关于邮箱登陆时的包的分析

evilyt 2010-01-04 02:50:44

各位高手，小菜鸟在此求教。

我在登陆21cn邮箱时抓下登陆的post数据包，内容如下：
POST /maillogin.jsp HTTP/1.1Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, */*Referer: http://mail.21cn.com/Accept-Language: zh-cnContent-Type: application/x-www-form-urlencodedAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; CIBA; 360SE)Host: passport.21cn.comContent-Length: 98Connection: Keep-AliveCache-Control: no-cacheCookie: regCount=2; regTime=1262574293196; uud.errormessage=faabc146187efdc9; hiddenRand=48th; SSONKEY=5a2f145c33302450c6085ffca7e71e778312a36afd277f8e7fca41b884811461a1a5cd9014145c9b520ba4b260757fd9151b94e7e91d08088ca435334f819f6ae116494125bc1cb269c324ace926f3ab0676f1246df6a7742bc2127fdb8e30e7c82876f2373078c033b905931487b8cb787ac01a7f6957415cc94f78af0bd3d5f518bfdfe627a77da0966af66cd40aa7ac69eb770976fd2f; uud.username=5a2f145c33302450c6085ffca7e71e7748dd5b31d1ec0750; traceUser=1263221665498858285; jamesanthony=2; area_21cn=null; SESSION_ID=000000237071280-20100104030843970257-010; ACCOUNT=123@21cn.com; VERIFY_LOGON=e4343e49de55b4c86a5101b43ccc61d7; JSESSIONID=abcmVHMnotVx8hEUXTIxsLoginName=abcd&DomainName=21cn.com&Template=&UserName=1234&passwd=1234&remUser=trueHTTP/1.1 302 FoundServer: Resin/3.1.8Location: http://hermes.webmail.21cn.com/webmail/login.perform?key=1Set-Cookie: area_21cn=null; domain=.21cn.com; path=/Set-Cookie: SSONKEY=5a2f145c33302450c6085ffca7e71e778312a36afd277f8e7fca41b884811461a1a5cd9014145c9b520ba4b260757fd9151b94e7e91d08088ca435334f819f6ae116494125bc1cb269c324ace926f3ab0676f1246df6a7742bc2127fdb8e30e7c82876f2373078c08f7d689073e842651fe834b3de0d6f3114a79bf700b5fa25640fb74fe1039d84174eb07662eea835f42889bec3032835; domain=.21cn.com; path=/Content-Type: text/html; charset=ISO8859_1Content-Length: 96Date: Mon, 04 Jan 2010 03:16:43 GMTThe URL has moved <a href="http://hermes.webmail.21cn.com/webmail/login.perform?key=1">here</a>

东西有些乱。
我想知道包的结构，还有里面ssonkey啊jsessionid啊都是啥东西，想具体了解下，应该看哪些资料啊？
还有邮箱登录时的流程……比如我先发一个包申请链接，然后回馈一个包，然后XXX。
21CN的用户名和密码竟然是明文！！！

新人没分。。。告诉我哪本书或者链接上有就行。

...全文