No. Time Source Destination Protocol Info 1 12:37:42.715135 192.168.11.43 167.235.7.45 TCP https > 55752 [ACK] Seq=1 Ack=1 Win=64757 Len=0 TSV=174427136 TSER=107645076 Frame 1: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_23:f1:a5 (00:1e:37:23:f1:a5) Internet Protocol, Src: 192.168.11.43 (192.168.11.43), Dst: 167.235.7.45 (167.235.7.45) Transmission Control Protocol, Src Port: https (443), Dst Port: 55752 (55752), Seq: 1, Ack: 1, Len: 0 0000 00 1e 37 23 f1 a5 00 15 2b a6 ad bf 08 00 45 00 ..7#....+.....E. 0010 00 34 15 39 40 00 7e 06 6c 9f c0 a8 0b 2b a7 eb .4.9@.~.l....+.. 0020 07 2d 01 bb d9 c8 14 1e fc f7 6e fa f2 1d 80 10 .-........n..... 0030 fc f5 8b c5 00 00 01 01 08 0a 0a 65 8c 00 06 6a ...........e...j 0040 88 94 .. No. Time Source Destination Protocol Info 2 12:37:43.054765 167.235.7.21 167.235.7.63 NBNS Name query NB TMS-NODE-202<00> Frame 2: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Portwell_13:a2:aa (00:90:fb:13:a2:aa), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 167.235.7.21 (167.235.7.21), Dst: 167.235.7.63 (167.235.7.63) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service 0000 ff ff ff ff ff ff 00 90 fb 13 a2 aa 08 00 45 00 ..............E. 0010 00 4e 15 43 00 00 80 11 c7 31 a7 eb 07 15 a7 eb .N.C.....1...... 0020 07 3f 00 89 00 89 00 3a 25 da ec eb 01 10 00 01 .?.....:%....... 0030 00 00 00 00 00 00 20 46 45 45 4e 46 44 43 4e 45 ...... FEENFDCNE 0040 4f 45 50 45 45 45 46 43 4e 44 43 44 41 44 43 43 OEPEEEFCNDCDADCC 0050 41 43 41 43 41 41 41 00 00 20 00 01 ACACAAA.. .. No. Time Source Destination Protocol Info 3 12:37:43.102911 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 3: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 1, Ack: 1, Len: 1460 NetBIOS Session Service SMB (Server Message Block Protocol) NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 05 dc 9c 35 40 00 7e 06 f6 c6 a7 eb 0d 30 a7 eb ...5@.~......0.. 0020 07 19 00 8b 0e d4 40 86 6f 53 56 09 d2 36 50 18 ......@.oSV..6P. 0030 fe c4 2a ab 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..*......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 04 75 0c ff 00 00 00 ff ...0.....u...... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0280 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0290 00 00 06 30 ff fe 01 08 41 75 0c ff 00 00 00 ff ...0....Au...... 02a0 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 02b0 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 02c0 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 02d0 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 02e0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 02f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0300 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0310 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0320 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0330 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0340 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0350 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0360 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0370 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0380 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0390 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 03a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 03b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 03c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 03d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 03e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 03f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0400 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0410 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0420 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0430 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0440 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0450 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0460 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0470 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0480 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0490 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 04a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 04b0 00 01 00 01 00 01 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 04c0 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 04d0 00 00 06 30 ff fe 01 08 82 75 0c ff 00 00 00 ff ...0.....u...... 04e0 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 04f0 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0500 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0510 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 0520 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 0530 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0540 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0550 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0560 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0570 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0580 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0590 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 05a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 05b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 05c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 05d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 05e0 00 01 00 01 00 01 00 01 00 01 .......... No. Time Source Destination Protocol Info 4 12:37:43.102968 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 4: 898 bytes on wire (7184 bits), 898 bytes captured (7184 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 1461, Ack: 1, Len: 844 [Reassembled TCP Segments (576 bytes): #3(308), #4(268)] NetBIOS Session Service SMB (Server Message Block Protocol) NetBIOS Session Service SMB (Server Message Block Protocol) Frame (898 bytes): 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 03 74 9c 36 40 00 7e 06 f9 2d a7 eb 0d 30 a7 eb .t.6@.~..-...0.. 0020 07 19 00 8b 0e d4 40 86 75 07 56 09 d2 36 50 18 ......@.u.V..6P. 0030 fe c4 72 0b 00 00 00 01 00 01 00 01 00 01 00 01 ..r............. 0040 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0050 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0060 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0070 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0080 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0090 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 00 02 3c ff 53 4d 42 2e 00 00 00 00 98 .....<.SMB...... 0150 07 c8 00 00 00 00 00 00 00 00 00 00 00 00 06 30 ...............0 0160 ff fe 01 08 c5 75 0c ff 00 00 00 ff ff 00 00 00 .....u.......... 0170 00 00 02 3c 00 00 00 00 00 00 00 00 00 00 00 01 ...<............ 0180 02 01 01 01 f5 0a a1 01 5b 46 ad 0b 25 84 25 74 ........[F..%.%t 0190 96 25 91 0d 89 07 de 15 2b 1b 45 06 97 02 1a 03 .%......+.E..... 01a0 64 01 3b 01 16 01 03 01 05 01 02 01 2a 01 02 01 d.;.........*... 01b0 01 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0280 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0290 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 02a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 02b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 02c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 02d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 02e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 02f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0300 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0310 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0320 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0330 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0340 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0350 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0360 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0370 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0380 00 01 .. Reassembled TCP (576 bytes): 0000 00 00 02 3c ff 53 4d 42 2e 00 00 00 00 98 07 c8 ...<.SMB........ 0010 00 00 00 00 00 00 00 00 00 00 00 00 06 30 ff fe .............0.. 0020 01 08 82 75 0c ff 00 00 00 ff ff 00 00 00 00 00 ...u............ 0030 02 3c 00 00 00 00 00 00 00 00 00 00 00 01 02 00 .<.............. 0040 01 01 f5 0a a1 01 5b 46 ad 0b 25 84 25 74 96 25 ......[F..%.%t.% 0050 91 0d 89 07 de 15 2b 1b 45 06 97 02 1a 03 64 01 ......+.E.....d. 0060 3b 01 16 01 03 01 05 01 02 01 2a 01 02 01 01 01 ;.........*..... 0070 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0080 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0090 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ No. Time Source Destination Protocol Info 5 12:37:43.103020 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 5: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 2305, Ack: 64, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 37 40 00 7e 06 fa 38 a7 eb 0d 30 a7 eb .h.7@.~..8...0.. 0020 07 19 00 8b 0e d4 40 86 78 53 56 09 d2 75 50 18 ......@.xSV..uP. 0030 fe 85 32 52 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..2R.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 03 76 0c ff 00 00 00 ff ...0.....v...... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 6 12:37:43.177756 Cisco_f3:bd:bf Broadcast 0x0806 ARP Frame 6: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_f3:bd:bf (00:12:00:f3:bd:bf), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Data (46 bytes) 0000 ff ff ff ff ff ff 00 12 00 f3 bd bf 08 06 00 01 ................ 0010 08 00 06 04 00 01 00 12 00 f3 bd bf a7 eb 07 7d ...............} 0020 00 00 00 00 00 00 a7 eb 07 73 00 00 00 00 00 00 .........s...... 0030 00 00 00 00 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 7 12:37:43.603895 167.235.13.48 167.235.7.25 TCP netbios-ssn > spw-dialer [ACK] Seq=2881 Ack=253 Win=64968 Len=0 Frame 7: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 2881, Ack: 253, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9c 39 40 00 7e 06 fc 76 a7 eb 0d 30 a7 eb .(.9@.~..v...0.. 0020 07 19 00 8b 0e d4 40 86 7a 93 56 09 d3 32 50 10 ......@.z.V..2P. 0030 fd c8 5a 37 00 00 00 00 00 00 00 00 ..Z7........ No. Time Source Destination Protocol Info 8 12:37:43.603994 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 8: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 2881, Ack: 316, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 3a 40 00 7e 06 fa 35 a7 eb 0d 30 a7 eb .h.:@.~..5...0.. 0020 07 19 00 8b 0e d4 40 86 7a 93 56 09 d3 71 50 18 ......@.z.V..qP. 0030 fd 89 f0 11 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 43 76 0c ff 00 00 00 ff ...0....Cv...... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 9 12:37:43.604045 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 9: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 3457, Ack: 379, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 3b 40 00 7e 06 fa 34 a7 eb 0d 30 a7 eb .h.;@.~..4...0.. 0020 07 19 00 8b 0e d4 40 86 7c d3 56 09 d3 b0 50 18 ......@.|.V...P. 0030 fd 4a ab d0 00 00 00 00 02 3c ff 53 4d 42 2e 00 .J.......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 85 76 0c ff 00 00 00 ff ...0.....v...... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 10 12:37:43.604096 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 10: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 4033, Ack: 379, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 3c 40 00 7e 06 fa 33 a7 eb 0d 30 a7 eb .h.<@.~..3...0.. 0020 07 19 00 8b 0e d4 40 86 7f 13 56 09 d3 b0 50 18 ......@...V...P. 0030 fd 4a 6c 91 00 00 00 00 02 3c ff 53 4d 42 2e 00 .Jl......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c2 76 0c ff 00 00 00 ff ...0.....v...... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 11 12:37:43.604150 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 11: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 4609, Ack: 379, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 3d 40 00 7e 06 fa 32 a7 eb 0d 30 a7 eb .h.=@.~..2...0.. 0020 07 19 00 8b 0e d4 40 86 81 53 56 09 d3 b0 50 18 ......@..SV...P. 0030 fd 4a 2b 50 00 00 00 00 02 3c ff 53 4d 42 2e 00 .J+P.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 01 77 0c ff 00 00 00 ff ...0.....w...... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 12 12:37:43.604200 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 12: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 5185, Ack: 379, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 3e 40 00 7e 06 fa 31 a7 eb 0d 30 a7 eb .h.>@.~..1...0.. 0020 07 19 00 8b 0e d4 40 86 83 93 56 09 d3 b0 50 18 ......@...V...P. 0030 fd 4a e6 10 00 00 00 00 02 3c ff 53 4d 42 2e 00 .J.......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 44 77 0c ff 00 00 00 ff ...0....Dw...... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 13 12:37:43.804619 167.235.7.21 167.235.7.63 NBNS Name query NB TMS-NODE-202<00> Frame 13: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Portwell_13:a2:aa (00:90:fb:13:a2:aa), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 167.235.7.21 (167.235.7.21), Dst: 167.235.7.63 (167.235.7.63) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service 0000 ff ff ff ff ff ff 00 90 fb 13 a2 aa 08 00 45 00 ..............E. 0010 00 4e 15 53 00 00 80 11 c7 21 a7 eb 07 15 a7 eb .N.S.....!...... 0020 07 3f 00 89 00 89 00 3a 25 da ec eb 01 10 00 01 .?.....:%....... 0030 00 00 00 00 00 00 20 46 45 45 4e 46 44 43 4e 45 ...... FEENFDCNE 0040 4f 45 50 45 45 45 46 43 4e 44 43 44 41 44 43 43 OEPEEEFCNDCDADCC 0050 41 43 41 43 41 41 41 00 00 20 00 01 ACACAAA.. .. No. Time Source Destination Protocol Info 14 12:37:43.975386 167.235.13.205 167.235.7.19 SMB Locking AndX Request, FID: 0x400d Frame 14: 109 bytes on wire (872 bits), 109 bytes captured (872 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6a:be:d4 (00:1a:6b:6a:be:d4) Internet Protocol, Src: 167.235.13.205 (167.235.13.205), Dst: 167.235.7.19 (167.235.7.19) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: navegaweb-port (3159), Seq: 1, Ack: 1, Len: 55 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6a be d4 00 15 2b a6 ad bf 08 00 45 00 ..kj....+.....E. 0010 00 5f 27 44 40 00 7e 06 70 9e a7 eb 0d cd a7 eb ._'D@.~.p....... 0020 07 13 01 bd 0c 57 5b f8 ca 22 fc ce f6 27 50 18 .....W[.."...'P. 0030 44 04 1f d5 00 00 00 00 00 33 ff 53 4d 42 24 00 D........3.SMB$. 0040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 05 08 ff ff 00 00 ff ff 08 ff 00 00 00 0d ................ 0060 40 02 01 00 00 00 00 00 00 00 00 00 00 @............ No. Time Source Destination Protocol Info 15 12:37:43.976457 167.235.13.205 167.235.7.19 SMB Close Response Frame 15: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6a:be:d4 (00:1a:6b:6a:be:d4) Internet Protocol, Src: 167.235.13.205 (167.235.13.205), Dst: 167.235.7.19 (167.235.7.19) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: navegaweb-port (3159), Seq: 56, Ack: 46, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6a be d4 00 15 2b a6 ad bf 08 00 45 00 ..kj....+.....E. 0010 00 4f 27 45 40 00 7e 06 70 ad a7 eb 0d cd a7 eb .O'E@.~.p....... 0020 07 13 01 bd 0c 57 5b f8 ca 59 fc ce f6 54 50 18 .....W[..Y...TP. 0030 43 d7 81 41 00 00 00 00 00 23 ff 53 4d 42 04 00 C..A.....#.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 05 08 ff fe 00 10 00 1c 00 00 00 ............. No. Time Source Destination Protocol Info 16 12:37:43.979080 Cisco_a6:ad:bf Broadcast 0x0806 ARP Frame 16: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Data (46 bytes) 0000 ff ff ff ff ff ff 00 15 2b a6 ad bf 08 06 00 01 ........+....... 0010 08 00 06 04 00 01 00 15 2b a6 ad bf a7 eb 07 7e ........+......~ 0020 00 00 00 00 00 00 a7 eb 07 37 00 00 00 00 00 00 .........7...... 0030 00 00 00 00 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 17 12:37:43.986719 167.235.13.205 167.235.7.19 SMB Locking AndX Request, FID: 0x400e Frame 17: 109 bytes on wire (872 bits), 109 bytes captured (872 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6a:be:d4 (00:1a:6b:6a:be:d4) Internet Protocol, Src: 167.235.13.205 (167.235.13.205), Dst: 167.235.7.19 (167.235.7.19) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: navegaweb-port (3159), Seq: 95, Ack: 46, Len: 55 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6a be d4 00 15 2b a6 ad bf 08 00 45 00 ..kj....+.....E. 0010 00 5f 27 4f 40 00 7e 06 70 93 a7 eb 0d cd a7 eb ._'O@.~.p....... 0020 07 13 01 bd 0c 57 5b f8 ca 80 fc ce f6 54 50 18 .....W[......TP. 0030 43 d7 1f 76 00 00 00 00 00 33 ff 53 4d 42 24 00 C..v.....3.SMB$. 0040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 05 08 ff ff 00 00 ff ff 08 ff 00 00 00 0e ................ 0060 40 02 01 00 00 00 00 00 00 00 00 00 00 @............ No. Time Source Destination Protocol Info 18 12:37:43.995655 167.235.13.205 167.235.7.19 SMB Close Response Frame 18: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6a:be:d4 (00:1a:6b:6a:be:d4) Internet Protocol, Src: 167.235.13.205 (167.235.13.205), Dst: 167.235.7.19 (167.235.7.19) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: navegaweb-port (3159), Seq: 150, Ack: 91, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6a be d4 00 15 2b a6 ad bf 08 00 45 00 ..kj....+.....E. 0010 00 4f 27 51 40 00 7e 06 70 a1 a7 eb 0d cd a7 eb .O'Q@.~.p....... 0020 07 13 01 bd 0c 57 5b f8 ca b7 fc ce f6 81 50 18 .....W[.......P. 0030 43 aa 40 e3 00 00 00 00 00 23 ff 53 4d 42 04 00 C.@......#.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 05 08 ff fe 00 10 40 1c 00 00 00 ........@.... No. Time Source Destination Protocol Info 19 12:37:44.012996 167.235.13.205 167.235.7.19 SMB Locking AndX Request, FID: 0x400f Frame 19: 109 bytes on wire (872 bits), 109 bytes captured (872 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6a:be:d4 (00:1a:6b:6a:be:d4) Internet Protocol, Src: 167.235.13.205 (167.235.13.205), Dst: 167.235.7.19 (167.235.7.19) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: navegaweb-port (3159), Seq: 189, Ack: 91, Len: 55 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6a be d4 00 15 2b a6 ad bf 08 00 45 00 ..kj....+.....E. 0010 00 5f 27 5c 40 00 7e 06 70 86 a7 eb 0d cd a7 eb ._'\@.~.p....... 0020 07 13 01 bd 0c 57 5b f8 ca de fc ce f6 81 50 18 .....W[.......P. 0030 43 aa 1f 17 00 00 00 00 00 33 ff 53 4d 42 24 00 C........3.SMB$. 0040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 05 08 ff ff 00 00 ff ff 08 ff 00 00 00 0f ................ 0060 40 02 01 00 00 00 00 00 00 00 00 00 00 @............ No. Time Source Destination Protocol Info 20 12:37:44.013889 167.235.13.205 167.235.7.19 SMB Close Response Frame 20: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6a:be:d4 (00:1a:6b:6a:be:d4) Internet Protocol, Src: 167.235.13.205 (167.235.13.205), Dst: 167.235.7.19 (167.235.7.19) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: navegaweb-port (3159), Seq: 244, Ack: 136, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6a be d4 00 15 2b a6 ad bf 08 00 45 00 ..kj....+.....E. 0010 00 4f 27 5d 40 00 7e 06 70 95 a7 eb 0d cd a7 eb .O']@.~.p....... 0020 07 13 01 bd 0c 57 5b f8 cb 15 fc ce f6 ae 50 18 .....W[.......P. 0030 43 7d 00 85 00 00 00 00 00 23 ff 53 4d 42 04 00 C}.......#.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 05 08 ff fe 00 10 80 1c 00 00 00 ............. No. Time Source Destination Protocol Info 21 12:37:44.025969 167.235.13.205 167.235.7.19 SMB Locking AndX Request, FID: 0x8000 Frame 21: 109 bytes on wire (872 bits), 109 bytes captured (872 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6a:be:d4 (00:1a:6b:6a:be:d4) Internet Protocol, Src: 167.235.13.205 (167.235.13.205), Dst: 167.235.7.19 (167.235.7.19) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: navegaweb-port (3159), Seq: 283, Ack: 136, Len: 55 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6a be d4 00 15 2b a6 ad bf 08 00 45 00 ..kj....+.....E. 0010 00 5f 27 69 40 00 7e 06 70 79 a7 eb 0d cd a7 eb ._'i@.~.py...... 0020 07 13 01 bd 0c 57 5b f8 cb 3c fc ce f6 ae 50 18 .....W[..<....P. 0030 43 7d de c7 00 00 00 00 00 33 ff 53 4d 42 24 00 C}.......3.SMB$. 0040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 05 08 ff ff 00 00 ff ff 08 ff 00 00 00 00 ................ 0060 80 02 01 00 00 00 00 00 00 00 00 00 00 ............. No. Time Source Destination Protocol Info 22 12:37:44.027110 167.235.13.205 167.235.7.19 SMB Close Response Frame 22: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6a:be:d4 (00:1a:6b:6a:be:d4) Internet Protocol, Src: 167.235.13.205 (167.235.13.205), Dst: 167.235.7.19 (167.235.7.19) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: navegaweb-port (3159), Seq: 338, Ack: 181, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6a be d4 00 15 2b a6 ad bf 08 00 45 00 ..kj....+.....E. 0010 00 4f 27 6a 40 00 7e 06 70 88 a7 eb 0d cd a7 eb .O'j@.~.p....... 0020 07 13 01 bd 0c 57 5b f8 cb 73 fc ce f6 db 50 18 .....W[..s....P. 0030 43 50 c0 26 00 00 00 00 00 23 ff 53 4d 42 04 00 CP.&.....#.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 05 08 ff fe 00 10 c0 1c 00 00 00 ............. No. Time Source Destination Protocol Info 23 12:37:44.038113 167.235.13.205 167.235.7.19 SMB Locking AndX Request, FID: 0x8007 Frame 23: 109 bytes on wire (872 bits), 109 bytes captured (872 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6a:be:d4 (00:1a:6b:6a:be:d4) Internet Protocol, Src: 167.235.13.205 (167.235.13.205), Dst: 167.235.7.19 (167.235.7.19) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: navegaweb-port (3159), Seq: 377, Ack: 181, Len: 55 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6a be d4 00 15 2b a6 ad bf 08 00 45 00 ..kj....+.....E. 0010 00 5f 27 75 40 00 7e 06 70 6d a7 eb 0d cd a7 eb ._'u@.~.pm...... 0020 07 13 01 bd 0c 57 5b f8 cb 9a fc ce f6 db 50 18 .....W[.......P. 0030 43 50 de 62 00 00 00 00 00 33 ff 53 4d 42 24 00 CP.b.....3.SMB$. 0040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 05 08 ff ff 00 00 ff ff 08 ff 00 00 00 07 ................ 0060 80 02 01 00 00 00 00 00 00 00 00 00 00 ............. No. Time Source Destination Protocol Info 24 12:37:44.038993 167.235.13.205 167.235.7.19 SMB Close Response Frame 24: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6a:be:d4 (00:1a:6b:6a:be:d4) Internet Protocol, Src: 167.235.13.205 (167.235.13.205), Dst: 167.235.7.19 (167.235.7.19) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: navegaweb-port (3159), Seq: 432, Ack: 226, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6a be d4 00 15 2b a6 ad bf 08 00 45 00 ..kj....+.....E. 0010 00 4f 27 76 40 00 7e 06 70 7c a7 eb 0d cd a7 eb .O'v@.~.p|...... 0020 07 13 01 bd 0c 57 5b f8 cb d1 fc ce f7 08 50 18 .....W[.......P. 0030 43 23 7f c8 00 00 00 00 00 23 ff 53 4d 42 04 00 C#.......#.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 05 08 ff fe 00 10 00 1d 00 00 00 ............. No. Time Source Destination Protocol Info 25 12:37:44.104652 167.235.13.48 167.235.7.25 TCP netbios-ssn > spw-dialer [ACK] Seq=5761 Ack=631 Win=64590 Len=0 Frame 25: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 5761, Ack: 631, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9c 40 40 00 7e 06 fc 6f a7 eb 0d 30 a7 eb .(.@@.~..o...0.. 0020 07 19 00 8b 0e d4 40 86 85 d3 56 09 d4 ac 50 10 ......@...V...P. 0030 fc 4e 4e f7 00 00 00 00 00 00 00 00 .NN......... No. Time Source Destination Protocol Info 26 12:37:44.104750 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 26: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 5761, Ack: 694, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 41 40 00 7e 06 fa 2e a7 eb 0d 30 a7 eb .h.A@.~......0.. 0020 07 19 00 8b 0e d4 40 86 85 d3 56 09 d4 eb 50 18 ......@...V...P. 0030 fc 0f a3 d0 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 84 77 0c ff 00 00 00 ff ...0.....w...... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 27 12:37:44.104798 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 27: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 6337, Ack: 694, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 42 40 00 7e 06 fa 2d a7 eb 0d 30 a7 eb .h.B@.~..-...0.. 0020 07 19 00 8b 0e d4 40 86 88 13 56 09 d4 eb 50 18 ......@...V...P. 0030 fc 0f 60 8f 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..`......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c5 77 0c ff 00 00 00 ff ...0.....w...... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 28 12:37:44.104851 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 28: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 6913, Ack: 694, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 43 40 00 7e 06 fa 2c a7 eb 0d 30 a7 eb .h.C@.~..,...0.. 0020 07 19 00 8b 0e d4 40 86 8a 53 56 09 d4 eb 50 18 ......@..SV...P. 0030 fc 0f 22 50 00 00 00 00 02 3c ff 53 4d 42 2e 00 .."P.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 01 78 0c ff 00 00 00 ff ...0.....x...... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 29 12:37:44.104903 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 29: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 7489, Ack: 694, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 44 40 00 7e 06 fa 2b a7 eb 0d 30 a7 eb .h.D@.~..+...0.. 0020 07 19 00 8b 0e d4 40 86 8c 93 56 09 d4 eb 50 18 ......@...V...P. 0030 fc 0f df 0e 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 42 78 0c ff 00 00 00 ff ...0....Bx...... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 30 12:37:44.104955 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 30: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 8065, Ack: 694, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 45 40 00 7e 06 fa 2a a7 eb 0d 30 a7 eb .h.E@.~..*...0.. 0020 07 19 00 8b 0e d4 40 86 8e d3 56 09 d4 eb 50 18 ......@...V...P. 0030 fc 0f 9b cf 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 83 78 0c ff 00 00 00 ff ...0.....x...... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 31 12:37:44.359272 167.235.7.126 224.0.0.2 HSRP Hello (state Standby) Frame 31: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: IPv4mcast_00:00:02 (01:00:5e:00:00:02) Internet Protocol, Src: 167.235.7.126 (167.235.7.126), Dst: 224.0.0.2 (224.0.0.2) User Datagram Protocol, Src Port: hsrp (1985), Dst Port: hsrp (1985) Cisco Hot Standby Router Protocol 0000 01 00 5e 00 00 02 00 15 2b a6 ad bf 08 00 45 c0 ..^.....+.....E. 0010 00 30 00 00 00 00 01 11 29 92 a7 eb 07 7e e0 00 .0......)....~.. 0020 00 02 07 c1 07 c1 00 1c 2c a7 00 00 08 03 05 64 ........,......d 0030 32 00 63 69 73 63 6f 00 00 00 a7 eb 07 01 2.cisco....... No. Time Source Destination Protocol Info 32 12:37:44.554654 167.235.7.21 167.235.7.63 NBNS Name query NB TMS-NODE-202<00> Frame 32: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Portwell_13:a2:aa (00:90:fb:13:a2:aa), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 167.235.7.21 (167.235.7.21), Dst: 167.235.7.63 (167.235.7.63) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service 0000 ff ff ff ff ff ff 00 90 fb 13 a2 aa 08 00 45 00 ..............E. 0010 00 4e 15 64 00 00 80 11 c7 10 a7 eb 07 15 a7 eb .N.d............ 0020 07 3f 00 89 00 89 00 3a 25 da ec eb 01 10 00 01 .?.....:%....... 0030 00 00 00 00 00 00 20 46 45 45 4e 46 44 43 4e 45 ...... FEENFDCNE 0040 4f 45 50 45 45 45 46 43 4e 44 43 44 41 44 43 43 OEPEEEFCNDCDADCC 0050 41 43 41 43 41 41 41 00 00 20 00 01 ACACAAA.. .. No. Time Source Destination Protocol Info 33 12:37:44.605657 167.235.13.48 167.235.7.25 TCP netbios-ssn > spw-dialer [ACK] Seq=8641 Ack=946 Win=64275 Len=0 Frame 33: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 8641, Ack: 946, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9c 47 40 00 7e 06 fc 68 a7 eb 0d 30 a7 eb .(.G@.~..h...0.. 0020 07 19 00 8b 0e d4 40 86 91 13 56 09 d5 e7 50 10 ......@...V...P. 0030 fb 13 43 b7 00 00 00 00 00 00 00 00 ..C......... No. Time Source Destination Protocol Info 34 12:37:44.605753 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 34: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 8641, Ack: 1009, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 48 40 00 7e 06 fa 27 a7 eb 0d 30 a7 eb .h.H@.~..'...0.. 0020 07 19 00 8b 0e d4 40 86 91 13 56 09 d6 26 50 18 ......@...V..&P. 0030 fa d4 59 8f 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..Y......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c3 78 0c ff 00 00 00 ff ...0.....x...... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 35 12:37:44.605796 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 35: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 9217, Ack: 1009, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 49 40 00 7e 06 fa 26 a7 eb 0d 30 a7 eb .h.I@.~..&...0.. 0020 07 19 00 8b 0e d4 40 86 93 53 56 09 d6 26 50 18 ......@..SV..&P. 0030 fa d4 18 4e 00 00 00 00 02 3c ff 53 4d 42 2e 00 ...N.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 02 79 0c ff 00 00 00 ff ...0.....y...... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 36 12:37:44.605846 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 36: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 9793, Ack: 1009, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 4a 40 00 7e 06 fa 25 a7 eb 0d 30 a7 eb .h.J@.~..%...0.. 0020 07 19 00 8b 0e d4 40 86 95 93 56 09 d6 26 50 18 ......@...V..&P. 0030 fa d4 d4 0e 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 44 79 0c ff 00 00 00 ff ...0....Dy...... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 37 12:37:44.605901 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 37: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 10369, Ack: 1009, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 4b 40 00 7e 06 fa 24 a7 eb 0d 30 a7 eb .h.K@.~..$...0.. 0020 07 19 00 8b 0e d4 40 86 97 d3 56 09 d6 26 50 18 ......@...V..&P. 0030 fa d4 94 cd 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 81 79 0c ff 00 00 00 ff ...0.....y...... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 38 12:37:44.605952 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 38: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 10945, Ack: 1009, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 4c 40 00 7e 06 fa 23 a7 eb 0d 30 a7 eb .h.L@.~..#...0.. 0020 07 19 00 8b 0e d4 40 86 9a 13 56 09 d6 26 50 18 ......@...V..&P. 0030 fa d4 4e 8e 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..N......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c5 79 0c ff 00 00 00 ff ...0.....y...... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 39 12:37:44.788278 167.235.7.125 224.0.0.2 HSRP Hello (state Active) Frame 39: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: All-HSRP-routers_32 (00:00:0c:07:ac:32), Dst: IPv4mcast_00:00:02 (01:00:5e:00:00:02) Internet Protocol, Src: 167.235.7.125 (167.235.7.125), Dst: 224.0.0.2 (224.0.0.2) User Datagram Protocol, Src Port: hsrp (1985), Dst Port: hsrp (1985) Cisco Hot Standby Router Protocol 0000 01 00 5e 00 00 02 00 00 0c 07 ac 32 08 00 45 c0 ..^........2..E. 0010 00 30 00 00 00 00 01 11 29 93 a7 eb 07 7d e0 00 .0......)....}.. 0020 00 02 07 c1 07 c1 00 1c 24 9e 00 00 10 03 05 6e ........$......n 0030 32 00 63 69 73 63 6f 00 00 00 a7 eb 07 01 2.cisco....... No. Time Source Destination Protocol Info 40 12:37:44.922374 167.235.7.21 167.235.7.63 NBNS Name query NB TMS-NODE-202<00> Frame 40: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Portwell_13:a2:aa (00:90:fb:13:a2:aa), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 167.235.7.21 (167.235.7.21), Dst: 167.235.7.63 (167.235.7.63) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service 0000 ff ff ff ff ff ff 00 90 fb 13 a2 aa 08 00 45 00 ..............E. 0010 00 4e 15 69 00 00 80 11 c7 0b a7 eb 07 15 a7 eb .N.i............ 0020 07 3f 00 89 00 89 00 3a 25 d8 ec ed 01 10 00 01 .?.....:%....... 0030 00 00 00 00 00 00 20 46 45 45 4e 46 44 43 4e 45 ...... FEENFDCNE 0040 4f 45 50 45 45 45 46 43 4e 44 43 44 41 44 43 43 OEPEEEFCNDCDADCC 0050 41 43 41 43 41 41 41 00 00 20 00 01 ACACAAA.. .. No. Time Source Destination Protocol Info 41 12:37:45.106612 167.235.13.48 167.235.7.25 TCP netbios-ssn > spw-dialer [ACK] Seq=11521 Ack=1135 Win=64086 Len=0 Frame 41: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 11521, Ack: 1135, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9c 4e 40 00 7e 06 fc 61 a7 eb 0d 30 a7 eb .(.N@.~..a...0.. 0020 07 19 00 8b 0e d4 40 86 9c 53 56 09 d6 a4 50 10 ......@..SV...P. 0030 fa 56 38 77 00 00 00 00 00 00 00 00 .V8w........ No. Time Source Destination Protocol Info 42 12:37:45.106684 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 42: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 11521, Ack: 1135, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 4f 40 00 7e 06 fa 20 a7 eb 0d 30 a7 eb .h.O@.~.. ...0.. 0020 07 19 00 8b 0e d4 40 86 9c 53 56 09 d6 a4 50 18 ......@..SV...P. 0030 fa 56 0f 4e 00 00 00 00 02 3c ff 53 4d 42 2e 00 .V.N.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 02 7a 0c ff 00 00 00 ff ...0.....z...... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 43 12:37:45.106748 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 43: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 12097, Ack: 1135, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 50 40 00 7e 06 fa 1f a7 eb 0d 30 a7 eb .h.P@.~......0.. 0020 07 19 00 8b 0e d4 40 86 9e 93 56 09 d6 a4 50 18 ......@...V...P. 0030 fa 56 ca 0c 00 00 00 00 02 3c ff 53 4d 42 2e 00 .V.......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 45 7a 0c ff 00 00 00 ff ...0....Ez...... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 44 12:37:45.106754 167.235.13.48 167.235.7.25 TCP netbios-ssn > spw-dialer [ACK] Seq=12673 Ack=1261 Win=65535 Len=0 Frame 44: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 12673, Ack: 1261, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9c 51 40 00 7e 06 fc 5e a7 eb 0d 30 a7 eb .(.Q@.~..^...0.. 0020 07 19 00 8b 0e d4 40 86 a0 d3 56 09 d7 22 50 10 ......@...V.."P. 0030 ff ff 2d d0 00 00 00 00 00 00 00 00 ..-......... No. Time Source Destination Protocol Info 45 12:37:45.106798 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 45: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 12673, Ack: 1261, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 52 40 00 7e 06 fa 1d a7 eb 0d 30 a7 eb .h.R@.~......0.. 0020 07 19 00 8b 0e d4 40 86 a0 d3 56 09 d7 22 50 18 ......@...V.."P. 0030 ff ff 85 a6 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 81 7a 0c ff 00 00 00 ff ...0.....z...... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 46 12:37:45.106849 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 46: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 13249, Ack: 1261, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 53 40 00 7e 06 fa 1c a7 eb 0d 30 a7 eb .h.S@.~......0.. 0020 07 19 00 8b 0e d4 40 86 a3 13 56 09 d7 22 50 18 ......@...V.."P. 0030 ff ff 40 65 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..@e.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c4 7a 0c ff 00 00 00 ff ...0.....z...... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 47 12:37:45.106902 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 47: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 13825, Ack: 1324, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 54 40 00 7e 06 fa 1b a7 eb 0d 30 a7 eb .h.T@.~......0.. 0020 07 19 00 8b 0e d4 40 86 a5 53 56 09 d7 61 50 18 ......@..SV..aP. 0030 ff c0 ff 25 00 00 00 00 02 3c ff 53 4d 42 2e 00 ...%.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 03 7b 0c ff 00 00 00 ff ...0.....{...... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 48 12:37:45.166504 167.235.13.205 167.235.7.19 SMB Locking AndX Request, FID: 0x8003 Frame 48: 109 bytes on wire (872 bits), 109 bytes captured (872 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6a:be:d4 (00:1a:6b:6a:be:d4) Internet Protocol, Src: 167.235.13.205 (167.235.13.205), Dst: 167.235.7.19 (167.235.7.19) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: navegaweb-port (3159), Seq: 471, Ack: 226, Len: 55 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6a be d4 00 15 2b a6 ad bf 08 00 45 00 ..kj....+.....E. 0010 00 5f 27 f2 40 00 7e 06 6f f0 a7 eb 0d cd a7 eb ._'.@.~.o....... 0020 07 13 01 bd 0c 57 5b f8 cb f8 fc ce f7 08 50 18 .....W[.......P. 0030 43 23 de 08 00 00 00 00 00 33 ff 53 4d 42 24 00 C#.......3.SMB$. 0040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 05 08 ff ff 00 00 ff ff 08 ff 00 00 00 03 ................ 0060 80 02 01 00 00 00 00 00 00 00 00 00 00 ............. No. Time Source Destination Protocol Info 49 12:37:45.167528 167.235.13.205 167.235.7.19 SMB Close Response Frame 49: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6a:be:d4 (00:1a:6b:6a:be:d4) Internet Protocol, Src: 167.235.13.205 (167.235.13.205), Dst: 167.235.7.19 (167.235.7.19) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: navegaweb-port (3159), Seq: 526, Ack: 271, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6a be d4 00 15 2b a6 ad bf 08 00 45 00 ..kj....+.....E. 0010 00 4f 27 f3 40 00 7e 06 6f ff a7 eb 0d cd a7 eb .O'.@.~.o....... 0020 07 13 01 bd 0c 57 5b f8 cc 2f fc ce f7 35 50 18 .....W[../...5P. 0030 42 f6 3f 6a 00 00 00 00 00 23 ff 53 4d 42 04 00 B.?j.....#.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 05 08 ff fe 00 10 40 1d 00 00 00 ........@.... No. Time Source Destination Protocol Info 50 12:37:45.177220 167.235.13.205 167.235.7.19 SMB Locking AndX Request, FID: 0x8005 Frame 50: 109 bytes on wire (872 bits), 109 bytes captured (872 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6a:be:d4 (00:1a:6b:6a:be:d4) Internet Protocol, Src: 167.235.13.205 (167.235.13.205), Dst: 167.235.7.19 (167.235.7.19) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: navegaweb-port (3159), Seq: 565, Ack: 271, Len: 55 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6a be d4 00 15 2b a6 ad bf 08 00 45 00 ..kj....+.....E. 0010 00 5f 27 ff 40 00 7e 06 6f e3 a7 eb 0d cd a7 eb ._'.@.~.o....... 0020 07 13 01 bd 0c 57 5b f8 cc 56 fc ce f7 35 50 18 .....W[..V...5P. 0030 42 f6 dd a8 00 00 00 00 00 33 ff 53 4d 42 24 00 B........3.SMB$. 0040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 05 08 ff ff 00 00 ff ff 08 ff 00 00 00 05 ................ 0060 80 02 01 00 00 00 00 00 00 00 00 00 00 ............. No. Time Source Destination Protocol Info 51 12:37:45.178129 167.235.13.205 167.235.7.19 SMB Close Response Frame 51: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6a:be:d4 (00:1a:6b:6a:be:d4) Internet Protocol, Src: 167.235.13.205 (167.235.13.205), Dst: 167.235.7.19 (167.235.7.19) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: navegaweb-port (3159), Seq: 620, Ack: 316, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6a be d4 00 15 2b a6 ad bf 08 00 45 00 ..kj....+.....E. 0010 00 4f 28 00 40 00 7e 06 6f f2 a7 eb 0d cd a7 eb .O(.@.~.o....... 0020 07 13 01 bd 0c 57 5b f8 cc 8d fc ce f7 62 50 18 .....W[......bP. 0030 42 c9 ff 0b 00 00 00 00 00 23 ff 53 4d 42 04 00 B........#.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 05 08 ff fe 00 10 80 1d 00 00 00 ............. No. Time Source Destination Protocol Info 52 12:37:45.187617 167.235.13.205 167.235.7.19 SMB Locking AndX Request, FID: 0x8004 Frame 52: 109 bytes on wire (872 bits), 109 bytes captured (872 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6a:be:d4 (00:1a:6b:6a:be:d4) Internet Protocol, Src: 167.235.13.205 (167.235.13.205), Dst: 167.235.7.19 (167.235.7.19) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: navegaweb-port (3159), Seq: 659, Ack: 316, Len: 55 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6a be d4 00 15 2b a6 ad bf 08 00 45 00 ..kj....+.....E. 0010 00 5f 28 0b 40 00 7e 06 6f d7 a7 eb 0d cd a7 eb ._(.@.~.o....... 0020 07 13 01 bd 0c 57 5b f8 cc b4 fc ce f7 62 50 18 .....W[......bP. 0030 42 c9 dd 4b 00 00 00 00 00 33 ff 53 4d 42 24 00 B..K.....3.SMB$. 0040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 05 08 ff ff 00 00 ff ff 08 ff 00 00 00 04 ................ 0060 80 02 01 00 00 00 00 00 00 00 00 00 00 ............. No. Time Source Destination Protocol Info 53 12:37:45.188768 167.235.13.205 167.235.7.19 SMB Close Response Frame 53: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6a:be:d4 (00:1a:6b:6a:be:d4) Internet Protocol, Src: 167.235.13.205 (167.235.13.205), Dst: 167.235.7.19 (167.235.7.19) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: navegaweb-port (3159), Seq: 714, Ack: 361, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6a be d4 00 15 2b a6 ad bf 08 00 45 00 ..kj....+.....E. 0010 00 4f 28 0c 40 00 7e 06 6f e6 a7 eb 0d cd a7 eb .O(.@.~.o....... 0020 07 13 01 bd 0c 57 5b f8 cc eb fc ce f7 8f 50 18 .....W[.......P. 0030 42 9c be ad 00 00 00 00 00 23 ff 53 4d 42 04 00 B........#.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 05 08 ff fe 00 10 c0 1d 00 00 00 ............. No. Time Source Destination Protocol Info 54 12:37:45.198550 167.235.13.205 167.235.7.19 SMB Locking AndX Request, FID: 0x800b Frame 54: 109 bytes on wire (872 bits), 109 bytes captured (872 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6a:be:d4 (00:1a:6b:6a:be:d4) Internet Protocol, Src: 167.235.13.205 (167.235.13.205), Dst: 167.235.7.19 (167.235.7.19) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: navegaweb-port (3159), Seq: 753, Ack: 361, Len: 55 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6a be d4 00 15 2b a6 ad bf 08 00 45 00 ..kj....+.....E. 0010 00 5f 28 18 40 00 7e 06 6f ca a7 eb 0d cd a7 eb ._(.@.~.o....... 0020 07 13 01 bd 0c 57 5b f8 cd 12 fc ce f7 8f 50 18 .....W[.......P. 0030 42 9c dc e6 00 00 00 00 00 33 ff 53 4d 42 24 00 B........3.SMB$. 0040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 05 08 ff ff 00 00 ff ff 08 ff 00 00 00 0b ................ 0060 80 02 01 00 00 00 00 00 00 00 00 00 00 ............. No. Time Source Destination Protocol Info 55 12:37:45.200280 167.235.13.205 167.235.7.19 SMB Close Response Frame 55: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6a:be:d4 (00:1a:6b:6a:be:d4) Internet Protocol, Src: 167.235.13.205 (167.235.13.205), Dst: 167.235.7.19 (167.235.7.19) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: navegaweb-port (3159), Seq: 808, Ack: 406, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6a be d4 00 15 2b a6 ad bf 08 00 45 00 ..kj....+.....E. 0010 00 4f 28 19 40 00 7e 06 6f d9 a7 eb 0d cd a7 eb .O(.@.~.o....... 0020 07 13 01 bd 0c 57 5b f8 cd 49 fc ce f7 bc 50 18 .....W[..I....P. 0030 42 6f 7e 4f 00 00 00 00 00 23 ff 53 4d 42 04 00 Bo~O.....#.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 05 08 ff fe 00 10 00 1e 00 00 00 ............. No. Time Source Destination Protocol Info 56 12:37:45.227399 167.235.13.205 167.235.7.19 SMB Locking AndX Request, FID: 0x8001 Frame 56: 109 bytes on wire (872 bits), 109 bytes captured (872 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6a:be:d4 (00:1a:6b:6a:be:d4) Internet Protocol, Src: 167.235.13.205 (167.235.13.205), Dst: 167.235.7.19 (167.235.7.19) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: navegaweb-port (3159), Seq: 847, Ack: 406, Len: 55 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6a be d4 00 15 2b a6 ad bf 08 00 45 00 ..kj....+.....E. 0010 00 5f 28 25 40 00 7e 06 6f bd a7 eb 0d cd a7 eb ._(%@.~.o....... 0020 07 13 01 bd 0c 57 5b f8 cd 70 fc ce f7 bc 50 18 .....W[..p....P. 0030 42 6f dc 92 00 00 00 00 00 33 ff 53 4d 42 24 00 Bo.......3.SMB$. 0040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 05 08 ff ff 00 00 ff ff 08 ff 00 00 00 01 ................ 0060 80 02 01 00 00 00 00 00 00 00 00 00 00 ............. No. Time Source Destination Protocol Info 57 12:37:45.228333 167.235.13.205 167.235.7.19 SMB Close Response Frame 57: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6a:be:d4 (00:1a:6b:6a:be:d4) Internet Protocol, Src: 167.235.13.205 (167.235.13.205), Dst: 167.235.7.19 (167.235.7.19) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: navegaweb-port (3159), Seq: 902, Ack: 451, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6a be d4 00 15 2b a6 ad bf 08 00 45 00 ..kj....+.....E. 0010 00 4f 28 26 40 00 7e 06 6f cc a7 eb 0d cd a7 eb .O(&@.~.o....... 0020 07 13 01 bd 0c 57 5b f8 cd a7 fc ce f7 e9 50 18 .....W[.......P. 0030 42 42 3d f1 00 00 00 00 00 23 ff 53 4d 42 04 00 BB=......#.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 05 08 ff fe 00 10 40 1e 00 00 00 ........@.... No. Time Source Destination Protocol Info 58 12:37:45.238315 167.235.13.205 167.235.7.19 SMB Locking AndX Request, FID: 0x8002 Frame 58: 109 bytes on wire (872 bits), 109 bytes captured (872 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6a:be:d4 (00:1a:6b:6a:be:d4) Internet Protocol, Src: 167.235.13.205 (167.235.13.205), Dst: 167.235.7.19 (167.235.7.19) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: navegaweb-port (3159), Seq: 941, Ack: 451, Len: 55 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6a be d4 00 15 2b a6 ad bf 08 00 45 00 ..kj....+.....E. 0010 00 5f 28 31 40 00 7e 06 6f b1 a7 eb 0d cd a7 eb ._(1@.~.o....... 0020 07 13 01 bd 0c 57 5b f8 cd ce fc ce f7 e9 50 18 .....W[.......P. 0030 42 42 dc 33 00 00 00 00 00 33 ff 53 4d 42 24 00 BB.3.....3.SMB$. 0040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 05 08 ff ff 00 00 ff ff 08 ff 00 00 00 02 ................ 0060 80 02 01 00 00 00 00 00 00 00 00 00 00 ............. No. Time Source Destination Protocol Info 59 12:37:45.240215 167.235.13.205 167.235.7.19 SMB Close Response Frame 59: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6a:be:d4 (00:1a:6b:6a:be:d4) Internet Protocol, Src: 167.235.13.205 (167.235.13.205), Dst: 167.235.7.19 (167.235.7.19) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: navegaweb-port (3159), Seq: 996, Ack: 496, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6a be d4 00 15 2b a6 ad bf 08 00 45 00 ..kj....+.....E. 0010 00 4f 28 32 40 00 7e 06 6f c0 a7 eb 0d cd a7 eb .O(2@.~.o....... 0020 07 13 01 bd 0c 57 5b f8 ce 05 fc ce f8 16 50 18 .....W[.......P. 0030 42 15 fd 92 00 00 00 00 00 23 ff 53 4d 42 04 00 B........#.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 05 08 ff fe 00 10 80 1e 00 00 00 ............. No. Time Source Destination Protocol Info 60 12:37:45.607609 167.235.13.48 167.235.7.25 TCP netbios-ssn > spw-dialer [ACK] Seq=14401 Ack=1513 Win=65283 Len=0 Frame 60: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 14401, Ack: 1513, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9c 56 40 00 7e 06 fc 59 a7 eb 0d 30 a7 eb .(.V@.~..Y...0.. 0020 07 19 00 8b 0e d4 40 86 a7 93 56 09 d8 1e 50 10 ......@...V...P. 0030 ff 03 27 10 00 00 00 00 00 00 00 00 ..'......... No. Time Source Destination Protocol Info 61 12:37:45.607701 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 61: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 14401, Ack: 1576, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 57 40 00 7e 06 fa 18 a7 eb 0d 30 a7 eb .h.W@.~......0.. 0020 07 19 00 8b 0e d4 40 86 a7 93 56 09 d8 5d 50 18 ......@...V..]P. 0030 fe c4 bc e5 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 43 7b 0c ff 00 00 00 ff ...0....C{...... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 62 12:37:45.607752 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 62: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 14977, Ack: 1639, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 58 40 00 7e 06 fa 17 a7 eb 0d 30 a7 eb .h.X@.~......0.. 0020 07 19 00 8b 0e d4 40 86 a9 d3 56 09 d8 9c 50 18 ......@...V...P. 0030 fe 85 79 a4 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..y......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 84 7b 0c ff 00 00 00 ff ...0.....{...... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 63 12:37:45.607805 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 63: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 15553, Ack: 1639, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 59 40 00 7e 06 fa 16 a7 eb 0d 30 a7 eb .h.Y@.~......0.. 0020 07 19 00 8b 0e d4 40 86 ac 13 56 09 d8 9c 50 18 ......@...V...P. 0030 fe 85 3a 65 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..:e.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c1 7b 0c ff 00 00 00 ff ...0.....{...... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 64 12:37:45.607857 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 64: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 16129, Ack: 1639, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 5a 40 00 7e 06 fa 15 a7 eb 0d 30 a7 eb .h.Z@.~......0.. 0020 07 19 00 8b 0e d4 40 86 ae 53 56 09 d8 9c 50 18 ......@..SV...P. 0030 fe 85 f7 23 00 00 00 00 02 3c ff 53 4d 42 2e 00 ...#.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 02 7c 0c ff 00 00 00 ff ...0.....|...... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 65 12:37:45.607914 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 65: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 16705, Ack: 1639, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 5b 40 00 7e 06 fa 14 a7 eb 0d 30 a7 eb .h.[@.~......0.. 0020 07 19 00 8b 0e d4 40 86 b0 93 56 09 d8 9c 50 18 ......@...V...P. 0030 fe 85 b1 e4 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 45 7c 0c ff 00 00 00 ff ...0....E|...... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 66 12:37:45.671883 167.235.7.21 167.235.7.63 NBNS Name query NB TMS-NODE-202<00> Frame 66: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Portwell_13:a2:aa (00:90:fb:13:a2:aa), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 167.235.7.21 (167.235.7.21), Dst: 167.235.7.63 (167.235.7.63) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service 0000 ff ff ff ff ff ff 00 90 fb 13 a2 aa 08 00 45 00 ..............E. 0010 00 4e 15 74 00 00 80 11 c7 00 a7 eb 07 15 a7 eb .N.t............ 0020 07 3f 00 89 00 89 00 3a 25 d8 ec ed 01 10 00 01 .?.....:%....... 0030 00 00 00 00 00 00 20 46 45 45 4e 46 44 43 4e 45 ...... FEENFDCNE 0040 4f 45 50 45 45 45 46 43 4e 44 43 44 41 44 43 43 OEPEEEFCNDCDADCC 0050 41 43 41 43 41 41 41 00 00 20 00 01 ACACAAA.. .. No. Time Source Destination Protocol Info 67 12:37:46.108604 167.235.13.48 167.235.7.25 TCP netbios-ssn > spw-dialer [ACK] Seq=17281 Ack=1891 Win=64905 Len=0 Frame 67: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 17281, Ack: 1891, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9c 5d 40 00 7e 06 fc 52 a7 eb 0d 30 a7 eb .(.]@.~..R...0.. 0020 07 19 00 8b 0e d4 40 86 b2 d3 56 09 d9 98 50 10 ......@...V...P. 0030 fd 89 1b d0 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 68 12:37:46.108703 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 68: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 17281, Ack: 1954, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 5e 40 00 7e 06 fa 11 a7 eb 0d 30 a7 eb .h.^@.~......0.. 0020 07 19 00 8b 0e d4 40 86 b2 d3 56 09 d9 d7 50 18 ......@...V...P. 0030 fd 4a 73 a4 00 00 00 00 02 3c ff 53 4d 42 2e 00 .Js......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 81 7c 0c ff 00 00 00 ff ...0.....|...... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 69 12:37:46.108755 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 69: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 17857, Ack: 1954, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 5f 40 00 7e 06 fa 10 a7 eb 0d 30 a7 eb .h._@.~......0.. 0020 07 19 00 8b 0e d4 40 86 b5 13 56 09 d9 d7 50 18 ......@...V...P. 0030 fd 4a 2d 63 00 00 00 00 02 3c ff 53 4d 42 2e 00 .J-c.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c5 7c 0c ff 00 00 00 ff ...0.....|...... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 70 12:37:46.108806 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 70: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 18433, Ack: 1954, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 60 40 00 7e 06 fa 0f a7 eb 0d 30 a7 eb .h.`@.~......0.. 0020 07 19 00 8b 0e d4 40 86 b7 53 56 09 d9 d7 50 18 ......@..SV...P. 0030 fd 4a ec 23 00 00 00 00 02 3c ff 53 4d 42 2e 00 .J.#.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 04 7d 0c ff 00 00 00 ff ...0.....}...... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 71 12:37:46.108860 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 71: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 19009, Ack: 1954, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 61 40 00 7e 06 fa 0e a7 eb 0d 30 a7 eb .h.a@.~......0.. 0020 07 19 00 8b 0e d4 40 86 b9 93 56 09 d9 d7 50 18 ......@...V...P. 0030 fd 4a ab e2 00 00 00 00 02 3c ff 53 4d 42 2e 00 .J.......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 42 7d 0c ff 00 00 00 ff ...0....B}...... