHA384 10391 662 -% 1766766 614750 143034 208 76 0 192.168.121.148 CH - [2015-05-03 09:07:04.103101] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4042 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3929_87&folderId=3516_10&showPics=false" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhrKKwxQzZrjHMJTs0AAABK TLSv1.2 ECDHE-RSA-AES256-SHA384 902 4554 -% 878322 12059 856877 7836 3 0 192.168.121.148 CH - [2015-05-03 09:07:11.644508] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhrL6wxQzZrjHMJTtAAAABO TLSv1.2 ECDHE-RSA-AES256-SHA384 1058 646 -% 1082917 7371 73363 214 3 0 192.168.121.148 CH - [2015-05-03 09:07:12.753751] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhrMKwxQzZrjHMJTtEAAABU TLSv1.2 ECDHE-RSA-AES256-SHA384 726 815 75% 926008 8088 915850 220 3 0 192.168.121.148 CH - [2015-05-03 09:07:14.077684] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "e6854fa5.5238fdaaf049f" VjhrMqwxQzZrjHMJTtMAAABW TLSv1.2 ECDHE-RSA-AES256-SHA384 701 5523 -% 2937 1945 58 150 0 0 192.168.121.148 CH - [2015-05-03 09:07:13.863924] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhrMawxQzZrjHMJTtIAAABM TLSv1.2 ECDHE-RSA-AES256-SHA384 694 373 -% 1200105 8086 189858 285 3 0 192.168.121.148 CH - [2015-05-03 09:07:15.092863] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhrM6wxQzZrjHMJTtQAAABV TLSv1.2 ECDHE-RSA-AES256-SHA384 662 7866 -% 895307 4908 884912 3709 3 0 192.168.121.148 CH - [2015-05-03 09:07:16.126514] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhrNKwxQzZrjHMJTtcAAABZ TLSv1.2 ECDHE-RSA-AES256-SHA384 1138 8053 22% 858372 7527 846233 185 3 0 192.168.121.148 CH - [2015-05-03 09:07:16.064522] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1973 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhrNKwxQzZrjHMJTtUAAABT TLSv1.2 ECDHE-RSA-AES256-SHA384 790 2793 14% 1010617 7729 160 148 3 0 192.168.121.148 CH - [2015-05-03 09:07:16.124830] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhrNKwxQzZrjHMJTtYAAABX TLSv1.2 ECDHE-RSA-AES256-SHA384 1106 2208 22% 1095771 5160 88250 475 3 0 192.168.121.148 CH - [2015-05-03 09:07:16.129651] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhrNKwxQzZrjHMJTtkAAABQ TLSv1.2 ECDHE-RSA-AES256-SHA384 1138 4788 23% 1106820 7443 96847 173 3 0 192.168.121.148 CH - [2015-05-03 09:07:16.129175] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhrNKwxQzZrjHMJTtgAAABS TLSv1.2 ECDHE-RSA-AES256-SHA384 1138 454 -% 1317149 9285 305535 202 3 0 192.168.121.148 CH - [2015-05-03 09:07:16.175630] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhrNKwxQzZrjHMJTtoAAABb TLSv1.2 ECDHE-RSA-AES256-SHA384 1106 928 56% 1286687 10003 275004 145 3 0 192.168.121.148 CH - [2015-05-03 09:07:17.660757] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "89596c31.5238fda47ee64" VjhrNawxQzZrjHMJTtsAAABe TLSv1.2 ECDHE-RSA-AES256-SHA384 838 261 -% 834021 6280 825482 248 3 0 192.168.186.76 CH - [2015-05-03 09:22:27.254329] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" Vjhuw6wxQzZrjHMJT18AAABh TLSv1.2 ECDHE-RSA-AES256-SHA384 1287 13742 -% 1659814 4929 645950 3651 3 0 192.168.186.76 CH - [2015-05-03 09:22:27.177186] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 11980 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" Vjhuw6wxQzZrjHMJT14AAABi TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 16736 -% 1754492 8239 737226 6480 3 0 192.168.186.76 CH - [2015-05-03 09:22:36.656701] "GET /EMail/message.aspx?&mailId=3930_77&folderId=947_65&mailPos=0 HTTP/1.1" 200 16668 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" VjhuzKwxQzZrjHMJT2IAAABl TLSv1.2 ECDHE-RSA-AES256-SHA384 1228 17578 -% 1272747 5274 232135 32622 3 0 192.168.186.76 CH - [2015-05-03 09:22:40.629058] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3930_77&folderId=947_65&attachmentId=3&token=-64003900870977597E18 HTTP/1.1" 200 559692 "https://www.example.com/EMail/message.aspx?&mailId=3930_77&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" Vjhu0KwxQzZrjHMJT2MAAABj TLSv1.2 ECDHE-RSA-AES256-SHA384 806 590221 -% 1322914 10009 61493 184 3 0 192.168.186.76 CH - [2015-05-03 09:23:08.199650] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3930_77&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" Vjhu7KwxQzZrjHMHdeoAAAAE TLSv1.2 ECDHE-RSA-AES256-SHA384 1293 7526 -% 836403 7241 820605 5353 3 0 192.168.186.76 CH - [2015-05-03 09:23:45.530728] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3930_77&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" VjhvEawxQzZrjHMJT20AAABv TLSv1.2 ECDHE-RSA-AES256-SHA384 7618 4545 -% 1523826 325434 177712 210 81 0 192.168.186.76 CH - [2015-05-03 09:23:47.068908] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3930_77&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" VjhvE6wxQzZrjHMJT24AAABs TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 921996 6529 897704 15607 3 0 192.168.186.76 CH - [2015-05-03 09:24:09.552269] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 11979 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" VjhvKawxQzZrjHMHde8AAAAJ TLSv1.2 ECDHE-RSA-AES256-SHA384 1180 12736 -% 1505804 5022 491321 7126 3 0 192.168.186.76 CH - [2015-05-03 09:24:13.237765] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" VjhvLawxQzZrjHMHdfAAAAAK TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1433882 11957 417928 295 3 0 192.168.186.76 CH - [2015-05-03 09:24:14.695508] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 10776 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" VjhvLqwxQzZrjHMHdfEAAAAL TLSv1.2 ECDHE-RSA-AES256-SHA384 726 11375 -% 1245240 4774 232806 5490 3 0 192.168.186.76 CH - [2015-05-03 09:24:17.177624] "GET /EMail/message.aspx?&mailId=3931_42&folderId=947_65&mailPos=0 HTTP/1.1" 200 17865 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" VjhvMawxQzZrjHMHdfIAAAAM TLSv1.2 ECDHE-RSA-AES256-SHA384 726 18617 -% 1039622 8665 986388 39828 3 0 192.168.186.76 CH - [2015-05-03 09:27:04.153495] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3931_42&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" Vjhv2KwxQzZrjHMHdgEAAAAc TLSv1.2 ECDHE-RSA-AES256-SHA384 9250 4545 -% 1674444 507700 146341 203 86 0 192.168.186.76 CH - [2015-05-03 09:27:05.850638] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3931_42&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" Vjhv2awxQzZrjHMHdgIAAAAd TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 899166 9557 881069 6960 3 0 192.168.186.76 CH - [2015-05-03 09:27:21.937988] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" Vjhv6awxQzZrjHMHdgYAAAAh TLSv1.2 ECDHE-RSA-AES256-SHA384 1186 9827 -% 1057030 17501 29337 4689 3 0 192.168.186.76 CH - [2015-05-03 09:27:21.854091] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 10775 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" Vjhv6awxQzZrjHMJT4gAAABP TLSv1.2 ECDHE-RSA-AES256-SHA384 1255 15536 -% 1181983 6556 168324 4568 3 0 192.168.186.76 CH - [2015-05-03 09:27:24.992376] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" Vjhv7KwxQzZrjHMJT4kAAABK TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1243198 15855 225269 182 3 0 192.168.186.76 CH - [2015-05-03 09:27:26.247808] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 9506 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" Vjhv7qwxQzZrjHMJT4oAAABJ TLSv1.2 ECDHE-RSA-AES256-SHA384 726 10111 -% 1174771 7521 161800 3704 3 0 192.168.186.76 CH - [2015-05-03 09:27:28.637951] "GET /EMail/message.aspx?&mailId=3931_41&folderId=947_65&mailPos=0 HTTP/1.1" 200 15379 "https://www.example.com/EMail/inbox.aspx?returnedFromDelete=true" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" Vjhv8KwxQzZrjHMJT4wAAABO TLSv1.2 ECDHE-RSA-AES256-SHA384 726 16052 -% 1387514 6106 345381 33768 3 0 192.168.186.76 CH - [2015-05-03 09:27:38.353957] "GET /EMail/newMessage.aspx?action=reply&mailId=3931_41&folderId=947_65&showPics=false HTTP/1.1" 200 22181 "https://www.example.com/EMail/message.aspx?&mailId=3931_41&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" Vjhv@qwxQzZrjHMHdgcAAAAk TLSv1.2 ECDHE-RSA-AES256-SHA384 1266 23183 -% 1315713 6690 233433 46538 6 3 192.168.186.76 CH - [2015-05-03 09:27:40.036349] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5880 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3931_41&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" Vjhv-KwxQzZrjHMHdggAAAAj TLSv1.2 ECDHE-RSA-AES256-SHA384 710 9666 -% 992608 6957 0 0 3 0 192.168.96.45 CH - [2015-05-03 09:29:07.268827] "GET /EMail/scripts/variables_de.