Session ID Failure
Failed Login
Anonymous JSESSIONID is CE90C21DEA9611B37A616D94A63F9963. Authenticated JSESSIONID
is 76C1DA10DBA150622591CB767AB3E1BD. The second anonymous SESSIONID is
5F7194FBBF7FE9344C6D074FF0F85853.
Page
/login
Request
/login
Response
Icon
Request
Raw HTTP traffic
POST /login HTTP/1.1
Host: xnatdev.xnat.org
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:49.0)
Gecko/20100101 Firefox/49.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://xnatdev.xnat.org/app/template/Login.vm
Cookie: JSESSIONID=CE90C21DEA9611B37A616D94A63F9963;
SESSION_EXPIRATION_TIME="1479100822767,900000"; SESSION_ACTIVE=false
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Content-Type: application/x-www-form-urlencoded
Content-Length: 47
username=admin&password=admin&login=&XNAT_CSRF=
HTTP/1.1 302 Found
Server: nginx/1.4.6 (Ubuntu)
Date: Mon, 14 Nov 2016 05:22:36 GMT
Content-Length: 0
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Set-Cookie: JSESSIONID=76C1DA10DBA150622591CB767AB3E1BD; Path=/;
HttpOnly
Location: http://xnatdev.xnat.org/
Proxy-Connection: Keep-alive
GET /style/icons/icon-info-48.png HTTP/1.1
Host: xnatdev.xnat.org
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:49.0)
Gecko/20100101 Firefox/49.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://xnatdev.xnat.org/style/app.css?v=1.7.0a2
Cookie: JSESSIONID=CE90C21DEA9611B37A616D94A63F9963;
SESSION_EXPIRATION_TIME="1479100822767,900000"; SESSION_ACTIVE=false
DNT: 1
Connection: keep-alive
Icon
response
Root
request
Root
response
/setup
request
/setup
response
HTTP/1.1 200 OK
Server: nginx/1.4.6 (Ubuntu)
Date: Mon, 14 Nov 2016 05:22:36 GMT
Content-Type: image/png
Content-Length: 1200
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Set-Cookie: JSESSIONID=5F7194FBBF7FE9344C6D074FF0F85853; Path=/;
HttpOnly
Set-Cookie: SESSION_EXPIRATION_TIME="1479100956881,900000"; Version=1;
Path=/
Accept-Ranges: bytes
ETag: W/"1200-1477441566000"
Last-Modified: Wed, 26 Oct 2016 00:26:06 GMT
Proxy-Connection: Keep-alive
GET / HTTP/1.1
Host: xnatdev.xnat.org
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:49.0)
Gecko/20100101 Firefox/49.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://xnatdev.xnat.org/app/template/Login.vm
Cookie: JSESSIONID=76C1DA10DBA150622591CB767AB3E1BD;
SESSION_EXPIRATION_TIME="1479100822767,900000"; SESSION_ACTIVE=false
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx/1.4.6 (Ubuntu)
Date: Mon, 14 Nov 2016 05:22:36 GMT
Content-Length: 0
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Location: http://xnatdev.xnat.org/setup
Proxy-Connection: Keep-alive
GET /setup HTTP/1.1
Host: xnatdev.xnat.org
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:49.0)
Gecko/20100101 Firefox/49.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://xnatdev.xnat.org/app/template/Login.vm
Cookie: JSESSIONID=5F7194FBBF7FE9344C6D074FF0F85853;
SESSION_EXPIRATION_TIME="1479100956881,900000"; SESSION_ACTIVE=false
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx/1.4.6 (Ubuntu)
Date: Mon, 14 Nov 2016 05:22:36 GMT
Location: http://xnatdev.xnat.org/setup/
Transfer-Encoding: chunked
Proxy-Connection: Keep-alive
/setup/
request
/setup/
response
Login
request
Login
response
GET /setup/ HTTP/1.1
Host: xnatdev.xnat.org
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:49.0)
Gecko/20100101 Firefox/49.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://xnatdev.xnat.org/app/template/Login.vm
Cookie: JSESSIONID=5F7194FBBF7FE9344C6D074FF0F85853;
SESSION_EXPIRATION_TIME="1479100956881,900000"; SESSION_ACTIVE=false
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx/1.4.6 (Ubuntu)
Date: Mon, 14 Nov 2016 05:22:37 GMT
Content-Length: 0
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Location: http://xnatdev.xnat.org/app/template/Login.vm
Proxy-Connection: Keep-alive
GET /app/template/Login.vm HTTP/1.1
Host: xnatdev.xnat.org
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:49.0)
Gecko/20100101 Firefox/49.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://xnatdev.xnat.org/app/template/Login.vm
Cookie: JSESSIONID=5F7194FBBF7FE9344C6D074FF0F85853;