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 72 12:37:46.108911 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 72: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 19585, Ack: 1954, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 62 40 00 7e 06 fa 0d a7 eb 0d 30 a7 eb .h.b@.~......0.. 0020 07 19 00 8b 0e d4 40 86 bb d3 56 09 d9 d7 50 18 ......@...V...P. 0030 fd 4a 68 a3 00 00 00 00 02 3c ff 53 4d 42 2e 00 .Jh......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 83 7d 0c ff 00 00 00 ff ...0.....}...... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 73 12:37:46.259268 Cisco_a6:ad:bf Broadcast 0x0806 ARP Frame 73: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Data (46 bytes) 0000 ff ff ff ff ff ff 00 15 2b a6 ad bf 08 06 00 01 ........+....... 0010 08 00 06 04 00 01 00 15 2b a6 ad bf a7 eb 07 7e ........+......~ 0020 00 00 00 00 00 00 a7 eb 07 2e 00 00 00 00 00 00 ................ 0030 00 00 00 00 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 74 12:37:46.277445 167.235.7.71 167.235.3.230 DNS Standard query A mail.google.com Frame 74: 75 bytes on wire (600 bits), 75 bytes captured (600 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 167.235.3.230 (167.235.3.230) User Datagram Protocol, Src Port: 34384 (34384), Dst Port: domain (53) Domain Name System (query) 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 00 3d 2a 89 40 00 40 11 b5 23 a7 eb 07 47 a7 eb .=*.@.@..#...G.. 0020 03 e6 86 50 00 35 00 29 34 79 5e af 01 00 00 01 ...P.5.)4y^..... 0030 00 00 00 00 00 00 04 6d 61 69 6c 06 67 6f 6f 67 .......mail.goog 0040 6c 65 03 63 6f 6d 00 00 01 00 01 le.com..... No. Time Source Destination Protocol Info 75 12:37:46.277859 167.235.3.230 167.235.7.71 DNS Standard query response CNAME googlemail.l.google.com A 74.125.224.55 A 74.125.224.56 A 74.125.224.53 A 74.125.224.54 Frame 75: 302 bytes on wire (2416 bits), 302 bytes captured (2416 bits) Ethernet II, Src: Cisco_f3:bd:bf (00:12:00:f3:bd:bf), Dst: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee) Internet Protocol, Src: 167.235.3.230 (167.235.3.230), Dst: 167.235.7.71 (167.235.7.71) User Datagram Protocol, Src Port: domain (53), Dst Port: 34384 (34384) Domain Name System (response) 0000 00 0d 60 2b e0 ee 00 12 00 f3 bd bf 08 00 45 00 ..`+..........E. 0010 01 20 00 00 40 00 3e 11 e0 c9 a7 eb 03 e6 a7 eb . ..@.>......... 0020 07 47 00 35 86 50 01 0c 1a 6d 5e af 81 80 00 01 .G.5.P...m^..... 0030 00 05 00 04 00 04 04 6d 61 69 6c 06 67 6f 6f 67 .......mail.goog 0040 6c 65 03 63 6f 6d 00 00 01 00 01 c0 0c 00 05 00 le.com.......... 0050 01 00 03 dc 31 00 0f 0a 67 6f 6f 67 6c 65 6d 61 ....1...googlema 0060 69 6c 01 6c c0 11 c0 2d 00 01 00 01 00 00 00 1e il.l...-........ 0070 00 04 4a 7d e0 37 c0 2d 00 01 00 01 00 00 00 1e ..J}.7.-........ 0080 00 04 4a 7d e0 38 c0 2d 00 01 00 01 00 00 00 1e ..J}.8.-........ 0090 00 04 4a 7d e0 35 c0 2d 00 01 00 01 00 00 00 1e ..J}.5.-........ 00a0 00 04 4a 7d e0 36 c0 11 00 02 00 01 00 02 8b 06 ..J}.6.......... 00b0 00 06 03 6e 73 34 c0 11 c0 11 00 02 00 01 00 02 ...ns4.......... 00c0 8b 06 00 06 03 6e 73 31 c0 11 c0 11 00 02 00 01 .....ns1........ 00d0 00 02 8b 06 00 06 03 6e 73 32 c0 11 c0 11 00 02 .......ns2...... 00e0 00 01 00 02 8b 06 00 06 03 6e 73 33 c0 11 c0 9a .........ns3.... 00f0 00 01 00 01 00 02 6f e0 00 04 d8 ef 20 0a c0 ac ......o..... ... 0100 00 01 00 01 00 02 6f e0 00 04 d8 ef 22 0a c0 be ......o....."... 0110 00 01 00 01 00 02 6f e0 00 04 d8 ef 24 0a c0 88 ......o.....$... 0120 00 01 00 01 00 02 6f e0 00 04 d8 ef 26 0a ......o.....&. No. Time Source Destination Protocol Info 76 12:37:46.278583 167.235.7.71 74.125.224.55 TCP 54697 > https [SYN] Seq=0 Win=5840 Len=0 MSS=1460 SACK_PERM=1 TSV=499198602 TSER=0 WS=6 Frame 76: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 74.125.224.55 (74.125.224.55) Transmission Control Protocol, Src Port: 54697 (54697), Dst Port: https (443), Seq: 0, Len: 0 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 00 3c 6d cb 40 00 40 06 f3 09 a7 eb 07 47 4a 7d . 54697 [SYN, ACK] Seq=0 Ack=1 Win=5672 Len=0 MSS=1380 SACK_PERM=1 TSV=1808499941 TSER=499198602 WS=6 Frame 77: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Cisco_f3:bd:bf (00:12:00:f3:bd:bf), Dst: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee) Internet Protocol, Src: 74.125.224.55 (74.125.224.55), Dst: 167.235.7.71 (167.235.7.71) Transmission Control Protocol, Src Port: https (443), Dst Port: 54697 (54697), Seq: 0, Ack: 1, Len: 0 0000 00 0d 60 2b e0 ee 00 12 00 f3 bd bf 08 00 45 00 ..`+..........E. 0010 00 3c d0 d2 00 00 35 06 db 02 4a 7d e0 37 a7 eb .<....5...J}.7.. 0020 07 47 01 bb d5 a9 85 30 b2 e1 77 ff 47 42 a0 12 .G.....0..w.GB.. 0030 16 28 50 7d 00 00 02 04 05 64 04 02 08 0a 6b cb .(P}.....d....k. 0040 84 e5 1d c1 2a 8a 01 03 03 06 ....*..... No. Time Source Destination Protocol Info 78 12:37:46.286816 167.235.7.71 74.125.224.55 TCP 54697 > https [ACK] Seq=1 Ack=1 Win=5888 Len=0 TSV=499198611 TSER=1808499941 Frame 78: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 74.125.224.55 (74.125.224.55) Transmission Control Protocol, Src Port: 54697 (54697), Dst Port: https (443), Seq: 1, Ack: 1, Len: 0 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 00 34 6d cc 40 00 40 06 f3 10 a7 eb 07 47 4a 7d .4m.@.@......GJ} 0020 e0 37 d5 a9 01 bb 77 ff 47 42 85 30 b2 e2 80 10 .7....w.GB.0.... 0030 00 5c 94 bb 00 00 01 01 08 0a 1d c1 2a 93 6b cb .\..........*.k. 0040 84 e5 .. No. Time Source Destination Protocol Info 79 12:37:46.287425 167.235.7.71 74.125.224.55 TLSv1 Client Hello Frame 79: 380 bytes on wire (3040 bits), 380 bytes captured (3040 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 74.125.224.55 (74.125.224.55) Transmission Control Protocol, Src Port: 54697 (54697), Dst Port: https (443), Seq: 1, Ack: 1, Len: 314 Secure Socket Layer 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 01 6e 6d cd 40 00 40 06 f1 d5 a7 eb 07 47 4a 7d .nm.@.@......GJ} 0020 e0 37 d5 a9 01 bb 77 ff 47 42 85 30 b2 e2 80 18 .7....w.GB.0.... 0030 00 5c 18 af 00 00 01 01 08 0a 1d c1 2a 93 6b cb .\..........*.k. 0040 84 e5 16 03 01 01 35 01 00 01 31 03 01 4d ac 93 ......5...1..M.. 0050 0a ee 54 f0 be 1f 1f 87 b2 d0 93 39 b3 23 9e 25 ..T........9.#.% 0060 3b 8b e3 57 d9 fc b3 fa 0b 67 83 43 77 20 ae 35 ;..W.....g.Cw .5 0070 f8 c5 b0 f8 65 55 e4 33 2b 8f 20 8f 61 02 fd a5 ....eU.3+. .a... 0080 5c ae f6 19 bf a3 77 49 7a 82 40 01 2e b9 00 28 \.....wIz.@....( 0090 00 ff 00 88 00 87 00 39 00 38 00 84 00 35 00 45 .......9.8...5.E 00a0 00 44 00 33 00 32 00 96 00 41 00 04 00 05 00 2f .D.3.2...A...../ 00b0 00 16 00 13 fe ff 00 0a 01 00 00 c0 00 00 00 14 ................ 00c0 00 12 00 00 0f 6d 61 69 6c 2e 67 6f 6f 67 6c 65 .....mail.google 00d0 2e 63 6f 6d 00 23 00 a4 57 e3 16 7a 8c 39 4f 1c .com.#..W..z.9O. 00e0 75 6a 81 2b 68 87 e4 b5 a2 ef d2 6f 64 2f 99 d7 uj.+h......od/.. 00f0 19 17 ef 08 39 8f 51 a8 c7 e5 2d 93 c6 62 c2 2d ....9.Q...-..b.- 0100 05 f5 1d 29 7e a7 75 99 d6 c7 c0 c6 f7 00 61 07 ...)~.u.......a. 0110 59 c8 5e a3 58 d0 37 bb 20 56 3f 97 06 f0 a4 b7 Y.^.X.7. V?..... 0120 2d de 11 49 e4 08 ca af 41 cf d1 fc 64 fa c2 bb -..I....A...d... 0130 de 27 68 15 be 79 99 cf 1a d5 4d f2 d9 3a 42 c2 .'h..y....M..:B. 0140 11 4d 55 da b0 75 a3 bd 28 c5 8b 1c 80 0a 3a 5f .MU..u..(.....:_ 0150 00 98 3c ed 2e 3d 54 2d 07 55 e2 55 19 b0 50 ed ..<..=T-.U.U..P. 0160 c7 7a 69 f6 28 cc 38 f2 d1 45 db b5 f7 8f 7e 8f .zi.(.8..E....~. 0170 d2 f1 9c 30 ce 78 fb 74 fc 77 5f ad ...0.x.t.w_. No. Time Source Destination Protocol Info 80 12:37:46.295493 74.125.224.55 167.235.7.71 TCP https > 54697 [ACK] Seq=1 Ack=315 Win=6784 Len=0 TSV=1808499950 TSER=499198611 Frame 80: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_f3:bd:bf (00:12:00:f3:bd:bf), Dst: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee) Internet Protocol, Src: 74.125.224.55 (74.125.224.55), Dst: 167.235.7.71 (167.235.7.71) Transmission Control Protocol, Src Port: https (443), Dst Port: 54697 (54697), Seq: 1, Ack: 315, Len: 0 0000 00 0d 60 2b e0 ee 00 12 00 f3 bd bf 08 00 45 00 ..`+..........E. 0010 00 34 d0 d3 00 00 35 06 db 09 4a 7d e0 37 a7 eb .4....5...J}.7.. 0020 07 47 01 bb d5 a9 85 30 b2 e2 77 ff 48 7c 80 10 .G.....0..w.H|.. 0030 00 6a 93 6a 00 00 01 01 08 0a 6b cb 84 ee 1d c1 .j.j......k..... 0040 2a 93 *. No. Time Source Destination Protocol Info 81 12:37:46.298949 74.125.224.55 167.235.7.71 TLSv1 Server Hello, Change Cipher Spec, Encrypted Handshake Message Frame 81: 199 bytes on wire (1592 bits), 199 bytes captured (1592 bits) Ethernet II, Src: Cisco_f3:bd:bf (00:12:00:f3:bd:bf), Dst: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee) Internet Protocol, Src: 74.125.224.55 (74.125.224.55), Dst: 167.235.7.71 (167.235.7.71) Transmission Control Protocol, Src Port: https (443), Dst Port: 54697 (54697), Seq: 1, Ack: 315, Len: 133 Secure Socket Layer 0000 00 0d 60 2b e0 ee 00 12 00 f3 bd bf 08 00 45 00 ..`+..........E. 0010 00 b9 d0 d4 00 00 35 06 da 83 4a 7d e0 37 a7 eb ......5...J}.7.. 0020 07 47 01 bb d5 a9 85 30 b2 e2 77 ff 48 7c 80 18 .G.....0..w.H|.. 0030 00 6a 04 2f 00 00 01 01 08 0a 6b cb 84 f1 1d c1 .j./......k..... 0040 2a 93 16 03 01 00 51 02 00 00 4d 03 01 4d ac 93 *.....Q...M..M.. 0050 0a b4 b9 07 43 83 ca f6 af 26 be f5 22 65 44 fa ....C....&.."eD. 0060 63 7c 48 19 c9 65 25 9f 6e 5d 71 3b 12 20 ae 35 c|H..e%.n]q;. .5 0070 f8 c5 b0 f8 65 55 e4 33 2b 8f 20 8f 61 02 fd a5 ....eU.3+. .a... 0080 5c ae f6 19 bf a3 77 49 7a 82 40 01 2e b9 00 05 \.....wIz.@..... 0090 00 00 05 ff 01 00 01 00 14 03 01 00 01 01 16 03 ................ 00a0 01 00 24 84 6a 70 64 ab d4 0b 2d 4d cd 8b 75 b4 ..$.jpd...-M..u. 00b0 dd 28 b6 ca 99 e4 9f 04 8a 37 b6 ec 76 19 10 57 .(.......7..v..W 00c0 3f df d4 b2 e5 3d 3d ?....== No. Time Source Destination Protocol Info 82 12:37:46.299015 167.235.7.71 74.125.224.55 TCP 54697 > https [ACK] Seq=315 Ack=134 Win=6912 Len=0 TSV=499198623 TSER=1808499953 Frame 82: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 74.125.224.55 (74.125.224.55) Transmission Control Protocol, Src Port: 54697 (54697), Dst Port: https (443), Seq: 315, Ack: 134, Len: 0 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 00 34 6d ce 40 00 40 06 f3 0e a7 eb 07 47 4a 7d .4m.@.@......GJ} 0020 e0 37 d5 a9 01 bb 77 ff 48 7c 85 30 b3 67 80 10 .7....w.H|.0.g.. 0030 00 6c 92 d4 00 00 01 01 08 0a 1d c1 2a 9f 6b cb .l..........*.k. 0040 84 f1 .. No. Time Source Destination Protocol Info 83 12:37:46.360676 167.235.7.71 74.125.224.55 TLSv1 Change Cipher Spec, Encrypted Handshake Message Frame 83: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 74.125.224.55 (74.125.224.55) Transmission Control Protocol, Src Port: 54697 (54697), Dst Port: https (443), Seq: 315, Ack: 134, Len: 1368 Secure Socket Layer 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 05 8c 6d cf 40 00 40 06 ed b5 a7 eb 07 47 4a 7d ..m.@.@......GJ} 0020 e0 37 d5 a9 01 bb 77 ff 48 7c 85 30 b3 67 80 10 .7....w.H|.0.g.. 0030 00 6c 32 87 00 00 01 01 08 0a 1d c1 2a dc 6b cb .l2.........*.k. 0040 84 f1 14 03 01 00 01 01 16 03 01 00 24 33 f6 db ............$3.. 0050 55 6a 95 cf 51 a2 52 d5 3f 13 2a ee 41 9d 6b 33 Uj..Q.R.?.*.A.k3 0060 5e e8 10 cb 88 0c 76 8a b2 0f 0c 1f a8 a6 ef 05 ^.....v......... 0070 a2 17 03 01 0c 57 73 39 00 92 8c 11 aa 0f 59 79 .....Ws9......Yy 0080 f0 6b 15 9a 1c 8d ef 21 aa b3 b4 7c 1b fe 40 b3 .k.....!...|..@. 0090 0b c8 46 aa 1d 8a 3e 22 89 1d 7d e9 2e d2 42 5f ..F...>"..}...B_ 00a0 7a a6 35 05 68 14 bf a8 55 f1 bf 43 ec 8b e8 36 z.5.h...U..C...6 00b0 e6 d0 cb 79 30 33 ee 64 d4 90 91 dd ab 87 3c 7e ...y03.d......<~ 00c0 54 db cd 4d 4b 81 e2 d1 9a 7b 44 d9 e1 13 9a 72 T..MK....{D....r 00d0 46 cc 8a cb 89 cc 79 69 9a 41 09 df f7 85 8b 0f F.....yi.A...... 00e0 61 61 57 0c 23 f0 34 ad 47 b7 96 c5 38 45 c1 09 aaW.#.4.G...8E.. 00f0 cd 3b f7 70 ef 2b fc 65 8b 77 4d 13 5f 5f 75 e0 .;.p.+.e.wM.__u. 0100 cd 59 ab ed 58 34 d9 52 be 78 7b 4d 12 ca 09 85 .Y..X4.R.x{M.... 0110 ad 4d 70 42 01 d8 81 a9 9b b6 c8 ca dc ee 14 5c .MpB...........\ 0120 9c c4 01 f9 1c 72 b4 9e 55 89 37 3c b2 52 cb d1 .....r..U.7<.R.. 0130 4c f6 91 21 6c f2 8a bb 24 a0 24 d0 77 e2 bb e1 L..!l...$.$.w... 0140 e9 74 38 64 77 23 cd 65 fe 51 71 22 7d 39 c3 1d .t8dw#.e.Qq"}9.. 0150 36 fe 64 a1 bf ee 8c 0b 14 c3 2a 33 8a 50 0e ab 6.d.......*3.P.. 0160 1f 87 bb e2 54 b7 cb 2d f6 7b c8 0d 5d 1e d8 34 ....T..-.{..]..4 0170 e4 44 7f 63 eb 66 e1 18 3b 70 28 de 43 a7 78 5b .D.c.f..;p(.C.x[ 0180 6b 87 8b 84 44 69 15 9e b1 73 e1 bb 96 5f 0f 4d k...Di...s..._.M 0190 07 cb 13 33 20 e2 a1 32 43 56 0d f8 96 5b 49 98 ...3 ..2CV...[I. 01a0 29 39 88 94 d3 d1 76 a3 ff 6d 30 fd 56 97 d0 f3 )9....v..m0.V... 01b0 b5 d4 d4 aa c4 15 fb ff 24 ba 70 6c e6 f7 fe e6 ........$.pl.... 01c0 7c 54 69 a2 dd 35 0f 9d 34 d4 f1 2d fe bd 77 4e |Ti..5..4..-..wN 01d0 c1 27 5f 90 22 31 58 ed 3a 32 d5 ca 8e 59 d4 45 .'_."1X.:2...Y.E 01e0 0f 89 8b 9d 3e df cd dd 2f fd fb cf c4 f5 7f ec ....>.../....... 01f0 ae f2 a8 2e 37 48 97 bd 33 d6 90 5e a0 7c 99 09 ....7H..3..^.|.. 0200 80 65 ee 3c be 2c ca 2c 4d 69 04 51 54 9f ee 4c .e.<.,.,Mi.QT..L 0210 49 51 52 08 73 aa 33 66 7e 4f d0 4e c0 9c 94 c9 IQR.s.3f~O.N.... 0220 35 a4 86 56 a0 08 c0 21 8f 89 24 5a b4 f7 3a ad 5..V...!..$Z..:. 0230 7e 78 05 64 50 01 78 13 8f 7c 70 ee 03 6a 6f 6d ~x.dP.x..|p..jom 0240 04 ba 3c cd 4e 76 d5 a1 c8 97 04 01 29 53 76 f8 ..<.Nv......)Sv. 0250 09 53 55 ef 08 c3 3d 1c 24 c7 91 d7 c7 50 44 96 .SU...=.$....PD. 0260 25 19 be 6e 55 d3 64 99 9a 3b 13 55 cc f3 78 00 %..nU.d..;.U..x. 0270 c1 22 e6 f8 07 91 67 1b 0d 38 8b 67 80 dd 5f 5a ."....g..8.g.._Z 0280 85 80 47 3d b1 db 1c d0 42 a8 ee a8 63 e4 63 7b ..G=....B...c.c{ 0290 a5 db 16 70 de 25 a1 e6 bf ca 09 6c 05 14 79 c0 ...p.%.....l..y. 02a0 fe e5 54 b0 03 1f 30 55 9a 80 e9 b3 22 82 23 d7 ..T...0U....".#. 02b0 56 20 ba a9 1c 96 26 6a 29 c6 cd 46 7c ac 05 62 V ....&j)..F|..b 02c0 dd e4 6d be 9a e0 16 18 ad 2e 21 f9 bb 60 a1 a0 ..m.......!..`.. 02d0 50 5c 9e 8d 5d e0 67 15 ee d1 bd ff 9c fd bd 2f P\..].g......../ 02e0 d2 ee d1 99 60 05 d7 29 6c bc bc 0c bd ba 49 6c ....`..)l.....Il 02f0 b6 e6 1a 1e d5 77 c4 fa 4d 70 69 8c 91 1c f0 d3 .....w..Mpi..... 0300 de 08 15 76 e4 a1 39 c9 9d 01 60 07 2c 9b f9 ab ...v..9...`.,... 0310 bf 68 a5 a6 d1 96 78 14 0b 62 ab 1a 6c 39 a1 fc .h....x..b..l9.. 0320 8e 39 4c ec 2f f3 37 de 3a 4e ab ac 59 7d 9d c1 .9L./.7.:N..Y}.. 0330 1e d6 b5 ec 2d c9 fb 2b d6 7f d8 32 83 aa 01 81 ....-..+...2.... 0340 76 d2 58 73 6a 55 c6 f7 07 2a be 46 7a e1 ba 9e v.XsjU...*.Fz... 0350 e5 80 66 4d 89 b9 a9 2e 47 14 c8 cd 3b 39 a7 83 ..fM....G...;9.. 0360 f1 09 21 09 9a a8 39 47 6b 54 98 da 1c 60 f8 1e ..!...9GkT...`.. 0370 a4 5e b7 9d 74 a2 ad f9 62 81 30 01 9b aa 36 39 .^..t...b.0...69 0380 48 47 3f 32 f2 1d 6c a6 2c e3 18 86 7e a0 70 dc HG?2..l.,...~.p. 0390 77 ee 74 04 c3 a8 33 6c 6c 6b 8d 89 8e e4 53 36 w.t...3llk....S6 03a0 89 44 6d a0 08 a0 20 51 91 36 73 b0 52 43 90 ae .Dm... Q.6s.RC.. 03b0 8f 3f c6 cb 5c df ec ec 45 8d 1d ea 35 83 53 04 .?..\...E...5.S. 03c0 d0 d9 34 5d 6b 7d d9 15 98 76 a8 4e 97 77 33 56 ..4]k}...v.N.w3V 03d0 69 58 26 a3 6a bf 4b 9e 0d 2a 8e 21 ef 80 c8 d0 iX&.j.K..*.!.... 03e0 5f 3f 9f 8d 78 96 ea 85 a4 91 17 67 d3 99 58 59 _?..x......g..XY 03f0 04 77 63 0b fa ea 43 96 49 e1 42 7a cd f8 b8 32 .wc...C.I.Bz...2 0400 72 6c e7 67 22 8e ba a2 59 71 80 83 c7 9d f2 7c rl.g"...Yq.....| 0410 70 16 a0 a1 3b b3 d6 bd 96 b1 c7 47 68 0e 34 ed p...;......Gh.4. 0420 95 f9 07 86 d6 1f 2a b7 09 f7 73 b8 83 45 d5 83 ......*...s..E.. 0430 b9 46 0d 58 7b 99 f6 03 12 91 9a 35 2b a6 66 4c .F.X{......5+.fL 0440 e2 ef 9d a2 48 52 c5 e7 83 bf f0 1d 5b 50 db 2e ....HR......[P.. 0450 97 20 8f 57 9d f7 7c af 83 a9 8e dc ed d6 2e 77 . .W..|........w 0460 91 a9 18 86 da 43 55 c3 f9 e0 05 74 31 f5 32 29 .....CU....t1.2) 0470 28 93 3b d6 c9 39 55 39 5a 57 18 d5 e4 a0 1b 40 (.;..9U9ZW.....@ 0480 6c 24 96 7c 72 38 69 f3 f4 e1 db 42 21 da fd 3c l$.|r8i....B!..< 0490 fd c2 6e c5 0b d2 53 2a 98 c8 34 29 98 e0 3f e2 ..n...S*..4)..?. 04a0 d7 5b cc 71 e7 36 9e 42 c9 e3 c9 d7 2e 48 e2 b6 .[.q.6.B.....H.. 04b0 fd 3a 9a 0e 6d 8c 4d 1e 16 c5 e1 b7 12 79 19 66 .:..m.M......y.f 04c0 75 77 f8 82 a9 a9 cb 98 92 f0 c3 17 c0 fc 73 6c uw............sl 04d0 e9 b4 bb bc 82 ab 72 36 ab 24 75 84 b1 4c 0f 47 ......r6.$u..L.G 04e0 66 57 07 3a cb 8c 68 cc bd 3d 7c dc 80 f6 55 57 fW.:..h..=|...UW 04f0 dd cf 1f 44 98 43 32 9c ad 6b e7 64 a6 0c e4 91 ...D.C2..k.d.... 0500 1b 42 84 71 10 e3 89 2e 42 05 bf 09 3e 0f 1d 49 .B.q....B...>..I 0510 e0 24 24 b5 c2 1b 6a a1 b3 e1 2a 2d 76 1e 31 5c .$$...j...*-v.1\ 0520 eb 5e 06 47 50 ae f1 60 e3 db 90 e7 fd 42 75 c6 .^.GP..`.....Bu. 0530 f7 d5 fc ec 13 40 59 6d d8 3a 70 dd 0b 4d a7 f0 .....@Ym.:p..M.. 0540 07 bb d0 11 67 20 43 a1 61 1c cf ab 6a d1 00 c1 ....g C.a...j... 0550 ca 61 11 22 ff d5 b0 4f e7 e6 ca 5e ce 26 7a a3 .a."...O...^.&z. 0560 31 d2 63 f3 fd bc 3f 13 bd bb eb b3 f7 6d d4 92 1.c...?......m.. 0570 7d 17 9f 7c e5 4a 8c 05 94 ac eb bb 19 5e c1 d1 }..|.J.......^.. 0580 7d 6e 4c 71 df 3e 3e ea 0d 10 82 e5 67 bb 63 a0 }nLq.>>.....g.c. 0590 b1 0e 70 74 97 a7 29 ac af a3 ..pt..)... No. Time Source Destination Protocol Info 84 12:37:46.360710 167.235.7.71 74.125.224.55 TCP [TCP segment of a reassembled PDU] Frame 84: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 74.125.224.55 (74.125.224.55) Transmission Control Protocol, Src Port: 54697 (54697), Dst Port: https (443), Seq: 1683, Ack: 134, Len: 1368 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 05 8c 6d d0 40 00 40 06 ed b4 a7 eb 07 47 4a 7d ..m.@.@......GJ} 0020 e0 37 d5 a9 01 bb 77 ff 4d d4 85 30 b3 67 80 10 .7....w.M..0.g.. 0030 00 6c 6c 40 00 00 01 01 08 0a 1d c1 2a dc 6b cb .ll@........*.k. 0040 84 f1 d4 51 7b bb 18 56 b3 85 ed b0 d1 3b bf 90 ...Q{..V.....;.. 0050 85 1e 7b 0f ed 28 f7 8b 3f a1 ad a2 f8 84 04 9d ..{..(..?....... 0060 a5 da 64 c9 f6 ae e6 46 1e 23 20 02 52 92 00 a3 ..d....F.# .R... 0070 23 88 fd b0 07 1f 9c 1e fb c3 d8 1f 00 dd 6e 6f #.............no 0080 68 3d da 10 88 db a0 dc 65 cf a1 dd 43 d7 6b 91 h=......e...C.k. 0090 7b 3a 82 b9 58 bc e8 cd a7 f6 4b 33 a8 97 6d 26 {:..X.....K3..m& 00a0 7f e8 1c 18 50 21 2e 96 da d3 67 8e a5 65 c5 7c ....P!....g..e.| 00b0 6a 92 99 49 24 b3 d7 c2 35 0c 63 2c b7 76 2e ae j..I$...5.c,.v.. 00c0 f2 df 93 12 b4 1b 23 cf 90 3c 0a 58 48 df cd 00 ......#..<.XH... 00d0 f0 af 19 56 23 b1 d6 8f 79 aa e3 b1 de 2e 39 ee ...V#...y.....9. 00e0 56 fb d4 1a 41 46 56 a0 2d 44 4f 29 e1 0c 35 5e V...AFV.-DO)..5^ 00f0 d1 b0 51 53 46 fd c8 22 a5 c7 ef 1d 2f 4e 35 c6 ..QSF.."..../N5. 0100 ed f0 ca f3 08 d2 e6 2f 8c ab 9e 92 2f 8e 99 a5 ......./..../... 0110 f2 43 d5 af f3 a5 c3 ab f4 d6 32 8f 83 4a 32 58 .C........2..J2X 0120 57 f9 58 7c 63 65 53 f3 0d f5 53 68 3a 37 80 15 W.X|ceS...Sh:7.. 0130 fe ca 24 fa 76 a6 07 a9 bd cb 83 16 d3 5a 75 89 ..$.v........Zu. 0140 21 c0 9d 03 da fb c7 46 07 9d d6 8a 92 22 ee a8 !......F.....".. 0150 d7 60 ec d0 cb c7 11 e1 86 62 5e 15 48 94 ce 27 .`.......b^.H..' 0160 ed e3 55 d9 4d 8e a1 56 54 7f ef d9 7f fb 2e 0a ..U.M..VT....... 0170 be 15 3d 7e b7 db 84 e4 e5 0d 3a ea b6 99 22 d6 ..=~......:...". 0180 f8 72 40 af 8d ed 91 d0 f9 24 80 de db 74 f0 6b .r@......$...t.k 0190 38 b3 0c 17 e4 1f b4 70 a6 26 d6 aa 7d 41 3c 54 8......p.&..}Am.. 0390 c0 6b dc e8 31 ce 01 cb 89 ab 08 d9 a8 b7 07 1e .k..1........... 03a0 66 05 fd 63 51 7f 5e 13 28 cf ff d2 5a e1 ef 18 f..cQ.^.(...Z... 03b0 1b ab d1 92 de 76 92 3b be 34 48 c8 59 32 99 5e .....v.;.4H.Y2.^ 03c0 e1 ce 02 4c c2 d7 2a 44 b6 46 2e d8 cc 16 09 90 ...L..*D.F...... 03d0 d1 5e 02 95 24 e2 1e 18 6e 7a cd 5f b6 cd 11 b1 .^..$...nz._.... 03e0 38 c6 15 4b 46 f3 9c 58 99 ed c5 4f 0e f1 17 b3 8..KF..X...O.... 03f0 b9 22 6a 77 56 7d 2c 8b b3 e7 fb 81 2d 1b 57 dd ."jwV},.....-.W. 0400 99 d4 bb 21 08 98 68 bf 60 c0 e6 bb c5 5e d6 84 ...!..h.`....^.. 0410 23 b8 5f 4f 87 e4 25 68 c0 d9 68 ee 93 db 9f 34 #._O..%h..h....4 0420 4c ee 4c 5d 77 61 77 cc fb 6e da 89 5d f0 be f4 L.L]waw..n..]... 0430 8c 6b 9a e2 33 6d 0a 87 39 5d 99 c9 55 08 5a 32 .k..3m..9]..U.Z2 0440 75 52 3e 9b ce c5 53 bb 6c 64 16 3c ad 24 c2 9c uR>...S.ld.<.$.. 0450 25 37 32 62 4a 08 f1 92 53 68 9d 58 47 54 09 85 %72bJ...Sh.XGT.. 0460 a0 83 38 9d e3 ad 2b e0 99 94 86 ee 08 95 a6 e8 ..8...+......... 0470 6f 14 16 5c 20 18 9a 49 b6 cd 78 30 a9 b2 ea 55 o..\ ..I..x0...U 0480 c8 31 e1 a1 10 1d 72 c6 23 c3 4c b4 a6 2b e3 a3 .1....r.#.L..+.. 0490 f8 ca 54 f8 e6 5e 0c 40 60 6a b7 de 21 8a 05 53 ..T..^.@`j..!..S 04a0 67 01 73 5e f7 f8 e0 fa 5c 92 33 04 de 74 24 6a g.s^....\.3..t$j 04b0 20 16 b4 54 36 9b b4 bb b9 ba cf e2 12 d2 0c fb ..T6........... 04c0 42 b7 2d b1 3a 07 c5 c0 a9 ea b4 c5 28 63 42 22 B.-.:.......(cB" 04d0 0f 45 49 86 00 6c 1c 66 32 cb cb f7 f7 37 37 8c .EI..l.f2....77. 04e0 71 59 d7 e6 1b 13 6f 2d 84 ec 4e 17 a0 d0 d3 fb qY....o-..N..... 04f0 01 64 51 36 57 d8 9e 38 7a e3 4e 33 bb 5a ec 4f .dQ6W..8z.N3.Z.O 0500 a4 47 49 de fb ff 29 d6 7d b7 ea 2f 5a 3f bf a5 .GI...).}../Z?.. 0510 e7 5a a7 5e 66 7a db ec ee 28 4c d7 5b d7 22 5e .Z.^fz...(L.[."^ 0520 80 8f 16 4c 1e ab f4 35 5f 84 04 91 a4 09 79 3b ...L...5_.....y; 0530 4e be c2 eb 94 c0 4e 77 68 d5 62 64 d9 3e d9 c5 N.....Nwh.bd.>.. 0540 fd 6b 29 b5 d8 a4 a8 06 24 6f da 71 8f a7 06 ee .k).....$o.q.... 0550 91 df 5a eb 85 19 de 4c c5 66 12 1f af e5 73 f1 ..Z....L.f....s. 0560 2d cf 05 38 df f8 5c af 1a fe fb 21 6e d3 04 94 -..8..\....!n... 0570 1d dd 65 00 8d 58 31 2b ea 9b f2 fa 5d f3 e7 35 ..e..X1+....]..5 0580 c9 b5 0e 97 ec 2e 37 58 6a f5 ba 15 49 71 fa 85 ......7Xj...Iq.. 0590 c9 fc df 99 37 ff 8a 50 ea 05 ....7..P.. No. Time Source Destination Protocol Info 85 12:37:46.360726 167.235.7.71 74.125.224.55 TLSv1 Application Data Frame 85: 541 bytes on wire (4328 bits), 541 bytes captured (4328 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 74.125.224.55 (74.125.224.55) Transmission Control Protocol, Src Port: 54697 (54697), Dst Port: https (443), Seq: 3051, Ack: 134, Len: 475 [Reassembled TCP Segments (3164 bytes): #83(1321), #84(1368), #85(475)] Secure Socket Layer Frame (541 bytes): 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 02 0f 6d d1 40 00 40 06 f1 30 a7 eb 07 47 4a 7d ..m.@.@..0...GJ} 0020 e0 37 d5 a9 01 bb 77 ff 53 2c 85 30 b3 67 80 18 .7....w.S,.0.g.. 0030 00 6c 4e 1b 00 00 01 01 08 0a 1d c1 2a dc 6b cb .lN.........*.k. 0040 84 f1 78 99 19 36 24 c3 87 8d 70 4e 0e 5e 6a 58 ..x..6$...pN.^jX 0050 d6 3a 25 fe 47 f8 f9 7b e7 7a 59 02 70 12 fd c1 .:%.G..{.zY.p... 0060 e1 e5 07 13 9f 57 1b 7c e1 5d 51 04 77 23 a2 7e .....W.|.]Q.w#.~ 0070 57 18 c0 6a 0d 92 55 d5 9d 70 07 22 de 07 8b f7 W..j..U..p.".... 0080 38 73 a5 d2 54 93 6d c2 7b bb b5 05 dc af 95 15 8s..T.m.{....... 0090 6b 73 1d 6a ff 13 c2 13 51 e5 67 be a6 d9 82 32 ks.j....Q.g....2 00a0 c2 e0 8b d1 a6 3d 97 6f bc fb 8c ba 1b 75 81 dd .....=.o.....u.. 00b0 67 ad eb b6 9f 4e 15 8e 8f ab 6a b9 07 3f 78 d8 g....N....j..?x. 00c0 ea 03 aa 50 17 7f 15 ac 5b 55 ca b2 62 c2 a1 63 ...P....[U..b..c 00d0 f2 d3 74 03 89 61 25 86 f4 be 0c 47 86 6f 7c 42 ..t..a%....G.o|B 00e0 65 32 12 d3 d8 88 64 9d 2b ca 2f 17 05 0c dd 95 e2....d.+./..... 00f0 5e c9 53 f8 52 36 a6 78 2e fd e6 62 13 3b 62 f5 ^.S.R6.x...b.;b. 0100 00 90 ce 42 6f d7 fe b0 97 76 5c 33 39 d3 57 63 ...Bo....v\39.Wc 0110 af cd a6 d9 5d f9 0f 44 13 c9 24 1d 17 57 35 ba ....]..D..$..W5. 0120 ba ab bf 46 5b ee 3f fd 4c 9d ff 86 c7 a3 d1 bf ...F[.?.L....... 0130 2f 83 80 c6 fb 6a f4 c8 eb 4c 00 f7 45 8b 97 49 /....j...L..E..I 0140 95 95 38 03 6a 65 2f 14 47 c8 a4 b8 db d0 80 40 ..8.je/.G......@ 0150 d4 b4 40 df 1c da b4 be 5b da 30 ee ce d6 37 22 ..@.....[.0...7" 0160 dd 1d 71 ec 0e 6b 03 91 3e 62 c3 4b d5 22 c1 f1 ..q..k..>b.K.".. 0170 67 8e cb 4d 3d b1 0c 47 3c aa 11 46 8d 1d 3a 9b g..M=..G<..F..:. 0180 34 06 3f bc d0 15 4d 41 77 71 80 ff 9f 50 27 42 4.?...MAwq...P'B 0190 f9 d8 c6 4d fb 02 56 a8 7c ee 4b 5d f7 3e ee 26 ...M..V.|.K].>.& 01a0 3b af 5b 3e cf 3a 86 87 ec 7f 4d 2a 98 61 6b 4e ;.[>.:....M*.akN 01b0 7f f3 7a 89 ac 3d 7e 89 15 85 ba 24 94 f7 7d 02 ..z..=~....$..}. 01c0 28 31 eb f6 50 5f df d1 0d ce b2 0a d9 80 3d 9d (1..P_........=. 01d0 45 d9 f8 05 0a cd aa 87 b8 dc 7e 31 5a a9 4d 17 E.........~1Z.M. 01e0 d1 c7 93 23 69 e1 5b c3 07 f0 49 78 23 9a 90 d8 ...#i.[...Ix#... 01f0 a0 28 19 dc 19 8c da 16 3e 79 cd 43 5a 4e 8f e7 .(......>y.CZN.. 0200 77 e0 15 49 bb 03 c2 42 1d 04 37 37 65 e4 3e 68 w..I...B..77e.>h 0210 42 d4 d5 bb 48 74 ed 91 dc 40 e4 fa dc B...Ht...@... Reassembled TCP (3164 bytes): 0000 17 03 01 0c 57 73 39 00 92 8c 11 aa 0f 59 79 f0 ....Ws9......Yy. 0010 6b 15 9a 1c 8d ef 21 aa b3 b4 7c 1b fe 40 b3 0b k.....!...|..@.. 0020 c8 46 aa 1d 8a 3e 22 89 1d 7d e9 2e d2 42 5f 7a .F...>"..}...B_z 0030 a6 35 05 68 14 bf a8 55 f1 bf 43 ec 8b e8 36 e6 .5.h...U..C...6. 0040 d0 cb 79 30 33 ee 64 d4 90 91 dd ab 87 3c 7e 54 ..y03.d......<~T 0050 db cd 4d 4b 81 e2 d1 9a 7b 44 d9 e1 13 9a 72 46 ..MK....{D....rF 0060 cc 8a cb 89 cc 79 69 9a 41 09 df f7 85 8b 0f 61 .....yi.A......a 0070 61 57 0c 23 f0 34 ad 47 b7 96 c5 38 45 c1 09 cd aW.#.4.G...8E... 0080 3b f7 70 ef 2b fc 65 8b 77 4d 13 5f 5f 75 e0 cd ;.p.+.e.wM.__u.. 0090 59 ab ed 58 34 d9 52 be 78 7b 4d 12 ca 09 85 ad Y..X4.R.x{M..... 00a0 4d 70 42 01 d8 81 a9 9b b6 c8 ca dc ee 14 5c 9c MpB...........\. 00b0 c4 01 f9 1c 72 b4 9e 55 89 37 3c b2 52 cb d1 4c ....r..U.7<.R..L 00c0 f6 91 21 6c f2 8a bb 24 a0 24 d0 77 e2 bb e1 e9 ..!l...$.$.w.... 00d0 74 38 64 77 23 cd 65 fe 51 71 22 7d 39 c3 1d 36 t8dw#.e.Qq"}9..6 00e0 fe 64 a1 bf ee 8c 0b 14 c3 2a 33 8a 50 0e ab 1f .d.......*3.P... 00f0 87 bb e2 54 b7 cb 2d f6 7b c8 0d 5d 1e d8 34 e4 ...T..-.{..]..4. 0100 44 7f 63 eb 66 e1 18 3b 70 28 de 43 a7 78 5b 6b D.c.f..;p(.C.x[k 0110 87 8b 84 44 69 15 9e b1 73 e1 bb 96 5f 0f 4d 07 ...Di...s..._.M. 0120 cb 13 33 20 e2 a1 32 43 56 0d f8 96 5b 49 98 29 ..3 ..2CV...[I.) 0130 39 88 94 d3 d1 76 a3 ff 6d 30 fd 56 97 d0 f3 b5 9....v..m0.V.... 0140 d4 d4 aa c4 15 fb ff 24 ba 70 6c e6 f7 fe e6 7c .......$.pl....| 0150 54 69 a2 dd 35 0f 9d 34 d4 f1 2d fe bd 77 4e c1 Ti..5..4..-..wN. 0160 27 5f 90 22 31 58 ed 3a 32 d5 ca 8e 59 d4 45 0f '_."1X.:2...Y.E. 0170 89 8b 9d 3e df cd dd 2f fd fb cf c4 f5 7f ec ae ...>.../........ 0180 f2 a8 2e 37 48 97 bd 33 d6 90 5e a0 7c 99 09 80 ...7H..3..^.|... 0190 65 ee 3c be 2c ca 2c 4d 69 04 51 54 9f ee 4c 49 e.<.,.,Mi.QT..LI 01a0 51 52 08 73 aa 33 66 7e 4f d0 4e c0 9c 94 c9 35 QR.s.3f~O.N....5 01b0 a4 86 56 a0 08 c0 21 8f 89 24 5a b4 f7 3a ad 7e ..V...!..$Z..:.~ 01c0 78 05 64 50 01 78 13 8f 7c 70 ee 03 6a 6f 6d 04 x.dP.x..|p..jom. 01d0 ba 3c cd 4e 76 d5 a1 c8 97 04 01 29 53 76 f8 09 .<.Nv......)Sv.. 01e0 53 55 ef 08 c3 3d 1c 24 c7 91 d7 c7 50 44 96 25 SU...=.$....PD.% 01f0 19 be 6e 55 d3 64 99 9a 3b 13 55 cc f3 78 00 c1 ..nU.d..;.U..x.. 0200 22 e6 f8 07 91 67 1b 0d 38 8b 67 80 dd 5f 5a 85 "....g..8.g.._Z. 0210 80 47 3d b1 db 1c d0 42 a8 ee a8 63 e4 63 7b a5 .G=....B...c.c{. 0220 db 16 70 de 25 a1 e6 bf ca 09 6c 05 14 79 c0 fe ..p.%.....l..y.. 0230 e5 54 b0 03 1f 30 55 9a 80 e9 b3 22 82 23 d7 56 .T...0U....".#.V 0240 20 ba a9 1c 96 26 6a 29 c6 cd 46 7c ac 05 62 dd ....&j)..F|..b. 0250 e4 6d be 9a e0 16 18 ad 2e 21 f9 bb 60 a1 a0 50 .m.......!..`..P 0260 5c 9e 8d 5d e0 67 15 ee d1 bd ff 9c fd bd 2f d2 \..].g......../. 0270 ee d1 99 60 05 d7 29 6c bc bc 0c bd ba 49 6c b6 ...`..)l.....Il. 0280 e6 1a 1e d5 77 c4 fa 4d 70 69 8c 91 1c f0 d3 de ....w..Mpi...... 0290 08 15 76 e4 a1 39 c9 9d 01 60 07 2c 9b f9 ab bf ..v..9...`.,.... 02a0 68 a5 a6 d1 96 78 14 0b 62 ab 1a 6c 39 a1 fc 8e h....x..b..l9... 02b0 39 4c ec 2f f3 37 de 3a 4e ab ac 59 7d 9d c1 1e 9L./.7.:N..Y}... 02c0 d6 b5 ec 2d c9 fb 2b d6 7f d8 32 83 aa 01 81 76 ...-..+...2....v 02d0 d2 58 73 6a 55 c6 f7 07 2a be 46 7a e1 ba 9e e5 .XsjU...*.Fz.... 02e0 80 66 4d 89 b9 a9 2e 47 14 c8 cd 3b 39 a7 83 f1 .fM....G...;9... 02f0 09 21 09 9a a8 39 47 6b 54 98 da 1c 60 f8 1e a4 .!...9GkT...`... 0300 5e b7 9d 74 a2 ad f9 62 81 30 01 9b aa 36 39 48 ^..t...b.0...69H 0310 47 3f 32 f2 1d 6c a6 2c e3 18 86 7e a0 70 dc 77 G?2..l.,...~.p.w 0320 ee 74 04 c3 a8 33 6c 6c 6b 8d 89 8e e4 53 36 89 .t...3llk....S6. 0330 44 6d a0 08 a0 20 51 91 36 73 b0 52 43 90 ae 8f Dm... Q.6s.RC... 0340 3f c6 cb 5c df ec ec 45 8d 1d ea 35 83 53 04 d0 ?..\...E...5.S.. 0350 d9 34 5d 6b 7d d9 15 98 76 a8 4e 97 77 33 56 69 .4]k}...v.N.w3Vi 0360 58 26 a3 6a bf 4b 9e 0d 2a 8e 21 ef 80 c8 d0 5f X&.j.K..*.!...._ 0370 3f 9f 8d 78 96 ea 85 a4 91 17 67 d3 99 58 59 04 ?..x......g..XY. 0380 77 63 0b fa ea 43 96 49 e1 42 7a cd f8 b8 32 72 wc...C.I.Bz...2r 0390 6c e7 67 22 8e ba a2 59 71 80 83 c7 9d f2 7c 70 l.g"...Yq.....|p 03a0 16 a0 a1 3b b3 d6 bd 96 b1 c7 47 68 0e 34 ed 95 ...;......Gh.4.. 03b0 f9 07 86 d6 1f 2a b7 09 f7 73 b8 83 45 d5 83 b9 .....*...s..E... 03c0 46 0d 58 7b 99 f6 03 12 91 9a 35 2b a6 66 4c e2 F.X{......5+.fL. 03d0 ef 9d a2 48 52 c5 e7 83 bf f0 1d 5b 50 db 2e 97 ...HR......[P... 03e0 20 8f 57 9d f7 7c af 83 a9 8e dc ed d6 2e 77 91 .W..|........w. 03f0 a9 18 86 da 43 55 c3 f9 e0 05 74 31 f5 32 29 28 ....CU....t1.2)( 0400 93 3b d6 c9 39 55 39 5a 57 18 d5 e4 a0 1b 40 6c .;..9U9ZW.....@l 0410 24 96 7c 72 38 69 f3 f4 e1 db 42 21 da fd 3c fd $.|r8i....B!..<. 0420 c2 6e c5 0b d2 53 2a 98 c8 34 29 98 e0 3f e2 d7 .n...S*..4)..?.. 0430 5b cc 71 e7 36 9e 42 c9 e3 c9 d7 2e 48 e2 b6 fd [.q.6.B.....H... 0440 3a 9a 0e 6d 8c 4d 1e 16 c5 e1 b7 12 79 19 66 75 :..m.M......y.fu 0450 77 f8 82 a9 a9 cb 98 92 f0 c3 17 c0 fc 73 6c e9 w............sl. 0460 b4 bb bc 82 ab 72 36 ab 24 75 84 b1 4c 0f 47 66 .....r6.$u..L.Gf 0470 57 07 3a cb 8c 68 cc bd 3d 7c dc 80 f6 55 57 dd W.:..h..=|...UW. 0480 cf 1f 44 98 43 32 9c ad 6b e7 64 a6 0c e4 91 1b ..D.C2..k.d..... 0490 42 84 71 10 e3 89 2e 42 05 bf 09 3e 0f 1d 49 e0 B.q....B...>..I. 04a0 24 24 b5 c2 1b 6a a1 b3 e1 2a 2d 76 1e 31 5c eb $$...j...*-v.1\. 04b0 5e 06 47 50 ae f1 60 e3 db 90 e7 fd 42 75 c6 f7 ^.GP..`.....Bu.. 04c0 d5 fc ec 13 40 59 6d d8 3a 70 dd 0b 4d a7 f0 07 ....@Ym.:p..M... 04d0 bb d0 11 67 20 43 a1 61 1c cf ab 6a d1 00 c1 ca ...g C.a...j.... 04e0 61 11 22 ff d5 b0 4f e7 e6 ca 5e ce 26 7a a3 31 a."...O...^.&z.1 04f0 d2 63 f3 fd bc 3f 13 bd bb eb b3 f7 6d d4 92 7d .c...?......m..} 0500 17 9f 7c e5 4a 8c 05 94 ac eb bb 19 5e c1 d1 7d ..|.J.......^..} 0510 6e 4c 71 df 3e 3e ea 0d 10 82 e5 67 bb 63 a0 b1 nLq.>>.....g.c.. 0520 0e 70 74 97 a7 29 ac af a3 d4 51 7b bb 18 56 b3 .pt..)....Q{..V. 0530 85 ed b0 d1 3b bf 90 85 1e 7b 0f ed 28 f7 8b 3f ....;....{..(..? 0540 a1 ad a2 f8 84 04 9d a5 da 64 c9 f6 ae e6 46 1e .........d....F. 0550 23 20 02 52 92 00 a3 23 88 fd b0 07 1f 9c 1e fb # .R...#........ 0560 c3 d8 1f 00 dd 6e 6f 68 3d da 10 88 db a0 dc 65 .....noh=......e 0570 cf a1 dd 43 d7 6b 91 7b 3a 82 b9 58 bc e8 cd a7 ...C.k.{:..X.... 0580 f6 4b 33 a8 97 6d 26 7f e8 1c 18 50 21 2e 96 da .K3..m&....P!... 0590 d3 67 8e a5 65 c5 7c 6a 92 99 49 24 b3 d7 c2 35 .g..e.|j..I$...5 05a0 0c 63 2c b7 76 2e ae f2 df 93 12 b4 1b 23 cf 90 .c,.v........#.. 05b0 3c 0a 58 48 df cd 00 f0 af 19 56 23 b1 d6 8f 79 <.XH......V#...y 05c0 aa e3 b1 de 2e 39 ee 56 fb d4 1a 41 46 56 a0 2d .....9.V...AFV.- 05d0 44 4f 29 e1 0c 35 5e d1 b0 51 53 46 fd c8 22 a5 DO)..5^..QSF..". 05e0 c7 ef 1d 2f 4e 35 c6 ed f0 ca f3 08 d2 e6 2f 8c .../N5......../. 05f0 ab 9e 92 2f 8e 99 a5 f2 43 d5 af f3 a5 c3 ab f4 .../....C....... 0600 d6 32 8f 83 4a 32 58 57 f9 58 7c 63 65 53 f3 0d .2..J2XW.X|ceS.. 0610 f5 53 68 3a 37 80 15 fe ca 24 fa 76 a6 07 a9 bd .Sh:7....$.v.... 0620 cb 83 16 d3 5a 75 89 21 c0 9d 03 da fb c7 46 07 ....Zu.!......F. 0630 9d d6 8a 92 22 ee a8 d7 60 ec d0 cb c7 11 e1 86 ...."...`....... 0640 62 5e 15 48 94 ce 27 ed e3 55 d9 4d 8e a1 56 54 b^.H..'..U.M..VT 0650 7f ef d9 7f fb 2e 0a be 15 3d 7e b7 db 84 e4 e5 .........=~..... 0660 0d 3a ea b6 99 22 d6 f8 72 40 af 8d ed 91 d0 f9 .:..."..r@...... 0670 24 80 de db 74 f0 6b 38 b3 0c 17 e4 1f b4 70 a6 $...t.k8......p. 0680 26 d6 aa 7d 41 3c 54 a3 c4 9f 7d a7 4d 55 a0 c3 &..}Am...k..1.... 0880 ab 08 d9 a8 b7 07 1e 66 05 fd 63 51 7f 5e 13 28 .......f..cQ.^.( 0890 cf ff d2 5a e1 ef 18 1b ab d1 92 de 76 92 3b be ...Z........v.;. 08a0 34 48 c8 59 32 99 5e e1 ce 02 4c c2 d7 2a 44 b6 4H.Y2.^...L..*D. 08b0 46 2e d8 cc 16 09 90 d1 5e 02 95 24 e2 1e 18 6e F.......^..$...n 08c0 7a cd 5f b6 cd 11 b1 38 c6 15 4b 46 f3 9c 58 99 z._....8..KF..X. 08d0 ed c5 4f 0e f1 17 b3 b9 22 6a 77 56 7d 2c 8b b3 ..O....."jwV},.. 08e0 e7 fb 81 2d 1b 57 dd 99 d4 bb 21 08 98 68 bf 60 ...-.W....!..h.` 08f0 c0 e6 bb c5 5e d6 84 23 b8 5f 4f 87 e4 25 68 c0 ....^..#._O..%h. 0900 d9 68 ee 93 db 9f 34 4c ee 4c 5d 77 61 77 cc fb .h....4L.L]waw.. 0910 6e da 89 5d f0 be f4 8c 6b 9a e2 33 6d 0a 87 39 n..]....k..3m..9 0920 5d 99 c9 55 08 5a 32 75 52 3e 9b ce c5 53 bb 6c ]..U.Z2uR>...S.l 0930 64 16 3c ad 24 c2 9c 25 37 32 62 4a 08 f1 92 53 d.<.$..%72bJ...S 0940 68 9d 58 47 54 09 85 a0 83 38 9d e3 ad 2b e0 99 h.XGT....8...+.. 0950 94 86 ee 08 95 a6 e8 6f 14 16 5c 20 18 9a 49 b6 .......o..\ ..I. 0960 cd 78 30 a9 b2 ea 55 c8 31 e1 a1 10 1d 72 c6 23 .x0...U.1....r.# 0970 c3 4c b4 a6 2b e3 a3 f8 ca 54 f8 e6 5e 0c 40 60 .L..+....T..^.@` 0980 6a b7 de 21 8a 05 53 67 01 73 5e f7 f8 e0 fa 5c j..!..Sg.s^....\ 0990 92 33 04 de 74 24 6a 20 16 b4 54 36 9b b4 bb b9 .3..t$j ..T6.... 09a0 ba cf e2 12 d2 0c fb 42 b7 2d b1 3a 07 c5 c0 a9 .......B.-.:.... 09b0 ea b4 c5 28 63 42 22 0f 45 49 86 00 6c 1c 66 32 ...(cB".EI..l.f2 09c0 cb cb f7 f7 37 37 8c 71 59 d7 e6 1b 13 6f 2d 84 ....77.qY....o-. 09d0 ec 4e 17 a0 d0 d3 fb 01 64 51 36 57 d8 9e 38 7a .N......dQ6W..8z 09e0 e3 4e 33 bb 5a ec 4f a4 47 49 de fb ff 29 d6 7d .N3.Z.O.GI...).} 09f0 b7 ea 2f 5a 3f bf a5 e7 5a a7 5e 66 7a db ec ee ../Z?...Z.^fz... 0a00 28 4c d7 5b d7 22 5e 80 8f 16 4c 1e ab f4 35 5f (L.[."^...L...5_ 0a10 84 04 91 a4 09 79 3b 4e be c2 eb 94 c0 4e 77 68 .....y;N.....Nwh 0a20 d5 62 64 d9 3e d9 c5 fd 6b 29 b5 d8 a4 a8 06 24 .bd.>...k).....$ 0a30 6f da 71 8f a7 06 ee 91 df 5a eb 85 19 de 4c c5 o.q......Z....L. 0a40 66 12 1f af e5 73 f1 2d cf 05 38 df f8 5c af 1a f....s.-..8..\.. 0a50 fe fb 21 6e d3 04 94 1d dd 65 00 8d 58 31 2b ea ..!n.....e..X1+. 0a60 9b f2 fa 5d f3 e7 35 c9 b5 0e 97 ec 2e 37 58 6a ...]..5......7Xj 0a70 f5 ba 15 49 71 fa 85 c9 fc df 99 37 ff 8a 50 ea ...Iq......7..P. 0a80 05 78 99 19 36 24 c3 87 8d 70 4e 0e 5e 6a 58 d6 .x..6$...pN.^jX. 0a90 3a 25 fe 47 f8 f9 7b e7 7a 59 02 70 12 fd c1 e1 :%.G..{.zY.p.... 0aa0 e5 07 13 9f 57 1b 7c e1 5d 51 04 77 23 a2 7e 57 ....W.|.]Q.w#.~W 0ab0 18 c0 6a 0d 92 55 d5 9d 70 07 22 de 07 8b f7 38 ..j..U..p."....8 0ac0 73 a5 d2 54 93 6d c2 7b bb b5 05 dc af 95 15 6b s..T.m.{.......k 0ad0 73 1d 6a ff 13 c2 13 51 e5 67 be a6 d9 82 32 c2 s.j....Q.g....2. 0ae0 e0 8b d1 a6 3d 97 6f bc fb 8c ba 1b 75 81 dd 67 ....=.o.....u..g 0af0 ad eb b6 9f 4e 15 8e 8f ab 6a b9 07 3f 78 d8 ea ....N....j..?x.. 0b00 03 aa 50 17 7f 15 ac 5b 55 ca b2 62 c2 a1 63 f2 ..P....[U..b..c. 0b10 d3 74 03 89 61 25 86 f4 be 0c 47 86 6f 7c 42 65 .t..a%....G.o|Be 0b20 32 12 d3 d8 88 64 9d 2b ca 2f 17 05 0c dd 95 5e 2....d.+./.....^ 0b30 c9 53 f8 52 36 a6 78 2e fd e6 62 13 3b 62 f5 00 .S.R6.x...b.;b.. 0b40 90 ce 42 6f d7 fe b0 97 76 5c 33 39 d3 57 63 af ..Bo....v\39.Wc. 0b50 cd a6 d9 5d f9 0f 44 13 c9 24 1d 17 57 35 ba ba ...]..D..$..W5.. 0b60 ab bf 46 5b ee 3f fd 4c 9d ff 86 c7 a3 d1 bf 2f ..F[.?.L......./ 0b70 83 80 c6 fb 6a f4 c8 eb 4c 00 f7 45 8b 97 49 95 ....j...L..E..I. 0b80 95 38 03 6a 65 2f 14 47 c8 a4 b8 db d0 80 40 d4 .8.je/.G......@. 0b90 b4 40 df 1c da b4 be 5b da 30 ee ce d6 37 22 dd .@.....[.0...7". 0ba0 1d 71 ec 0e 6b 03 91 3e 62 c3 4b d5 22 c1 f1 67 .q..k..>b.K."..g 0bb0 8e cb 4d 3d b1 0c 47 3c aa 11 46 8d 1d 3a 9b 34 ..M=..G<..F..:.4 0bc0 06 3f bc d0 15 4d 41 77 71 80 ff 9f 50 27 42 f9 .?...MAwq...P'B. 0bd0 d8 c6 4d fb 02 56 a8 7c ee 4b 5d f7 3e ee 26 3b ..M..V.|.K].>.&; 0be0 af 5b 3e cf 3a 86 87 ec 7f 4d 2a 98 61 6b 4e 7f .[>.:....M*.akN. 0bf0 f3 7a 89 ac 3d 7e 89 15 85 ba 24 94 f7 7d 02 28 .z..=~....$..}.( 0c00 31 eb f6 50 5f df d1 0d ce b2 0a d9 80 3d 9d 45 1..P_........=.E 0c10 d9 f8 05 0a cd aa 87 b8 dc 7e 31 5a a9 4d 17 d1 .........~1Z.M.. 0c20 c7 93 23 69 e1 5b c3 07 f0 49 78 23 9a 90 d8 a0 ..#i.[...Ix#.... 0c30 28 19 dc 19 8c da 16 3e 79 cd 43 5a 4e 8f e7 77 (......>y.CZN..w 0c40 e0 15 49 bb 03 c2 42 1d 04 37 37 65 e4 3e 68 42 ..I...B..77e.>hB 0c50 d4 d5 bb 48 74 ed 91 dc 40 e4 fa dc ...Ht...@... No. Time Source Destination Protocol Info 86 12:37:46.369779 74.125.224.55 167.235.7.71 TCP https > 54697 [ACK] Seq=134 Ack=3526 Win=9600 Len=0 TSV=1808500024 TSER=499198684 Frame 86: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_f3:bd:bf (00:12:00:f3:bd:bf), Dst: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee) Internet Protocol, Src: 74.125.224.55 (74.125.224.55), Dst: 167.235.7.71 (167.235.7.71) Transmission Control Protocol, Src Port: https (443), Dst Port: 54697 (54697), Seq: 134, Ack: 3526, Len: 0 0000 00 0d 60 2b e0 ee 00 12 00 f3 bd bf 08 00 45 00 ..`+..........E. 0010 00 34 d0 d5 00 00 35 06 db 07 4a 7d e0 37 a7 eb .4....5...J}.7.. 0020 07 47 01 bb d5 a9 85 30 b3 67 77 ff 55 07 80 10 .G.....0.gw.U... 0030 00 96 85 9b 00 00 01 01 08 0a 6b cb 85 38 1d c1 ..........k..8.. 0040 2a dc *. No. Time Source Destination Protocol Info 87 12:37:46.422016 167.235.7.21 167.235.7.63 NBNS Name query NB TMS-NODE-202<00> Frame 87: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Portwell_13:a2:aa (00:90:fb:13:a2:aa), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 167.235.7.21 (167.235.7.21), Dst: 167.235.7.63 (167.235.7.63) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service 0000 ff ff ff ff ff ff 00 90 fb 13 a2 aa 08 00 45 00 ..............E. 0010 00 4e 15 7c 00 00 80 11 c6 f8 a7 eb 07 15 a7 eb .N.|............ 0020 07 3f 00 89 00 89 00 3a 25 d8 ec ed 01 10 00 01 .?.....:%....... 0030 00 00 00 00 00 00 20 46 45 45 4e 46 44 43 4e 45 ...... FEENFDCNE 0040 4f 45 50 45 45 45 46 43 4e 44 43 44 41 44 43 43 OEPEEEFCNDCDADCC 0050 41 43 41 43 41 41 41 00 00 20 00 01 ACACAAA.. .. No. Time Source Destination Protocol Info 88 12:37:46.515171 167.235.7.28 224.0.0.251 MDNS Standard query SRV HP Color LaserJet 3800 [80F163]._ftp._tcp.local, "QM" question TXT HP Color LaserJet 3800 [80F163]._ftp._tcp.local, "QM" question Frame 88: 113 bytes on wire (904 bits), 113 bytes captured (904 bits) Ethernet II, Src: Universa_5b:1a:ea (00:1a:6b:5b:1a:ea), Dst: IPv4mcast_00:00:fb (01:00:5e:00:00:fb) Internet Protocol, Src: 167.235.7.28 (167.235.7.28), Dst: 224.0.0.251 (224.0.0.251) User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353) Domain Name System (query) 0000 01 00 5e 00 00 fb 00 1a 6b 5b 1a ea 08 00 45 00 ..^.....k[....E. 0010 00 63 00 00 40 00 ff 11 eb 86 a7 eb 07 1c e0 00 .c..@........... 0020 00 fb 14 e9 14 e9 00 4f f0 3d 00 00 00 00 00 02 .......O.=...... 0030 00 00 00 00 00 00 1f 48 50 20 43 6f 6c 6f 72 20 .......HP Color 0040 4c 61 73 65 72 4a 65 74 20 33 38 30 30 20 5b 38 LaserJet 3800 [8 0050 30 46 31 36 33 5d 04 5f 66 74 70 04 5f 74 63 70 0F163]._ftp._tcp 0060 05 6c 6f 63 61 6c 00 00 21 00 01 c0 0c 00 10 00 .local..!....... 0070 01 . No. Time Source Destination Protocol Info 89 12:37:46.516508 167.235.7.92 224.0.0.251 MDNS Standard query response SRV, cache flush 0 0 21 ISHPCOLOR.local TXT, cache flush Frame 89: 160 bytes on wire (1280 bits), 160 bytes captured (1280 bits) Ethernet II, Src: HewlettP_80:f1:63 (00:17:08:80:f1:63), Dst: IPv4mcast_00:00:fb (01:00:5e:00:00:fb) Internet Protocol, Src: 167.235.7.92 (167.235.7.92), Dst: 224.0.0.251 (224.0.0.251) User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353) Domain Name System (response) 0000 01 00 5e 00 00 fb 00 17 08 80 f1 63 08 00 45 00 ..^........c..E. 0010 00 92 4b 24 00 00 ff 11 df f3 a7 eb 07 5c e0 00 ..K$.........\.. 0020 00 fb 14 e9 14 e9 00 7e c8 04 00 00 84 00 00 00 .......~........ 0030 00 02 00 00 00 01 1f 48 50 20 43 6f 6c 6f 72 20 .......HP Color 0040 4c 61 73 65 72 4a 65 74 20 33 38 30 30 20 5b 38 LaserJet 3800 [8 0050 30 46 31 36 33 5d 04 5f 66 74 70 04 5f 74 63 70 0F163]._ftp._tcp 0060 05 6c 6f 63 61 6c 00 00 21 80 01 00 00 00 f0 00 .local..!....... 0070 12 00 00 00 00 00 15 09 49 53 48 50 43 4f 4c 4f ........ISHPCOLO 0080 52 c0 36 c0 0c 00 10 80 01 00 00 00 f0 00 01 00 R.6............. 0090 c0 4d 00 01 80 01 00 00 00 f0 00 04 a7 eb 07 5c .M.............\ No. Time Source Destination Protocol Info 90 12:37:46.546621 Cisco_a6:ad:bf Broadcast 0x0806 ARP Frame 90: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Data (46 bytes) 0000 ff ff ff ff ff ff 00 15 2b a6 ad bf 08 06 00 01 ........+....... 0010 08 00 06 04 00 01 00 15 2b a6 ad bf a7 eb 07 7e ........+......~ 0020 00 00 00 00 00 00 a7 eb 07 73 00 00 00 00 00 00 .........s...... 0030 00 00 00 00 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 91 12:37:46.609572 167.235.13.48 167.235.7.25 TCP netbios-ssn > spw-dialer [ACK] Seq=20161 Ack=2080 Win=64716 Len=0 Frame 91: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 20161, Ack: 2080, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9c 64 40 00 7e 06 fc 4b a7 eb 0d 30 a7 eb .(.d@.~..K...0.. 0020 07 19 00 8b 0e d4 40 86 be 13 56 09 da 55 50 10 ......@...V..UP. 0030 fc cc 10 90 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 92 12:37:46.609604 167.235.13.48 167.235.7.25 TCP netbios-ssn > spw-dialer [ACK] Seq=20161 Ack=2269 Win=64527 Len=0 Frame 92: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 20161, Ack: 2269, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9c 65 40 00 7e 06 fc 4a a7 eb 0d 30 a7 eb .(.e@.~..J...0.. 0020 07 19 00 8b 0e d4 40 86 be 13 56 09 db 12 50 10 ......@...V...P. 0030 fc 0f 10 90 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 93 12:37:46.609695 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 93: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 20161, Ack: 2269, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 66 40 00 7e 06 fa 09 a7 eb 0d 30 a7 eb .h.f@.~......0.. 0020 07 19 00 8b 0e d4 40 86 be 13 56 09 db 12 50 18 ......@...V...P. 0030 fc 0f 24 63 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..$c.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c5 7d 0c ff 00 00 00 ff ...0.....}...... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 94 12:37:46.609747 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 94: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 20737, Ack: 2269, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 67 40 00 7e 06 fa 08 a7 eb 0d 30 a7 eb .h.g@.~......0.. 0020 07 19 00 8b 0e d4 40 86 c0 53 56 09 db 12 50 18 ......@..SV...P. 0030 fc 0f e4 21 00 00 00 00 02 3c ff 53 4d 42 2e 00 ...!.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 03 7e 0c ff 00 00 00 ff ...0.....~...... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 95 12:37:46.609799 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 95: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 21313, Ack: 2269, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 68 40 00 7e 06 fa 07 a7 eb 0d 30 a7 eb .h.h@.~......0.. 0020 07 19 00 8b 0e d4 40 86 c2 93 56 09 db 12 50 18 ......@...V...P. 0030 fc 0f a2 e2 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 42 7e 0c ff 00 00 00 ff ...0....B~...... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 96 12:37:46.609852 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 96: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 21889, Ack: 2269, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 69 40 00 7e 06 fa 06 a7 eb 0d 30 a7 eb .h.i@.~......0.. 0020 07 19 00 8b 0e d4 40 86 c4 d3 56 09 db 12 50 18 ......@...V...P. 0030 fc 0f 5e a1 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..^......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 84 7e 0c ff 00 00 00 ff ...0.....~...... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 97 12:37:46.609903 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 97: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 22465, Ack: 2269, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 6a 40 00 7e 06 fa 05 a7 eb 0d 30 a7 eb .h.j@.~......0.. 0020 07 19 00 8b 0e d4 40 86 c7 13 56 09 db 12 50 18 ......@...V...P. 0030 fc 0f 1f 62 00 00 00 00 02 3c ff 53 4d 42 2e 00 ...b.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c1 7e 0c ff 00 00 00 ff ...0.....~...... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 98 12:37:47.099039 Cisco_f3:bd:bf Broadcast 0x0806 ARP Frame 98: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_f3:bd:bf (00:12:00:f3:bd:bf), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Data (46 bytes) 0000 ff ff ff ff ff ff 00 12 00 f3 bd bf 08 06 00 01 ................ 0010 08 00 06 04 00 01 00 12 00 f3 bd bf a7 eb 07 7d ...............} 0020 00 00 00 00 00 00 a7 eb 07 37 00 00 00 00 00 00 .........7...... 0030 00 00 00 00 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 99 12:37:47.110526 167.235.13.48 167.235.7.25 TCP netbios-ssn > spw-dialer [ACK] Seq=23041 Ack=2458 Win=64338 Len=0 Frame 99: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 23041, Ack: 2458, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9c 6c 40 00 7e 06 fc 43 a7 eb 0d 30 a7 eb .(.l@.~..C...0.. 0020 07 19 00 8b 0e d4 40 86 c9 53 56 09 db cf 50 10 ......@..SV...P. 0030 fb 52 05 50 00 00 00 00 00 00 00 00 .R.P........ No. Time Source Destination Protocol Info 100 12:37:47.110544 167.235.13.48 167.235.7.25 TCP netbios-ssn > spw-dialer [ACK] Seq=23041 Ack=2584 Win=64212 Len=0 Frame 100: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 23041, Ack: 2584, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9c 6d 40 00 7e 06 fc 42 a7 eb 0d 30 a7 eb .(.m@.~..B...0.. 0020 07 19 00 8b 0e d4 40 86 c9 53 56 09 dc 4d 50 10 ......@..SV..MP. 0030 fa d4 05 50 00 00 00 00 00 00 00 00 ...P........ No. Time Source Destination Protocol Info 101 12:37:47.110633 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 101: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 23041, Ack: 2584, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 6e 40 00 7e 06 fa 01 a7 eb 0d 30 a7 eb .h.n@.~......0.. 0020 07 19 00 8b 0e d4 40 86 c9 53 56 09 dc 4d 50 18 ......@..SV..MP. 0030 fa d4 dd 21 00 00 00 00 02 3c ff 53 4d 42 2e 00 ...!.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 01 7f 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 102 12:37:47.110684 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 102: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 23617, Ack: 2584, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 6f 40 00 7e 06 fa 00 a7 eb 0d 30 a7 eb .h.o@.~......0.. 0020 07 19 00 8b 0e d4 40 86 cb 93 56 09 dc 4d 50 18 ......@...V..MP. 0030 fa d4 96 e0 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 45 7f 0c ff 00 00 00 ff ...0....E....... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 103 12:37:47.110751 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 103: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 24193, Ack: 2584, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 70 40 00 7e 06 f9 ff a7 eb 0d 30 a7 eb .h.p@.~......0.. 0020 07 19 00 8b 0e d4 40 86 cd d3 56 09 dc 4d 50 18 ......@...V..MP. 0030 fa d4 55 a1 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..U......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 84 7f 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 104 12:37:47.110790 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 104: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 24769, Ack: 2584, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 71 40 00 7e 06 f9 fe a7 eb 0d 30 a7 eb .h.q@.~......0.. 0020 07 19 00 8b 0e d4 40 86 d0 13 56 09 dc 4d 50 18 ......@...V..MP. 0030 fa d4 15 60 00 00 00 00 02 3c ff 53 4d 42 2e 00 ...`.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c2 7f 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 105 12:37:47.110841 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 105: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 25345, Ack: 2584, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 72 40 00 7e 06 f9 fd a7 eb 0d 30 a7 eb .h.r@.~......0.. 0020 07 19 00 8b 0e d4 40 86 d2 53 56 09 dc 4d 50 18 ......@..SV..MP. 0030 fa d4 d2 20 00 00 00 00 02 3c ff 53 4d 42 2e 00 ... .....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 03 80 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 106 12:37:47.198031 74.125.224.55 167.235.7.71 TLSv1 Application Data, Application Data Frame 106: 1419 bytes on wire (11352 bits), 1419 bytes captured (11352 bits) Ethernet II, Src: Cisco_f3:bd:bf (00:12:00:f3:bd:bf), Dst: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee) Internet Protocol, Src: 74.125.224.55 (74.125.224.55), Dst: 167.235.7.71 (167.235.7.71) Transmission Control Protocol, Src Port: https (443), Dst Port: 54697 (54697), Seq: 134, Ack: 3526, Len: 1353 Secure Socket Layer 0000 00 0d 60 2b e0 ee 00 12 00 f3 bd bf 08 00 45 00 ..`+..........E. 0010 05 7d d0 e5 00 00 35 06 d5 ae 4a 7d e0 37 a7 eb .}....5...J}.7.. 0020 07 47 01 bb d5 a9 85 30 b3 67 77 ff 55 07 80 18 .G.....0.gw.U... 0030 00 96 86 00 00 00 01 01 08 0a 6b cb 88 72 1d c1 ..........k..r.. 0040 2a dc 17 03 01 01 8c 43 ad a6 d0 05 fe ed d6 52 *......C.......R 0050 fb aa 1e 99 c6 7e 1f dd e9 3c 61 92 6f 0c 3e 91 .....~.... 0060 dd 40 b7 20 99 f8 ea 8a 3e 64 a5 4c 7e b8 51 ea .@. ....>d.L~.Q. 0070 2b 9c 78 49 10 c3 c0 6e 28 4f b6 2d e1 f8 9c 6b +.xI...n(O.-...k 0080 b7 c0 a0 37 79 98 cd 21 d2 39 1b 88 c4 6c 34 7d ...7y..!.9...l4} 0090 7b bc b0 ef 98 88 3b 13 38 0a 44 29 19 4d 5d 97 {.....;.8.D).M]. 00a0 a4 66 c6 ef cb 6b 61 49 0d f8 ba 06 3c f4 d3 97 .f...kaI....<... 00b0 c8 b0 75 69 1e 05 e4 b8 f7 27 b8 db 7a 36 c9 1f ..ui.....'..z6.. 00c0 19 76 9a 0c 1e de a5 6c 4b ed 3b 43 51 90 3e a1 .v.....lK.;CQ.>. 00d0 d2 45 8e 2d 83 55 e6 7e 44 79 2e 0f 5f 7b 73 b4 .E.-.U.~Dy.._{s. 00e0 03 e0 ad b2 7c 2f c4 73 0c 09 89 62 3a 32 54 25 ....|/.s...b:2T% 00f0 9b 05 9f 63 e1 7b 32 ab 2d 47 2a 77 f5 6c ad db ...c.{2.-G*w.l.. 0100 63 bb e9 e1 9d 86 15 41 d4 0f 55 c9 63 51 ac 59 c......A..U.cQ.Y 0110 be 48 ca 69 ca b4 ec 91 d9 61 27 8a af e0 cc 5d .H.i.....a'....] 0120 7f f9 be 90 05 be 44 fd b5 4d d0 c7 80 b8 3b 9e ......D..M....;. 0130 2b 3e 5e a1 e9 bf af 8d 2a 7e 75 95 a3 4a 62 a0 +>^.....*~u..Jb. 0140 cf 4c 8a 50 be 6c c3 01 d7 8d da ab 1c 86 3e a4 .L.P.l........>. 0150 14 18 90 2b 4f 64 b1 98 a2 94 a4 a4 d8 47 e5 3b ...+Od.......G.; 0160 5c d0 38 24 4c 98 c6 57 92 1e 14 ff 0a b2 db 98 \.8$L..W........ 0170 74 57 89 c8 cc 00 3d ed 1c eb 3e 72 bb bf 42 c1 tW....=...>r..B. 0180 5b 8f fd 35 8c ac b7 fa c6 5d de 1e fd 16 77 f9 [..5.....]....w. 0190 3e aa 72 45 8c c4 fc a0 6b 01 96 ba cc 83 00 56 >.rE....k......V 01a0 38 71 07 d9 4c b6 4f f5 7f 7f ab 23 48 ad ab 9f 8q..L.O....#H... 01b0 07 87 13 df ac 1d 89 2e b8 0c 63 ce 33 f4 09 a3 ..........c.3... 01c0 94 09 7d 97 67 80 b2 5a 2c ae 17 c6 c3 f8 c2 39 ..}.g..Z,......9 01d0 1c c6 e9 17 03 01 03 b3 02 a4 4d 54 98 e4 4a e4 ..........MT..J. 01e0 24 75 1c f1 d0 c5 d1 cf 87 92 bc d8 15 8e 9b a0 $u.............. 01f0 a9 cb 5d dc 22 ad b4 f0 49 3d c4 cc da 23 67 d3 ..]."...I=...#g. 0200 2f 1a 7b d8 2a 10 97 18 04 42 9e 96 a9 b7 31 fe /.{.*....B....1. 0210 c3 10 20 19 92 52 6d f5 50 d0 b4 0f 1e 52 e0 d9 .. ..Rm.P....R.. 0220 1c c6 9a 81 14 69 ca 9a e5 74 e1 1f 24 84 31 de .....i...t..$.1. 0230 a7 57 22 ee fc 42 a3 60 a4 93 44 9b d6 99 17 e9 .W"..B.`..D..... 0240 15 dc 7c 47 47 dd d9 c2 6b b7 01 35 eb 56 2d c3 ..|GG...k..5.V-. 0250 bc ed 50 41 50 e9 39 5b 1f b8 01 b9 b6 fa 40 c7 ..PAP.9[......@. 0260 7c 10 dd 0a 21 c5 16 9d a9 5a 42 fc 18 fd 0d ef |...!....ZB..... 0270 d8 76 ae 3c 1f 68 ee 23 63 f1 19 16 5f 50 1c e8 .v.<.h.#c..._P.. 0280 a5 85 42 b4 0b 43 97 2e 55 25 b4 21 3e 3e e1 54 ..B..C..U%.!>>.T 0290 bb e2 c1 bb b3 e7 86 43 fa a3 ce de f2 32 70 a2 .......C.....2p. 02a0 20 55 eb 86 b4 11 12 97 79 a6 19 54 fd 7e 6c 4f U......y..T.~lO 02b0 6e 44 ea de e9 78 4d c4 0a 13 21 d3 56 3c 4b a8 nD...xM...!.V https [ACK] Seq=3526 Ack=1487 Win=9856 Len=0 TSV=499199522 TSER=1808500850 Frame 107: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 74.125.224.55 (74.125.224.55) Transmission Control Protocol, Src Port: 54697 (54697), Dst Port: https (443), Seq: 3526, Ack: 1487, Len: 0 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 00 34 6d d2 40 00 40 06 f3 0a a7 eb 07 47 4a 7d .4m.@.@......GJ} 0020 e0 37 d5 a9 01 bb 77 ff 55 07 85 30 b8 b0 80 10 .7....w.U..0.... 0030 00 9a 79 ce 00 00 01 01 08 0a 1d c1 2e 22 6b cb ..y.........."k. 0040 88 72 .r No. Time Source Destination Protocol Info 108 12:37:47.367375 167.235.7.126 224.0.0.2 HSRP Hello (state Standby) Frame 108: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: IPv4mcast_00:00:02 (01:00:5e:00:00:02) Internet Protocol, Src: 167.235.7.126 (167.235.7.126), Dst: 224.0.0.2 (224.0.0.2) User Datagram Protocol, Src Port: hsrp (1985), Dst Port: hsrp (1985) Cisco Hot Standby Router Protocol 0000 01 00 5e 00 00 02 00 15 2b a6 ad bf 08 00 45 c0 ..^.....+.....E. 0010 00 30 00 00 00 00 01 11 29 92 a7 eb 07 7e e0 00 .0......)