[ale] A new web server

[meuon at geeklabs.com (Mike Harrison)]

> Here is a line from access_log
>
> 65.6.155.178 - - [18/Jan/2009:22:44:46 -0500] "GET /sample.wmv
> HTTP/1.1" 200 643170 "-" "NSPlayer/11.0.5721.5251 WMFSDK/11.0"
>
> There is a 200, but the video did not play


Install "sniffit" on the server.



Run:
  mkdir sniff
  cd sniff
  sniffit -b -l0 -s 65.6.155.178

Load exactly one fresh page, with graphics.
kill sniffit:

  killall sniffit
  cat * >stuff
  less stuff

Now do the same on your workstation,
changing the IP address to the server.
In fact, you should do both at the same time.

compare the "stuff" files from each machine.
You should even see the full binary images data on
each, negotiations of browser to server, etc..

I'm not sure what to do next, it depends on what you find
looking at those "stuff" files, but I am expecting
things like: timestamp/expire date issues,
or even interupted transfers. Heck, you might find
your ISP has a caching proxy.. (that they won't tell
anyone about)..