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "458e740a.5239eafdbf16c" VjhwU6wxQzZrjHMJT5wAAABc TLSv1 AES256-SHA 1125 3700 -% 1205400 3792 200573 182 0 0 192.168.96.45 CH - [2015-05-03 09:29:07.268702] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "458e740a.5239eafdbf16c" VjhwU6wxQzZrjHMJT5sAAABh TLSv1 AES256-SHA 1125 3700 -% 1215307 3341 211115 127 0 0 192.168.96.45 CH - [2015-05-03 09:29:07.269030] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "458e740a.5239eafdbf16c" VjhwU6wxQzZrjHMJT50AAABk TLSv1 AES256-SHA 1093 3700 -% 1222370 3534 218025 134 0 0 192.168.96.45 CH - [2015-05-03 09:29:07.287036] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "458e740a.5239eafdbf16c" VjhwU6wxQzZrjHMJT54AAABi TLSv1 AES256-SHA 1093 3700 -% 1239065 3124 235177 104 0 0 192.168.96.45 CH - [2015-05-03 09:29:08.616123] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "458e740a.5239eafdbf16c" VjhwVKwxQzZrjHMJT6AAAABl TLSv1 AES256-SHA 582 213 -% 914015 3136 909804 191 0 0 192.168.96.45 CH - [2015-05-03 09:29:08.619203] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "458e740a.5239eafdbf16c" VjhwVKwxQzZrjHMJT6EAAABj TLSv1 AES256-SHA 726 213 -% 1015082 2837 11510 149 0 0 192.168.96.45 CH - [2015-05-03 09:29:13.113475] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "458e740a.5239eafdbf16c" VjhwWawxQzZrjHMJT6MAAABo TLSv1 AES256-SHA 630 453 -% 750694 4894 744845 223 0 0 192.168.96.45 CH - [2015-05-03 09:29:13.891176] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7539 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "458e740a.5239eafdbf16c" VjhwWawxQzZrjHMJT6QAAABy TLSv1 AES256-SHA 646 7978 -% 857695 3962 832593 20142 0 0 192.168.96.45 CH - [2015-05-03 09:29:23.556664] "GET /EMail/main.aspx HTTP/1.1" 200 3398 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "458e740a.5239eafdbf16c" VjhwY6wxQzZrjHMJT6YAAABx TLSv1 AES256-SHA 1005 7301 -% 927806 2336 923059 1861 0 0 192.168.96.45 CH - [2015-05-03 09:29:24.657904] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "458e740a.5239eafdbf16c" VjhwZKwxQzZrjHMJT6cAAABm TLSv1 AES256-SHA 973 7637 -% 903743 2833 888584 11433 0 0 192.168.96.45 CH - [2015-05-03 09:29:24.660650] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "458e740a.5239eafdbf16c" VjhwZKwxQzZrjHMJT6gAAAB1 TLSv1 AES256-SHA 1005 12717 -% 2379988 3784 366297 5942 0 0 192.168.96.45 CH - [2015-05-03 09:29:27.219452] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 304 - "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "458e740a.5239eafdbf16c" VjhwZ6wxQzZrjHMJT6kAAABr TLSv1 AES256-SHA 1133 3696 -% 662257 2156 659344 154 0 0 192.168.96.45 CH - [2015-05-03 09:29:28.463302] "GET /EMail/images/Highost.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "458e740a.5239eafdbf16c" VjhwaKwxQzZrjHMHdhAAAAAu TLSv1 AES256-SHA 1085 3696 -% 763009 2278 759810 248 0 0 192.168.96.45 CH - [2015-05-03 09:29:30.709999] "GET /EMail/message.aspx?&mailId=3931_32&folderId=1157_50&mailPos=0 HTTP/1.1" 200 11364 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "458e740a.5239eafdbf16c" VjhwaqwxQzZrjHMJT6sAAABt TLSv1 AES256-SHA 1021 15359 -% 1199315 6230 165231 26344 0 0 192.168.212.3 CH - [2015-05-03 09:29:31.700495] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7383 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjhwa6wxQzZrjHMJT6wAAAB5 TLSv1 ECDHE-RSA-AES256-SHA 704 11809 -% 923121 2529 915849 3902 0 0 192.168.212.3 CH - [2015-05-03 09:29:32.816665] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhwbKwxQzZrjHMJT60AAAB7 TLSv1 ECDHE-RSA-AES256-SHA 662 213 -% 942092 3701 937667 157 0 0 192.168.212.3 CH - [2015-05-03 09:29:32.842409] "GET /EMail/scripts/variables_de.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhwbKwxQzZrjHMHdhEAAAAy TLSv1 ECDHE-RSA-AES256-SHA 901 358 -% 916757 2942 913077 100 0 0 192.168.212.3 CH - [2015-05-03 09:29:32.854764] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhwbKwxQzZrjHMJT64AAAB3 TLSv1 ECDHE-RSA-AES256-SHA 869 358 -% 1173417 1857 170920 164 0 0 192.168.212.3 CH - [2015-05-03 09:29:32.849793] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhwbKwxQzZrjHMHdhMAAAAx TLSv1 ECDHE-RSA-AES256-SHA 869 358 -% 1280925 2989 277201 152 0 0 192.168.212.3 CH - [2015-05-03 09:29:32.842570] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhwbKwxQzZrjHMHdhIAAAA0 TLSv1 ECDHE-RSA-AES256-SHA 901 358 -% 1288423 2882 284867 102 0 0 192.168.212.3 CH - [2015-05-03 09:29:32.922808] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhwbKwxQzZrjHMHdhQAAAAs TLSv1 ECDHE-RSA-AES256-SHA 885 358 -% 1209377 3711 204893 102 0 0 192.168.212.3 CH - [2015-05-03 09:29:34.253780] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhwbqwxQzZrjHMHdhUAAAAv TLSv1 ECDHE-RSA-AES256-SHA 694 213 -% 1058052 3134 54145 173 0 0 192.168.212.3 CH - [2015-05-03 09:29:35.148963] "GET /EMail/images/active.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjhwb6wxQzZrjHMHdhYAAAAz TLSv1 ECDHE-RSA-AES256-SHA 694 213 -% 940317 3768 935529 149 0 0 192.168.212.3 CH - [2015-05-03 09:29:36.288464] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "de3096a5.5239eb1ad62d0" VjhwcKwxQzZrjHMJT68AAAB0 TLSv1 ECDHE-RSA-AES256-SHA 736 5569 -% 879504 2499 874921 227 3 0 192.168.212.3 CH - [2015-05-03 09:29:43.498347] "GET /EMail/main.aspx HTTP/1.1" 200 3415 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjhwd6wxQzZrjHMJT7EAAAB9 TLSv1 ECDHE-RSA-AES256-SHA 872 7670 -% 893866 3278 888431 1187 0 0 192.168.212.3 CH - [2015-05-03 09:29:44.697468] "GET /EMail/overview.aspx HTTP/1.1" 200 6450 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhweKwxQzZrjHMHdhgAAAAw TLSv1 ECDHE-RSA-AES256-SHA 840 10726 -% 1106789 3198 99889 2783 0 0 192.168.212.3 CH - [2015-05-03 09:29:46.099657] "GET /EMail/images/certificate.png HTTP/1.1" 304 - "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhweqwxQzZrjHMJT7IAAAB@ TLSv1 ECDHE-RSA-AES256-SHA 952 4049 -% 896829 2049 894009 197 0 0 192.168.212.3 CH - [2015-05-03 09:29:47.858312] "GET /EMail/inbox.aspx HTTP/1.1" 200 53250 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjhwe6wxQzZrjHMHdhkAAAA4 TLSv1 ECDHE-RSA-AES256-SHA 840 57853 -% 2505580 2113 995169 27810 0 0 192.168.96.45 CH - [2015-05-03 09:29:49.360523] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3931_32&folderId=1157_50&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "458e740a.5239eafdbf16c" VjhwfawxQzZrjHMJT7MAAABD TLSv1 AES256-SHA 1085 3840 -% 1153630 4697 148266 153 0 0 192.168.212.3 CH - [2015-05-03 09:29:50.600256] "GET /EMail/images/msgClosed.png HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhwfqwxQzZrjHMJT7UAAAB- TLSv1 ECDHE-RSA-AES256-SHA 952 4049 -% 1031387 3416 27108 211 0 0 192.168.186.76 CH - [2015-05-03 09:29:52.819935] "GET /EMail/newMessage.aspx?action=reply&mailId=3931_40&folderId=947_65&showPics=false HTTP/1.1" 200 25748 "https://www.example.com/EMail/message.aspx?&mailId=3931_40&folderId=947_65&mailPos=0" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" VjhwgKwxQzZrjHMJT7YAAAB2 TLSv1.2 ECDHE-RSA-AES256-SHA384 1341 30735 -% 1364306 5398 291678 61711 6 3 192.168.212.3 CH - [2015-05-03 09:29:53.854055] "GET /EMail/message.aspx?&mailId=3929_98&folderId=1001_9&mailPos=0 HTTP/1.1" 200 11365 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhwgawxQzZrjHMHdhsAAAA7 TLSv1 ECDHE-RSA-AES256-SHA 872 15675 -% 1331364 3488 297229 29733 0 0 192.168.186.76 CH - [2015-05-03 09:29:54.298251] "GET /EMail/checkRecAvail.aspx HTTP/1.1" 200 2955 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3931_40&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" VjhwgqwxQzZrjHMJT7cAAABA TLSv1.2 ECDHE-RSA-AES256-SHA384 726 3434 -% 1044691 5238 29019 8555 3 0 192.168.186.76 CH - [2015-05-03 09:29:54.503549] "GET /EMail/css/editor_content.css HTTP/1.1" 404 5880 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3931_40&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" VjhwgqwxQzZrjHMJT7gAAABG TLSv1.2 ECDHE-RSA-AES256-SHA384 1202 9827 -% 998156 4307 0 0 3 0 192.168.212.3 CH - [2015-05-03 09:29:56.950595] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3929_98&folderId=1001_9&attachmentId=2&token=-68911316159836047E18 HTTP/1.1" 200 54209 "https://www.example.com/EMail/message.aspx?&mailId=3929_98&folderId=1001_9&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhwhKwxQzZrjHMHdhwAAAA8 TLSv1 ECDHE-RSA-AES256-SHA 984 59696 -% 1047330 4172 21600 263 0 0 192.168.96.45 CH - [2015-05-03 09:30:03.153631] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3930_71&folderId=1157_50&attachmentId=2&token=-46749296581279549E18 HTTP/1.1" 200 54755 "https://www.example.com/EMail/message.aspx?&mailId=3930_71&folderId=1157_50&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "458e740a.5239eafdbf16c" Vjhwi6wxQzZrjHMJT7oAAABE TLSv1 AES256-SHA 1133 59866 -% 1071908 4836 55383 209 0 0 192.168.96.45 CH - [2015-05-03 09:30:16.035591] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3930_71&folderId=1157_50&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "458e740a.5239eafdbf16c" VjhwmKwxQzZrjHMJT7wAAABK TLSv1 AES256-SHA 1085 3840 -% 1200029 4398 194748 215 0 0 192.168.96.45 CH - [2015-05-03 09:30:17.356082] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 11196 "https://www.example.com/EMail/message.aspx?&mailId=3930_71&folderId=1157_50&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "458e740a.5239eafdbf16c" VjhwmawxQzZrjHMJT70AAABJ TLSv1 AES256-SHA 1053 15162 -% 1154781 4883 145319 3717 0 0 192.168.96.45 CH - [2015-05-03 09:30:36.852668] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 9895 "https://www.example.com/EMail/message.aspx?