....~.. 0020 00 02 07 c1 07 c1 00 1c 2c a7 00 00 08 03 05 64 ........,......d 0030 32 00 63 69 73 63 6f 00 00 00 a7 eb 07 01 2.cisco....... No. Time Source Destination Protocol Info 109 12:37:47.610654 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 109: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 25921, Ack: 2647, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 74 40 00 7e 06 f9 fb a7 eb 0d 30 a7 eb .h.t@.~......0.. 0020 07 19 00 8b 0e d4 40 86 d4 93 56 09 dc 8c 50 18 ......@...V...P. 0030 fa 95 8f e0 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 43 80 0c ff 00 00 00 ff ...0....C....... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 110 12:37:47.611497 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 110: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 26497, Ack: 2710, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 75 40 00 7e 06 f9 fa a7 eb 0d 30 a7 eb .h.u@.~......0.. 0020 07 19 00 8b 0e d4 40 86 d6 d3 56 09 dc cb 50 18 ......@...V...P. 0030 fa 56 4d 9f 00 00 00 00 02 3c ff 53 4d 42 2e 00 .VM......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 83 80 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 111 12:37:47.611537 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 111: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 27073, Ack: 2836, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 76 40 00 7e 06 f9 f9 a7 eb 0d 30 a7 eb .h.v@.~......0.. 0020 07 19 00 8b 0e d4 40 86 d9 13 56 09 dd 49 50 18 ......@...V..IP. 0030 ff ff 06 39 00 00 00 00 02 3c ff 53 4d 42 2e 00 ...9.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c2 80 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 112 12:37:47.611594 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 112: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 27649, Ack: 2836, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 77 40 00 7e 06 f9 f8 a7 eb 0d 30 a7 eb .h.w@.~......0.. 0020 07 19 00 8b 0e d4 40 86 db 53 56 09 dd 49 50 18 ......@..SV..IP. 0030 ff ff c0 f8 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 05 81 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 113 12:37:47.611642 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 113: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 28225, Ack: 2899, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 78 40 00 7e 06 f9 f7 a7 eb 0d 30 a7 eb .h.x@.~......0.. 0020 07 19 00 8b 0e d4 40 86 dd 93 56 09 dd 88 50 18 ......@...V...P. 0030 ff c0 7f b7 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 44 81 0c ff 00 00 00 ff ...0....D....... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 114 12:37:47.788329 167.235.7.125 224.0.0.2 HSRP Hello (state Active) Frame 114: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: All-HSRP-routers_32 (00:00:0c:07:ac:32), Dst: IPv4mcast_00:00:02 (01:00:5e:00:00:02) Internet Protocol, Src: 167.235.7.125 (167.235.7.125), Dst: 224.0.0.2 (224.0.0.2) User Datagram Protocol, Src Port: hsrp (1985), Dst Port: hsrp (1985) Cisco Hot Standby Router Protocol 0000 01 00 5e 00 00 02 00 00 0c 07 ac 32 08 00 45 c0 ..^........2..E. 0010 00 30 00 00 00 00 01 11 29 93 a7 eb 07 7d e0 00 .0......)....}.. 0020 00 02 07 c1 07 c1 00 1c 24 9e 00 00 10 03 05 6e ........$......n 0030 32 00 63 69 73 63 6f 00 00 00 a7 eb 07 01 2.cisco....... No. Time Source Destination Protocol Info 115 12:37:48.110611 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 115: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 28801, Ack: 2962, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 7a 40 00 7e 06 f9 f5 a7 eb 0d 30 a7 eb .h.z@.~......0.. 0020 07 19 00 8b 0e d4 40 86 df d3 56 09 dd c7 50 18 ......@...V...P. 0030 ff 81 3d 77 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..=w.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 84 81 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 116 12:37:48.111369 167.235.13.48 167.235.7.25 TCP netbios-ssn > spw-dialer [ACK] Seq=29377 Ack=3088 Win=65283 Len=0 Frame 116: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 29377, Ack: 3088, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9c 7b 40 00 7e 06 fc 34 a7 eb 0d 30 a7 eb .(.{@.~..4...0.. 0020 07 19 00 8b 0e d4 40 86 e2 13 56 09 de 45 50 10 ......@...V..EP. 0030 ff 03 e6 68 00 00 00 00 00 00 00 00 ...h........ No. Time Source Destination Protocol Info 117 12:37:48.111439 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 117: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 29377, Ack: 3088, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 7c 40 00 7e 06 f9 f3 a7 eb 0d 30 a7 eb .h.|@.~......0.. 0020 07 19 00 8b 0e d4 40 86 e2 13 56 09 de 45 50 18 ......@...V..EP. 0030 ff 03 fb 37 00 00 00 00 02 3c ff 53 4d 42 2e 00 ...7.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c4 81 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 118 12:37:48.111492 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 118: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 29953, Ack: 3088, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 7d 40 00 7e 06 f9 f2 a7 eb 0d 30 a7 eb .h.}@.~......0.. 0020 07 19 00 8b 0e d4 40 86 e4 53 56 09 de 45 50 18 ......@..SV..EP. 0030 ff 03 b9 f6 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 03 82 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 119 12:37:48.111500 167.235.13.48 167.235.7.25 TCP netbios-ssn > spw-dialer [ACK] Seq=30529 Ack=3214 Win=65157 Len=0 Frame 119: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 30529, Ack: 3214, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9c 7e 40 00 7e 06 fc 31 a7 eb 0d 30 a7 eb .(.~@.~..1...0.. 0020 07 19 00 8b 0e d4 40 86 e6 93 56 09 de c3 50 10 ......@...V...P. 0030 fe 85 e1 e8 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 120 12:37:48.111552 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 120: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 30529, Ack: 3214, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 7f 40 00 7e 06 f9 f0 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 86 e6 93 56 09 de c3 50 18 ......@...V...P. 0030 fe 85 75 b7 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..u......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 45 82 0c ff 00 00 00 ff ...0....E....... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 121 12:37:48.111604 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 121: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 31105, Ack: 3214, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 80 40 00 7e 06 f9 ef a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 86 e8 d3 56 09 de c3 50 18 ......@...V...P. 0030 fe 85 36 76 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..6v.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 82 82 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 122 12:37:48.610657 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 122: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 31681, Ack: 3277, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 82 40 00 7e 06 f9 ed a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 86 eb 13 56 09 df 02 50 18 ......@...V...P. 0030 fe 46 f4 35 00 00 00 00 02 3c ff 53 4d 42 2e 00 .F.5.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c2 82 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 123 12:37:48.611372 167.235.13.48 167.235.7.25 TCP netbios-ssn > spw-dialer [ACK] Seq=32257 Ack=3403 Win=64968 Len=0 Frame 123: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 32257, Ack: 3403, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9c 83 40 00 7e 06 fc 2c a7 eb 0d 30 a7 eb .(..@.~..,...0.. 0020 07 19 00 8b 0e d4 40 86 ed 53 56 09 df 80 50 10 ......@..SV...P. 0030 fd c8 db 28 00 00 00 00 00 00 00 00 ...(........ No. Time Source Destination Protocol Info 124 12:37:48.611451 167.235.13.48 167.235.7.25 TCP netbios-ssn > spw-dialer [ACK] Seq=32257 Ack=3529 Win=64842 Len=0 Frame 124: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 32257, Ack: 3529, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9c 84 40 00 7e 06 fc 2b a7 eb 0d 30 a7 eb .(..@.~..+...0.. 0020 07 19 00 8b 0e d4 40 86 ed 53 56 09 df fe 50 10 ......@..SV...P. 0030 fd 4a db 28 00 00 00 00 00 00 00 00 .J.(........ No. Time Source Destination Protocol Info 125 12:37:48.611536 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 125: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 32257, Ack: 3529, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 85 40 00 7e 06 f9 ea a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 86 ed 53 56 09 df fe 50 18 ......@..SV...P. 0030 fd 4a b1 f6 00 00 00 00 02 3c ff 53 4d 42 2e 00 .J.......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 02 83 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 126 12:37:48.611590 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 126: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 32833, Ack: 3529, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 86 40 00 7e 06 f9 e9 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 86 ef 93 56 09 df fe 50 18 ......@...V...P. 0030 fd 4a 6d b5 00 00 00 00 02 3c ff 53 4d 42 2e 00 .Jm......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 44 83 0c ff 00 00 00 ff ...0....D....... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 127 12:37:48.611640 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 127: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 33409, Ack: 3529, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 87 40 00 7e 06 f9 e8 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 86 f1 d3 56 09 df fe 50 18 ......@...V...P. 0030 fd 4a 2a 75 00 00 00 00 02 3c ff 53 4d 42 2e 00 .J*u.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 85 83 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 128 12:37:48.611694 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 128: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 33985, Ack: 3529, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 88 40 00 7e 06 f9 e7 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 86 f4 13 56 09 df fe 50 18 ......@...V...P. 0030 fd 4a ea 35 00 00 00 00 02 3c ff 53 4d 42 2e 00 .J.5.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c3 83 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 129 12:37:48.956423 167.235.7.71 192.168.11.160 TCP 36388 > irdmi [SYN] Seq=0 Win=5840 Len=0 MSS=1460 SACK_PERM=1 TSV=499201280 TSER=0 WS=6 Frame 129: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 192.168.11.160 (192.168.11.160) Transmission Control Protocol, Src Port: 36388 (36388), Dst Port: irdmi (8000), Seq: 0, Len: 0 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 00 3c 22 b4 40 00 40 06 9c 8d a7 eb 07 47 c0 a8 .<".@.@......G.. 0020 0b a0 8e 24 1f 40 7a ee 17 b4 00 00 00 00 a0 02 ...$.@z......... 0030 16 d0 22 ee 00 00 02 04 05 b4 04 02 08 0a 1d c1 .."............. 0040 35 00 00 00 00 00 01 03 03 06 5......... No. Time Source Destination Protocol Info 130 12:37:48.958069 192.168.11.160 167.235.7.71 TCP irdmi > 36388 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 SACK_PERM=1 TSV=2592157108 TSER=499201280 WS=7 Frame 130: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee) Internet Protocol, Src: 192.168.11.160 (192.168.11.160), Dst: 167.235.7.71 (167.235.7.71) Transmission Control Protocol, Src Port: irdmi (8000), Dst Port: 36388 (36388), Seq: 0, Ack: 1, Len: 0 0000 00 0d 60 2b e0 ee 00 15 2b a6 ad bf 08 00 45 00 ..`+....+.....E. 0010 00 3c 00 00 40 00 3d 06 c2 41 c0 a8 0b a0 a7 eb .<..@.=..A...... 0020 07 47 1f 40 8e 24 07 0a 37 ba 7a ee 17 b5 a0 12 .G.@.$..7.z..... 0030 16 a0 1c 12 00 00 02 04 05 b4 04 02 08 0a 9a 81 ................ 0040 2d b4 1d c1 35 00 01 03 03 07 -...5..... No. Time Source Destination Protocol Info 131 12:37:48.958149 167.235.7.71 192.168.11.160 TCP 36388 > irdmi [ACK] Seq=1 Ack=1 Win=5888 Len=0 TSV=499201282 TSER=2592157108 Frame 131: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 192.168.11.160 (192.168.11.160) Transmission Control Protocol, Src Port: 36388 (36388), Dst Port: irdmi (8000), Seq: 1, Ack: 1, Len: 0 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 00 34 22 b5 40 00 40 06 9c 94 a7 eb 07 47 c0 a8 .4".@.@......G.. 0020 0b a0 8e 24 1f 40 7a ee 17 b5 07 0a 37 bb 80 10 ...$.@z.....7... 0030 00 5c 61 20 00 00 01 01 08 0a 1d c1 35 02 9a 81 .\a ........5... 0040 2d b4 -. No. Time Source Destination Protocol Info 132 12:37:48.958390 Frame 132: 763 bytes on wire (6104 bits), 763 bytes captured (6104 bits) This frame is marked as ignored 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 02 ed 22 b6 40 00 40 06 99 da a7 eb 07 47 c0 a8 ..".@.@......G.. 0020 0b a0 8e 24 1f 40 7a ee 17 b5 07 0a 37 bb 80 18 ...$.@z.....7... 0030 00 5c 09 68 00 00 01 01 08 0a 1d c1 35 02 9a 81 .\.h........5... 0040 2d b4 50 4f 53 54 20 2f 65 6e 2d 55 53 2f 61 63 -.POST /en-US/ac 0050 63 6f 75 6e 74 2f 6c 6f 67 69 6e 20 48 54 54 50 count/login HTTP 0060 2f 31 2e 31 0d 0a 48 6f 73 74 3a 20 6d 6f 65 61 /1.1..Host: moea 0070 73 64 65 76 33 3a 38 30 30 30 0d 0a 55 73 65 72 sdev3:8000..User 0080 2d 41 67 65 6e 74 3a 20 4d 6f 7a 69 6c 6c 61 2f -Agent: Mozilla/ 0090 35 2e 30 20 28 58 31 31 3b 20 55 3b 20 4c 69 6e 5.0 (X11; U; Lin 00a0 75 78 20 69 36 38 36 3b 20 65 6e 2d 55 53 3b 20 ux i686; en-US; 00b0 72 76 3a 31 2e 39 2e 32 2e 31 36 29 20 47 65 63 rv:1.9.2.16) Gec 00c0 6b 6f 2f 32 30 31 31 30 33 32 32 20 46 65 64 6f ko/20110322 Fedo 00d0 72 61 2f 33 2e 36 2e 31 36 2d 31 2e 66 63 31 34 ra/3.6.16-1.fc14 00e0 20 46 69 72 65 66 6f 78 2f 33 2e 36 2e 31 36 0d Firefox/3.6.16. 00f0 0a 41 63 63 65 70 74 3a 20 74 65 78 74 2f 68 74 .Accept: text/ht 0100 6d 6c 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 ml,application/x 0110 68 74 6d 6c 2b 78 6d 6c 2c 61 70 70 6c 69 63 61 html+xml,applica 0120 74 69 6f 6e 2f 78 6d 6c 3b 71 3d 30 2e 39 2c 2a tion/xml;q=0.9,* 0130 2f 2a 3b 71 3d 30 2e 38 0d 0a 41 63 63 65 70 74 /*;q=0.8..Accept 0140 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 2d 75 73 -Language: en-us 0150 2c 65 6e 3b 71 3d 30 2e 35 0d 0a 41 63 63 65 70 ,en;q=0.5..Accep 0160 74 2d 45 6e 63 6f 64 69 6e 67 3a 20 67 7a 69 70 t-Encoding: gzip 0170 2c 64 65 66 6c 61 74 65 0d 0a 41 63 63 65 70 74 ,deflate..Accept 0180 2d 43 68 61 72 73 65 74 3a 20 49 53 4f 2d 38 38 -Charset: ISO-88 0190 35 39 2d 31 2c 75 74 66 2d 38 3b 71 3d 30 2e 37 59-1,utf-8;q=0.7 01a0 2c 2a 3b 71 3d 30 2e 37 0d 0a 4b 65 65 70 2d 41 ,*;q=0.7..Keep-A 01b0 6c 69 76 65 3a 20 31 31 35 0d 0a 43 6f 6e 6e 65 live: 115..Conne 01c0 63 74 69 6f 6e 3a 20 6b 65 65 70 2d 61 6c 69 76 ction: keep-aliv 01d0 65 0d 0a 52 65 66 65 72 65 72 3a 20 68 74 74 70 e..Referer: http 01e0 3a 2f 2f 6d 6f 65 61 73 64 65 76 33 3a 38 30 30 ://moeasdev3:800 01f0 30 2f 65 6e 2d 55 53 2f 61 63 63 6f 75 6e 74 2f 0/en-US/account/ 0200 6c 6f 67 69 6e 3f 72 65 74 75 72 6e 5f 74 6f 3d login?return_to= 0210 25 32 46 65 6e 2d 55 53 25 32 46 0d 0a 43 6f 6f %2Fen-US%2F..Coo 0220 6b 69 65 3a 20 63 76 61 6c 3d 38 37 37 34 35 37 kie: cval=877457 0230 38 34 32 3b 20 73 65 73 73 69 6f 6e 5f 69 64 5f 842; session_id_ 0240 38 30 30 30 3d 38 65 30 30 31 62 66 39 39 39 65 8000=8e001bf999e 0250 64 31 64 61 30 37 39 37 62 36 32 64 64 36 37 31 d1da0797b62dd671 0260 31 63 61 63 35 38 62 33 62 66 36 63 65 0d 0a 43 1cac58b3bf6ce..C 0270 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 ontent-Type: app 0280 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 lication/x-www-f 0290 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 0d 0a orm-urlencoded.. 02a0 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 Content-Length: 02b0 36 39 0d 0a 0d 0a 63 76 61 6c 3d 38 37 37 34 35 69....cval=87745 02c0 37 38 34 32 26 72 65 74 75 72 6e 5f 74 6f 3d 25 7842&return_to=% 02d0 32 46 65 6e 2d 55 53 25 32 46 26 75 73 65 72 6e 2Fen-US%2F&usern 02e0 61 6d 65 3d 6a 70 69 6c 65 26 70 61 73 73 77 6f ame=jpile&passwo 02f0 72 64 3d 6c 6b 6a 73 64 66 37 37 rd=xxxxxxxx No. Time Source Destination Protocol Info 133 12:37:48.960079 192.168.11.160 167.235.7.71 TCP [TCP ACKed lost segment] irdmi > 36388 [ACK] Seq=1 Ack=698 Win=7296 Len=0 TSV=2592157110 TSER=499201282 Frame 133: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee) Internet Protocol, Src: 192.168.11.160 (192.168.11.160), Dst: 167.235.7.71 (167.235.7.71) Transmission Control Protocol, Src Port: irdmi (8000), Dst Port: 36388 (36388), Seq: 1, Ack: 698, Len: 0 0000 00 0d 60 2b e0 ee 00 15 2b a6 ad bf 08 00 45 00 ..`+....+.....E. 0010 00 34 1a 0d 40 00 3d 06 a8 3c c0 a8 0b a0 a7 eb .4..@.=..<...... 0020 07 47 1f 40 8e 24 07 0a 37 bb 7a ee 1a 6e 80 10 .G.@.$..7.z..n.. 0030 00 39 5e 88 00 00 01 01 08 0a 9a 81 2d b6 1d c1 .9^.........-... 0040 35 02 5. No. Time Source Destination Protocol Info 134 12:37:49.080008 192.168.11.160 167.235.7.71 TCP [TCP Previous segment lost] irdmi > 36388 [PSH, ACK] Seq=351 Ack=698 Win=7296 Len=96 TSV=2592157230 TSER=499201282 Frame 134: 162 bytes on wire (1296 bits), 162 bytes captured (1296 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee) Internet Protocol, Src: 192.168.11.160 (192.168.11.160), Dst: 167.235.7.71 (167.235.7.71) Transmission Control Protocol, Src Port: irdmi (8000), Dst Port: 36388 (36388), Seq: 351, Ack: 698, Len: 96 Data (96 bytes) 0000 00 0d 60 2b e0 ee 00 15 2b a6 ad bf 08 00 45 00 ..`+....+.....E. 0010 00 94 1a 0f 40 00 3d 06 a7 da c0 a8 0b a0 a7 eb ....@.=......... 0020 07 47 1f 40 8e 24 07 0a 39 19 7a ee 1a 6e 80 18 .G.@.$..9.z..n.. 0030 00 39 30 da 00 00 01 01 08 0a 9a 81 2e 2e 1d c1 .90............. 0040 35 02 1f 8b 08 00 0d 93 ac 4d 02 ff 0b c9 c8 2c 5........M....., 0050 56 28 4a 2d ce 2f 2d 4a 4e 55 48 4e cc 53 48 4a V(J-./-JNUHN.SHJ 0060 55 48 cb 2f cd 4b 51 48 2c 51 b0 49 54 c8 28 4a UH./.KQH,Q.IT.(J 0070 4d b3 55 cf 28 29 29 b0 d2 d7 cf cd 4f 4d 2c 4e M.U.()).....OM,N 0080 49 2d 33 b6 b2 30 30 30 d0 4f cd d3 0d 0d d6 57 I-3..000.O.....W 0090 b7 c3 27 6b a3 9f 68 a7 07 00 47 bd fe a6 66 00 ..'k..h...G...f. 00a0 00 00 .. No. Time Source Destination Protocol Info 135 12:37:49.080074 167.235.7.71 192.168.11.160 TCP [TCP Dup ACK 131#1] 36388 > irdmi [ACK] Seq=698 Ack=1 Win=5888 Len=0 TSV=499201404 TSER=2592157110 SLE=351 SRE=447 Frame 135: 78 bytes on wire (624 bits), 78 bytes captured (624 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 192.168.11.160 (192.168.11.160) Transmission Control Protocol, Src Port: 36388 (36388), Dst Port: irdmi (8000), Seq: 698, Ack: 1, Len: 0 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 00 40 22 b7 40 00 40 06 9c 86 a7 eb 07 47 c0 a8 .@".@.@......G.. 0020 0b a0 8e 24 1f 40 7a ee 1a 6e 07 0a 37 bb b0 10 ...$.@z..n..7... 0030 00 5c a7 2d 00 00 01 01 08 0a 1d c1 35 7c 9a 81 .\.-........5|.. 0040 2d b6 01 01 05 0a 07 0a 39 19 07 0a 39 79 -.......9...9y No. Time Source Destination Protocol Info 136 12:37:49.080085 192.168.11.160 167.235.7.71 TCP [TCP Out-Of-Order] irdmi > 36388 [PSH, ACK] Seq=1 Ack=698 Win=7296 Len=350 TSV=2592157230 TSER=499201282 Frame 136: 416 bytes on wire (3328 bits), 416 bytes captured (3328 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee) Internet Protocol, Src: 192.168.11.160 (192.168.11.160), Dst: 167.235.7.71 (167.235.7.71) Transmission Control Protocol, Src Port: irdmi (8000), Dst Port: 36388 (36388), Seq: 1, Ack: 698, Len: 350 Data (350 bytes) 0000 00 0d 60 2b e0 ee 00 15 2b a6 ad bf 08 00 45 00 ..`+....+.....E. 0010 01 92 1a 0e 40 00 3d 06 a6 dd c0 a8 0b a0 a7 eb ....@.=......... 0020 07 47 1f 40 8e 24 07 0a 37 bb 7a ee 1a 6e 80 18 .G.@.$..7.z..n.. 0030 00 39 c3 ab 00 00 01 01 08 0a 9a 81 2e 2e 1d c1 .9.............. 0040 35 02 48 54 54 50 2f 31 2e 31 20 33 30 33 20 53 5.HTTP/1.1 303 S 0050 65 65 20 4f 74 68 65 72 0d 0a 43 6f 6e 74 65 6e ee Other..Conten 0060 74 2d 4c 65 6e 67 74 68 3a 20 39 36 0d 0a 43 6f t-Length: 96..Co 0070 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 3a 20 ntent-Encoding: 0080 67 7a 69 70 0d 0a 56 61 72 79 3a 20 41 63 63 65 gzip..Vary: Acce 0090 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 53 65 72 pt-Encoding..Ser 00a0 76 65 72 3a 20 43 68 65 72 72 79 50 79 2f 33 2e ver: CherryPy/3. 00b0 31 2e 32 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 1.2..Location: h 00c0 74 74 70 3a 2f 2f 6d 6f 65 61 73 64 65 76 33 3a ttp://moeasdev3: 00d0 38 30 30 30 2f 65 6e 2d 55 53 2f 0d 0a 44 61 74 8000/en-US/..Dat 00e0 65 3a 20 4d 6f 6e 2c 20 31 38 20 41 70 72 20 32 e: Mon, 18 Apr 2 00f0 30 31 31 20 31 39 3a 33 37 3a 34 38 20 47 4d 54 011 19:37:48 GMT 0100 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 ..Content-Type: 0110 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 text/html;charse 0120 74 3d 75 74 66 2d 38 0d 0a 53 65 74 2d 43 6f 6f t=utf-8..Set-Coo 0130 6b 69 65 3a 20 73 65 73 73 69 6f 6e 5f 69 64 5f kie: session_id_ 0140 38 30 30 30 3d 63 37 38 63 30 39 35 66 39 66 62 8000=c78c095f9fb 0150 64 63 33 32 33 32 66 64 63 38 31 66 61 31 36 36 dc3232fdc81fa166 0160 36 32 64 35 32 61 66 61 39 31 66 63 38 3b 20 65 62d52afa91fc8; e 0170 78 70 69 72 65 73 3d 54 75 65 2c 20 31 39 20 41 xpires=Tue, 19 A 0180 70 72 20 32 30 31 31 20 31 39 3a 33 37 3a 34 38 pr 2011 19:37:48 0190 20 47 4d 54 3b 20 50 61 74 68 3d 2f 0d 0a 0d 0a GMT; Path=/.... No. Time Source Destination Protocol Info 137 12:37:49.080101 167.235.7.71 192.168.11.160 TCP 36388 > irdmi [ACK] Seq=698 Ack=447 Win=6912 Len=0 TSV=499201404 TSER=2592157230 Frame 137: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 192.168.11.160 (192.168.11.160) Transmission Control Protocol, Src Port: 36388 (36388), Dst Port: irdmi (8000), Seq: 698, Ack: 447, Len: 0 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 00 34 22 b8 40 00 40 06 9c 91 a7 eb 07 47 c0 a8 .4".@.@......G.. 0020 0b a0 8e 24 1f 40 7a ee 1a 6e 07 0a 39 79 80 10 ...$.@z..n..9y.. 0030 00 6c 5b a5 00 00 01 01 08 0a 1d c1 35 7c 9a 81 .l[.........5|.. 0040 2e 2e .. No. Time Source Destination Protocol Info 138 12:37:49.093246 192.168.11.43 167.235.7.45 TLSv1 Application Data Frame 138: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_23:f1:a5 (00:1e:37:23:f1:a5) Internet Protocol, Src: 192.168.11.43 (192.168.11.43), Dst: 167.235.7.45 (167.235.7.45) Transmission Control Protocol, Src Port: https (443), Dst Port: 55752 (55752), Seq: 1, Ack: 1, Len: 1448 Secure Socket Layer 0000 00 1e 37 23 f1 a5 00 15 2b a6 ad bf 08 00 45 00 ..7#....+.....E. 0010 05 dc 15 d7 40 00 7e 06 66 59 c0 a8 0b 2b a7 eb ....@.~.fY...+.. 0020 07 2d 01 bb d9 c8 14 1e fc f7 6e fa f2 1d 80 10 .-........n..... 0030 fc f5 c0 1a 00 00 01 01 08 0a 0a 65 8c 3f 06 6a ...........e.?.j 0040 88 94 17 03 01 00 20 60 82 7c 9a 11 5b 17 3b ae ...... `.|..[.;. 0050 85 1d 1d d6 bd 41 3c 01 64 3e 4c 12 da 33 86 5a .....A<.d>L..3.Z 0060 e0 83 0f c9 24 d8 9b 17 03 01 06 60 0d 17 2d 13 ....$......`..-. 0070 22 3a 23 8f 32 a1 c4 e3 74 5a 12 3a 13 62 ca e0 ":#.2...tZ.:.b.. 0080 1a 82 81 6c 14 f9 5b 09 8b 01 18 e0 88 33 86 6b ...l..[......3.k 0090 1e 50 a1 80 d4 99 f1 57 c1 82 e2 27 95 4e 96 d8 .P.....W...'.N.. 00a0 f6 14 6a 27 19 1a 27 ac 7d aa 36 ae df 64 3f 85 ..j'..'.}.6..d?. 00b0 c7 cc 44 a6 60 7b d1 de 7a 8e 39 1b c1 fb 28 d0 ..D.`{..z.9...(. 00c0 d0 b1 e7 cc a9 96 f0 2a 49 43 48 26 d9 ce 41 1c .......*ICH&..A. 00d0 ea 04 8a 5f 99 8e fe d2 63 b9 ed a8 b3 2c b3 52 ..._....c....,.R 00e0 73 af 8d 02 8d 59 cd d8 95 43 5b 16 4e 4f e2 00 s....Y...C[.NO.. 00f0 81 e2 6b 1a d8 8f a5 54 fe d0 ee 12 4f 4a 51 78 ..k....T....OJQx 0100 72 16 4b 2d 3f bd 13 b1 98 bc 43 cf d6 08 90 90 r.K-?.....C..... 0110 58 0c cd 91 40 6d a9 4f e3 9d a2 10 ba 14 74 db X...@m.O......t. 0120 b8 ce 5e 02 bc 3b 33 38 f8 3f be 82 ae 2f 1f de ..^..;38.?.../.. 0130 1e d5 ab 7f 27 c9 45 e7 46 7c d4 ca 03 84 b5 06 ....'.E.F|...... 0140 29 45 11 16 07 bd 0e f3 04 ac 7c 96 80 68 91 82 )E........|..h.. 0150 58 33 b8 f1 65 89 60 02 74 21 9c 1d 95 34 65 30 X3..e.`.t!...4e0 0160 6d 27 ee b3 93 b6 4b 49 69 b0 51 75 0b 08 b0 f0 m'....KIi.Qu.... 0170 57 72 a9 9d bd 49 cc 1b 88 f9 5a d5 20 2d d8 11 Wr...I....Z. -.. 0180 49 47 77 6c ad 36 ad 8e ae 3e b6 93 c0 f8 ed 52 IGwl.6...>.....R 0190 b2 7f 88 dc fe 57 74 5b f3 88 e1 e9 f4 90 84 7f .....Wt[........ 01a0 a6 e9 59 82 6c 41 d4 9a 68 7f c9 33 10 ea e7 2b ..Y.lA..h..3...+ 01b0 82 81 cb 1e 0f 3b 10 74 ad df 1e 70 f3 f5 8b 04 .....;.t...p.... 01c0 fa f7 9b 4f 0c e3 df f6 db cd e9 f5 76 8e 28 70 ...O........v.(p 01d0 53 db ff 40 06 b5 d8 be 4c 0f 26 25 eb 46 ef ec S..@....L.&%.F.. 01e0 c8 a8 a0 d4 84 7d 48 25 d2 fe 2f 06 72 f5 6f 11 .....}H%../.r.o. 01f0 ac 65 9e 9f 4f f8 43 7a 5d 4f a1 a9 a7 f3 20 61 .e..O.Cz]O.... a 0200 be 0f af 7e ae e5 54 0a d4 fd 40 40 c3 3a 71 17 ...~..T...@@.:q. 0210 93 b7 f8 2d 13 31 28 e9 cc 0e c5 21 76 5d 4d dd ...-.1(....!v]M. 0220 af 52 cb 4e 26 20 b2 ce 0a d2 e5 80 b4 e6 e8 62 .R.N& .........b 0230 34 64 3c fd e4 59 76 85 92 a1 6f e0 73 e9 ee 09 4d<..Yv...o.s... 0240 60 a5 ec 0e 43 47 e7 3d 6b 8f e5 ee 4f 5b 10 92 `...CG.=k...O[.. 0250 69 79 96 fe 87 e6 2f 6c 71 c1 d1 7d 18 27 fe d8 iy..../lq..}.'.. 0260 7b 02 e8 ef 5c 75 0f 28 41 25 ba 4e 45 56 3e 7c {...\u.(A%.NEV>| 0270 9e be 0d f6 86 09 d3 d5 b8 f5 d0 a2 85 2b a5 8f .............+.. 0280 68 55 b4 92 ee c1 98 06 bd 70 3d af bf e1 21 a4 hU.......p=...!. 0290 75 a2 b1 a6 8e 6b 6e b1 b5 c3 fc fb 26 73 87 a0 u....kn.....&s.. 02a0 4b e7 51 cd 49 95 ff 99 f5 46 68 4d 31 11 7d e6 K.Q.I....FhM1.}. 02b0 1e 3d 80 ce 60 aa 58 82 39 bd ff 7e 4e 85 5e a6 .=..`.X.9..~N.^. 02c0 36 80 f0 d2 71 49 d7 4d b7 75 27 54 94 7a d5 ae 6...qI.M.u'T.z.. 02d0 b0 73 1c fe 9b 35 00 aa 05 9d ee 73 5e ce c0 be .s...5.....s^... 02e0 f5 24 e1 b9 09 ea 93 b4 f6 e3 a3 6f 8f 08 04 db .$.........o.... 02f0 ae 02 e6 a7 0c d0 c0 38 64 3c f9 32 16 ab cb c6 .......8d<.2.... 0300 23 ca 9a bc 8b 4b ec 81 51 73 1c 65 a7 02 d1 39 #....K..Qs.e...9 0310 d7 38 e1 dc 83 3c a6 5b ab 09 08 67 7c 33 f8 f7 .8...<.[...g|3.. 0320 11 68 f0 39 a0 53 30 15 ad 27 f3 41 c1 61 c6 d8 .h.9.S0..'.A.a.. 0330 2e 7e 8f 97 34 ae 3d f1 f3 28 56 19 c4 a4 a4 0b .~..4.=..(V..... 0340 4b 06 55 a6 90 36 e4 2f 92 9c 06 93 31 1d 49 7f K.U..6./....1.I. 0350 d9 1f 7c bc d7 9a da 89 f3 30 8a b7 bc fe 73 bc ..|......0....s. 0360 dc d3 f6 91 a6 ba c3 6a e3 07 f3 8c a9 4a 60 7e .......j.....J`~ 0370 0f 0b 02 dc 09 85 b4 a2 dc df a2 13 7b 62 a5 79 ............{b.y 0380 d0 dc 45 2c da bd 86 dd 98 3e db 76 ad 7b 8e ad ..E,.....>.v.{.. 0390 cf b4 77 08 06 ec 6b f8 36 4d b8 2d a0 03 21 da ..w...k.6M.-..!. 03a0 7a de 37 22 d6 45 ee 8f 02 e6 ec d6 bc d1 ac 5a z.7".E.........Z 03b0 f0 30 f0 73 c6 9e f9 eb 94 c5 3d 34 e8 15 51 e9 .0.s......=4..Q. 03c0 6e 62 49 28 a5 b1 f7 3a 31 7a 85 66 16 5b 01 45 nbI(...:1z.f.[.E 03d0 0c 2a 89 5a ba 58 1b 64 99 39 24 9d c1 cf d3 01 .*.Z.X.d.9$..... 03e0 e0 cc 21 26 a0 30 1a 91 bf 8e 3f 93 da 54 5b ee ..!&.0....?..T[. 03f0 55 e8 30 00 92 f0 39 a3 e0 80 16 60 ee 6d a4 9a U.0...9....`.m.. 0400 c8 65 64 67 35 d8 90 41 7a 9c c0 58 72 e4 a6 69 .edg5..Az..Xr..i 0410 26 e4 d3 9e ee c9 d8 f4 a8 d4 6e a7 60 4e 7f e5 &.........n.`N.. 0420 83 36 92 3f a1 41 ad e4 0f 1f a6 36 31 f8 98 37 .6.?.A.....61..7 0430 46 87 e6 5b b6 f1 b2 c0 13 6b 89 9f 66 e0 03 1d F..[.....k..f... 0440 2e ec 7b 69 27 9e 90 8e bb 78 74 e1 39 78 97 03 ..{i'....xt.9x.. 0450 48 89 43 6d f9 82 90 02 1a bf f5 be 71 b1 3d 6f H.Cm........q.=o 0460 3c b6 3c 5b 21 b7 5d de 7f c5 f1 c2 74 59 5a 02 <.<[!.].....tYZ. 0470 18 20 89 2a f4 09 c7 8b f0 11 ad 52 3f cf 4e 84 . .*.......R?.N. 0480 f2 a1 b5 bf dd a5 c7 f6 25 f7 5f 01 9d bb 90 74 ........%._....t 0490 e7 26 dd 0c 52 8a e1 4e 8b 86 b8 b0 96 f0 e0 93 .&..R..N........ 04a0 aa 6a 98 c5 f3 07 0d 80 34 a2 f3 6d 71 92 a5 77 .j......4..mq..w 04b0 36 92 ca 17 e7 08 cb 60 4c 00 97 28 f4 00 86 32 6......`L..(...2 04c0 cf 48 b6 b9 7c c3 e5 88 e1 ad 21 8b bb af ef f9 .H..|.....!..... 04d0 70 0e 86 8f 03 9b e5 2b bb ab 70 93 04 a9 19 6c p......+..p....l 04e0 74 24 e4 1f 90 e2 5b 49 6b b6 59 11 52 b7 37 e5 t$....[Ik.Y.R.7. 04f0 87 86 0b 06 db 6a 7e e7 f0 65 07 28 5e 0d 43 b5 .....j~..e.(^.C. 0500 9a da 4d ab 7e ff 9a a6 0c e8 f4 02 cc e0 fe f2 ..M.~........... 0510 8f 37 66 96 aa 79 e1 a0 06 c7 e6 bb 8e c8 a6 f5 .7f..y.......... 0520 03 fe 5a 0b 5e b7 63 8b 70 30 93 21 0a 0b 42 58 ..Z.^.c.p0.!..BX 0530 8c 6f de 97 ec 6a ef ef 71 de 6e 9e b5 00 99 d5 .o...j..q.n..... 0540 d1 c0 ee 45 64 57 96 f7 7b 89 df 8a 55 61 3a 5c ...EdW..{...Ua:\ 0550 3b b8 82 84 81 d3 fd 77 f5 99 8c 9b 8c 49 ac 35 ;......w.....I.5 0560 87 a8 f6 00 fd c5 45 70 a6 ec e7 73 05 d5 1b ab ......Ep...s.... 0570 ec 11 5e 7b 43 6f 05 17 e5 ff c6 b3 c9 ca f0 ca ..^{Co.......... 0580 f1 7a 2c 85 f8 52 e9 0a 66 1c bd 58 29 25 fb 0b .z,..R..f..X)%.. 0590 b7 6e 44 36 26 2a 73 d5 12 4d 98 52 31 2b 6b 1d .nD6&*s..M.R1+k. 05a0 9f a1 0e 7a 35 4a b7 f2 95 f0 04 fd e9 a1 92 87 ...z5J.......... 05b0 53 45 ef 63 88 d2 f4 6b e2 b8 1f db 49 41 b3 de SE.c...k....IA.. 05c0 2d 5a 53 a2 4c 5a 8f e8 c1 cf bc dd db 40 ed 8e -ZS.LZ.......@.. 05d0 d0 de bc cb b9 ea 40 4d 86 7b a4 ac 3b bf 13 7e ......@M.{..;..~ 05e0 28 6f 53 ac 9b bd 92 5f fb 62 (oS...._.b No. Time Source Destination Protocol Info 139 12:37:49.093270 192.168.11.43 167.235.7.45 TLSv1 Application Data Frame 139: 292 bytes on wire (2336 bits), 292 bytes captured (2336 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_23:f1:a5 (00:1e:37:23:f1:a5) Internet Protocol, Src: 192.168.11.43 (192.168.11.43), Dst: 167.235.7.45 (167.235.7.45) Transmission Control Protocol, Src Port: https (443), Dst Port: 55752 (55752), Seq: 1449, Ack: 1, Len: 226 [Reassembled TCP Segments (1637 bytes): #138(1411), #139(226)] Secure Socket Layer Frame (292 bytes): 0000 00 1e 37 23 f1 a5 00 15 2b a6 ad bf 08 00 45 00 ..7#....+.....E. 0010 01 16 15 d8 40 00 7e 06 6b 1e c0 a8 0b 2b a7 eb ....@.~.k....+.. 0020 07 2d 01 bb d9 c8 14 1f 02 9f 6e fa f2 1d 80 18 .-........n..... 0030 fc f5 dc 29 00 00 01 01 08 0a 0a 65 8c 3f 06 6a ...).......e.?.j 0040 88 94 97 66 ef 16 12 ef a7 92 bf bd 93 8a b2 e5 ...f............ 0050 ed 1c c6 4b 43 96 30 d2 b2 59 3b 64 2c c4 27 55 ...KC.0..Y;d,.'U 0060 d6 b0 b4 39 54 6e b9 78 14 ae 3f 07 05 2d b4 3f ...9Tn.x..?..-.? 0070 c6 a0 f2 55 3f 27 86 11 03 fe fa 38 31 af 21 82 ...U?'.....81.!. 0080 9c cc 0a 87 cf 6a cb 5d 7e 41 7d c6 8f 5b 7d cc .....j.]~A}..[}. 0090 13 3e 00 72 ad 51 81 38 a7 52 0d f8 4a e4 47 28 .>.r.Q.8.R..J.G( 00a0 ad d5 60 3b 3d 1e a8 c5 48 4b 5b 51 0a b3 43 3a ..`;=...HK[Q..C: 00b0 8e 9a 52 33 fc ef e8 83 e0 05 9b 03 4e 7d 21 d8 ..R3........N}!. 00c0 8b 67 eb 11 18 3b 8c 69 0b 6a a3 9f 8c 74 c0 e1 .g...;.i.j...t.. 00d0 69 89 c5 f8 a4 77 9f 21 8f b5 c9 15 46 c0 94 c2 i....w.!....F... 00e0 49 d6 ed 66 40 0d 39 c5 fb 8d 8d c4 de c0 2a 1c I..f@.9.......*. 00f0 31 14 1f 10 42 9e ef 62 d6 b4 18 15 21 6d b5 9a 1...B..b....!m.. 0100 1e bb df 9f 29 56 5f 9b 0c 52 75 a7 35 3b 76 7f ....)V_..Ru.5;v. 0110 62 91 98 12 fe 18 34 d9 84 8b 92 ef 06 f4 a1 56 b.....4........V 0120 f2 69 37 87 .i7. Reassembled TCP (1637 bytes): 0000 17 03 01 06 60 0d 17 2d 13 22 3a 23 8f 32 a1 c4 ....`..-.":#.2.. 0010 e3 74 5a 12 3a 13 62 ca e0 1a 82 81 6c 14 f9 5b .tZ.:.b.....l..[ 0020 09 8b 01 18 e0 88 33 86 6b 1e 50 a1 80 d4 99 f1 ......3.k.P..... 0030 57 c1 82 e2 27 95 4e 96 d8 f6 14 6a 27 19 1a 27 W...'.N....j'..' 0040 ac 7d aa 36 ae df 64 3f 85 c7 cc 44 a6 60 7b d1 .}.6..d?...D.`{. 0050 de 7a 8e 39 1b c1 fb 28 d0 d0 b1 e7 cc a9 96 f0 .z.9...(........ 0060 2a 49 43 48 26 d9 ce 41 1c ea 04 8a 5f 99 8e fe *ICH&..A...._... 0070 d2 63 b9 ed a8 b3 2c b3 52 73 af 8d 02 8d 59 cd .c....,.Rs....Y. 0080 d8 95 43 5b 16 4e 4f e2 00 81 e2 6b 1a d8 8f a5 ..C[.NO....k.... 0090 54 fe d0 ee 12 4f 4a 51 78 72 16 4b 2d 3f bd 13 T....OJQxr.K-?.. 00a0 b1 98 bc 43 cf d6 08 90 90 58 0c cd 91 40 6d a9 ...C.....X...@m. 00b0 4f e3 9d a2 10 ba 14 74 db b8 ce 5e 02 bc 3b 33 O......t...^..;3 00c0 38 f8 3f be 82 ae 2f 1f de 1e d5 ab 7f 27 c9 45 8.?.../......'.E 00d0 e7 46 7c d4 ca 03 84 b5 06 29 45 11 16 07 bd 0e .F|......)E..... 00e0 f3 04 ac 7c 96 80 68 91 82 58 33 b8 f1 65 89 60 ...|..h..X3..e.` 00f0 02 74 21 9c 1d 95 34 65 30 6d 27 ee b3 93 b6 4b .t!...4e0m'....K 0100 49 69 b0 51 75 0b 08 b0 f0 57 72 a9 9d bd 49 cc Ii.Qu....Wr...I. 0110 1b 88 f9 5a d5 20 2d d8 11 49 47 77 6c ad 36 ad ...Z. -..IGwl.6. 0120 8e ae 3e b6 93 c0 f8 ed 52 b2 7f 88 dc fe 57 74 ..>.....R.....Wt 0130 5b f3 88 e1 e9 f4 90 84 7f a6 e9 59 82 6c 41 d4 [..........Y.lA. 0140 9a 68 7f c9 33 10 ea e7 2b 82 81 cb 1e 0f 3b 10 .h..3...+.....;. 0150 74 ad df 1e 70 f3 f5 8b 04 fa f7 9b 4f 0c e3 df t...p.......O... 0160 f6 db cd e9 f5 76 8e 28 70 53 db ff 40 06 b5 d8 .....v.(pS..@... 0170 be 4c 0f 26 25 eb 46 ef ec c8 a8 a0 d4 84 7d 48 .L.&%.F.......}H 0180 25 d2 fe 2f 06 72 f5 6f 11 ac 65 9e 9f 4f f8 43 %../.r.o..e..O.C 0190 7a 5d 4f a1 a9 a7 f3 20 61 be 0f af 7e ae e5 54 z]O.... a...~..T 01a0 0a d4 fd 40 40 c3 3a 71 17 93 b7 f8 2d 13 31 28 ...@@.:q....-.1( 01b0 e9 cc 0e c5 21 76 5d 4d dd af 52 cb 4e 26 20 b2 ....!v]M..R.N& . 01c0 ce 0a d2 e5 80 b4 e6 e8 62 34 64 3c fd e4 59 76 ........b4d<..Yv 01d0 85 92 a1 6f e0 73 e9 ee 09 60 a5 ec 0e 43 47 e7 ...o.s...`...CG. 01e0 3d 6b 8f e5 ee 4f 5b 10 92 69 79 96 fe 87 e6 2f =k...O[..iy..../ 01f0 6c 71 c1 d1 7d 18 27 fe d8 7b 02 e8 ef 5c 75 0f lq..}.'..{...\u. 0200 28 41 25 ba 4e 45 56 3e 7c 9e be 0d f6 86 09 d3 (A%.NEV>|....... 0210 d5 b8 f5 d0 a2 85 2b a5 8f 68 55 b4 92 ee c1 98 ......+..hU..... 0220 06 bd 70 3d af bf e1 21 a4 75 a2 b1 a6 8e 6b 6e ..p=...!.u....kn 0230 b1 b5 c3 fc fb 26 73 87 a0 4b e7 51 cd 49 95 ff .....&s..K.Q.I.. 0240 99 f5 46 68 4d 31 11 7d e6 1e 3d 80 ce 60 aa 58 ..FhM1.}..=..`.X 0250 82 39 bd ff 7e 4e 85 5e a6 36 80 f0 d2 71 49 d7 .9..~N.^.6...qI. 0260 4d b7 75 27 54 94 7a d5 ae b0 73 1c fe 9b 35 00 M.u'T.z...s...5. 0270 aa 05 9d ee 73 5e ce c0 be f5 24 e1 b9 09 ea 93 ....s^....$..... 0280 b4 f6 e3 a3 6f 8f 08 04 db ae 02 e6 a7 0c d0 c0 ....o........... 0290 38 64 3c f9 32 16 ab cb c6 23 ca 9a bc 8b 4b ec 8d<.2....#....K. 02a0 81 51 73 1c 65 a7 02 d1 39 d7 38 e1 dc 83 3c a6 .Qs.e...9.8...<. 02b0 5b ab 09 08 67 7c 33 f8 f7 11 68 f0 39 a0 53 30 [...g|3...h.9.S0 02c0 15 ad 27 f3 41 c1 61 c6 d8 2e 7e 8f 97 34 ae 3d ..'.A.a...~..4.= 02d0 f1 f3 28 56 19 c4 a4 a4 0b 4b 06 55 a6 90 36 e4 ..(V.....K.U..6. 02e0 2f 92 9c 06 93 31 1d 49 7f d9 1f 7c bc d7 9a da /....1.I...|.... 02f0 89 f3 30 8a b7 bc fe 73 bc dc d3 f6 91 a6 ba c3 ..0....s........ 0300 6a e3 07 f3 8c a9 4a 60 7e 0f 0b 02 dc 09 85 b4 j.....J`~....... 0310 a2 dc df a2 13 7b 62 a5 79 d0 dc 45 2c da bd 86 .....{b.y..E,... 0320 dd 98 3e db 76 ad 7b 8e ad cf b4 77 08 06 ec 6b ..>.v.{....w...k 0330 f8 36 4d b8 2d a0 03 21 da 7a de 37 22 d6 45 ee .6M.-..!.z.7".E. 0340 8f 02 e6 ec d6 bc d1 ac 5a f0 30 f0 73 c6 9e f9 ........Z.0.s... 0350 eb 94 c5 3d 34 e8 15 51 e9 6e 62 49 28 a5 b1 f7 ...=4..Q.nbI(... 0360 3a 31 7a 85 66 16 5b 01 45 0c 2a 89 5a ba 58 1b :1z.f.[.E.*.Z.X. 0370 64 99 39 24 9d c1 cf d3 01 e0 cc 21 26 a0 30 1a d.9$.......!&.0. 0380 91 bf 8e 3f 93 da 54 5b ee 55 e8 30 00 92 f0 39 ...?..T[.U.0...9 0390 a3 e0 80 16 60 ee 6d a4 9a c8 65 64 67 35 d8 90 ....`.m...edg5.. 03a0 41 7a 9c c0 58 72 e4 a6 69 26 e4 d3 9e ee c9 d8 Az..Xr..i&...... 03b0 f4 a8 d4 6e a7 60 4e 7f e5 83 36 92 3f a1 41 ad ...n.`N...6.?.A. 03c0 e4 0f 1f a6 36 31 f8 98 37 46 87 e6 5b b6 f1 b2 ....61..7F..[... 03d0 c0 13 6b 89 9f 66 e0 03 1d 2e ec 7b 69 27 9e 90 ..k..f.....{i'.. 03e0 8e bb 78 74 e1 39 78 97 03 48 89 43 6d f9 82 90 ..xt.9x..H.Cm... 03f0 02 1a bf f5 be 71 b1 3d 6f 3c b6 3c 5b 21 b7 5d .....q.=o<.<[!.] 0400 de 7f c5 f1 c2 74 59 5a 02 18 20 89 2a f4 09 c7 .....tYZ.. .*... 0410 8b f0 11 ad 52 3f cf 4e 84 f2 a1 b5 bf dd a5 c7 ....R?.N........ 0420 f6 25 f7 5f 01 9d bb 90 74 e7 26 dd 0c 52 8a e1 .%._....t.&..R.. 0430 4e 8b 86 b8 b0 96 f0 e0 93 aa 6a 98 c5 f3 07 0d N.........j..... 0440 80 34 a2 f3 6d 71 92 a5 77 36 92 ca 17 e7 08 cb .4..mq..w6...... 0450 60 4c 00 97 28 f4 00 86 32 cf 48 b6 b9 7c c3 e5 `L..(...2.H..|.. 0460 88 e1 ad 21 8b bb af ef f9 70 0e 86 8f 03 9b e5 ...!.....p...... 0470 2b bb ab 70 93 04 a9 19 6c 74 24 e4 1f 90 e2 5b +..p....lt$....[ 0480 49 6b b6 59 11 52 b7 37 e5 87 86 0b 06 db 6a 7e Ik.Y.R.7......j~ 0490 e7 f0 65 07 28 5e 0d 43 b5 9a da 4d ab 7e ff 9a ..e.(^.C...M.~.. 04a0 a6 0c e8 f4 02 cc e0 fe f2 8f 37 66 96 aa 79 e1 ..........7f..y. 04b0 a0 06 c7 e6 bb 8e c8 a6 f5 03 fe 5a 0b 5e b7 63 ...........Z.^.c 04c0 8b 70 30 93 21 0a 0b 42 58 8c 6f de 97 ec 6a ef .p0.!..BX.o...j. 04d0 ef 71 de 6e 9e b5 00 99 d5 d1 c0 ee 45 64 57 96 .q.n........EdW. 04e0 f7 7b 89 df 8a 55 61 3a 5c 3b b8 82 84 81 d3 fd .{...Ua:\;...... 04f0 77 f5 99 8c 9b 8c 49 ac 35 87 a8 f6 00 fd c5 45 w.....I.5......E 0500 70 a6 ec e7 73 05 d5 1b ab ec 11 5e 7b 43 6f 05 p...s......^{Co. 0510 17 e5 ff c6 b3 c9 ca f0 ca f1 7a 2c 85 f8 52 e9 ..........z,..R. 0520 0a 66 1c bd 58 29 25 fb 0b b7 6e 44 36 26 2a 73 .f..X)%...nD6&*s 0530 d5 12 4d 98 52 31 2b 6b 1d 9f a1 0e 7a 35 4a b7 ..M.R1+k....z5J. 0540 f2 95 f0 04 fd e9 a1 92 87 53 45 ef 63 88 d2 f4 .........SE.c... 0550 6b e2 b8 1f db 49 41 b3 de 2d 5a 53 a2 4c 5a 8f k....IA..-ZS.LZ. 0560 e8 c1 cf bc dd db 40 ed 8e d0 de bc cb b9 ea 40 ......@........@ 0570 4d 86 7b a4 ac 3b bf 13 7e 28 6f 53 ac 9b bd 92 M.{..;..~(oS.... 0580 5f fb 62 97 66 ef 16 12 ef a7 92 bf bd 93 8a b2 _.b.f........... 0590 e5 ed 1c c6 4b 43 96 30 d2 b2 59 3b 64 2c c4 27 ....KC.0..Y;d,.' 05a0 55 d6 b0 b4 39 54 6e b9 78 14 ae 3f 07 05 2d b4 U...9Tn.x..?..-. 05b0 3f c6 a0 f2 55 3f 27 86 11 03 fe fa 38 31 af 21 ?...U?'.....81.! 05c0 82 9c cc 0a 87 cf 6a cb 5d 7e 41 7d c6 8f 5b 7d ......j.]~A}..[} 05d0 cc 13 3e 00 72 ad 51 81 38 a7 52 0d f8 4a e4 47 ..>.r.Q.8.R..J.G 05e0 28 ad d5 60 3b 3d 1e a8 c5 48 4b 5b 51 0a b3 43 (..`;=...HK[Q..C 05f0 3a 8e 9a 52 33 fc ef e8 83 e0 05 9b 03 4e 7d 21 :..R3........N}! 0600 d8 8b 67 eb 11 18 3b 8c 69 0b 6a a3 9f 8c 74 c0 ..g...;.i.j...t. 0610 e1 69 89 c5 f8 a4 77 9f 21 8f b5 c9 15 46 c0 94 .i....w.!....F.. 0620 c2 49 d6 ed 66 40 0d 39 c5 fb 8d 8d c4 de c0 2a .I..f@.9.......* 0630 1c 31 14 1f 10 42 9e ef 62 d6 b4 18 15 21 6d b5 .1...B..b....!m. 0640 9a 1e bb df 9f 29 56 5f 9b 0c 52 75 a7 35 3b 76 .....)V_..Ru.5;v 0650 7f 62 91 98 12 fe 18 34 d9 84 8b 92 ef 06 f4 a1 .b.....4........ 0660 56 f2 69 37 87 V.i7. No. Time Source Destination Protocol Info 140 12:37:49.110618 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 140: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 34561, Ack: 3592, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 8a 40 00 7e 06 f9 e5 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 86 f6 53 56 09 e0 3d 50 18 ......@..SV..=P. 0030 fd 0b a7 f5 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 03 84 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 141 12:37:49.111456 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 141: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 35137, Ack: 3655, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 8b 40 00 7e 06 f9 e4 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 86 f8 93 56 09 e0 7c 50 18 ......@...V..|P. 0030 fc cc 65 b4 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..e......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 43 84 0c ff 00 00 00 ff ...0....C....... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 142 12:37:49.111499 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 142: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 35713, Ack: 3718, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 8c 40 00 7e 06 f9 e3 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 86 fa d3 56 09 e0 bb 50 18 ......@...V...P. 0030 fc 8d 22 75 00 00 00 00 02 3c ff 53 4d 42 2e 00 .."u.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 84 84 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 143 12:37:49.111552 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 143: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 36289, Ack: 3781, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 8d 40 00 7e 06 f9 e2 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 86 fd 13 56 09 e0 fa 50 18 ......@...V...P. 0030 fc 4e df 33 00 00 00 00 02 3c ff 53 4d 42 2e 00 .N.3.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c5 84 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 144 12:37:49.111604 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 144: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 36865, Ack: 3844, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 8e 40 00 7e 06 f9 e1 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 86 ff 53 56 09 e1 39 50 18 ......@..SV..9P. 0030 fc 0f 9f f4 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 02 85 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 145 12:37:49.138995 167.235.7.71 192.168.11.160 TCP 36388 > irdmi [PSH, ACK] Seq=698 Ack=447 Win=6912 Len=529 TSV=499201463 TSER=2592157230 Frame 145: 595 bytes on wire (4760 bits), 595 bytes captured (4760 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 192.168.11.160 (192.168.11.160) Transmission Control Protocol, Src Port: 36388 (36388), Dst Port: irdmi (8000), Seq: 698, Ack: 447, Len: 529 Data (529 bytes) 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 02 45 22 b9 40 00 40 06 9a 7f a7 eb 07 47 c0 a8 .E".@.@......G.. 0020 0b a0 8e 24 1f 40 7a ee 1a 6e 07 0a 39 79 80 18 ...$.@z..n..9y.. 0030 00 6c a5 97 00 00 01 01 08 0a 1d c1 35 b7 9a 81 .l..........5... 0040 2e 2e 47 45 54 20 2f 65 6e 2d 55 53 2f 20 48 54 ..GET /en-US/ HT 0050 54 50 2f 31 2e 31 0d 0a 48 6f 73 74 3a 20 6d 6f TP/1.1..Host: mo 0060 65 61 73 64 65 76 33 3a 38 30 30 30 0d 0a 55 73 easdev3:8000..Us 0070 65 72 2d 41 67 65 6e 74 3a 20 4d 6f 7a 69 6c 6c er-Agent: Mozill 0080 61 2f 35 2e 30 20 28 58 31 31 3b 20 55 3b 20 4c a/5.0 (X11; U; L 0090 69 6e 75 78 20 69 36 38 36 3b 20 65 6e 2d 55 53 inux i686; en-US 00a0 3b 20 72 76 3a 31 2e 39 2e 32 2e 31 36 29 20 47 ; rv:1.9.2.16) G 00b0 65 63 6b 6f 2f 32 30 31 31 30 33 32 32 20 46 65 ecko/20110322 Fe 00c0 64 6f 72 61 2f 33 2e 36 2e 31 36 2d 31 2e 66 63 dora/3.6.16-1.fc 00d0 31 34 20 46 69 72 65 66 6f 78 2f 33 2e 36 2e 31 14 Firefox/3.6.1 00e0 36 0d 0a 41 63 63 65 70 74 3a 20 74 65 78 74 2f 6..Accept: text/ 00f0 68 74 6d 6c 2c 61 70 70 6c 69 63 61 74 69 6f 6e html,application 0100 2f 78 68 74 6d 6c 2b 78 6d 6c 2c 61 70 70 6c 69 /xhtml+xml,appli 0110 63 61 74 69 6f 6e 2f 78 6d 6c 3b 71 3d 30 2e 39 cation/xml;q=0.9 0120 2c 2a 2f 2a 3b 71 3d 30 2e 38 0d 0a 41 63 63 65 ,*/*;q=0.8..Acce 0130 70 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 2d pt-Language: en- 0140 75 73 2c 65 6e 3b 71 3d 30 2e 35 0d 0a 41 63 63 us,en;q=0.5..Acc 0150 65 70 74 2d 45 6e 63 6f 64 69 6e 67 3a 20 67 7a ept-Encoding: gz 0160 69 70 2c 64 65 66 6c 61 74 65 0d 0a 41 63 63 65 ip,deflate..Acce 0170 70 74 2d 43 68 61 72 73 65 74 3a 20 49 53 4f 2d pt-Charset: ISO- 0180 38 38 35 39 2d 31 2c 75 74 66 2d 38 3b 71 3d 30 8859-1,utf-8;q=0 0190 2e 37 2c 2a 3b 71 3d 30 2e 37 0d 0a 4b 65 65 70 .7,*;q=0.7..Keep 01a0 2d 41 6c 69 76 65 3a 20 31 31 35 0d 0a 43 6f 6e -Alive: 115..Con 01b0 6e 65 63 74 69 6f 6e 3a 20 6b 65 65 70 2d 61 6c nection: keep-al 01c0 69 76 65 0d 0a 52 65 66 65 72 65 72 3a 20 68 74 ive..Referer: ht 01d0 74 70 3a 2f 2f 6d 6f 65 61 73 64 65 76 33 3a 38 tp://moeasdev3:8 01e0 30 30 30 2f 65 6e 2d 55 53 2f 61 63 63 6f 75 6e 000/en-US/accoun 01f0 74 2f 6c 6f 67 69 6e 3f 72 65 74 75 72 6e 5f 74 t/login?return_t 0200 6f 3d 25 32 46 65 6e 2d 55 53 25 32 46 0d 0a 43 o=%2Fen-US%2F..C 0210 6f 6f 6b 69 65 3a 20 73 65 73 73 69 6f 6e 5f 69 ookie: session_i 0220 64 5f 38 30 30 30 3d 63 37 38 63 30 39 35 66 39 d_8000=c78c095f9 0230 66 62 64 63 33 32 33 32 66 64 63 38 31 66 61 31 fbdc3232fdc81fa1 0240 36 36 36 32 64 35 32 61 66 61 39 31 66 63 38 0d 6662d52afa91fc8. 0250 0a 0d 0a ... No. Time Source Destination Protocol Info 146 12:37:49.141002 192.168.11.160 167.235.7.71 TCP irdmi > 36388 [ACK] Seq=447 Ack=1227 Win=8704 Len=0 TSV=2592157290 TSER=499201463 Frame 146: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee) Internet Protocol, Src: 192.168.11.160 (192.168.11.160), Dst: 167.235.7.71 (167.235.7.71) Transmission Control Protocol, Src Port: irdmi (8000), Dst Port: 36388 (36388), Seq: 447, Ack: 1227, Len: 0 0000 00 0d 60 2b e0 ee 00 15 2b a6 ad bf 08 00 45 00 ..`+....+.....E. 0010 00 34 1a 10 40 00 3d 06 a8 39 c0 a8 0b a0 a7 eb .4..@.=..9...... 0020 07 47 1f 40 8e 24 07 0a 39 79 7a ee 1c 7f 80 10 .G.@.$..9yz..... 0030 00 44 59 45 00 00 01 01 08 0a 9a 81 2e 6a 1d c1 .DYE.........j.. 0040 35 b7 5. No. Time Source Destination Protocol Info 147 12:37:49.152939 192.168.11.160 167.235.7.71 TCP [TCP Previous segment lost] irdmi > 36388 [PSH, ACK] Seq=810 Ack=1227 Win=8704 Len=105 TSV=2592157303 TSER=499201463 Frame 147: 171 bytes on wire (1368 bits), 171 bytes captured (1368 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee) Internet Protocol, Src: 192.168.11.160 (192.168.11.160), Dst: 167.235.7.71 (167.235.7.71) Transmission Control Protocol, Src Port: irdmi (8000), Dst Port: 36388 (36388), Seq: 810, Ack: 1227, Len: 105 Data (105 bytes) 0000 00 0d 60 2b e0 ee 00 15 2b a6 ad bf 08 00 45 00 ..`+....+.....E. 0010 00 9d 1a 12 40 00 3d 06 a7 ce c0 a8 0b a0 a7 eb ....@.=......... 0020 07 47 1f 40 8e 24 07 0a 3a e4 7a ee 1c 7f 80 18 .G.@.$..:.z..... 0030 00 44 15 40 00 00 01 01 08 0a 9a 81 2e 77 1d c1 .D.@.........w.. 0040 35 b7 1f 8b 08 00 0d 93 ac 4d 02 ff 8d ca cb 0d 5........M...... 0050 80 20 0c 00 d0 55 7a e3 a4 25 f1 62 08 ba 84 3a . ...Uz..%.b...: 0060 40 85 12 4c b4 10 3e ce ef 0a be f3 db e3 55 a1 @..L..>.......U. 0070 70 4d bd 38 06 47 02 27 43 48 5d 3c 50 03 4b 10 pM.8.G.'CH] irdmi [ACK] Seq=1227 Ack=447 Win=6912 Len=0 TSV=499201477 TSER=2592157290 SLE=810 SRE=915 Frame 148: 78 bytes on wire (624 bits), 78 bytes captured (624 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 192.168.11.160 (192.168.11.160) Transmission Control Protocol, Src Port: 36388 (36388), Dst Port: irdmi (8000), Seq: 1227, Ack: 447, Len: 0 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 00 40 22 ba 40 00 40 06 9c 83 a7 eb 07 47 c0 a8 .@".@.@......G.. 0020 0b a0 8e 24 1f 40 7a ee 1c 7f 07 0a 39 79 b0 10 ...$.@z.....9y.. 0030 00 6c 9e b2 00 00 01 01 08 0a 1d c1 35 c5 9a 81 .l..........5... 0040 2e 6a 01 01 05 0a 07 0a 3a e4 07 0a 3b 4d .j......:...;M No. Time Source Destination Protocol Info 149 12:37:49.153017 192.168.11.160 167.235.7.71 TCP [TCP Out-Of-Order] irdmi > 36388 [PSH, ACK] Seq=447 Ack=1227 Win=8704 Len=363 TSV=2592157303 TSER=499201463 Frame 149: 429 bytes on wire (3432 bits), 429 bytes captured (3432 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee) Internet Protocol, Src: 192.168.11.160 (192.168.11.160), Dst: 167.235.7.71 (167.235.7.71) Transmission Control Protocol, Src Port: irdmi (8000), Dst Port: 36388 (36388), Seq: 447, Ack: 1227, Len: 363 Data (363 bytes) 0000 00 0d 60 2b e0 ee 00 15 2b a6 ad bf 08 00 45 00 ..`+....+.....E. 0010 01 9f 1a 11 40 00 3d 06 a6 cd c0 a8 0b a0 a7 eb ....@.=......... 0020 07 47 1f 40 8e 24 07 0a 39 79 7a ee 1c 7f 80 18 .G.@.$..9yz..... 0030 00 44 0d 88 00 00 01 01 08 0a 9a 81 2e 77 1d c1 .D...........w.. 0040 35 b7 48 54 54 50 2f 31 2e 31 20 33 30 33 20 53 5.HTTP/1.1 303 S 0050 65 65 20 4f 74 68 65 72 0d 0a 43 6f 6e 74 65 6e ee Other..Conten 0060 74 2d 4c 65 6e 67 74 68 3a 20 31 30 35 0d 0a 43 t-Length: 105..C 0070 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 3a ontent-Encoding: 0080 20 67 7a 69 70 0d 0a 56 61 72 79 3a 20 41 63 63 gzip..Vary: Acc 0090 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 53 65 ept-Encoding..Se 00a0 72 76 65 72 3a 20 43 68 65 72 72 79 50 79 2f 33 rver: CherryPy/3 00b0 2e 31 2e 32 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 .1.2..Location: 00c0 68 74 74 70 3a 2f 2f 6d 6f 65 61 73 64 65 76 33 http://moeasdev3 00d0 3a 38 30 30 30 2f 65 6e 2d 55 53 2f 61 70 70 2f :8000/en-US/app/ 00e0 6c 61 75 6e 63 68 65 72 0d 0a 44 61 74 65 3a 20 launcher..Date: 00f0 4d 6f 6e 2c 20 31 38 20 41 70 72 20 32 30 31 31 Mon, 18 Apr 2011 0100 20 31 39 3a 33 37 3a 34 39 20 47 4d 54 0d 0a 43 19:37:49 GMT..C 0110 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 ontent-Type: tex 0120 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 t/html;charset=u 0130 74 66 2d 38 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 tf-8..Set-Cookie 0140 3a 20 73 65 73 73 69 6f 6e 5f 69 64 5f 38 30 30 : session_id_800 0150 30 3d 63 37 38 63 30 39 35 66 39 66 62 64 63 33 0=c78c095f9fbdc3 0160 32 33 32 66 64 63 38 31 66 61 31 36 36 36 32 64 232fdc81fa16662d 0170 35 32 61 66 61 39 31 66 63 38 3b 20 65 78 70 69 52afa91fc8; expi 0180 72 65 73 3d 54 75 65 2c 20 31 39 20 41 70 72 20 res=Tue, 19 Apr 0190 32 30 31 31 20 31 39 3a 33 37 3a 34 39 20 47 4d 2011 19:37:49 GM 01a0 54 3b 20 50 61 74 68 3d 2f 0d 0a 0d 0a T; Path=/.... No. Time Source Destination Protocol Info 150 12:37:49.153033 167.235.7.71 192.168.11.160 TCP 36388 > irdmi [ACK] Seq=1227 Ack=915 Win=8000 Len=0 TSV=499201477 TSER=2592157303 Frame 150: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 192.168.11.160 (192.168.11.160) Transmission Control Protocol, Src Port: 36388 (36388), Dst Port: irdmi (8000), Seq: 1227, Ack: 915, Len: 0 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 00 34 22 bb 40 00 40 06 9c 8e a7 eb 07 47 c0 a8 .4".@.@......G.. 0020 0b a0 8e 24 1f 40 7a ee 1c 7f 07 0a 3b 4d 80 10 ...$.@z.....;M.. 0030 00 7d 57 1d 00 00 01 01 08 0a 1d c1 35 c5 9a 81 .}W.........5... 0040 2e 77 .w No. Time Source Destination Protocol Info 151 12:37:49.187690 Cisco_f3:bd:bf Broadcast 0x0806 ARP Frame 151: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_f3:bd:bf (00:12:00:f3:bd:bf), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Data (46 bytes) 0000 ff ff ff ff ff ff 00 12 00 f3 bd bf 08 06 00 01 ................ 0010 08 00 06 04 00 01 00 12 00 f3 bd bf a7 eb 07 7d ...............} 0020 00 00 00 00 00 00 a7 eb 07 73 00 00 00 00 00 00 .........s...... 0030 00 00 00 00 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 152 12:37:49.241453 167.235.7.71 192.168.11.160 TCP 36388 > irdmi [PSH, ACK] Seq=1227 Ack=915 Win=8000 Len=541 TSV=499201565 TSER=2592157303 Frame 152: 607 bytes on wire (4856 bits), 607 bytes captured (4856 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 192.168.11.160 (192.168.11.160) Transmission Control Protocol, Src Port: 36388 (36388), Dst Port: irdmi (8000), Seq: 1227, Ack: 915, Len: 541 Data (541 bytes) 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 02 51 22 bc 40 00 40 06 9a 70 a7 eb 07 47 c0 a8 .Q".@.@..p...G.. 0020 0b a0 8e 24 1f 40 7a ee 1c 7f 07 0a 3b 4d 80 18 ...$.@z.....;M.. 0030 00 7d 56 6a 00 00 01 01 08 0a 1d c1 36 1d 9a 81 .}Vj........6... 0040 2e 77 47 45 54 20 2f 65 6e 2d 55 53 2f 61 70 70 .wGET /en-US/app 0050 2f 6c 61 75 6e 63 68 65 72 20 48 54 54 50 2f 31 /launcher HTTP/1 0060 2e 31 0d 0a 48 6f 73 74 3a 20 6d 6f 65 61 73 64 .1..Host: moeasd 0070 65 76 33 3a 38 30 30 30 0d 0a 55 73 65 72 2d 41 ev3:8000..User-A 0080 67 65 6e 74 3a 20 4d 6f 7a 69 6c 6c 61 2f 35 2e gent: Mozilla/5. 0090 30 20 28 58 31 31 3b 20 55 3b 20 4c 69 6e 75 78 0 (X11; U; Linux 00a0 20 69 36 38 36 3b 20 65 6e 2d 55 53 3b 20 72 76 i686; en-US; rv 00b0 3a 31 2e 39 2e 32 2e 31 36 29 20 47 65 63 6b 6f :1.9.2.16) Gecko 00c0 2f 32 30 31 31 30 33 32 32 20 46 65 64 6f 72 61 /20110322 Fedora 00d0 2f 33 2e 36 2e 31 36 2d 31 2e 66 63 31 34 20 46 /3.6.16-1.fc14 F 00e0 69 72 65 66 6f 78 2f 33 2e 36 2e 31 36 0d 0a 41 irefox/3.6.16..A 00f0 63 63 65 70 74 3a 20 74 65 78 74 2f 68 74 6d 6c ccept: text/html 0100 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 68 74 ,application/xht 0110 6d 6c 2b 78 6d 6c 2c 61 70 70 6c 69 63 61 74 69 ml+xml,applicati 0120 6f 6e 2f 78 6d 6c 3b 71 3d 30 2e 39 2c 2a 2f 2a on/xml;q=0.9,*/* 0130 3b 71 3d 30 2e 38 0d 0a 41 63 63 65 70 74 2d 4c ;q=0.8..Accept-L 0140 61 6e 67 75 61 67 65 3a 20 65 6e 2d 75 73 2c 65 anguage: en-us,e 0150 6e 3b 71 3d 30 2e 35 0d 0a 41 63 63 65 70 74 2d n;q=0.5..Accept- 0160 45 6e 63 6f 64 69 6e 67 3a 20 67 7a 69 70 2c 64 Encoding: gzip,d 0170 65 66 6c 61 74 65 0d 0a 41 63 63 65 70 74 2d 43 eflate..Accept-C 0180 68 61 72 73 65 74 3a 20 49 53 4f 2d 38 38 35 39 harset: ISO-8859 0190 2d 31 2c 75 74 66 2d 38 3b 71 3d 30 2e 37 2c 2a -1,utf-8;q=0.7,* 01a0 3b 71 3d 30 2e 37 0d 0a 4b 65 65 70 2d 41 6c 69 ;q=0.7..Keep-Ali 01b0 76 65 3a 20 31 31 35 0d 0a 43 6f 6e 6e 65 63 74 ve: 115..Connect 01c0 69 6f 6e 3a 20 6b 65 65 70 2d 61 6c 69 76 65 0d ion: keep-alive. 