sniff header for curl requests