AnsweredAssumed Answered

Baidu Client

Question asked by tlussnig on Feb 11, 2016

Hi,

 

i am wondering from where you have the Baidu Client information.

1) I Checked their webpage ( http://help.baidu.com/question?prod_en=master&class=Baiduspider&id=1000973 ) what IP's they are using.

  This result in 123.125.71.0/24 when i looked into my handhshake protocol i could not confirm your definition.

2) I captured some data from this ip range and provide you here the pcap's.

     https://suche.org/net/baidu1.pdml.xml

     https://suche.org/net/baidu1.pcap

3) I also have an capture of http from the same ip rang ( https://suche.org/net/baidu-http.pcap ) that show it is an also acording to user agent an baidu spider.

 

Important differences:

- NO SNI

+ TLSv1.2

Outcomes