01d0 0a 52 65 66 65 72 65 72 3a 20 68 74 74 70 3a 2f .Referer: http:/ 01e0 2f 6d 6f 65 61 73 64 65 76 33 3a 38 30 30 30 2f /moeasdev3:8000/ 01f0 65 6e 2d 55 53 2f 61 63 63 6f 75 6e 74 2f 6c 6f en-US/account/lo 0200 67 69 6e 3f 72 65 74 75 72 6e 5f 74 6f 3d 25 32 gin?return_to=%2 0210 46 65 6e 2d 55 53 25 32 46 0d 0a 43 6f 6f 6b 69 Fen-US%2F..Cooki 0220 65 3a 20 73 65 73 73 69 6f 6e 5f 69 64 5f 38 30 e: session_id_80 0230 30 30 3d 63 37 38 63 30 39 35 66 39 66 62 64 63 00=c78c095f9fbdc 0240 33 32 33 32 66 64 63 38 31 66 61 31 36 36 36 32 3232fdc81fa16662 0250 64 35 32 61 66 61 39 31 66 63 38 0d 0a 0d 0a d52afa91fc8.... No. Time Source Destination Protocol Info 153 12:37:49.283289 192.168.11.160 167.235.7.71 TCP irdmi > 36388 [ACK] Seq=915 Ack=1768 Win=9984 Len=0 TSV=2592157433 TSER=499201565 Frame 153: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee) Internet Protocol, Src: 192.168.11.160 (192.168.11.160), Dst: 167.235.7.71 (167.235.7.71) Transmission Control Protocol, Src Port: irdmi (8000), Dst Port: 36388 (36388), Seq: 915, Ack: 1768, Len: 0 0000 00 0d 60 2b e0 ee 00 15 2b a6 ad bf 08 00 45 00 ..`+....+.....E. 0010 00 34 1a 13 40 00 3d 06 a8 36 c0 a8 0b a0 a7 eb .4..@.=..6...... 0020 07 47 1f 40 8e 24 07 0a 3b 4d 7a ee 1e 9c 80 10 .G.@.$..;Mz..... 0030 00 4e 54 55 00 00 01 01 08 0a 9a 81 2e f9 1d c1 .NTU............ 0040 36 1d 6. No. Time Source Destination Protocol Info 154 12:37:49.402448 Cisco_a6:ad:bf Broadcast 0x0806 ARP Frame 154: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Data (46 bytes) 0000 ff ff ff ff ff ff 00 15 2b a6 ad bf 08 06 00 01 ........+....... 0010 08 00 06 04 00 01 00 15 2b a6 ad bf a7 eb 07 7e ........+......~ 0020 00 00 00 00 00 00 a7 eb 07 37 00 00 00 00 00 00 .........7...... 0030 00 00 00 00 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 155 12:37:49.455591 Cisco_a6:ad:bf Broadcast 0x0806 ARP Frame 155: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Data (46 bytes) 0000 ff ff ff ff ff ff 00 15 2b a6 ad bf 08 06 00 01 ........+....... 0010 08 00 06 04 00 01 00 15 2b a6 ad bf a7 eb 07 7e ........+......~ 0020 00 00 00 00 00 00 a7 eb 07 1f 00 00 00 00 00 00 ................ 0030 00 00 00 00 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 156 12:37:49.562897 192.168.11.43 167.235.7.45 TCP https > 55752 [ACK] Seq=1675 Ack=278 Win=64480 Len=0 TSV=174427204 TSER=107651879 Frame 156: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_23:f1:a5 (00:1e:37:23:f1:a5) Internet Protocol, Src: 192.168.11.43 (192.168.11.43), Dst: 167.235.7.45 (167.235.7.45) Transmission Control Protocol, Src Port: https (443), Dst Port: 55752 (55752), Seq: 1675, Ack: 278, Len: 0 0000 00 1e 37 23 f1 a5 00 15 2b a6 ad bf 08 00 45 00 ..7#....+.....E. 0010 00 34 16 14 40 00 7e 06 6b c4 c0 a8 0b 2b a7 eb .4..@.~.k....+.. 0020 07 2d 01 bb d9 c8 14 1f 03 81 6e fa f3 32 80 10 .-........n..2.. 0030 fb e0 6a 64 00 00 01 01 08 0a 0a 65 8c 44 06 6a ..jd.......e.D.j 0040 a3 27 .' No. Time Source Destination Protocol Info 157 12:37:49.565215 192.168.11.43 167.235.7.45 TLSv1 Application Data Frame 157: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_23:f1:a5 (00:1e:37:23:f1:a5) Internet Protocol, Src: 192.168.11.43 (192.168.11.43), Dst: 167.235.7.45 (167.235.7.45) Transmission Control Protocol, Src Port: https (443), Dst Port: 55752 (55752), Seq: 1675, Ack: 779, Len: 1448 Secure Socket Layer 0000 00 1e 37 23 f1 a5 00 15 2b a6 ad bf 08 00 45 00 ..7#....+.....E. 0010 05 dc 16 1a 40 00 7e 06 66 16 c0 a8 0b 2b a7 eb ....@.~.f....+.. 0020 07 2d 01 bb d9 c8 14 1f 03 81 6e fa f5 27 80 10 .-........n..'.. 0030 ff ff e6 b6 00 00 01 01 08 0a 0a 65 8c 44 06 6a ...........e.D.j 0040 a4 1e 17 03 01 00 20 9b e3 5e 4f a3 5a 71 08 be ...... ..^O.Zq.. 0050 a8 19 95 ac 80 99 af d9 6f 7b 39 80 2c 0b 65 b0 ........o{9.,.e. 0060 78 21 f8 f5 45 15 c3 17 03 01 06 30 87 a6 90 ba x!..E......0.... 0070 87 f9 28 f3 7f ad 69 55 37 67 78 1f e3 47 56 57 ..(...iU7gx..GVW 0080 73 26 89 a6 08 20 ae 17 cf 6e b0 20 1b eb 85 26 s&... ...n. ...& 0090 da c4 3a 56 7c 6e c3 c9 a0 63 ff ea c6 b3 59 bf ..:V|n...c....Y. 00a0 a7 77 c6 49 15 00 f0 e8 8a ec b7 09 ed 39 66 34 .w.I.........9f4 00b0 ce 47 2e 1f 62 d6 24 de c6 8e 9e 3f 10 33 df a9 .G..b.$....?.3.. 00c0 28 28 eb 0c a8 fc 6f 97 73 9c 99 66 74 15 d2 69 ((....o.s..ft..i 00d0 11 fa d6 88 75 e1 ec 6f 76 dd 79 3e ec 45 dd b6 ....u..ov.y>.E.. 00e0 98 4a 8c 35 37 93 86 9d 7f fa 21 fa cf 90 ae 77 .J.57.....!....w 00f0 e8 54 bb d8 1b 9f 6c 04 10 65 02 41 c4 5b 75 20 .T....l..e.A.[u 0100 5c d0 2e c6 78 1b b8 92 fb 49 ab 90 d7 c5 20 1f \...x....I.... . 0110 5b 0a be 95 eb 64 ae bb d7 62 31 55 de b2 72 51 [....d...b1U..rQ 0120 20 76 0d ed 46 52 98 14 7a 88 b1 94 4b c1 82 70 v..FR..z...K..p 0130 ba ed 6f 22 b8 7b 0d 4d c4 a1 73 f9 2f 8f c9 fe ..o".{.M..s./... 0140 99 20 c9 73 f8 6f 11 56 94 cb b7 e7 80 0d a4 07 . .s.o.V........ 0150 93 11 bb 97 95 f9 36 76 3f e0 05 b8 6d 6c 05 c7 ......6v?...ml.. 0160 5e 36 bd 2a 3b 40 78 3e 04 a5 8f 5f f4 2c 3e 5e ^6.*;@x>..._.,>^ 0170 2c ec 3e 78 1d 18 b3 87 ad da a7 10 0e 23 b6 3e ,.>x.........#.> 0180 f8 dc 9c a9 49 70 56 01 7a a8 5f e5 ec 1c 07 62 ....IpV.z._....b 0190 68 c1 0e 4f 12 fa 72 af 59 97 d2 b3 df dc 02 fd h..O..r.Y....... 01a0 40 87 2e c5 88 88 8c 13 87 d8 ea 42 a8 a4 86 19 @..........B.... 01b0 ef ca 91 d5 82 58 b8 27 4a 94 5e 47 a7 54 01 86 .....X.'J.^G.T.. 01c0 4c 8c 43 09 c3 bb f4 c8 1f 3c a9 17 b6 4f 6c 97 L.C......<...Ol. 01d0 8b b5 8b 81 07 43 4e 80 92 4b 58 83 0e a4 87 8c .....CN..KX..... 01e0 90 4c b3 aa d5 71 23 42 90 6f f5 71 87 fd fb c8 .L...q#B.o.q.... 01f0 0c 65 6d ba 22 71 95 3f a8 a2 fa d8 60 66 19 e9 .em."q.?....`f.. 0200 69 b7 53 ef 74 a4 b9 6f c9 c9 74 2a b6 b0 e0 fe i.S.t..o..t*.... 0210 f6 ce b4 c7 70 5b 1b 9a f3 3f 8e 4d bc 6b 1e b7 ....p[...?.M.k.. 0220 c4 0d b4 57 6a 0c 0f 0e 4e aa dd db 79 ca 46 cc ...Wj...N...y.F. 0230 a4 e8 fd f4 8c 0b e1 da 14 e0 62 45 2f 4b 2c b1 ..........bE/K,. 0240 e1 51 01 26 48 b1 82 06 c1 11 99 1d 45 89 fa c5 .Q.&H.......E... 0250 ee 13 0b 75 78 fb a9 c2 5a a2 48 00 cf 48 ee 85 ...ux...Z.H..H.. 0260 65 b7 b0 49 8b 48 a3 aa f7 fd 7c 01 c8 fb 79 1c e..I.H....|...y. 0270 4f 0d ed 79 1e 9e ff 11 3c c8 7d c3 24 8c 1b 24 O..y....<.}.$..$ 0280 78 00 9c 51 ad 92 96 cf c7 75 6c 0b a3 40 79 9a x..Q.....ul..@y. 0290 8a 4e c1 c0 76 9b 25 a2 f2 23 a6 b8 8b 7e a0 1e .N..v.%..#...~.. 02a0 3f 78 f6 b3 ca 57 6f a1 b9 d2 41 1a b1 cb 66 8a ?x...Wo...A...f. 02b0 fa e6 c9 e3 8f a7 fb 08 e5 de 16 14 71 d3 66 2b ............q.f+ 02c0 b5 2e d1 9c 8c ca be c0 e2 02 7a c1 57 9b d8 2c ..........z.W.., 02d0 f0 2b cd 09 43 6a 73 98 a6 2b 4d dc 27 3a 52 c4 .+..Cjs..+M.':R. 02e0 78 e1 83 4d d2 39 4c 03 9a aa 93 a6 f8 31 b7 24 x..M.9L......1.$ 02f0 93 79 83 c8 00 14 08 63 98 fc e4 f4 77 34 94 dc .y.....c....w4.. 0300 da 4c 78 1d 9e bc fa 52 c8 80 3e 73 d6 09 91 86 .Lx....R..>s.... 0310 f4 ec 11 36 95 24 b1 a0 6d 3e 03 bc c4 59 32 c4 ...6.$..m>...Y2. 0320 71 9b 86 59 49 98 20 17 eb 97 c4 fd 64 dc c5 e0 q..YI. .....d... 0330 53 bd d1 80 bb 4f f7 91 11 ac c8 42 1d c3 df 32 S....O.....B...2 0340 00 9b eb 8d 4f 2a 42 e1 12 a8 76 db 97 b5 f4 9c ....O*B...v..... 0350 f5 96 17 a4 8d 91 e6 01 21 00 e6 be 53 7b a7 fa ........!...S{.. 0360 56 e4 a3 21 dd 3a 1a df f7 0e a3 0d 54 ab 98 5c V..!.:......T..\ 0370 1a 2a 60 52 0e cd 64 be fe 1b 25 ec 8e 69 e9 fc .*`R..d...%..i.. 0380 f7 e2 d5 b5 ab 91 32 0f e4 3d 3b b6 0c e9 36 65 ......2..=;...6e 0390 34 c6 54 17 ca 68 87 5b 01 95 23 64 31 b8 72 23 4.T..h.[..#d1.r# 03a0 12 2d 0f 35 45 ef d6 52 c2 e1 f8 33 6c 2a 5f c9 .-.5E..R...3l*_. 03b0 ce e0 b4 38 e2 8d 35 8e 1a 4e 23 bb 26 38 e8 a8 ...8..5..N#.&8.. 03c0 f7 48 cc f0 ed 4c f5 48 5c 0e 30 65 9a 20 3c de .H...L.H\.0e. <. 03d0 d1 13 f7 b7 1f c8 d1 68 95 a0 f5 20 48 cc ba 64 .......h... H..d 03e0 93 8c aa 7b 17 12 5b 71 b3 d2 c0 89 c2 71 bc 1a ...{..[q.....q.. 03f0 9d ab 76 8f a1 63 2b 20 e2 6e bb 4b 6f c5 e2 67 ..v..c+ .n.Ko..g 0400 5e 78 7a e1 54 91 48 26 73 8a 29 b0 98 13 72 7e ^xz.T.H&s.)...r~ 0410 bb 39 26 9f 7f 06 2b 09 0c b8 aa 6c 3d ba 2e 9b .9&...+....l=... 0420 b9 26 2c 6b b5 56 70 2b fa 35 89 f9 e8 87 6c ab .&,k.Vp+.5....l. 0430 7c 7c 96 ce c5 7b 99 0c 71 20 f7 b9 fa 2c dc 8c ||...{..q ...,.. 0440 ce 59 3b e8 54 53 a4 af 95 22 2f ee d7 34 12 8c .Y;.TS..."/..4.. 0450 20 39 e1 52 d2 78 68 29 51 71 6d 92 3c 90 47 a8 9.R.xh)Qqm.<.G. 0460 00 77 fa de 36 ae dc f2 36 a8 1f 4f 0b 99 7a 88 .w..6...6..O..z. 0470 e9 61 0a 53 f5 7d d5 34 6b 04 1b f7 78 a0 fe 7d .a.S.}.4k...x..} 0480 18 51 40 07 fd 20 b4 34 b3 78 3d 24 32 b8 bf 79 .Q@.. .4.x=$2..y 0490 25 a0 28 7c eb f5 24 1c 8b 08 b8 c1 c2 5a 20 b2 %.(|..$......Z . 04a0 a7 6b 28 6f ca d6 d1 b5 fc 3c f0 23 a9 f1 d8 e0 .k(o.....<.#.... 04b0 73 41 e0 90 55 6f 87 3d 44 80 31 ca 1b 2b 9c 5e sA..Uo.=D.1..+.^ 04c0 7f b5 59 40 1f 07 bf 7c b7 ae d2 6c 8b e5 9b 5e ..Y@...|...l...^ 04d0 d8 a1 d9 8f c8 c5 59 f7 47 d6 d8 cb de d4 3c 3a ......Y.G.....<: 04e0 22 d3 6e fb 23 69 d3 89 d1 0a a6 e0 3b 03 c3 4b ".n.#i......;..K 04f0 fc d4 5d 3c 13 1b 7f 7b a0 08 d2 81 52 ac 12 bc ..]<...{....R... 0500 e9 bd f2 0e a9 42 bd 79 68 5c b5 68 56 ce c8 36 .....B.yh\.hV..6 0510 b7 b7 4f 22 98 52 a1 8c e6 0b fe 57 d5 de 9b c7 ..O".R.....W.... 0520 81 d6 5e 2e 4c 91 49 16 90 ee 5d 06 01 92 93 12 ..^.L.I...]..... 0530 55 6b d1 1c 0f d2 33 48 61 93 1e 3f e8 a4 52 9f Uk....3Ha..?..R. 0540 f3 5d ad e4 b6 51 10 f4 da 36 3a 82 e4 be 55 4c .]...Q...6:...UL 0550 bb 55 40 2e e9 1e 7a 1a 53 1e 9d 97 0c da 78 4d .U@...z.S.....xM 0560 92 4b 65 1e 9e fc 09 a8 a8 bb 7c 69 08 5d 27 9b .Ke.......|i.]'. 0570 a6 e2 9c 35 a6 3e 26 14 a5 da 12 6e 58 a8 55 67 ...5.>&....nX.Ug 0580 09 b4 4b 7e 83 15 ed 6b 66 42 18 ba 82 12 21 78 ..K~...kfB....!x 0590 dd 5c 9c 6b 7c 60 a3 1a dc d3 a4 c2 b4 2b 0a c2 .\.k|`.......+.. 05a0 40 02 07 d3 fa 99 6d b2 04 fb b1 23 fb be ad e4 @.....m....#.... 05b0 c1 70 61 f9 f6 87 4b b4 52 b2 b9 11 0c b8 98 67 .pa...K.R......g 05c0 1f 63 22 eb 73 3c b9 c1 79 73 9d ce fd e6 b3 10 .c".s<..ys...... 05d0 2c 55 77 a9 82 ee eb 25 cc 85 b2 91 3a d1 66 12 ,Uw....%....:.f. 05e0 89 10 94 29 27 0c 5c 96 67 cc ...)'.\.g. No. Time Source Destination Protocol Info 158 12:37:49.565241 192.168.11.43 167.235.7.45 TLSv1 Application Data Frame 158: 244 bytes on wire (1952 bits), 244 bytes captured (1952 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_23:f1:a5 (00:1e:37:23:f1:a5) Internet Protocol, Src: 192.168.11.43 (192.168.11.43), Dst: 167.235.7.45 (167.235.7.45) Transmission Control Protocol, Src Port: https (443), Dst Port: 55752 (55752), Seq: 3123, Ack: 779, Len: 178 [Reassembled TCP Segments (1589 bytes): #157(1411), #158(178)] Secure Socket Layer Frame (244 bytes): 0000 00 1e 37 23 f1 a5 00 15 2b a6 ad bf 08 00 45 00 ..7#....+.....E. 0010 00 e6 16 1b 40 00 7e 06 6b 0b c0 a8 0b 2b a7 eb ....@.~.k....+.. 0020 07 2d 01 bb d9 c8 14 1f 09 29 6e fa f5 27 80 18 .-.......)n..'.. 0030 ff ff 18 d4 00 00 01 01 08 0a 0a 65 8c 44 06 6a ...........e.D.j 0040 a4 1e fc 27 b0 87 07 b8 46 79 a1 63 70 d1 b9 ab ...'....Fy.cp... 0050 80 49 df 08 f2 18 93 ab 0d 2f 4e 8d ac 65 4d ec .I......./N..eM. 0060 49 a9 9c 01 ac 41 8e d0 f5 d6 cd d4 b6 5e 0e eb I....A.......^.. 0070 d0 69 09 ac 72 f7 57 cc b4 a0 76 2a f0 03 7a c2 .i..r.W...v*..z. 0080 a7 42 50 f2 6b 64 c2 6c 6a d6 f3 db bf 47 45 0a .BP.kd.lj....GE. 0090 69 41 6f 8a fd d4 f1 1f 74 f9 5c 52 2c 21 54 5d iAo.....t.\R,!T] 00a0 bd 09 b5 b4 8c d3 c3 8d 49 1f 5d 4b 27 7e 50 25 ........I.]K'~P% 00b0 1e c9 1a 54 ee 76 b3 b8 85 4b b2 17 73 20 2e 3a ...T.v...K..s .: 00c0 64 69 9d 7e 3a 6b 62 7c 32 8d 41 d3 ed ea 92 d4 di.~:kb|2.A..... 00d0 2d 4c a6 68 a7 d9 48 64 ea e9 f1 ca 84 0e 61 b2 -L.h..Hd......a. 00e0 8b 2a 23 4f 8c a4 04 78 ca aa 45 5a a9 e8 81 17 .*#O...x..EZ.... 00f0 65 1d 2c 3f e.,? Reassembled TCP (1589 bytes): 0000 17 03 01 06 30 87 a6 90 ba 87 f9 28 f3 7f ad 69 ....0......(...i 0010 55 37 67 78 1f e3 47 56 57 73 26 89 a6 08 20 ae U7gx..GVWs&... . 0020 17 cf 6e b0 20 1b eb 85 26 da c4 3a 56 7c 6e c3 ..n. ...&..:V|n. 0030 c9 a0 63 ff ea c6 b3 59 bf a7 77 c6 49 15 00 f0 ..c....Y..w.I... 0040 e8 8a ec b7 09 ed 39 66 34 ce 47 2e 1f 62 d6 24 ......9f4.G..b.$ 0050 de c6 8e 9e 3f 10 33 df a9 28 28 eb 0c a8 fc 6f ....?.3..((....o 0060 97 73 9c 99 66 74 15 d2 69 11 fa d6 88 75 e1 ec .s..ft..i....u.. 0070 6f 76 dd 79 3e ec 45 dd b6 98 4a 8c 35 37 93 86 ov.y>.E...J.57.. 0080 9d 7f fa 21 fa cf 90 ae 77 e8 54 bb d8 1b 9f 6c ...!....w.T....l 0090 04 10 65 02 41 c4 5b 75 20 5c d0 2e c6 78 1b b8 ..e.A.[u \...x.. 00a0 92 fb 49 ab 90 d7 c5 20 1f 5b 0a be 95 eb 64 ae ..I.... .[....d. 00b0 bb d7 62 31 55 de b2 72 51 20 76 0d ed 46 52 98 ..b1U..rQ v..FR. 00c0 14 7a 88 b1 94 4b c1 82 70 ba ed 6f 22 b8 7b 0d .z...K..p..o".{. 00d0 4d c4 a1 73 f9 2f 8f c9 fe 99 20 c9 73 f8 6f 11 M..s./.... .s.o. 00e0 56 94 cb b7 e7 80 0d a4 07 93 11 bb 97 95 f9 36 V..............6 00f0 76 3f e0 05 b8 6d 6c 05 c7 5e 36 bd 2a 3b 40 78 v?...ml..^6.*;@x 0100 3e 04 a5 8f 5f f4 2c 3e 5e 2c ec 3e 78 1d 18 b3 >..._.,>^,.>x... 0110 87 ad da a7 10 0e 23 b6 3e f8 dc 9c a9 49 70 56 ......#.>....IpV 0120 01 7a a8 5f e5 ec 1c 07 62 68 c1 0e 4f 12 fa 72 .z._....bh..O..r 0130 af 59 97 d2 b3 df dc 02 fd 40 87 2e c5 88 88 8c .Y.......@...... 0140 13 87 d8 ea 42 a8 a4 86 19 ef ca 91 d5 82 58 b8 ....B.........X. 0150 27 4a 94 5e 47 a7 54 01 86 4c 8c 43 09 c3 bb f4 'J.^G.T..L.C.... 0160 c8 1f 3c a9 17 b6 4f 6c 97 8b b5 8b 81 07 43 4e ..<...Ol......CN 0170 80 92 4b 58 83 0e a4 87 8c 90 4c b3 aa d5 71 23 ..KX......L...q# 0180 42 90 6f f5 71 87 fd fb c8 0c 65 6d ba 22 71 95 B.o.q.....em."q. 0190 3f a8 a2 fa d8 60 66 19 e9 69 b7 53 ef 74 a4 b9 ?....`f..i.S.t.. 01a0 6f c9 c9 74 2a b6 b0 e0 fe f6 ce b4 c7 70 5b 1b o..t*........p[. 01b0 9a f3 3f 8e 4d bc 6b 1e b7 c4 0d b4 57 6a 0c 0f ..?.M.k.....Wj.. 01c0 0e 4e aa dd db 79 ca 46 cc a4 e8 fd f4 8c 0b e1 .N...y.F........ 01d0 da 14 e0 62 45 2f 4b 2c b1 e1 51 01 26 48 b1 82 ...bE/K,..Q.&H.. 01e0 06 c1 11 99 1d 45 89 fa c5 ee 13 0b 75 78 fb a9 .....E......ux.. 01f0 c2 5a a2 48 00 cf 48 ee 85 65 b7 b0 49 8b 48 a3 .Z.H..H..e..I.H. 0200 aa f7 fd 7c 01 c8 fb 79 1c 4f 0d ed 79 1e 9e ff ...|...y.O..y... 0210 11 3c c8 7d c3 24 8c 1b 24 78 00 9c 51 ad 92 96 .<.}.$..$x..Q... 0220 cf c7 75 6c 0b a3 40 79 9a 8a 4e c1 c0 76 9b 25 ..ul..@y..N..v.% 0230 a2 f2 23 a6 b8 8b 7e a0 1e 3f 78 f6 b3 ca 57 6f ..#...~..?x...Wo 0240 a1 b9 d2 41 1a b1 cb 66 8a fa e6 c9 e3 8f a7 fb ...A...f........ 0250 08 e5 de 16 14 71 d3 66 2b b5 2e d1 9c 8c ca be .....q.f+....... 0260 c0 e2 02 7a c1 57 9b d8 2c f0 2b cd 09 43 6a 73 ...z.W..,.+..Cjs 0270 98 a6 2b 4d dc 27 3a 52 c4 78 e1 83 4d d2 39 4c ..+M.':R.x..M.9L 0280 03 9a aa 93 a6 f8 31 b7 24 93 79 83 c8 00 14 08 ......1.$.y..... 0290 63 98 fc e4 f4 77 34 94 dc da 4c 78 1d 9e bc fa c....w4...Lx.... 02a0 52 c8 80 3e 73 d6 09 91 86 f4 ec 11 36 95 24 b1 R..>s.......6.$. 02b0 a0 6d 3e 03 bc c4 59 32 c4 71 9b 86 59 49 98 20 .m>...Y2.q..YI. 02c0 17 eb 97 c4 fd 64 dc c5 e0 53 bd d1 80 bb 4f f7 .....d...S....O. 02d0 91 11 ac c8 42 1d c3 df 32 00 9b eb 8d 4f 2a 42 ....B...2....O*B 02e0 e1 12 a8 76 db 97 b5 f4 9c f5 96 17 a4 8d 91 e6 ...v............ 02f0 01 21 00 e6 be 53 7b a7 fa 56 e4 a3 21 dd 3a 1a .!...S{..V..!.:. 0300 df f7 0e a3 0d 54 ab 98 5c 1a 2a 60 52 0e cd 64 .....T..\.*`R..d 0310 be fe 1b 25 ec 8e 69 e9 fc f7 e2 d5 b5 ab 91 32 ...%..i........2 0320 0f e4 3d 3b b6 0c e9 36 65 34 c6 54 17 ca 68 87 ..=;...6e4.T..h. 0330 5b 01 95 23 64 31 b8 72 23 12 2d 0f 35 45 ef d6 [..#d1.r#.-.5E.. 0340 52 c2 e1 f8 33 6c 2a 5f c9 ce e0 b4 38 e2 8d 35 R...3l*_....8..5 0350 8e 1a 4e 23 bb 26 38 e8 a8 f7 48 cc f0 ed 4c f5 ..N#.&8...H...L. 0360 48 5c 0e 30 65 9a 20 3c de d1 13 f7 b7 1f c8 d1 H\.0e. <........ 0370 68 95 a0 f5 20 48 cc ba 64 93 8c aa 7b 17 12 5b h... H..d...{..[ 0380 71 b3 d2 c0 89 c2 71 bc 1a 9d ab 76 8f a1 63 2b q.....q....v..c+ 0390 20 e2 6e bb 4b 6f c5 e2 67 5e 78 7a e1 54 91 48 .n.Ko..g^xz.T.H 03a0 26 73 8a 29 b0 98 13 72 7e bb 39 26 9f 7f 06 2b &s.)...r~.9&...+ 03b0 09 0c b8 aa 6c 3d ba 2e 9b b9 26 2c 6b b5 56 70 ....l=....&,k.Vp 03c0 2b fa 35 89 f9 e8 87 6c ab 7c 7c 96 ce c5 7b 99 +.5....l.||...{. 03d0 0c 71 20 f7 b9 fa 2c dc 8c ce 59 3b e8 54 53 a4 .q ...,...Y;.TS. 03e0 af 95 22 2f ee d7 34 12 8c 20 39 e1 52 d2 78 68 .."/..4.. 9.R.xh 03f0 29 51 71 6d 92 3c 90 47 a8 00 77 fa de 36 ae dc )Qqm.<.G..w..6.. 0400 f2 36 a8 1f 4f 0b 99 7a 88 e9 61 0a 53 f5 7d d5 .6..O..z..a.S.}. 0410 34 6b 04 1b f7 78 a0 fe 7d 18 51 40 07 fd 20 b4 4k...x..}.Q@.. . 0420 34 b3 78 3d 24 32 b8 bf 79 25 a0 28 7c eb f5 24 4.x=$2..y%.(|..$ 0430 1c 8b 08 b8 c1 c2 5a 20 b2 a7 6b 28 6f ca d6 d1 ......Z ..k(o... 0440 b5 fc 3c f0 23 a9 f1 d8 e0 73 41 e0 90 55 6f 87 ..<.#....sA..Uo. 0450 3d 44 80 31 ca 1b 2b 9c 5e 7f b5 59 40 1f 07 bf =D.1..+.^..Y@... 0460 7c b7 ae d2 6c 8b e5 9b 5e d8 a1 d9 8f c8 c5 59 |...l...^......Y 0470 f7 47 d6 d8 cb de d4 3c 3a 22 d3 6e fb 23 69 d3 .G.....<:".n.#i. 0480 89 d1 0a a6 e0 3b 03 c3 4b fc d4 5d 3c 13 1b 7f .....;..K..]<... 0490 7b a0 08 d2 81 52 ac 12 bc e9 bd f2 0e a9 42 bd {....R........B. 04a0 79 68 5c b5 68 56 ce c8 36 b7 b7 4f 22 98 52 a1 yh\.hV..6..O".R. 04b0 8c e6 0b fe 57 d5 de 9b c7 81 d6 5e 2e 4c 91 49 ....W......^.L.I 04c0 16 90 ee 5d 06 01 92 93 12 55 6b d1 1c 0f d2 33 ...].....Uk....3 04d0 48 61 93 1e 3f e8 a4 52 9f f3 5d ad e4 b6 51 10 Ha..?..R..]...Q. 04e0 f4 da 36 3a 82 e4 be 55 4c bb 55 40 2e e9 1e 7a ..6:...UL.U@...z 04f0 1a 53 1e 9d 97 0c da 78 4d 92 4b 65 1e 9e fc 09 .S.....xM.Ke.... 0500 a8 a8 bb 7c 69 08 5d 27 9b a6 e2 9c 35 a6 3e 26 ...|i.]'....5.>& 0510 14 a5 da 12 6e 58 a8 55 67 09 b4 4b 7e 83 15 ed ....nX.Ug..K~... 0520 6b 66 42 18 ba 82 12 21 78 dd 5c 9c 6b 7c 60 a3 kfB....!x.\.k|`. 0530 1a dc d3 a4 c2 b4 2b 0a c2 40 02 07 d3 fa 99 6d ......+..@.....m 0540 b2 04 fb b1 23 fb be ad e4 c1 70 61 f9 f6 87 4b ....#.....pa...K 0550 b4 52 b2 b9 11 0c b8 98 67 1f 63 22 eb 73 3c b9 .R......g.c".s<. 0560 c1 79 73 9d ce fd e6 b3 10 2c 55 77 a9 82 ee eb .ys......,Uw.... 0570 25 cc 85 b2 91 3a d1 66 12 89 10 94 29 27 0c 5c %....:.f....)'.\ 0580 96 67 cc fc 27 b0 87 07 b8 46 79 a1 63 70 d1 b9 .g..'....Fy.cp.. 0590 ab 80 49 df 08 f2 18 93 ab 0d 2f 4e 8d ac 65 4d ..I......./N..eM 05a0 ec 49 a9 9c 01 ac 41 8e d0 f5 d6 cd d4 b6 5e 0e .I....A.......^. 05b0 eb d0 69 09 ac 72 f7 57 cc b4 a0 76 2a f0 03 7a ..i..r.W...v*..z 05c0 c2 a7 42 50 f2 6b 64 c2 6c 6a d6 f3 db bf 47 45 ..BP.kd.lj....GE 05d0 0a 69 41 6f 8a fd d4 f1 1f 74 f9 5c 52 2c 21 54 .iAo.....t.\R,!T 05e0 5d bd 09 b5 b4 8c d3 c3 8d 49 1f 5d 4b 27 7e 50 ]........I.]K'~P 05f0 25 1e c9 1a 54 ee 76 b3 b8 85 4b b2 17 73 20 2e %...T.v...K..s . 0600 3a 64 69 9d 7e 3a 6b 62 7c 32 8d 41 d3 ed ea 92 :di.~:kb|2.A.... 0610 d4 2d 4c a6 68 a7 d9 48 64 ea e9 f1 ca 84 0e 61 .-L.h..Hd......a 0620 b2 8b 2a 23 4f 8c a4 04 78 ca aa 45 5a a9 e8 81 ..*#O...x..EZ... 0630 17 65 1d 2c 3f .e.,? No. Time Source Destination Protocol Info 159 12:37:49.610660 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 159: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 37441, Ack: 3907, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 90 40 00 7e 06 f9 df a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 01 93 56 09 e1 78 50 18 ......@...V..xP. 0030 fb d0 5d b4 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..]......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 42 85 0c ff 00 00 00 ff ...0....B....... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 160 12:37:49.611401 167.235.13.48 167.235.7.25 TCP netbios-ssn > spw-dialer [ACK] Seq=38017 Ack=4033 Win=64338 Len=0 Frame 160: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 38017, Ack: 4033, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9c 91 40 00 7e 06 fc 1e a7 eb 0d 30 a7 eb .(..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 03 d3 56 09 e1 f6 50 10 ......@...V...P. 0030 fb 52 c4 a8 00 00 00 00 00 00 00 00 .R.......... No. Time Source Destination Protocol Info 161 12:37:49.611478 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 161: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 38017, Ack: 4033, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 92 40 00 7e 06 f9 dd a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 03 d3 56 09 e1 f6 50 18 ......@...V...P. 0030 fb 52 1b 73 00 00 00 00 02 3c ff 53 4d 42 2e 00 .R.s.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 82 85 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 162 12:37:49.611531 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 162: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 38593, Ack: 4033, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 93 40 00 7e 06 f9 dc a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 06 13 56 09 e1 f6 50 18 ......@...V...P. 0030 fb 52 d6 33 00 00 00 00 02 3c ff 53 4d 42 2e 00 .R.3.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c5 85 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 163 12:37:49.611537 167.235.13.48 167.235.7.25 TCP netbios-ssn > spw-dialer [ACK] Seq=39169 Ack=4159 Win=64212 Len=0 Frame 163: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 39169, Ack: 4159, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9c 94 40 00 7e 06 fc 1b a7 eb 0d 30 a7 eb .(..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 08 53 56 09 e2 74 50 10 ......@..SV..tP. 0030 fa d4 c0 28 00 00 00 00 00 00 00 00 ...(........ No. Time Source Destination Protocol Info 164 12:37:49.611590 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 164: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 39169, Ack: 4159, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 95 40 00 7e 06 f9 da a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 08 53 56 09 e2 74 50 18 ......@..SV..tP. 0030 fa d4 94 f3 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 04 86 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 165 12:37:49.611642 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 165: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 39745, Ack: 4159, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 96 40 00 7e 06 f9 d9 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 0a 93 56 09 e2 74 50 18 ......@...V..tP. 0030 fa d4 53 b2 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..S......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 43 86 0c ff 00 00 00 ff ...0....C....... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 166 12:37:50.110651 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 166: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 40321, Ack: 4222, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 98 40 00 7e 06 f9 d7 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 0c d3 56 09 e2 b3 50 18 ......@...V...P. 0030 fa 95 11 72 00 00 00 00 02 3c ff 53 4d 42 2e 00 ...r.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 83 86 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 167 12:37:50.111450 167.235.13.48 167.235.7.25 TCP netbios-ssn > spw-dialer [ACK] Seq=40897 Ack=4348 Win=65535 Len=0 Frame 167: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 40897, Ack: 4348, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9c 99 40 00 7e 06 fc 16 a7 eb 0d 30 a7 eb .(..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 0f 13 56 09 e3 31 50 10 ......@...V..1P. 0030 ff ff b3 80 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 168 12:37:50.111535 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 168: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 40897, Ack: 4411, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 9a 40 00 7e 06 f9 d5 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 0f 13 56 09 e3 70 50 18 ......@...V..pP. 0030 ff c0 c9 4a 00 00 00 00 02 3c ff 53 4d 42 2e 00 ...J.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c3 86 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 169 12:37:50.111587 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 169: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 41473, Ack: 4474, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 9b 40 00 7e 06 f9 d4 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 11 53 56 09 e3 af 50 18 ......@..SV...P. 0030 ff 81 85 0a 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 05 87 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 170 12:37:50.111640 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 170: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 42049, Ack: 4474, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 9c 40 00 7e 06 f9 d3 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 13 93 56 09 e3 af 50 18 ......@...V...P. 0030 ff 81 43 c9 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..C......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 44 87 0c ff 00 00 00 ff ...0....D....... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 171 12:37:50.111692 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 171: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 42625, Ack: 4474, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 9d 40 00 7e 06 f9 d2 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 15 d3 56 09 e3 af 50 18 ......@...V...P. 0030 ff 81 03 89 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 82 87 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 172 12:37:50.380680 167.235.7.126 224.0.0.2 HSRP Hello (state Standby) Frame 172: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: IPv4mcast_00:00:02 (01:00:5e:00:00:02) Internet Protocol, Src: 167.235.7.126 (167.235.7.126), Dst: 224.0.0.2 (224.0.0.2) User Datagram Protocol, Src Port: hsrp (1985), Dst Port: hsrp (1985) Cisco Hot Standby Router Protocol 0000 01 00 5e 00 00 02 00 15 2b a6 ad bf 08 00 45 c0 ..^.....+.....E. 0010 00 30 00 00 00 00 01 11 29 92 a7 eb 07 7e e0 00 .0......)....~.. 0020 00 02 07 c1 07 c1 00 1c 2c a7 00 00 08 03 05 64 ........,......d 0030 32 00 63 69 73 63 6f 00 00 00 a7 eb 07 01 2.cisco....... No. Time Source Destination Protocol Info 173 12:37:50.559992 192.168.11.43 167.235.7.45 TCP https > 55752 [ACK] Seq=3301 Ack=1056 Win=65258 Len=0 TSV=174427214 TSER=107652886 Frame 173: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_23:f1:a5 (00:1e:37:23:f1:a5) Internet Protocol, Src: 192.168.11.43 (192.168.11.43), Dst: 167.235.7.45 (167.235.7.45) Transmission Control Protocol, Src Port: https (443), Dst Port: 55752 (55752), Seq: 3301, Ack: 1056, Len: 0 0000 00 1e 37 23 f1 a5 00 15 2b a6 ad bf 08 00 45 00 ..7#....+.....E. 0010 00 34 16 3d 40 00 7e 06 6b 9b c0 a8 0b 2b a7 eb .4.=@.~.k....+.. 0020 07 2d 01 bb d9 c8 14 1f 09 db 6e fa f6 3c 80 10 .-........n..<.. 0030 fe ea 59 fd 00 00 01 01 08 0a 0a 65 8c 4e 06 6a ..Y........e.N.j 0040 a7 16 .. No. Time Source Destination Protocol Info 174 12:37:50.584608 192.168.11.160 167.235.7.71 TCP [TCP Previous segment lost] irdmi > 36388 [PSH, ACK] Seq=1283 Ack=1768 Win=9984 Len=108 TSV=2592158735 TSER=499201565 Frame 174: 174 bytes on wire (1392 bits), 174 bytes captured (1392 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee) Internet Protocol, Src: 192.168.11.160 (192.168.11.160), Dst: 167.235.7.71 (167.235.7.71) Transmission Control Protocol, Src Port: irdmi (8000), Dst Port: 36388 (36388), Seq: 1283, Ack: 1768, Len: 108 Data (108 bytes) 0000 00 0d 60 2b e0 ee 00 15 2b a6 ad bf 08 00 45 00 ..`+....+.....E. 0010 00 a0 1a 15 40 00 3d 06 a7 c8 c0 a8 0b a0 a7 eb ....@.=......... 0020 07 47 1f 40 8e 24 07 0a 3c bd 7a ee 1e 9c 80 18 .G.@.$..<.z..... 0030 00 4e a5 e8 00 00 01 01 08 0a 9a 81 34 0f 1d c1 .N..........4... 0040 36 1d 1f 8b 08 00 0e 93 ac 4d 02 ff 95 ca 4d 0e 6........M....M. 0050 40 30 10 06 d0 ab cc ce 8a 69 62 23 82 4b e0 00 @0.......ib#.K.. 0060 a3 fd 64 24 b4 4d 7f 9c df 19 bc f5 db f4 ca 94 ..d$.M.......... 0070 90 43 4d 16 64 c5 d3 01 3a 43 f5 8e a4 d0 24 a4 .CM.d...:C....$. 0080 09 e7 dc 68 29 71 64 7e 02 24 3b bc fd 38 18 63 ...h)qd~.$;..8.c 0090 18 be dd 57 96 18 f9 96 ea ad 22 b1 86 07 cd f2 ...W......"..... 00a0 ab 4f 2c 4b f7 01 55 5f ba bf 88 00 00 00 .O,K..U_...... No. Time Source Destination Protocol Info 175 12:37:50.584678 167.235.7.71 192.168.11.160 TCP [TCP Dup ACK 152#1] 36388 > irdmi [ACK] Seq=1768 Ack=915 Win=8000 Len=0 TSV=499202908 TSER=2592157433 SLE=1283 SRE=1391 Frame 175: 78 bytes on wire (624 bits), 78 bytes captured (624 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 192.168.11.160 (192.168.11.160) Transmission Control Protocol, Src Port: 36388 (36388), Dst Port: irdmi (8000), Seq: 1768, Ack: 915, Len: 0 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 00 40 22 bd 40 00 40 06 9c 80 a7 eb 07 47 c0 a8 .@".@.@......G.. 0020 0b a0 8e 24 1f 40 7a ee 1e 9c 07 0a 3b 4d b0 10 ...$.@z.....;M.. 0030 00 7d 90 d5 00 00 01 01 08 0a 1d c1 3b 5c 9a 81 .}..........;\.. 0040 2e f9 01 01 05 0a 07 0a 3c bd 07 0a 3d 29 ........<...=) No. Time Source Destination Protocol Info 176 12:37:50.584688 192.168.11.160 167.235.7.71 TCP [TCP Out-Of-Order] irdmi > 36388 [PSH, ACK] Seq=915 Ack=1768 Win=9984 Len=368 TSV=2592158735 TSER=499201565 Frame 176: 434 bytes on wire (3472 bits), 434 bytes captured (3472 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee) Internet Protocol, Src: 192.168.11.160 (192.168.11.160), Dst: 167.235.7.71 (167.235.7.71) Transmission Control Protocol, Src Port: irdmi (8000), Dst Port: 36388 (36388), Seq: 915, Ack: 1768, Len: 368 Data (368 bytes) 0000 00 0d 60 2b e0 ee 00 15 2b a6 ad bf 08 00 45 00 ..`+....+.....E. 0010 01 a4 1a 14 40 00 3d 06 a6 c5 c0 a8 0b a0 a7 eb ....@.=......... 0020 07 47 1f 40 8e 24 07 0a 3b 4d 7a ee 1e 9c 80 18 .G.@.$..;Mz..... 0030 00 4e 99 17 00 00 01 01 08 0a 9a 81 34 0f 1d c1 .N..........4... 0040 36 1d 48 54 54 50 2f 31 2e 31 20 33 30 33 20 53 6.HTTP/1.1 303 S 0050 65 65 20 4f 74 68 65 72 0d 0a 43 6f 6e 74 65 6e ee Other..Conten 0060 74 2d 4c 65 6e 67 74 68 3a 20 31 30 38 0d 0a 43 t-Length: 108..C 0070 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 3a ontent-Encoding: 0080 20 67 7a 69 70 0d 0a 56 61 72 79 3a 20 41 63 63 gzip..Vary: Acc 0090 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 53 65 ept-Encoding..Se 00a0 72 76 65 72 3a 20 43 68 65 72 72 79 50 79 2f 33 rver: CherryPy/3 00b0 2e 31 2e 32 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 .1.2..Location: 00c0 68 74 74 70 3a 2f 2f 6d 6f 65 61 73 64 65 76 33 http://moeasdev3 00d0 3a 38 30 30 30 2f 65 6e 2d 55 53 2f 61 70 70 2f :8000/en-US/app/ 00e0 6c 61 75 6e 63 68 65 72 2f 68 6f 6d 65 0d 0a 44 launcher/home..D 00f0 61 74 65 3a 20 4d 6f 6e 2c 20 31 38 20 41 70 72 ate: Mon, 18 Apr 0100 20 32 30 31 31 20 31 39 3a 33 37 3a 34 39 20 47 2011 19:37:49 G 0110 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 MT..Content-Type 0120 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 : text/html;char 0130 73 65 74 3d 75 74 66 2d 38 0d 0a 53 65 74 2d 43 set=utf-8..Set-C 0140 6f 6f 6b 69 65 3a 20 73 65 73 73 69 6f 6e 5f 69 ookie: session_i 0150 64 5f 38 30 30 30 3d 63 37 38 63 30 39 35 66 39 d_8000=c78c095f9 0160 66 62 64 63 33 32 33 32 66 64 63 38 31 66 61 31 fbdc3232fdc81fa1 0170 36 36 36 32 64 35 32 61 66 61 39 31 66 63 38 3b 6662d52afa91fc8; 0180 20 65 78 70 69 72 65 73 3d 54 75 65 2c 20 31 39 expires=Tue, 19 0190 20 41 70 72 20 32 30 31 31 20 31 39 3a 33 37 3a Apr 2011 19:37: 01a0 34 39 20 47 4d 54 3b 20 50 61 74 68 3d 2f 0d 0a 49 GMT; Path=/.. 01b0 0d 0a .. No. Time Source Destination Protocol Info 177 12:37:50.584704 167.235.7.71 192.168.11.160 TCP 36388 > irdmi [ACK] Seq=1768 Ack=1391 Win=9088 Len=0 TSV=499202908 TSER=2592158735 Frame 177: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 192.168.11.160 (192.168.11.160) Transmission Control Protocol, Src Port: 36388 (36388), Dst Port: irdmi (8000), Seq: 1768, Ack: 1391, Len: 0 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 00 34 22 be 40 00 40 06 9c 8b a7 eb 07 47 c0 a8 .4".@.@......G.. 0020 0b a0 8e 24 1f 40 7a ee 1e 9c 07 0a 3d 29 80 10 ...$.@z.....=).. 0030 00 8e 47 e4 00 00 01 01 08 0a 1d c1 3b 5c 9a 81 ..G.........;\.. 0040 34 0f 4. No. Time Source Destination Protocol Info 178 12:37:50.606394 167.235.7.71 192.168.11.160 TCP 36388 > irdmi [PSH, ACK] Seq=1768 Ack=1391 Win=9088 Len=546 TSV=499202930 TSER=2592158735 Frame 178: 612 bytes on wire (4896 bits), 612 bytes captured (4896 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 192.168.11.160 (192.168.11.160) Transmission Control Protocol, Src Port: 36388 (36388), Dst Port: irdmi (8000), Seq: 1768, Ack: 1391, Len: 546 Data (546 bytes) 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 02 56 22 bf 40 00 40 06 9a 68 a7 eb 07 47 c0 a8 .V".@.@..h...G.. 0020 0b a0 8e 24 1f 40 7a ee 1e 9c 07 0a 3d 29 80 18 ...$.@z.....=).. 0030 00 8e f9 e1 00 00 01 01 08 0a 1d c1 3b 72 9a 81 ............;r.. 0040 34 0f 47 45 54 20 2f 65 6e 2d 55 53 2f 61 70 70 4.GET /en-US/app 0050 2f 6c 61 75 6e 63 68 65 72 2f 68 6f 6d 65 20 48 /launcher/home H 0060 54 54 50 2f 31 2e 31 0d 0a 48 6f 73 74 3a 20 6d TTP/1.1..Host: m 0070 6f 65 61 73 64 65 76 33 3a 38 30 30 30 0d 0a 55 oeasdev3:8000..U 0080 73 65 72 2d 41 67 65 6e 74 3a 20 4d 6f 7a 69 6c ser-Agent: Mozil 0090 6c 61 2f 35 2e 30 20 28 58 31 31 3b 20 55 3b 20 la/5.0 (X11; U; 00a0 4c 69 6e 75 78 20 69 36 38 36 3b 20 65 6e 2d 55 Linux i686; en-U 00b0 53 3b 20 72 76 3a 31 2e 39 2e 32 2e 31 36 29 20 S; rv:1.9.2.16) 00c0 47 65 63 6b 6f 2f 32 30 31 31 30 33 32 32 20 46 Gecko/20110322 F 00d0 65 64 6f 72 61 2f 33 2e 36 2e 31 36 2d 31 2e 66 edora/3.6.16-1.f 00e0 63 31 34 20 46 69 72 65 66 6f 78 2f 33 2e 36 2e c14 Firefox/3.6. 00f0 31 36 0d 0a 41 63 63 65 70 74 3a 20 74 65 78 74 16..Accept: text 0100 2f 68 74 6d 6c 2c 61 70 70 6c 69 63 61 74 69 6f /html,applicatio 0110 6e 2f 78 68 74 6d 6c 2b 78 6d 6c 2c 61 70 70 6c n/xhtml+xml,appl 0120 69 63 61 74 69 6f 6e 2f 78 6d 6c 3b 71 3d 30 2e ication/xml;q=0. 0130 39 2c 2a 2f 2a 3b 71 3d 30 2e 38 0d 0a 41 63 63 9,*/*;q=0.8..Acc 0140 65 70 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e ept-Language: en 0150 2d 75 73 2c 65 6e 3b 71 3d 30 2e 35 0d 0a 41 63 -us,en;q=0.5..Ac 0160 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 3a 20 67 cept-Encoding: g 0170 7a 69 70 2c 64 65 66 6c 61 74 65 0d 0a 41 63 63 zip,deflate..Acc 0180 65 70 74 2d 43 68 61 72 73 65 74 3a 20 49 53 4f ept-Charset: ISO 0190 2d 38 38 35 39 2d 31 2c 75 74 66 2d 38 3b 71 3d -8859-1,utf-8;q= 01a0 30 2e 37 2c 2a 3b 71 3d 30 2e 37 0d 0a 4b 65 65 0.7,*;q=0.7..Kee 01b0 70 2d 41 6c 69 76 65 3a 20 31 31 35 0d 0a 43 6f p-Alive: 115..Co 01c0 6e 6e 65 63 74 69 6f 6e 3a 20 6b 65 65 70 2d 61 nnection: keep-a 01d0 6c 69 76 65 0d 0a 52 65 66 65 72 65 72 3a 20 68 live..Referer: h 01e0 74 74 70 3a 2f 2f 6d 6f 65 61 73 64 65 76 33 3a ttp://moeasdev3: 01f0 38 30 30 30 2f 65 6e 2d 55 53 2f 61 63 63 6f 75 8000/en-US/accou 0200 6e 74 2f 6c 6f 67 69 6e 3f 72 65 74 75 72 6e 5f nt/login?return_ 0210 74 6f 3d 25 32 46 65 6e 2d 55 53 25 32 46 0d 0a to=%2Fen-US%2F.. 0220 43 6f 6f 6b 69 65 3a 20 73 65 73 73 69 6f 6e 5f Cookie: session_ 0230 69 64 5f 38 30 30 30 3d 63 37 38 63 30 39 35 66 id_8000=c78c095f 0240 39 66 62 64 63 33 32 33 32 66 64 63 38 31 66 61 9fbdc3232fdc81fa 0250 31 36 36 36 32 64 35 32 61 66 61 39 31 66 63 38 16662d52afa91fc8 0260 0d 0a 0d 0a .... No. Time Source Destination Protocol Info 179 12:37:50.608561 192.168.11.160 167.235.7.71 TCP irdmi > 36388 [ACK] Seq=1391 Ack=2314 Win=11392 Len=0 TSV=2592158758 TSER=499202930 Frame 179: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee) Internet Protocol, Src: 192.168.11.160 (192.168.11.160), Dst: 167.235.7.71 (167.235.7.71) Transmission Control Protocol, Src Port: irdmi (8000), Dst Port: 36388 (36388), Seq: 1391, Ack: 2314, Len: 0 0000 00 0d 60 2b e0 ee 00 15 2b a6 ad bf 08 00 45 00 ..`+....+.....E. 0010 00 34 1a 16 40 00 3d 06 a8 33 c0 a8 0b a0 a7 eb .4..@.=..3...... 0020 07 47 1f 40 8e 24 07 0a 3d 29 7a ee 20 be 80 10 .G.@.$..=)z. ... 0030 00 59 45 ca 00 00 01 01 08 0a 9a 81 34 26 1d c1 .YE.........4&.. 0040 3b 72 ;r No. Time Source Destination Protocol Info 180 12:37:50.610667 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 180: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 43201, Ack: 4537, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c 9f 40 00 7e 06 f9 d0 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 18 13 56 09 e3 ee 50 18 ......@...V...P. 0030 ff 42 c1 48 00 00 00 00 02 3c ff 53 4d 42 2e 00 .B.H.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c2 87 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 181 12:37:50.611432 167.235.13.48 167.235.7.25 TCP netbios-ssn > spw-dialer [ACK] Seq=43777 Ack=4663 Win=65220 Len=0 Frame 181: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 43777, Ack: 4663, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9c a0 40 00 7e 06 fc 0f a7 eb 0d 30 a7 eb .(..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 1a 53 56 09 e4 6c 50 10 ......@..SV..lP. 0030 fe c4 a8 40 00 00 00 00 00 00 00 00 ...@........ No. Time Source Destination Protocol Info 182 12:37:50.611507 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 182: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 43777, Ack: 4663, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c a1 40 00 7e 06 f9 ce a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 1a 53 56 09 e4 6c 50 18 ......@..SV..lP. 0030 fe c4 7f 08 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 02 88 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 183 12:37:50.611559 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 183: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 44353, Ack: 4663, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c a2 40 00 7e 06 f9 cd a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 1c 93 56 09 e4 6c 50 18 ......@...V..lP. 0030 fe c4 3b c8 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..;......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 43 88 0c ff 00 00 00 ff ...0....C....... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 184 12:37:50.611611 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 184: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 44929, Ack: 4726, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c a3 40 00 7e 06 f9 cc a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 1e d3 56 09 e4 ab 50 18 ......@...V...P. 0030 fe 85 f8 88 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 84 88 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 185 12:37:50.611663 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 185: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 45505, Ack: 4789, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c a4 40 00 7e 06 f9 cb a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 21 13 56 09 e4 ea 50 18 ......@.!.V...P. 0030 fe 46 b5 48 00 00 00 00 02 3c ff 53 4d 42 2e 00 .F.H.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c5 88 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 186 12:37:50.783447 167.235.7.125 224.0.0.2 HSRP Hello (state Active) Frame 186: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: All-HSRP-routers_32 (00:00:0c:07:ac:32), Dst: IPv4mcast_00:00:02 (01:00:5e:00:00:02) Internet Protocol, Src: 167.235.7.125 (167.235.7.125), Dst: 224.0.0.2 (224.0.0.2) User Datagram Protocol, Src Port: hsrp (1985), Dst Port: hsrp (1985) Cisco Hot Standby Router Protocol 0000 01 00 5e 00 00 02 00 00 0c 07 ac 32 08 00 45 c0 ..^........2..E. 0010 00 30 00 00 00 00 01 11 29 93 a7 eb 07 7d e0 00 .0......)....}.. 0020 00 02 07 c1 07 c1 00 1c 24 9e 00 00 10 03 05 6e ........$......n 0030 32 00 63 69 73 63 6f 00 00 00 a7 eb 07 01 2.cisco....... No. Time Source Destination Protocol Info 187 12:37:50.822723 167.235.13.205 167.235.7.19 SMB Logoff AndX Response Frame 187: 97 bytes on wire (776 bits), 97 bytes captured (776 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6a:be:d4 (00:1a:6b:6a:be:d4) Internet Protocol, Src: 167.235.13.205 (167.235.13.205), Dst: 167.235.7.19 (167.235.7.19) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: navegaweb-port (3159), Seq: 1035, Ack: 539, Len: 43 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6a be d4 00 15 2b a6 ad bf 08 00 45 00 ..kj....+.....E. 0010 00 53 29 5e 40 00 7e 06 6e 90 a7 eb 0d cd a7 eb .S)^@.~.n....... 0020 07 13 01 bd 0c 57 5b f8 ce 2c fc ce f8 41 50 18 .....W[..,...AP. 0030 41 ea 4f 45 00 00 00 00 00 27 ff 53 4d 42 74 00 A.OE.....'.SMBt. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 00 00 ff fe 00 10 c0 1e 02 ff 00 27 00 00 .............'.. 0060 00 . No. Time Source Destination Protocol Info 188 12:37:50.823360 167.235.13.205 167.235.7.19 SMB Tree Disconnect Response Frame 188: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6a:be:d4 (00:1a:6b:6a:be:d4) Internet Protocol, Src: 167.235.13.205 (167.235.13.205), Dst: 167.235.7.19 (167.235.7.19) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: navegaweb-port (3159), Seq: 1078, Ack: 578, Len: 39 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6a be d4 00 15 2b a6 ad bf 08 00 45 00 ..kj....+.....E. 0010 00 4f 29 5f 40 00 7e 06 6e 93 a7 eb 0d cd a7 eb .O)_@.~.n....... 0020 07 13 01 bd 0c 57 5b f8 ce 57 fc ce f8 68 50 18 .....W[..W...hP. 0030 41 c3 10 40 00 00 00 00 00 23 ff 53 4d 42 71 00 A..@.....#.SMBq. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 05 08 ff fe 00 10 00 1f 00 00 00 ............. No. Time Source Destination Protocol Info 189 12:37:50.824454 167.235.13.205 167.235.7.19 TCP microsoft-ds > navegaweb-port [FIN, ACK] Seq=1117 Ack=579 Win=16835 Len=0 Frame 189: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6a:be:d4 (00:1a:6b:6a:be:d4) Internet Protocol, Src: 167.235.13.205 (167.235.13.205), Dst: 167.235.7.19 (167.235.7.19) Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: navegaweb-port (3159), Seq: 1117, Ack: 579, Len: 0 0000 00 1a 6b 6a be d4 00 15 2b a6 ad bf 08 00 45 00 ..kj....+.....E. 0010 00 28 29 60 40 00 7e 06 6e b9 a7 eb 0d cd a7 eb .()`@.~.n....... 0020 07 13 01 bd 0c 57 5b f8 ce 7e fc ce f8 69 50 11 .....W[..~...iP. 0030 41 c3 db 95 00 00 00 00 00 00 00 00 A........... No. Time Source Destination Protocol Info 190 12:37:50.861761 192.168.11.43 167.235.7.45 TCP https > 55752 [ACK] Seq=3301 Ack=1557 Win=64757 Len=0 TSV=174427217 TSER=107653123 Frame 190: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_23:f1:a5 (00:1e:37:23:f1:a5) Internet Protocol, Src: 192.168.11.43 (192.168.11.43), Dst: 167.235.7.45 (167.235.7.45) Transmission Control Protocol, Src Port: https (443), Dst Port: 55752 (55752), Seq: 3301, Ack: 1557, Len: 0 0000 00 1e 37 23 f1 a5 00 15 2b a6 ad bf 08 00 45 00 ..7#....+.....E. 0010 00 34 16 40 40 00 7e 06 6b 98 c0 a8 0b 2b a7 eb .4.@@.~.k....+.. 0020 07 2d 01 bb d9 c8 14 1f 09 db 6e fa f8 31 80 10 .-........n..1.. 0030 fc f5 59 0d 00 00 01 01 08 0a 0a 65 8c 51 06 6a ..Y........e.Q.j 0040 a8 03 .. No. Time Source Destination Protocol Info 191 12:37:51.110674 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 191: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 46081, Ack: 4852, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c a6 40 00 7e 06 f9 c9 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 23 53 56 09 e5 29 50 18 ......@.#SV..)P. 0030 fe 07 73 08 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..s......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 05 89 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 192 12:37:51.111443 167.235.13.48 167.235.7.25 TCP netbios-ssn > spw-dialer [ACK] Seq=46657 Ack=4978 Win=64905 Len=0 Frame 192: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 46657, Ack: 4978, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9c a7 40 00 7e 06 fc 08 a7 eb 0d 30 a7 eb .(..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 25 93 56 09 e5 a7 50 10 ......@.%.V...P. 0030 fd 89 9d 00 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 193 12:37:51.111511 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 193: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 46657, Ack: 4978, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c a8 40 00 7e 06 f9 c7 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 25 93 56 09 e5 a7 50 18 ......@.%.V...P. 0030 fd 89 30 c8 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..0......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 45 89 0c ff 00 00 00 ff ...0....E....... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 194 12:37:51.111564 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 194: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 47233, Ack: 4978, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c a9 40 00 7e 06 f9 c6 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 27 d3 56 09 e5 a7 50 18 ......@.'.V...P. 0030 fd 89 f0 87 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 83 89 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 195 12:37:51.111616 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 195: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 47809, Ack: 5041, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c aa 40 00 7e 06 f9 c5 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 2a 13 56 09 e5 e6 50 18 ......@.*.V...P. 0030 fd 4a ad 46 00 00 00 00 02 3c ff 53 4d 42 2e 00 .J.F.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c4 89 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 196 12:37:51.111668 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 196: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 48385, Ack: 5104, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c ab 40 00 7e 06 f9 c4 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 2c 53 56 09 e6 25 50 18 ......@.,SV..%P. 0030 fd 0b 6d 06 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..m......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 02 8a 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 197 12:37:51.302998 Cisco_a6:ad:bf Broadcast 0x0806 ARP Frame 197: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Data (46 bytes) 0000 ff ff ff ff ff ff 00 15 2b a6 ad bf 08 06 00 01 ........+....... 0010 08 00 06 04 00 01 00 15 2b a6 ad bf a7 eb 07 7e ........+......~ 0020 00 00 00 00 00 00 a7 eb 07 2e 00 00 00 00 00 00 ................ 0030 00 00 00 00 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 198 12:37:51.382482 192.168.11.43 167.235.7.45 TLSv1 Application Data Frame 198: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_23:f1:a5 (00:1e:37:23:f1:a5) Internet Protocol, Src: 192.168.11.43 (192.168.11.43), Dst: 167.235.7.45 (167.235.7.45) Transmission Control Protocol, Src Port: https (443), Dst Port: 55752 (55752), Seq: 3301, Ack: 1557, Len: 1448 Secure Socket Layer 0000 00 1e 37 23 f1 a5 00 15 2b a6 ad bf 08 00 45 00 ..7#....+.....E. 0010 05 dc 16 68 40 00 7e 06 65 c8 c0 a8 0b 2b a7 eb ...h@.~.e....+.. 0020 07 2d 01 bb d9 c8 14 1f 09 db 6e fa f8 31 80 10 .-........n..1.. 0030 fc f5 ba e0 00 00 01 01 08 0a 0a 65 8c 56 06 6a ...........e.V.j 0040 a8 03 17 03 01 00 20 33 75 eb 3a e5 fb 3c 5c 68 ...... 3u.:..<\h 0050 ad 13 40 24 ed 29 64 57 71 b0 18 e0 31 74 30 10 ..@$.)dWq...1t0. 0060 89 7d fa ce ed 8f e2 17 03 01 05 a0 7c 1e 33 09 .}..........|.3. 0070 6f 5e 33 e7 a0 b9 d3 88 6e 2f cc b3 fe 33 e8 a6 o^3.....n/...3.. 0080 9e 4d 1d 7d d8 04 d7 66 52 63 71 1e a3 0c 13 f3 .M.}...fRcq..... 0090 10 cd 81 86 ec 90 d8 11 9f fa 1b db e3 8c 4a 44 ..............JD 00a0 5a a8 5d 8a 13 2a 3e 91 d4 2f 58 8f 55 49 a5 0b Z.]..*>../X.UI.. 00b0 9a a7 9f 68 59 71 6e 84 60 58 8c 8b c0 5d c5 b1 ...hYqn.`X...].. 00c0 bd 7b fe 66 66 f0 ac 38 10 95 b8 8a 2a 06 60 89 .{.ff..8....*.`. 00d0 d0 47 60 dd 60 20 d3 a3 92 f3 7f 63 7f d7 02 aa .G`.` .....c.... 00e0 e6 13 5b e1 97 b4 4d 7c 9b f2 e2 85 56 13 04 ef ..[...M|....V... 00f0 6c 5b b0 66 fd 85 c4 b4 53 6e 1b 43 5d ca e0 c8 l[.f....Sn.C]... 0100 3b 73 6b 99 35 29 47 7e db 0a 6f 66 09 7e a7 26 ;sk.5)G~..of.~.& 0110 c1 b9 fe 1d 0a f3 0e c6 18 2a 36 c0 3a 71 80 a8 .........*6.:q.. 0120 bd 0c f0 2e 9c 58 81 e4 9f 62 96 cc e4 29 bb bc .....X...b...).. 0130 50 74 48 d0 89 9c 69 ef 25 47 68 40 91 c7 cc c3 PtH...i.%Gh@.... 0140 2e d4 0d 4a b1 25 0a e1 b7 58 20 6a 9b 73 2c 44 ...J.%...X j.s,D 0150 d4 ff f7 a9 12 1f a2 db 07 51 53 6b 79 b8 2a 24 .........QSky.*$ 0160 c1 94 f0 d9 df 15 d0 99 34 71 3e b7 3c c4 d4 36 ........4q>.<..6 0170 89 45 91 0b 3c dc d8 fb 56 12 43 bb e6 ec b2 03 .E..<...V.C..... 0180 bd 4d 7d aa 60 3f ff 1e ba 5c 5d 2e 0a fa ab ab .M}.`?...\]..... 0190 b0 81 44 77 38 f5 59 a6 e0 1a 89 82 bc 0d b7 ba ..Dw8.Y......... 01a0 22 6a 3d 1c 7f 56 29 cb 56 01 47 ac 34 3c 8f 2a "j=..V).V.G.4<.* 01b0 31 47 88 b0 3f 3b d0 f2 f4 9f c1 6e cb 2e 53 d5 1G..?;.....n..S. 01c0 cc 60 0c 42 83 87 77 5e c5 04 9b f1 aa 67 7b c8 .`.B..w^.....g{. 01d0 bf 54 a1 7d 05 96 50 13 6e e8 8d ad 8c a4 d5 e6 .T.}..P.n....... 01e0 ba 24 ba 1e 7d e4 77 4a 57 d3 e8 44 1c fe 14 ed .$..}.wJW..D.... 01f0 72 1e d7 64 f7 b8 c1 85 f5 c2 1a b4 61 50 42 bd r..d........aPB. 0200 7d c4 cf c6 88 44 5b 0f 2f 0a c9 89 3c 44 f9 4f }....D[./....@.?_........dC 0280 2e 0a 88 70 c8 01 ce 67 59 cb 6e 8f 5a 11 5a 5b ...p...gY.n.Z.Z[ 0290 bf 93 92 90 50 eb 82 82 11 ef b9 dc d5 6d 4e c6 ....P........mN. 02a0 5b 73 86 1c c0 dd 63 2d 3a 89 bc 8f 9f a8 2e 87 [s....c-:....... 02b0 d4 65 03 47 8f 19 7a a2 2b e8 b2 32 b6 54 90 81 .e.G..z.+..2.T.. 02c0 01 57 bc f1 e8 ff 44 62 aa 70 a8 ce c7 c9 04 ba .W....Db.p...... 02d0 5e cf 83 67 30 60 bb a2 5f bb 4b e5 77 8f 05 88 ^..g0`.._.K.w... 02e0 c8 c1 0b da 80 46 17 dd 11 ac 28 cd 63 cf 41 1c .....F....(.c.A. 02f0 f6 46 05 bd 55 55 92 02 6a d8 b7 3e e6 08 14 6d .F..UU..j..>...m 0300 f7 38 b6 39 2a 73 29 30 05 92 81 d5 df f6 34 1a .8.9*s)0......4. 0310 23 6c 50 31 86 f8 59 6f 83 12 0c 0d f6 17 5e 0c #lP1..Yo......^. 0320 e8 36 7c e4 49 15 aa 4c c8 b5 47 88 0e 9e 25 78 .6|.I..L..G...%x 0330 ea 2d 2e 42 de 00 d6 1a 0b d2 e8 b6 1f 55 5b 83 .-.B.........U[. 0340 44 70 df 45 69 ab 83 d6 70 a8 5e 4c 3a 9c d3 77 Dp.Ei...p.^L:..w 0350 ff ae dc f7 32 2c 35 f3 53 78 e1 9b 18 bf a9 0c ....2,5.Sx...... 0360 04 97 a3 60 12 fe 5d 16 bc 4d 2d fe d9 64 88 9d ...`..]..M-..d.. 0370 b3 f9 d5 bc dc 50 4e ef 3a 89 06 bc 22 81 20 32 .....PN.:...". 2 0380 10 d2 3d 08 5e 51 59 07 9b 75 49 ef 41 ac 6d d9 ..=.^QY..uI.A.m. 0390 fb 49 27 cb 63 b2 7c a9 53 e1 ac 9f 11 7e 2f c5 .I'.c.|.S....~/. 03a0 02 c4 7d 4d 35 d1 94 e3 4c 1d a3 e7 5d 87 b0 c4 ..}M5...L...]... 03b0 a8 17 66 21 f8 71 0f 69 5c 54 d2 d0 0c a7 89 f9 ..f!.q.i\T...... 03c0 bf 64 94 90 61 56 76 66 74 d7 2d 76 6b 6e b4 3c .d..aVvft.-vkn.< 03d0 e1 14 8d 10 01 f9 02 ab a9 0f d3 7a 85 67 4f d0 ...........z.gO. 03e0 e8 4e be bb 2f 22 0a 00 dd c7 8f 83 33 a4 08 2c .N../"......3.., 03f0 f2 ac 62 f7 7b b1 03 bb dd 1d a2 ed 60 ed 13 a6 ..b.{.......`... 0400 6f 93 7d 3b c2 cd a2 83 38 cd e6 b3 a6 bd e5 29 o.};....8......) 0410 28 e6 1d 9e 24 0e 85 cd 65 71 5a 47 be a6 63 36 (...$...eqZG..c6 0420 5b 4e 93 75 fc 72 21 17 f2 71 77 e5 e8 de 97 a2 [N.u.r!..qw..... 0430 76 de 63 54 78 11 ec fd 3b 47 38 ba 43 c5 37 45 v.cTx...;G8.C.7E 0440 dd 51 22 a9 63 4e ed 7a f3 f0 c0 a3 d2 2f bb 08 .Q".cN.z...../.. 0450 cb e1 d5 ec d5 68 37 91 a0 72 57 2d 7f 34 e6 34 .....h7..rW-.4.4 0460 d2 9f ef bf 1d de 12 b5 3d 87 a6 78 5a 4d 4b 8d ........=..xZMK. 0470 54 c6 80 09 fe 71 87 7e 25 2e c6 f2 1e 20 2f e4 T....q.~%.... /. 0480 18 0e 09 5a b9 62 b4 5b 3d 3e 8e 7f 8d cb b5 2e ...Z.b.[=>...... 0490 68 a1 92 32 75 70 d7 81 e9 a3 6e a7 6c f8 49 52 h..2up....n.l.IR 04a0 0e 17 f5 32 08 ee f9 57 e9 a6 2a fe 38 24 ca 89 ...2...W..*.8$.. 04b0 9b bf 48 d2 28 3c ae 97 b2 07 72 c1 0a 57 80 49 ..H.(<....r..W.I 04c0 b9 ee 92 d7 32 cf c9 08 66 e7 bd 32 15 40 ab 49 ....2...f..2.@.I 04d0 10 e1 b3 c6 16 8c ae 8f 69 31 cb f7 2b e2 c3 4e ........i1..+..N 04e0 70 d6 36 de e0 f7 3f 11 f7 8f 11 ba 46 dd 67 92 p.6...?.....F.g. 04f0 44 f4 c6 8d 04 7e aa 13 95 76 c4 3f cf 59 fb 34 D....~...v.?.Y.4 0500 ea e2 8c f1 4f 9f b4 05 d2 90 46 32 0f a7 86 fd ....O.....F2.... 0510 4d 4e f6 a2 8f 30 84 62 b9 76 0d 15 5a 2f d0 a5 MN...0.b.v..Z/.. 0520 87 a1 cb f5 42 93 d6 20 08 e4 c3 d9 45 ff 87 69 ....B.. ....E..i 0530 35 83 9a 9d 18 df 91 f2 dc 7e 94 31 dd 51 9c 3f 5........~.1.Q.? 0540 1c 38 0d 4a b5 48 89 57 0b 81 b2 d6 c5 e1 4f 9b .8.J.H.W......O. 0550 e4 dd 05 75 a3 bf 93 f5 44 dc f3 1a b7 19 b3 9b ...u....D....... 0560 b8 b7 6b 45 e2 17 61 50 d5 1d e9 75 b4 67 44 8c ..kE..aP...u.gD. 0570 ae a4 70 cd b2 65 fa e4 c1 04 03 69 73 b4 85 9d ..p..e.....is... 0580 5d f8 45 5a 77 fa a2 a5 46 e4 a5 dc 77 1b ba d5 ].EZw...F...w... 0590 d3 27 89 15 96 9d 31 5e 63 4e 61 38 8b 03 b4 f8 .'....1^cNa8.... 05a0 89 1d 0b 1d 4c cc 1a 91 90 2b 6f b2 72 b9 c7 b7 ....L....+o.r... 05b0 50 b5 e2 86 51 5d 09 92 5d b1 f0 7f 95 1f 64 b0 P...Q]..].....d. 05c0 84 0f 8c 35 de 72 f8 e7 de 0f 1c a5 54 26 8d 3d ...5.r......T&.= 05d0 ca 0f 95 3e 92 3d 2d d5 bf b5 73 81 cb 16 04 4b ...>.=-...s....K 05e0 c2 56 94 ab de d4 6f 70 ee 6d .V....op.m No. Time Source Destination Protocol Info 199 12:37:51.382501 192.168.11.43 167.235.7.45 TLSv1 Application Data Frame 199: 100 bytes on wire (800 bits), 100 bytes captured (800 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_23:f1:a5 (00:1e:37:23:f1:a5) Internet Protocol, Src: 192.168.11.43 (192.168.11.43), Dst: 167.235.7.45 (167.235.7.45) Transmission Control Protocol, Src Port: https (443), Dst Port: 55752 (55752), Seq: 4749, Ack: 1557, Len: 34 [Reassembled TCP Segments (1445 bytes): #198(1411), #199(34)] Secure Socket Layer Frame (100 bytes): 0000 00 1e 37 23 f1 a5 00 15 2b a6 ad bf 08 00 45 00 ..7#....