Re: Intercepting ASP.NET cookies

[Deepak Shetty <sh...@gmail.com>]

>How can I check if the set-cookie has a secure mode?
Use View Results tree and check the headers you get for Set-Cookie
> I supposed that the path attribute should be checked and
matched automatically by JMeter.
Yes, but your application may have a bug.

It may be that your test has actually failed because of which you arent
getting the set-cookie header . Again your only way s to compare each JMeter
request/response(using view results tree) with the corresponding
request/response for the same sample for a browser, keeping in mind that
most applications have a lot of dynamic data that needs to be
extracted/posted.

regards
deepak

On Mon, May 31, 2010 at 2:35 PM, sergio1 <se...@yahoo.it> wrote:

>
>
> Deepak Shetty wrote:
> >
> >> Hi
> >> Using View Results tree , whats the Set-Cookie header look like?
> >> Which request from Jmeter doesnt seem to send the cookie? (for e.g. if
> >> the
> >> set-cookie has a secure mode then it wont be sent on any http request,
> or
> >> if
> >> it has a path attribute then the path must match).
> >
> >> The other thing to check is that you have Follow Redirects on HTTP
> >> samplers
> >> instead of Redirect Automatically.
> >> regards
> >> deepak
> >
> > Hi Deepak,
> > thank you for you support.
> > The interested request are the one after the HTTPS part started.
> > All the subsequent GETs bear only the cookie set before the HTTPS
> started.
> >
> > How can I check if the set-cookie has a secure mode? Let suppose that it
> > is so,
> > is JMeter able to support this config? I did not find any specific
> > explanation about that.
> > I supposed that the path attribute should be checked and matched
> > automatically by JMeter.
> > I just saw the Phantom cookies by analyzing the browser dialog with a
> > specific tool.
> > (note: I'm focused on very few pages, they are the same on JM and on
> > browser)
> >
> > I will check tomorrow with the browser tool.
> >> The other thing to check is that you have Follow Redirects on HTTP
> >> samplers
> >> instead of Redirect Automatically.
> > Just checked,
> >
> > Thank you
> >
> > Sergio
> > On Mon, May 31, 2010 at 9:54 AM, sergio1 <se...@yahoo.it> wrote:
> >
> >>
> >> Hi everybody,
> >>
> >> I'm trying to test an .NET application.
> >> When I run without https everything works fine, but if I turn on https,
> >> it
> >> looks like Jmeter is not able to
> >> intercept two cookies, namely:
> >> .ASPXFORMSAUTH
> >> ViewMode
> >>
> >> Note that other 4 cookies are managed properly, and that I'm working
> with
> >> one thread at a time(at the moment).
> >> I also tried to set them manually (with a copy and paste operation from
> >> browser), with no luck.
> >>
> >> Any suggestion?
> >> Maybe there is there any specific encryption schema used by .NET?
> >> Thank you in advance, best regards
> >>
> >> Sergio
> >>
> >>
> >>
> >> --
> >> View this message in context:
> >>
> http://old.nabble.com/Intercepting-ASP.NET-cookies-tp28733038p28733038.html
> >> Sent from the JMeter - User mailing list archive at Nabble.com.
> >>
> >>
> >> ---------------------------------------------------------------------
> >> To unsubscribe, e-mail: jmeter-user-unsubscribe@jakarta.apache.org
> >> For additional commands, e-mail: jmeter-user-help@jakarta.apache.org
> >>
> >>
> >
> >
>
> --
> View this message in context:
> http://old.nabble.com/Intercepting-ASP.NET-cookies-tp28733038p28735329.html
> Sent from the JMeter - User mailing list archive at Nabble.com.
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: jmeter-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: jmeter-user-help@jakarta.apache.org
>
>

Re: Intercepting ASP.NET cookies

[sergio1 <se...@yahoo.it>]

Just to close this issue, 
I found the solution after a deep inspection of the parameters.
In a very stupid way,  I modified inadvertently the name of a variable that
was passed with the POST.
So, the cookie was not set.

My confusion was increased by the fact that IE8 aborts the connection
immediately after receiving the answer, and the tool I used was not able to
capture the transaction.

So, my conclusion is that you should always have a good HTML tracker at hand
and do a deep analysis of what is going on.

best regards and thank you to every body


Deepak Shetty wrote:
> 
>>How can I check if the set-cookie has a secure mode?
> Use View Results tree and check the headers you get for Set-Cookie
>> I supposed that the path attribute should be checked and
> matched automatically by JMeter.
> Yes, but your application may have a bug.
> 
> It may be that your test has actually failed because of which you arent
> getting the set-cookie header . Again your only way s to compare each
> JMeter
> request/response(using view results tree) with the corresponding
> request/response for the same sample for a browser, keeping in mind that
> most applications have a lot of dynamic data that needs to be
> extracted/posted.
> 
> regards
> deepak
> 
> On Mon, May 31, 2010 at 2:35 PM, sergio1 <se...@yahoo.it> wrote:
> 
>>
>>
>> Deepak Shetty wrote:
> 
> 
> 

-- 
View this message in context: http://old.nabble.com/Intercepting-ASP.NET-cookies-tp28733038p28793185.html
Sent from the JMeter - User mailing list archive at Nabble.com.


---------------------------------------------------------------------
To unsubscribe, e-mail: jmeter-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: jmeter-user-help@jakarta.apache.org