&mailId=3930_70&folderId=1157_50&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "458e740a.5239eafdbf16c" VjhwrKwxQzZrjHMHdiIAAAAE TLSv1 AES256-SHA 1053 13850 -% 1342123 2440 335492 3483 0 0 192.168.96.45 CH - [2015-05-03 09:30:42.856894] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3931_29&folderId=1157_50&attachmentId=2&token=-41192461225593252E18 HTTP/1.1" 200 54735 "https://www.example.com/EMail/message.aspx?&mailId=3931_29&folderId=1157_50&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "458e740a.5239eafdbf16c" VjhwsqwxQzZrjHMJT8EAAABV TLSv1 AES256-SHA 1133 59871 -% 1093151 7581 64075 222 0 0 192.168.96.45 CH - [2015-05-03 09:30:55.263940] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3931_29&folderId=1157_50&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "458e740a.5239eafdbf16c" Vjhwv6wxQzZrjHMJT8IAAABT TLSv1 AES256-SHA 1085 3840 -% 1207923 6666 200338 216 0 0 192.168.96.45 CH - [2015-05-03 09:30:56.611605] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 8593 "https://www.example.com/EMail/message.aspx?&mailId=3931_29&folderId=1157_50&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "458e740a.5239eafdbf16c" VjhwwKwxQzZrjHMJT8MAAABQ TLSv1 AES256-SHA 1053 12554 -% 1041220 4664 31170 4449 0 0 192.168.212.3 CH - [2015-05-03 09:31:07.439336] "GET /EMail/message.aspx?&mailId=3930_59&folderId=1001_9&mailPos=1 HTTP/1.1" 200 11496 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjhwy6wxQzZrjHMJT8YAAABg TLSv1 ECDHE-RSA-AES256-SHA 888 15840 -% 1398803 3124 371186 23664 0 0 192.168.212.3 CH - [2015-05-03 09:31:11.306609] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3930_59&folderId=1001_9&attachmentId=2&token=-56564211200131041E18 HTTP/1.1" 200 59406 "https://www.example.com/EMail/message.aspx?&mailId=3930_59&folderId=1001_9&mailPos=1" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjhwz6wxQzZrjHMJT8gAAABd TLSv1 ECDHE-RSA-AES256-SHA 984 65102 -% 1334355 4076 306550 214 0 0 192.168.96.45 CH - [2015-05-03 09:31:15.355423] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3931_27&folderId=1157_50&mailPos=0" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "458e740a.5239eafdbf16c" Vjhw06wxQzZrjHMJT8kAAABh TLSv1 AES256-SHA 1085 3840 -% 1370333 6818 362595 201 0 0 192.168.212.3 CH - [2015-05-03 09:31:17.933891] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjhw1awxQzZrjHMJT8oAAABi TLSv1 ECDHE-RSA-AES256-SHA 773 9379 -% 1684868 5098 672782 3113 0 0 192.168.212.3 CH - [2015-05-03 09:31:46.004391] "GET /EMail/message.aspx?&mailId=3930_56&folderId=1001_9&mailPos=2 HTTP/1.1" 200 11495 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjhw8qwxQzZrjHMJT84AAABp TLSv1 ECDHE-RSA-AES256-SHA 888 15803 -% 1372288 3812 342086 25634 0 0 192.168.212.3 CH - [2015-05-03 09:31:48.819606] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3930_56&folderId=1001_9&attachmentId=2&token=-49652794408497019E18 HTTP/1.1" 200 55201 "https://www.example.com/EMail/message.aspx?&mailId=3930_56&folderId=1001_9&mailPos=2" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjhw9KwxQzZrjHMJT88AAABy TLSv1 ECDHE-RSA-AES256-SHA 984 60688 -% 1116641 4082 90537 237 0 0 192.168.212.3 CH - [2015-05-03 09:31:54.355955] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 53226 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjhw@qwxQzZrjHMHdisAAAAQ TLSv1 ECDHE-RSA-AES256-SHA 840 57821 -% 2650036 3936 129758 18344 0 0 192.168.212.3 CH - [2015-05-03 09:32:15.502952] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3929_95&folderId=1001_9&attachmentId=2&token=-28079314942718904E18 HTTP/1.1" 200 54551 "https://www.example.com/EMail/message.aspx?&mailId=3929_95&folderId=1001_9&mailPos=3" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhxD6wxQzZrjHMJT9UAAABs TLSv1 ECDHE-RSA-AES256-SHA 984 60032 -% 1172013 5417 145135 213 0 0 192.168.212.3 CH - [2015-05-03 09:32:20.901779] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhxFKwxQzZrjHMHdi4AAAAT TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1733064 3710 720381 4781 0 0 192.168.212.3 CH - [2015-05-03 09:32:20.904294] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 53217 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhxFKwxQzZrjHMHdi8AAAAP TLSv1 ECDHE-RSA-AES256-SHA 840 57821 -% 2738737 2372 985483 18788 0 0 192.168.212.3 CH - [2015-05-03 09:32:50.760859] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhxMqwxQzZrjHMHdjAAAAAW TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1613685 3007 604138 2817 0 0 192.168.212.3 CH - [2015-05-03 09:32:50.758294] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 53210 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhxMqwxQzZrjHMJT9sAAAB7 TLSv1 ECDHE-RSA-AES256-SHA 840 57805 -% 2572912 2286 74722 21215 0 0 192.168.212.3 CH - [2015-05-03 09:33:14.604164] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3930_50&folderId=1001_9&attachmentId=2&token=-57386348885163008E18 HTTP/1.1" 200 56178 "https://www.example.com/EMail/message.aspx?&mailId=3930_50&folderId=1001_9&mailPos=5" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhxSqwxQzZrjHMJT@EAAABB TLSv1 ECDHE-RSA-AES256-SHA 984 61759 -% 1122149 6347 93524 200 0 0 192.168.212.3 CH - [2015-05-03 09:33:18.405576] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhxTqwxQzZrjHMHdjIAAAAZ TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1737987 4083 726724 2755 0 0 192.168.212.3 CH - [2015-05-03 09:33:46.462209] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3929_89&folderId=1001_9&attachmentId=2&token=-196610548875697613E18 HTTP/1.1" 200 60249 "https://www.example.com/EMail/message.aspx?&mailId=3929_89&folderId=1001_9&mailPos=6" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhxaqwxQzZrjHMJT@gAAABG TLSv1 ECDHE-RSA-AES256-SHA 984 65934 -% 1177421 6438 146857 193 0 0 192.168.212.3 CH - [2015-05-03 09:33:50.652913] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhxbqwxQzZrjHMJT@oAAABN TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 2065435 4391 47627 4928 0 0 192.168.212.3 CH - [2015-05-03 09:33:50.652558] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 53194 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhxbqwxQzZrjHMJT@kAAABH TLSv1 ECDHE-RSA-AES256-SHA 840 57789 -% 2638628 4231 101984 28886 0 0 192.168.212.3 CH - [2015-05-03 09:34:20.458590] "GET /EMail/message.aspx?&mailId=3929_86&folderId=1001_9&mailPos=7 HTTP/1.1" 200 11495 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhxjKwxQzZrjHMJT-AAAABO TLSv1 ECDHE-RSA-AES256-SHA 888 15840 -% 1290817 3388 261332 24930 0 0 192.168.240.137 CH - [2015-05-03 09:36:43.510256] "GET /EMail/main.aspx HTTP/1.1" 200 7349 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ab17cd5f.5239ecb2445f0" VjhyG6wxQzZrjHMJUAEAAABf TLSv1.2 ECDHE-RSA-AES128-SHA256 632 8187 -% 962082 703 957877 2937 0 0 192.168.240.137 CH - [2015-05-03 09:36:44.494960] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ab17cd5f.5239ecb2445f0" VjhyHKwxQzZrjHMJUAIAAABp TLSv1.2 ECDHE-RSA-AES128-SHA256 454 2527 14% 852721 2068 849215 316 0 0 192.168.240.137 CH - [2015-05-03 09:36:44.532832] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ab17cd5f.5239ecb2445f0" VjhyHKwxQzZrjHMHdkIAAAAp TLSv1.2 ECDHE-RSA-AES128-SHA256 744 2144 22% 974720 3144 970111 226 0 0 192.168.240.137 CH - [2015-05-03 09:36:44.542405] "GET /EMail/images/logo.gif HTTP/1.1" 200 1271 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ab17cd5f.5239ecb2445f0" VjhyHKwxQzZrjHMJUAUAAABq TLSv1.2 ECDHE-RSA-AES128-SHA256 776 1931 -% 972775 2458 969576 108 0 0 192.168.240.137 CH - [2015-05-03 09:36:44.533990] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ab17cd5f.5239ecb2445f0" VjhyHKwxQzZrjHMHdkMAAAAq TLSv1.2 ECDHE-RSA-AES128-SHA256 744 864 56% 998558 2643 995216 87 0 0 192.168.240.137 CH - [2015-05-03 09:36:44.536155] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7239 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ab17cd5f.5239ecb2445f0" VjhyHKwxQzZrjHMJUAMAAABo TLSv1.2 ECDHE-RSA-AES128-SHA256 776 8621 22% 1193173 2848 186373 206 0 0 192.168.240.137 CH - [2015-05-03 09:36:44.537838] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3600 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ab17cd5f.5239ecb2445f0" VjhyHKwxQzZrjHMJUAQAAABy TLSv1.2 ECDHE-RSA-AES128-SHA256 776 4660 23% 1240974 1746 237682 175 0 0 192.168.240.137 CH - [2015-05-03 09:36:45.842419] "GET /EMail/images/inactive.gif HTTP/1.1" 200 1378 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ab17cd5f.5239ecb2445f0" VjhyHawxQzZrjHMJUAcAAABn TLSv1.2 ECDHE-RSA-AES128-SHA256 502 1866 -% 734007 2008 731097 230 0 0 192.168.240.137 CH - [2015-05-03 09:36:46.599799] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ab17cd5f.5239ecb2445f0" VjhyHqwxQzZrjHMJUAkAAABv TLSv1.2 ECDHE-RSA-AES128-SHA256 374 1626 -% 977071 4087 972113 154 0 0 192.168.240.137 CH - [2015-05-03 09:37:10.978470] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ab17cd5f.5239ecb2445f0" VjhyNqwxQzZrjHMJUA0AAABz TLSv1.2 ECDHE-RSA-AES128-SHA256 