+.....E. 0010 00 56 16 69 40 00 7e 06 6b 4d c0 a8 0b 2b a7 eb .V.i@.~.kM...+.. 0020 07 2d 01 bb d9 c8 14 1f 0f 83 6e fa f8 31 80 18 .-........n..1.. 0030 fc f5 f2 f7 00 00 01 01 08 0a 0a 65 8c 56 06 6a ...........e.V.j 0040 a8 03 f4 fa 7a 2f 99 e5 89 44 18 b2 eb c3 eb d1 ....z/...D...... 0050 7c b5 89 53 a2 d2 d9 76 1e aa 45 e4 f7 e3 67 69 |..S...v..E...gi 0060 b7 e2 df 90 .... Reassembled TCP (1445 bytes): 0000 17 03 01 05 a0 7c 1e 33 09 6f 5e 33 e7 a0 b9 d3 .....|.3.o^3.... 0010 88 6e 2f cc b3 fe 33 e8 a6 9e 4d 1d 7d d8 04 d7 .n/...3...M.}... 0020 66 52 63 71 1e a3 0c 13 f3 10 cd 81 86 ec 90 d8 fRcq............ 0030 11 9f fa 1b db e3 8c 4a 44 5a a8 5d 8a 13 2a 3e .......JDZ.]..*> 0040 91 d4 2f 58 8f 55 49 a5 0b 9a a7 9f 68 59 71 6e ../X.UI.....hYqn 0050 84 60 58 8c 8b c0 5d c5 b1 bd 7b fe 66 66 f0 ac .`X...]...{.ff.. 0060 38 10 95 b8 8a 2a 06 60 89 d0 47 60 dd 60 20 d3 8....*.`..G`.` . 0070 a3 92 f3 7f 63 7f d7 02 aa e6 13 5b e1 97 b4 4d ....c......[...M 0080 7c 9b f2 e2 85 56 13 04 ef 6c 5b b0 66 fd 85 c4 |....V...l[.f... 0090 b4 53 6e 1b 43 5d ca e0 c8 3b 73 6b 99 35 29 47 .Sn.C]...;sk.5)G 00a0 7e db 0a 6f 66 09 7e a7 26 c1 b9 fe 1d 0a f3 0e ~..of.~.&....... 00b0 c6 18 2a 36 c0 3a 71 80 a8 bd 0c f0 2e 9c 58 81 ..*6.:q.......X. 00c0 e4 9f 62 96 cc e4 29 bb bc 50 74 48 d0 89 9c 69 ..b...)..PtH...i 00d0 ef 25 47 68 40 91 c7 cc c3 2e d4 0d 4a b1 25 0a .%Gh@.......J.%. 00e0 e1 b7 58 20 6a 9b 73 2c 44 d4 ff f7 a9 12 1f a2 ..X j.s,D....... 00f0 db 07 51 53 6b 79 b8 2a 24 c1 94 f0 d9 df 15 d0 ..QSky.*$....... 0100 99 34 71 3e b7 3c c4 d4 36 89 45 91 0b 3c dc d8 .4q>.<..6.E..<.. 0110 fb 56 12 43 bb e6 ec b2 03 bd 4d 7d aa 60 3f ff .V.C......M}.`?. 0120 1e ba 5c 5d 2e 0a fa ab ab b0 81 44 77 38 f5 59 ..\].......Dw8.Y 0130 a6 e0 1a 89 82 bc 0d b7 ba 22 6a 3d 1c 7f 56 29 ........."j=..V) 0140 cb 56 01 47 ac 34 3c 8f 2a 31 47 88 b0 3f 3b d0 .V.G.4<.*1G..?;. 0150 f2 f4 9f c1 6e cb 2e 53 d5 cc 60 0c 42 83 87 77 ....n..S..`.B..w 0160 5e c5 04 9b f1 aa 67 7b c8 bf 54 a1 7d 05 96 50 ^.....g{..T.}..P 0170 13 6e e8 8d ad 8c a4 d5 e6 ba 24 ba 1e 7d e4 77 .n........$..}.w 0180 4a 57 d3 e8 44 1c fe 14 ed 72 1e d7 64 f7 b8 c1 JW..D....r..d... 0190 85 f5 c2 1a b4 61 50 42 bd 7d c4 cf c6 88 44 5b .....aPB.}....D[ 01a0 0f 2f 0a c9 89 3c 44 f9 4f ce 0b a0 97 34 ad cd ./....@.?_. 0210 a4 e5 bc 9b 94 c9 1b 64 43 2e 0a 88 70 c8 01 ce .......dC...p... 0220 67 59 cb 6e 8f 5a 11 5a 5b bf 93 92 90 50 eb 82 gY.n.Z.Z[....P.. 0230 82 11 ef b9 dc d5 6d 4e c6 5b 73 86 1c c0 dd 63 ......mN.[s....c 0240 2d 3a 89 bc 8f 9f a8 2e 87 d4 65 03 47 8f 19 7a -:........e.G..z 0250 a2 2b e8 b2 32 b6 54 90 81 01 57 bc f1 e8 ff 44 .+..2.T...W....D 0260 62 aa 70 a8 ce c7 c9 04 ba 5e cf 83 67 30 60 bb b.p......^..g0`. 0270 a2 5f bb 4b e5 77 8f 05 88 c8 c1 0b da 80 46 17 ._.K.w........F. 0280 dd 11 ac 28 cd 63 cf 41 1c f6 46 05 bd 55 55 92 ...(.c.A..F..UU. 0290 02 6a d8 b7 3e e6 08 14 6d f7 38 b6 39 2a 73 29 .j..>...m.8.9*s) 02a0 30 05 92 81 d5 df f6 34 1a 23 6c 50 31 86 f8 59 0......4.#lP1..Y 02b0 6f 83 12 0c 0d f6 17 5e 0c e8 36 7c e4 49 15 aa o......^..6|.I.. 02c0 4c c8 b5 47 88 0e 9e 25 78 ea 2d 2e 42 de 00 d6 L..G...%x.-.B... 02d0 1a 0b d2 e8 b6 1f 55 5b 83 44 70 df 45 69 ab 83 ......U[.Dp.Ei.. 02e0 d6 70 a8 5e 4c 3a 9c d3 77 ff ae dc f7 32 2c 35 .p.^L:..w....2,5 02f0 f3 53 78 e1 9b 18 bf a9 0c 04 97 a3 60 12 fe 5d .Sx.........`..] 0300 16 bc 4d 2d fe d9 64 88 9d b3 f9 d5 bc dc 50 4e ..M-..d.......PN 0310 ef 3a 89 06 bc 22 81 20 32 10 d2 3d 08 5e 51 59 .:...". 2..=.^QY 0320 07 9b 75 49 ef 41 ac 6d d9 fb 49 27 cb 63 b2 7c ..uI.A.m..I'.c.| 0330 a9 53 e1 ac 9f 11 7e 2f c5 02 c4 7d 4d 35 d1 94 .S....~/...}M5.. 0340 e3 4c 1d a3 e7 5d 87 b0 c4 a8 17 66 21 f8 71 0f .L...].....f!.q. 0350 69 5c 54 d2 d0 0c a7 89 f9 bf 64 94 90 61 56 76 i\T.......d..aVv 0360 66 74 d7 2d 76 6b 6e b4 3c e1 14 8d 10 01 f9 02 ft.-vkn.<....... 0370 ab a9 0f d3 7a 85 67 4f d0 e8 4e be bb 2f 22 0a ....z.gO..N../". 0380 00 dd c7 8f 83 33 a4 08 2c f2 ac 62 f7 7b b1 03 .....3..,..b.{.. 0390 bb dd 1d a2 ed 60 ed 13 a6 6f 93 7d 3b c2 cd a2 .....`...o.};... 03a0 83 38 cd e6 b3 a6 bd e5 29 28 e6 1d 9e 24 0e 85 .8......)(...$.. 03b0 cd 65 71 5a 47 be a6 63 36 5b 4e 93 75 fc 72 21 .eqZG..c6[N.u.r! 03c0 17 f2 71 77 e5 e8 de 97 a2 76 de 63 54 78 11 ec ..qw.....v.cTx.. 03d0 fd 3b 47 38 ba 43 c5 37 45 dd 51 22 a9 63 4e ed .;G8.C.7E.Q".cN. 03e0 7a f3 f0 c0 a3 d2 2f bb 08 cb e1 d5 ec d5 68 37 z...../.......h7 03f0 91 a0 72 57 2d 7f 34 e6 34 d2 9f ef bf 1d de 12 ..rW-.4.4....... 0400 b5 3d 87 a6 78 5a 4d 4b 8d 54 c6 80 09 fe 71 87 .=..xZMK.T....q. 0410 7e 25 2e c6 f2 1e 20 2f e4 18 0e 09 5a b9 62 b4 ~%.... /....Z.b. 0420 5b 3d 3e 8e 7f 8d cb b5 2e 68 a1 92 32 75 70 d7 [=>......h..2up. 0430 81 e9 a3 6e a7 6c f8 49 52 0e 17 f5 32 08 ee f9 ...n.l.IR...2... 0440 57 e9 a6 2a fe 38 24 ca 89 9b bf 48 d2 28 3c ae W..*.8$....H.(<. 0450 97 b2 07 72 c1 0a 57 80 49 b9 ee 92 d7 32 cf c9 ...r..W.I....2.. 0460 08 66 e7 bd 32 15 40 ab 49 10 e1 b3 c6 16 8c ae .f..2.@.I....... 0470 8f 69 31 cb f7 2b e2 c3 4e 70 d6 36 de e0 f7 3f .i1..+..Np.6...? 0480 11 f7 8f 11 ba 46 dd 67 92 44 f4 c6 8d 04 7e aa .....F.g.D....~. 0490 13 95 76 c4 3f cf 59 fb 34 ea e2 8c f1 4f 9f b4 ..v.?.Y.4....O.. 04a0 05 d2 90 46 32 0f a7 86 fd 4d 4e f6 a2 8f 30 84 ...F2....MN...0. 04b0 62 b9 76 0d 15 5a 2f d0 a5 87 a1 cb f5 42 93 d6 b.v..Z/......B.. 04c0 20 08 e4 c3 d9 45 ff 87 69 35 83 9a 9d 18 df 91 ....E..i5...... 04d0 f2 dc 7e 94 31 dd 51 9c 3f 1c 38 0d 4a b5 48 89 ..~.1.Q.?.8.J.H. 04e0 57 0b 81 b2 d6 c5 e1 4f 9b e4 dd 05 75 a3 bf 93 W......O....u... 04f0 f5 44 dc f3 1a b7 19 b3 9b b8 b7 6b 45 e2 17 61 .D.........kE..a 0500 50 d5 1d e9 75 b4 67 44 8c ae a4 70 cd b2 65 fa P...u.gD...p..e. 0510 e4 c1 04 03 69 73 b4 85 9d 5d f8 45 5a 77 fa a2 ....is...].EZw.. 0520 a5 46 e4 a5 dc 77 1b ba d5 d3 27 89 15 96 9d 31 .F...w....'....1 0530 5e 63 4e 61 38 8b 03 b4 f8 89 1d 0b 1d 4c cc 1a ^cNa8........L.. 0540 91 90 2b 6f b2 72 b9 c7 b7 50 b5 e2 86 51 5d 09 ..+o.r...P...Q]. 0550 92 5d b1 f0 7f 95 1f 64 b0 84 0f 8c 35 de 72 f8 .].....d....5.r. 0560 e7 de 0f 1c a5 54 26 8d 3d ca 0f 95 3e 92 3d 2d .....T&.=...>.=- 0570 d5 bf b5 73 81 cb 16 04 4b c2 56 94 ab de d4 6f ...s....K.V....o 0580 70 ee 6d f4 fa 7a 2f 99 e5 89 44 18 b2 eb c3 eb p.m..z/...D..... 0590 d1 7c b5 89 53 a2 d2 d9 76 1e aa 45 e4 f7 e3 67 .|..S...v..E...g 05a0 69 b7 e2 df 90 i.... No. Time Source Destination Protocol Info 200 12:37:51.568788 192.168.11.43 167.235.7.45 TCP https > 55752 [ACK] Seq=4783 Ack=1834 Win=64480 Len=0 TSV=174427224 TSER=107653957 Frame 200: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_23:f1:a5 (00:1e:37:23:f1:a5) Internet Protocol, Src: 192.168.11.43 (192.168.11.43), Dst: 167.235.7.45 (167.235.7.45) Transmission Control Protocol, Src Port: https (443), Dst Port: 55752 (55752), Seq: 4783, Ack: 1834, Len: 0 0000 00 1e 37 23 f1 a5 00 15 2b a6 ad bf 08 00 45 00 ..7#....+.....E. 0010 00 34 16 a7 40 00 7e 06 6b 31 c0 a8 0b 2b a7 eb .4..@.~.k1...+.. 0020 07 2d 01 bb d9 c8 14 1f 0f a5 6e fa f9 46 80 10 .-........n..F.. 0030 fb e0 4f fa 00 00 01 01 08 0a 0a 65 8c 58 06 6a ..O........e.X.j 0040 ab 45 .E No. Time Source Destination Protocol Info 201 12:37:51.571271 192.168.11.43 167.235.7.45 TLSv1 Application Data Frame 201: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_23:f1:a5 (00:1e:37:23:f1:a5) Internet Protocol, Src: 192.168.11.43 (192.168.11.43), Dst: 167.235.7.45 (167.235.7.45) Transmission Control Protocol, Src Port: https (443), Dst Port: 55752 (55752), Seq: 4783, Ack: 2335, Len: 1448 Secure Socket Layer 0000 00 1e 37 23 f1 a5 00 15 2b a6 ad bf 08 00 45 00 ..7#....+.....E. 0010 05 dc 16 ad 40 00 7e 06 65 83 c0 a8 0b 2b a7 eb ....@.~.e....+.. 0020 07 2d 01 bb d9 c8 14 1f 0f a5 6e fa fb 3b 80 10 .-........n..;.. 0030 ff ff aa 05 00 00 01 01 08 0a 0a 65 8c 58 06 6a ...........e.X.j 0040 ab f4 17 03 01 00 20 9a 40 82 74 fb a8 cc e4 55 ...... .@.t....U 0050 45 25 f8 dc c8 e9 19 b4 0a 67 d5 b5 d5 2c 64 2e E%.......g...,d. 0060 7a 29 a6 3c 0a bb c7 17 03 01 05 a0 d0 71 61 f5 z).<.........qa. 0070 48 09 ff 8e 20 d3 4a 23 d6 76 3b 6b 4a 62 0f d0 H... .J#.v;kJb.. 0080 0e fd 8b 8e 1b 4c 96 e0 9e 2a 9d 49 07 ec e4 c3 .....L...*.I.... 0090 b0 5d b1 19 ef 1d d6 60 19 58 2d 49 d5 6a 49 de .].....`.X-I.jI. 00a0 00 29 7b 3c f5 c7 9c 81 f0 f0 a8 1e a1 ab 22 89 .){<..........". 00b0 70 4a ee 43 c9 3f 9f c6 be ea 23 dd 7e 0e 2d c0 pJ.C.?....#.~.-. 00c0 4c f3 b9 99 d4 68 8a 65 91 be 17 82 fc e5 ed be L....h.e........ 00d0 bb ec 74 3c d0 6f 7c 60 ef 55 2e 11 87 28 a2 49 ..t<.o|`.U...(.I 00e0 a4 96 87 a5 c0 71 be 25 c7 91 87 ef 08 1f 11 89 .....q.%........ 00f0 23 26 2e e1 15 18 f0 91 5c 2c 91 da 72 ef 47 6d #&......\,..r.Gm 0100 49 1a 9d 71 7c 52 ae e8 50 f0 7f b1 71 a0 c3 ea I..q|R..P...q... 0110 52 66 37 c9 f7 3d 79 13 53 d2 da d9 95 d3 bf 8a Rf7..=y.S....... 0120 68 11 66 ab f3 18 d6 90 55 8a e9 16 ce c1 72 1c h.f.....U.....r. 0130 62 6d 7e 35 18 84 b6 90 7b 17 1d 82 1a 59 90 d7 bm~5....{....Y.. 0140 80 ae e9 5d 9c b7 a0 d3 d3 88 fd 04 81 6a 8e 46 ...].........j.F 0150 e2 07 07 20 51 23 57 14 2e bd 9d 98 80 c0 df 36 ... Q#W........6 0160 b9 33 35 6e ac b7 92 e8 56 b2 b1 22 42 80 1f f6 .35n....V.."B... 0170 a8 9f f0 68 c7 91 4d 56 f5 28 4e fd 26 05 4a 4c ...h..MV.(N.&.JL 0180 f9 02 65 33 c3 12 97 1b a6 a9 0b c0 82 a4 04 b8 ..e3............ 0190 44 98 53 c9 03 b2 6a 21 b5 12 5e a1 e5 ac f3 8e D.S...j!..^..... 01a0 2d f0 c8 1c 73 42 e7 e9 c2 3e 63 37 ab 0e 5e 68 -...sB...>c7..^h 01b0 7e 7c 7a 7a 8e 8a e5 b9 ef 3d 9f dd 35 6e cd 56 ~|zz.....=..5n.V 01c0 22 4f b7 84 12 c9 9a d3 20 c8 7a aa 75 43 9c 05 "O...... .z.uC.. 01d0 d1 df 65 4e 32 bf d5 69 0e 04 fd d1 80 ef bc 78 ..eN2..i.......x 01e0 e7 55 a4 7d 19 e4 f5 63 6e c6 7c d0 b6 cf 39 81 .U.}...cn.|...9. 01f0 ab 71 b7 98 db 27 66 ee d9 bd 95 41 8b a0 ce 33 .q...'f....A...3 0200 1c f9 e3 0f df 81 47 8f 2b a5 da be 42 4a 97 18 ......G.+...BJ.. 0210 ce 10 c4 a5 8d f2 d2 4b 82 73 13 00 62 40 4d 76 .......K.s..b@Mv 0220 2e 49 33 17 93 8e 5c a6 7e bb 37 84 b1 98 23 20 .I3...\.~.7...# 0230 0a c1 9e 68 ad 57 51 8c fe c9 33 fc 14 45 5c 19 ...h.WQ...3..E\. 0240 b6 b9 16 ff 32 c7 fd 80 18 af a0 33 3a 0e 07 a4 ....2......3:... 0250 14 68 29 22 4b 85 4e ce 8c b2 2e c4 83 3f 47 53 .h)"K.N......?GS 0260 54 73 69 17 a8 36 fc df cb 71 14 56 a9 a9 8c b1 Tsi..6...q.V.... 0270 01 0a ea 5b 30 0f 56 ff d1 a7 ee c4 9a 59 32 76 ...[0.V......Y2v 0280 51 5b bb 7e 63 35 9c 2e fe e9 5f 9a 75 47 42 9b Q[.~c5...._.uGB. 0290 64 73 d5 9a 59 55 1d 9f d3 9b 60 1f 88 92 d7 fc ds..YU....`..... 02a0 17 bf 24 a6 86 d6 4c 11 db 6c e6 a9 af 64 4f d0 ..$...L..l...dO. 02b0 16 2e d7 8e b1 74 41 86 e9 90 d1 8e 42 1d 2d 05 .....tA.....B.-. 02c0 f4 22 e3 f6 dc 99 cb b2 a4 77 2f 29 da ee 2b fb .".......w/)..+. 02d0 92 fa 95 06 f1 5e 17 da 87 4c 9c 0a 12 db 78 1f .....^...L....x. 02e0 ab 8b 19 87 2e 66 6e dc 5d b4 a0 8d 92 47 e4 12 .....fn.]....G.. 02f0 65 a2 30 46 c3 6d 53 92 8c e4 80 a3 9f c1 2c 91 e.0F.mS.......,. 0300 b9 ca 54 5d 59 82 40 99 92 f0 ae 59 65 3f 9f 28 ..T]Y.@....Ye?.( 0310 d7 b1 cf 8a 58 7f c7 7d 0c 24 1c 0a 92 ee 06 6d ....X..}.$.....m 0320 58 6d c8 65 ab 9a a0 25 41 18 3d 89 56 3e 76 b9 Xm.e...%A.=.V>v. 0330 f4 48 96 14 2f d5 ea 46 96 25 fa c0 e1 fb 2f 02 .H../..F.%..../. 0340 fc cd c3 ef d7 a4 c5 11 aa c7 eb c9 c0 12 61 34 ..............a4 0350 57 aa be 28 74 38 0d 6e 7e 0a 9a 38 29 27 69 f5 W..(t8.n~..8)'i. 0360 5a ea 08 38 a7 64 29 b0 99 ac ad 01 f2 82 97 0d Z..8.d)......... 0370 df 29 6f ac 33 d3 8b ac 81 76 d2 e4 ff 41 e0 2e .)o.3....v...A.. 0380 58 2f 2b 49 f6 ab 63 2e 71 9d e2 54 87 50 4c d5 X/+I..c.q..T.PL. 0390 d4 2c d9 7e 7d 4c c1 b3 9b 40 c7 fb 62 ac 82 42 .,.~}L...@..b..B 03a0 e1 a1 09 43 d1 ff ac 8a 06 7d 16 5f 58 2c 4a 21 ...C.....}._X,J! 03b0 c7 55 3d 86 ad e1 9d b8 0f 18 f8 87 fd ad 5e 3d .U=...........^= 03c0 81 2f 4d ae 69 62 8f a0 14 19 d2 0a 03 a9 d0 0d ./M.ib.......... 03d0 69 1c 83 31 39 06 aa fb aa f2 20 e4 84 94 59 f5 i..19..... ...Y. 03e0 fa dc af 39 6f 3c c0 f8 1e 0f 12 dd 57 69 9a 60 ...9o<......Wi.` 03f0 d2 f5 13 76 af 96 24 a4 47 bc 11 11 1b f0 4d 42 ...v..$.G.....MB 0400 f6 2c e9 4d e9 5a 56 f9 ce 48 58 48 32 13 bf fb .,.M.ZV..HXH2... 0410 1f e2 bf d0 da 78 81 3a d1 4b 14 46 fc ec e6 f0 .....x.:.K.F.... 0420 90 71 be 09 39 b1 5b 3f 62 33 4a 44 f0 2c 4c 1a .q..9.[?b3JD.,L. 0430 e7 f4 fc b2 2c d8 b5 2d ad 86 ea 2f bc f7 e8 6c ....,..-.../...l 0440 b7 c4 c6 c2 c8 eb c8 32 75 d4 9c 6b 70 83 c9 00 .......2u..kp... 0450 55 5e 75 d3 d2 4e db 17 0b d5 f9 34 d2 86 69 37 U^u..N.....4..i7 0460 1e f4 80 ab 79 8c fd a4 2d f7 cc b4 61 7d ef 93 ....y...-...a}.. 0470 2b 77 1c d6 10 ab f5 f0 c7 a9 2f b9 75 dd 0b 5d +w......../.u..] 0480 a5 cd 55 83 b2 86 40 85 18 ef 0e d3 8a 83 d9 07 ..U...@......... 0490 60 72 a5 b6 15 ff e2 d2 99 7b a1 3f b6 fe 3f 33 `r.......{.?..?3 04a0 47 15 f4 86 a4 37 6c db 72 e7 31 68 f4 85 79 b8 G....7l.r.1h..y. 04b0 56 8b d2 04 d8 aa 36 83 e9 1c 0f c9 87 d7 2a 72 V.....6.......*r 04c0 5e f4 3e 5e e2 25 62 c4 17 16 15 9c 03 ee 9d f4 ^.>^.%b......... 04d0 0b d4 97 66 09 18 89 22 f2 c8 05 44 86 fe 18 60 ...f..."...D...` 04e0 36 05 dc 7e 02 59 22 ec d6 c2 0a b1 9b 07 45 e3 6..~.Y".......E. 04f0 08 48 31 ae 26 f6 2f 0e e9 04 d1 59 8f 85 dc 98 .H1.&./....Y.... 0500 8f cb 5a 83 6e c0 aa dc 26 1f 40 ba cb 37 87 60 ..Z.n...&.@..7.` 0510 77 b3 d8 20 bf 31 37 07 74 83 de 78 14 59 29 5b w.. .17.t..x.Y)[ 0520 f6 ba bf 84 a3 2e 3e 4d cd c9 70 e5 48 e4 dd da ......>M..p.H... 0530 68 66 0d 33 2f 5b 34 28 f7 18 b3 32 7b 6a b5 a1 hf.3/[4(...2{j.. 0540 fc b7 63 3f 01 9c 09 52 92 16 63 83 fd f5 4f 4d ..c?...R..c...OM 0550 d4 a5 ec d9 9a 4e e5 e6 28 ab 74 10 87 15 d5 f6 .....N..(.t..... 0560 d4 1f 19 09 f5 ab 83 f7 bc a6 7b 10 3f 8e b4 81 ..........{.?... 0570 0d 83 1c 29 e4 99 61 2b b4 61 1b 11 d3 fd 33 4d ...)..a+.a....3M 0580 c4 2e 05 7b 4b e9 99 20 58 89 f4 61 ef 19 d3 3c ...{K.. X..a...< 0590 cd 0d 87 9a 83 c4 9a 3f 56 b9 08 01 7e 44 fe 74 .......?V...~D.t 05a0 5b 0c b2 82 9a fd e9 db 57 19 89 89 b2 16 c9 a9 [.......W....... 05b0 de c8 6d 96 62 d8 f9 e5 18 09 bc ba ee 82 0c 35 ..m.b..........5 05c0 42 fb 80 c7 5c 40 e3 fc 45 69 42 67 ec f4 01 c6 B...\@..EiBg.... 05d0 4e b5 96 f4 55 4a 41 17 3e b5 0f 4a 5a 05 e6 d7 N...UJA.>..JZ... 05e0 ff fb 74 fd 0d c0 cd 4a b2 67 ..t....J.g No. Time Source Destination Protocol Info 202 12:37:51.571291 192.168.11.43 167.235.7.45 TLSv1 Application Data Frame 202: 100 bytes on wire (800 bits), 100 bytes captured (800 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_23:f1:a5 (00:1e:37:23:f1:a5) Internet Protocol, Src: 192.168.11.43 (192.168.11.43), Dst: 167.235.7.45 (167.235.7.45) Transmission Control Protocol, Src Port: https (443), Dst Port: 55752 (55752), Seq: 6231, Ack: 2335, Len: 34 [Reassembled TCP Segments (1445 bytes): #201(1411), #202(34)] Secure Socket Layer Frame (100 bytes): 0000 00 1e 37 23 f1 a5 00 15 2b a6 ad bf 08 00 45 00 ..7#....+.....E. 0010 00 56 16 ae 40 00 7e 06 6b 08 c0 a8 0b 2b a7 eb .V..@.~.k....+.. 0020 07 2d 01 bb d9 c8 14 1f 15 4d 6e fa fb 3b 80 18 .-.......Mn..;.. 0030 ff ff 08 7b 00 00 01 01 08 0a 0a 65 8c 58 06 6a ...{.......e.X.j 0040 ab f4 51 e5 57 01 a4 b6 75 aa 2f e4 63 5c f0 50 ..Q.W...u./.c\.P 0050 04 41 be 4b 2b 4b 83 4e b6 8e 0b 6a 44 0b de c6 .A.K+K.N...jD... 0060 73 8a 2a 95 s.*. Reassembled TCP (1445 bytes): 0000 17 03 01 05 a0 d0 71 61 f5 48 09 ff 8e 20 d3 4a ......qa.H... .J 0010 23 d6 76 3b 6b 4a 62 0f d0 0e fd 8b 8e 1b 4c 96 #.v;kJb.......L. 0020 e0 9e 2a 9d 49 07 ec e4 c3 b0 5d b1 19 ef 1d d6 ..*.I.....]..... 0030 60 19 58 2d 49 d5 6a 49 de 00 29 7b 3c f5 c7 9c `.X-I.jI..){<... 0040 81 f0 f0 a8 1e a1 ab 22 89 70 4a ee 43 c9 3f 9f .......".pJ.C.?. 0050 c6 be ea 23 dd 7e 0e 2d c0 4c f3 b9 99 d4 68 8a ...#.~.-.L....h. 0060 65 91 be 17 82 fc e5 ed be bb ec 74 3c d0 6f 7c e..........t<.o| 0070 60 ef 55 2e 11 87 28 a2 49 a4 96 87 a5 c0 71 be `.U...(.I.....q. 0080 25 c7 91 87 ef 08 1f 11 89 23 26 2e e1 15 18 f0 %........#&..... 0090 91 5c 2c 91 da 72 ef 47 6d 49 1a 9d 71 7c 52 ae .\,..r.GmI..q|R. 00a0 e8 50 f0 7f b1 71 a0 c3 ea 52 66 37 c9 f7 3d 79 .P...q...Rf7..=y 00b0 13 53 d2 da d9 95 d3 bf 8a 68 11 66 ab f3 18 d6 .S.......h.f.... 00c0 90 55 8a e9 16 ce c1 72 1c 62 6d 7e 35 18 84 b6 .U.....r.bm~5... 00d0 90 7b 17 1d 82 1a 59 90 d7 80 ae e9 5d 9c b7 a0 .{....Y.....]... 00e0 d3 d3 88 fd 04 81 6a 8e 46 e2 07 07 20 51 23 57 ......j.F... Q#W 00f0 14 2e bd 9d 98 80 c0 df 36 b9 33 35 6e ac b7 92 ........6.35n... 0100 e8 56 b2 b1 22 42 80 1f f6 a8 9f f0 68 c7 91 4d .V.."B......h..M 0110 56 f5 28 4e fd 26 05 4a 4c f9 02 65 33 c3 12 97 V.(N.&.JL..e3... 0120 1b a6 a9 0b c0 82 a4 04 b8 44 98 53 c9 03 b2 6a .........D.S...j 0130 21 b5 12 5e a1 e5 ac f3 8e 2d f0 c8 1c 73 42 e7 !..^.....-...sB. 0140 e9 c2 3e 63 37 ab 0e 5e 68 7e 7c 7a 7a 8e 8a e5 ..>c7..^h~|zz... 0150 b9 ef 3d 9f dd 35 6e cd 56 22 4f b7 84 12 c9 9a ..=..5n.V"O..... 0160 d3 20 c8 7a aa 75 43 9c 05 d1 df 65 4e 32 bf d5 . .z.uC....eN2.. 0170 69 0e 04 fd d1 80 ef bc 78 e7 55 a4 7d 19 e4 f5 i.......x.U.}... 0180 63 6e c6 7c d0 b6 cf 39 81 ab 71 b7 98 db 27 66 cn.|...9..q...'f 0190 ee d9 bd 95 41 8b a0 ce 33 1c f9 e3 0f df 81 47 ....A...3......G 01a0 8f 2b a5 da be 42 4a 97 18 ce 10 c4 a5 8d f2 d2 .+...BJ......... 01b0 4b 82 73 13 00 62 40 4d 76 2e 49 33 17 93 8e 5c K.s..b@Mv.I3...\ 01c0 a6 7e bb 37 84 b1 98 23 20 0a c1 9e 68 ad 57 51 .~.7...# ...h.WQ 01d0 8c fe c9 33 fc 14 45 5c 19 b6 b9 16 ff 32 c7 fd ...3..E\.....2.. 01e0 80 18 af a0 33 3a 0e 07 a4 14 68 29 22 4b 85 4e ....3:....h)"K.N 01f0 ce 8c b2 2e c4 83 3f 47 53 54 73 69 17 a8 36 fc ......?GSTsi..6. 0200 df cb 71 14 56 a9 a9 8c b1 01 0a ea 5b 30 0f 56 ..q.V.......[0.V 0210 ff d1 a7 ee c4 9a 59 32 76 51 5b bb 7e 63 35 9c ......Y2vQ[.~c5. 0220 2e fe e9 5f 9a 75 47 42 9b 64 73 d5 9a 59 55 1d ..._.uGB.ds..YU. 0230 9f d3 9b 60 1f 88 92 d7 fc 17 bf 24 a6 86 d6 4c ...`.......$...L 0240 11 db 6c e6 a9 af 64 4f d0 16 2e d7 8e b1 74 41 ..l...dO......tA 0250 86 e9 90 d1 8e 42 1d 2d 05 f4 22 e3 f6 dc 99 cb .....B.-.."..... 0260 b2 a4 77 2f 29 da ee 2b fb 92 fa 95 06 f1 5e 17 ..w/)..+......^. 0270 da 87 4c 9c 0a 12 db 78 1f ab 8b 19 87 2e 66 6e ..L....x......fn 0280 dc 5d b4 a0 8d 92 47 e4 12 65 a2 30 46 c3 6d 53 .]....G..e.0F.mS 0290 92 8c e4 80 a3 9f c1 2c 91 b9 ca 54 5d 59 82 40 .......,...T]Y.@ 02a0 99 92 f0 ae 59 65 3f 9f 28 d7 b1 cf 8a 58 7f c7 ....Ye?.(....X.. 02b0 7d 0c 24 1c 0a 92 ee 06 6d 58 6d c8 65 ab 9a a0 }.$.....mXm.e... 02c0 25 41 18 3d 89 56 3e 76 b9 f4 48 96 14 2f d5 ea %A.=.V>v..H../.. 02d0 46 96 25 fa c0 e1 fb 2f 02 fc cd c3 ef d7 a4 c5 F.%..../........ 02e0 11 aa c7 eb c9 c0 12 61 34 57 aa be 28 74 38 0d .......a4W..(t8. 02f0 6e 7e 0a 9a 38 29 27 69 f5 5a ea 08 38 a7 64 29 n~..8)'i.Z..8.d) 0300 b0 99 ac ad 01 f2 82 97 0d df 29 6f ac 33 d3 8b ..........)o.3.. 0310 ac 81 76 d2 e4 ff 41 e0 2e 58 2f 2b 49 f6 ab 63 ..v...A..X/+I..c 0320 2e 71 9d e2 54 87 50 4c d5 d4 2c d9 7e 7d 4c c1 .q..T.PL..,.~}L. 0330 b3 9b 40 c7 fb 62 ac 82 42 e1 a1 09 43 d1 ff ac ..@..b..B...C... 0340 8a 06 7d 16 5f 58 2c 4a 21 c7 55 3d 86 ad e1 9d ..}._X,J!.U=.... 0350 b8 0f 18 f8 87 fd ad 5e 3d 81 2f 4d ae 69 62 8f .......^=./M.ib. 0360 a0 14 19 d2 0a 03 a9 d0 0d 69 1c 83 31 39 06 aa .........i..19.. 0370 fb aa f2 20 e4 84 94 59 f5 fa dc af 39 6f 3c c0 ... ...Y....9o<. 0380 f8 1e 0f 12 dd 57 69 9a 60 d2 f5 13 76 af 96 24 .....Wi.`...v..$ 0390 a4 47 bc 11 11 1b f0 4d 42 f6 2c e9 4d e9 5a 56 .G.....MB.,.M.ZV 03a0 f9 ce 48 58 48 32 13 bf fb 1f e2 bf d0 da 78 81 ..HXH2........x. 03b0 3a d1 4b 14 46 fc ec e6 f0 90 71 be 09 39 b1 5b :.K.F.....q..9.[ 03c0 3f 62 33 4a 44 f0 2c 4c 1a e7 f4 fc b2 2c d8 b5 ?b3JD.,L.....,.. 03d0 2d ad 86 ea 2f bc f7 e8 6c b7 c4 c6 c2 c8 eb c8 -.../...l....... 03e0 32 75 d4 9c 6b 70 83 c9 00 55 5e 75 d3 d2 4e db 2u..kp...U^u..N. 03f0 17 0b d5 f9 34 d2 86 69 37 1e f4 80 ab 79 8c fd ....4..i7....y.. 0400 a4 2d f7 cc b4 61 7d ef 93 2b 77 1c d6 10 ab f5 .-...a}..+w..... 0410 f0 c7 a9 2f b9 75 dd 0b 5d a5 cd 55 83 b2 86 40 .../.u..]..U...@ 0420 85 18 ef 0e d3 8a 83 d9 07 60 72 a5 b6 15 ff e2 .........`r..... 0430 d2 99 7b a1 3f b6 fe 3f 33 47 15 f4 86 a4 37 6c ..{.?..?3G....7l 0440 db 72 e7 31 68 f4 85 79 b8 56 8b d2 04 d8 aa 36 .r.1h..y.V.....6 0450 83 e9 1c 0f c9 87 d7 2a 72 5e f4 3e 5e e2 25 62 .......*r^.>^.%b 0460 c4 17 16 15 9c 03 ee 9d f4 0b d4 97 66 09 18 89 ............f... 0470 22 f2 c8 05 44 86 fe 18 60 36 05 dc 7e 02 59 22 "...D...`6..~.Y" 0480 ec d6 c2 0a b1 9b 07 45 e3 08 48 31 ae 26 f6 2f .......E..H1.&./ 0490 0e e9 04 d1 59 8f 85 dc 98 8f cb 5a 83 6e c0 aa ....Y......Z.n.. 04a0 dc 26 1f 40 ba cb 37 87 60 77 b3 d8 20 bf 31 37 .&.@..7.`w.. .17 04b0 07 74 83 de 78 14 59 29 5b f6 ba bf 84 a3 2e 3e .t..x.Y)[......> 04c0 4d cd c9 70 e5 48 e4 dd da 68 66 0d 33 2f 5b 34 M..p.H...hf.3/[4 04d0 28 f7 18 b3 32 7b 6a b5 a1 fc b7 63 3f 01 9c 09 (...2{j....c?... 04e0 52 92 16 63 83 fd f5 4f 4d d4 a5 ec d9 9a 4e e5 R..c...OM.....N. 04f0 e6 28 ab 74 10 87 15 d5 f6 d4 1f 19 09 f5 ab 83 .(.t............ 0500 f7 bc a6 7b 10 3f 8e b4 81 0d 83 1c 29 e4 99 61 ...{.?......)..a 0510 2b b4 61 1b 11 d3 fd 33 4d c4 2e 05 7b 4b e9 99 +.a....3M...{K.. 0520 20 58 89 f4 61 ef 19 d3 3c cd 0d 87 9a 83 c4 9a X..a...<....... 0530 3f 56 b9 08 01 7e 44 fe 74 5b 0c b2 82 9a fd e9 ?V...~D.t[...... 0540 db 57 19 89 89 b2 16 c9 a9 de c8 6d 96 62 d8 f9 .W.........m.b.. 0550 e5 18 09 bc ba ee 82 0c 35 42 fb 80 c7 5c 40 e3 ........5B...\@. 0560 fc 45 69 42 67 ec f4 01 c6 4e b5 96 f4 55 4a 41 .EiBg....N...UJA 0570 17 3e b5 0f 4a 5a 05 e6 d7 ff fb 74 fd 0d c0 cd .>..JZ.....t.... 0580 4a b2 67 51 e5 57 01 a4 b6 75 aa 2f e4 63 5c f0 J.gQ.W...u./.c\. 0590 50 04 41 be 4b 2b 4b 83 4e b6 8e 0b 6a 44 0b de P.A.K+K.N...jD.. 05a0 c6 73 8a 2a 95 .s.*. No. Time Source Destination Protocol Info 203 12:37:51.610676 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 203: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 48961, Ack: 5167, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c ad 40 00 7e 06 f9 c2 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 2e 93 56 09 e6 64 50 18 ......@...V..dP. 0030 fc cc 2a c6 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..*......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 42 8a 0c ff 00 00 00 ff ...0....B....... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 204 12:37:51.611459 167.235.13.48 167.235.7.25 TCP netbios-ssn > spw-dialer [ACK] Seq=49537 Ack=5293 Win=64590 Len=0 Frame 204: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 49537, Ack: 5293, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9c ae 40 00 7e 06 fc 01 a7 eb 0d 30 a7 eb .(..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 30 d3 56 09 e6 e2 50 10 ......@.0.V...P. 0030 fc 4e 91 c0 00 00 00 00 00 00 00 00 .N.......... No. Time Source Destination Protocol Info 205 12:37:51.611553 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 205: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 49537, Ack: 5293, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c af 40 00 7e 06 f9 c0 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 30 d3 56 09 e6 e2 50 18 ......@.0.V...P. 0030 fc 4e e8 85 00 00 00 00 02 3c ff 53 4d 42 2e 00 .N.......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 82 8a 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 206 12:37:51.611606 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 206: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 50113, Ack: 5356, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c b0 40 00 7e 06 f9 bf a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 33 13 56 09 e7 21 50 18 ......@.3.V..!P. 0030 fc 0f a5 45 00 00 00 00 02 3c ff 53 4d 42 2e 00 ...E.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c3 8a 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 207 12:37:51.611656 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 207: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 50689, Ack: 5419, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c b1 40 00 7e 06 f9 be a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 35 53 56 09 e7 60 50 18 ......@.5SV..`P. 0030 fb d0 62 06 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..b......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 04 8b 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 208 12:37:51.611709 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 208: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 51265, Ack: 5419, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c b2 40 00 7e 06 f9 bd a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 37 93 56 09 e7 60 50 18 ......@.7.V..`P. 0030 fb d0 1e c6 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 45 8b 0c ff 00 00 00 ff ...0....E....... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 209 12:37:51.674517 74.125.224.55 167.235.7.71 TLSv1 Application Data Frame 209: 120 bytes on wire (960 bits), 120 bytes captured (960 bits) Ethernet II, Src: Cisco_f3:bd:bf (00:12:00:f3:bd:bf), Dst: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee) Internet Protocol, Src: 74.125.224.55 (74.125.224.55), Dst: 167.235.7.71 (167.235.7.71) Transmission Control Protocol, Src Port: https (443), Dst Port: 54688 (54688), Seq: 1, Ack: 1, Len: 54 Secure Socket Layer 0000 00 0d 60 2b e0 ee 00 12 00 f3 bd bf 08 00 45 00 ..`+..........E. 0010 00 6a d1 59 00 00 35 06 da 4d 4a 7d e0 37 a7 eb .j.Y..5..MJ}.7.. 0020 07 47 01 bb d5 a0 c5 37 cf 89 b9 05 04 d6 80 18 .G.....7........ 0030 01 a0 39 87 00 00 01 01 08 0a 6b cb 99 f1 1d c0 ..9.......k..... 0040 dd 03 17 03 01 00 31 e4 06 a7 dc 27 25 85 fe ac ......1....'%... 0050 13 aa c9 49 59 c0 e7 38 16 86 6a 7c 74 07 1b b2 ...IY..8..j|t... 0060 d3 74 78 8b 33 81 bc a7 19 0c f2 d6 b1 82 f0 3b .tx.3..........; 0070 6b 7c 0d 5b 99 80 bb 42 k|.[...B No. Time Source Destination Protocol Info 210 12:37:51.674589 167.235.7.71 74.125.224.55 TCP 54688 > https [ACK] Seq=1 Ack=55 Win=333 Len=0 TSV=499203998 TSER=1808505329 Frame 210: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 74.125.224.55 (74.125.224.55) Transmission Control Protocol, Src Port: 54688 (54688), Dst Port: https (443), Seq: 1, Ack: 55, Len: 0 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 00 34 a6 72 40 00 40 06 ba 6a a7 eb 07 47 4a 7d .4.r@.@..j...GJ} 0020 e0 37 d5 a0 01 bb b9 05 04 d6 c5 37 cf bf 80 10 .7.........7.... 0030 01 4d 0e 3e 00 00 01 01 08 0a 1d c1 3f 9e 6b cb .M.>........?.k. 0040 99 f1 .. No. Time Source Destination Protocol Info 211 12:37:51.851714 192.168.11.160 167.235.7.71 TCP irdmi > 36388 [PSH, ACK] Seq=1391 Ack=2314 Win=11392 Len=305 TSV=2592160001 TSER=499202930 Frame 211: 371 bytes on wire (2968 bits), 371 bytes captured (2968 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee) Internet Protocol, Src: 192.168.11.160 (192.168.11.160), Dst: 167.235.7.71 (167.235.7.71) Transmission Control Protocol, Src Port: irdmi (8000), Dst Port: 36388 (36388), Seq: 1391, Ack: 2314, Len: 305 Data (305 bytes) 0000 00 0d 60 2b e0 ee 00 15 2b a6 ad bf 08 00 45 00 ..`+....+.....E. 0010 01 65 1a 17 40 00 3d 06 a7 01 c0 a8 0b a0 a7 eb .e..@.=......... 0020 07 47 1f 40 8e 24 07 0a 3d 29 7a ee 20 be 80 18 .G.@.$..=)z. ... 0030 00 59 03 4f 00 00 01 01 08 0a 9a 81 39 01 1d c1 .Y.O........9... 0040 3b 72 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f ;rHTTP/1.1 200 O 0050 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 K..Content-Lengt 0060 68 3a 20 35 38 32 33 0d 0a 43 6f 6e 74 65 6e 74 h: 5823..Content 0070 2d 45 6e 63 6f 64 69 6e 67 3a 20 67 7a 69 70 0d -Encoding: gzip. 0080 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e .Vary: Accept-En 0090 63 6f 64 69 6e 67 0d 0a 53 65 72 76 65 72 3a 20 coding..Server: 00a0 43 68 65 72 72 79 50 79 2f 33 2e 31 2e 32 0d 0a CherryPy/3.1.2.. 00b0 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 38 20 41 70 Date: Mon, 18 Ap 00c0 72 20 32 30 31 31 20 31 39 3a 33 37 3a 35 30 20 r 2011 19:37:50 00d0 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 GMT..Content-Typ 00e0 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 e: text/html;cha 00f0 72 73 65 74 3d 75 74 66 2d 38 0d 0a 53 65 74 2d rset=utf-8..Set- 0100 43 6f 6f 6b 69 65 3a 20 73 65 73 73 69 6f 6e 5f Cookie: session_ 0110 69 64 5f 38 30 30 30 3d 63 37 38 63 30 39 35 66 id_8000=c78c095f 0120 39 66 62 64 63 33 32 33 32 66 64 63 38 31 66 61 9fbdc3232fdc81fa 0130 31 36 36 36 32 64 35 32 61 66 61 39 31 66 63 38 16662d52afa91fc8 0140 3b 20 65 78 70 69 72 65 73 3d 54 75 65 2c 20 31 ; expires=Tue, 1 0150 39 20 41 70 72 20 32 30 31 31 20 31 39 3a 33 37 9 Apr 2011 19:37 0160 3a 35 30 20 47 4d 54 3b 20 50 61 74 68 3d 2f 0d :50 GMT; Path=/. 0170 0a 0d 0a ... No. Time Source Destination Protocol Info 212 12:37:51.851914 192.168.11.160 167.235.7.71 TCP irdmi > 36388 [ACK] Seq=1696 Ack=2314 Win=11392 Len=1448 TSV=2592160001 TSER=499202930 Frame 212: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee) Internet Protocol, Src: 192.168.11.160 (192.168.11.160), Dst: 167.235.7.71 (167.235.7.71) Transmission Control Protocol, Src Port: irdmi (8000), Dst Port: 36388 (36388), Seq: 1696, Ack: 2314, Len: 1448 Data (1448 bytes) 0000 00 0d 60 2b e0 ee 00 15 2b a6 ad bf 08 00 45 00 ..`+....+.....E. 0010 05 dc 1a 18 40 00 3d 06 a2 89 c0 a8 0b a0 a7 eb ....@.=......... 0020 07 47 1f 40 8e 24 07 0a 3e 5a 7a ee 20 be 80 10 .G.@.$..>Zz. ... 0030 00 59 42 37 00 00 01 01 08 0a 9a 81 39 01 1d c1 .YB7........9... 0040 3b 72 1f 8b 08 00 0f 93 ac 4d 02 ff cd 3c fb 73 ;r.......M...<.s 0050 db 36 93 3f db 7f 05 c2 76 2a 29 67 91 71 72 bd .6.?....v*)g.qr. 0060 af f5 ab 9f 63 fb 5a df 39 8f a9 9c 4b 3b 9d 8e ....c.Z.9...K;.. 0070 06 22 21 0b 31 45 b0 04 68 59 6d f3 bf df ee 02 ."!.1E..hYm..... 0080 7c 8a b2 d3 34 56 6a cf d8 7c 00 bb 8b c5 62 5f |...4Vj..|....b_ 0090 58 f0 e0 d1 e9 ab 93 cb 9f 5f 9f b1 99 99 c7 ec X........_...... 00a0 f5 9b e7 17 e7 27 cc 1b 06 c1 db 67 27 41 70 7a .....'.....g'Apz 00b0 79 ca 7e fa e1 f2 c5 05 db f5 9f b0 91 c9 64 68 y.~...........dh 00c0 82 e0 ec a5 c7 bc 99 31 e9 5e 10 2c 16 0b 7f f1 .......1.^.,.... 00d0 cc 57 d9 55 70 f9 63 70 8b 50 76 b1 9b bb 1c 6a .W.Up.cp.Pv....j 00e0 ea e3 47 26 f2 8e b6 0f 08 c9 ed 3c 4e f4 61 07 ..G&........:..b... 0290 0a fd 1d 83 fb 28 d8 fa 5a 82 ba 8c c4 94 e7 b1 .....(..Z....... 02a0 29 fe 3f 14 b2 34 93 c9 1a e0 7f 83 61 73 15 e5 ).?..4......as.. 02b0 f0 a6 40 94 f0 9b e0 38 0c 55 9e 98 e7 3c fb 34 ..@....8.U...<.4 02c0 43 69 a1 80 55 ad f9 95 4c ae 82 17 74 25 d6 8c Ci..U...L...t%.. 02d0 69 9d 4c 7c 34 17 f7 9e 04 3c 4d 83 42 9b e0 4d i.L|4........V-..Z 02f0 f5 e7 60 a2 a2 25 0b 63 ae c1 d8 c2 ea ba 14 f3 ..`..%.c........ 0300 14 35 ff 50 0b 9e 85 33 06 8f fe 0f c4 71 88 6a .5.P...3.....q.j 0310 16 56 cc 1e 50 70 e8 95 da 0d 1e a0 b0 82 99 76 .V..Pp.........v 0320 af 23 09 1d f8 b2 f9 50 25 79 82 1a 32 e4 49 28 .#.....P%y..2.I( 0330 e2 77 6a 02 a8 2e b3 dc c2 03 ed 69 9f 83 a8 88 .wj........i.... 0340 ec 86 03 6f be 7d 02 36 bb 46 fd f6 f6 41 24 6f ...o.}.6.F...A$o 0350 98 8c 00 33 80 81 79 f0 8e 2e ec 05 98 ed 83 00 ...3..y......... 0360 5e 1e d9 26 6e 1c 40 81 ca 8d 33 fc db ee a7 31 ^..&n.@...3....1 0370 1b ab ad 7f 54 0b a6 12 71 a2 62 bc 82 51 9c c4 ....T...q.b..Q.. 0380 c0 81 a9 bc 65 e5 ec 7b 4d e3 b1 22 61 75 a0 d6 ....e..{M.."au.. 0390 06 bd 20 39 62 4e 6a bc 76 2f 1c 91 7b 37 7e 82 .. 9bNj.v/..{7~. 03a0 bf 65 8b a3 b5 88 0e 54 5c e0 70 5d 2f a4 36 a8 .e.....T\.p]/.6. 03b0 a6 54 7c 64 e7 99 f8 51 31 b0 7c d0 e0 11 4c e4 .T|d...Q1.|...L. 03c0 0f 20 0f 22 7b 9b c1 25 5a aa ed 35 ba ed af f2 . ."{..%Z..5.... 03d0 0b 16 a4 bc 22 19 b5 08 3e 9a 6d d5 aa ee e4 5c ...."...>.m....\ 03e0 f5 fa 83 99 57 88 41 6b a1 d6 78 95 97 dc e5 25 ....W.Ak..x....% 03f0 f8 73 23 e6 60 08 5a 1c 89 65 73 5c 17 ea ea 4a .s#.`.Z..es\...J 0400 44 4c 26 8c 6b f6 2e 95 b1 a8 cd 40 bd 31 f4 6c DL&.k......@.1.l 0410 e1 38 95 37 92 18 f5 e7 4a cb 26 8e 03 ee 94 c5 .8.7....J.&..... 0420 17 1e b1 a0 a6 0f f4 0b 91 e4 c7 a1 91 37 dc 80 .............7.. 0430 5b 76 74 9c a6 60 ff 52 9e d4 16 f7 39 b8 07 cc [vt..`.R....9... 0440 fd 1f 82 9f 00 0e 67 2c 86 cf 86 30 b8 af 92 89 ......g,...0.... 0450 4e f7 ed 5f b0 78 d0 0f 24 8a 1f 3d e0 10 0a 55 N.._.x..$..=...U 0460 cb 13 90 e1 2c a8 3c a6 17 f6 c9 66 d0 37 d4 2b ....,.<....f.7.+ 0470 a8 a6 b1 a5 67 0e 1e ad 57 e0 a8 1e 67 63 95 8a ....g...W...gc.. 0480 04 f1 fc 0f 68 b1 3b 28 6c ab fd 0f 24 b7 93 e4 ....h.;(l...$... 0490 4e b2 2d 9c 20 56 57 a4 e9 2e e8 7f 83 a0 26 51 N.-. VW.......&Q 04a0 07 41 1e 1f ad 2c 37 18 3d f6 3c 01 af 91 4b 1a .A...,7.=.<...K. 04b0 d7 5d fc f1 5a dd 3c 12 91 83 d9 ee 51 e1 7c 83 .]..Z.<.....Q.|. 04c0 8d d9 3d 72 fa e6 4e 5d 54 e9 a4 52 37 77 ab 98 ..=r..N]T..R7w.. 04d0 44 8d 80 53 10 da 80 d9 d4 e0 aa e8 e3 4c f0 ba D..S.........L.. 04e0 ba f1 1a e0 ef 56 53 75 b3 f2 d7 54 d1 08 4c 93 .....VSu...T..L. 04f0 c8 90 14 08 6f e2 3c ea d6 e5 2b ad fe 8a 62 2a ....o.<...+...b* 0500 9c d5 b5 5e 69 db 19 b0 ed 75 60 f8 44 4e 97 e8 ...^i....u`.DN.. 0510 ab ae 73 74 8b 68 d4 b3 e1 68 e5 d2 d6 4d 23 91 ..st.h...h...M#. 0520 80 5e 89 63 52 f0 98 a2 34 cd 78 12 31 68 2f 20 .^.cR...4.x.1h/ 0530 d6 9e 29 a3 d9 e3 80 35 f4 a8 5f 50 74 01 de 8d ..)....5.._Pt... 0540 86 68 fa 8b 3c 91 b7 a8 8e 18 b0 b3 7c 3b 24 65 .h..<.......|;$e 0550 a5 cd 70 61 0d 0e fb 63 7b cb 0d 7f c2 c3 eb ab ..pa...c{....... 0560 0c 04 3a 1a 52 34 bb c7 f2 2c ee df c5 04 c4 80 ..:.R4...,...... 0570 17 a8 c9 fc 14 4c f3 60 9f 68 79 7f 0f 65 10 29 .....L.`.hy..e.) 0580 1b b0 e4 00 32 33 22 7a 58 1a 9b b8 3e 86 5a 2b ....23"zX...>.Z+ 0590 82 af 4f ce 31 4c 8f 25 ba 49 a3 5c 1a f1 b0 74 ..O.1L.%.I.\...t 05a0 af c3 fa 31 23 b0 5e e4 c3 d2 6b 71 7c 0c 75 0b ...1#.^...kq|.u. 05b0 99 44 6a a1 1f 96 3c 87 64 1d 7d b0 16 dd a2 ab .Dj...<.d.}..... 05c0 bc 5c 68 7a c9 27 7a 08 fa 8b dc a7 ad 95 37 8b .\hz.'z.......7. 05d0 86 d3 b6 85 6e 4b ed b5 57 e9 40 37 20 83 4f 5d ....nK..W.@7 .O] 05e0 e3 86 7d da 6a 98 9d 86 76 dc ..}.j...v. No. Time Source Destination Protocol Info 213 12:37:51.851950 167.235.7.71 192.168.11.160 TCP 36388 > irdmi [ACK] Seq=2314 Ack=3144 Win=13056 Len=0 TSV=499204176 TSER=2592160001 Frame 213: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 192.168.11.160 (192.168.11.160) Transmission Control Protocol, Src Port: 36388 (36388), Dst Port: irdmi (8000), Seq: 2314, Ack: 3144, Len: 0 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 00 34 22 c0 40 00 40 06 9c 89 a7 eb 07 47 c0 a8 .4".@.@......G.. 0020 0b a0 8e 24 1f 40 7a ee 20 be 07 0a 44 02 80 10 ...$.@z. ...D... 0030 00 cc 34 c5 00 00 01 01 08 0a 1d c1 40 50 9a 81 ..4.........@P.. 0040 39 01 9. No. Time Source Destination Protocol Info 214 12:37:51.852036 192.168.11.160 167.235.7.71 TCP irdmi > 36388 [ACK] Seq=3144 Ack=2314 Win=11392 Len=1448 TSV=2592160001 TSER=499202930 Frame 214: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee) Internet Protocol, Src: 192.168.11.160 (192.168.11.160), Dst: 167.235.7.71 (167.235.7.71) Transmission Control Protocol, Src Port: irdmi (8000), Dst Port: 36388 (36388), Seq: 3144, Ack: 2314, Len: 1448 Data (1448 bytes) 0000 00 0d 60 2b e0 ee 00 15 2b a6 ad bf 08 00 45 00 ..`+....+.....E. 0010 05 dc 1a 19 40 00 3d 06 a2 88 c0 a8 0b a0 a7 eb ....@.=......... 0020 07 47 1f 40 8e 24 07 0a 44 02 7a ee 20 be 80 10 .G.@.$..D.z. ... 0030 00 59 8f 62 00 00 01 01 08 0a 9a 81 39 01 1d c1 .Y.b........9... 0040 3b 72 6a 7a 1c 00 62 bc 8b 6e c7 ed a1 b7 eb 1d ;rjz..b..n...... 0050 bd 15 71 08 fe fd 8a c9 d9 5a b5 68 5b 2d 23 18 ..q......Z.h[-#. 0060 e6 59 86 f6 f5 7e 7c 4f 1d be a7 de d1 cf 2a cf .Y...~|O......*. 0070 18 8c 4f b3 fe d7 83 fb b0 de 31 aa 15 4f 0a f1 ..O.......1..O.. 0080 3c 73 78 9e 59 b7 0a 13 8b 59 c2 63 f0 a1 34 f0 .S. 00f0 6d 23 71 bb c3 ec 82 db 61 3c 16 99 21 f3 90 89 m#q.....a<..!... 0100 54 c1 25 78 97 3c 59 22 90 88 1b be 83 be 30 58 T.%x.U,.i.Y`.Tp.g.. 0250 58 5e 0b b7 2e 01 ee 0e b0 25 91 08 12 af 69 99 X^.......%....i. 0260 da ab 72 a9 62 ea a4 ce b4 b5 bc 2a 98 e4 a4 e0 ..r.b......*.... 0270 21 44 aa 19 f1 d5 46 7f 16 49 63 97 95 26 c7 1a !D....F..Ic..&.. 0280 fe 59 8e 3a b5 50 5f b5 1f 3e 9a 92 4e 6d ac b6 .Y.:.P_..>..Nm.. 0290 2f a8 f8 14 23 ab fc 11 d0 ac f4 bf 3d 28 a7 5e /...#.......=(.^ 02a0 69 58 85 b8 3b da 9d ba ae 68 6f 09 6d 15 c3 ad iX..;....ho.m... 02b0 c6 3a 96 b4 a9 52 66 25 e1 72 c7 0d d0 75 aa 92 .:...Rf%.r...u.. 02c0 9e 61 0b 0e 0b 0d 64 4c 0b 61 15 9a 75 f8 bf 5b .a....dL.a..u..[ 02d0 1b ae 17 4e 57 0e da 2b 31 4e 97 06 10 68 24 57 ...NW..+1N...h$W 02e0 22 05 9a 16 2a 8b 02 ca 82 7c c7 43 7c 77 28 60 "...*....|.C|w(` 02f0 36 bd 23 76 42 4d ec f8 5d fa b9 9a 57 64 16 5a 6.#vBM..]...Wd.Z 0300 0d 27 10 34 e6 95 60 72 ab 61 29 9f 7e 80 a5 ec .'.4..`r.a).~... 0310 1c 3c 39 14 32 81 35 19 c7 b0 04 d1 ac d7 c2 d4 .<9.2.5......... 0320 3b 6d e6 73 d4 d3 85 1a 9b 82 fe 2a ac 11 f9 27 ;m.s.......*...' 0330 c0 46 58 eb a4 d6 e7 0a ac 01 78 71 4c 4d ed 88 .FX.......xqLM.. 0340 5d 3b 71 0b c6 4e 0a 30 69 6b b4 fd 47 e8 7f eb ];q..N.0ik..G... 0350 a2 76 38 3b ab 8f 8a 45 5d c4 69 de 3a 11 67 1d .v8;...E].i.:.g. 0360 b9 bb ad 2e c1 6b 7b cc 5e 87 07 f8 11 4b 09 09 .....k{.^....K.. 0370 ec 04 85 7f 1e bf 3c ff a9 0b cb 8a 6f 56 2c bd ......<.....oV,. 0380 b5 b1 3f fe 5c 3a 33 ce 51 cf 4e 81 d9 80 9f 5c ..?.\:3.Q.N....\ 0390 96 99 88 53 d4 d5 4e a5 ee 38 bf c5 6a 53 10 87 ...S..N..8..jS.. 03a0 7c 82 89 7c 58 78 ec 31 50 cb 30 7b 0e dd e6 da |..|Xx.1P.0{.... 03b0 b7 20 11 0c fa 65 9a 2d a4 99 a1 a8 a3 30 d8 f8 . ...e.-.....0.. 03c0 9b d2 85 68 4a 09 51 a8 40 10 43 b2 0b 27 af df ...hJ.Q.@.C..'.. 03d0 ec 40 44 a2 c1 58 9e 07 af 00 a5 00 3b b7 24 23 .@D..X......;.$# 03e0 d8 72 57 2c 19 40 32 ca f2 54 91 bf c6 63 ad 58 .rW,.@2..T...c.X 03f0 9a 29 cc 31 a1 a5 48 c0 8c 4a b4 a4 11 d7 b3 89 .).1..H..J...... 0400 e2 59 a4 c9 1b 9b 3b 8b 81 06 04 a1 90 a1 20 f9 .Y....;....... . 0410 9d 73 30 27 ce 7e 31 67 b5 2c fd 85 a0 b3 09 e8 .s0'.~1g.,...... 0420 87 df 85 df 39 01 69 97 ff 5f 2d e4 d5 0c d5 f6 ....9.i.._-..... 0430 5f 12 db d5 20 fe 1f 2b c0 2b be 45 b7 28 7f df _... ..+.+.E.(.. 0440 64 f5 a7 93 6a 00 dc 35 7f 3e ab 84 93 74 5a 94 d...j..5.>...tZ. 0450 87 c2 fa f8 34 fb e0 4b 83 90 96 ce 46 e1 67 f8 ....4..K....F.g. 0460 a4 35 51 e9 c5 dd 8e 49 e5 ce 59 3f dc 6d 22 a1 .5Q....I..Y?.m". 0470 70 49 90 42 6d 70 63 00 97 0e 38 8d d7 89 5a 80 pI.Bmpc...8...Z. 0480 e2 c5 95 e4 96 56 25 84 3b 45 44 41 4f 20 12 5b .....V%.;EDAO .[ 0490 7e 26 51 bb 2b 03 f3 8f 15 ba 75 44 af 15 3f 68 ~&Q.+.....uD..?h 04a0 ca aa b6 8c 1a 7f 3a 19 74 a2 d1 85 04 94 13 f8 ......:.t....... 04b0 75 20 87 20 52 66 21 e2 1b 41 cd 4e 47 23 10 80 u . Rf!..A.NG#.. 04c0 df 72 99 51 78 a8 9d 60 c4 ec e9 d3 6f 98 ce 27 .r.Qx..`....o..' 04d0 c3 c6 4b 49 b9 56 5c 3e 54 de 43 25 10 2a d6 0d ..KI.V\>T.C%.*.. 04e0 1f 18 b4 21 08 38 e8 60 95 5d 4f c1 78 83 16 9d ...!.8.`.]O.x... 04f0 89 f0 1a b9 a8 5b 6e 31 ad 19 d4 6f 0a 37 af e8 .....[n1...o.7.. 0500 65 24 04 66 81 70 57 b3 b4 e4 55 54 ca 52 b0 f2 e$.f.pW...UT.R.. 0510 b0 3c ea 0b 4c 33 30 5d 38 34 88 7e 69 41 50 c0 .<..L30]84.~iAP. 0520 a7 18 38 3f 51 2c 28 58 c5 15 02 51 4f 9e 01 84 ..8?Q,(X...QO... 0530 6a 08 04 16 d6 4f 3d 50 c6 00 a8 cb e5 05 76 92 j....O=P......v. 0540 c5 70 03 c0 b8 8c b8 44 f4 61 bc b4 d2 c7 22 c5 .p.....D.a....". 0550 b0 8a 49 37 0e e4 77 a4 e6 d0 17 70 64 a8 f5 13 ..I7..w....pd... 0560 8a c3 91 5e b8 98 2c 0d 28 06 e8 91 21 c5 4b 9f ...^..,.(...!.K. 0570 9d 4d a7 32 24 6b 52 f0 d2 5a 2f 0e f4 9b a1 c9 .M.2$kR..Z/..... 0580 b8 8c 81 16 62 15 a2 9f e4 12 1c 3c 20 cc ba 86 ....b......< ... 0590 b5 49 61 22 96 73 99 80 3e 20 57 89 a2 41 02 14 .Ia".s..> W..A.. 05a0 01 20 a0 15 f3 06 22 9c 25 0a 46 22 85 65 40 0a . ....".%.F".e@. 05b0 81 b3 c1 c9 04 7d 05 ff 81 77 33 ae 05 99 2c 74 .....}...w3...,t 05c0 3a ab 11 a1 04 11 45 40 70 89 26 4f 12 81 52 c0 :.....E@p.&O..R. 05d0 71 2c 30 a4 18 53 0e 04 17 1c 71 1e 92 80 18 55 q,0..S....q....U 05e0 80 47 76 d9 bc 81 66 d7 20 00 .Gv...f. . No. Time Source Destination Protocol Info 215 12:37:51.853721 192.168.11.160 167.235.7.71 TCP irdmi > 36388 [ACK] Seq=4592 Ack=2314 Win=11392 Len=1448 TSV=2592160003 TSER=499204176 Frame 215: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee) Internet Protocol, Src: 192.168.11.160 (192.168.11.160), Dst: 167.235.7.71 (167.235.7.71) Transmission Control Protocol, Src Port: irdmi (8000), Dst Port: 36388 (36388), Seq: 4592, Ack: 2314, Len: 1448 Data (1448 bytes) 0000 00 0d 60 2b e0 ee 00 15 2b a6 ad bf 08 00 45 00 ..`+....+.....E. 0010 05 dc 1a 1a 40 00 3d 06 a2 87 c0 a8 0b a0 a7 eb ....@.=......... 0020 07 47 1f 40 8e 24 07 0a 49 aa 7a ee 20 be 80 10 .G.@.$..I.z. ... 0030 00 59 8b 6f 00 00 01 01 08 0a 9a 81 39 03 1d c1 .Y.o........9... 0040 40 50 48 72 01 5a dc 86 22 b5 d9 02 e8 c0 19 20 @PHr.Z.."...... 0050 90 f3 7c ee 53 83 9c 28 9a 95 3a 11 84 1e 46 0d ..|.S..(..:...F. 0060 21 2d 9a 5c 3b 0d 2f 54 24 62 d6 1f 9d 9c bf 18 !-.\;./T$b...... 0070 58 9d 69 c4 55 86 34 92 0c 29 83 85 4c ae fb 48 X.i.U.4..)..L..H 0080 c5 39 75 a2 15 63 f9 50 24 a8 0a 02 7d 76 8c 2a .9u..c.P$...}v.* 0090 d6 a0 03 83 19 4a 60 e5 64 59 2e bc 4c 4d 61 68 .....J`.dY..LMah 00a0 96 a5 b8 45 21 51 d7 03 01 28 a0 4b 94 a2 c4 80 ...E!Q...(.K.... 00b0 8f 0e 74 13 ec 85 40 05 af 67 d6 c3 25 1d 7f d7 ..t...@..g..%... 00c0 0a a6 5c 09 8a 02 a6 2f 0c 90 f5 59 f4 74 95 67 ..\..../...Y.t.g 00d0 fe c7 6a e5 32 cc ec d6 c1 36 2e fc 94 fe ac 28 ..j.2....6.....( 00e0 52 79 64 e5 75 65 ce 8b b0 8b 2a 2e a6 1c a6 12 Ryd.ue....*..... 00f0 d7 5d 99 3d a8 19 5d bc ab 72 32 e8 59 d2 7a 77 .].=..]..r2.Y.zw 0100 7e 42 65 e9 11 94 2a f3 3b 2d eb 8e 2a a0 50 b0 ~Be...*.;-..*.P. 0110 ce d3 84 e0 12 85 dd 3a 9c 7e 9b 56 cc 17 4d 30 .......:.~.V..M0 0120 81 86 61 59 98 29 58 96 e4 92 80 7a e2 1a 15 30 ..aY.)X....z...0 0130 90 54 69 cc 75 29 c5 2a 9f d8 78 5c a4 16 77 5a .Ti.u).*..x\..wZ 0140 b9 c5 cf 22 b6 b5 0d 88 7f ac dc 3a 1a d7 0b 2e ...".......:.... 0150 cd 3a 48 d0 5b db f0 93 3b 0e 28 9c 0e 76 15 d5 .:H.[...;.(..v.. 0160 a4 99 18 5a db e2 e4 0f c3 a8 9d 5a 40 53 c9 9b ...Z.......Z@S.. 0170 8d 6a c8 8e 97 f1 4f 03 a8 cb 2e 59 4b af af 8d .j....O....YK... 0180 4a 6b 12 e3 b3 97 4e 13 a2 58 de 1f 04 16 40 9d Jk....N..X....@. 0190 f8 a1 53 ef 8c 08 25 a5 55 22 30 44 0c 1b de 42 ..S...%.U"0D...B 01a0 9d 1a cc 7d d2 de 71 44 e6 98 7f f2 88 b1 0a 18 ...}..qD........ 01b0 ed b2 46 cb 81 a9 8c 4c 50 b2 3e 5e 16 e9 69 05 ..F....LP.>^..i. 01c0 9d 6f 0a e3 bc 60 6f 5f 9c b3 b7 62 52 c4 9a 4d .o...`o_...bR..M 01d0 d5 61 c3 97 3c b5 39 59 e4 0d de 93 39 2e 18 72 .a..<.9Y....9..r 01e0 46 c9 dc 0b f0 65 ec 82 c7 02 15 8c 33 f5 86 03 F....e......3... 01f0 cd ad e6 06 0d d5 85 07 cc f0 09 7b 4a 15 e0 5b ...........{J..[ 0200 c5 2f bd 19 bd be 78 f3 f2 7f 9f 1f 8f ce d8 f1 ./....x......... 0210 eb d7 a3 a2 45 23 05 f5 ec 63 53 50 6e 5b 09 59 ....E#...cSPn[.Y 0220 58 6e 2d 7d 7c 0e 8a 40 7c a2 44 54 7d 3f ca d5 Xn-}|..@|.DT}?.. 0230 dc 8d 9e af 2a a2 aa 0a af d1 73 cd 0c 74 e9 ac ....*.....s..t.. 0240 39 a9 3e 32 e1 13 af 6b d6 8a 9c 5f 7b b2 9e d1 9.>2...k..._{... 0250 54 6c 37 9e b7 77 d6 6c 93 3b 0b 51 ea 95 75 55 Tl7..w.l.;.Q..uU 0260 9d 5c b3 3a a5 e3 a7 55 3f f6 70 85 dc 30 c9 a0 .\.:...U?.p..0.. 0270 f3 c6 20 22 63 5b d3 bd 89 da e7 b2 8a 5c ab e4 .. "c[.......\.. 0280 e9 26 11 ea c5 54 4d de 81 4a db 24 d2 29 44 92 .&...TM..J.$.)D. 0290 93 fc 6a a3 8c b5 e5 f9 b9 1c ee fa ff f2 9f fa ..j............. 02a0 21 38 d1 6a ee 43 18 b1 79 2a fc 5c fa b0 a0 c0 !8.j.C..y*.\.... 02b0 7e 81 bd 04 f7 fd 73 10 40 f8 a7 60 cd 3f 0b fe ~.....s.@..`.?.. 02c0 c9 95 9c 66 7c 2e 3e 13 ff 43 a5 ae a5 f8 0c 88 ...f|.>..C...... 02d0 31 1e dd 24 5a 10 34 0d 61 74 b2 d9 49 d6 26 9b 1..$Z.4.at..I.&. 02e0 e2 86 fc 26 70 c6 58 03 bc 91 d1 89 2c 53 1b 41 ...&p.X.....,S.A 02f0 a4 6d ea 60 13 a8 de a9 c9 26 d0 60 3d bf 48 ae .m.`.....&.`=.H. 0300 36 27 85 d0 61 33 33 85 b1 cf 86 26 6a b2 19 f6 6'..a33....&j... 0310 a1 7b 38 a6 04 c2 66 f0 f1 68 43 36 00 35 d2 38 .{8...f..hC6.5.8 0320 c3 94 e8 46 d8 48 55 cc e3 98 52 da 1b 91 10 3e ...F.HU...R....> 0330 9e 64 32 da cc e8 62 71 25 92 68 23 c3 b2 86 53 .d2...bq%.h#...S 0340 a7 3c bb 8e b1 3c 6e 03 38 53 95 e6 e9 46 d8 48 .<....@.. 03c0 43 63 cf 10 3d c0 d0 5b f8 4e 25 18 26 43 7b 38 Cc..=..[.N%.&C{8 03d0 9b 42 69 b7 61 44 b0 72 f2 e9 e1 51 b7 ce 7d 3f .Bi.aD.r...Q..}? 03e0 38 be d5 43 e0 f7 ca d2 d6 f6 fd 28 6d ce 33 08 8..C.......(m.3. 03f0 0e 1e fd 72 72 7a 7c 79 fc cb 76 b5 f5 e1 bb 69 ...rrz|y..v....i 0400 44 bf ed 35 cf f8 5c 33 76 c8 fe 58 3d f9 ba 07 D..5..\3v..X=... 0410 0f ed 29 6a 3c 97 f8 2a a1 43 7d b1 0c af e1 8d ..)j<..*.C}..... 0420 3d 6a bd c3 3c 18 8f c0 fb 69 1e c7 de 7b 78 b0 =j..<....i...{x. 0430 ee b8 1a 42 03 46 60 db 22 a3 ea d3 67 59 a0 0f ...B.F`."...gY.. 0440 e6 bb 69 df 0f df 3e 25 30 cd 13 cc d8 d9 66 72 ..i...>%0.....fr 0450 b0 c5 63 ec 13 62 b5 d0 ab 04 48 2b 24 14 5f fd ..c..b....H+$._. 0460 37 8f b5 a5 8b df 8e 40 ed e2 b3 5d ef fd fb fd 7......@...].... 0470 0e 06 a4 38 f8 13 da c5 20 06 a4 22 d3 52 53 d6 ...8.... ..".RS. 0480 08 11 22 15 1a 94 c0 f5 92 ee 1c 08 c7 58 16 65 .."..........X.e 0490 2a a5 dd 7b 77 ee c4 d6 71 d8 3d 11 bb 71 c9 59 *..{w...q.=..q.Y 04a0 24 43 b3 8f bb 4b 13 80 b9 84 97 79 1c e1 1e e4 $C...K.....y.... 04b0 34 cf 70 2f be 00 a5 52 50 a6 40 2b d5 ad db 6d 4.p/...RP.@+...m 04c0 1c da 7e 8a 64 06 fa 0d 3a d2 d6 85 34 ba 38 97 ..~.d...:...4.8. 04d0 50 f6 7c f9 ea f2 8c 0d 31 17 9f b9 9d 4d 80 30 P.|.....1....M.0 04e0 a1 fd 1d 7e 23 22 b7 fb 09 04 c0 d0 cc 92 51 b3 ...~#"........Q. 04f0 09 7e 28 05 6b 73 35 cb c4 5c 41 33 bf 00 67 7f .~(.ks5..\A3..g. 0500 f8 c0 26 fd 6d d1 88 11 54 02 58 d4 18 60 79 57 ..&.m...T.X..`yW 0510 0c 56 2d 5a 16 bb 66 54 14 e0 02 52 3a 4e 99 65 .V-Z..fT...R:N.e 0520 4e 2b 37 c1 4e 06 f6 4c 02 12 56 94 70 49 9d 60 N+7.N..L..V.pI.` 0530 55 0c 4c 04 ed 21 e0 fb 1a 1b fd fa 9c e1 f7 02 U.L..!.......... 0540 aa b9 2a 57 5f 0f db f7 50 3c f0 cc ff 09 49 eb ..*W_...P<....I. 0550 b9 3b f3 0f d3 f6 ed 13 98 c4 19 d7 c7 f0 f2 c7 .;.............. 0560 3c 81 27 53 14 10 78 88 fd 50 c9 8b f3 08 65 04 <.'S..x..P....e. 0570 45 26 13 53 a0 1f c5 28 01 61 86 07 c5 27 06 4e E&.S...(.a...'.N 0580 ca 45 00 ef 0c 08 3e be a3 8c f2 0b 27 fd 08 0d .E....>.....'... 0590 89 26 61 76 1f 3b c0 e7 2e 7a 2e e4 5c 12 2e fa .&av.;...z..\... 05a0 82 01 dc b9 cf 1a e0 c8 ea 8f 63 3e 11 48 bb 67 ..........c>.H.g 05b0 bf 42 03 ab a1 1a 2d 4f 53 18 2c 8c d6 42 2a cf .B....-OS.,..B*. 05c0 d0 d6 bb 15 c7 66 bd f7 ee 38 d8 56 10 fc fa 6b .....f...8.V...k 05d0 51 ed 5c 9c d1 ec f8 a0 c4 5f 54 29 dd aa 70 9d Q.\......_T)..p. 05e0 8e f1 db ea c5 c7 f3 be b8 13 .......... No. Time Source Destination Protocol Info 216 12:37:51.853811 167.235.7.71 192.168.11.160 TCP 36388 > irdmi [ACK] Seq=2314 Ack=6040 Win=18816 Len=0 TSV=499204178 TSER=2592160001 Frame 216: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 192.168.11.160 (192.168.11.160) Transmission Control Protocol, Src Port: 36388 (36388), Dst Port: irdmi (8000), Seq: 2314, Ack: 6040, Len: 0 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 00 34 22 c1 40 00 40 06 9c 88 a7 eb 07 47 c0 a8 .4".@.@......G.. 0020 0b a0 8e 24 1f 40 7a ee 20 be 07 0a 4f 52 80 10 ...$.@z. ...OR.. 0030 01 26 29 19 00 00 01 01 08 0a 1d c1 40 52 9a 81 .&).........@R.. 0040 39 01 9. No. Time Source Destination Protocol Info 217 12:37:51.853827 192.168.11.160 167.235.7.71 TCP [TCP Previous segment lost] irdmi > 36388 [PSH, ACK] Seq=7488 Ack=2314 Win=11392 Len=31 TSV=2592160003 TSER=499204176 Frame 217: 97 bytes on wire (776 bits), 97 bytes captured (776 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee) Internet Protocol, Src: 192.168.11.160 (192.168.11.160), Dst: 167.235.7.71 (167.235.7.71) Transmission Control Protocol, Src Port: irdmi (8000), Dst Port: 36388 (36388), Seq: 7488, Ack: 2314, Len: 31 Data (31 bytes) 0000 00 0d 60 2b e0 ee 00 15 2b a6 ad bf 08 00 45 00 ..`+....+.....E. 0010 00 53 1a 1c 40 00 3d 06 a8 0e c0 a8 0b a0 a7 eb .S..@.=......... 0020 07 47 1f 40 8e 24 07 0a 54 fa 7a ee 20 be 80 18 .G.@.$..T.z. ... 0030 00 59 1e c8 00 00 01 01 08 0a 9a 81 39 03 1d c1 .Y..........9... 0040 40 50 e9 fe c0 5a e3 23 6c 8d 73 fa f8 4d 51 fc @P...Z.#l.s..MQ. 0050 f2 0d 6a d9 ce 32 da ff 07 2c b6 40 2d 78 5c 00 ..j..2...,.@-x\. 0060 00 . No. Time Source Destination Protocol Info 218 12:37:51.853841 167.235.7.71 192.168.11.160 TCP [TCP Dup ACK 216#1] 36388 > irdmi [ACK] Seq=2314 Ack=6040 Win=18816 Len=0 TSV=499204178 TSER=2592160001 SLE=7488 SRE=7519 Frame 218: 78 bytes on wire (624 bits), 78 bytes captured (624 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 192.168.11.160 (192.168.11.160) Transmission Control Protocol, Src Port: 36388 (36388), Dst Port: irdmi (8000), Seq: 2314, Ack: 6040, Len: 0 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 00 40 22 c2 40 00 40 06 9c 7b a7 eb 07 47 c0 a8 .@".@.@..{...G.. 0020 0b a0 8e 24 1f 40 7a ee 20 be 07 0a 4f 52 b0 10 ...$.@z. ...OR.. 0030 01 26 3a da 00 00 01 01 08 0a 1d c1 40 52 9a 81 .&:.........@R.. 0040 39 01 01 01 05 0a 07 0a 54 fa 07 0a 55 19 9.......T...U. No. Time Source Destination Protocol Info 219 12:37:51.853847 192.168.11.160 167.235.7.71 TCP [TCP Out-Of-Order] irdmi > 36388 [ACK] Seq=6040 Ack=2314 Win=11392 Len=1448 TSV=2592160003 TSER=499204176 Frame 219: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee) Internet Protocol, Src: 192.168.11.160 (192.168.11.160), Dst: 167.235.7.71 (167.235.7.71) Transmission Control Protocol, Src Port: irdmi (8000), Dst Port: 36388 (36388), Seq: 6040, Ack: 2314, Len: 1448 Data (1448 bytes) 0000 00 0d 60 2b e0 ee 00 15 2b a6 ad bf 08 00 45 00 ..`+....+.....E. 0010 05 dc 1a 1b 40 00 3d 06 a2 86 c0 a8 0b a0 a7 eb ....@.=......... 0020 07 47 1f 40 8e 24 07 0a 4f 52 7a ee 20 be 80 10 .G.@.$..ORz. ... 0030 00 59 41 94 00 00 01 01 08 0a 9a 81 39 03 1d c1 .YA.........9... 0040 40 50 7d c8 7e 29 c6 43 95 b9 30 96 3c 93 78 db @P}.~).C..0.<.x. 0050 ae d9 ad 8f 12 eb 74 51 51 14 5d 5b 35 91 9d 40 ......tQQ.][5..@ 0060 56 db 94 e0 5a b5 92 75 c8 75 26 af c2 bc 67 0a V...Z..u.u&...g. 0070 2a 30 6b eb e7 3a c1 de d5 ba 44 d3 55 3a 53 47 *0k..:....D.U:SG 0080 e9 8a 43 3a 11 54 ef 4a 70 56 5d d4 01 14 bb f4 ..C:.T.JpV]..... 0090 9d 10 6a 2f 2b 10 ad 6d 7b ef fd af fb db dd a7 ..j/+..m{....... 00a0 a2 e9 cf 14 f8 64 4b c8 d4 59 82 8a f7 98 6e fb .....dK..Y....n. 00b0 82 6e c6 80 14 77 df 29 57 78 7e ba c3 42 93 c5 .n...w.)Wx~..B.. 00c0 b6 85 bd c6 5a 75 7b f5 92 e3 07 9b 2a bd f0 a5 ....Zu{.....*... 00d0 8f f5 73 fd 06 ee 1a d0 c6 f3 3f 56 28 b4 ce de ..s.......?V(... 00e0 d8 61 1e cb 68 af 46 c5 4a 6b c4 bf 57 a7 ad b3 .a..h.F.Jk..W... 00f0 c5 18 2b 21 f6 2a b2 bb 1b e1 c7 9e f6 ca 11 b5 ..+!.*.......... 0100 17 d7 fb f2 ae 3c eb b9 ca 4a 95 58 56 b2 3e 33 .....<...J.XV.>3 0110 ac ce 93 62 69 96 99 ca 11 d5 10 f8 b0 2c ce f1 ...bi........,.. 0120 c4 02 c8 50 7f e0 c3 bb a8 df 5b f0 2c e9 ed b0 ...P......[.,... 0130 1e 28 44 5c 11 63 5b cd 00 4f c6 fd de cf 2a 67 .(D\.c[..O....*g 0140 73 2c d0 fa e5 97 f6 c9 0d 57 26 f9 a7 eb f6 eb s,.......W&..... 0150 af b4 0d 8d 7a 1d 4b 70 ac 71 b2 d3 10 f9 bd c1 ....z.Kp.q...... 0160 60 7f f5 44 c2 97 7d 33 40 cb 0c 26 b5 df f3 41 `..D..}3@..&...A 0170 45 52 e3 57 b6 2e ae 37 f0 67 60 72 90 4a 39 89 ER.W...7.g`r.J9. 0180 71 29 43 1b 07 af 6a 82 55 66 fd c1 7e 09 b6 c6 q)C...j.Uf..~... 0190 a4 e0 f1 63 8b e9 31 7b 6d ad bd 2d aa 73 46 1c ...c..1{m..-.sF. 01a0 6c ad 16 58 fc 80 96 94 4f 5c 2d 12 90 5d 58 26 l..X....O\-..]X& 01b0 b2 18 ae f6 a2 00 34 12 82 a5 4b 33 c3 ca 3e 6b ......4...K3..>k 01c0 f9 18 9f 60 8d 03 0e 1d dd 22 16 61 15 65 ec 36 ...`.....".a.e.6 01d0 e1 1f 07 cd e9 72 5e c7 25 9f 8c 10 78 3f 11 0b .....r^.%...x?.. 01e0 b8 a6 a3 6a f5 c9 2b 2f 6e 78 c6 6e f4 9b 4c 82 ...j..+/nx.n..L. 01f0 e2 74 33 4a 5f 95 c2 aa 87 31 1e 1b 6e 48 0c 59 .t3J_....1..nH.Y 0200 8c 9d 2e 0d 4d 9d 60 ea 4f ec d0 8f d3 b4 3f f8 ....M.`.O.....?. 0210 90 86 68 ae da 2d 7b 68 a9 f6 c6 8e 8b bd b6 94 ..h..-{h........ 0220 36 27 d8 e7 ef f8 6d bf b9 e8 d0 e4 ec b1 de eb 6'....m......... 0230 57 a3 cb 16 b5 39 ae 2d 1a 6f f3 39 7a 48 d0 63 W....9.-.o.9zH.c 0240 8d b7 e9 97 1e e5 61 8f fd 07 88 1c 7e 95 ef cd ......a.....~... 0250 8f a4 4d 55 82 b2 55 67 f3 2a e4 4b 4b 0f 6e 55 ..MU..Ug.*.KK.nU 0260 57 a3 79 bf ba e8 6a f2 44 9e b1 3b 5c 38 41 d4 W.y...j.D..;\8A. 0270 99 95 7d 10 a3 10 5f e9 a2 3c 1e 8b 93 c1 ec 3b ..}..._..<.....; 0280 c1 a3 5e b6 80 37 2b 40 45 62 2a 13 eb 58 61 9b ..^..7+@Eb*..Xa. 0290 f2 53 0c 2c 96 93 0c eb 4c 35 4a 24 37 78 fe 13 .S.,....L5J$7x.. 02a0 eb 87 9c 08 51 63 1a 74 01 c8 f9 54 75 99 ee 16 ....Qc.t...Tu... 02b0 42 6e 0c 0f 67 c0 10 b7 2a b0 76 a3 0f ad cf a3 Bn..g...*.v..... 02c0 86 52 75 8f 7c 1c 5f bf 47 b4 83 4a 28 a0 f4 c5 .Ru.|._.G..J(... 02d0 8d 19 b4 b4 29 4a ab 88 41 54 bf c4 b7 30 2d 19 ....)J..AT...0-. 02e0 48 d2 a0 69 13 e4 94 f5 1f 89 d8 97 b0 9a 39 68 H..i..........9h 02f0 05 ac 3a ce b3 c4 ba 6a cd a6 ed c5 02 bd 80 f4 ..:....j........ 0300 ac df 93 d1 6d 43 9f 7c d4 5c a1 8e a2 e2 38 89 ....mC.