Wireshark capture #

Here you see the raw HTTP traffic for user emproxy with password password and host cmhost, looking for SEP0102030405

POST /emservice/EMServiceServlet HTTP/1.1

Content-Type: application/x-www-form-urlencoded

Host: cmhost

Content-Length: 249

Expect: 100-continue

Connection: Keep-Alive

HTTP/1.1 100 Continue

xml=%3cquery%3e%3cappInfo%3e%3cappID%3eemproxy%3c%2fappID%3e%3cappCertificate%3epassword%3c%2fappCertificate%3e%3c%2fappInfo%3e%3cdeviceUserQuery%3e%3cdeviceName%3eSEP010203040506%3c%2fdeviceName%3e%3c%2fdeviceUserQuery%3e%3c%2fquery%3e }}} and this is the answer:

HTTP/1.1 200 OK

Content-Type: text/xml;charset=ISO-8859-1

Content-Length: 144

Date: Tue, 26 Oct 2010 12:28:29 GMT

Server:

<?xml version="1.0"?>

<response> <deviceUserResults> <device name="SEP010203040506"> <doesNotExist/> </device> </deviceUserResults> </response> }}}