936 630 -% 987851 5656 981202 223 0 0 192.168.240.137 CH - [2015-05-03 09:37:11.976387] "GET /EMail/main.aspx HTTP/1.1" 200 3406 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ab17cd5f.5239ecb2445f0" VjhyN6wxQzZrjHMJUA4AAAB4 TLSv1.2 ECDHE-RSA-AES128-SHA256 502 3882 -% 822764 3103 816960 1901 0 0 192.168.240.137 CH - [2015-05-03 09:37:12.853529] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ab17cd5f.5239ecb2445f0" VjhyOKwxQzZrjHMJUA8AAABt TLSv1.2 ECDHE-RSA-AES128-SHA256 470 4202 -% 756677 3066 744827 8049 0 0 192.168.240.137 CH - [2015-05-03 09:37:12.888569] "GET /EMail/overview.aspx HTTP/1.1" 200 5302 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ab17cd5f.5239ecb2445f0" VjhyOKwxQzZrjHMJUBAAAABw TLSv1.2 ECDHE-RSA-AES128-SHA256 760 5963 -% 1314966 1773 310897 1791 0 0 192.168.240.137 CH - [2015-05-03 09:37:12.885949] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ab17cd5f.5239ecb2445f0" VjhyOKwxQzZrjHMHdkUAAAAt TLSv1.2 ECDHE-RSA-AES128-SHA256 792 9683 -% 1645544 2758 634199 4482 0 0 192.168.240.137 CH - [2015-05-03 09:37:14.234604] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ab17cd5f.5239ecb2445f0" VjhyOqwxQzZrjHMJUBEAAAB5 TLSv1.2 ECDHE-RSA-AES128-SHA256 502 1322 -% 834204 2238 831117 396 0 0 192.168.240.137 CH - [2015-05-03 09:37:14.548286] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ab17cd5f.5239ecb2445f0" VjhyOqwxQzZrjHMHdkYAAAAy TLSv1.2 ECDHE-RSA-AES128-SHA256 550 1338 -% 694743 2729 691166 153 0 0 192.168.240.137 CH - [2015-05-03 09:37:15.652024] "GET /EMail/inbox.aspx HTTP/1.1" 200 8714 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ab17cd5f.5239ecb2445f0" VjhyO6wxQzZrjHMHdkcAAAAx TLSv1.2 ECDHE-RSA-AES128-SHA256 470 9263 -% 1090626 3521 83701 2563 0 0 192.168.240.137 CH - [2015-05-03 09:37:16.762683] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ab17cd5f.5239ecb2445f0" VjhyPKwxQzZrjHMJUBQAAAB0 TLSv1.2 ECDHE-RSA-AES128-SHA256 502 1882 -% 831319 1886 828598 153 0 0 192.168.240.137 CH - [2015-05-03 09:37:16.761521] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ab17cd5f.5239ecb2445f0" VjhyPKwxQzZrjHMHdkkAAAAs TLSv1.2 ECDHE-RSA-AES128-SHA256 502 602 -% 1048642 2236 45422 243 0 0 192.168.240.137 CH - [2015-05-03 09:37:16.762414] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ab17cd5f.5239ecb2445f0" VjhyPKwxQzZrjHMJUBMAAAB7 TLSv1.2 ECDHE-RSA-AES128-SHA256 502 602 -% 1100280 1782 97850 146 0 0 192.168.240.137 CH - [2015-05-03 09:37:18.823345] "GET /EMail/message.aspx?&mailId=3929_79&folderId=3251_8&mailPos=0 HTTP/1.1" 200 11202 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ab17cd5f.5239ecb2445f0" VjhyPqwxQzZrjHMJUBUAAAB8 TLSv1.2 ECDHE-RSA-AES128-SHA256 518 11812 -% 1312271 2993 282718 25498 0 0 192.168.240.137 CH - [2015-05-03 09:37:22.137749] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3929_79&folderId=3251_8&attachmentId=2&token=-5152339271998763E18 HTTP/1.1" 200 48562 "https://www.example.com/EMail/message.aspx?&mailId=3929_79&folderId=3251_8&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ab17cd5f.5239ecb2445f0" VjhyQqwxQzZrjHMJUBYAAAB9 TLSv1.2 ECDHE-RSA-AES128-SHA256 630 51109 -% 1568852 6336 543354 260 0 0 192.168.186.76 CH - [2015-05-03 09:37:23.686671] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3931_40&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" VjhyQ6wxQzZrjHMHdkoAAAAv TLSv1.2 ECDHE-RSA-AES256-SHA384 11388 4545 -% 2308944 632499 0 204 81 0 192.168.186.76 CH - [2015-05-03 09:37:26.022242] "GET /EMail/confirmMailSent.aspx?quotaExceeded=false&to=john.smith@ourindustry.com&cc=&bcc=&responsePage=true HTTP/1.1" 200 4039 "https://www.example.com/EMail/newMessage.aspx?action=reply&mailId=3931_40&folderId=947_65&showPics=false" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" VjhyRqwxQzZrjHMHdkwAAAA2 TLSv1.2 ECDHE-RSA-AES256-SHA384 838 4554 -% 856492 8917 834380 11128 3 0 192.168.186.76 CH - [2015-05-03 09:37:34.878534] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" VjhyTqwxQzZrjHMHdk4AAAA3 TLSv1.2 ECDHE-RSA-AES256-SHA384 1212 9827 -% 1657015 7302 641641 2783 3 0 192.168.186.76 CH - [2015-05-03 09:37:38.078770] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" VjhyUqwxQzZrjHMHdlEAAAA6 TLSv1.2 ECDHE-RSA-AES256-SHA384 966 405 -% 1186433 13589 170212 253 3 0 192.168.186.76 CH - [2015-05-03 09:37:39.297280] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7291 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "1e86a579.5239ce427c4e0" VjhyU6wxQzZrjHMHdlIAAAA7 TLSv1.2 ECDHE-RSA-AES256-SHA384 726 7802 -% 800133 4927 791506 2287 3 0 192.168.240.137 CH - [2015-05-03 09:37:41.653553] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ab17cd5f.5239ecb2445f0" VjhyVawxQzZrjHMJUBcAAABu TLSv1.2 ECDHE-RSA-AES128-SHA256 792 2331 -% 1067133 3220 62935 235 0 0 192.168.240.137 CH - [2015-05-03 09:37:42.628630] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/message.aspx?&mailId=3929_79&folderId=3251_8&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ab17cd5f.5239ecb2445f0" VjhyVqwxQzZrjHMJUBgAAAB@ TLSv1.2 ECDHE-RSA-AES128-SHA256 1016 566 -% 1240277 7269 231992 156 0 0 192.168.240.137 CH - [2015-05-03 09:37:43.877922] "GET /EMail/inbox.aspx?returnedFromDelete=true HTTP/1.1" 200 7292 "https://www.example.com/EMail/message.aspx?&mailId=3929_79&folderId=3251_8&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "ab17cd5f.5239ecb2445f0" VjhyV6wxQzZrjHMJUBkAAABB TLSv1.2 ECDHE-RSA-AES128-SHA256 566 7770 -% 1017552 3208 9983 3769 0 0 192.168.240.137 CH - [2015-05-03 09:37:46.302333] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - X "ab17cd5f.5239ecb2445f0" VjhyWqwxQzZrjHMJUBsAAABC TLSv1.2 ECDHE-RSA-AES128-SHA256 502 0 -% 1225593 3075 221482 259 0 0 192.168.194.238 CH - [2015-05-03 09:37:54.203379] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7370 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "50412823.5239ecf5af6f3" VjhyYqwxQzZrjHMJUCAAAAB2 TLSv1 ECDHE-RSA-AES256-SHA 711 11793 -% 944407 1893 939611 2233 0 0 192.168.194.238 CH - [2015-05-03 09:37:55.224159] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "50412823.5239ecf5af6f3" VjhyY6wxQzZrjHMJUCEAAABG TLSv1 ECDHE-RSA-AES256-SHA 699 2431 14% 885818 2965 881475 157 0 0 192.168.194.238 CH - [2015-05-03 09:37:55.236748] "GET /EMail/css/basic.css HTTP/1.1" 200 1382 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "50412823.5239ecf5af6f3" VjhyY6wxQzZrjHMJUCIAAABF TLSv1 ECDHE-RSA-AES256-SHA 908 2032 22% 1059076 1839 56227 170 0 0 192.168.194.238 CH - [2015-05-03 09:37:55.240735] "GET /EMail/scripts/variables_de.js HTTP/1.1" 200 3565 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "50412823.5239ecf5af6f3" VjhyY6wxQzZrjHMJUCQAAABN TLSv1 ECDHE-RSA-AES256-SHA 908 4245 23% 1252100 1698 248786 324 0 0 192.168.194.238 CH - [2015-05-03 09:37:55.236957] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "50412823.5239ecf5af6f3" VjhyY6wxQzZrjHMJUCMAAABI TLSv1 ECDHE-RSA-AES256-SHA 908 7813 22% 1310235 1752 306120 139 0 0 192.168.194.238 CH - [2015-05-03 09:37:56.120231] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "50412823.5239ecf5af6f3" VjhyZKwxQzZrjHMJUCUAAABE TLSv1 ECDHE-RSA-AES256-SHA 683 607 56% 558705 2451 555502 154 0 0 192.168.194.238 CH - [2015-05-03 09:37:56.953946] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "50412823.5239ecf5af6f3" VjhyZKwxQzZrjHMJUCgAAABK TLSv1 ECDHE-RSA-AES256-SHA 699 213 -% 663664 3110 659737 156 0 0 192.168.194.238 CH - [2015-05-03 09:37:56.856628] "GET /EMail/scripts/csshover.htc HTTP/1.1" 304 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "50412823.5239ecf5af6f3" VjhyZKwxQzZrjHMJUCcAAABP TLSv1 ECDHE-RSA-AES256-SHA 587 213 -% 843627 2804 839950 190 0 0 192.168.194.238 CH - [2015-05-03 09:37:56.851066] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "50412823.5239ecf5af6f3" VjhyZKwxQzZrjHMJUCYAAABH TLSv1 ECDHE-RSA-AES256-SHA 683 213 -% 949414 3269 945164 358 0 0 192.168.194.238 CH - [2015-05-03 09:38:05.047968] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "50412823.5239ecf5af6f3" VjhybawxQzZrjHMJUCoAAABJ TLSv1 ECDHE-RSA-AES256-SHA 1148 566 -% 1056349 4106 51383 216 0 0 192.168.194.238 CH - [2015-05-03 09:38:06.111629] "GET /EMail/main.aspx HTTP/1.1" 200 3402 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "50412823.5239ecf5af6f3" VjhybqwxQzZrjHMJUCsAAABU TLSv1 ECDHE-RSA-AES256-SHA 811 3818 -% 1353818 2140 349390 1699 0 0 192.168.194.238 CH - [2015-05-03 09:38:07.544017] "GET /EMail/host.aspx HTTP/1.1" 200 3719 "https://www.example.com/EMail/main.aspx" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "50412823.5239ecf5af6f3" Vjhyb6wxQzZrjHMJUC0AAABW TLSv1 ECDHE-RSA-AES256-SHA 747 4154 -% 969095 3261 956953 8125 0 0 192.168.194.238 CH - [2015-05-03 09:38:07.558182] "GET /EMail/overview.aspx HTTP/1.1" 200 5302 "https://www.example.com/EMail/main.aspx" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "50412823.5239ecf5af6f3" Vjhyb6wxQzZrjHMJUC8AAABV TLSv1 ECDHE-RSA-AES256-SHA 956 5883 -% 1582699 2768 575946 3088 0 0 192.168.194.238 CH - [2015-05-03 