|.\....8. 0310 e7 7a cb 59 7b 41 f5 44 78 20 0d bc e2 58 82 c3 .z.Y{A.Dx ...X.. 0320 8a aa bc 80 e5 b4 03 56 b8 15 fc a6 3a a6 84 aa .......V....:... 0330 9e 42 f7 11 94 88 fa f8 c5 3a e8 e6 ff b1 f5 88 .B.......:...... 0340 88 ba 1f ac 48 f4 eb 0c 05 5f 1a eb b6 f2 14 26 ....H...._.....& 0350 de 1e cb a6 4f 7f 59 42 4b 60 ba 36 5f bd 95 cf ....O.YBK`.6_... 0360 13 80 7e a4 f6 fd c6 ac ad 4e 1a fa 65 d5 8c ad ..~......N..e... 0370 4e 18 eb 93 a6 c6 39 8b 65 a9 a7 61 04 bd 01 fb N.....9.e..a.... 0380 f3 cf ba 1a ef 68 e1 c7 60 80 cc 6c c0 be fa 8a .....h..`..l.... 0390 3d 2a e1 70 a7 ca 91 54 80 32 e8 30 cc 75 c9 68 =*.p...T.2.0.u.h 03a0 5a 46 90 32 2d 2c 65 35 88 16 0c 30 2e 52 2c 51 ZF.2-,e5...0.R,Q 03b0 86 0a 51 a1 8d 34 3d dd 98 c6 d6 e0 63 15 92 c8 ..Q..4=.....c... 03c0 e2 a1 c5 81 3f 25 69 e7 7e 67 6d 23 0c c6 4a 20 ....?%i.~gm#..J 03d0 0a 40 6f b0 ea ed 00 2c fb 69 35 92 90 43 bc df .@o....,.i5..C.. 03e0 5f 63 d4 41 68 9d c5 72 b1 7e 29 1f e8 47 ff 08 _c.Ah..r.~)..G.. 03f0 d1 9a 11 f8 f5 80 9a 50 58 6a 71 7f b8 32 07 17 .......PXjq..2.. 0400 76 bf 18 a6 cd 5e f5 3d 97 bc 2a 7d d5 8a 4c ec v....^.=..*}..L. 0410 7f 3b c3 ce 77 e9 e5 ef cf 3a d5 72 4f 4f 7a 6b .;..w....:.rOOzk 0420 75 27 c6 3c ad b7 5c 2f 93 d0 45 50 8d 17 3a a7 u'.<..\/..EP..:. 0430 3a f9 bd 4a 95 60 6f fb 6d 9e 1d 86 91 c8 88 f2 :..J.`o.m....... 0440 ec 83 3f 3a d8 4b 83 c5 18 15 c6 69 e1 a0 d1 5d ..?:.K.....i...] 0450 12 cf ec 11 4c ab 84 ed 17 45 bd 8e 29 fa b2 ef ....L....E..)... 0460 7d 51 d5 a3 15 3e c6 7e a7 68 d0 d7 66 51 36 7a }Q...>.~.h..fQ6z 0470 5f c0 e8 07 7e 26 28 62 7f 0b 21 7a 8d e8 56 e7 _...~&(b..!z..V. 0480 f7 cd e1 d2 36 7b 6d b0 30 01 f5 51 ee d8 06 97 ....6{m.0..Q.... 0490 b3 4c 2d 92 ae 55 e0 c6 4c ad fa de 09 a5 15 40 .L-..U..L......@ 04a0 ba 69 c4 f7 8d f7 fd 5d 2a 12 47 d5 fa 4c c5 aa .i.....]*.G..L.. 04b0 be a8 26 a1 2d 95 0e 93 05 08 77 db 0e 68 a4 c2 ..&.-.....w..h.. 04c0 1c ab 5e 91 5b 3c 5a 76 81 fa db 82 5c 39 18 d6 ..^.[ irdmi [ACK] Seq=2314 Ack=7519 Win=21760 Len=0 TSV=499204178 TSER=2592160003 Frame 220: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 192.168.11.160 (192.168.11.160) Transmission Control Protocol, Src Port: 36388 (36388), Dst Port: irdmi (8000), Seq: 2314, Ack: 7519, Len: 0 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 00 34 22 c3 40 00 40 06 9c 86 a7 eb 07 47 c0 a8 .4".@.@......G.. 0020 0b a0 8e 24 1f 40 7a ee 20 be 07 0a 55 19 80 10 ...$.@z. ...U... 0030 01 54 23 22 00 00 01 01 08 0a 1d c1 40 52 9a 81 .T#"........@R.. 0040 39 03 9. No. Time Source Destination Protocol Info 221 12:37:51.975803 167.235.7.71 192.168.11.160 TCP 36388 > irdmi [PSH, ACK] Seq=2314 Ack=7519 Win=21760 Len=538 TSV=499204300 TSER=2592160003 Frame 221: 604 bytes on wire (4832 bits), 604 bytes captured (4832 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 192.168.11.160 (192.168.11.160) Transmission Control Protocol, Src Port: 36388 (36388), Dst Port: irdmi (8000), Seq: 2314, Ack: 7519, Len: 538 Data (538 bytes) 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 02 4e 22 c4 40 00 40 06 9a 6b a7 eb 07 47 c0 a8 .N".@.@..k...G.. 0020 0b a0 8e 24 1f 40 7a ee 20 be 07 0a 55 19 80 18 ...$.@z. ...U... 0030 01 54 99 8f 00 00 01 01 08 0a 1d c1 40 cc 9a 81 .T..........@... 0040 39 03 47 45 54 20 2f 65 6e 2d 55 53 2f 63 6f 6e 9.GET /en-US/con 0050 66 69 67 3f 61 75 74 6f 6c 6f 61 64 3d 31 26 6e fig?autoload=1&n 0060 61 6d 65 73 70 61 63 65 3d 6c 61 75 6e 63 68 65 amespace=launche 0070 72 20 48 54 54 50 2f 31 2e 31 0d 0a 48 6f 73 74 r HTTP/1.1..Host 0080 3a 20 6d 6f 65 61 73 64 65 76 33 3a 38 30 30 30 : moeasdev3:8000 0090 0d 0a 55 73 65 72 2d 41 67 65 6e 74 3a 20 4d 6f ..User-Agent: Mo 00a0 7a 69 6c 6c 61 2f 35 2e 30 20 28 58 31 31 3b 20 zilla/5.0 (X11; 00b0 55 3b 20 4c 69 6e 75 78 20 69 36 38 36 3b 20 65 U; Linux i686; e 00c0 6e 2d 55 53 3b 20 72 76 3a 31 2e 39 2e 32 2e 31 n-US; rv:1.9.2.1 00d0 36 29 20 47 65 63 6b 6f 2f 32 30 31 31 30 33 32 6) Gecko/2011032 00e0 32 20 46 65 64 6f 72 61 2f 33 2e 36 2e 31 36 2d 2 Fedora/3.6.16- 00f0 31 2e 66 63 31 34 20 46 69 72 65 66 6f 78 2f 33 1.fc14 Firefox/3 0100 2e 36 2e 31 36 0d 0a 41 63 63 65 70 74 3a 20 2a .6.16..Accept: * 0110 2f 2a 0d 0a 41 63 63 65 70 74 2d 4c 61 6e 67 75 /*..Accept-Langu 0120 61 67 65 3a 20 65 6e 2d 75 73 2c 65 6e 3b 71 3d age: en-us,en;q= 0130 30 2e 35 0d 0a 41 63 63 65 70 74 2d 45 6e 63 6f 0.5..Accept-Enco 0140 64 69 6e 67 3a 20 67 7a 69 70 2c 64 65 66 6c 61 ding: gzip,defla 0150 74 65 0d 0a 41 63 63 65 70 74 2d 43 68 61 72 73 te..Accept-Chars 0160 65 74 3a 20 49 53 4f 2d 38 38 35 39 2d 31 2c 75 et: ISO-8859-1,u 0170 74 66 2d 38 3b 71 3d 30 2e 37 2c 2a 3b 71 3d 30 tf-8;q=0.7,*;q=0 0180 2e 37 0d 0a 4b 65 65 70 2d 41 6c 69 76 65 3a 20 .7..Keep-Alive: 0190 31 31 35 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 115..Connection: 01a0 20 6b 65 65 70 2d 61 6c 69 76 65 0d 0a 52 65 66 keep-alive..Ref 01b0 65 72 65 72 3a 20 68 74 74 70 3a 2f 2f 6d 6f 65 erer: http://moe 01c0 61 73 64 65 76 33 3a 38 30 30 30 2f 65 6e 2d 55 asdev3:8000/en-U 01d0 53 2f 61 70 70 2f 6c 61 75 6e 63 68 65 72 2f 68 S/app/launcher/h 01e0 6f 6d 65 0d 0a 43 6f 6f 6b 69 65 3a 20 73 65 73 ome..Cookie: ses 01f0 73 69 6f 6e 5f 69 64 5f 38 30 30 30 3d 63 37 38 sion_id_8000=c78 0200 63 30 39 35 66 39 66 62 64 63 33 32 33 32 66 64 c095f9fbdc3232fd 0210 63 38 31 66 61 31 36 36 36 32 64 35 32 61 66 61 c81fa16662d52afa 0220 39 31 66 63 38 0d 0a 49 66 2d 4e 6f 6e 65 2d 4d 91fc8..If-None-M 0230 61 74 63 68 3a 20 22 66 30 62 62 35 65 39 33 32 atch: "f0bb5e932 0240 34 64 66 61 65 63 35 32 37 63 61 66 33 31 35 64 4dfaec527caf315d 0250 66 35 33 36 63 34 64 22 0d 0a 0d 0a f536c4d".... No. Time Source Destination Protocol Info 222 12:37:51.977746 192.168.11.160 167.235.7.71 TCP irdmi > 36388 [ACK] Seq=7519 Ack=2852 Win=12800 Len=0 TSV=2592160128 TSER=499204300 Frame 222: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee) Internet Protocol, Src: 192.168.11.160 (192.168.11.160), Dst: 167.235.7.71 (167.235.7.71) Transmission Control Protocol, Src Port: irdmi (8000), Dst Port: 36388 (36388), Seq: 7519, Ack: 2852, Len: 0 0000 00 0d 60 2b e0 ee 00 15 2b a6 ad bf 08 00 45 00 ..`+....+.....E. 0010 00 34 1a 1d 40 00 3d 06 a8 2c c0 a8 0b a0 a7 eb .4..@.=..,...... 0020 07 47 1f 40 8e 24 07 0a 55 19 7a ee 22 d8 80 10 .G.@.$..U.z."... 0030 00 64 21 01 00 00 01 01 08 0a 9a 81 39 80 1d c1 .d!.........9... 0040 40 cc @. No. Time Source Destination Protocol Info 223 12:37:51.995932 192.168.11.160 167.235.7.71 TCP irdmi > 36388 [PSH, ACK] Seq=7519 Ack=2852 Win=12800 Len=289 TSV=2592160146 TSER=499204300 Frame 223: 355 bytes on wire (2840 bits), 355 bytes captured (2840 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee) Internet Protocol, Src: 192.168.11.160 (192.168.11.160), Dst: 167.235.7.71 (167.235.7.71) Transmission Control Protocol, Src Port: irdmi (8000), Dst Port: 36388 (36388), Seq: 7519, Ack: 2852, Len: 289 Data (289 bytes) 0000 00 0d 60 2b e0 ee 00 15 2b a6 ad bf 08 00 45 00 ..`+....+.....E. 0010 01 55 1a 1e 40 00 3d 06 a7 0a c0 a8 0b a0 a7 eb .U..@.=......... 0020 07 47 1f 40 8e 24 07 0a 55 19 7a ee 22 d8 80 18 .G.@.$..U.z."... 0030 00 64 c6 4f 00 00 01 01 08 0a 9a 81 39 92 1d c1 .d.O........9... 0040 40 cc 48 54 54 50 2f 31 2e 31 20 33 30 34 20 4e @.HTTP/1.1 304 N 0050 6f 74 20 4d 6f 64 69 66 69 65 64 0d 0a 44 61 74 ot Modified..Dat 0060 65 3a 20 4d 6f 6e 2c 20 31 38 20 41 70 72 20 32 e: Mon, 18 Apr 2 0070 30 31 31 20 31 39 3a 33 37 3a 35 31 20 47 4d 54 011 19:37:51 GMT 0080 0d 0a 45 74 61 67 3a 20 22 66 30 62 62 35 65 39 ..Etag: "f0bb5e9 0090 33 32 34 64 66 61 65 63 35 32 37 63 61 66 33 31 324dfaec527caf31 00a0 35 64 66 35 33 36 63 34 64 22 0d 0a 43 6f 6e 74 5df536c4d"..Cont 00b0 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 70 ent-Type: text/p 00c0 6c 61 69 6e 3b 63 68 61 72 73 65 74 3d 75 74 66 lain;charset=utf 00d0 2d 38 0d 0a 53 65 72 76 65 72 3a 20 43 68 65 72 -8..Server: Cher 00e0 72 79 50 79 2f 33 2e 31 2e 32 0d 0a 53 65 74 2d ryPy/3.1.2..Set- 00f0 43 6f 6f 6b 69 65 3a 20 73 65 73 73 69 6f 6e 5f Cookie: session_ 0100 69 64 5f 38 30 30 30 3d 63 37 38 63 30 39 35 66 id_8000=c78c095f 0110 39 66 62 64 63 33 32 33 32 66 64 63 38 31 66 61 9fbdc3232fdc81fa 0120 31 36 36 36 32 64 35 32 61 66 61 39 31 66 63 38 16662d52afa91fc8 0130 3b 20 65 78 70 69 72 65 73 3d 54 75 65 2c 20 31 ; expires=Tue, 1 0140 39 20 41 70 72 20 32 30 31 31 20 31 39 3a 33 37 9 Apr 2011 19:37 0150 3a 35 31 20 47 4d 54 3b 20 50 61 74 68 3d 2f 0d :51 GMT; Path=/. 0160 0a 0d 0a ... No. Time Source Destination Protocol Info 224 12:37:51.995998 167.235.7.71 192.168.11.160 TCP 36388 > irdmi [ACK] Seq=2852 Ack=7808 Win=24640 Len=0 TSV=499204320 TSER=2592160146 Frame 224: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 192.168.11.160 (192.168.11.160) Transmission Control Protocol, Src Port: 36388 (36388), Dst Port: irdmi (8000), Seq: 2852, Ack: 7808, Len: 0 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 00 34 22 c5 40 00 40 06 9c 84 a7 eb 07 47 c0 a8 .4".@.@......G.. 0020 0b a0 8e 24 1f 40 7a ee 22 d8 07 0a 56 3a 80 10 ...$.@z."...V:.. 0030 01 81 1e 9d 00 00 01 01 08 0a 1d c1 40 e0 9a 81 ............@... 0040 39 92 9. No. Time Source Destination Protocol Info 225 12:37:52.099161 Cisco_f3:bd:bf Broadcast 0x0806 ARP Frame 225: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_f3:bd:bf (00:12:00:f3:bd:bf), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Data (46 bytes) 0000 ff ff ff ff ff ff 00 12 00 f3 bd bf 08 06 00 01 ................ 0010 08 00 06 04 00 01 00 12 00 f3 bd bf a7 eb 07 7d ...............} 0020 00 00 00 00 00 00 a7 eb 07 37 00 00 00 00 00 00 .........7...... 0030 00 00 00 00 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 226 12:37:52.110710 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 226: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 51841, Ack: 5482, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c b4 40 00 7e 06 f9 bb a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 39 d3 56 09 e7 9f 50 18 ......@.9.V...P. 0030 fb 91 dd 85 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 84 8b 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 227 12:37:52.111450 167.235.13.48 167.235.7.25 TCP netbios-ssn > spw-dialer [ACK] Seq=52417 Ack=5608 Win=64275 Len=0 Frame 227: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 52417, Ack: 5608, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9c b5 40 00 7e 06 fb fa a7 eb 0d 30 a7 eb .(..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 3c 13 56 09 e8 1d 50 10 ......@.<.V...P. 0030 fb 13 86 80 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 228 12:37:52.111524 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 228: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 52417, Ack: 5608, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c b6 40 00 7e 06 f9 b9 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 3c 13 56 09 e8 1d 50 18 ......@.<.V...P. 0030 fb 13 9b 45 00 00 00 00 02 3c ff 53 4d 42 2e 00 ...E.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c4 8b 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 229 12:37:52.111576 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 229: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 52993, Ack: 5608, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c b7 40 00 7e 06 f9 b8 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 3e 53 56 09 e8 1d 50 18 ......@.>SV...P. 0030 fb 13 5a 05 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..Z......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 03 8c 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 230 12:37:52.111583 167.235.13.48 167.235.7.25 TCP netbios-ssn > spw-dialer [ACK] Seq=53569 Ack=5734 Win=64149 Len=0 Frame 230: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 53569, Ack: 5734, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9c b8 40 00 7e 06 fb f7 a7 eb 0d 30 a7 eb .(..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 40 93 56 09 e8 9b 50 10 ......@.@.V...P. 0030 fa 95 82 00 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 231 12:37:52.111634 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 231: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 53569, Ack: 5734, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c b9 40 00 7e 06 f9 b6 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 40 93 56 09 e8 9b 50 18 ......@.@.V...P. 0030 fa 95 15 c4 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 45 8c 0c ff 00 00 00 ff ...0....E....... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 232 12:37:52.111687 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 232: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 54145, Ack: 5734, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c ba 40 00 7e 06 f9 b5 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 42 d3 56 09 e8 9b 50 18 ......@.B.V...P. 0030 fa 95 d6 83 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 82 8c 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 233 12:37:52.553874 HewlettP_80:f1:63 Broadcast 0x0806 ARP Frame 233: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HewlettP_80:f1:63 (00:17:08:80:f1:63), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Data (46 bytes) 0000 ff ff ff ff ff ff 00 17 08 80 f1 63 08 06 00 01 ...........c.... 0010 08 00 06 04 00 01 00 17 08 80 f1 63 a7 eb 07 5c ...........c...\ 0020 00 fb 14 e9 14 e9 a7 eb 07 16 00 00 00 00 00 00 ................ 0030 00 00 00 00 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 234 12:37:52.610693 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 234: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 54721, Ack: 5797, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c bc 40 00 7e 06 f9 b3 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 45 13 56 09 e8 da 50 18 ......@.E.V...P. 0030 fa 56 94 43 00 00 00 00 02 3c ff 53 4d 42 2e 00 .V.C.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c2 8c 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 235 12:37:52.611463 167.235.13.48 167.235.7.25 TCP netbios-ssn > spw-dialer [ACK] Seq=55297 Ack=5923 Win=65535 Len=0 Frame 235: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 55297, Ack: 5923, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9c bd 40 00 7e 06 fb f2 a7 eb 0d 30 a7 eb .(..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 47 53 56 09 e9 58 50 10 ......@.GSV..XP. 0030 ff ff 75 19 00 00 00 00 00 00 00 00 ..u......... No. Time Source Destination Protocol Info 236 12:37:52.611539 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 236: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 55297, Ack: 5923, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c be 40 00 7e 06 f9 b1 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 47 53 56 09 e9 58 50 18 ......@.GSV..XP. 0030 ff ff 4b dc 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..K......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 02 8d 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 237 12:37:52.611591 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 237: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 55873, Ack: 5923, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c bf 40 00 7e 06 f9 b0 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 49 93 56 09 e9 58 50 18 ......@.I.V..XP. 0030 ff ff 08 9c 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 43 8d 0c ff 00 00 00 ff ...0....C....... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 238 12:37:52.611646 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 238: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 56449, Ack: 5986, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c c0 40 00 7e 06 f9 af a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 4b d3 56 09 e9 97 50 18 ......@.K.V...P. 0030 ff c0 c4 5c 00 00 00 00 02 3c ff 53 4d 42 2e 00 ...\.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 85 8d 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 239 12:37:52.611696 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 239: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 57025, Ack: 6049, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c c1 40 00 7e 06 f9 ae a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 4e 13 56 09 e9 d6 50 18 ......@.N.V...P. 0030 ff 81 83 1c 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c4 8d 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 240 12:37:52.624424 Cisco_a6:ad:bf Broadcast 0x0806 ARP Frame 240: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Data (46 bytes) 0000 ff ff ff ff ff ff 00 15 2b a6 ad bf 08 06 00 01 ........+....... 0010 08 00 06 04 00 01 00 15 2b a6 ad bf a7 eb 07 7e ........+......~ 0020 00 00 00 00 00 00 a7 eb 07 73 00 00 00 00 00 00 .........s...... 0030 00 00 00 00 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 241 12:37:52.673320 192.168.11.43 167.235.7.45 TCP https > 55752 [ACK] Seq=6265 Ack=2612 Win=65258 Len=0 TSV=174427235 TSER=107654963 Frame 241: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_23:f1:a5 (00:1e:37:23:f1:a5) Internet Protocol, Src: 192.168.11.43 (192.168.11.43), Dst: 167.235.7.45 (167.235.7.45) Transmission Control Protocol, Src Port: https (443), Dst Port: 55752 (55752), Seq: 6265, Ack: 2612, Len: 0 0000 00 1e 37 23 f1 a5 00 15 2b a6 ad bf 08 00 45 00 ..7#....+.....E. 0010 00 34 2e 20 40 00 7e 06 53 b8 c0 a8 0b 2b a7 eb .4. @.~.S....+.. 0020 07 2d 01 bb d9 c8 14 1f 15 6f 6e fa fc 50 80 10 .-.......on..P.. 0030 fe ea 40 23 00 00 01 01 08 0a 0a 65 8c 63 06 6a ..@#.......e.c.j 0040 af 33 .3 No. Time Source Destination Protocol Info 242 12:37:52.881648 167.235.7.68 255.255.255.255 DB-LSP-DISC Dropbox LAN sync Discovery Protocol Frame 242: 174 bytes on wire (1392 bits), 174 bytes captured (1392 bits) Ethernet II, Src: Giga-Byt_79:4f:6e (00:16:e6:79:4f:6e), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 167.235.7.68 (167.235.7.68), Dst: 255.255.255.255 (255.255.255.255) User Datagram Protocol, Src Port: db-lsp-disc (17500), Dst Port: db-lsp-disc (17500) Dropbox LAN sync Discovery Protocol 0000 ff ff ff ff ff ff 00 16 e6 79 4f 6e 08 00 45 00 .........yOn..E. 0010 00 a0 37 6a 00 00 80 11 53 b4 a7 eb 07 44 ff ff ..7j....S....D.. 0020 ff ff 44 5c 44 5c 00 8c 83 87 7b 22 68 6f 73 74 ..D\D\....{"host 0030 5f 69 6e 74 22 3a 20 31 38 36 34 36 31 32 36 2c _int": 18646126, 0040 20 22 76 65 72 73 69 6f 6e 22 3a 20 5b 31 2c 20 "version": [1, 0050 38 5d 2c 20 22 64 69 73 70 6c 61 79 6e 61 6d 65 8], "displayname 0060 22 3a 20 22 50 61 75 6c 27 73 20 57 6f 72 6b 22 ": "Paul's Work" 0070 2c 20 22 70 6f 72 74 22 3a 20 31 37 35 30 30 2c , "port": 17500, 0080 20 22 6e 61 6d 65 73 70 61 63 65 73 22 3a 20 5b "namespaces": [ 0090 31 31 35 31 36 32 30 31 2c 20 31 31 35 31 38 36 11516201, 115186 00a0 36 31 2c 20 31 34 32 38 31 36 36 35 5d 7d 61, 14281665]} No. Time Source Destination Protocol Info 243 12:37:52.882762 167.235.7.68 167.235.7.127 DB-LSP-DISC Dropbox LAN sync Discovery Protocol Frame 243: 174 bytes on wire (1392 bits), 174 bytes captured (1392 bits) Ethernet II, Src: Giga-Byt_79:4f:6e (00:16:e6:79:4f:6e), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 167.235.7.68 (167.235.7.68), Dst: 167.235.7.127 (167.235.7.127) User Datagram Protocol, Src Port: db-lsp-disc (17500), Dst Port: db-lsp-disc (17500) Dropbox LAN sync Discovery Protocol 0000 ff ff ff ff ff ff 00 16 e6 79 4f 6e 08 00 45 00 .........yOn..E. 0010 00 a0 37 6b 00 00 80 11 a4 48 a7 eb 07 44 a7 eb ..7k.....H...D.. 0020 07 7f 44 5c 44 5c 00 8c d4 1c 7b 22 68 6f 73 74 ..D\D\....{"host 0030 5f 69 6e 74 22 3a 20 31 38 36 34 36 31 32 36 2c _int": 18646126, 0040 20 22 76 65 72 73 69 6f 6e 22 3a 20 5b 31 2c 20 "version": [1, 0050 38 5d 2c 20 22 64 69 73 70 6c 61 79 6e 61 6d 65 8], "displayname 0060 22 3a 20 22 50 61 75 6c 27 73 20 57 6f 72 6b 22 ": "Paul's Work" 0070 2c 20 22 70 6f 72 74 22 3a 20 31 37 35 30 30 2c , "port": 17500, 0080 20 22 6e 61 6d 65 73 70 61 63 65 73 22 3a 20 5b "namespaces": [ 0090 31 31 35 31 36 32 30 31 2c 20 31 31 35 31 38 36 11516201, 115186 00a0 36 31 2c 20 31 34 32 38 31 36 36 35 5d 7d 61, 14281665]} No. Time Source Destination Protocol Info 244 12:37:52.976534 192.168.11.43 167.235.7.45 TCP https > 55752 [ACK] Seq=6265 Ack=3113 Win=64757 Len=0 TSV=174427238 TSER=107655236 Frame 244: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_23:f1:a5 (00:1e:37:23:f1:a5) Internet Protocol, Src: 192.168.11.43 (192.168.11.43), Dst: 167.235.7.45 (167.235.7.45) Transmission Control Protocol, Src Port: https (443), Dst Port: 55752 (55752), Seq: 6265, Ack: 3113, Len: 0 0000 00 1e 37 23 f1 a5 00 15 2b a6 ad bf 08 00 45 00 ..7#....+.....E. 0010 00 34 35 83 40 00 7e 06 4c 55 c0 a8 0b 2b a7 eb .45.@.~.LU...+.. 0020 07 2d 01 bb d9 c8 14 1f 15 6f 6e fa fe 45 80 10 .-.......on..E.. 0030 fc f5 3f 0f 00 00 01 01 08 0a 0a 65 8c 66 06 6a ..?........e.f.j 0040 b0 44 .D No. Time Source Destination Protocol Info 245 12:37:53.110679 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 245: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 57601, Ack: 6112, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c c3 40 00 7e 06 f9 ac a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 50 53 56 09 ea 15 50 18 ......@.PSV...P. 0030 ff 42 40 dc 00 00 00 00 02 3c ff 53 4d 42 2e 00 .B@......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 04 8e 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 246 12:37:53.111527 167.235.13.48 167.235.7.25 TCP netbios-ssn > spw-dialer [ACK] Seq=58177 Ack=6238 Win=65220 Len=0 Frame 246: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 58177, Ack: 6238, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9c c4 40 00 7e 06 fb eb a7 eb 0d 30 a7 eb .(..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 52 93 56 09 ea 93 50 10 ......@.R.V...P. 0030 fe c4 69 d9 00 00 00 00 00 00 00 00 ..i......... No. Time Source Destination Protocol Info 247 12:37:53.111555 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 247: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 58177, Ack: 6238, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c c5 40 00 7e 06 f9 aa a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 52 93 56 09 ea 93 50 18 ......@.R.V...P. 0030 fe c4 fe 9b 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 44 8e 0c ff 00 00 00 ff ...0....D....... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 248 12:37:53.111585 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 248: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 58753, Ack: 6238, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c c6 40 00 7e 06 f9 a9 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 54 d3 56 09 ea 93 50 18 ......@.T.V...P. 0030 fe c4 bb 5b 00 00 00 00 02 3c ff 53 4d 42 2e 00 ...[.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 85 8e 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 249 12:37:53.111591 167.235.13.48 167.235.7.25 TCP netbios-ssn > spw-dialer [ACK] Seq=59329 Ack=6364 Win=65094 Len=0 Frame 249: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 59329, Ack: 6364, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9c c7 40 00 7e 06 fb e8 a7 eb 0d 30 a7 eb .(..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 57 13 56 09 eb 11 50 10 ......@.W.V...P. 0030 fe 46 65 59 00 00 00 00 00 00 00 00 .FeY........ No. Time Source Destination Protocol Info 250 12:37:53.111677 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 250: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 59329, Ack: 6364, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c c8 40 00 7e 06 f9 a7 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 57 13 56 09 eb 11 50 18 ......@.W.V...P. 0030 fe 46 7b 1a 00 00 00 00 02 3c ff 53 4d 42 2e 00 .F{......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c3 8e 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 251 12:37:53.111697 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 251: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 59905, Ack: 6364, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c c9 40 00 7e 06 f9 a6 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 59 53 56 09 eb 11 50 18 ......@.YSV...P. 0030 fe 46 39 da 00 00 00 00 02 3c ff 53 4d 42 2e 00 .F9......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 02 8f 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 252 12:37:53.400536 167.235.7.126 224.0.0.2 HSRP Hello (state Standby) Frame 252: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: IPv4mcast_00:00:02 (01:00:5e:00:00:02) Internet Protocol, Src: 167.235.7.126 (167.235.7.126), Dst: 224.0.0.2 (224.0.0.2) User Datagram Protocol, Src Port: hsrp (1985), Dst Port: hsrp (1985) Cisco Hot Standby Router Protocol 0000 01 00 5e 00 00 02 00 15 2b a6 ad bf 08 00 45 c0 ..^.....+.....E. 0010 00 30 00 00 00 00 01 11 29 92 a7 eb 07 7e e0 00 .0......)....~.. 0020 00 02 07 c1 07 c1 00 1c 2c a7 00 00 08 03 05 64 ........,......d 0030 32 00 63 69 73 63 6f 00 00 00 a7 eb 07 01 2.cisco....... No. Time Source Destination Protocol Info 253 12:37:53.610753 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 253: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 60481, Ack: 6427, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c cb 40 00 7e 06 f9 a4 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 5b 93 56 09 eb 50 50 18 ......@.[.V..PP. 0030 fe 07 f7 99 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 42 8f 0c ff 00 00 00 ff ...0....B....... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 254 12:37:53.611494 167.235.13.48 167.235.7.25 TCP netbios-ssn > spw-dialer [ACK] Seq=61057 Ack=6553 Win=64905 Len=0 Frame 254: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 61057, Ack: 6553, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9c cc 40 00 7e 06 fb e3 a7 eb 0d 30 a7 eb .(..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 5d d3 56 09 eb ce 50 10 ......@.].V...P. 0030 fd 89 5e 99 00 00 00 00 00 00 00 00 ..^......... No. Time Source Destination Protocol Info 255 12:37:53.611573 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 255: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 61057, Ack: 6553, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c cd 40 00 7e 06 f9 a2 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 5d d3 56 09 eb ce 50 18 ......@.].V...P. 0030 fd 89 b5 59 00 00 00 00 02 3c ff 53 4d 42 2e 00 ...Y.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 82 8f 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 256 12:37:53.611625 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 256: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 61633, Ack: 6553, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c ce 40 00 7e 06 f9 a1 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 60 13 56 09 eb ce 50 18 ......@.`.V...P. 0030 fd 89 71 19 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..q......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c4 8f 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 257 12:37:53.611678 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 257: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 62209, Ack: 6616, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c cf 40 00 7e 06 f9 a0 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 62 53 56 09 ec 0d 50 18 ......@.bSV...P. 0030 fd 4a 2f da 00 00 00 00 02 3c ff 53 4d 42 2e 00 .J/......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 03 90 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 258 12:37:53.611730 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 258: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 62785, Ack: 6679, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c d0 40 00 7e 06 f9 9f a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 64 93 56 09 ec 4c 50 18 ......@.d.V..LP. 0030 fd 0b eb 99 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 45 90 0c ff 00 00 00 ff ...0....E....... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 259 12:37:53.778392 167.235.7.125 224.0.0.2 HSRP Hello (state Active) Frame 259: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: All-HSRP-routers_32 (00:00:0c:07:ac:32), Dst: IPv4mcast_00:00:02 (01:00:5e:00:00:02) Internet Protocol, Src: 167.235.7.125 (167.235.7.125), Dst: 224.0.0.2 (224.0.0.2) User Datagram Protocol, Src Port: hsrp (1985), Dst Port: hsrp (1985) Cisco Hot Standby Router Protocol 0000 01 00 5e 00 00 02 00 00 0c 07 ac 32 08 00 45 c0 ..^........2..E. 0010 00 30 00 00 00 00 01 11 29 93 a7 eb 07 7d e0 00 .0......)....}.. 0020 00 02 07 c1 07 c1 00 1c 24 9e 00 00 10 03 05 6e ........$......n 0030 32 00 63 69 73 63 6f 00 00 00 a7 eb 07 01 2.cisco....... No. Time Source Destination Protocol Info 260 12:37:54.110758 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 260: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 63361, Ack: 6742, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c d2 40 00 7e 06 f9 9d a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 66 d3 56 09 ec 8b 50 18 ......@.f.V...P. 0030 fc cc a9 59 00 00 00 00 02 3c ff 53 4d 42 2e 00 ...Y.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 85 90 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 261 12:37:54.111646 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 261: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 63937, Ack: 6805, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c d3 40 00 7e 06 f9 9c a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 69 13 56 09 ec ca 50 18 ......@.i.V...P. 0030 fc 8d 67 19 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..g......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c5 90 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 262 12:37:54.111762 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 262: 1206 bytes on wire (9648 bits), 1206 bytes captured (9648 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 64513, Ack: 6994, Len: 1152 NetBIOS Session Service SMB (Server Message Block Protocol) NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 04 a8 9c d4 40 00 7e 06 f7 5b a7 eb 0d 30 a7 eb ....@.~..[...0.. 0020 07 19 00 8b 0e d4 40 87 6b 53 56 09 ed 87 50 18 ......@.kSV...P. 0030 fb d0 bb 9f 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 03 91 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0280 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0290 00 00 06 30 ff fe 01 08 44 91 0c ff 00 00 00 ff ...0....D....... 02a0 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 02b0 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 02c0 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 02d0 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 02e0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 02f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0300 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0310 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0320 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0330 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0340 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0350 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0360 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0370 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0380 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0390 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 03a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 03b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 03c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 03d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 03e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 03f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0400 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0410 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0420 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0430 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0440 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0450 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0460 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0470 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0480 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0490 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 04a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 04b0 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 263 12:37:54.111815 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 263: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 65665, Ack: 6994, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c d5 40 00 7e 06 f9 9a a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 6f d3 56 09 ed 87 50 18 ......@.o.V...P. 0030 fb d0 a3 57 00 00 00 00 02 3c ff 53 4d 42 2e 00 ...W.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 82 91 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 264 12:37:54.235965 Universa_d4:5a:70 Broadcast 0x0806 ARP Frame 264: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Universa_d4:5a:70 (00:1a:6b:d4:5a:70), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Data (46 bytes) 0000 ff ff ff ff ff ff 00 1a 6b d4 5a 70 08 06 00 01 ........k.Zp.... 0010 08 00 06 04 00 01 00 1a 6b d4 5a 70 a7 eb 07 09 ........k.Zp.... 0020 00 00 00 00 00 00 a7 eb 07 01 00 00 00 00 00 00 ................ 0030 00 00 00 00 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 265 12:37:54.468761 74.125.224.56 167.235.7.71 TLSv1 Application Data Frame 265: 124 bytes on wire (992 bits), 124 bytes captured (992 bits) Ethernet II, Src: Cisco_f3:bd:bf (00:12:00:f3:bd:bf), Dst: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee) Internet Protocol, Src: 74.125.224.56 (74.125.224.56), Dst: 167.235.7.71 (167.235.7.71) Transmission Control Protocol, Src Port: https (443), Dst Port: 37301 (37301), Seq: 1, Ack: 1, Len: 58 Secure Socket Layer 0000 00 0d 60 2b e0 ee 00 12 00 f3 bd bf 08 00 45 00 ..`+..........E. 0010 00 6e 78 7f 00 00 35 06 33 23 4a 7d e0 38 a7 eb .nx...5.3#J}.8.. 0020 07 47 01 bb 91 b5 a2 34 94 70 81 52 89 38 80 18 .G.....4.p.R.8.. 0030 01 d7 76 2c 00 00 01 01 08 0a a3 1a d0 4a 1d c0 ..v,.........J.. 0040 e0 f9 17 03 01 00 35 0a 1b bc 44 c1 44 a2 b7 8b ......5...D.D... 0050 3f f3 b1 50 fc 32 35 1b f2 b2 72 48 c0 74 cd 13 ?..P.25...rH.t.. 0060 1c 3a fd 62 e4 d9 d2 60 72 b3 5d d5 ff f5 b8 dc .:.b...`r.]..... 0070 a6 78 f7 c4 9e 79 06 f9 3a 57 46 c6 .x...y..:WF. No. Time Source Destination Protocol Info 266 12:37:54.468831 167.235.7.71 74.125.224.56 TCP 37301 > https [ACK] Seq=1 Ack=59 Win=466 Len=0 TSV=499206793 TSER=2736443466 Frame 266: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 74.125.224.56 (74.125.224.56) Transmission Control Protocol, Src Port: 37301 (37301), Dst Port: https (443), Seq: 1, Ack: 59, Len: 0 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 00 34 20 37 40 00 40 06 40 a5 a7 eb 07 47 4a 7d .4 7@.@.@....GJ} 0020 e0 38 91 b5 01 bb 81 52 89 38 a2 34 94 aa 80 10 .8.....R.8.4.... 0030 01 d2 ea 78 00 00 01 01 08 0a 1d c1 4a 89 a3 1a ...x........J... 0040 d0 4a .J No. Time Source Destination Protocol Info 267 12:37:54.469487 167.235.7.71 74.125.224.56 TLSv1 Encrypted Alert Frame 267: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 74.125.224.56 (74.125.224.56) Transmission Control Protocol, Src Port: 37301 (37301), Dst Port: https (443), Seq: 1, Ack: 59, Len: 27 Secure Socket Layer 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 00 4f 20 38 40 00 40 06 40 89 a7 eb 07 47 4a 7d .O 8@.@.@....GJ} 0020 e0 38 91 b5 01 bb 81 52 89 38 a2 34 94 aa 80 18 .8.....R.8.4.... 0030 01 d2 00 8c 00 00 01 01 08 0a 1d c1 4a 89 a3 1a ............J... 0040 d0 4a 15 03 01 00 16 22 44 6e 5e 4c 73 7c 90 28 .J....."Dn^Ls|.( 0050 cb 94 bd 1a 66 9f 8a d4 93 5e 1c c2 ed ....f....^... No. Time Source Destination Protocol Info 268 12:37:54.469533 167.235.7.71 74.125.224.56 TCP 37301 > https [FIN, ACK] Seq=28 Ack=59 Win=466 Len=0 TSV=499206793 TSER=2736443466 Frame 268: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 74.125.224.56 (74.125.224.56) Transmission Control Protocol, Src Port: 37301 (37301), Dst Port: https (443), Seq: 28, Ack: 59, Len: 0 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 00 34 20 39 40 00 40 06 40 a3 a7 eb 07 47 4a 7d .4 9@.@.@....GJ} 0020 e0 38 91 b5 01 bb 81 52 89 53 a2 34 94 aa 80 11 .8.....R.S.4.... 0030 01 d2 ea 5c 00 00 01 01 08 0a 1d c1 4a 89 a3 1a ...\........J... 0040 d0 4a .J No. Time Source Destination Protocol Info 269 12:37:54.476795 74.125.224.56 167.235.7.71 TCP https > 37301 [FIN, ACK] Seq=59 Ack=29 Win=471 Len=0 TSV=2736443474 TSER=499206793 Frame 269: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_f3:bd:bf (00:12:00:f3:bd:bf), Dst: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee) Internet Protocol, Src: 74.125.224.56 (74.125.224.56), Dst: 167.235.7.71 (167.235.7.71) Transmission Control Protocol, Src Port: https (443), Dst Port: 37301 (37301), Seq: 59, Ack: 29, Len: 0 0000 00 0d 60 2b e0 ee 00 12 00 f3 bd bf 08 00 45 00 ..`+..........E. 0010 00 34 78 80 00 00 35 06 33 5c 4a 7d e0 38 a7 eb .4x...5.3\J}.8.. 0020 07 47 01 bb 91 b5 a2 34 94 aa 81 52 89 54 80 11 .G.....4...R.T.. 0030 01 d7 ea 4e 00 00 01 01 08 0a a3 1a d0 52 1d c1 ...N.........R.. 0040 4a 89 J. No. Time Source Destination Protocol Info 270 12:37:54.476874 167.235.7.71 74.125.224.56 TCP 37301 > https [ACK] Seq=29 Ack=60 Win=466 Len=0 TSV=499206801 TSER=2736443474 Frame 270: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 74.125.224.56 (74.125.224.56) Transmission Control Protocol, Src Port: 37301 (37301), Dst Port: https (443), Seq: 29, Ack: 60, Len: 0 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 00 34 20 3a 40 00 40 06 40 a2 a7 eb 07 47 4a 7d .4 :@.@.@....GJ} 0020 e0 38 91 b5 01 bb 81 52 89 54 a2 34 94 ab 80 10 .8.....R.T.4.... 0030 01 d2 ea 4b 00 00 01 01 08 0a 1d c1 4a 91 a3 1a ...K........J... 0040 d0 52 .R No. Time Source Destination Protocol Info 271 12:37:54.584445 167.235.7.71 192.168.11.160 TCP 36388 > irdmi [PSH, ACK] Seq=2852 Ack=7808 Win=24640 Len=515 TSV=499206908 TSER=2592160146 Frame 271: 581 bytes on wire (4648 bits), 581 bytes captured (4648 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 192.168.11.160 (192.168.11.160) Transmission Control Protocol, Src Port: 36388 (36388), Dst Port: irdmi (8000), Seq: 2852, Ack: 7808, Len: 515 Data (515 bytes) 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 02 37 22 c6 40 00 40 06 9a 80 a7 eb 07 47 c0 a8 .7".@.@......G.. 0020 0b a0 8e 24 1f 40 7a ee 22 d8 07 0a 56 3a 80 18 ...$.@z."...V:.. 0030 01 81 11 4e 00 00 01 01 08 0a 1d c1 4a fc 9a 81 ...N........J... 0040 39 92 47 45 54 20 2f 65 6e 2d 55 53 2f 61 70 69 9.GET /en-US/api 0050 2f 6d 65 73 73 61 67 65 73 2f 69 6e 64 65 78 20 /messages/index 0060 48 54 54 50 2f 31 2e 31 0d 0a 48 6f 73 74 3a 20 HTTP/1.1..Host: 0070 6d 6f 65 61 73 64 65 76 33 3a 38 30 30 30 0d 0a moeasdev3:8000.. 0080 55 73 65 72 2d 41 67 65 6e 74 3a 20 4d 6f 7a 69 User-Agent: Mozi 0090 6c 6c 61 2f 35 2e 30 20 28 58 31 31 3b 20 55 3b lla/5.0 (X11; U; 00a0 20 4c 69 6e 75 78 20 69 36 38 36 3b 20 65 6e 2d Linux i686; en- 00b0 55 53 3b 20 72 76 3a 31 2e 39 2e 32 2e 31 36 29 US; rv:1.9.2.16) 00c0 20 47 65 63 6b 6f 2f 32 30 31 31 30 33 32 32 20 Gecko/20110322 00d0 46 65 64 6f 72 61 2f 33 2e 36 2e 31 36 2d 31 2e Fedora/3.6.16-1. 00e0 66 63 31 34 20 46 69 72 65 66 6f 78 2f 33 2e 36 fc14 Firefox/3.6 00f0 2e 31 36 0d 0a 41 63 63 65 70 74 3a 20 74 65 78 .16..Accept: tex 0100 74 2f 70 6c 61 69 6e 2c 20 2a 2f 2a 0d 0a 41 63 t/plain, */*..Ac 0110 63 65 70 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 cept-Language: e 0120 6e 2d 75 73 2c 65 6e 3b 71 3d 30 2e 35 0d 0a 41 n-us,en;q=0.5..A 0130 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 3a 20 ccept-Encoding: 0140 67 7a 69 70 2c 64 65 66 6c 61 74 65 0d 0a 41 63 gzip,deflate..Ac 0150 63 65 70 74 2d 43 68 61 72 73 65 74 3a 20 49 53 cept-Charset: IS 0160 4f 2d 38 38 35 39 2d 31 2c 75 74 66 2d 38 3b 71 O-8859-1,utf-8;q 0170 3d 30 2e 37 2c 2a 3b 71 3d 30 2e 37 0d 0a 4b 65 =0.7,*;q=0.7..Ke 0180 65 70 2d 41 6c 69 76 65 3a 20 31 31 35 0d 0a 43 ep-Alive: 115..C 0190 6f 6e 6e 65 63 74 69 6f 6e 3a 20 6b 65 65 70 2d onnection: keep- 01a0 61 6c 69 76 65 0d 0a 58 2d 52 65 71 75 65 73 74 alive..X-Request 01b0 65 64 2d 57 69 74 68 3a 20 58 4d 4c 48 74 74 70 ed-With: XMLHttp 01c0 52 65 71 75 65 73 74 0d 0a 52 65 66 65 72 65 72 Request..Referer 01d0 3a 20 68 74 74 70 3a 2f 2f 6d 6f 65 61 73 64 65 : http://moeasde 01e0 76 33 3a 38 30 30 30 2f 65 6e 2d 55 53 2f 61 70 v3:8000/en-US/ap 01f0 70 2f 6c 61 75 6e 63 68 65 72 2f 68 6f 6d 65 0d p/launcher/home. 0200 0a 43 6f 6f 6b 69 65 3a 20 73 65 73 73 69 6f 6e .Cookie: session 0210 5f 69 64 5f 38 30 30 30 3d 63 37 38 63 30 39 35 _id_8000=c78c095 0220 66 39 66 62 64 63 33 32 33 32 66 64 63 38 31 66 f9fbdc3232fdc81f 0230 61 31 36 36 36 32 64 35 32 61 66 61 39 31 66 63 a16662d52afa91fc 0240 38 0d 0a 0d 0a 8.... No. Time Source Destination Protocol Info 272 12:37:54.597053 192.168.11.160 167.235.7.71 TCP [TCP Previous segment lost] irdmi > 36388 [PSH, ACK] Seq=8209 Ack=3367 Win=14208 Len=84 TSV=2592162746 TSER=499206908 Frame 272: 150 bytes on wire (1200 bits), 150 bytes captured (1200 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee) Internet Protocol, Src: 192.168.11.160 (192.168.11.160), Dst: 167.235.7.71 (167.235.7.71) Transmission Control Protocol, Src Port: irdmi (8000), Dst Port: 36388 (36388), Seq: 8209, Ack: 3367, Len: 84 Data (84 bytes) 0000 00 0d 60 2b e0 ee 00 15 2b a6 ad bf 08 00 45 00 ..`+....+.....E. 0010 00 88 1a 20 40 00 3d 06 a7 d5 c0 a8 0b a0 a7 eb ... @.=......... 0020 07 47 1f 40 8e 24 07 0a 57 cb 7a ee 24 db 80 18 .G.@.$..W.z.$... 0030 00 6f 46 78 00 00 01 01 08 0a 9a 81 43 ba 1d c1 .oFx........C... 0040 4a fc 7b 22 63 6f 75 6e 74 22 3a 20 30 2c 20 22 J.{"count": 0, " 0050 73 75 63 63 65 73 73 22 3a 20 74 72 75 65 2c 20 success": true, 0060 22 6d 65 73 73 61 67 65 73 22 3a 20 5b 5d 2c 20 "messages": [], 0070 22 6f 66 66 73 65 74 22 3a 20 30 2c 20 22 74 6f "offset": 0, "to 0080 74 61 6c 22 3a 20 30 2c 20 22 64 61 74 61 22 3a tal": 0, "data": 0090 20 6e 75 6c 6c 7d null} No. Time Source Destination Protocol Info 273 12:37:54.597133 167.235.7.71 192.168.11.160 TCP [TCP Dup ACK 271#1] 36388 > irdmi [ACK] Seq=3367 Ack=7808 Win=24640 Len=0 TSV=499206921 TSER=2592160146 SLE=8209 SRE=8293 Frame 273: 78 bytes on wire (624 bits), 78 bytes captured (624 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 192.168.11.160 (192.168.11.160) Transmission Control Protocol, Src Port: 36388 (36388), Dst Port: irdmi (8000), Seq: 3367, Ack: 7808, Len: 0 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 00 40 22 c7 40 00 40 06 9c 76 a7 eb 07 47 c0 a8 .@".@.@..v...G.. 0020 0b a0 8e 24 1f 40 7a ee 24 db 07 0a 56 3a b0 10 ...$.@z.$...V:.. 0030 01 81 1e 5b 00 00 01 01 08 0a 1d c1 4b 09 9a 81 ...[........K... 0040 39 92 01 01 05 0a 07 0a 57 cb 07 0a 58 1f 9.......W...X. No. Time Source Destination Protocol Info 274 12:37:54.597144 192.168.11.160 167.235.7.71 TCP [TCP Out-Of-Order] irdmi > 36388 [PSH, ACK] Seq=7808 Ack=3367 Win=14208 Len=401 TSV=2592162746 TSER=499206908 Frame 274: 467 bytes on wire (3736 bits), 467 bytes captured (3736 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee) Internet Protocol, Src: 192.168.11.160 (192.168.11.160), Dst: 167.235.7.71 (167.235.7.71) Transmission Control Protocol, Src Port: irdmi (8000), Dst Port: 36388 (36388), Seq: 7808, Ack: 3367, Len: 401 Data (401 bytes) 0000 00 0d 60 2b e0 ee 00 15 2b a6 ad bf 08 00 45 00 ..`+....+.....E. 0010 01 c5 1a 1f 40 00 3d 06 a6 99 c0 a8 0b a0 a7 eb ....@.=......... 0020 07 47 1f 40 8e 24 07 0a 56 3a 7a ee 24 db 80 18 .G.@.$..V:z.$... 0030 00 6f ee 4c 00 00 01 01 08 0a 9a 81 43 ba 1d c1 .o.L........C... 0040 4a fc 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f J.HTTP/1.1 200 O 0050 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 K..Content-Lengt 0060 68 3a 20 38 34 0d 0a 45 78 70 69 72 65 73 3a 20 h: 84..Expires: 0070 54 68 75 2c 20 32 36 20 4f 63 74 20 31 39 37 38 Thu, 26 Oct 1978 0080 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 53 00:00:00 GMT..S 0090 65 72 76 65 72 3a 20 43 68 65 72 72 79 50 79 2f erver: CherryPy/ 00a0 33 2e 31 2e 32 0d 0a 45 74 61 67 3a 20 22 34 36 3.1.2..Etag: "46 00b0 31 33 31 62 35 31 36 35 62 32 38 34 33 34 32 63 131b5165b284342c 00c0 33 66 31 61 66 64 38 32 61 34 38 30 64 63 22 0d 3f1afd82a480dc". 00d0 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 .Cache-Control: 00e0 6e 6f 2d 73 74 6f 72 65 2c 20 6d 61 78 2d 61 67 no-store, max-ag 00f0 65 3d 30 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d e=0, no-cache, m 0100 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a ust-revalidate.. 0110 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 38 20 41 70 Date: Mon, 18 Ap 0120 72 20 32 30 31 31 20 31 39 3a 33 37 3a 35 34 20 r 2011 19:37:54 0130 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 GMT..Content-Typ 0140 65 3a 20 74 65 78 74 2f 6a 73 6f 6e 3b 63 68 61 e: text/json;cha 0150 72 73 65 74 3d 75 74 66 2d 38 0d 0a 53 65 74 2d rset=utf-8..Set- 0160 43 6f 6f 6b 69 65 3a 20 73 65 73 73 69 6f 6e 5f Cookie: session_ 0170 69 64 5f 38 30 30 30 3d 63 37 38 63 30 39 35 66 id_8000=c78c095f 0180 39 66 62 64 63 33 32 33 32 66 64 63 38 31 66 61 9fbdc3232fdc81fa 0190 31 36 36 36 32 64 35 32 61 66 61 39 31 66 63 38 16662d52afa91fc8 01a0 3b 20 65 78 70 69 72 65 73 3d 54 75 65 2c 20 31 ; expires=Tue, 1 01b0 39 20 41 70 72 20 32 30 31 31 20 31 39 3a 33 37 9 Apr 2011 19:37 01c0 3a 35 34 20 47 4d 54 3b 20 50 61 74 68 3d 2f 0d :54 GMT; Path=/. 01d0 0a 0d 0a ... No. Time Source Destination Protocol Info 275 12:37:54.597162 167.235.7.71 192.168.11.160 TCP 36388 > irdmi [ACK] Seq=3367 Ack=8293 Win=27520 Len=0 TSV=499206921 TSER=2592162746 Frame 275: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 192.168.11.160 (192.168.11.160) Transmission Control Protocol, Src Port: 36388 (36388), Dst Port: irdmi (8000), Seq: 3367, Ack: 8293, Len: 0 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 00 34 22 c8 40 00 40 06 9c 81 a7 eb 07 47 c0 a8 .4".@.@......G.. 0020 0b a0 8e 24 1f 40 7a ee 24 db 07 0a 58 1f 80 10 ...$.@z.$...X... 0030 01 ae 06 37 00 00 01 01 08 0a 1d c1 4b 09 9a 81 ...7........K... 0040 43 ba C. No. Time Source Destination Protocol Info 276 12:37:54.610709 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 276: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 66241, Ack: 7057, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c d7 40 00 7e 06 f9 98 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 72 13 56 09 ed c6 50 18 ......@.r.V...P. 0030 fb 91 60 17 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..`......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c3 91 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 277 12:37:54.611479 167.235.13.48 167.235.7.25 TCP netbios-ssn > spw-dialer [ACK] Seq=66817 Ack=7183 Win=64275 Len=0 Frame 277: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 66817, Ack: 7183, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9c d8 40 00 7e 06 fb d7 a7 eb 0d 30 a7 eb .(..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 74 53 56 09 ee 44 50 10 ......@.tSV..DP. 0030 fb 13 48 19 00 00 00 00 00 00 00 00 ..H......... No. Time Source Destination Protocol Info 278 12:37:54.611554 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 278: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 66817, Ack: 7183, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c d9 40 00 7e 06 f9 96 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 74 53 56 09 ee 44 50 18 ......@.tSV..DP. 0030 fb 13 1d d7 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 03 92 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 279 12:37:54.611606 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 279: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 67393, Ack: 7183, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c da 40 00 7e 06 f9 95 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 76 93 56 09 ee 44 50 18 ......@.v.V..DP. 0030 fb 13 dc 96 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 42 92 0c ff 00 00 00 ff ...0....B....... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 280 12:37:54.611613 167.235.13.48 167.235.7.25 TCP netbios-ssn > spw-dialer [ACK] Seq=67969 Ack=7309 Win=64149 Len=0 Frame 280: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 67969, Ack: 7309, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9c db 40 00 7e 06 fb d4 a7 eb 0d 30 a7 eb .(..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 78 d3 56 09 ee c2 50 10 ......@.x.V...P. 0030 fa 95 43 99 00 00 00 00 00 00 00 00 ..C......... No. Time Source Destination Protocol Info 281 12:37:54.611665 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 281: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 67969, Ack: 7309, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c dc 40 00 7e 06 f9 93 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 78 d3 56 09 ee c2 50 18 ......@.x.V...P. 0030 fa 95 98 57 00 00 00 00 02 3c ff 53 4d 42 2e 00 ...W.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 84 92 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 282 12:37:54.611716 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 282: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 68545, Ack: 7309, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c dd 40 00 7e 06 f9 92 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 7b 13 56 09 ee c2 50 18 ......@.{.V...P. 0030 fa 95 55 17 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..U......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c5 92 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 283 12:37:54.632696 167.235.7.21 167.235.7.63 NBNS Name query NB SACCORP9<00> Frame 283: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Portwell_13:a2:aa (00:90:fb:13:a2:aa), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 167.235.7.21 (167.235.7.21), Dst: 167.235.7.63 (167.235.7.63) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service 0000 ff ff ff ff ff ff 00 90 fb 13 a2 aa 08 00 45 00 ..............E. 0010 00 4e 15 e1 00 00 80 11 c6 93 a7 eb 07 15 a7 eb .N.............. 0020 07 3f 00 89 00 89 00 3a 59 d7 ec ef 01 10 00 01 .?.....:Y....... 0030 00 00 00 00 00 00 20 46 44 45 42 45 44 45 44 45 ...... FDEBEDEDE 0040 50 46 43 46 41 44 4a 43 41 43 41 43 41 43 41 43 PFCFADJCACACACAC 0050 41 43 41 43 41 41 41 00 00 20 00 01 ACACAAA.. .. No. Time Source Destination Protocol Info 284 12:37:54.648645 Cisco_f3:bd:bf Broadcast 0x0806 ARP Frame 284: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_f3:bd:bf (00:12:00:f3:bd:bf), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Data (46 bytes) 0000 ff ff ff ff ff ff 00 12 00 f3 bd bf 08 06 00 01 ................ 0010 08 00 06 04 00 01 00 12 00 f3 bd bf a7 eb 07 7d ...............} 0020 00 00 00 00 00 00 a7 eb 07 6a 00 00 00 00 00 00 .........j...... 0030 00 00 00 00 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 285 12:37:54.922430 167.235.7.21 167.235.7.63 NBNS Name query NB TMS-NODE-9<00> Frame 285: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Portwell_13:a2:aa (00:90:fb:13:a2:aa), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 167.235.7.21 (167.235.7.21), Dst: 167.235.7.63 (167.235.7.63) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service 0000 ff ff ff ff ff ff 00 90 fb 13 a2 aa 08 00 45 00 ..............E. 0010 00 4e 15 e4 00 00 80 11 c6 90 a7 eb 07 15 a7 eb .N.............. 0020 07 3f 00 89 00 89 00 3a 20 d6 ec f1 01 10 00 01 .?.....: ....... 0030 00 00 00 00 00 00 20 46 45 45 4e 46 44 43 4e 45 ...... FEENFDCNE 0040 4f 45 50 45 45 45 46 43 4e 44 4a 43 41 43 41 43 OEPEEEFCNDJCACAC 0050 41 43 41 43 41 41 41 00 00 20 00 01 ACACAAA.. .. No. Time Source Destination Protocol Info 286 12:37:54.922690 167.235.7.21 167.235.7.63 NBNS Name query NB TMS-NODE-202<00> Frame 286: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Portwell_13:a2:aa (00:90:fb:13:a2:aa), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 167.235.7.21 (167.235.7.21), Dst: 167.235.7.63 (167.235.7.63) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service 0000 ff ff ff ff ff ff 00 90 fb 13 a2 aa 08 00 45 00 ..............E. 0010 00 4e 15 e5 00 00 80 11 c6 8f a7 eb 07 15 a7 eb .N.............. 0020 07 3f 00 89 00 89 00 3a 25 d2 ec f3 01 10 00 01 .?.....:%....... 