SESSION_EXPIRATION_TIME="1479100956881,900000"; SESSION_ACTIVE=false
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx/1.4.6 (Ubuntu)
Date: Mon, 14 Nov 2016 05:22:37 GMT
Content-Type: text/html;charset=ISO-8859-1
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Set-Cookie: SESSION_EXPIRATION_TIME="1479100957280,900000"; Version=1;
Path=/
Content-Language: en-US
Content-Encoding: gzip
Transfer-Encoding: chunked
Proxy-Connection: Keep-alive
Successful Login
Page
/login
request
/login
response
Icon
request
HTTP Traffic
POST /login HTTP/1.1
Host: xnatdev.xnat.org
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12;
rv:49.0) Gecko/20100101 Firefox/49.0
Accept:
text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://xnatdev.xnat.org/app/template/Login.vm
Cookie: JSESSIONID=68271B045CBFB8DAC23F42ED2BAB4562;
SESSION_EXPIRATION_TIME="1479091265015,900000";
SESSION_ACTIVE=false
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Content-Type: application/x-www-form-urlencoded
Content-Length: 47
username=admin&password=admin&login=&XNAT_CSRF=
HTTP/1.1 302 Found
Server: nginx/1.4.6 (Ubuntu)
Date: Mon, 14 Nov 2016 02:43:03 GMT
Content-Length: 0
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Set-Cookie: JSESSIONID=CFD4AEBCA086F25451E62065C83A065D; Path=/;
HttpOnly
Location: http://xnatdev.xnat.org/
Proxy-Connection: Keep-alive
GET /style/icons/icon-info-48.png HTTP/1.1
Host: xnatdev.xnat.org
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12;
rv:49.0) Gecko/20100101 Firefox/49.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://xnatdev.xnat.org/style/app.css?v=1.7.0a2
Cookie: JSESSIONID=68271B045CBFB8DAC23F42ED2BAB4562;
SESSION_EXPIRATION_TIME="1479091265015,900000";
SESSION_ACTIVE=false
DNT: 1
Connection: keep-alive
Icon
response
Root
request
Root
response
HTTP/1.1 200 OK
Server: nginx/1.4.6 (Ubuntu)
Date: Mon, 14 Nov 2016 02:43:03 GMT
Content-Type: image/png
Content-Length: 1200
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Set-Cookie: SESSION_EXPIRATION_TIME="1479091383248,900000";
Version=1; Path=/
Accept-Ranges: bytes
ETag: W/"1200-1477441566000"
Last-Modified: Wed, 26 Oct 2016 00:26:06 GMT
Proxy-Connection: Keep-alive
GET / HTTP/1.1
Host: xnatdev.xnat.org
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12;
rv:49.0) Gecko/20100101 Firefox/49.0
Accept:
text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://xnatdev.xnat.org/app/template/Login.vm
Cookie: JSESSIONID=CFD4AEBCA086F25451E62065C83A065D;
SESSION_EXPIRATION_TIME="1479091383248,900000";
SESSION_ACTIVE=false
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx/1.4.6 (Ubuntu)
Date: Mon, 14 Nov 2016 02:43:03 GMT
Content-Length: 0
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Location: http://xnatdev.xnat.org/setup
Proxy-Connection: Keep-alive
/setup
request
/setup
response
/setup/
request
/setup/
response
GET /setup HTTP/1.1
Host: xnatdev.xnat.org
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12;
rv:49.0) Gecko/20100101 Firefox/49.0
Accept:
text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://xnatdev.xnat.org/app/template/Login.vm
Cookie: JSESSIONID=CFD4AEBCA086F25451E62065C83A065D;
SESSION_EXPIRATION_TIME="1479091383248,900000";
SESSION_ACTIVE=false
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx/1.4.6 (Ubuntu)
Date: Mon, 14 Nov 2016 02:43:03 GMT
Location: http://xnatdev.xnat.org/setup/
Transfer-Encoding: chunked
Proxy-Connection: Keep-alive
GET /setup/ HTTP/1.1
Host: xnatdev.xnat.org
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12;
rv:49.0) Gecko/20100101 Firefox/49.0
Accept:
text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://xnatdev.xnat.org/app/template/Login.vm
Cookie: JSESSIONID=CFD4AEBCA086F25451E62065C83A065D;
SESSION_EXPIRATION_TIME="1479091383248,900000";
SESSION_ACTIVE=false
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx/1.4.6 (Ubuntu)
Date: Mon, 14 Nov 2016 02:43:05 GMT
Content-Type: text/html;charset=UTF-8
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Set-Cookie: SESSION_EXPIRATION_TIME="1479091384015,900000";
Version=1; Path=/
Content-Encoding: gzip
Transfer-Encoding: chunked
Proxy-Connection: Keep-alive