09:38:07.557420] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "50412823.5239ecf5af6f3" Vjhyb6wxQzZrjHMJUC4AAABM TLSv1 ECDHE-RSA-AES256-SHA 988 9379 -% 1874316 3800 861462 4825 0 0 192.168.194.238 CH - [2015-05-03 09:38:09.168397] "GET /EMail/images/certificate.png HTTP/1.1" 200 836 "https://www.example.com/EMail/overview.aspx" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "50412823.5239ecf5af6f3" VjhycawxQzZrjHMJUDAAAABZ TLSv1 ECDHE-RSA-AES256-SHA 571 1258 -% 956362 1936 953656 219 0 0 192.168.194.238 CH - [2015-05-03 09:38:09.493641] "GET /EMail/images/tree/folder/plus-first-node.gif HTTP/1.1" 200 848 "https://www.example.com/EMail/tree.aspx?sNode-sharedTree=treeOverview" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "50412823.5239ecf5af6f3" VjhycawxQzZrjHMJUDEAAABT TLSv1 ECDHE-RSA-AES256-SHA 619 1274 -% 966639 2987 962967 172 0 0 192.168.194.238 CH - [2015-05-03 09:38:12.163945] "GET /EMail/inbox.aspx HTTP/1.1" 200 10133 "https://www.example.com/EMail/overview.aspx" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "50412823.5239ecf5af6f3" VjhydKwxQzZrjHMJUDIAAABX TLSv1 ECDHE-RSA-AES256-SHA 747 10607 -% 1221395 2408 212957 5152 0 0 192.168.194.238 CH - [2015-05-03 09:38:13.468215] "GET /EMail/images/msgOpened.png HTTP/1.1" 200 1464 "https://www.example.com/EMail/inbox.aspx" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "50412823.5239ecf5af6f3" VjhydawxQzZrjHMJUDYAAABe TLSv1 ECDHE-RSA-AES256-SHA 780 2027 -% 836972 1765 834605 153 0 0 192.168.194.238 CH - [2015-05-03 09:38:13.456315] "GET /EMail/images/msgClosed.png HTTP/1.1" 200 1399 "https://www.example.com/EMail/inbox.aspx" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "50412823.5239ecf5af6f3" VjhydawxQzZrjHMJUDUAAABb TLSv1 ECDHE-RSA-AES256-SHA 571 1818 -% 1020928 1842 18342 199 0 0 192.168.194.238 CH - [2015-05-03 09:38:13.456028] "GET /EMail/images/Highost.gif HTTP/1.1" 200 115 "https://www.example.com/EMail/inbox.aspx" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "50412823.5239ecf5af6f3" VjhydawxQzZrjHMJUDQAAABS TLSv1 ECDHE-RSA-AES256-SHA 571 538 -% 1048651 1988 45827 145 0 0 192.168.194.238 CH - [2015-05-03 09:38:13.455929] "GET /EMail/images/attach.gif HTTP/1.1" 200 127 "https://www.example.com/EMail/inbox.aspx" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "50412823.5239ecf5af6f3" VjhydawxQzZrjHMJUDMAAABQ TLSv1 ECDHE-RSA-AES256-SHA 571 554 -% 1186140 2788 182494 195 0 0 192.168.194.238 CH - [2015-05-03 09:38:16.684363] "GET /EMail/message.aspx?&mailId=3929_80&folderId=1009_21&mailPos=0 HTTP/1.1" 200 11350 "https://www.example.com/EMail/inbox.aspx" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "50412823.5239ecf5af6f3" VjhyeKwxQzZrjHMJUDgAAABa TLSv1 ECDHE-RSA-AES256-SHA 795 11860 -% 1401309 4792 365840 29539 0 0 192.168.194.238 CH - [2015-05-03 09:38:22.731828] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3929_80&folderId=1009_21&attachmentId=2&token=-232520717034351E18 HTTP/1.1" 200 47148 "https://www.example.com/EMail/message.aspx?&mailId=3929_80&folderId=1009_21&mailPos=0" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "50412823.5239ecf5af6f3" VjhyfqwxQzZrjHMJUDkAAABY TLSv1 ECDHE-RSA-AES256-SHA 907 48598 -% 1040499 6457 22386 218 0 0 192.168.212.3 CH - [2015-05-03 09:38:26.931131] "GET /EMail/moveToFolder.aspx?folderName=Inbox&mailId=3929_98&mailId=3930_59&mailId=3930_56&mailId=3929_95&mailId=3929_90&mailId=3930_50&mailId=3929_89&mailId=3929_86 HTTP/1.1" 200 5097 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhygqwxQzZrjHMJUDsAAABc TLSv1 ECDHE-RSA-AES256-SHA 912 9361 -% 1508169 5158 499609 2916 0 0 192.168.212.3 CH - [2015-05-03 09:38:32.449422] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/moveToFolder.aspx?folderName=Inbox&mailId=3929_98&mailId=3930_59&mailId=3930_56&mailId=3929_95&mailId=3929_90&mailId=3930_50&mailId=3929_89&mailId=3929_86" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhyiKwxQzZrjHMJUD0AAABk TLSv1 ECDHE-RSA-AES256-SHA 998 341 -% 1789516 10449 777957 265 0 0 192.168.212.3 CH - [2015-05-03 09:38:34.262558] "GET /EMail/host.html HTTP/1.1" 200 199 "https://www.example.com/EMail/moveToFolder.aspx?folderName=Inbox&mailId=3929_98&mailId=3930_59&mailId=3930_56&mailId=3929_95&mailId=3929_90&mailId=3930_50&mailId=3929_89&mailId=3929_86" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhyiqwxQzZrjHMJUD4AAABl TLSv1 ECDHE-RSA-AES256-SHA 678 703 76% 965009 2113 961827 362 0 0 192.168.212.3 CH - [2015-05-03 09:38:35.630490] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 - - + "de3096a5.5239eb1ad62d0" Vjhyi6wxQzZrjHMJUEAAAABi TLSv1 ECDHE-RSA-AES256-SHA 848 5393 -% 8226 4831 86 223 3 0 192.168.212.3 CH - [2015-05-03 09:38:35.370805] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 53250 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjhyi6wxQzZrjHMJUD8AAABj TLSv1 ECDHE-RSA-AES256-SHA 550 54017 -% 2714057 3512 714184 19053 0 0 192.168.212.3 CH - [2015-05-03 09:38:38.202196] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhyjqwxQzZrjHMJUEIAAABx TLSv1 ECDHE-RSA-AES256-SHA 630 213 -% 1064277 3511 59575 194 0 0 192.168.212.3 CH - [2015-05-03 09:38:38.232749] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhyjqwxQzZrjHMHdlcAAAAA TLSv1 ECDHE-RSA-AES256-SHA 821 358 -% 1097681 2064 94841 169 0 0 192.168.212.3 CH - [2015-05-03 09:38:38.235362] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhyjqwxQzZrjHMHdlkAAAA- TLSv1 ECDHE-RSA-AES256-SHA 821 358 -% 1095072 2379 91910 177 0 0 192.168.212.3 CH - [2015-05-03 09:38:38.241280] "GET /EMail/images/msgClosed.png HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhyjqwxQzZrjHMJUEMAAABo TLSv1 ECDHE-RSA-AES256-SHA 869 358 -% 1314984 2543 311585 196 0 0 192.168.212.3 CH - [2015-05-03 09:38:38.234218] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhyjqwxQzZrjHMHdlgAAAAB TLSv1 ECDHE-RSA-AES256-SHA 853 358 -% 1325440 1852 323071 102 0 0 192.168.212.3 CH - [2015-05-03 09:38:38.243574] "GET /EMail/images/attach.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhyjqwxQzZrjHMJUEUAAABp TLSv1 ECDHE-RSA-AES256-SHA 869 358 -% 1520090 2661 516338 155 0 0 192.168.212.3 CH - [2015-05-03 09:38:38.243257] "GET /EMail/images/Highost.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhyjqwxQzZrjHMJUEQAAABq TLSv1 ECDHE-RSA-AES256-SHA 869 358 -% 1522413 2924 518574 199 0 0 192.168.212.3 CH - [2015-05-03 09:38:42.383802] "GET /EMail/message.aspx?&mailId=3931_48&folderId=1001_9&mailPos=0 HTTP/1.1" 200 11365 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhykqwxQzZrjHMJUEYAAABy TLSv1 ECDHE-RSA-AES256-SHA 598 11839 -% 1320006 3035 289270 26520 0 0 192.168.212.3 CH - [2015-05-03 09:38:45.346518] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3931_48&folderId=1001_9&attachmentId=2&token=-44399032229814062E18 HTTP/1.1" 200 57870 "https://www.example.com/EMail/message.aspx?&mailId=3931_48&folderId=1001_9&mailPos=0" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhylawxQzZrjHMJUEcAAABm TLSv1 ECDHE-RSA-AES256-SHA 694 59693 -% 1200750 6590 170870 216 0 0 192.168.194.238 CH - [2015-05-03 09:38:56.512140] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/message.aspx?&mailId=3929_80&folderId=1009_21&mailPos=0" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - X "50412823.5239ecf5af6f3" VjhyoKwxQzZrjHMJUEsAAABs TLSv1 ECDHE-RSA-AES256-SHA 828 145 -% 841808 1944 839036 254 0 0 192.168.194.238 CH - [2015-05-03 09:38:56.536532] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/message.aspx?&mailId=3929_80&folderId=1009_21&mailPos=0" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - X "50412823.5239ecf5af6f3" VjhyoKwxQzZrjHMJUEwAAABr TLSv1 ECDHE-RSA-AES256-SHA 828 145 -% 818506 1842 815994 134 0 0 192.168.212.3 CH - [2015-05-03 09:38:55.511460] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjhyn6wxQzZrjHMJUEkAAABv TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1922903 2627 915498 2840 0 0 192.168.194.238 CH - [2015-05-03 09:38:56.551252] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/message.aspx?&mailId=3929_80&folderId=1009_21&mailPos=0" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - X "50412823.5239ecf5af6f3" VjhyoKwxQzZrjHMJUE0AAABz TLSv1 ECDHE-RSA-AES256-SHA 828 145 -% 1246751 1745 244396 157 0 0 192.168.194.238 CH - [2015-05-03 09:38:57.095478] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/message.aspx?&mailId=3929_80&folderId=1009_21&mailPos=0" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - X "50412823.5239ecf5af6f3" VjhyoawxQzZrjHMHdlsAAAAD TLSv1 ECDHE-RSA-AES256-SHA 828 145 -% 901807 2000 898963 228 0 0 192.168.194.238 CH - [2015-05-03 09:38:57.255095] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/message.aspx?