0030 00 00 00 00 00 00 20 46 45 45 4e 46 44 43 4e 45 ...... FEENFDCNE 0040 4f 45 50 45 45 45 46 43 4e 44 43 44 41 44 43 43 OEPEEEFCNDCDADCC 0050 41 43 41 43 41 41 41 00 00 20 00 01 ACACAAA.. .. No. Time Source Destination Protocol Info 287 12:37:54.962762 167.235.7.71 74.125.224.55 TCP [TCP segment of a reassembled PDU] Frame 287: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 74.125.224.55 (74.125.224.55) Transmission Control Protocol, Src Port: 54697 (54697), Dst Port: https (443), Seq: 3526, Ack: 1487, Len: 1368 Secure Socket Layer 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 05 8c 6d d3 40 00 40 06 ed b1 a7 eb 07 47 4a 7d ..m.@.@......GJ} 0020 e0 37 d5 a9 01 bb 77 ff 55 07 85 30 b8 b0 80 10 .7....w.U..0.... 0030 00 9a c7 af 00 00 01 01 08 0a 1d c1 4c 76 6b cb ............Lvk. 0040 88 72 17 03 01 0b 6e 3d b1 10 78 d0 c9 22 a9 7a .r....n=..x..".z 0050 7f e0 27 37 3a 57 2a 27 d0 c3 a2 91 49 cd 3b ef ..'7:W*'....I.;. 0060 ce 29 ec 7f 71 e3 b0 f6 39 23 6e e5 f5 d9 43 f8 .)..q...9#n...C. 0070 3e e1 b8 41 d5 cf c9 3b e5 68 fd 00 e5 d7 84 0a >..A...;.h...... 0080 11 46 26 36 be 73 7b 0c 05 83 cf 1f f1 51 a1 8c .F&6.s{......Q.. 0090 e0 f8 8a 0b e6 50 90 bb 45 19 18 b3 74 19 91 3e .....P..E...t..> 00a0 49 76 1d 92 a7 ed d1 5a fa d0 85 3a c5 ad 87 8c Iv.....Z...:.... 00b0 b7 71 fa 88 c0 cd 97 8a 30 75 f0 4d d6 59 98 56 .q......0u.M.Y.V 00c0 c3 ee 80 87 d0 c6 a5 e3 24 17 1e 50 09 95 62 a8 ........$..P..b. 00d0 14 74 c7 05 04 82 a8 ca 6e 79 ba 2f 00 89 50 ae .t......ny./..P. 00e0 0f 55 c5 93 26 70 71 73 5a ad f5 70 19 f8 47 ed .U..&pqsZ..p..G. 00f0 8e 8f 79 83 d7 bf 96 be 83 2a b4 1c e7 09 6e 82 ..y......*....n. 0100 49 03 95 8d 30 5d e6 4c 24 85 c7 b4 cf 83 41 b0 I...0].L$.....A. 0110 bf 1f 99 dc 5d ac d6 1a ff 9e a3 98 96 07 2c 17 ....].........,. 0120 cc cd 67 fd e2 eb 80 01 3a ab 5a e3 5f d2 b9 c7 ..g.....:.Z._... 0130 b9 dd 18 63 0a 88 3a 60 7c d8 42 cb be 70 82 eb ...c..:`|.B..p.. 0140 a6 25 14 de e6 39 87 96 2d 27 b9 ae bc 40 c3 dc .%...9..-'...@.. 0150 66 96 48 de ca 8f c2 90 cd 4a 41 be d6 bc 00 ad f.H......JA..... 0160 04 f8 c2 0f 01 3c cf b8 3f 32 bb 1c de c9 85 0a .....<..?2...... 0170 5a 02 29 6e 47 14 9f c1 11 1f 48 5b ee 71 84 92 Z.)nG.....H[.q.. 0180 6f 51 8c e0 82 d6 a8 9a 34 e0 9b c2 b3 6e 75 a2 oQ......4....nu. 0190 a0 60 ec ef 4c b8 c5 6f 82 7f 26 59 21 04 dd c8 .`..L..o..&Y!... 01a0 45 f9 81 3a cb 33 0e 0d a8 91 97 81 02 14 c1 f6 E..:.3.......... 01b0 b5 8a e1 91 89 f8 b2 5a d3 93 24 6c 38 c7 33 c5 .......Z..$l8.3. 01c0 42 47 7f a2 35 ae 21 1e a4 cf 12 22 8b 4d 8b 88 BG..5.!....".M.. 01d0 b7 f2 ed f3 9b 27 31 28 33 43 d1 05 b2 0c 83 7b .....'1(3C.....{ 01e0 d7 8d 99 1c 9c a4 4b 7b eb 48 18 39 d6 14 4c 7a ......K{.H.9..Lz 01f0 7d 6b c4 0c a3 d6 e0 3f e2 f5 cc 3c 5f ed 91 1d }k.....?...<_... 0200 dd 57 ea 83 fc 02 48 9e ff a5 58 91 ed d3 0c 81 .W....H...X..... 0210 bc c5 93 46 59 96 f6 bf da b6 73 48 91 25 95 0c ...FY.....sH.%.. 0220 1d 7b d8 9a d6 2d 89 b5 c1 ad cc 06 41 b6 fc e8 .{...-......A... 0230 2f aa 56 64 c0 00 c9 4a df 2c dd 22 ce 41 dc 8b /.Vd...J.,.".A.. 0240 8f 8b 0f 41 85 13 b5 57 62 be 1b f5 58 89 ff e3 ...A...Wb...X... 0250 a6 90 10 7b 18 23 e5 cf c6 e4 95 ba d8 a0 ea f5 ...{.#.......... 0260 22 1e 6f 2f a0 59 53 23 52 c8 17 bb e3 c9 ef 92 ".o/.YS#R....... 0270 97 d3 67 8c 0d 82 66 26 1a 24 75 7b 44 c2 d9 12 ..g...f&.$u{D... 0280 50 b5 96 49 b1 cb e9 3e 7f b7 75 7e 2f bd 84 0a P..I...>..u~/... 0290 51 2a ca 99 2a e1 18 af 32 d7 05 6a 2e 0a 7d 92 Q*..*...2..j..}. 02a0 f6 48 d9 02 1a 28 ec 57 1a 91 80 12 18 40 6b da .H...(.W.....@k. 02b0 4b 1e 46 22 33 a9 40 c9 7d 8d 40 92 64 b8 1f 8e K.F"3.@.}.@.d... 02c0 0a ed b6 ed 9c fd 99 56 39 3c 4e 7a ca 99 49 a5 .......V9...~j...H. 04e0 07 77 5c c6 a6 cb 7c 1b 9e 59 88 5c ce 28 5e d5 .w\...|..Y.\.(^. 04f0 c2 db 4f 0f 4a 26 a7 87 71 d3 4e 36 11 4c 81 e6 ..O.J&..q.N6.L.. 0500 53 51 aa 13 1c fa d6 9c ff 2a 2d a7 95 08 fd 90 SQ.......*-..... 0510 1f 22 2d 58 58 bb 0d 9e 13 b5 0e 65 bf 6c fb a2 ."-XX......e.l.. 0520 12 ac 37 b4 c9 d0 be 98 cc 0c 94 fa 8a 38 59 0e ..7..........8Y. 0530 f1 bf 09 d0 fd db 7f 9f b4 2f 01 43 dd 23 fa df ........./.C.#.. 0540 ad ca 85 ee b1 b5 57 80 cf 4d 04 24 7d 65 08 56 ......W..M.$}e.V 0550 59 20 f0 8b af bd 68 c9 bb 47 63 ab 06 1e 8c 18 Y ....h..Gc..... 0560 b4 af 17 db e1 f3 d9 11 fd 3d 5e b9 e5 47 6b df .........=^..Gk. 0570 7b 03 31 f9 d6 8d d2 7d 45 44 62 94 78 90 5c 09 {.1....}EDb.x.\. 0580 a3 96 3a e0 6b 04 58 80 ce 4c 38 37 0c 05 72 05 ..:.k.X..L87..r. 0590 9e 22 7f 20 1d aa e3 42 34 83 .". ...B4. No. Time Source Destination Protocol Info 288 12:37:54.962793 167.235.7.71 74.125.224.55 TCP [TCP segment of a reassembled PDU] Frame 288: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 74.125.224.55 (74.125.224.55) Transmission Control Protocol, Src Port: 54697 (54697), Dst Port: https (443), Seq: 4894, Ack: 1487, Len: 1368 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 05 8c 6d d4 40 00 40 06 ed b0 a7 eb 07 47 4a 7d ..m.@.@......GJ} 0020 e0 37 d5 a9 01 bb 77 ff 5a 5f 85 30 b8 b0 80 10 .7....w.Z_.0.... 0030 00 9a ef 4a 00 00 01 01 08 0a 1d c1 4c 77 6b cb ...J........Lwk. 0040 88 72 d3 78 88 79 6f 89 58 58 7b 23 00 ff df 2d .r.x.yo.XX{#...- 0050 ac a5 80 b2 87 46 87 50 2c f6 c4 15 f1 13 e8 cf .....F.P,....... 0060 4a c3 df cd 99 dd 03 3d c4 3f 51 b9 13 5c f3 c8 J......=.?Q..\.. 0070 c8 e3 80 43 b5 00 6e 64 70 17 13 bf 52 57 f5 eb ...C..ndp...RW.. 0080 85 6e a4 93 5c 6f 51 0f 95 77 d9 a0 1e 27 8b 34 .n..\oQ..w...'.4 0090 74 9f 61 5b f9 f8 7c 8b 61 ec 9c 24 b7 b5 bc fc t.a[..|.a..$.... 00a0 e9 76 f9 c7 f5 03 46 e2 be 38 66 1c c9 02 77 d6 .v....F..8f...w. 00b0 0a 2a 19 aa ff b7 82 0b 5a 94 7d f0 98 6c 84 6f .*......Z.}..l.o 00c0 b2 cd f8 57 e1 a2 33 c4 52 cb 41 3e d5 67 fe 49 ...W..3.R.A>.g.I 00d0 7b 19 ff 8a ca ab 13 6d 94 42 a4 9f ef 80 9b 5d {......m.B.....] 00e0 a2 76 e4 dd 18 f3 7f ad a1 22 e4 3b 72 ed 1e a2 .v.......".;r... 00f0 5d 46 25 1e 0c dd fe 5f 5f b0 dc a5 76 22 a5 34 ]F%....__...v".4 0100 13 5b df 6a b4 8e c4 0f e5 3a 45 d2 d0 a0 6a 51 .[.j.....:E...jQ 0110 45 e5 11 7a a5 59 47 af 07 c6 58 2f 59 f2 98 99 E..z.YG...X/Y... 0120 ab 73 d6 52 d4 3e ec 71 08 ed 6f 85 fb 9d b6 4f .s.R.>.q..o....O 0130 c8 1c 95 7d 0d 61 a7 00 d7 bb 94 12 d3 22 6e fd ...}.a......."n. 0140 d7 e0 df 3a fc ad ee 0d 92 a8 c0 47 20 6d 15 d5 ...:.......G m.. 0150 e6 bf d7 a4 b5 da 48 6a 04 84 5e df f2 f6 15 ad ......Hj..^..... 0160 de df 98 4e 35 7e 57 95 cb ac 31 2e ae d9 43 69 ...N5~W...1...Ci 0170 2c 48 05 dd 9d 8d 85 7f 5c e2 62 e0 dd b9 62 25 ,H......\.b...b% 0180 56 f3 03 89 6d 42 e7 de 94 3b 63 b7 07 48 7b 00 V...mB...;c..H{. 0190 2e d4 56 18 de a6 fa ef 59 92 df f7 d0 60 1f e6 ..V.....Y....`.. 01a0 18 d7 8a 37 05 0d 7a 4f 18 4e 73 e6 bf 32 00 68 ...7..zO.Ns..2.h 01b0 a6 fb 31 67 dd e1 b6 28 75 d4 c7 55 47 94 68 82 ..1g...(u..UG.h. 01c0 94 c7 3f e5 2b 4c f8 4c 08 15 75 f0 d1 54 44 1d ..?.+L.L..u..TD. 01d0 23 10 21 bf ea c1 29 8d 22 53 ab b8 56 42 3e 05 #.!...)."S..VB>. 01e0 aa eb 67 f3 0a b0 45 5a db 3e 4a 38 5b 56 f3 84 ..g...EZ.>J8[V.. 01f0 3b 00 6f cb e7 89 f6 d5 14 15 e4 4d 40 16 cb 98 ;.o........M@... 0200 59 a1 25 93 cc 36 cb 92 e8 de 96 d0 78 5f 27 a5 Y.%..6......x_'. 0210 e4 a5 7e a6 78 07 ce 25 9b 83 48 d0 cc 4a eb 8b ..~.x..%..H..J.. 0220 bc e5 fd f7 a6 0a 92 3d 93 63 34 06 2e 24 57 b6 .......=.c4..$W. 0230 2e 90 23 1a 79 5f f6 97 f5 66 fc 7c 0e e5 f9 1d ..#.y_...f.|.... 0240 43 97 2b 04 db 13 4f ce 09 e2 85 6b 3f 93 f4 80 C.+...O....k?... 0250 35 69 7d 3c 42 03 ab a4 20 d6 29 70 91 92 03 0f 5i}.Y..j.. 0270 82 3c 66 24 3d f1 f7 d7 1c 81 5c 84 ff 28 b4 33 ..Jo 03f0 f8 af 28 54 0a 57 df 1f 74 0e 83 b2 38 dd 1c 95 ..(T.W..t...8... 0400 a0 14 56 41 bb 9f 22 a4 73 69 f5 b7 f7 b9 da 99 ..VA..".si...... 0410 5f 8b 07 36 72 f7 dd 7f bc 39 82 68 1a a7 d3 c2 _..6r....9.h.... 0420 75 f6 68 b7 30 3e 01 1a a7 98 16 a5 26 22 ae b1 u.h.0>......&".. 0430 47 ed f2 46 18 24 1f 54 75 b9 84 20 90 08 0b 19 G..F.$.Tu.. .... 0440 6e 9d 75 e2 44 16 36 14 ea 10 06 82 36 e0 24 0f n.u.D.6.....6.$. 0450 2e 99 d3 ec 1c dc 8a 37 4e be 21 e0 01 0f af df .......7N.!..... 0460 bc a5 bb 6b ca 96 1f d4 86 ec 78 24 b7 c9 b9 0f ...k......x$.... 0470 f4 91 98 d5 c8 d2 f0 25 49 a6 ca e9 31 1c 0a a5 .......%I...1... 0480 41 f5 a9 51 cf 05 87 15 e6 ff ed ec cb f8 de 6d A..Q...........m 0490 6c ad bb be 6d 7a d6 d0 b3 b7 79 7a 47 dd 0a cb l...mz....yzG... 04a0 b9 cf f1 67 a5 a4 5c 51 b5 07 3d 7f 50 d5 df 4b ...g..\Q..=.P..K 04b0 f6 d2 57 9b ee 29 14 d6 f1 08 45 8f ac 79 08 ad ..W..)....E..y.. 04c0 d2 5d 93 38 bf 9c 1a 88 e9 16 77 ef e1 3d 31 4d .].8......w..=1M 04d0 be cf d6 35 14 4b c2 ea c1 2c 28 3f c5 43 02 6f ...5.K...,(?.C.o 04e0 e3 cf fd 8d f0 ab 99 81 3b 39 f2 c1 fa 06 6a 5f ........;9....j_ 04f0 66 ac ca 7e 1c d6 42 1f c4 67 fb b4 0a 56 92 63 f..~..B..g...V.c 0500 e9 2b c4 0d 82 18 45 0b 64 7a 04 0f db db 4a 24 .+....E.dz....J$ 0510 2a e2 52 c4 25 f7 fd 49 49 37 d6 5b 2c 99 4e 37 *.R.%..II7.[,.N7 0520 54 b3 bb c2 f3 37 51 19 ef fb b1 a7 65 47 b6 2c T....7Q.....eG., 0530 04 8b a6 a2 5c 8d a1 74 ce 85 b4 45 f2 7b 29 1d ....\..t...E.{). 0540 a3 1a 7a d1 5f 07 5e 54 45 46 a4 34 9e 01 a5 ce ..z._.^TEF.4.... 0550 8d e9 1b 7c bc 27 86 e3 9f 41 90 93 bc 1b 94 5f ...|.'...A....._ 0560 c2 a6 da 8f 58 9b f5 6b e7 e5 c5 68 66 bc 54 f2 ....X..k...hf.T. 0570 22 e0 fe 71 ef 97 81 8e c6 37 de c2 db d4 dd ce "..q.....7...... 0580 6f b4 54 7b a7 b5 34 d5 d1 64 37 26 67 f7 25 c0 o.T{..4..d7&g.%. 0590 4d 32 b5 97 8b 91 a4 40 83 cb M2.....@.. No. Time Source Destination Protocol Info 289 12:37:54.962809 167.235.7.71 74.125.224.55 TLSv1 Application Data Frame 289: 261 bytes on wire (2088 bits), 261 bytes captured (2088 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 74.125.224.55 (74.125.224.55) Transmission Control Protocol, Src Port: 54697 (54697), Dst Port: https (443), Seq: 6262, Ack: 1487, Len: 195 [Reassembled TCP Segments (2931 bytes): #287(1368), #288(1368), #289(195)] Secure Socket Layer Frame (261 bytes): 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 00 f7 6d d5 40 00 40 06 f2 44 a7 eb 07 47 4a 7d ..m.@.@..D...GJ} 0020 e0 37 d5 a9 01 bb 77 ff 5f b7 85 30 b8 b0 80 18 .7....w._..0.... 0030 00 9a 4d 82 00 00 01 01 08 0a 1d c1 4c 77 6b cb ..M.........Lwk. 0040 88 72 b4 ad 4e 1d c3 96 1d d0 b7 53 41 cf f2 4d .r..N......SA..M 0050 36 69 94 3c d5 c7 af a9 88 84 c8 45 39 ae c2 06 6i.<.......E9... 0060 6d f6 c5 6d 3f 23 ce 04 4e c9 c5 f5 d2 e2 5c d2 m..m?#..N.....\. 0070 f6 df 9e 2e 11 83 5e e3 1b b5 f6 37 37 b2 89 90 ......^....77... 0080 28 4a 78 8f 93 6b 2e 34 c9 4f 0a 3a f9 89 8c 6c (Jx..k.4.O.:...l 0090 f6 79 3a 98 3f f1 43 8b 4d eb 66 6f e4 4f 55 0d .y:.?.C.M.fo.OU. 00a0 c0 09 de ac b8 fc 66 3e e9 fb c3 8a 0e cc ca 05 ......f>........ 00b0 bf f4 ad 29 4a 8d 94 9d 16 f5 d6 c8 40 d3 1e 2e ...)J.......@... 00c0 f8 f5 ae 9b e5 f9 d3 12 1a b8 9a cb 25 ac c2 f2 ............%... 00d0 b0 f1 77 3c 03 e9 dd 03 8f 25 24 bb 38 f7 9b 5c ..w<.....%$.8..\ 00e0 70 4e 05 d0 c9 10 8b b1 28 ff aa d3 e4 b1 15 c3 pN......(....... 00f0 7a d5 b9 80 ff 6f 8a a8 05 c2 ac 6d 08 fe 27 6c z....o.....m..'l 0100 9e ba 4b 0d 49 ..K.I Reassembled TCP (2931 bytes): 0000 17 03 01 0b 6e 3d b1 10 78 d0 c9 22 a9 7a 7f e0 ....n=..x..".z.. 0010 27 37 3a 57 2a 27 d0 c3 a2 91 49 cd 3b ef ce 29 '7:W*'....I.;..) 0020 ec 7f 71 e3 b0 f6 39 23 6e e5 f5 d9 43 f8 3e e1 ..q...9#n...C.>. 0030 b8 41 d5 cf c9 3b e5 68 fd 00 e5 d7 84 0a 11 46 .A...;.h.......F 0040 26 36 be 73 7b 0c 05 83 cf 1f f1 51 a1 8c e0 f8 &6.s{......Q.... 0050 8a 0b e6 50 90 bb 45 19 18 b3 74 19 91 3e 49 76 ...P..E...t..>Iv 0060 1d 92 a7 ed d1 5a fa d0 85 3a c5 ad 87 8c b7 71 .....Z...:.....q 0070 fa 88 c0 cd 97 8a 30 75 f0 4d d6 59 98 56 c3 ee ......0u.M.Y.V.. 0080 80 87 d0 c6 a5 e3 24 17 1e 50 09 95 62 a8 14 74 ......$..P..b..t 0090 c7 05 04 82 a8 ca 6e 79 ba 2f 00 89 50 ae 0f 55 ......ny./..P..U 00a0 c5 93 26 70 71 73 5a ad f5 70 19 f8 47 ed 8e 8f ..&pqsZ..p..G... 00b0 79 83 d7 bf 96 be 83 2a b4 1c e7 09 6e 82 49 03 y......*....n.I. 00c0 95 8d 30 5d e6 4c 24 85 c7 b4 cf 83 41 b0 bf 1f ..0].L$.....A... 00d0 99 dc 5d ac d6 1a ff 9e a3 98 96 07 2c 17 cc cd ..].........,... 00e0 67 fd e2 eb 80 01 3a ab 5a e3 5f d2 b9 c7 b9 dd g.....:.Z._..... 00f0 18 63 0a 88 3a 60 7c d8 42 cb be 70 82 eb a6 25 .c..:`|.B..p...% 0100 14 de e6 39 87 96 2d 27 b9 ae bc 40 c3 dc 66 96 ...9..-'...@..f. 0110 48 de ca 8f c2 90 cd 4a 41 be d6 bc 00 ad 04 f8 H......JA....... 0120 c2 0f 01 3c cf b8 3f 32 bb 1c de c9 85 0a 5a 02 ...<..?2......Z. 0130 29 6e 47 14 9f c1 11 1f 48 5b ee 71 84 92 6f 51 )nG.....H[.q..oQ 0140 8c e0 82 d6 a8 9a 34 e0 9b c2 b3 6e 75 a2 a0 60 ......4....nu..` 0150 ec ef 4c b8 c5 6f 82 7f 26 59 21 04 dd c8 45 f9 ..L..o..&Y!...E. 0160 81 3a cb 33 0e 0d a8 91 97 81 02 14 c1 f6 b5 8a .:.3............ 0170 e1 91 89 f8 b2 5a d3 93 24 6c 38 c7 33 c5 42 47 .....Z..$l8.3.BG 0180 7f a2 35 ae 21 1e a4 cf 12 22 8b 4d 8b 88 b7 f2 ..5.!....".M.... 0190 ed f3 9b 27 31 28 33 43 d1 05 b2 0c 83 7b d7 8d ...'1(3C.....{.. 01a0 99 1c 9c a4 4b 7b eb 48 18 39 d6 14 4c 7a 7d 6b ....K{.H.9..Lz}k 01b0 c4 0c a3 d6 e0 3f e2 f5 cc 3c 5f ed 91 1d dd 57 .....?...<_....W 01c0 ea 83 fc 02 48 9e ff a5 58 91 ed d3 0c 81 bc c5 ....H...X....... 01d0 93 46 59 96 f6 bf da b6 73 48 91 25 95 0c 1d 7b .FY.....sH.%...{ 01e0 d8 9a d6 2d 89 b5 c1 ad cc 06 41 b6 fc e8 2f aa ...-......A.../. 01f0 56 64 c0 00 c9 4a df 2c dd 22 ce 41 dc 8b 8f 8b Vd...J.,.".A.... 0200 0f 41 85 13 b5 57 62 be 1b f5 58 89 ff e3 a6 90 .A...Wb...X..... 0210 10 7b 18 23 e5 cf c6 e4 95 ba d8 a0 ea f5 22 1e .{.#..........". 0220 6f 2f a0 59 53 23 52 c8 17 bb e3 c9 ef 92 97 d3 o/.YS#R......... 0230 67 8c 0d 82 66 26 1a 24 75 7b 44 c2 d9 12 50 b5 g...f&.$u{D...P. 0240 96 49 b1 cb e9 3e 7f b7 75 7e 2f bd 84 0a 51 2a .I...>..u~/...Q* 0250 ca 99 2a e1 18 af 32 d7 05 6a 2e 0a 7d 92 f6 48 ..*...2..j..}..H 0260 d9 02 1a 28 ec 57 1a 91 80 12 18 40 6b da 4b 1e ...(.W.....@k.K. 0270 46 22 33 a9 40 c9 7d 8d 40 92 64 b8 1f 8e 0a ed F"3.@.}.@.d..... 0280 b6 ed 9c fd 99 56 39 3c 4e 7a ca 99 49 a5 fd a5 .....V9...~j...H..w 04a0 5c c6 a6 cb 7c 1b 9e 59 88 5c ce 28 5e d5 c2 db \...|..Y.\.(^... 04b0 4f 0f 4a 26 a7 87 71 d3 4e 36 11 4c 81 e6 53 51 O.J&..q.N6.L..SQ 04c0 aa 13 1c fa d6 9c ff 2a 2d a7 95 08 fd 90 1f 22 .......*-......" 04d0 2d 58 58 bb 0d 9e 13 b5 0e 65 bf 6c fb a2 12 ac -XX......e.l.... 04e0 37 b4 c9 d0 be 98 cc 0c 94 fa 8a 38 59 0e f1 bf 7..........8Y... 04f0 09 d0 fd db 7f 9f b4 2f 01 43 dd 23 fa df ad ca ......./.C.#.... 0500 85 ee b1 b5 57 80 cf 4d 04 24 7d 65 08 56 59 20 ....W..M.$}e.VY 0510 f0 8b af bd 68 c9 bb 47 63 ab 06 1e 8c 18 b4 af ....h..Gc....... 0520 17 db e1 f3 d9 11 fd 3d 5e b9 e5 47 6b df 7b 03 .......=^..Gk.{. 0530 31 f9 d6 8d d2 7d 45 44 62 94 78 90 5c 09 a3 96 1....}EDb.x.\... 0540 3a e0 6b 04 58 80 ce 4c 38 37 0c 05 72 05 9e 22 :.k.X..L87..r.." 0550 7f 20 1d aa e3 42 34 83 d3 78 88 79 6f 89 58 58 . ...B4..x.yo.XX 0560 7b 23 00 ff df 2d ac a5 80 b2 87 46 87 50 2c f6 {#...-.....F.P,. 0570 c4 15 f1 13 e8 cf 4a c3 df cd 99 dd 03 3d c4 3f ......J......=.? 0580 51 b9 13 5c f3 c8 c8 e3 80 43 b5 00 6e 64 70 17 Q..\.....C..ndp. 0590 13 bf 52 57 f5 eb 85 6e a4 93 5c 6f 51 0f 95 77 ..RW...n..\oQ..w 05a0 d9 a0 1e 27 8b 34 74 9f 61 5b f9 f8 7c 8b 61 ec ...'.4t.a[..|.a. 05b0 9c 24 b7 b5 bc fc e9 76 f9 c7 f5 03 46 e2 be 38 .$.....v....F..8 05c0 66 1c c9 02 77 d6 0a 2a 19 aa ff b7 82 0b 5a 94 f...w..*......Z. 05d0 7d f0 98 6c 84 6f b2 cd f8 57 e1 a2 33 c4 52 cb }..l.o...W..3.R. 05e0 41 3e d5 67 fe 49 7b 19 ff 8a ca ab 13 6d 94 42 A>.g.I{......m.B 05f0 a4 9f ef 80 9b 5d a2 76 e4 dd 18 f3 7f ad a1 22 .....].v......." 0600 e4 3b 72 ed 1e a2 5d 46 25 1e 0c dd fe 5f 5f b0 .;r...]F%....__. 0610 dc a5 76 22 a5 34 13 5b df 6a b4 8e c4 0f e5 3a ..v".4.[.j.....: 0620 45 d2 d0 a0 6a 51 45 e5 11 7a a5 59 47 af 07 c6 E...jQE..z.YG... 0630 58 2f 59 f2 98 99 ab 73 d6 52 d4 3e ec 71 08 ed X/Y....s.R.>.q.. 0640 6f 85 fb 9d b6 4f c8 1c 95 7d 0d 61 a7 00 d7 bb o....O...}.a.... 0650 94 12 d3 22 6e fd d7 e0 df 3a fc ad ee 0d 92 a8 ..."n....:...... 0660 c0 47 20 6d 15 d5 e6 bf d7 a4 b5 da 48 6a 04 84 .G m........Hj.. 0670 5e df f2 f6 15 ad de df 98 4e 35 7e 57 95 cb ac ^........N5~W... 0680 31 2e ae d9 43 69 2c 48 05 dd 9d 8d 85 7f 5c e2 1...Ci,H......\. 0690 62 e0 dd b9 62 25 56 f3 03 89 6d 42 e7 de 94 3b b...b%V...mB...; 06a0 63 b7 07 48 7b 00 2e d4 56 18 de a6 fa ef 59 92 c..H{...V.....Y. 06b0 df f7 d0 60 1f e6 18 d7 8a 37 05 0d 7a 4f 18 4e ...`.....7..zO.N 06c0 73 e6 bf 32 00 68 a6 fb 31 67 dd e1 b6 28 75 d4 s..2.h..1g...(u. 06d0 c7 55 47 94 68 82 94 c7 3f e5 2b 4c f8 4c 08 15 .UG.h...?.+L.L.. 06e0 75 f0 d1 54 44 1d 23 10 21 bf ea c1 29 8d 22 53 u..TD.#.!...)."S 06f0 ab b8 56 42 3e 05 aa eb 67 f3 0a b0 45 5a db 3e ..VB>...g...EZ.> 0700 4a 38 5b 56 f3 84 3b 00 6f cb e7 89 f6 d5 14 15 J8[V..;.o....... 0710 e4 4d 40 16 cb 98 59 a1 25 93 cc 36 cb 92 e8 de .M@...Y.%..6.... 0720 96 d0 78 5f 27 a5 e4 a5 7e a6 78 07 ce 25 9b 83 ..x_'...~.x..%.. 0730 48 d0 cc 4a eb 8b bc e5 fd f7 a6 0a 92 3d 93 63 H..J.........=.c 0740 34 06 2e 24 57 b6 2e 90 23 1a 79 5f f6 97 f5 66 4..$W...#.y_...f 0750 fc 7c 0e e5 f9 1d 43 97 2b 04 db 13 4f ce 09 e2 .|....C.+...O... 0760 85 6b 3f 93 f4 80 35 69 7d 3c 42 03 ab a4 20 d6 .k?...5i}. 0780 59 9d 15 6a ef aa 82 3c 66 24 3d f1 f7 d7 1c 81 Y..j....Jo..(T.W..t. 0910 83 b2 38 dd 1c 95 a0 14 56 41 bb 9f 22 a4 73 69 ..8.....VA..".si 0920 f5 b7 f7 b9 da 99 5f 8b 07 36 72 f7 dd 7f bc 39 ......_..6r....9 0930 82 68 1a a7 d3 c2 75 f6 68 b7 30 3e 01 1a a7 98 .h....u.h.0>.... 0940 16 a5 26 22 ae b1 47 ed f2 46 18 24 1f 54 75 b9 ..&"..G..F.$.Tu. 0950 84 20 90 08 0b 19 6e 9d 75 e2 44 16 36 14 ea 10 . ....n.u.D.6... 0960 06 82 36 e0 24 0f 2e 99 d3 ec 1c dc 8a 37 4e be ..6.$........7N. 0970 21 e0 01 0f af df bc a5 bb 6b ca 96 1f d4 86 ec !........k...... 0980 78 24 b7 c9 b9 0f f4 91 98 d5 c8 d2 f0 25 49 a6 x$...........%I. 0990 ca e9 31 1c 0a a5 41 f5 a9 51 cf 05 87 15 e6 ff ..1...A..Q...... 09a0 ed ec cb f8 de 6d 6c ad bb be 6d 7a d6 d0 b3 b7 .....ml...mz.... 09b0 79 7a 47 dd 0a cb b9 cf f1 67 a5 a4 5c 51 b5 07 yzG......g..\Q.. 09c0 3d 7f 50 d5 df 4b f6 d2 57 9b ee 29 14 d6 f1 08 =.P..K..W..).... 09d0 45 8f ac 79 08 ad d2 5d 93 38 bf 9c 1a 88 e9 16 E..y...].8...... 09e0 77 ef e1 3d 31 4d be cf d6 35 14 4b c2 ea c1 2c w..=1M...5.K..., 09f0 28 3f c5 43 02 6f e3 cf fd 8d f0 ab 99 81 3b 39 (?.C.o........;9 0a00 f2 c1 fa 06 6a 5f 66 ac ca 7e 1c d6 42 1f c4 67 ....j_f..~..B..g 0a10 fb b4 0a 56 92 63 e9 2b c4 0d 82 18 45 0b 64 7a ...V.c.+....E.dz 0a20 04 0f db db 4a 24 2a e2 52 c4 25 f7 fd 49 49 37 ....J$*.R.%..II7 0a30 d6 5b 2c 99 4e 37 54 b3 bb c2 f3 37 51 19 ef fb .[,.N7T....7Q... 0a40 b1 a7 65 47 b6 2c 04 8b a6 a2 5c 8d a1 74 ce 85 ..eG.,....\..t.. 0a50 b4 45 f2 7b 29 1d a3 1a 7a d1 5f 07 5e 54 45 46 .E.{)...z._.^TEF 0a60 a4 34 9e 01 a5 ce 8d e9 1b 7c bc 27 86 e3 9f 41 .4.......|.'...A 0a70 90 93 bc 1b 94 5f c2 a6 da 8f 58 9b f5 6b e7 e5 ....._....X..k.. 0a80 c5 68 66 bc 54 f2 22 e0 fe 71 ef 97 81 8e c6 37 .hf.T."..q.....7 0a90 de c2 db d4 dd ce 6f b4 54 7b a7 b5 34 d5 d1 64 ......o.T{..4..d 0aa0 37 26 67 f7 25 c0 4d 32 b5 97 8b 91 a4 40 83 cb 7&g.%.M2.....@.. 0ab0 b4 ad 4e 1d c3 96 1d d0 b7 53 41 cf f2 4d 36 69 ..N......SA..M6i 0ac0 94 3c d5 c7 af a9 88 84 c8 45 39 ae c2 06 6d f6 .<.......E9...m. 0ad0 c5 6d 3f 23 ce 04 4e c9 c5 f5 d2 e2 5c d2 f6 df .m?#..N.....\... 0ae0 9e 2e 11 83 5e e3 1b b5 f6 37 37 b2 89 90 28 4a ....^....77...(J 0af0 78 8f 93 6b 2e 34 c9 4f 0a 3a f9 89 8c 6c f6 79 x..k.4.O.:...l.y 0b00 3a 98 3f f1 43 8b 4d eb 66 6f e4 4f 55 0d c0 09 :.?.C.M.fo.OU... 0b10 de ac b8 fc 66 3e e9 fb c3 8a 0e cc ca 05 bf f4 ....f>.......... 0b20 ad 29 4a 8d 94 9d 16 f5 d6 c8 40 d3 1e 2e f8 f5 .)J.......@..... 0b30 ae 9b e5 f9 d3 12 1a b8 9a cb 25 ac c2 f2 b0 f1 ..........%..... 0b40 77 3c 03 e9 dd 03 8f 25 24 bb 38 f7 9b 5c 70 4e w<.....%$.8..\pN 0b50 05 d0 c9 10 8b b1 28 ff aa d3 e4 b1 15 c3 7a d5 ......(.......z. 0b60 b9 80 ff 6f 8a a8 05 c2 ac 6d 08 fe 27 6c 9e ba ...o.....m..'l.. 0b70 4b 0d 49 K.I No. Time Source Destination Protocol Info 290 12:37:54.971863 74.125.224.55 167.235.7.71 TCP https > 54697 [ACK] Seq=1487 Ack=6457 Win=16128 Len=0 TSV=1808508626 TSER=499207286 Frame 290: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_f3:bd:bf (00:12:00:f3:bd:bf), Dst: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee) Internet Protocol, Src: 74.125.224.55 (74.125.224.55), Dst: 167.235.7.71 (167.235.7.71) Transmission Control Protocol, Src Port: https (443), Dst Port: 54697 (54697), Seq: 1487, Ack: 6457, Len: 0 0000 00 0d 60 2b e0 ee 00 12 00 f3 bd bf 08 00 45 00 ..`+..........E. 0010 00 34 d1 e1 00 00 35 06 d9 fb 4a 7d e0 37 a7 eb .4....5...J}.7.. 0020 07 47 01 bb d5 a9 85 30 b8 b0 77 ff 60 7a 80 10 .G.....0..w.`z.. 0030 00 fc 31 45 00 00 01 01 08 0a 6b cb a6 d2 1d c1 ..1E......k..... 0040 4c 76 Lv No. Time Source Destination Protocol Info 291 12:37:55.002107 74.125.224.55 167.235.7.71 TLSv1 Application Data, Application Data Frame 291: 469 bytes on wire (3752 bits), 469 bytes captured (3752 bits) Ethernet II, Src: Cisco_f3:bd:bf (00:12:00:f3:bd:bf), Dst: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee) Internet Protocol, Src: 74.125.224.55 (74.125.224.55), Dst: 167.235.7.71 (167.235.7.71) Transmission Control Protocol, Src Port: https (443), Dst Port: 54697 (54697), Seq: 1487, Ack: 6457, Len: 403 Secure Socket Layer 0000 00 0d 60 2b e0 ee 00 12 00 f3 bd bf 08 00 45 00 ..`+..........E. 0010 01 c7 d1 e2 00 00 35 06 d8 67 4a 7d e0 37 a7 eb ......5..gJ}.7.. 0020 07 47 01 bb d5 a9 85 30 b8 b0 77 ff 60 7a 80 18 .G.....0..w.`z.. 0030 00 fc fa 3d 00 00 01 01 08 0a 6b cb a6 f0 1d c1 ...=......k..... 0040 4c 76 17 03 01 01 59 17 52 d5 6b a9 f4 39 b7 79 Lv....Y.R.k..9.y 0050 5c 40 15 ae fd f4 76 57 6b 20 f3 98 5f c3 26 f0 \@....vWk .._.&. 0060 94 8c 8b 5c 36 ec 91 3b 66 32 3d a8 1b da 78 29 ...\6..;f2=...x) 0070 9c c7 b2 f1 08 df 24 8f 2a 01 42 a4 2b bb e1 e4 ......$.*.B.+... 0080 b5 de 07 d1 df db 6e 4a a0 5e 64 0e 0a f2 71 9b ......nJ.^d...q. 0090 be b1 34 09 09 aa 34 10 b3 62 a5 bd e4 34 52 4f ..4...4..b...4RO 00a0 79 99 8e e0 de cf 96 a5 19 b2 fd 05 4c 88 f5 6f y...........L..o 00b0 25 5d 1d b3 5f b1 59 24 72 e8 9f 52 31 38 f5 8f %].._.Y$r..R18.. 00c0 db e6 05 ec 8a 4f f3 e2 b5 b0 39 13 8a 71 84 ee .....O....9..q.. 00d0 48 64 52 ac 35 b3 e7 05 22 9c 2b 1a 7c 2b 42 f2 HdR.5...".+.|+B. 00e0 c0 17 3c a3 c1 63 6e e0 e0 88 6d 08 2a 98 36 b6 ..<..cn...m.*.6. 00f0 c6 a1 45 c7 20 e3 71 7b 8f 4f 99 07 14 28 e3 e2 ..E. .q{.O...(.. 0100 1f 42 7e 89 45 c3 70 e7 ba dc 3e b3 fa 4e ae dc .B~.E.p...>..N.. 0110 c6 7b c7 27 8b da 0b 3a 07 3e b9 d5 88 31 5b d0 .{.'...:.>...1[. 0120 e0 74 7b b5 87 7a 83 46 b6 8f b6 64 f7 5f 6a 64 .t{..z.F...d._jd 0130 35 5a e8 40 63 13 fb b3 20 4d 93 0c db d4 34 db 5Z.@c... M....4. 0140 05 6f 6d dd a4 4b 30 6c 5b 6c 59 c2 df 59 68 30 .om..K0l[lY..Yh0 0150 5f 18 9e b4 a1 0a 1f 5e 00 0e 92 04 7d b1 c0 7a _......^....}..z 0160 32 98 2b 43 53 a7 d5 1c ff 36 39 4c 89 1b db 38 2.+CS....69L...8 0170 9f 49 f7 f5 bc 3b c0 9c df 3d 78 db 96 86 05 c6 .I...;...=x..... 0180 f1 64 61 11 7d 4f 75 8f 39 8c ee 35 37 0d bd 5b .da.}Ou.9..57..[ 0190 61 e1 fd 59 1f 3a 49 4f 8e 72 b4 36 c1 f0 ba 06 a..Y.:IO.r.6.... 01a0 17 03 01 00 30 28 a9 f4 e0 28 9e 75 f0 20 06 76 ....0(...(.u. .v 01b0 63 a8 79 4c 38 31 c7 8e 98 fc 10 4e 9a f3 f1 2c c.yL81.....N..., 01c0 44 b8 4d b4 df 40 c6 c8 cf 18 80 6b 5a 50 c0 5a D.M..@.....kZP.Z 01d0 d2 59 60 26 f4 .Y`&. No. Time Source Destination Protocol Info 292 12:37:55.002178 167.235.7.71 74.125.224.55 TCP 54697 > https [ACK] Seq=6457 Ack=1890 Win=12544 Len=0 TSV=499207326 TSER=1808508656 Frame 292: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 74.125.224.55 (74.125.224.55) Transmission Control Protocol, Src Port: 54697 (54697), Dst Port: https (443), Seq: 6457, Ack: 1890, Len: 0 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 00 34 6d d6 40 00 40 06 f3 06 a7 eb 07 47 4a 7d .4m.@.@......GJ} 0020 e0 37 d5 a9 01 bb 77 ff 60 7a 85 30 ba 43 80 10 .7....w.`z.0.C.. 0030 00 c4 2f a4 00 00 01 01 08 0a 1d c1 4c 9e 6b cb ../.........L.k. 0040 a6 f0 .. No. Time Source Destination Protocol Info 293 12:37:55.110714 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 293: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 69121, Ack: 7372, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c df 40 00 7e 06 f9 90 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 7d 53 56 09 ef 01 50 18 ......@.}SV...P. 0030 fa 56 13 d7 00 00 00 00 02 3c ff 53 4d 42 2e 00 .V.......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 04 93 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 294 12:37:55.111515 167.235.13.48 167.235.7.25 TCP netbios-ssn > spw-dialer [ACK] Seq=69697 Ack=7498 Win=65535 Len=0 Frame 294: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 69697, Ack: 7498, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9c e0 40 00 7e 06 fb cf a7 eb 0d 30 a7 eb .(..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 7f 93 56 09 ef 7f 50 10 ......@...V...P. 0030 ff ff 36 b2 00 00 00 00 00 00 00 00 ..6......... No. Time Source Destination Protocol Info 295 12:37:55.111590 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 295: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 69697, Ack: 7498, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c e1 40 00 7e 06 f9 8e a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 7f 93 56 09 ef 7f 50 18 ......@...V...P. 0030 ff ff cb 6f 00 00 00 00 02 3c ff 53 4d 42 2e 00 ...o.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 44 93 0c ff 00 00 00 ff ...0....D....... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 296 12:37:55.111641 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 296: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 70273, Ack: 7498, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c e2 40 00 7e 06 f9 8d a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 81 d3 56 09 ef 7f 50 18 ......@...V...P. 0030 ff ff 8b 2f 00 00 00 00 02 3c ff 53 4d 42 2e 00 .../.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 82 93 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 297 12:37:55.111694 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 297: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 70849, Ack: 7561, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c e3 40 00 7e 06 f9 8c a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 84 13 56 09 ef be 50 18 ......@...V...P. 0030 ff c0 45 ee 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..E......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c5 93 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 298 12:37:55.111750 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 298: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 71425, Ack: 7624, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c e4 40 00 7e 06 f9 8b a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 86 53 56 09 ef fd 50 18 ......@..SV...P. 0030 ff 81 05 ae 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 03 94 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 299 12:37:55.332642 74.125.53.189 167.235.7.71 TLSv1 Application Data Frame 299: 95 bytes on wire (760 bits), 95 bytes captured (760 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee) Internet Protocol, Src: 74.125.53.189 (74.125.53.189), Dst: 167.235.7.71 (167.235.7.71) Transmission Control Protocol, Src Port: https (443), Dst Port: 55950 (55950), Seq: 1, Ack: 1, Len: 29 Secure Socket Layer 0000 00 0d 60 2b e0 ee 00 15 2b a6 ad bf 08 00 45 00 ..`+....+.....E. 0010 00 51 f3 cb 00 00 31 06 66 6f 4a 7d 35 bd a7 eb .Q....1.foJ}5... 0020 07 47 01 bb da 8e 2b be 21 46 66 25 91 d7 80 18 .G....+.!Ff%.... 0030 00 ea 64 ea 00 00 01 01 08 0a ef f5 d5 8b 1d c0 ..d............. 0040 e0 53 17 03 01 00 18 b6 d8 01 c3 d2 12 60 ae df .S...........`.. 0050 e7 0e 9a f3 0f ba 43 cc c6 72 3c fe b0 ae e5 ......C..r<.... No. Time Source Destination Protocol Info 300 12:37:55.336532 74.125.53.189 167.235.7.71 TLSv1 Application Data Frame 300: 113 bytes on wire (904 bits), 113 bytes captured (904 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee) Internet Protocol, Src: 74.125.53.189 (74.125.53.189), Dst: 167.235.7.71 (167.235.7.71) Transmission Control Protocol, Src Port: https (443), Dst Port: 55950 (55950), Seq: 30, Ack: 1, Len: 47 Secure Socket Layer 0000 00 0d 60 2b e0 ee 00 15 2b a6 ad bf 08 00 45 00 ..`+....+.....E. 0010 00 63 f3 cc 00 00 31 06 66 5c 4a 7d 35 bd a7 eb .c....1.f\J}5... 0020 07 47 01 bb da 8e 2b be 21 63 66 25 91 d7 80 18 .G....+.!cf%.... 0030 00 ea ca 8e 00 00 01 01 08 0a ef f5 d5 8f 1d c0 ................ 0040 e0 53 17 03 01 00 2a 32 10 96 d4 c0 4f f0 4f d8 .S....*2....O.O. 0050 0b 56 11 03 c0 e5 2f bc 84 be 80 e5 6d a1 d7 72 .V..../.....m..r 0060 7d e8 97 51 c3 81 11 70 17 02 fa 37 4d 80 99 b0 }..Q...p...7M... 0070 95 . No. Time Source Destination Protocol Info 301 12:37:55.336835 167.235.7.71 74.125.53.189 TCP 55950 > https [ACK] Seq=1 Ack=77 Win=125 Len=0 TSV=499207661 TSER=4025865611 Frame 301: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 74.125.53.189 (74.125.53.189) Transmission Control Protocol, Src Port: 55950 (55950), Dst Port: https (443), Seq: 1, Ack: 77, Len: 0 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 00 34 5d 91 40 00 40 06 ad c6 a7 eb 07 47 4a 7d .4].@.@......GJ} 0020 35 bd da 8e 01 bb 66 25 91 d7 2b be 21 92 80 10 5.....f%..+.!... 0030 00 7d f4 0c 00 00 01 01 08 0a 1d c1 4d ed ef f5 .}..........M... 0040 d5 8b .. No. Time Source Destination Protocol Info 302 12:37:55.343802 74.125.53.189 167.235.7.71 TLSv1 Application Data Frame 302: 93 bytes on wire (744 bits), 93 bytes captured (744 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee) Internet Protocol, Src: 74.125.53.189 (74.125.53.189), Dst: 167.235.7.71 (167.235.7.71) Transmission Control Protocol, Src Port: https (443), Dst Port: 55950 (55950), Seq: 77, Ack: 1, Len: 27 Secure Socket Layer 0000 00 0d 60 2b e0 ee 00 15 2b a6 ad bf 08 00 45 00 ..`+....+.....E. 0010 00 4f f3 cd 00 00 31 06 66 6f 4a 7d 35 bd a7 eb .O....1.foJ}5... 0020 07 47 01 bb da 8e 2b be 21 92 66 25 91 d7 80 18 .G....+.!.f%.... 0030 00 ea 31 19 00 00 01 01 08 0a ef f5 d5 93 1d c0 ..1............. 0040 e0 53 17 03 01 00 16 36 87 2e af 63 c5 88 c2 c6 .S.....6...c.... 0050 f0 db 9d ab bb a1 95 87 01 0c b3 1d af ............. No. Time Source Destination Protocol Info 303 12:37:55.382050 167.235.7.21 167.235.7.63 NBNS Name query NB SACCORP9<00> Frame 303: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Portwell_13:a2:aa (00:90:fb:13:a2:aa), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 167.235.7.21 (167.235.7.21), Dst: 167.235.7.63 (167.235.7.63) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service 0000 ff ff ff ff ff ff 00 90 fb 13 a2 aa 08 00 45 00 ..............E. 0010 00 4e 15 e9 00 00 80 11 c6 8b a7 eb 07 15 a7 eb .N.............. 0020 07 3f 00 89 00 89 00 3a 59 d7 ec ef 01 10 00 01 .?.....:Y....... 0030 00 00 00 00 00 00 20 46 44 45 42 45 44 45 44 45 ...... FDEBEDEDE 0040 50 46 43 46 41 44 4a 43 41 43 41 43 41 43 41 43 PFCFADJCACACACAC 0050 41 43 41 43 41 41 41 00 00 20 00 01 ACACAAA.. .. No. Time Source Destination Protocol Info 304 12:37:55.383786 167.235.7.71 74.125.53.189 TCP 55950 > https [ACK] Seq=1 Ack=104 Win=125 Len=0 TSV=499207708 TSER=4025865619 Frame 304: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 74.125.53.189 (74.125.53.189) Transmission Control Protocol, Src Port: 55950 (55950), Dst Port: https (443), Seq: 1, Ack: 104, Len: 0 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 00 34 5d 92 40 00 40 06 ad c5 a7 eb 07 47 4a 7d .4].@.@......GJ} 0020 35 bd da 8e 01 bb 66 25 91 d7 2b be 21 ad 80 10 5.....f%..+.!... 0030 00 7d f3 ba 00 00 01 01 08 0a 1d c1 4e 1c ef f5 .}..........N... 0040 d5 93 .. No. Time Source Destination Protocol Info 305 12:37:55.610763 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 305: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 72001, Ack: 7687, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c e6 40 00 7e 06 f9 89 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 88 93 56 09 f0 3c 50 18 ......@...V.. spw-dialer [ACK] Seq=72577 Ack=7813 Win=65220 Len=0 Frame 306: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 72577, Ack: 7813, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9c e7 40 00 7e 06 fb c8 a7 eb 0d 30 a7 eb .(..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 8a d3 56 09 f0 ba 50 10 ......@...V...P. 0030 fe c4 2b 72 00 00 00 00 00 00 00 00 ..+r........ No. Time Source Destination Protocol Info 307 12:37:55.611575 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 307: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 72577, Ack: 7813, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c e8 40 00 7e 06 f9 87 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 8a d3 56 09 f0 ba 50 18 ......@...V...P. 0030 fe c4 81 2d 00 00 00 00 02 3c ff 53 4d 42 2e 00 ...-.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 83 94 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 308 12:37:55.611630 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 308: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 73153, Ack: 7813, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c e9 40 00 7e 06 f9 86 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 8d 13 56 09 f0 ba 50 18 ......@...V...P. 0030 fe c4 3c ed 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..<......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c5 94 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 309 12:37:55.611680 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 309: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 73729, Ack: 7876, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c ea 40 00 7e 06 f9 85 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 8f 53 56 09 f0 f9 50 18 ......@..SV...P. 0030 fe 85 fd ad 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 02 95 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 310 12:37:55.611746 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 310: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 74305, Ack: 7939, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c eb 40 00 7e 06 f9 84 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 91 93 56 09 f1 38 50 18 ......@...V..8P. 0030 fe 46 b9 6d 00 00 00 00 02 3c ff 53 4d 42 2e 00 .F.m.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 44 95 0c ff 00 00 00 ff ...0....D....... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 311 12:37:55.672099 167.235.7.21 167.235.7.63 NBNS Name query NB TMS-NODE-202<00> Frame 311: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Portwell_13:a2:aa (00:90:fb:13:a2:aa), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 167.235.7.21 (167.235.7.21), Dst: 167.235.7.63 (167.235.7.63) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service 0000 ff ff ff ff ff ff 00 90 fb 13 a2 aa 08 00 45 00 ..............E. 0010 00 4e 15 ee 00 00 80 11 c6 86 a7 eb 07 15 a7 eb .N.............. 0020 07 3f 00 89 00 89 00 3a 25 d2 ec f3 01 10 00 01 .?.....:%....... 0030 00 00 00 00 00 00 20 46 45 45 4e 46 44 43 4e 45 ...... FEENFDCNE 0040 4f 45 50 45 45 45 46 43 4e 44 43 44 41 44 43 43 OEPEEEFCNDCDADCC 0050 41 43 41 43 41 41 41 00 00 20 00 01 ACACAAA.. .. No. Time Source Destination Protocol Info 312 12:37:56.091715 Cisco_f3:bd:bf Broadcast 0x0806 ARP Frame 312: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_f3:bd:bf (00:12:00:f3:bd:bf), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Data (46 bytes) 0000 ff ff ff ff ff ff 00 12 00 f3 bd bf 08 06 00 01 ................ 0010 08 00 06 04 00 01 00 12 00 f3 bd bf a7 eb 07 7d ...............} 0020 00 00 00 00 00 00 a7 eb 07 73 00 00 00 00 00 00 .........s...... 0030 00 00 00 00 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 313 12:37:56.110790 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 313: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 74881, Ack: 8002, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c ed 40 00 7e 06 f9 82 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 93 d3 56 09 f1 77 50 18 ......@...V..wP. 0030 fe 07 79 2d 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..y-.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 82 95 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 314 12:37:56.111628 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 314: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 75457, Ack: 8065, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c ee 40 00 7e 06 f9 81 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 96 13 56 09 f1 b6 50 18 ......@...V...P. 0030 fd c8 36 ed 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..6......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c2 95 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 315 12:37:56.111672 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 315: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 76033, Ack: 8191, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c ef 40 00 7e 06 f9 80 a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 98 53 56 09 f2 34 50 18 ......@..SV..4P. 0030 fd 4a f2 ac 00 00 00 00 02 3c ff 53 4d 42 2e 00 .J.......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 04 96 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 316 12:37:56.111724 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 316: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 76609, Ack: 8191, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c f0 40 00 7e 06 f9 7f a7 eb 0d 30 a7 eb .h..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 9a 93 56 09 f2 34 50 18 ......@...V..4P. 0030 fd 4a af 6b 00 00 00 00 02 3c ff 53 4d 42 2e 00 .J.k.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 45 96 0c ff 00 00 00 ff ...0....E....... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 317 12:37:56.111777 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 317: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 77185, Ack: 8254, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c f1 40 00 7e 06 f9 7e a7 eb 0d 30 a7 eb .h..@.~..~...0.. 0020 07 19 00 8b 0e d4 40 87 9c d3 56 09 f2 73 50 18 ......@...V..sP. 0030 fd 0b 6f 2b 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..o+.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 83 96 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 318 12:37:56.132072 167.235.7.21 167.235.7.63 NBNS Name query NB SACCORP9<00> Frame 318: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Portwell_13:a2:aa (00:90:fb:13:a2:aa), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 167.235.7.21 (167.235.7.21), Dst: 167.235.7.63 (167.235.7.63) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service 0000 ff ff ff ff ff ff 00 90 fb 13 a2 aa 08 00 45 00 ..............E. 0010 00 4e 15 f1 00 00 80 11 c6 83 a7 eb 07 15 a7 eb .N.............. 0020 07 3f 00 89 00 89 00 3a 59 d7 ec ef 01 10 00 01 .?.....:Y....... 0030 00 00 00 00 00 00 20 46 44 45 42 45 44 45 44 45 ...... FDEBEDEDE 0040 50 46 43 46 41 44 4a 43 41 43 41 43 41 43 41 43 PFCFADJCACACACAC 0050 41 43 41 43 41 41 41 00 00 20 00 01 ACACAAA.. .. No. Time Source Destination Protocol Info 319 12:37:56.328926 167.235.7.71 192.168.11.160 TCP 36388 > irdmi [ACK] Seq=3367 Ack=8293 Win=27520 Len=1448 TSV=499208653 TSER=2592162746 Frame 319: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 192.168.11.160 (192.168.11.160) Transmission Control Protocol, Src Port: 36388 (36388), Dst Port: irdmi (8000), Seq: 3367, Ack: 8293, Len: 1448 Data (1448 bytes) 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 05 dc 22 c9 40 00 40 06 96 d8 a7 eb 07 47 c0 a8 ..".@.@......G.. 0020 0b a0 8e 24 1f 40 7a ee 24 db 07 0a 58 1f 80 10 ...$.@z.$...X... 0030 01 ae 26 21 00 00 01 01 08 0a 1d c1 51 cd 9a 81 ..&!........Q... 0040 43 ba 50 4f 53 54 20 2f 65 6e 2d 55 53 2f 75 74 C.POST /en-US/ut 0050 69 6c 2f 6c 6f 67 2f 6a 73 20 48 54 54 50 2f 31 il/log/js HTTP/1 0060 2e 31 0d 0a 48 6f 73 74 3a 20 6d 6f 65 61 73 64 .1..Host: moeasd 0070 65 76 33 3a 38 30 30 30 0d 0a 55 73 65 72 2d 41 ev3:8000..User-A 0080 67 65 6e 74 3a 20 4d 6f 7a 69 6c 6c 61 2f 35 2e gent: Mozilla/5. 0090 30 20 28 58 31 31 3b 20 55 3b 20 4c 69 6e 75 78 0 (X11; U; Linux 00a0 20 69 36 38 36 3b 20 65 6e 2d 55 53 3b 20 72 76 i686; en-US; rv 00b0 3a 31 2e 39 2e 32 2e 31 36 29 20 47 65 63 6b 6f :1.9.2.16) Gecko 00c0 2f 32 30 31 31 30 33 32 32 20 46 65 64 6f 72 61 /20110322 Fedora 00d0 2f 33 2e 36 2e 31 36 2d 31 2e 66 63 31 34 20 46 /3.6.16-1.fc14 F 00e0 69 72 65 66 6f 78 2f 33 2e 36 2e 31 36 0d 0a 41 irefox/3.6.16..A 00f0 63 63 65 70 74 3a 20 74 65 78 74 2f 6a 61 76 61 ccept: text/java 0100 73 63 72 69 70 74 2c 20 74 65 78 74 2f 68 74 6d script, text/htm 0110 6c 2c 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 l, application/x 0120 6d 6c 2c 20 74 65 78 74 2f 78 6d 6c 2c 20 2a 2f ml, text/xml, */ 0130 2a 0d 0a 41 63 63 65 70 74 2d 4c 61 6e 67 75 61 *..Accept-Langua 0140 67 65 3a 20 65 6e 2d 75 73 2c 65 6e 3b 71 3d 30 ge: en-us,en;q=0 0150 2e 35 0d 0a 41 63 63 65 70 74 2d 45 6e 63 6f 64 .5..Accept-Encod 0160 69 6e 67 3a 20 67 7a 69 70 2c 64 65 66 6c 61 74 ing: gzip,deflat 0170 65 0d 0a 41 63 63 65 70 74 2d 43 68 61 72 73 65 e..Accept-Charse 0180 74 3a 20 49 53 4f 2d 38 38 35 39 2d 31 2c 75 74 t: ISO-8859-1,ut 0190 66 2d 38 3b 71 3d 30 2e 37 2c 2a 3b 71 3d 30 2e f-8;q=0.7,*;q=0. 01a0 37 0d 0a 4b 65 65 70 2d 41 6c 69 76 65 3a 20 31 7..Keep-Alive: 1 01b0 31 35 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 15..Connection: 01c0 6b 65 65 70 2d 61 6c 69 76 65 0d 0a 43 6f 6e 74 keep-alive..Cont 01d0 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 ent-Type: applic 01e0 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d ation/x-www-form 01f0 2d 75 72 6c 65 6e 63 6f 64 65 64 3b 20 63 68 61 -urlencoded; cha 0200 72 73 65 74 3d 55 54 46 2d 38 0d 0a 58 2d 52 65 rset=UTF-8..X-Re 0210 71 75 65 73 74 65 64 2d 57 69 74 68 3a 20 58 4d quested-With: XM 0220 4c 48 74 74 70 52 65 71 75 65 73 74 0d 0a 58 2d LHttpRequest..X- 0230 53 70 6c 75 6e 6b 2d 53 65 73 73 69 6f 6e 3a 20 Splunk-Session: 0240 63 37 38 63 30 39 35 66 39 66 62 64 63 33 32 33 c78c095f9fbdc323 0250 32 66 64 63 38 31 66 61 31 36 36 36 32 64 35 32 2fdc81fa16662d52 0260 61 66 61 39 31 66 63 38 0d 0a 52 65 66 65 72 65 afa91fc8..Refere 0270 72 3a 20 68 74 74 70 3a 2f 2f 6d 6f 65 61 73 64 r: http://moeasd 0280 65 76 33 3a 38 30 30 30 2f 65 6e 2d 55 53 2f 61 ev3:8000/en-US/a 0290 70 70 2f 6c 61 75 6e 63 68 65 72 2f 68 6f 6d 65 pp/launcher/home 02a0 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 ..Content-Length 02b0 3a 20 39 36 38 0d 0a 43 6f 6f 6b 69 65 3a 20 73 : 968..Cookie: s 02c0 65 73 73 69 6f 6e 5f 69 64 5f 38 30 30 30 3d 63 ession_id_8000=c 02d0 37 38 63 30 39 35 66 39 66 62 64 63 33 32 33 32 78c095f9fbdc3232 02e0 66 64 63 38 31 66 61 31 36 36 36 32 64 35 32 61 fdc81fa16662d52a 02f0 66 61 39 31 66 63 38 0d 0a 50 72 61 67 6d 61 3a fa91fc8..Pragma: 0300 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 61 63 68 65 no-cache..Cache 0310 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 -Control: no-cac 0320 68 65 0d 0a 0d 0a 64 61 74 61 3d 25 35 42 25 37 he....data=%5B%7 0330 42 25 32 32 6c 65 76 65 6c 25 32 32 25 33 41 25 B%22level%22%3A% 0340 32 32 69 6e 66 6f 25 32 32 25 32 43 2b 25 32 32 22info%22%2C+%22 0350 63 6c 61 73 73 25 32 32 25 33 41 25 32 32 53 70 class%22%3A%22Sp 0360 6c 75 6e 6b 2e 53 65 73 73 69 6f 6e 25 32 32 25 lunk.Session%22% 0370 32 43 2b 25 32 32 6d 65 73 73 61 67 65 25 32 32 2C+%22message%22 0380 25 33 41 25 32 32 75 73 65 72 41 67 65 6e 74 25 %3A%22userAgent% 0390 33 44 4d 6f 7a 69 6c 6c 61 25 32 46 35 2e 30 2b 3DMozilla%2F5.0+ 03a0 28 58 31 31 25 33 42 2b 55 25 33 42 2b 4c 69 6e (X11%3B+U%3B+Lin 03b0 75 78 2b 69 36 38 36 25 33 42 2b 65 6e 2d 55 53 ux+i686%3B+en-US 03c0 25 33 42 2b 72 76 25 33 41 31 2e 39 2e 32 2e 31 %3B+rv%3A1.9.2.1 03d0 36 29 2b 47 65 63 6b 6f 25 32 46 32 30 31 31 30 6)+Gecko%2F20110 03e0 33 32 32 2b 46 65 64 6f 72 61 25 32 46 33 2e 36 322+Fedora%2F3.6 03f0 2e 31 36 2d 31 2e 66 63 31 34 2b 46 69 72 65 66 .16-1.fc14+Firef 0400 6f 78 25 32 46 33 2e 36 2e 31 36 25 32 43 2b 70 ox%2F3.6.16%2C+p 0410 6c 61 74 66 6f 72 6d 25 33 44 4c 69 6e 75 78 2b latform%3DLinux+ 0420 69 36 38 36 25 32 43 2b 61 70 70 43 6f 64 65 4e i686%2C+appCodeN 0430 61 6d 65 25 33 44 4d 6f 7a 69 6c 6c 61 25 32 43 ame%3DMozilla%2C 0440 2b 61 70 70 4e 61 6d 65 25 33 44 4e 65 74 73 63 +appName%3DNetsc 0450 61 70 65 25 32 43 2b 61 70 70 56 65 72 73 69 6f ape%2C+appVersio 0460 6e 25 33 44 35 2e 30 2b 28 58 31 31 25 33 42 2b n%3D5.0+(X11%3B+ 0470 65 6e 2d 55 53 29 25 32 43 2b 6c 61 6e 67 75 61 en-US)%2C+langua 0480 67 65 25 33 44 65 6e 2d 55 53 25 32 43 2b 6f 73 ge%3Den-US%2C+os 0490 63 70 75 25 33 44 4c 69 6e 75 78 2b 69 36 38 36 cpu%3DLinux+i686 04a0 25 32 43 2b 76 65 6e 64 6f 72 25 33 44 46 65 64 %2C+vendor%3DFed 04b0 6f 72 61 25 32 43 2b 76 65 6e 64 6f 72 53 75 62 ora%2C+vendorSub 04c0 25 33 44 33 2e 36 2e 31 36 2d 31 2e 66 63 31 34 %3D3.6.16-1.fc14 04d0 25 32 43 2b 70 72 6f 64 75 63 74 25 33 44 47 65 %2C+product%3DGe 04e0 63 6b 6f 25 32 43 2b 70 72 6f 64 75 63 74 53 75 cko%2C+productSu 04f0 62 25 33 44 32 30 31 31 30 33 32 32 25 32 43 2b b%3D20110322%2C+ 0500 62 75 69 6c 64 49 44 25 33 44 32 30 31 31 30 33 buildID%3D201103 0510 32 32 32 32 33 39 33 38 25 32 43 2b 74 6f 70 25 22223938%2C+top% 0520 33 44 30 25 32 43 2b 68 65 69 67 68 74 25 33 44 3D0%2C+height%3D 0530 31 30 35 30 25 32 43 2b 77 69 64 74 68 25 33 44 1050%2C+width%3D 0540 31 36 38 30 25 32 43 2b 6c 65 66 74 25 33 44 30 1680%2C+left%3D0 0550 25 32 43 2b 70 69 78 65 6c 44 65 70 74 68 25 33 %2C+pixelDepth%3 0560 44 32 34 25 32 43 2b 63 6f 6c 6f 72 44 65 70 74 D24%2C+colorDept 0570 68 25 33 44 32 34 25 32 43 2b 61 76 61 69 6c 57 h%3D24%2C+availW 0580 69 64 74 68 25 33 44 31 36 38 30 25 32 43 2b 61 idth%3D1680%2C+a 0590 76 61 69 6c 48 65 69 67 68 74 25 33 44 31 30 30 vailHeight%3D100 05a0 30 25 32 43 2b 61 76 61 69 6c 4c 65 66 74 25 33 0%2C+availLeft%3 05b0 44 30 25 32 43 2b 61 76 61 69 6c 54 6f 70 25 33 D0%2C+availTop%3 05c0 44 32 35 25 32 43 2b 64 6f 63 75 6d 65 6e 74 55 D25%2C+documentU 05d0 52 4c 25 33 44 68 74 74 70 25 33 41 25 32 46 25 RL%3Dhttp%3A%2F% 05e0 32 46 6d 6f 65 61 73 64 65 76 2Fmoeasdev No. Time Source Destination Protocol Info 320 12:37:56.328959 167.235.7.71 192.168.11.160 TCP 36388 > irdmi [PSH, ACK] Seq=4815 Ack=8293 Win=27520 Len=260 TSV=499208653 TSER=2592162746 Frame 320: 326 bytes on wire (2608 bits), 326 bytes captured (2608 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 192.168.11.160 (192.168.11.160) Transmission Control Protocol, Src Port: 36388 (36388), Dst Port: irdmi (8000), Seq: 4815, Ack: 8293, Len: 260 Data (260 bytes) 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 01 38 22 ca 40 00 40 06 9b 7b a7 eb 07 47 c0 a8 .8".@.@..{...G.. 0020 0b a0 8e 24 1f 40 7a ee 2a 83 07 0a 58 1f 80 18 ...$.@z.*...X... 0030 01 ae b3 62 00 00 01 01 08 0a 1d c1 51 cd 9a 81 ...b........Q... 0040 43 ba 33 25 33 41 38 30 30 30 25 32 46 65 6e 2d C.3%3A8000%2Fen- 0050 55 53 25 32 46 61 70 70 25 32 46 6c 61 75 6e 63 US%2Fapp%2Flaunc 0060 68 65 72 25 32 46 68 6f 6d 65 25 32 43 2b 64 6f her%2Fhome%2C+do 0070 63 75 6d 65 6e 74 52 65 66 65 72 72 65 72 25 33 cumentReferrer%3 0080 44 68 74 74 70 25 33 41 25 32 46 25 32 46 6d 6f Dhttp%3A%2F%2Fmo 0090 65 61 73 64 65 76 33 25 33 41 38 30 30 30 25 32 easdev3%3A8000%2 00a0 46 65 6e 2d 55 53 25 32 46 61 63 63 6f 75 6e 74 Fen-US%2Faccount 00b0 25 32 46 6c 6f 67 69 6e 25 33 46 72 65 74 75 72 %2Flogin%3Fretur 00c0 6e 5f 74 6f 25 33 44 25 32 35 32 46 65 6e 2d 55 n_to%3D%252Fen-U 00d0 53 25 32 35 32 46 25 32 43 2b 66 6c 61 73 68 25 S%252F%2C+flash% 00e0 33 44 31 30 2e 32 2e 31 35 33 25 32 43 2b 53 70 3D10.2.153%2C+Sp 00f0 6c 75 6e 6b 2e 53 65 73 73 69 6f 6e 2e 53 54 41 lunk.Session.STA 0100 52 54 5f 45 56 45 4e 54 2b 66 69 72 65 64 2b 25 RT_EVENT+fired+% 0110 34 30 4d 6f 6e 2b 41 70 72 2b 31 38 2b 32 30 31 40Mon+Apr+18+201 0120 31 2b 31 32 25 33 41 33 37 25 33 41 35 35 2b 47 1+12%3A37%3A55+G 0130 4d 54 2d 30 37 30 30 2b 28 50 53 54 29 25 32 32 MT-0700+(PST)%22 0140 25 37 44 25 35 44 %7D%5D No. Time Source Destination Protocol Info 321 12:37:56.330768 192.168.11.160 167.235.7.71 TCP [TCP Dup ACK 274#1] irdmi > 36388 [ACK] Seq=8293 Ack=3367 Win=14208 Len=0 TSV=2592164480 TSER=499206921 SLE=4815 SRE=5075 Frame 321: 78 bytes on wire (624 bits), 78 bytes captured (624 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee) Internet Protocol, Src: 192.168.11.160 (192.168.11.160), Dst: 167.235.7.71 (167.235.7.71) Transmission Control Protocol, Src Port: irdmi (8000), Dst Port: 36388 (36388), Seq: 8293, Ack: 3367, Len: 0 0000 00 0d 60 2b e0 ee 00 15 2b a6 ad bf 08 00 45 00 ..`+....+.....E. 0010 00 40 1a 21 40 00 3d 06 a8 1c c0 a8 0b a0 a7 eb .@.!@.=......... 0020 07 47 1f 40 8e 24 07 0a 58 1f 7a ee 24 db b0 10 .G.@.$..X.z.$... 0030 00 6f 7e b1 00 00 01 01 08 0a 9a 81 4a 80 1d c1 .o~.........J... 0040 4b 09 01 01 05 0a 7a ee 2a 83 7a ee 2b 87 K.....z.*.z.+. No. Time Source Destination Protocol Info 322 12:37:56.330829 192.168.11.160 167.235.7.71 TCP irdmi > 36388 [ACK] Seq=8293 Ack=5075 Win=17152 Len=0 TSV=2592164480 TSER=499208653 Frame 322: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee) Internet Protocol, Src: 192.168.11.160 (192.168.11.160), Dst: 167.235.7.71 (167.235.7.71) Transmission Control Protocol, Src Port: irdmi (8000), Dst Port: 36388 (36388), Seq: 8293, Ack: 5075, Len: 0 0000 00 0d 60 2b e0 ee 00 15 2b a6 ad bf 08 00 45 00 ..`+....+.....E. 0010 00 34 1a 22 40 00 3d 06 a8 27 c0 a8 0b a0 a7 eb .4."@.=..'...... 0020 07 47 1f 40 8e 24 07 0a 58 1f 7a ee 2b 87 80 10 .G.@.$..X.z.+... 0030 00 86 f3 28 00 00 01 01 08 0a 9a 81 4a 80 1d c1 ...(........J... 0040 51 cd Q. No. Time Source Destination Protocol Info 323 12:37:56.337048 192.168.11.160 167.235.7.71 TCP irdmi > 36388 [PSH, ACK] Seq=8293 Ack=5075 Win=17152 Len=304 TSV=2592164486 TSER=499208653 Frame 323: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee) Internet Protocol, Src: 192.168.11.160 (192.168.11.160), Dst: 167.235.7.71 (167.235.7.71) Transmission Control Protocol, Src Port: irdmi (8000), Dst Port: 36388 (36388), Seq: 8293, Ack: 5075, Len: 304 Data (304 bytes) 0000 00 0d 60 2b e0 ee 00 15 2b a6 ad bf 08 00 45 00 ..`+....+.....E. 0010 01 64 1a 23 40 00 3d 06 a6 f6 c0 a8 0b a0 a7 eb .d.#@.=......... 0020 07 47 1f 40 8e 24 07 0a 58 1f 7a ee 2b 87 80 18 .G.@.$..X.z.+... 0030 00 86 bc 7e 00 00 01 01 08 0a 9a 81 4a 86 1d c1 ...~........J... 0040 51 cd 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f Q.HTTP/1.1 200 O 0050 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 K..Content-Lengt 0060 68 3a 20 34 31 0d 0a 43 6f 6e 74 65 6e 74 2d 45 h: 41..Content-E 0070 6e 63 6f 64 69 6e 67 3a 20 67 7a 69 70 0d 0a 56 ncoding: gzip..V 0080 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f ary: Accept-Enco 0090 64 69 6e 67 0d 0a 53 65 72 76 65 72 3a 20 43 68 ding..Server: Ch 00a0 65 72 72 79 50 79 2f 33 2e 31 2e 32 0d 0a 44 61 erryPy/3.1.2..Da 00b0 74 65 3a 20 4d 6f 6e 2c 20 31 38 20 41 70 72 20 te: Mon, 18 Apr 00c0 32 30 31 31 20 31 39 3a 33 37 3a 35 36 20 47 4d 2011 19:37:56 GM 00d0 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a T..Content-Type: 00e0 20 74 65 78 74 2f 70 6c 61 69 6e 3b 63 68 61 72 text/plain;char 00f0 73 65 74 3d 75 74 66 2d 38 0d 0a 53 65 74 2d 43 set=utf-8..Set-C 0100 6f 6f 6b 69 65 3a 20 73 65 73 73 69 6f 6e 5f 69 ookie: session_i 0110 64 5f 38 30 30 30 3d 63 37 38 63 30 39 35 66 39 d_8000=c78c095f9 0120 66 62 64 63 33 32 33 32 66 64 63 38 31 66 61 31 fbdc3232fdc81fa1 0130 36 36 36 32 64 35 32 61 66 61 39 31 66 63 38 3b 6662d52afa91fc8; 0140 20 65 78 70 69 72 65 73 3d 54 75 65 2c 20 31 39 expires=Tue, 19 0150 20 41 70 72 20 32 30 31 31 20 31 39 3a 33 37 3a Apr 2011 19:37: 0160 35 36 20 47 4d 54 3b 20 50 61 74 68 3d 2f 0d 0a 56 GMT; Path=/.. 0170 0d 0a .. No. Time Source Destination Protocol Info 324 12:37:56.337109 167.235.7.71 192.168.11.160 TCP 36388 > irdmi [ACK] Seq=5075 Ack=8597 Win=30400 Len=0 TSV=499208661 TSER=2592164486 Frame 324: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 192.168.11.160 (192.168.11.160) Transmission Control Protocol, Src Port: 36388 (36388), Dst Port: irdmi (8000), Seq: 5075, Ack: 8597, Len: 0 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 00 34 22 cb 40 00 40 06 9c 7e a7 eb 07 47 c0 a8 .4".@.@..~...G.. 0020 0b a0 8e 24 1f 40 7a ee 2b 87 07 0a 59 4f 80 10 ...$.@z.+...YO.. 0030 01 db f0 95 00 00 01 01 08 0a 1d c1 51 d5 9a 81 ............Q... 0040 4a 86 J. No. Time Source Destination Protocol Info 325 12:37:56.337140 192.168.11.160 167.235.7.71 TCP irdmi > 36388 [PSH, ACK] Seq=8597 Ack=5075 Win=17152 Len=41 TSV=2592164487 TSER=499208653 Frame 325: 107 bytes on wire (856 bits), 107 bytes captured (856 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee) Internet Protocol, Src: 192.168.11.160 (192.168.11.160), Dst: 167.235.7.71 (167.235.7.71) Transmission Control Protocol, Src Port: irdmi (8000), Dst Port: 36388 (36388), Seq: 8597, Ack: 5075, Len: 41 Data (41 bytes) 0000 00 0d 60 2b e0 ee 00 15 2b a6 ad bf 08 00 45 00 ..