root@obundra# ngrep -d eth0 -lqi -p -W none ^get\|^post tcp dst port 80
interface: eth0 (192.168.32.0/255.255.255.0)
filter: (ip or ip6) and ( tcp dst port 80 )
match: ^get|^post

T 192.168.32.135:4559 -> 74.125.39.106:80 [AP]
GET /imgres?q=electric+guitar&um=1&hl=et&client=opera&rls=en&channel=suggest&tbm=isch&tbnid=qhBpN2Wt1fdyfM:&imgrefurl=http://www.guitar-4u.com/ESP-guitars7.php&docid=LjthTa-X1gg36M&w=561&h=1603&ei=2TmMTqK5BJL14QTCvtisCQ&zoom=1&iact=rc&dur=192&page=9&tbnh=239&tbnw=84&start=213&ndsp=22&ved=1t:429,r:15,s:213&tx=69&ty=224&biw=1279&bih=902 HTTP/1.1..User-Agent: Opera/9.80 (Windows NT 5.1; U; en) Presto/2.9.168 Version/11.51..Host: www.google.ee..Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/webp, image/jpeg, image/gif, image/x-xbitmap, */*;q=0.1..Accept-Language: et-EE,et;q=0.9,en;q=0.8..Accept-Encoding: gzip, deflate..Referer: http://www.google.ee/search?um=1&hl=et&client=opera&rls=en&channel=suggest&biw=1279&bih=902&tbm=isch&sa=1&q=electric+guitar&oq=electric+guitar&aq=f&aqi=g1g-S9&aql=&gs_sm=e&gs_upl=85761l85761l0l88619l1l1l0l0l0l0l505l505l5-1l1l0..Cookie: PREF=ID=14a6b13fa3bb9517:U=6687127c2b8156de:FF=0:TM=1317700827:LM=1317707490:S=P3nsbLgFjMesIdiN; NID=51=RU1iS4GEy1aLxunZ1TrTZLtt1sSbo7lXXauOTf0Oh6jEGH1lhdVGrVFtz6D95u4rFHopH3PQg3YbehPjXapK8tjweuJBHILDFi2PvxjhISV5Zxh6qpWHwXhFAMnuhuRT..Connection: Keep-Alive....

T 192.168.32.135:4561 -> 74.125.39.106:80 [AP]
GET /imghover?iact=hm&ei=2TmMTqK5BJL14QTCvtisCQ&q=electric+guitar&tbs=&page=9&tbnh=239&tbnw=84&start=213&ndsp=22&dur=88&tbnid=qhBpN2Wt1fdyfM:&hovh=380&hovw=133&vpx=322&vpy=366&imgrefurl=http://www.guitar-4u.com/ESP-guitars7.php&ved=1t:1527,r:15,s:213 HTTP/1.1..User-Agent: Opera/9.80 (Windows NT 5.1; U; en) Presto/2.9.168 Version/11.51..Host: www.google.ee..Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/webp, image/jpeg, image/gif, image/x-xbitmap, */*;q=0.1..Accept-Language: et-EE,et;q=0.9,en;q=0.8..Accept-Encoding: gzip, deflate..Referer: http://www.google.ee/search?um=1&hl=et&client=opera&rls=en&channel=suggest&biw=1279&bih=902&tbm=isch&sa=1&q=electric+guitar&oq=electric+guitar&aq=f&aqi=g1g-S9&aql=&gs_sm=e&gs_upl=85761l85761l0l88619l1l1l0l0l0l0l505l505l5-1l1l0..Cookie: PREF=ID=14a6b13fa3bb9517:U=6687127c2b8156de:FF=0:TM=1317700827:LM=1317707490:S=P3nsbLgFjMesIdiN; NID=51=RU1iS4GEy1aLxunZ1TrTZLtt1sSbo7lXXauOTf0Oh6jEGH1lhdVGrVFtz6D95u4rFHopH3PQg3YbehPjXapK8tjweuJBHILDFi2PvxjhISV5Zxh6qpWHwXhFAMnuhuRT..Connection: Keep-Alive....

T 192.168.32.135:4564 -> 66.96.160.130:80 [AP]
GET /ESP-guitars7.php HTTP/1.1..User-Agent: Opera/9.80 (Windows NT 5.1; U; en) Presto/2.9.168 Version/11.51..Host: www.guitar-4u.com..Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/webp, image/jpeg, image/gif, image/x-xbitmap, */*;q=0.1..Accept-Language: et-EE,et;q=0.9,en;q=0.8..Accept-Encoding: gzip, deflate..Referer: http://www.google.ee/imgres?q=electric+guitar&um=1&hl=et&client=opera&rls=en&channel=suggest&tbm=isch&tbnid=qhBpN2Wt1fdyfM:&imgrefurl=http://www.guitar-4u.com/ESP-guitars7.php&docid=LjthTa-X1gg36M&w=561&h=1603&ei=2TmMTqK5BJL14QTCvtisCQ&zoom=1&iact=rc&dur=192&page=9&tbnh=239&tbnw=84&start=213&ndsp=22&ved=1t:429,r:15,s:213&tx=69&ty=224&biw=1279&bih=902..Connection: Keep-Alive....

T 192.168.32.135:4565 -> 67.99.204.35:80 [AP]
GET /Merchant2/graphics/00000001/espvipe50.jpg HTTP/1.1..User-Agent: Opera/9.80 (Windows NT 5.1; U; en) Presto/2.9.168 Version/11.51..Host: www.instrumentpro.com..Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/webp, image/jpeg, image/gif, image/x-xbitmap, */*;q=0.1..Accept-Language: et-EE,et;q=0.9,en;q=0.8..Accept-Encoding: gzip, deflate..Referer: http://www.google.ee/imgres?q=electric+guitar&um=1&hl=et&client=opera&rls=en&channel=suggest&tbm=isch&tbnid=qhBpN2Wt1fdyfM:&imgrefurl=http://www.guitar-4u.com/ESP-guitars7.php&docid=LjthTa-X1gg36M&w=561&h=1603&ei=2TmMTqK5BJL14QTCvtisCQ&zoom=1&iact=rc&dur=192&page=9&tbnh=239&tbnw=84&start=213&ndsp=22&ved=1t:429,r:15,s:213&tx=69&ty=224&biw=1279&bih=902..Connection: Keep-Alive....