&mailId=3929_80&folderId=1009_21&mailPos=0" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - X "50412823.5239ecf5af6f3" VjhyoawxQzZrjHMJUE4AAAB4 TLSv1 ECDHE-RSA-AES256-SHA 828 145 -% 811511 2074 808768 187 0 0 192.168.194.238 CH - [2015-05-03 09:38:57.862953] "GET /EMail/images/active.gif HTTP/1.1" 200 1674 "https://www.example.com/EMail/host.aspx" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "50412823.5239ecf5af6f3" VjhyoawxQzZrjHMJUE8AAABw TLSv1 ECDHE-RSA-AES256-SHA 780 2235 -% 1036681 2706 33154 159 0 0 192.168.194.238 CH - [2015-05-03 09:38:58.526789] "GET /EMail/MailHandler?service=logout HTTP/1.1" 303 - "https://www.example.com/EMail/host.aspx" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "50412823.5239ecf5af6f3" VjhyoqwxQzZrjHMJUFEAAAB5 TLSv1 ECDHE-RSA-AES256-SHA 988 566 -% 844749 2398 841247 222 0 0 192.168.194.238 CH - [2015-05-03 09:38:59.376658] "GET /EMail/index.html HTTP/1.1" 200 183 "https://www.example.com/EMail/host.aspx" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "50412823.5239ecf5af6f3" Vjhyo6wxQzZrjHMJUFIAAAB0 TLSv1 ECDHE-RSA-AES256-SHA 747 687 75% 675955 3112 671884 285 0 0 192.168.194.238 CH - [2015-05-03 09:39:00.095351] "GET /EMail/MailHandler?service=init HTTP/1.1" 303 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - + "50412823.5239ecf5af6f3" VjhypKwxQzZrjHMJUFMAAAB7 TLSv1 ECDHE-RSA-AES256-SHA 715 325 -% 860162 2280 857053 273 0 0 192.168.194.238 CH - [2015-05-03 09:39:00.962807] "GET /EMail/login.aspx HTTP/1.1" 200 7349 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)" www.example.com 192.168.34.16 443 proxy-server - X "50412823.5239ecf5af6f3" VjhypKwxQzZrjHMJUFQAAAB8 TLSv1 ECDHE-RSA-AES256-SHA 699 0 -% 844242 2075 837576 3964 0 0 192.168.212.3 CH - [2015-05-03 09:39:20.866513] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3930_49&folderId=1001_9&attachmentId=2&token=-51691775951349555E18 HTTP/1.1" 200 53648 "https://www.example.com/EMail/message.aspx?&mailId=3930_49&folderId=1001_9&mailPos=1" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhyuKwxQzZrjHMJUFkAAAB6 TLSv1 ECDHE-RSA-AES256-SHA 984 59136 -% 1201192 4538 175481 210 0 0 192.168.212.3 CH - [2015-05-03 09:40:20.419278] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3929_85&folderId=1001_9&attachmentId=2&token=-7118130213791915E18 HTTP/1.1" 200 54874 "https://www.example.com/EMail/message.aspx?&mailId=3929_85&folderId=1001_9&mailPos=2" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjhy9KwxQzZrjHMJUGYAAABO TLSv1 ECDHE-RSA-AES256-SHA 984 60352 -% 1069366 4365 27228 191 0 0 192.168.212.3 CH - [2015-05-03 09:40:32.255496] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhzAKwxQzZrjHMJUGgAAABM TLSv1 ECDHE-RSA-AES256-SHA 773 9379 -% 1585596 2537 574512 4697 0 0 192.168.212.3 CH - [2015-05-03 09:40:32.315611] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 53225 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhzAKwxQzZrjHMJUGkAAABV TLSv1 ECDHE-RSA-AES256-SHA 840 57821 -% 2197535 2103 566903 17232 0 0 192.168.212.3 CH - [2015-05-03 09:40:55.317863] "GET /EMail/message.aspx?&mailId=3929_84&folderId=1001_9&mailPos=3 HTTP/1.1" 200 11496 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhzF6wxQzZrjHMHdmAAAAAI TLSv1 ECDHE-RSA-AES256-SHA 888 15840 -% 1295819 3384 268756 22388 0 0 192.168.212.3 CH - [2015-05-03 09:40:58.169889] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3929_84&folderId=1001_9&attachmentId=2&token=-23316737422755517E18 HTTP/1.1" 200 55029 "https://www.example.com/EMail/message.aspx?&mailId=3929_84&folderId=1001_9&mailPos=3" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhzGqwxQzZrjHMHdmEAAAAK TLSv1 ECDHE-RSA-AES256-SHA 984 60586 -% 1191473 4382 165358 205 0 0 192.168.212.3 CH - [2015-05-03 09:42:26.176693] "GET /EMail/message.aspx?&mailId=3929_83&folderId=1001_9&mailPos=4 HTTP/1.1" 200 11495 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhzcqwxQzZrjHMJUHcAAABi TLSv1 ECDHE-RSA-AES256-SHA 805 12149 -% 1395366 4103 370575 19224 0 0 192.168.212.3 CH - [2015-05-03 09:42:28.919339] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3929_83&folderId=1001_9&attachmentId=2&token=-68744784717580636E18 HTTP/1.1" 200 55574 "https://www.example.com/EMail/message.aspx?&mailId=3929_83&folderId=1001_9&mailPos=4" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhzdKwxQzZrjHMJUHgAAABf TLSv1 ECDHE-RSA-AES256-SHA 694 57294 -% 1596241 6665 568092 187 0 0 192.168.212.3 CH - [2015-05-03 09:42:35.561701] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjhze6wxQzZrjHMJUHkAAABj TLSv1 ECDHE-RSA-AES256-SHA 773 9379 -% 2003538 4064 992684 2889 0 0 192.168.104.36 CH - [2015-05-03 09:42:49.257136] "GET /EMail/login.aspx?username=john.smith@example.com HTTP/1.1" 200 7362 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "156bae0a.5239ee0f120b0" VjhziawxQzZrjHMJUHwAAABp TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 963 11973 -% 929170 1792 922450 4103 0 0 192.168.104.36 CH - [2015-05-03 09:42:50.354511] "GET /EMail/css/IEstyle.css HTTP/1.1" 200 1932 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" www.example.com 192.168.34.16 443 proxy-server - + "156bae0a.5239ee0f120b0" VjhziqwxQzZrjHMJUH4AAABy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 437 2427 14% 1016711 3302 11234 174 0 0 192.168.212.3 CH - [2015-05-03 09:43:02.466567] "GET /EMail/message.aspx?&mailId=3930_44&folderId=1001_9&mailPos=5 HTTP/1.1" 200 11495 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhzlqwxQzZrjHMJUIEAAAB1 TLSv1 ECDHE-RSA-AES256-SHA 888 15840 -% 1492000 3919 462202 24219 0 0 192.168.212.3 CH - [2015-05-03 09:43:12.476405] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 53202 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" VjhzoKwxQzZrjHMJUIMAAABv TLSv1 ECDHE-RSA-AES256-SHA 840 57805 -% 2314945 3227 821026 17274 0 0 192.168.212.3 CH - [2015-05-03 09:44:48.626655] "GET /EMail/message.aspx?&mailId=3930_43&folderId=1001_9&mailPos=7 HTTP/1.1" 200 11489 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh0AKwxQzZrjHMJUJYAAAB2 TLSv1 ECDHE-RSA-AES256-SHA 880 15819 -% 1709039 4990 676828 25926 0 0 192.168.212.3 CH - [2015-05-03 09:44:51.867671] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3930_43&folderId=1001_9&attachmentId=2&token=-6475326679737047E18 HTTP/1.1" 200 53375 "https://www.example.com/EMail/message.aspx?&mailId=3930_43&folderId=1001_9&mailPos=7" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh0A6wxQzZrjHMJUJgAAABF TLSv1 ECDHE-RSA-AES256-SHA 694 55028 -% 1349995 5711 323457 200 0 0 192.168.212.3 CH - [2015-05-03 09:44:58.314054] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh0CqwxQzZrjHMJUJkAAABN TLSv1 ECDHE-RSA-AES256-SHA 773 9379 -% 1869725 2912 858630 4701 0 0 192.168.212.3 CH - [2015-05-03 09:46:17.075752] "GET /EMail/message.aspx?&mailId=3930_42&folderId=1001_9&mailPos=9 HTTP/1.1" 200 11496 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh0WawxQzZrjHMJUKUAAABT TLSv1 ECDHE-RSA-AES256-SHA 805 12112 -% 1351840 5958 321811 23288 0 0 192.168.212.3 CH - [2015-05-03 09:46:20.305278] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3930_42&folderId=1001_9&attachmentId=2&token=-64238176483216988E18 HTTP/1.1" 200 57497 "https://www.example.com/EMail/message.aspx?&mailId=3930_42&folderId=1001_9&mailPos=9" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh0XKwxQzZrjHMJUKYAAABX TLSv1 ECDHE-RSA-AES256-SHA 694 59325 -% 1152591 6889 122929 213 0 0 192.168.212.3 CH - [2015-05-03 09:46:25.074374] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh0YawxQzZrjHMJUKkAAABS TLSv1 ECDHE-RSA-AES256-SHA 773 9379 -% 1859947 4497 848831 2780 0 0 192.168.212.3 CH - [2015-05-03 09:46:25.044351] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 53186 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh0YawxQzZrjHMJUKgAAABb TLSv1 ECDHE-RSA-AES256-SHA 550 53953 -% 2612610 4039 244396 22561 0 0 192.168.51.76 CH - [2015-05-03 09:46:35.245807] "GET /EMail/MailHandler?service=createCRL&caId=1248_1 HTTP/1.1" 200 3877 "-" "ocspd/1.0.3" www.example.com 192.168.34.16 443 proxy-server - + "72host.5239eee6970ef" Vjh0a6wxQzZrjHMJUKwAAABY TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 572 8359 -% 837060 1917 834167 178 0 0 192.168.212.3 CH - [2015-05-03 09:47:41.901694] "GET /EMail/moveToFolder.aspx?folderName=Inbox&mailId=3931_48&mailId=3930_49&mailId=3929_85&mailId=3929_84&mailId=3929_83&mailId=3930_44&mailId=3930_43&mailId=3930_42 HTTP/1.1" 200 5096 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh0rawxQzZrjHMJUMAAAABv TLSv1 ECDHE-RSA-AES256-SHA 837 5675 -% 1541586 7782 531436 1577 0 0 192.168.212.3 CH - [2015-05-03 09:47:47.166047] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/moveToFolder.aspx?folderName=Inbox&mailId=3931_48&mailId=3930_49&mailId=3929_85&mailId=3929_84&mailId=3929_83&mailId=3930_44&mailId=3930_43&mailId=3930_42" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh0s6wxQzZrjHMJUMEAAABt TLSv1 ECDHE-RSA-AES256-SHA 998 341 -% 2119612 9516 109403 157 0 0 192.168.212.3 CH - [2015-05-03 09:47:49.303614] "GET /EMail/host.html HTTP/1.1" 200 199 "https://www.example.com/EMail/moveToFolder.aspx?folderName=Inbox&mailId=3931_48&mailId=3930_49&mailId=3929_85&mailId=3929_84&mailId=3929_83&mailId=3930_44&mailId=3930_43&mailId=3930_42" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh0tawxQzZrjHMJUMIAAABz TLSv1 ECDHE-RSA-AES256-SHA 678 703 76% 1045143 3317 40536 372 0 0 192.168.212.3 CH - [2015-05-03 09:47:50.478180] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 53250 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh0tqwxQzZrjHMJUMMAAAB4 TLSv1 ECDHE-RSA-AES256-SHA 550 54017 -% 2113932 3638 615596 23165 0 0 192.168.212.3 CH - [2015-05-03 09:47:52.749884] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh0uKwxQzZrjHMJUMUAAABw TLSv1 ECDHE-RSA-AES256-SHA 821 358 -% 816417 2957 812579 161 0 0 192.168.212.3 CH - [2015-05-03 09:47:52.757182] "GET /EMail/images/Highost.