之前就知道电信干这个龌龊的事情,那时候据说用的是DNS劫持。Okay,我换OpenDNS。
最近浏览php.net查资料,发现电信的广告还是纷至沓来……
无语之后,默默打开WireShark一探究竟。
发送请求:
GET /manual/en/language.oop5.references.php HTTP/1.1
Host: www.php.net
User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1.5) Gecko/20091109 Ubuntu/9.10 (karmic) Firefox/3.5.5
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.php.net/manual/en/langref.php?
回应:
HTTP/1.1 200 OK
Server: Apache/2.0.43 (Unix)
Content-Type: text/html
Expires: Thu, 01 Jan 1970 08:00:01 GMT
Cache-Control: private
Cache-Control: no-cache
Transfer-Encoding: chunked
Connection: close
Date: Sun, 22 Nov 2009 14:59:02 GMT
2d2
<html><body scroll=’no’ style=’border:0; margin:0; padding:0;’ id=’mainbody’><iframe src=’about:blank’ width=’100%’ height=’100%’ frameborder=’0′></iframe><script src=’http://121.32.136.21:1010/open.js’></script><script>var content=’http://gd.ct10000.com/yxhd/zp0911.htm?p=1258873142|10619183|2275|850|0|0¶m=ABioyajZGekprCmIW7rLPMyMnMx87Hxr/OyczRmJvZj5CTlpyGlpvCzc3IytmMkIqNnJqKjZPCiIiI0Y+Xj9GRmovQkp6Rip6T0JqR0JOe’;var old_url=’http://www.php.net/manual/en/language.oop5.references.php?’;var [...]
Sun
22
Nov '09
