Tried to capture the HTTP requests while using Opera. The main parts are -- slightly anonymized --
GET / HTTP/1.15..
Host: test.example.org
followed by
GET /mailman/listinfo HTTP/1.1
Host: test.example.org
which in turn serves the mailman listinfo page. :-/
Full output from
# tcpdump -n -S -s 0 -A 'tcp dst port 80' | grep -B3 -A10 "GET /"
~R.P.A-....GET / HTTP/1.15..
Host: test.example.org
Connection: keep-alive
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.111 Safari/537.36 OPR/34.0.2036.50
Accept-Encoding: gzip, deflate, lzma, sdch
Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4
17:47:47.813655 IP 109.91.37.211.43175 > xx.xx.xx.xx.80: Flags [P.], seq 2939537777:2939538219, ack 226382906, win 16575, length 442
~T:P.@..c..GET /mailman/listinfo HTTP/1.1
Host: test.example.org
Connection: keep-alive
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.111 Safari/537.36 OPR/34.0.2036.50
Accept-Encoding: gzip, deflate, lzma, sdch
Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4
GET / HTTP/1.15..
Host: test.example.org
followed by
GET /mailman/listinfo HTTP/1.1
Host: test.example.org
which in turn serves the mailman listinfo page. :-/
Full output from
# tcpdump -n -S -s 0 -A 'tcp dst port 80' | grep -B3 -A10 "GET /"
~R.P.A-....GET / HTTP/1.15..
Host: test.example.org
Connection: keep-alive
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.111 Safari/537.36 OPR/34.0.2036.50
Accept-Encoding: gzip, deflate, lzma, sdch
Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4
17:47:47.813655 IP 109.91.37.211.43175 > xx.xx.xx.xx.80: Flags [P.], seq 2939537777:2939538219, ack 226382906, win 16575, length 442
~T:P.@..c..GET /mailman/listinfo HTTP/1.1
Host: test.example.org
Connection: keep-alive
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.111 Safari/537.36 OPR/34.0.2036.50
Accept-Encoding: gzip, deflate, lzma, sdch
Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4