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh0uKwxQzZrjHMJUMkAAAB9 TLSv1 ECDHE-RSA-AES256-SHA 869 358 -% 969667 1710 967364 152 0 0 192.168.212.3 CH - [2015-05-03 09:47:52.750177] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh0uKwxQzZrjHMJUMYAAAB5 TLSv1 ECDHE-RSA-AES256-SHA 821 358 -% 1042397 2034 39601 197 0 0 192.168.212.3 CH - [2015-05-03 09:47:52.716012] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh0uKwxQzZrjHMJUMQAAAB3 TLSv1 ECDHE-RSA-AES256-SHA 630 213 -% 1096968 2201 94145 130 0 0 192.168.212.3 CH - [2015-05-03 09:47:52.753179] "GET /EMail/images/attach.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh0uKwxQzZrjHMJUMcAAAB7 TLSv1 ECDHE-RSA-AES256-SHA 869 358 -% 1061907 1757 59528 127 0 0 192.168.212.3 CH - [2015-05-03 09:47:52.758344] "GET /EMail/images/msgClosed.png HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh0uKwxQzZrjHMJUMoAAAB8 TLSv1 ECDHE-RSA-AES256-SHA 869 358 -% 1128641 3145 124703 204 0 0 192.168.212.3 CH - [2015-05-03 09:47:52.753452] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh0uKwxQzZrjHMJUMgAAAB0 TLSv1 ECDHE-RSA-AES256-SHA 853 358 -% 1150805 1756 148556 99 0 0 192.168.212.3 CH - [2015-05-03 09:48:08.973582] "GET /EMail/moveToFolder.aspx?folderName=Inbox&mailId=3927_86&mailId=3927_80 HTTP/1.1" 200 4759 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh0yKwxQzZrjHMJUM0AAABB TLSv1 ECDHE-RSA-AES256-SHA 840 9030 -% 1455388 3111 450035 1565 0 0 192.168.212.3 CH - [2015-05-03 09:48:14.976765] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/moveToFolder.aspx?folderName=Inbox&mailId=3927_86&mailId=3927_80" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh0zqwxQzZrjHMJUM8AAABC TLSv1 ECDHE-RSA-AES256-SHA 1096 4177 -% 1337592 8957 327609 288 0 0 192.168.212.3 CH - [2015-05-03 09:48:22.328397] "GET /EMail/css/IEstyle.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh01qwxQzZrjHMHdokAAAAv TLSv1 ECDHE-RSA-AES256-SHA 904 4049 -% 1317442 4277 312220 146 0 0 192.168.212.3 CH - [2015-05-03 09:48:22.331341] "GET /EMail/images/attach.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh01qwxQzZrjHMJUNIAAAB2 TLSv1 ECDHE-RSA-AES256-SHA 936 4049 -% 1723819 3252 719077 153 0 0 192.168.212.3 CH - [2015-05-03 09:48:22.330766] "GET /EMail/images/msgClosed.png HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh01qwxQzZrjHMJUNEAAABG TLSv1 ECDHE-RSA-AES256-SHA 952 4049 -% 1987735 4130 982597 222 0 0 192.168.212.3 CH - [2015-05-03 09:48:22.335018] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh01qwxQzZrjHMJUNMAAABA TLSv1 ECDHE-RSA-AES256-SHA 904 4049 -% 2003547 3179 0 144 0 0 192.168.212.3 CH - [2015-05-03 09:48:38.082311] "POST /EMail/inbox.aspx HTTP/1.1" 200 9003 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh05qwxQzZrjHMJUNcAAABP TLSv1 ECDHE-RSA-AES256-SHA 1080 13307 -% 1137468 6489 124293 5664 0 0 192.168.212.3 CH - [2015-05-03 09:48:44.271559] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3929_57&folderId=1001_9&attachmentId=2&token=-31307883401872845E18 HTTP/1.1" 200 58515 "https://www.example.com/EMail/message.aspx?&mailId=3929_57&folderId=1001_9&mailPos=35" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh07KwxQzZrjHMJUNgAAABJ TLSv1 ECDHE-RSA-AES256-SHA 984 64169 -% 1006199 6207 976805 274 0 0 192.168.212.3 CH - [2015-05-03 09:48:48.923659] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 53250 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh08KwxQzZrjHMJUNkAAABU TLSv1 ECDHE-RSA-AES256-SHA 840 57853 -% 2867100 2249 94020 20428 0 0 192.168.212.3 CH - [2015-05-03 09:49:18.581389] "GET /EMail/message.aspx?&mailId=3930_21&folderId=1001_9&mailPos=34 HTTP/1.1" 200 11497 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh1DqwxQzZrjHMJUN0AAABX TLSv1 ECDHE-RSA-AES256-SHA 888 15803 -% 1380809 4964 352011 22899 0 0 192.168.212.3 CH - [2015-05-03 09:49:31.423144] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 53242 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh1G6wxQzZrjHMJUOAAAABQ TLSv1 ECDHE-RSA-AES256-SHA 840 57837 -% 2360339 3527 858880 19107 0 0 192.168.212.3 CH - [2015-05-03 09:49:52.477281] "GET /EMail/message.aspx?&mailId=3930_22&folderId=1001_9&mailPos=33 HTTP/1.1" 200 11497 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh1MKwxQzZrjHMJUOUAAABh TLSv1 ECDHE-RSA-AES256-SHA 888 15840 -% 1694784 4019 669614 20337 0 0 192.168.212.3 CH - [2015-05-03 09:50:05.883003] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 53242 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh1PawxQzZrjHMJUOoAAABq TLSv1 ECDHE-RSA-AES256-SHA 840 57837 -% 2385987 2561 871571 18548 0 0 192.168.212.3 CH - [2015-05-03 09:50:29.621477] "GET /EMail/message.aspx?&mailId=3929_58&folderId=1001_9&mailPos=33 HTTP/1.1" 200 11491 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh1VawxQzZrjHMJUO8AAABs TLSv1 ECDHE-RSA-AES256-SHA 888 15840 -% 1778847 5704 732521 39312 0 0 192.168.212.3 CH - [2015-05-03 09:50:36.926177] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh1XKwxQzZrjHMJUPAAAABt TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1309434 2916 298391 4408 0 0 192.168.212.3 CH - [2015-05-03 09:50:36.927595] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 53234 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh1XKwxQzZrjHMJUPEAAABv TLSv1 ECDHE-RSA-AES256-SHA 840 57837 -% 1552631 1981 52827 23285 0 0 192.168.212.3 CH - [2015-05-03 09:51:21.677385] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 53234 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh1iawxQzZrjHMHdpUAAAA- TLSv1 ECDHE-RSA-AES256-SHA 840 57837 -% 2508949 2407 765316 17670 0 0 192.168.123.36 CH - [2015-05-03 09:51:35.505742] "GET /EMail/main.aspx HTTP/1.1" 200 7322 "https://www.example.com/EMail/login.aspx?username=john.smith@example.com" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "152dabe1.5239d4dbaad6a" Vjh1l6wxQzZrjHMJUPsAAABB TLSv1 ECDHE-RSA-AES256-SHA 1076 11657 -% 897720 4315 846335 3591 0 0 192.168.123.36 CH - [2015-05-03 09:51:36.506828] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "152dabe1.5239d4dbaad6a" Vjh1mKwxQzZrjHMJUP0AAAB- TLSv1 ECDHE-RSA-AES256-SHA 784 2431 13% 942037 3145 932650 136 0 0 192.168.123.36 CH - [2015-05-03 09:51:36.509006] "GET /EMail/css/utils.css HTTP/1.1" 200 102 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "152dabe1.5239d4dbaad6a" Vjh1mKwxQzZrjHMJUP4AAABD TLSv1 ECDHE-RSA-AES256-SHA 1044 4430 56% 1067903 1675 21739 190 0 0 192.168.123.36 CH - [2015-05-03 09:51:36.564216] "GET /EMail/images/logo.gif HTTP/1.1" 304 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "152dabe1.5239d4dbaad6a" Vjh1mKwxQzZrjHMJUP8AAABL TLSv1 ECDHE-RSA-AES256-SHA 1031 358 -% 1054799 1802 52321 131 0 0 192.168.123.36 CH - [2015-05-03 09:51:36.564211] "GET /EMail/scripts/variables_en.js HTTP/1.1" 200 2091 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "152dabe1.5239d4dbaad6a" Vjh1mKwxQzZrjHMJUQAAAAB2 TLSv1 ECDHE-RSA-AES256-SHA 935 2773 24% 1281957 2635 277708 179 0 0 192.168.123.36 CH - [2015-05-03 09:51:36.567284] "GET /EMail/scripts/shost.js HTTP/1.1" 200 7130 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "152dabe1.5239d4dbaad6a" Vjh1mKwxQzZrjHMJUQEAAABC TLSv1 ECDHE-RSA-AES256-SHA 1015 7813 22% 1317036 1917 311701 168 0 0 192.168.123.36 CH - [2015-05-03 09:51:37.901691] "GET /EMail/images/inactive.gif HTTP/1.1" 304 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "152dabe1.5239d4dbaad6a" Vjh1mawxQzZrjHMJUQMAAABG TLSv1 ECDHE-RSA-AES256-SHA 784 213 -% 734602 2365 727065 167 0 0 192.168.123.36 CH - [2015-05-03 09:51:37.901277] "GET /EMail/css/NNstyle.css HTTP/1.1" 200 1926 "https://www.example.com/EMail/css/NNstyle.css" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "152dabe1.5239d4dbaad6a" Vjh1mawxQzZrjHMJUQIAAABF TLSv1 ECDHE-RSA-AES256-SHA 800 2431 13% 886446 2679 877468 236 0 0 192.168.123.36 CH - [2015-05-03 09:51:38.834149] "GET /EMail/images/icon10.ico HTTP/1.1" 200 1150 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "152dabe1.5239d4dbaad6a" Vjh1mqwxQzZrjHMJUQQAAABN TLSv1 ECDHE-RSA-AES256-SHA 688 1578 -% 951599 3072 943303 156 0 0 192.168.123.36 CH - [2015-05-03 09:51:39.614807] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "152dabe1.5239d4dbaad6a" Vjh1m6wxQzZrjHMJUQYAAABI TLSv1 ECDHE-RSA-AES256-SHA 965 421 -% 1049673 5384 38938 143 0 0 192.168.123.36 CH - [2015-05-03 09:51:40.724373] "GET /EMail/main.aspx HTTP/1.1" 200 3393 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "152dabe1.5239d4dbaad6a" Vjh1nKwxQzZrjHMJUQcAAABE TLSv1 ECDHE-RSA-AES256-SHA 768 3818 -% 860164 3269 849989 1767 0 0 192.168.123.36 CH - [2015-05-03 09:51:41.666050] "GET /EMail/host.aspx HTTP/1.1" 200 3706 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "152dabe1.5239d4dbaad6a" Vjh1nawxQzZrjHMJUQgAAABR TLSv1 ECDHE-RSA-AES256-SHA 736 4138 -% 938791 3744 923643 6153 0 0 192.168.123.36 CH - [2015-05-03 09:51:41.667313] "GET /EMail/overview.aspx HTTP/1.1" 200 5289 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "152dabe1.5239d4dbaad6a" Vjh1nawxQzZrjHMJUQkAAABP TLSv1 ECDHE-RSA-AES256-SHA 736 5722 -% 1275564 3603 263925 2854 0 0 192.168.123.36 CH - [2015-05-03 09:51:41.666228] "GET /EMail/tree.aspx?sNode-sharedTree=treeOverview HTTP/1.1" 200 8525 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "152dabe1.5239d4dbaad6a" Vjh1nawxQzZrjHMJUQoAAABK TLSv1 ECDHE-RSA-AES256-SHA 768 9218 -% 1767868 3525 751876 2641 0 0 192.168.123.36 CH - [2015-05-03 09:51:44.681121] "GET /EMail/inbox.aspx HTTP/1.1" 200 9571 "https://www.example.com/EMail/overview.