Can you please extend the trace to include the following two pieces of information as well:
* The response. Both status code, and in case of 407 if there is an NTLMSSP_CHALLLENGE blob or just the scheme name.. * Who closes the connection first (FIN) lör 2010-02-13 klockan 14:17 -0600 skrev Jeff Foster: > Client Packet summary > No. Time Src Info > 7 0.001648 1916 GET http://simon/efms/ HTTP/1.0 > 16 0.559067 1916 GET http://simon/efms/ HTTP/1.0, NTLMSSP_NEGOTIATE > 21 0.752159 1916 GET http://simon/efms/ HTTP/1.0, NTLMSSP_AUTH, User: WG > 42 1.576078 1917 GET http://simon/efms/ HTTP/1.0 > 65 1.961280 1917 GET http://simon/efms/ HTTP/1.0, NTLMSSP_NEGOTIATE > 70 2.151384 1917 GET http://simon/efms/ HTTP/1.0, NTLMSSP_AUTH, User: WG > 85 2.991803 1918 GET http://simon/EFMS/efms.js HTTP/1.0 > 144 3.370616 1918 GET http://simon/EFMS/efms.js HTTP/1.0, NTLMSSP_NEGOTIA > 157 3.560971 1918 GET http://simon/EFMS/efms.js HTTP/1.0, NTLMSSP_AUTH, U > 163 3.780493 1918 GET http://simon/EFMS/efms.css HTTP/1.0 > 171 3.781469 1919 GET http://simon/Styles/perry_fix_font.css HTTP/1.0 > 174 3.781643 1920 GET http://simon/Styles/forms.css HTTP/1.0 > 179 3.782358 1921 GET http://simon/styles/dashboard.css HTTP/1.0 > 195 3.969630 1918 GET http://simon/javascript/std.js HTTP/1.0 > 207 4.161036 1919 GET http://simon/EFMS/efms.css HTTP/1.0, NTLMSSP_NEGOTI > > Server (upstream) packet summary > No. Time Src Info > 12 0.369931 37156 GET /efms/ HTTP/1.0 > 18 0.559496 37156 GET /efms/ HTTP/1.0, NTLMSSP_NEGOTIATE > 23 0.752534 37156 GET /efms/ HTTP/1.0, NTLMSSP_AUTH, User: WGC\jfoste > 61 1.758489 37157 GET /efms/ HTTP/1.0 > 67 1.961708 37157 GET /efms/ HTTP/1.0, NTLMSSP_NEGOTIATE > 72 2.152100 37157 GET /efms/ HTTP/1.0, NTLMSSP_AUTH, User: WGC\jfoste > 113 3.180079 37158 GET /EFMS/efms.js HTTP/1.0 > 146 3.371116 37158 GET /EFMS/efms.js HTTP/1.0, NTLMSSP_NEGOTIATE > 159 3.561335 37158 GET /EFMS/efms.js HTTP/1.0, NTLMSSP_AUTH, User: WGC\jfo > 168 3.781256 37158 GET /EFMS/efms.css HTTP/1.0 > 190 3.967221 37159 GET /Styles/perry_fix_font.css HTTP/1.0 > 191 3.967513 37160 GET /Styles/forms.css HTTP/1.0 > 192 3.967791 37161 GET /styles/dashboard.css HTTP/1.0 > 197 3.970336 37158 GET /javascript/std.js HTTP/1.0 > 210 4.161855 37161 GET /EFMS/efms.css HTTP/1.0, NTLMSSP_NEGOTIATE > > Jeff F>