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "152dabe1.5239d4dbaad6a" Vjh1oKwxQzZrjHMJUQsAAABH TLSv1 ECDHE-RSA-AES256-SHA 752 10047 -% 1050135 2697 37245 4779 0 0 192.168.123.36 CH - [2015-05-03 09:51:48.032207] "GET /EMail/message.aspx?&mailId=3931_4&folderId=3514_62&mailPos=0 HTTP/1.1" 200 17884 "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" www.example.com 192.168.34.16 443 proxy-server - + "152dabe1.5239d4dbaad6a" Vjh1pKwxQzZrjHMJUQ0AAABO TLSv1 ECDHE-RSA-AES256-SHA 784 18425 -% 1441475 4750 384036 43496 0 0 192.168.212.3 CH - [2015-05-03 09:51:52.235136] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3929_59&folderId=1001_9&attachmentId=2&token=-62852577436998154E18 HTTP/1.1" 200 53928 "https://www.example.com/EMail/message.aspx?&mailId=3929_59&folderId=1001_9&mailPos=32" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh1qKwxQzZrjHMJUQ8AAABW TLSv1 ECDHE-RSA-AES256-SHA 984 59408 -% 1087557 6452 59447 210 0 0 192.168.212.3 CH - [2015-05-03 09:51:55.986245] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 53226 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh1q6wxQzZrjHMJURAAAABZ TLSv1 ECDHE-RSA-AES256-SHA 840 57821 -% 2510538 3736 953571 27205 0 0 192.168.212.3 CH - [2015-05-03 09:52:33.884139] "GET /EMail/MailHandler?service=downloadAttachment&mailId=3930_25&folderId=1001_9&attachmentId=2&token=-29877440336154516E18 HTTP/1.1" 200 54052 "https://www.example.com/EMail/message.aspx?&mailId=3930_25&folderId=1001_9&mailPos=31" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh10awxQzZrjHMJURgAAABY TLSv1 ECDHE-RSA-AES256-SHA 984 59536 -% 1092574 7469 63305 181 0 0 192.168.212.3 CH - [2015-05-03 09:52:38.283480] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 53227 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh11qwxQzZrjHMJURoAAABa TLSv1 ECDHE-RSA-AES256-SHA 840 57821 -% 2578120 3506 802566 15718 0 0 192.168.212.3 CH - [2015-05-03 09:53:10.782099] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh19qwxQzZrjHMHdpoAAAAH TLSv1 ECDHE-RSA-AES256-SHA 856 13070 -% 1900670 2302 890552 4530 0 0 192.168.212.3 CH - [2015-05-03 09:53:10.781884] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 53227 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh19qwxQzZrjHMJUS4AAABL TLSv1 ECDHE-RSA-AES256-SHA 840 57821 -% 2922277 2461 482503 16753 0 0 192.168.212.3 CH - [2015-05-03 09:54:29.941600] "GET /EMail/tree.aspx?sNode-sharedTree=treeInbox HTTP/1.1" 200 8538 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh2RawxQzZrjHMJUT0AAABM TLSv1 ECDHE-RSA-AES256-SHA 848 13065 -% 1585359 3870 574730 2748 0 0 192.168.212.3 CH - [2015-05-03 09:54:29.781505] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 53219 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh2RawxQzZrjHMJUTwAAABT TLSv1 ECDHE-RSA-AES256-SHA 840 57821 -% 2264999 3622 859215 19726 0 0 192.168.212.3 CH - [2015-05-03 09:54:35.931332] "GET /EMail/message.aspx?&mailId=3929_63&folderId=1001_9&mailPos=30 HTTP/1.1" 200 11503 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh2S6wxQzZrjHMJUT8AAABX TLSv1 ECDHE-RSA-AES256-SHA 888 15840 -% 1242503 5045 217560 18762 0 0 192.168.212.3 CH - [2015-05-03 09:54:44.184578] "GET /EMail/inbox.aspx?dir=desc HTTP/1.1" 200 53218 "https://www.example.com/EMail/main.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh2VKwxQzZrjHMJUUIAAABQ TLSv1 ECDHE-RSA-AES256-SHA 840 57821 -% 2101665 3622 782268 16535 0 0 192.168.212.3 CH - [2015-05-03 09:55:25.332616] "GET /EMail/moveToFolder.aspx?folderName=Inbox&mailId=3929_63&mailId=3929_61&mailId=3930_26&mailId=3930_25 HTTP/1.1" 200 4872 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh2fawxQzZrjHMJUVMAAAB7 TLSv1 ECDHE-RSA-AES256-SHA 872 9142 -% 1791714 3796 785061 2267 0 0 192.168.212.3 CH - [2015-05-03 09:55:32.634788] "GET /EMail/host.html HTTP/1.1" 200 199 "https://www.example.com/EMail/moveToFolder.aspx?folderName=Inbox&mailId=3929_63&mailId=3929_61&mailId=3930_26&mailId=3930_25" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh2hKwxQzZrjHMJUVUAAAB3 TLSv1 ECDHE-RSA-AES256-SHA 920 4539 76% 1034584 3233 30146 412 0 0 192.168.212.3 CH - [2015-05-03 09:55:36.482500] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh2iKwxQzZrjHMHdqcAAAAZ TLSv1 ECDHE-RSA-AES256-SHA 821 358 -% 900008 2080 896959 278 0 0 192.168.212.3 CH - [2015-05-03 09:55:36.495197] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh2iKwxQzZrjHMHdqgAAAAb TLSv1 ECDHE-RSA-AES256-SHA 853 358 -% 1115725 1703 113095 288 0 0 192.168.212.3 CH - [2015-05-03 09:55:36.485396] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh2iKwxQzZrjHMJUVcAAAB6 TLSv1 ECDHE-RSA-AES256-SHA 821 358 -% 1134946 2092 132083 147 0 0 192.168.212.3 CH - [2015-05-03 09:55:36.509216] "GET /EMail/images/msgClosed.png HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh2iKwxQzZrjHMJUVgAAABD TLSv1 ECDHE-RSA-AES256-SHA 869 358 -% 1141792 2172 138942 181 0 0 192.168.212.3 CH - [2015-05-03 09:55:36.509371] "GET /EMail/images/Highost.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh2iKwxQzZrjHMHdqkAAAAa TLSv1 ECDHE-RSA-AES256-SHA 869 358 -% 1155084 3108 151146 143 0 0 192.168.212.3 CH - [2015-05-03 09:55:36.535712] "GET /EMail/images/msgOpened.png HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh2iKwxQzZrjHMJUVoAAABB TLSv1 ECDHE-RSA-AES256-SHA 952 4049 -% 1357574 2645 354077 198 0 0 192.168.212.3 CH - [2015-05-03 09:55:36.517103] "GET /EMail/images/attach.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh2iKwxQzZrjHMJUVkAAAB- TLSv1 ECDHE-RSA-AES256-SHA 869 358 -% 1534377 1966 531704 203 0 0 192.168.212.3 CH - [2015-05-03 09:55:49.738919] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/moveToFolder.aspx?folderName=Inbox&mailId=3930_21&mailId=3929_57" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh2lawxQzZrjHMJUV0AAABG TLSv1 ECDHE-RSA-AES256-SHA 1096 4177 -% 1403792 4787 398259 195 0 0 192.168.212.3 CH - [2015-05-03 09:55:51.289318] "GET /EMail/host.html HTTP/1.1" 200 199 "https://www.example.com/EMail/moveToFolder.aspx?folderName=Inbox&mailId=3930_21&mailId=3929_57" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh2l6wxQzZrjHMJUV4AAABA TLSv1 ECDHE-RSA-AES256-SHA 888 4539 76% 847022 2113 844012 237 0 0 192.168.212.3 CH - [2015-05-03 09:55:53.739263] "POST /EMail/inbox.aspx HTTP/1.1" 200 8586 "https://www.example.com/EMail/inbox.aspx?dir=desc" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh2mawxQzZrjHMJUWAAAABE TLSv1 ECDHE-RSA-AES256-SHA 1080 12891 -% 1107417 8306 95681 2751 0 0 192.168.212.3 CH - [2015-05-03 09:55:55.040462] "GET /EMail/scripts/shost.js HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh2m6wxQzZrjHMHdqsAAAAd TLSv1 ECDHE-RSA-AES256-SHA 920 4049 -% 1024871 2145 21967 202 0 0 192.168.212.3 CH - [2015-05-03 09:55:55.041156] "GET /EMail/css/utils.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh2m6wxQzZrjHMJUWEAAABP TLSv1 ECDHE-RSA-AES256-SHA 904 4049 -% 1070480 1892 67881 199 0 0 192.168.212.3 CH - [2015-05-03 09:55:55.111680] "GET /EMail/images/Highost.gif HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh2m6wxQzZrjHMHdqwAAAAe TLSv1 ECDHE-RSA-AES256-SHA 952 4049 -% 1145384 2030 142558 151 0 0 192.168.212.3 CH - [2015-05-03 09:56:02.291583] "GET /EMail/moveToFolder.aspx?folderName=Inbox&mailId=3930_22 HTTP/1.1" 200 4704 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh2oqwxQzZrjHMJUWcAAABX TLSv1 ECDHE-RSA-AES256-SHA 824 8982 -% 1822785 4291 815231 2430 0 0 192.168.212.3 CH - [2015-05-03 09:56:07.143272] "POST /EMail/MailHandler HTTP/1.1" 303 - "https://www.example.com/EMail/moveToFolder.aspx?folderName=Inbox&mailId=3930_22" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh2p6wxQzZrjHMJUWoAAABg TLSv1 ECDHE-RSA-AES256-SHA 1064 4177 -% 1383000 5549 376518 208 0 0 192.168.212.3 CH - [2015-05-03 09:56:12.420556] "GET /EMail/css/basic.css HTTP/1.1" 304 - "https://www.example.com/EMail/inbox.aspx" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" www.example.com 192.168.34.16 443 proxy-server - + "c2d24c75.5239eb167610f" Vjh2rKwxQzZrjHMJUW4AAABh TLSv1 ECDHE-RSA-AES256-SHA 904 4049 -% 1113182 2617 109839 197 0 0