`+....+.....E. 0010 00 5d 1a 24 40 00 3d 06 a7 fc c0 a8 0b a0 a7 eb .].$@.=......... 0020 07 47 1f 40 8e 24 07 0a 59 4f 7a ee 2b 87 80 18 .G.@.$..YOz.+... 0030 00 86 44 92 00 00 01 01 08 0a 9a 81 4a 87 1d c1 ..D.........J... 0040 51 cd 1f 8b 08 00 14 93 ac 4d 02 ff ab 56 4a 2d Q........M...VJ- 0050 4b cd 2b 29 8e cf c9 4f 4f 4f 4d 51 b2 52 32 54 K.+)...OOOMQ.R2T 0060 aa 05 00 3f f7 87 da 15 00 00 00 ...?....... No. Time Source Destination Protocol Info 326 12:37:56.337157 167.235.7.71 192.168.11.160 TCP 36388 > irdmi [ACK] Seq=5075 Ack=8638 Win=30400 Len=0 TSV=499208661 TSER=2592164487 Frame 326: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Ibm_2b:e0:ee (00:0d:60:2b:e0:ee), Dst: All-HSRP-routers_32 (00:00:0c:07:ac:32) Internet Protocol, Src: 167.235.7.71 (167.235.7.71), Dst: 192.168.11.160 (192.168.11.160) Transmission Control Protocol, Src Port: 36388 (36388), Dst Port: irdmi (8000), Seq: 5075, Ack: 8638, Len: 0 0000 00 00 0c 07 ac 32 00 0d 60 2b e0 ee 08 00 45 00 .....2..`+....E. 0010 00 34 22 cc 40 00 40 06 9c 7d a7 eb 07 47 c0 a8 .4".@.@..}...G.. 0020 0b a0 8e 24 1f 40 7a ee 2b 87 07 0a 59 78 80 10 ...$.@z.+...Yx.. 0030 01 db f0 6b 00 00 01 01 08 0a 1d c1 51 d5 9a 81 ...k........Q... 0040 4a 87 J. No. Time Source Destination Protocol Info 327 12:37:56.406455 167.235.7.126 224.0.0.2 HSRP Hello (state Standby) Frame 327: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: IPv4mcast_00:00:02 (01:00:5e:00:00:02) Internet Protocol, Src: 167.235.7.126 (167.235.7.126), Dst: 224.0.0.2 (224.0.0.2) User Datagram Protocol, Src Port: hsrp (1985), Dst Port: hsrp (1985) Cisco Hot Standby Router Protocol 0000 01 00 5e 00 00 02 00 15 2b a6 ad bf 08 00 45 c0 ..^.....+.....E. 0010 00 30 00 00 00 00 01 11 29 92 a7 eb 07 7e e0 00 .0......)....~.. 0020 00 02 07 c1 07 c1 00 1c 2c a7 00 00 08 03 05 64 ........,......d 0030 32 00 63 69 73 63 6f 00 00 00 a7 eb 07 01 2.cisco....... No. Time Source Destination Protocol Info 328 12:37:56.422100 167.235.7.21 167.235.7.63 NBNS Name query NB TMS-NODE-202<00> Frame 328: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Portwell_13:a2:aa (00:90:fb:13:a2:aa), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 167.235.7.21 (167.235.7.21), Dst: 167.235.7.63 (167.235.7.63) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service 0000 ff ff ff ff ff ff 00 90 fb 13 a2 aa 08 00 45 00 ..............E. 0010 00 4e 15 f3 00 00 80 11 c6 81 a7 eb 07 15 a7 eb .N.............. 0020 07 3f 00 89 00 89 00 3a 25 d2 ec f3 01 10 00 01 .?.....:%....... 0030 00 00 00 00 00 00 20 46 45 45 4e 46 44 43 4e 45 ...... FEENFDCNE 0040 4f 45 50 45 45 45 46 43 4e 44 43 44 41 44 43 43 OEPEEEFCNDCDADCC 0050 41 43 41 43 41 41 41 00 00 20 00 01 ACACAAA.. .. No. Time Source Destination Protocol Info 329 12:37:56.610764 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 329: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 77761, Ack: 8317, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c f3 40 00 7e 06 f9 7c a7 eb 0d 30 a7 eb .h..@.~..|...0.. 0020 07 19 00 8b 0e d4 40 87 9f 13 56 09 f2 b2 50 18 ......@...V...P. 0030 fc cc 2c eb 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..,......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c3 96 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 330 12:37:56.611583 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 330: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 78337, Ack: 8380, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c f4 40 00 7e 06 f9 7b a7 eb 0d 30 a7 eb .h..@.~..{...0.. 0020 07 19 00 8b 0e d4 40 87 a1 53 56 09 f2 f1 50 18 ......@..SV...P. 0030 fc 8d ea aa 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 03 97 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 331 12:37:56.611650 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 331: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 78913, Ack: 8443, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c f5 40 00 7e 06 f9 7a a7 eb 0d 30 a7 eb .h..@.~..z...0.. 0020 07 19 00 8b 0e d4 40 87 a3 93 56 09 f3 30 50 18 ......@...V..0P. 0030 fc 4e a7 6a 00 00 00 00 02 3c ff 53 4d 42 2e 00 .N.j.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 44 97 0c ff 00 00 00 ff ...0....D....... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 332 12:37:56.611719 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 332: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 79489, Ack: 8506, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c f6 40 00 7e 06 f9 79 a7 eb 0d 30 a7 eb .h..@.~..y...0.. 0020 07 19 00 8b 0e d4 40 87 a5 d3 56 09 f3 6f 50 18 ......@...V..oP. 0030 fc 0f 64 2b 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..d+.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 85 97 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 333 12:37:56.611795 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 333: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 80065, Ack: 8569, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c f7 40 00 7e 06 f9 78 a7 eb 0d 30 a7 eb .h..@.~..x...0.. 0020 07 19 00 8b 0e d4 40 87 a8 13 56 09 f3 ae 50 18 ......@...V...P. 0030 fb d0 24 eb 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..$......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c2 97 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 334 12:37:56.778514 167.235.7.125 224.0.0.2 HSRP Hello (state Active) Frame 334: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: All-HSRP-routers_32 (00:00:0c:07:ac:32), Dst: IPv4mcast_00:00:02 (01:00:5e:00:00:02) Internet Protocol, Src: 167.235.7.125 (167.235.7.125), Dst: 224.0.0.2 (224.0.0.2) User Datagram Protocol, Src Port: hsrp (1985), Dst Port: hsrp (1985) Cisco Hot Standby Router Protocol 0000 01 00 5e 00 00 02 00 00 0c 07 ac 32 08 00 45 c0 ..^........2..E. 0010 00 30 00 00 00 00 01 11 29 93 a7 eb 07 7d e0 00 .0......)....}.. 0020 00 02 07 c1 07 c1 00 1c 24 9e 00 00 10 03 05 6e ........$......n 0030 32 00 63 69 73 63 6f 00 00 00 a7 eb 07 01 2.cisco....... No. Time Source Destination Protocol Info 335 12:37:56.884971 167.235.7.21 167.235.7.63 NBNS Name query NB SACCORP9<20> Frame 335: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Portwell_13:a2:aa (00:90:fb:13:a2:aa), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 167.235.7.21 (167.235.7.21), Dst: 167.235.7.63 (167.235.7.63) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service 0000 ff ff ff ff ff ff 00 90 fb 13 a2 aa 08 00 45 00 ..............E. 0010 00 4e 15 fd 00 00 80 11 c6 77 a7 eb 07 15 a7 eb .N.......w...... 0020 07 3f 00 89 00 89 00 3a 59 cf ec f5 01 10 00 01 .?.....:Y....... 0030 00 00 00 00 00 00 20 46 44 45 42 45 44 45 44 45 ...... FDEBEDEDE 0040 50 46 43 46 41 44 4a 43 41 43 41 43 41 43 41 43 PFCFADJCACACACAC 0050 41 43 41 43 41 43 41 00 00 20 00 01 ACACACA.. .. No. Time Source Destination Protocol Info 336 12:37:57.015346 Cisco_a6:ad:bf Broadcast 0x0806 ARP Frame 336: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Data (46 bytes) 0000 ff ff ff ff ff ff 00 15 2b a6 ad bf 08 06 00 01 ........+....... 0010 08 00 06 04 00 01 00 15 2b a6 ad bf a7 eb 07 7e ........+......~ 0020 00 00 00 00 00 00 a7 eb 07 37 00 00 00 00 00 00 .........7...... 0030 00 00 00 00 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 337 12:37:57.110772 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 337: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 80641, Ack: 8632, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c f9 40 00 7e 06 f9 76 a7 eb 0d 30 a7 eb .h..@.~..v...0.. 0020 07 19 00 8b 0e d4 40 87 aa 53 56 09 f3 ed 50 18 ......@..SV...P. 0030 fb 91 df aa 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 05 98 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 338 12:37:57.111640 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 338: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 81217, Ack: 8695, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c fa 40 00 7e 06 f9 75 a7 eb 0d 30 a7 eb .h..@.~..u...0.. 0020 07 19 00 8b 0e d4 40 87 ac 93 56 09 f4 2c 50 18 ......@...V..,P. 0030 fb 52 9d 6a 00 00 00 00 02 3c ff 53 4d 42 2e 00 .R.j.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 45 98 0c ff 00 00 00 ff ...0....E....... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 339 12:37:57.111661 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 339: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 81793, Ack: 8758, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c fb 40 00 7e 06 f9 74 a7 eb 0d 30 a7 eb .h..@.~..t...0.. 0020 07 19 00 8b 0e d4 40 87 ae d3 56 09 f4 6b 50 18 ......@...V..kP. 0030 fb 13 5e 2a 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..^*.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 82 98 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 340 12:37:57.111666 167.235.13.48 167.235.7.25 TCP netbios-ssn > spw-dialer [ACK] Seq=82369 Ack=8884 Win=64149 Len=0 Frame 340: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 82369, Ack: 8884, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9c fc 40 00 7e 06 fb b3 a7 eb 0d 30 a7 eb .(..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 b1 13 56 09 f4 e9 50 10 ......@...V...P. 0030 fa 95 05 32 00 00 00 00 00 00 00 00 ...2........ No. Time Source Destination Protocol Info 341 12:37:57.111728 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 341: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 82369, Ack: 8884, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c fd 40 00 7e 06 f9 72 a7 eb 0d 30 a7 eb .h..@.~..r...0.. 0020 07 19 00 8b 0e d4 40 87 b1 13 56 09 f4 e9 50 18 ......@...V...P. 0030 fa 95 19 e9 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c4 98 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 342 12:37:57.111780 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 342: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 82945, Ack: 8884, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9c fe 40 00 7e 06 f9 71 a7 eb 0d 30 a7 eb .h..@.~..q...0.. 0020 07 19 00 8b 0e d4 40 87 b3 53 56 09 f4 e9 50 18 ......@..SV...P. 0030 fa 95 d8 a8 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 03 99 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 343 12:37:57.610781 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 343: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 83521, Ack: 8947, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9d 00 40 00 7e 06 f9 6f a7 eb 0d 30 a7 eb .h..@.~..o...0.. 0020 07 19 00 8b 0e d4 40 87 b5 93 56 09 f5 28 50 18 ......@...V..(P. 0030 fa 56 96 68 00 00 00 00 02 3c ff 53 4d 42 2e 00 .V.h.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 43 99 0c ff 00 00 00 ff ...0....C....... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 344 12:37:57.611560 167.235.13.48 167.235.7.25 TCP netbios-ssn > spw-dialer [ACK] Seq=84097 Ack=9073 Win=65535 Len=0 Frame 344: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 84097, Ack: 9073, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9d 01 40 00 7e 06 fb ae a7 eb 0d 30 a7 eb .(..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 b7 d3 56 09 f5 a6 50 10 ......@...V...P. 0030 ff ff f8 4a 00 00 00 00 00 00 00 00 ...J........ No. Time Source Destination Protocol Info 345 12:37:57.611660 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 345: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 84097, Ack: 9136, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9d 02 40 00 7e 06 f9 6d a7 eb 0d 30 a7 eb .h..@.~..m...0.. 0020 07 19 00 8b 0e d4 40 87 b7 d3 56 09 f5 e5 50 18 ......@...V...P. 0030 ff c0 4e 01 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..N......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 83 99 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 346 12:37:57.611711 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 346: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 84673, Ack: 9136, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9d 03 40 00 7e 06 f9 6c a7 eb 0d 30 a7 eb .h..@.~..l...0.. 0020 07 19 00 8b 0e d4 40 87 ba 13 56 09 f5 e5 50 18 ......@...V...P. 0030 ff c0 0c c1 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c2 99 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 347 12:37:57.611762 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 347: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 85249, Ack: 9136, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9d 04 40 00 7e 06 f9 6b a7 eb 0d 30 a7 eb .h..@.~..k...0.. 0020 07 19 00 8b 0e d4 40 87 bc 53 56 09 f5 e5 50 18 ......@..SV...P. 0030 ff c0 c8 81 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 04 9a 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 348 12:37:57.611816 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 348: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 85825, Ack: 9199, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9d 05 40 00 7e 06 f9 6a a7 eb 0d 30 a7 eb .h..@.~..j...0.. 0020 07 19 00 8b 0e d4 40 87 be 93 56 09 f6 24 50 18 ......@...V..$P. 0030 ff 81 85 41 00 00 00 00 02 3c ff 53 4d 42 2e 00 ...A.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 45 9a 0c ff 00 00 00 ff ...0....E....... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 349 12:37:57.634052 167.235.7.21 167.235.7.63 NBNS Name query NB SACCORP9<20> Frame 349: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Portwell_13:a2:aa (00:90:fb:13:a2:aa), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 167.235.7.21 (167.235.7.21), Dst: 167.235.7.63 (167.235.7.63) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service 0000 ff ff ff ff ff ff 00 90 fb 13 a2 aa 08 00 45 00 ..............E. 0010 00 4e 16 16 00 00 80 11 c6 5e a7 eb 07 15 a7 eb .N.......^...... 0020 07 3f 00 89 00 89 00 3a 59 cf ec f5 01 10 00 01 .?.....:Y....... 0030 00 00 00 00 00 00 20 46 44 45 42 45 44 45 44 45 ...... FDEBEDEDE 0040 50 46 43 46 41 44 4a 43 41 43 41 43 41 43 41 43 PFCFADJCACACACAC 0050 41 43 41 43 41 43 41 00 00 20 00 01 ACACACA.. .. No. Time Source Destination Protocol Info 350 12:37:58.099116 Cisco_f3:bd:bf Broadcast 0x0806 ARP Frame 350: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_f3:bd:bf (00:12:00:f3:bd:bf), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Data (46 bytes) 0000 ff ff ff ff ff ff 00 12 00 f3 bd bf 08 06 00 01 ................ 0010 08 00 06 04 00 01 00 12 00 f3 bd bf a7 eb 07 7d ...............} 0020 00 00 00 00 00 00 a7 eb 07 37 00 00 00 00 00 00 .........7...... 0030 00 00 00 00 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 351 12:37:58.110797 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 351: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 86401, Ack: 9262, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9d 07 40 00 7e 06 f9 68 a7 eb 0d 30 a7 eb .h..@.~..h...0.. 0020 07 19 00 8b 0e d4 40 87 c0 d3 56 09 f6 63 50 18 ......@...V..cP. 0030 ff 42 43 01 00 00 00 00 02 3c ff 53 4d 42 2e 00 .BC......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 85 9a 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 352 12:37:58.111521 167.235.13.48 167.235.7.25 TCP netbios-ssn > spw-dialer [ACK] Seq=86977 Ack=9388 Win=65220 Len=0 Frame 352: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 86977, Ack: 9388, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9d 08 40 00 7e 06 fb a7 a7 eb 0d 30 a7 eb .(..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 c3 13 56 09 f6 e1 50 10 ......@...V...P. 0030 fe c4 ed 0a 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 353 12:37:58.111603 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 353: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 86977, Ack: 9388, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9d 09 40 00 7e 06 f9 66 a7 eb 0d 30 a7 eb .h..@.~..f...0.. 0020 07 19 00 8b 0e d4 40 87 c3 13 56 09 f6 e1 50 18 ......@...V...P. 0030 fe c4 00 c1 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c5 9a 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 354 12:37:58.111655 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 354: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 87553, Ack: 9388, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9d 0a 40 00 7e 06 f9 65 a7 eb 0d 30 a7 eb .h..@.~..e...0.. 0020 07 19 00 8b 0e d4 40 87 c5 53 56 09 f6 e1 50 18 ......@..SV...P. 0030 fe c4 c1 80 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 02 9b 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 355 12:37:58.111660 167.235.13.48 167.235.7.25 TCP netbios-ssn > spw-dialer [ACK] Seq=88129 Ack=9514 Win=65094 Len=0 Frame 355: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 88129, Ack: 9514, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9d 0b 40 00 7e 06 fb a4 a7 eb 0d 30 a7 eb .(..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 c7 93 56 09 f7 5f 50 10 ......@...V.._P. 0030 fe 46 e8 8a 00 00 00 00 00 00 00 00 .F.......... No. Time Source Destination Protocol Info 356 12:37:58.111714 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 356: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 88129, Ack: 9514, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9d 0c 40 00 7e 06 f9 63 a7 eb 0d 30 a7 eb .h..@.~..c...0.. 0020 07 19 00 8b 0e d4 40 87 c7 93 56 09 f7 5f 50 18 ......@...V.._P. 0030 fe 46 7d 3f 00 00 00 00 02 3c ff 53 4d 42 2e 00 .F}?.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 44 9b 0c ff 00 00 00 ff ...0....D....... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 357 12:37:58.111765 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 357: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 88705, Ack: 9514, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9d 0d 40 00 7e 06 f9 62 a7 eb 0d 30 a7 eb .h..@.~..b...0.. 0020 07 19 00 8b 0e d4 40 87 c9 d3 56 09 f7 5f 50 18 ......@...V.._P. 0030 fe 46 3b ff 00 00 00 00 02 3c ff 53 4d 42 2e 00 .F;......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 83 9b 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 358 12:37:58.384081 167.235.7.21 167.235.7.63 NBNS Name query NB SACCORP9<20> Frame 358: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: Portwell_13:a2:aa (00:90:fb:13:a2:aa), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 167.235.7.21 (167.235.7.21), Dst: 167.235.7.63 (167.235.7.63) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service 0000 ff ff ff ff ff ff 00 90 fb 13 a2 aa 08 00 45 00 ..............E. 0010 00 4e 16 21 00 00 80 11 c6 53 a7 eb 07 15 a7 eb .N.!.....S...... 0020 07 3f 00 89 00 89 00 3a 59 cf ec f5 01 10 00 01 .?.....:Y....... 0030 00 00 00 00 00 00 20 46 44 45 42 45 44 45 44 45 ...... FDEBEDEDE 0040 50 46 43 46 41 44 4a 43 41 43 41 43 41 43 41 43 PFCFADJCACACACAC 0050 41 43 41 43 41 43 41 00 00 20 00 01 ACACACA.. .. No. Time Source Destination Protocol Info 359 12:37:58.447202 192.168.11.43 167.235.7.45 TLSv1 Application Data Frame 359: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_23:f1:a5 (00:1e:37:23:f1:a5) Internet Protocol, Src: 192.168.11.43 (192.168.11.43), Dst: 167.235.7.45 (167.235.7.45) Transmission Control Protocol, Src Port: https (443), Dst Port: 55752 (55752), Seq: 6265, Ack: 3113, Len: 1448 Secure Socket Layer 0000 00 1e 37 23 f1 a5 00 15 2b a6 ad bf 08 00 45 00 ..7#....+.....E. 0010 05 dc 7b 0b 40 00 7e 06 01 25 c0 a8 0b 2b a7 eb ..{.@.~..%...+.. 0020 07 2d 01 bb d9 c8 14 1f 15 6f 6e fa fe 45 80 10 .-.......on..E.. 0030 fc f5 9c f6 00 00 01 01 08 0a 0a 65 8c 9d 06 6a ...........e...j 0040 b0 44 17 03 01 00 20 a3 7c 08 78 31 29 8e ba c3 .D.... .|.x1)... 0050 5d c0 80 ff 89 96 14 a6 70 dc e4 87 49 f9 5c c6 ].......p...I.\. 0060 2a e0 52 d0 49 9b ef 17 03 01 06 60 a4 ea b2 f7 *.R.I......`.... 0070 0e 8d d4 37 39 f7 12 ac 93 e5 d0 90 d1 60 63 ed ...79........`c. 0080 e1 dc f4 c6 7e c4 34 86 a5 4a 21 ff da 71 f5 d2 ....~.4..J!..q.. 0090 2a 7b 0d 3e bf 0e 8a 96 e8 77 8a f0 9e 30 d9 dc *{.>.....w...0.. 00a0 70 a7 d1 f1 1e 98 cb 60 a5 30 67 f1 98 d3 6d 6c p......`.0g...ml 00b0 06 f9 30 62 5c 09 50 0c 37 64 05 b9 30 4d 10 1b ..0b\.P.7d..0M.. 00c0 53 c0 21 a8 c9 3b 9c d8 75 7f 71 8e 34 af be e3 S.!..;..u.q.4... 00d0 a3 79 ce 23 97 55 d4 f3 27 ca a2 c8 ef 53 c1 fb .y.#.U..'....S.. 00e0 88 f8 89 a5 59 68 fc d7 54 f8 0d 3b ce 5b bb 2d ....Yh..T..;.[.- 00f0 15 f5 a3 c8 e4 17 6f 09 cb 0c 55 01 e2 e8 4d f0 ......o...U...M. 0100 0b 2e 8c a1 1b e7 35 48 11 a3 bb 24 be 28 c4 46 ......5H...$.(.F 0110 14 fc 5f ff d7 1d 8a ec d4 41 3e 44 a9 73 5c ac .._......A>D.s\. 0120 14 27 8f a9 5e 64 3c 09 73 1b fd 39 99 61 7c 05 .'..^d<.s..9.a|. 0130 34 7f 5a 8e b0 3f e8 9f ab 93 ba f7 0e a5 c3 8e 4.Z..?.......... 0140 c8 2f aa 20 7e 6e cf d9 f9 05 19 be 32 3f 62 f9 ./. ~n......2?b. 0150 7e 86 91 88 ec 89 26 4f 0d 77 56 88 21 c6 77 ff ~.....&O.wV.!.w. 0160 b2 76 43 77 cc 66 a0 25 cf ed f5 ac ab f2 a5 4c .vCw.f.%.......L 0170 69 8b 1f b0 71 2e ba f0 83 3a 4a 19 b1 92 7c 3d i...q....:J...|= 0180 25 58 25 34 9b 57 ea 06 ed 68 c8 39 d0 2b cd 70 %X%4.W...h.9.+.p 0190 0a 82 f0 fb 3f 1a 47 45 f4 25 03 f2 31 ce 8b 89 ....?.GE.%..1... 01a0 80 dd 9d 18 37 1e 4e 40 00 72 c0 8c a3 a8 d7 c3 ....7.N@.r...... 01b0 fb b2 6b 4d e3 44 86 37 3b 23 ac 07 6b 9e 2a c9 ..kM.D.7;#..k.*. 01c0 0f e7 41 5c 31 d0 c3 e4 97 18 86 f7 eb 59 0b 5a ..A\1........Y.Z 01d0 a9 6e 10 59 92 93 e1 ba eb 7d b3 0f f9 06 47 17 .n.Y.....}....G. 01e0 cf 4b 7b 9e 4c be fb 76 d2 31 a7 72 ec 47 fa 0f .K{.L..v.1.r.G.. 01f0 fd de dc ff 89 00 07 01 c0 9f e5 c7 03 5c 2e 75 .............\.u 0200 4d cc d7 fb fc bb 4c b3 fe 24 13 68 a7 c4 a4 79 M.....L..$.h...y 0210 f9 b7 dc 6f 7b 05 5a 16 a1 f6 43 5a f6 53 94 69 ...o{.Z...CZ.S.i 0220 8d f3 79 2f fe eb fc 81 34 ee fa be 6e 04 9e a6 ..y/....4...n... 0230 a2 08 15 fa 40 4d 59 3d db 9f 0a 3e 55 b3 7b ed ....@MY=...>U.{. 0240 00 ad 8c 6e 7f d7 4f fe 5e b6 cf e8 ec 5d ca d3 ...n..O.^....].. 0250 66 f5 6a f9 9e f3 11 19 1f 32 95 80 e7 9d 4c ed f.j......2....L. 0260 3a 1a 6d 7d ac 1c a5 b0 68 d9 54 ad 7a 29 d0 80 :.m}....h.T.z).. 0270 63 df 06 c5 79 c2 40 a8 26 eb d2 cf 72 e0 f6 11 c...y.@.&...r... 0280 48 78 2e ba ca 6e 84 2d d0 c7 bc 37 4a d2 46 81 Hx...n.-...7J.F. 0290 29 6f 15 eb 5f ce 88 f2 7c df f3 0a 8c 3b 81 16 )o.._...|....;.. 02a0 ca 01 12 d0 b3 4a 79 34 5d 5e 65 64 36 cc c6 e8 .....Jy4]^ed6... 02b0 4d 96 a0 ce c0 61 34 22 59 9e 09 49 d0 d7 04 0f M....a4"Y..I.... 02c0 f4 08 38 5c 51 38 f5 42 f8 29 c8 1a 71 d0 3d 11 ..8\Q8.B.)..q.=. 02d0 28 bc 5e b3 2e 43 dd 51 ec 73 26 42 4b a7 6f b2 (.^..C.Q.s&BK.o. 02e0 d2 76 2c 77 9b e4 a0 cc 0b 8d 01 03 88 0f f8 9d .v,w............ 02f0 6c f5 9b 58 56 2e b9 54 b8 a4 47 45 d4 a2 3c c4 l..XV..T..GE..<. 0300 9f 36 23 13 dc 1c 32 ba 90 51 1e 5c 17 ad c5 75 .6#...2..Q.\...u 0310 d4 40 dc 5d 8c 3b 2e 7c 8c 79 1c a6 e5 04 5a da .@.].;.|.y....Z. 0320 9f 4d ca 7a 53 55 9d 1a f7 ec cd 77 a4 51 9c d1 .M.zSU.....w.Q.. 0330 d9 9a 50 d7 53 49 e0 25 01 86 e1 be ba f8 9e 72 ..P.SI.%.......r 0340 a2 26 59 77 b2 fd 27 ec 90 48 60 ee 0a 2e 80 d3 .&Yw..'..H`..... 0350 c8 b4 94 b3 52 29 b3 ab bb 34 f4 4c c1 bd 46 16 ....R)...4.L..F. 0360 0d d5 5a a4 c5 27 69 b8 df bd 0a f5 bc 39 5e ab ..Z..'i......9^. 0370 1a 18 3e 4f 5c dc df 8d de 6a ac 45 27 fe c3 22 ..>O\....j.E'.." 0380 cf 71 d6 ec dd 65 dc a5 eb e0 8d 45 ac 9c 5b 67 .q...e.....E..[g 0390 0a 56 5d 13 16 0c e8 4b 18 ea 75 db 0f 3e e6 42 .V]....K..u..>.B 03a0 52 f1 00 08 22 86 dc 10 ca b7 94 6f 56 32 51 26 R..."......oV2Q& 03b0 eb 76 54 84 3c 88 1b 15 6e f0 cf 3c 16 67 a2 6a .vT.<...n..<.g.j 03c0 02 c1 8e 10 cb 6e 49 f9 63 64 10 0b 6c 9a 2a 53 .....nI.cd..l.*S 03d0 9b de ee 9f b6 00 3a 28 90 c6 6b 49 9d 35 b2 d0 ......:(..kI.5.. 03e0 02 68 f4 29 41 22 f4 fe f6 ad 35 40 53 2b b6 8c .h.)A"....5@S+.. 03f0 f1 cb 4e d3 3f 7a 34 39 4e 53 ac 97 10 7e 8c 04 ..N.?z49NS...~.. 0400 89 ae 54 62 4a 1f 7a 9c 5f 54 1d 8d fa 6a a3 ac ..TbJ.z._T...j.. 0410 34 97 90 a9 3e 03 80 53 a8 0e 17 52 c8 47 d1 3b 4...>..S...R.G.; 0420 e0 d9 3d 69 1c 56 61 d3 f1 ad 2c 28 11 4e 89 13 ..=i.Va...,(.N.. 0430 fa af 8a 08 bd 52 3a 74 d3 12 8a 7b 47 d6 32 3f .....R:t...{G.2? 0440 0b b1 87 f8 65 c4 61 a5 35 54 ad 6f 2f f3 cd b4 ....e.a.5T.o/... 0450 02 1a 45 cc e1 03 ce 47 42 87 fb 98 4d 45 8f 09 ..E....GB...ME.. 0460 d2 8e 9b 73 f7 4b a5 47 bc 85 17 d7 ca fb 49 1e ...s.K.G......I. 0470 44 f7 c8 63 05 8d 44 f5 26 15 fb 81 d9 b2 f8 f5 D..c..D.&....... 0480 27 3c 9d 17 5b 83 08 28 56 25 01 16 d1 2a 26 bb '<..[..(V%...*&. 0490 cb a3 ac 79 70 bb 65 9a f6 60 e7 56 5c 54 d0 16 ...yp.e..`.V\T.. 04a0 6f 74 13 96 dd 65 45 1a 4b 82 e4 29 b1 5b 3b ab ot...eE.K..).[;. 04b0 46 52 c2 84 e3 28 3e e7 48 e8 65 f7 fb 87 c0 aa FR...(>.H.e..... 04c0 48 d0 93 e9 3f ed 3b 38 a7 44 26 65 99 c8 c0 9e H...?.;8.D&e.... 04d0 2c 4a e6 db 27 ff 02 99 71 ef fd 7c 32 a6 08 f9 ,J..'...q..|2... 04e0 ac 93 49 58 c9 ae 92 0c f1 d2 75 32 fd 52 f4 92 ..IX......u2.R.. 04f0 f7 53 c5 de ca 1b 6e 46 e7 26 b5 9a a1 05 98 d5 .S....nF.&...... 0500 24 65 29 65 80 af 0c f8 ec b1 df fc aa c9 23 1b $e)e..........#. 0510 22 a4 e8 13 21 cd 1b 48 11 d5 a6 ab f4 93 fd e6 "...!..H........ 0520 4b a4 25 2f d0 2e 46 82 e3 d3 8c d0 3b c9 39 28 K.%/..F.....;.9( 0530 97 12 98 ca ab d1 3e 3a 20 2b 48 3b 51 2e 2f a3 ......>: +H;Q./. 0540 92 02 05 b9 a6 09 12 de 37 18 86 af 07 3d 34 6c ........7....=4l 0550 c6 ff be 16 e3 5d 31 27 e5 c7 42 b3 d1 c4 7a 81 .....]1'..B...z. 0560 ac 58 e7 73 28 d1 f1 52 56 a8 34 c7 e7 93 0c 62 .X.s(..RV.4....b 0570 69 34 82 4a a2 d1 fb 71 c3 99 8e c7 c6 02 b8 b0 i4.J...q........ 0580 68 b6 6e 06 a1 5e f3 51 dc 05 08 3a 04 27 0e 87 h.n..^.Q...:.'.. 0590 f8 e8 60 f4 aa 9b 3e 4b a6 19 89 23 b7 e0 d3 b8 ..`...>K...#.... 05a0 26 88 af 74 22 6b 4c 6a 81 3c 78 7b c9 9b c1 76 &..t"kLj.A 00a0 bd 38 3c e7 28 1e 75 47 7c 41 a8 b0 ea 89 06 56 .8<.(.uG|A.....V 00b0 dc 60 57 8e eb 1d 85 1e fa 46 18 d9 a0 19 c6 92 .`W......F...... 00c0 79 50 0e 9a 55 ee d9 7b 8d 5f 12 07 a9 e0 41 07 yP..U..{._....A. 00d0 d8 6a bc 6e 9c c9 6d f9 16 fc d5 a8 0b 94 a3 b5 .j.n..m......... 00e0 1a c7 f2 da 97 d6 16 6a 62 8e 10 bf 0c b5 c7 8f .......jb....... 00f0 cd 00 cc 1e 1a 47 a8 3c cd 4d 49 c2 b1 73 f5 56 .....G.<.MI..s.V 0100 e8 c6 f2 80 41 76 c8 ed f5 6a a0 6f 7f 97 9c cd ....Av...j.o.... 0110 46 13 06 cd 1f ce 7b 2d 6b 90 4a dd 5f b3 0f 9d F.....{-k.J._... 0120 3c bf e3 57 <..W Reassembled TCP (1637 bytes): 0000 17 03 01 06 60 a4 ea b2 f7 0e 8d d4 37 39 f7 12 ....`.......79.. 0010 ac 93 e5 d0 90 d1 60 63 ed e1 dc f4 c6 7e c4 34 ......`c.....~.4 0020 86 a5 4a 21 ff da 71 f5 d2 2a 7b 0d 3e bf 0e 8a ..J!..q..*{.>... 0030 96 e8 77 8a f0 9e 30 d9 dc 70 a7 d1 f1 1e 98 cb ..w...0..p...... 0040 60 a5 30 67 f1 98 d3 6d 6c 06 f9 30 62 5c 09 50 `.0g...ml..0b\.P 0050 0c 37 64 05 b9 30 4d 10 1b 53 c0 21 a8 c9 3b 9c .7d..0M..S.!..;. 0060 d8 75 7f 71 8e 34 af be e3 a3 79 ce 23 97 55 d4 .u.q.4....y.#.U. 0070 f3 27 ca a2 c8 ef 53 c1 fb 88 f8 89 a5 59 68 fc .'....S......Yh. 0080 d7 54 f8 0d 3b ce 5b bb 2d 15 f5 a3 c8 e4 17 6f .T..;.[.-......o 0090 09 cb 0c 55 01 e2 e8 4d f0 0b 2e 8c a1 1b e7 35 ...U...M.......5 00a0 48 11 a3 bb 24 be 28 c4 46 14 fc 5f ff d7 1d 8a H...$.(.F.._.... 00b0 ec d4 41 3e 44 a9 73 5c ac 14 27 8f a9 5e 64 3c ..A>D.s\..'..^d< 00c0 09 73 1b fd 39 99 61 7c 05 34 7f 5a 8e b0 3f e8 .s..9.a|.4.Z..?. 00d0 9f ab 93 ba f7 0e a5 c3 8e c8 2f aa 20 7e 6e cf ........../. ~n. 00e0 d9 f9 05 19 be 32 3f 62 f9 7e 86 91 88 ec 89 26 .....2?b.~.....& 00f0 4f 0d 77 56 88 21 c6 77 ff b2 76 43 77 cc 66 a0 O.wV.!.w..vCw.f. 0100 25 cf ed f5 ac ab f2 a5 4c 69 8b 1f b0 71 2e ba %.......Li...q.. 0110 f0 83 3a 4a 19 b1 92 7c 3d 25 58 25 34 9b 57 ea ..:J...|=%X%4.W. 0120 06 ed 68 c8 39 d0 2b cd 70 0a 82 f0 fb 3f 1a 47 ..h.9.+.p....?.G 0130 45 f4 25 03 f2 31 ce 8b 89 80 dd 9d 18 37 1e 4e E.%..1.......7.N 0140 40 00 72 c0 8c a3 a8 d7 c3 fb b2 6b 4d e3 44 86 @.r........kM.D. 0150 37 3b 23 ac 07 6b 9e 2a c9 0f e7 41 5c 31 d0 c3 7;#..k.*...A\1.. 0160 e4 97 18 86 f7 eb 59 0b 5a a9 6e 10 59 92 93 e1 ......Y.Z.n.Y... 0170 ba eb 7d b3 0f f9 06 47 17 cf 4b 7b 9e 4c be fb ..}....G..K{.L.. 0180 76 d2 31 a7 72 ec 47 fa 0f fd de dc ff 89 00 07 v.1.r.G......... 0190 01 c0 9f e5 c7 03 5c 2e 75 4d cc d7 fb fc bb 4c ......\.uM.....L 01a0 b3 fe 24 13 68 a7 c4 a4 79 f9 b7 dc 6f 7b 05 5a ..$.h...y...o{.Z 01b0 16 a1 f6 43 5a f6 53 94 69 8d f3 79 2f fe eb fc ...CZ.S.i..y/... 01c0 81 34 ee fa be 6e 04 9e a6 a2 08 15 fa 40 4d 59 .4...n.......@MY 01d0 3d db 9f 0a 3e 55 b3 7b ed 00 ad 8c 6e 7f d7 4f =...>U.{....n..O 01e0 fe 5e b6 cf e8 ec 5d ca d3 66 f5 6a f9 9e f3 11 .^....]..f.j.... 01f0 19 1f 32 95 80 e7 9d 4c ed 3a 1a 6d 7d ac 1c a5 ..2....L.:.m}... 0200 b0 68 d9 54 ad 7a 29 d0 80 63 df 06 c5 79 c2 40 .h.T.z)..c...y.@ 0210 a8 26 eb d2 cf 72 e0 f6 11 48 78 2e ba ca 6e 84 .&...r...Hx...n. 0220 2d d0 c7 bc 37 4a d2 46 81 29 6f 15 eb 5f ce 88 -...7J.F.)o.._.. 0230 f2 7c df f3 0a 8c 3b 81 16 ca 01 12 d0 b3 4a 79 .|....;.......Jy 0240 34 5d 5e 65 64 36 cc c6 e8 4d 96 a0 ce c0 61 34 4]^ed6...M....a4 0250 22 59 9e 09 49 d0 d7 04 0f f4 08 38 5c 51 38 f5 "Y..I......8\Q8. 0260 42 f8 29 c8 1a 71 d0 3d 11 28 bc 5e b3 2e 43 dd B.)..q.=.(.^..C. 0270 51 ec 73 26 42 4b a7 6f b2 d2 76 2c 77 9b e4 a0 Q.s&BK.o..v,w... 0280 cc 0b 8d 01 03 88 0f f8 9d 6c f5 9b 58 56 2e b9 .........l..XV.. 0290 54 b8 a4 47 45 d4 a2 3c c4 9f 36 23 13 dc 1c 32 T..GE..<..6#...2 02a0 ba 90 51 1e 5c 17 ad c5 75 d4 40 dc 5d 8c 3b 2e ..Q.\...u.@.].;. 02b0 7c 8c 79 1c a6 e5 04 5a da 9f 4d ca 7a 53 55 9d |.y....Z..M.zSU. 02c0 1a f7 ec cd 77 a4 51 9c d1 d9 9a 50 d7 53 49 e0 ....w.Q....P.SI. 02d0 25 01 86 e1 be ba f8 9e 72 a2 26 59 77 b2 fd 27 %.......r.&Yw..' 02e0 ec 90 48 60 ee 0a 2e 80 d3 c8 b4 94 b3 52 29 b3 ..H`.........R). 02f0 ab bb 34 f4 4c c1 bd 46 16 0d d5 5a a4 c5 27 69 ..4.L..F...Z..'i 0300 b8 df bd 0a f5 bc 39 5e ab 1a 18 3e 4f 5c dc df ......9^...>O\.. 0310 8d de 6a ac 45 27 fe c3 22 cf 71 d6 ec dd 65 dc ..j.E'..".q...e. 0320 a5 eb e0 8d 45 ac 9c 5b 67 0a 56 5d 13 16 0c e8 ....E..[g.V].... 0330 4b 18 ea 75 db 0f 3e e6 42 52 f1 00 08 22 86 dc K..u..>.BR...".. 0340 10 ca b7 94 6f 56 32 51 26 eb 76 54 84 3c 88 1b ....oV2Q&.vT.<.. 0350 15 6e f0 cf 3c 16 67 a2 6a 02 c1 8e 10 cb 6e 49 .n..<.g.j.....nI 0360 f9 63 64 10 0b 6c 9a 2a 53 9b de ee 9f b6 00 3a .cd..l.*S......: 0370 28 90 c6 6b 49 9d 35 b2 d0 02 68 f4 29 41 22 f4 (..kI.5...h.)A". 0380 fe f6 ad 35 40 53 2b b6 8c f1 cb 4e d3 3f 7a 34 ...5@S+....N.?z4 0390 39 4e 53 ac 97 10 7e 8c 04 89 ae 54 62 4a 1f 7a 9NS...~....TbJ.z 03a0 9c 5f 54 1d 8d fa 6a a3 ac 34 97 90 a9 3e 03 80 ._T...j..4...>.. 03b0 53 a8 0e 17 52 c8 47 d1 3b e0 d9 3d 69 1c 56 61 S...R.G.;..=i.Va 03c0 d3 f1 ad 2c 28 11 4e 89 13 fa af 8a 08 bd 52 3a ...,(.N.......R: 03d0 74 d3 12 8a 7b 47 d6 32 3f 0b b1 87 f8 65 c4 61 t...{G.2?....e.a 03e0 a5 35 54 ad 6f 2f f3 cd b4 02 1a 45 cc e1 03 ce .5T.o/.....E.... 03f0 47 42 87 fb 98 4d 45 8f 09 d2 8e 9b 73 f7 4b a5 GB...ME.....s.K. 0400 47 bc 85 17 d7 ca fb 49 1e 44 f7 c8 63 05 8d 44 G......I.D..c..D 0410 f5 26 15 fb 81 d9 b2 f8 f5 27 3c 9d 17 5b 83 08 .&.......'<..[.. 0420 28 56 25 01 16 d1 2a 26 bb cb a3 ac 79 70 bb 65 (V%...*&....yp.e 0430 9a f6 60 e7 56 5c 54 d0 16 6f 74 13 96 dd 65 45 ..`.V\T..ot...eE 0440 1a 4b 82 e4 29 b1 5b 3b ab 46 52 c2 84 e3 28 3e .K..).[;.FR...(> 0450 e7 48 e8 65 f7 fb 87 c0 aa 48 d0 93 e9 3f ed 3b .H.e.....H...?.; 0460 38 a7 44 26 65 99 c8 c0 9e 2c 4a e6 db 27 ff 02 8.D&e....,J..'.. 0470 99 71 ef fd 7c 32 a6 08 f9 ac 93 49 58 c9 ae 92 .q..|2.....IX... 0480 0c f1 d2 75 32 fd 52 f4 92 f7 53 c5 de ca 1b 6e ...u2.R...S....n 0490 46 e7 26 b5 9a a1 05 98 d5 24 65 29 65 80 af 0c F.&......$e)e... 04a0 f8 ec b1 df fc aa c9 23 1b 22 a4 e8 13 21 cd 1b .......#."...!.. 04b0 48 11 d5 a6 ab f4 93 fd e6 4b a4 25 2f d0 2e 46 H........K.%/..F 04c0 82 e3 d3 8c d0 3b c9 39 28 97 12 98 ca ab d1 3e .....;.9(......> 04d0 3a 20 2b 48 3b 51 2e 2f a3 92 02 05 b9 a6 09 12 : +H;Q./........ 04e0 de 37 18 86 af 07 3d 34 6c c6 ff be 16 e3 5d 31 .7....=4l.....]1 04f0 27 e5 c7 42 b3 d1 c4 7a 81 ac 58 e7 73 28 d1 f1 '..B...z..X.s(.. 0500 52 56 a8 34 c7 e7 93 0c 62 69 34 82 4a a2 d1 fb RV.4....bi4.J... 0510 71 c3 99 8e c7 c6 02 b8 b0 68 b6 6e 06 a1 5e f3 q........h.n..^. 0520 51 dc 05 08 3a 04 27 0e 87 f8 e8 60 f4 aa 9b 3e Q...:.'....`...> 0530 4b a6 19 89 23 b7 e0 d3 b8 26 88 af 74 22 6b 4c K...#....&..t"kL 0540 6a 81 3c 78 7b c9 9b c1 76 51 be 62 5b 31 5b ef j. 05e0 41 bd 38 3c e7 28 1e 75 47 7c 41 a8 b0 ea 89 06 A.8<.(.uG|A..... 05f0 56 dc 60 57 8e eb 1d 85 1e fa 46 18 d9 a0 19 c6 V.`W......F..... 0600 92 79 50 0e 9a 55 ee d9 7b 8d 5f 12 07 a9 e0 41 .yP..U..{._....A 0610 07 d8 6a bc 6e 9c c9 6d f9 16 fc d5 a8 0b 94 a3 ..j.n..m........ 0620 b5 1a c7 f2 da 97 d6 16 6a 62 8e 10 bf 0c b5 c7 ........jb...... 0630 8f cd 00 cc 1e 1a 47 a8 3c cd 4d 49 c2 b1 73 f5 ......G.<.MI..s. 0640 56 e8 c6 f2 80 41 76 c8 ed f5 6a a0 6f 7f 97 9c V....Av...j.o... 0650 cd 46 13 06 cd 1f ce 7b 2d 6b 90 4a dd 5f b3 0f .F.....{-k.J._.. 0660 9d 3c bf e3 57 .<..W No. Time Source Destination Protocol Info 361 12:37:58.611908 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 361: 1206 bytes on wire (9648 bits), 1206 bytes captured (9648 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 89281, Ack: 9766, Len: 1152 NetBIOS Session Service SMB (Server Message Block Protocol) NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 04 a8 9d 0f 40 00 7e 06 f7 20 a7 eb 0d 30 a7 eb ....@.~.. ...0.. 0020 07 19 00 8b 0e d4 40 87 cc 13 56 09 f8 5b 50 18 ......@...V..[P. 0030 fd 4a cf 7a 00 00 00 00 02 3c ff 53 4d 42 2e 00 .J.z.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c2 9b 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0280 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0290 00 00 06 30 ff fe 01 08 04 9c 0c ff 00 00 00 ff ...0............ 02a0 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 02b0 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 02c0 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 02d0 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 02e0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 02f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0300 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0310 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0320 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0330 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0340 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0350 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0360 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0370 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0380 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0390 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 03a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 03b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 03c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 03d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 03e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 03f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0400 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0410 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0420 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0430 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0440 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0450 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0460 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0470 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0480 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0490 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 04a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 04b0 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 362 12:37:58.611949 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 362: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 90433, Ack: 9829, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9d 10 40 00 7e 06 f9 5f a7 eb 0d 30 a7 eb .h..@.~.._...0.. 0020 07 19 00 8b 0e d4 40 87 d0 93 56 09 f8 9a 50 18 ......@...V...P. 0030 fd 0b 75 3f 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..u?.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 43 9c 0c ff 00 00 00 ff ...0....C....... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 363 12:37:58.611954 167.235.13.48 167.235.7.25 TCP [TCP Dup ACK 362#1] netbios-ssn > spw-dialer [ACK] Seq=91009 Ack=9829 Win=64779 Len=0 Frame 363: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 91009, Ack: 9829, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9d 11 40 00 7e 06 fb 9e a7 eb 0d 30 a7 eb .(..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 d2 d3 56 09 f8 9a 50 10 ......@...V...P. 0030 fd 0b dd 4a 00 00 00 00 00 00 00 00 ...J........ No. Time Source Destination Protocol Info 364 12:37:58.612007 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 364: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 91009, Ack: 9829, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9d 12 40 00 7e 06 f9 5d a7 eb 0d 30 a7 eb .h..@.~..]...0.. 0020 07 19 00 8b 0e d4 40 87 d2 d3 56 09 f8 9a 50 18 ......@...V...P. 0030 fd 0b 30 ff 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..0......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 85 9c 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 365 12:37:58.612060 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 365: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 91585, Ack: 9829, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9d 13 40 00 7e 06 f9 5c a7 eb 0d 30 a7 eb .h..@.~..\...0.. 0020 07 19 00 8b 0e d4 40 87 d5 13 56 09 f8 9a 50 18 ......@...V...P. 0030 fd 0b f2 be 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c1 9c 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 366 12:37:58.634040 Cisco_a6:ad:bf Broadcast 0x0806 ARP Frame 366: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Data (46 bytes) 0000 ff ff ff ff ff ff 00 15 2b a6 ad bf 08 06 00 01 ........+....... 0010 08 00 06 04 00 01 00 15 2b a6 ad bf a7 eb 07 7e ........+......~ 0020 00 00 00 00 00 00 a7 eb 07 73 00 00 00 00 00 00 .........s...... 0030 00 00 00 00 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 367 12:37:58.908767 192.168.11.43 167.235.7.45 TCP https > 55752 [ACK] Seq=7939 Ack=3390 Win=64480 Len=0 TSV=174427298 TSER=107661241 Frame 367: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_23:f1:a5 (00:1e:37:23:f1:a5) Internet Protocol, Src: 192.168.11.43 (192.168.11.43), Dst: 167.235.7.45 (167.235.7.45) Transmission Control Protocol, Src Port: https (443), Dst Port: 55752 (55752), Seq: 7939, Ack: 3390, Len: 0 0000 00 1e 37 23 f1 a5 00 15 2b a6 ad bf 08 00 45 00 ..7#....+.....E. 0010 00 34 7d 5a 40 00 7e 06 04 7e c0 a8 0b 2b a7 eb .4}Z@.~..~...+.. 0020 07 2d 01 bb d9 c8 14 1f 1b f9 6e fa ff 5a 80 10 .-........n..Z.. 0030 fb e0 20 d4 00 00 01 01 08 0a 0a 65 8c a2 06 6a .. ........e...j 0040 c7 b9 .. No. Time Source Destination Protocol Info 368 12:37:59.112699 167.235.13.48 167.235.7.25 TCP netbios-ssn > spw-dialer [ACK] Seq=92161 Ack=10018 Win=64590 Len=0 Frame 368: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 92161, Ack: 10018, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9d 15 40 00 7e 06 fb 9a a7 eb 0d 30 a7 eb .(..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 d7 53 56 09 f9 57 50 10 ......@..SV..WP. 0030 fc 4e d8 ca 00 00 00 00 00 00 00 00 .N.......... No. Time Source Destination Protocol Info 369 12:37:59.112719 167.235.13.48 167.235.7.25 TCP netbios-ssn > spw-dialer [ACK] Seq=92161 Ack=10144 Win=64464 Len=0 Frame 369: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 92161, Ack: 10144, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9d 16 40 00 7e 06 fb 99 a7 eb 0d 30 a7 eb .(..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 d7 53 56 09 f9 d5 50 10 ......@..SV...P. 0030 fb d0 d8 ca 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 370 12:37:59.112812 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 370: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 92161, Ack: 10144, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9d 17 40 00 7e 06 f9 58 a7 eb 0d 30 a7 eb .h..@.~..X...0.. 0020 07 19 00 8b 0e d4 40 87 d7 53 56 09 f9 d5 50 18 ......@..SV...P. 0030 fb d0 b0 7e 00 00 00 00 02 3c ff 53 4d 42 2e 00 ...~.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 01 9d 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 371 12:37:59.112866 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 371: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 92737, Ack: 10144, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9d 18 40 00 7e 06 f9 57 a7 eb 0d 30 a7 eb .h..@.~..W...0.. 0020 07 19 00 8b 0e d4 40 87 d9 93 56 09 f9 d5 50 18 ......@...V...P. 0030 fb d0 6a 3e 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..j>.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 45 9d 0c ff 00 00 00 ff ...0....E....... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 372 12:37:59.112918 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 372: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 93313, Ack: 10144, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9d 19 40 00 7e 06 f9 56 a7 eb 0d 30 a7 eb .h..@.~..V...0.. 0020 07 19 00 8b 0e d4 40 87 db d3 56 09 f9 d5 50 18 ......@...V...P. 0030 fb d0 29 fe 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..)......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 83 9d 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 373 12:37:59.112968 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 373: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 93889, Ack: 10144, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9d 1a 40 00 7e 06 f9 55 a7 eb 0d 30 a7 eb .h..@.~..U...0.. 0020 07 19 00 8b 0e d4 40 87 de 13 56 09 f9 d5 50 18 ......@...V...P. 0030 fb d0 e6 bc 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c4 9d 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 374 12:37:59.113020 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 374: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 94465, Ack: 10144, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9d 1b 40 00 7e 06 f9 54 a7 eb 0d 30 a7 eb .h..@.~..T...0.. 0020 07 19 00 8b 0e d4 40 87 e0 53 56 09 f9 d5 50 18 ......@..SV...P. 0030 fb d0 a6 7c 00 00 00 00 02 3c ff 53 4d 42 2e 00 ...|.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 02 9e 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 375 12:37:59.210547 192.168.11.43 167.235.7.45 TCP https > 55752 [ACK] Seq=7939 Ack=3891 Win=65535 Len=0 TSV=174427301 TSER=107661472 Frame 375: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_23:f1:a5 (00:1e:37:23:f1:a5) Internet Protocol, Src: 192.168.11.43 (192.168.11.43), Dst: 167.235.7.45 (167.235.7.45) Transmission Control Protocol, Src Port: https (443), Dst Port: 55752 (55752), Seq: 7939, Ack: 3891, Len: 0 0000 00 1e 37 23 f1 a5 00 15 2b a6 ad bf 08 00 45 00 ..7#....+.....E. 0010 00 34 7f 14 40 00 7e 06 02 c4 c0 a8 0b 2b a7 eb .4..@.~......+.. 0020 07 2d 01 bb d9 c8 14 1f 1b f9 6e fb 01 4f 80 10 .-........n..O.. 0030 ff ff 19 d6 00 00 01 01 08 0a 0a 65 8c a5 06 6a ...........e...j 0040 c8 a0 .. No. Time Source Destination Protocol Info 376 12:37:59.223231 192.168.11.43 167.235.7.45 TLSv1 Application Data Frame 376: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_23:f1:a5 (00:1e:37:23:f1:a5) Internet Protocol, Src: 192.168.11.43 (192.168.11.43), Dst: 167.235.7.45 (167.235.7.45) Transmission Control Protocol, Src Port: https (443), Dst Port: 55752 (55752), Seq: 7939, Ack: 3891, Len: 1448 Secure Socket Layer 0000 00 1e 37 23 f1 a5 00 15 2b a6 ad bf 08 00 45 00 ..7#....+.....E. 0010 05 dc 7f 1d 40 00 7e 06 fd 12 c0 a8 0b 2b a7 eb ....@.~......+.. 0020 07 2d 01 bb d9 c8 14 1f 1b f9 6e fb 01 4f 80 10 .-........n..O.. 0030 ff ff 45 3a 00 00 01 01 08 0a 0a 65 8c a5 06 6a ..E:.......e...j 0040 c8 a0 17 03 01 00 20 26 3f b3 bd db 8d 90 48 a0 ...... &?.....H. 0050 0d 4b 11 f5 f9 54 ac 02 cc c4 bd 6f 17 41 0d 95 .K...T.....o.A.. 0060 36 09 64 6a 4c f9 24 17 03 01 06 30 44 92 64 8a 6.djL.$....0D.d. 0070 10 7c 7e 28 f2 e5 7f 31 42 7f 39 9a bf 72 89 f7 .|~(...1B.9..r.. 0080 a5 48 a9 28 69 e5 1f 3d fa 21 d7 0e b9 da 5f da .H.(i..=.!...._. 0090 53 45 df 15 1b 61 3d fd a9 20 b6 e8 8f 4d 54 9f SE...a=.. ...MT. 00a0 62 94 61 a8 ce 5b 0d 0b f2 56 5c ea 42 bf ca de b.a..[...V\.B... 00b0 84 6c 3a d9 ab 6e 4e 27 07 94 63 3b e0 6b 5f 29 .l:..nN'..c;.k_) 00c0 79 ab d4 58 a6 d9 cc de 3c 94 77 ef 95 ed c7 79 y..X....<.w....y 00d0 9d 9a 76 d4 70 f0 07 af 48 3c d9 0d 57 b6 f5 80 ..v.p...H<..W... 00e0 8d 99 9e 47 12 2e b5 00 c9 f9 24 14 11 8d 12 69 ...G......$....i 00f0 51 3d 1a a9 90 82 0e 57 cc a7 b1 d9 bf 0a ac 41 Q=.....W.......A 0100 c9 b7 1e c3 4b 35 c8 7f 8a 85 45 09 95 b1 f0 75 ....K5....E....u 0110 37 ef 1c d8 29 85 8b 41 2f de 92 d9 7b aa 3c c0 7...)..A/...{.<. 0120 6a 44 4d 73 ba 7a b4 89 9c c1 46 38 eb 9e bd c1 jDMs.z....F8.... 0130 8a ed f9 b5 96 83 ab a5 f5 0c 6c 54 85 2d 96 05 ..........lT.-.. 0140 d0 ce ff c6 05 2f 4a 46 a9 76 66 7b b4 98 1a 86 ...../JF.vf{.... 0150 11 89 da f7 98 c7 2f 3f 09 df c2 b7 0a 77 e0 ce ....../?.....w.. 0160 9e 14 22 0b 28 8f ef 11 4a 3d 84 5c 13 aa 58 1f ..".(...J=.\..X. 0170 23 cb e8 24 7c 78 d2 b0 48 25 ee 08 5f b5 48 72 #..$|x..H%.._.Hr 0180 eb 3a 38 99 e8 72 29 24 80 72 75 a6 46 d0 b5 b3 .:8..r)$.ru.F... 0190 bc 21 8f ce 6b e9 e1 e6 34 ad 02 96 be 92 2a 8c .!..k...4.....*. 01a0 b9 02 76 12 21 b7 cb 48 82 a3 a5 41 08 78 4b 40 ..v.!..H...A.xK@ 01b0 14 d8 81 27 b4 b0 ce f4 93 6d 95 89 c1 b9 0d a3 ...'.....m...... 01c0 e6 64 9e 58 2d 3f 2f 8f 05 64 dd cc ff aa 98 2e .d.X-?/..d...... 01d0 0d 56 b2 5e 49 24 ca 1b d5 ef 0d e2 cc de 6e 43 .V.^I$........nC 01e0 68 01 0c b4 16 63 93 dd af fa 28 20 4f 57 af b5 h....c....( OW.. 01f0 5f 09 a1 19 64 37 da cf a4 fa e0 2a 43 f4 85 f6 _...d7.....*C... 0200 ad cd 78 ee 79 db 63 8f 05 a1 28 23 c8 e3 b6 23 ..x.y.c...(#...# 0210 96 7c 06 61 e4 ec 3e ca f6 e5 c9 16 98 7d 59 12 .|.a..>......}Y. 0220 9e 3b db cf b5 c3 cd f1 74 f4 a7 53 ce ff 04 c6 .;......t..S.... 0230 99 f9 28 d5 b8 ab b7 11 9b c9 61 e3 c5 28 bb 63 ..(.......a..(.c 0240 72 be d0 9d 07 87 c6 4b bc ba 24 40 7d 79 cc 8b r......K..$@}y.. 0250 ea ee d9 3f 9f 2d 2a f2 f9 5b 38 77 45 6f 46 de ...?.-*..[8wEoF. 0260 69 84 27 17 4c 7b 6f b7 a1 79 38 64 4e 27 a4 83 i.'.L{o..y8dN'.. 0270 6b 71 f3 69 65 cf 4d ea b9 d2 42 44 83 ad 26 23 kq.ie.M...BD..&# 0280 da 15 bb 13 e0 5e 56 a3 39 2b 00 2e b2 5e 59 1d .....^V.9+...^Y. 0290 47 f4 d0 0e 16 9f 2b f0 1b 58 56 0b c4 5a 72 9f G.....+..XV..Zr. 02a0 1b 11 f4 5b 63 5a de e2 f3 b5 8b b4 c8 79 be 99 ...[cZ.......y.. 02b0 6e 01 fc c6 ab ad 19 49 1b a9 6a df c4 23 42 4a n......I..j..#BJ 02c0 76 44 75 6d b2 aa 70 eb 9d c4 01 f0 0b 9d 42 bf vDum..p.......B. 02d0 38 5e a9 0e 62 0e d6 25 de 01 46 2e ab b4 99 43 8^..b..%..F....C 02e0 5c 23 91 e2 09 40 6c 1d 11 8b 45 e4 ff 76 64 44 \#...@l...E..vdD 02f0 60 7b 99 0f e4 66 d2 ff 74 b4 ed 0c 11 45 f5 c8 `{...f..t....E.. 0300 cf 3c 3a 66 0e e8 2d d2 f7 6f 9b b6 f5 f7 a5 35 .<:f..-..o.....5 0310 63 a4 21 49 99 83 8a e2 6c 7f 2c 11 38 0a ae 98 c.!I....l.,.8... 0320 db 9f c6 23 b9 55 be 16 7a 4e c1 b7 f7 da c0 d9 ...#.U..zN...... 0330 61 88 41 ea f3 64 4f c6 4c 8a 47 5f c7 d4 d6 e0 a.A..dO.L.G_.... 0340 c8 c2 85 d1 30 c5 b1 99 65 74 53 97 da ef 55 b9 ....0...etS...U. 0350 7e 21 9a f8 a0 f8 e3 5d 86 04 ca 14 8b 61 4b 03 ~!.....].....aK. 0360 ab a9 89 d0 53 3c 92 fa ba 77 da 0d e9 80 43 1b ....S<...w....C. 0370 19 b7 0b 69 19 8d e4 8c 1f 17 3b b4 44 c4 e8 58 ...i......;.D..X 0380 7b 04 60 02 a7 b6 6b d3 8d 07 ef 3b 07 1d da 13 {.`...k....;.... 0390 a9 23 f7 76 6e 29 d7 a5 1d 05 88 4b 1c 1a 58 7d .#.vn).....K..X} 03a0 7a 62 27 c9 54 1a 51 60 19 3e 4a 26 e8 6e 49 5f zb'.T.Q`.>J&.nI_ 03b0 18 6d f8 3d e3 14 7d 0e b5 76 c0 29 e5 e0 cf 28 .m.=..}..v.)...( 03c0 5a 54 cb 30 7e ab 56 94 5c f7 f7 ce 31 12 0f 1c ZT.0~.V.\...1... 03d0 df 6d 8d 4b ef 47 3d c2 12 3e 95 30 38 c0 9d 05 .m.K.G=..>.08... 03e0 68 b9 e7 c4 66 b2 c8 7c 89 77 36 e3 23 11 f4 9d h...f..|.w6.#... 03f0 19 47 6c b8 6e e7 96 31 f6 fb e8 55 1c 80 40 31 .Gl.n..1...U..@1 0400 9d 8a 10 75 8a 12 a0 88 ae 05 60 c4 7a c0 09 3f ...u......`.z..? 0410 2b 6d 0f 8d 0a 3a 84 74 b4 f1 eb be 11 f6 51 a5 +m...:.t......Q. 0420 9b 33 0b 9a 6d 06 4a 94 a9 51 9a ac 60 61 77 97 .3..m.J..Q..`aw. 0430 08 55 44 c4 21 f4 05 58 3f 53 7f 49 c0 6d 49 4c .UD.!..X?S.I.mIL 0440 02 4f 22 5e 04 58 27 e3 b9 1b 65 c9 ab f7 b5 cc .O"^.X'...e..... 0450 b6 2f ae 9a 98 45 56 3c 7b cc 67 c5 3e 82 9d fa ./...EV<{.g.>... 0460 7c 95 66 74 c0 1c c4 bb 9f 99 58 62 50 37 dd 69 |.ft......XbP7.i 0470 d9 db 15 23 ea 67 8f b3 fd fc 6c cc 24 df 2f 07 ...#.g....l.$./. 0480 d9 21 57 bb 5e 1d 07 c9 49 f5 ea d9 8f 10 e2 67 .!W.^...I......g 0490 d1 63 86 69 8f eb 8e 49 7a 4f ae ae 1f 82 c9 bf .c.i...IzO...... 04a0 4f 1b 0e 26 85 33 dd 9f c9 f5 2d 6a 37 34 ee bc O..&.3....-j74.. 04b0 37 a2 37 a7 96 a3 81 a9 8a b7 a6 e9 b8 1b 94 e6 7.7............. 04c0 fd 6c 0b 2e b5 7a 31 b2 cf 02 2b 8b 5f 32 7a 29 .l...z1...+._2z) 04d0 00 04 4e f9 18 97 0a 05 52 ca 3f ec a7 9f ba 3d ..N.....R.?....= 04e0 3a 74 c8 33 fc fd 56 2f cd b2 5e bf e4 63 3c 87 :t.3..V/..^..c<. 04f0 8c 8a 19 1b d5 83 af 6f 00 99 cc 56 83 05 31 84 .......o...V..1. 0500 8d d7 9b 2b e5 59 23 58 b5 c9 a5 b3 22 22 84 6e ...+.Y#X...."".n 0510 5d 32 d3 3e 19 88 02 4f 76 9b 92 95 b6 7d 02 99 ]2.>...Ov....}.. 0520 95 0f 27 ca ca 9c a7 ef 22 f7 61 e0 c3 ca 53 53 ..'.....".a...SS 0530 19 3f 4b 3f bd a1 89 6a dc 8c 19 31 0c a3 30 09 .?K?...j...1..0. 0540 37 e1 00 c8 b4 5a b8 ce a8 e9 3d 81 8e 73 b0 cb 7....Z....=..s.. 0550 1e 13 dd 07 7c ec 98 ef d7 3e 94 af e0 11 9e 42 ....|....>.....B 0560 b8 3f 93 bc 25 0c 2f 95 c5 2a 56 96 bc d3 ab fb .?..%./..*V..... 0570 50 8c d8 40 3e 7c be f7 f7 fe 5a 23 0d 1d 63 5b P..@>|....Z#..c[ 0580 8f 53 62 88 58 18 83 10 2a 2f d9 72 19 7a 11 a1 .Sb.X...*/.r.z.. 0590 02 14 bd e9 78 05 f9 70 c4 4f df 37 7f da d7 cd ....x..p.O.7.... 05a0 aa ef 5f 6f a8 a7 37 23 67 0e 0c aa ad 46 4f de .._o..7#g....FO. 05b0 8a 3e 3f 6a 8a 67 1e 1d db 6f 12 0f 0b 78 d9 c7 .>?j.g...o...x.. 05c0 90 52 a7 61 ef d9 bf 1d 50 39 6d cd fa 3b 91 32 .R.a....P9m..;.2 05d0 37 8b 91 ed a9 94 89 a7 63 6c 32 df 32 ed f0 01 7.......cl2.2... 05e0 80 92 e0 43 7d a5 53 66 2d d9 ...C}.Sf-. No. Time Source Destination Protocol Info 377 12:37:59.223256 192.168.11.43 167.235.7.45 TLSv1 Application Data Frame 377: 244 bytes on wire (1952 bits), 244 bytes captured (1952 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_23:f1:a5 (00:1e:37:23:f1:a5) Internet Protocol, Src: 192.168.11.43 (192.168.11.43), Dst: 167.235.7.45 (167.235.7.45) Transmission Control Protocol, Src Port: https (443), Dst Port: 55752 (55752), Seq: 9387, Ack: 3891, Len: 178 [Reassembled TCP Segments (1589 bytes): #376(1411), #377(178)] Secure Socket Layer Frame (244 bytes): 0000 00 1e 37 23 f1 a5 00 15 2b a6 ad bf 08 00 45 00 ..7#....+.....E. 0010 00 e6 7f 1e 40 00 7e 06 02 08 c0 a8 0b 2b a7 eb ....@.~......+.. 0020 07 2d 01 bb d9 c8 14 1f 21 a1 6e fb 01 4f 80 18 .-......!.n..O.. 0030 ff ff 43 02 00 00 01 01 08 0a 0a 65 8c a5 06 6a ..C........e...j 0040 c8 a0 e4 d6 c6 72 5c e0 b5 02 5d ca 21 bb e8 ec .....r\...].!... 0050 75 4a 5e 4a b8 2f 05 a1 4b 4b a4 cc a9 e5 d0 1d uJ^J./..KK...... 0060 af 32 07 10 b8 e7 35 db 77 38 ac 61 b9 31 9b d0 .2....5.w8.a.1.. 0070 0e 79 78 2e b9 4b 96 28 bb c1 b7 1b 11 d4 a1 7c .yx..K.(.......| 0080 5a dd 8e e7 f5 e0 ef b7 1d ff 3a 41 ff e9 83 7a Z.........:A...z 0090 46 e7 1c 34 98 f5 27 70 2a fb 9a 1e 2e 4d f4 84 F..4..'p*....M.. 00a0 4e 33 86 d3 ab f9 06 19 9d c8 4d 62 d0 b0 a3 68 N3........Mb...h 00b0 a3 e2 19 b0 08 af f5 70 98 fb ac 43 fd 56 31 b8 .......p...C.V1. 00c0 78 3c 59 f4 29 2f b4 e7 b0 56 bc fc 5d 96 3c 4c x 01b0 ca f6 e5 c9 16 98 7d 59 12 9e 3b db cf b5 c3 cd ......}Y..;..... 01c0 f1 74 f4 a7 53 ce ff 04 c6 99 f9 28 d5 b8 ab b7 .t..S......(.... 01d0 11 9b c9 61 e3 c5 28 bb 63 72 be d0 9d 07 87 c6 ...a..(.cr...... 01e0 4b bc ba 24 40 7d 79 cc 8b ea ee d9 3f 9f 2d 2a K..$@}y.....?.-* 01f0 f2 f9 5b 38 77 45 6f 46 de 69 84 27 17 4c 7b 6f ..[8wEoF.i.'.L{o 0200 b7 a1 79 38 64 4e 27 a4 83 6b 71 f3 69 65 cf 4d ..y8dN'..kq.ie.M 0210 ea b9 d2 42 44 83 ad 26 23 da 15 bb 13 e0 5e 56 ...BD..&#.....^V 0220 a3 39 2b 00 2e b2 5e 59 1d 47 f4 d0 0e 16 9f 2b .9+...^Y.G.....+ 0230 f0 1b 58 56 0b c4 5a 72 9f 1b 11 f4 5b 63 5a de ..XV..Zr....[cZ. 0240 e2 f3 b5 8b b4 c8 79 be 99 6e 01 fc c6 ab ad 19 ......y..n...... 0250 49 1b a9 6a df c4 23 42 4a 76 44 75 6d b2 aa 70 I..j..#BJvDum..p 0260 eb 9d c4 01 f0 0b 9d 42 bf 38 5e a9 0e 62 0e d6 .......B.8^..b.. 0270 25 de 01 46 2e ab b4 99 43 5c 23 91 e2 09 40 6c %..F....C\#...@l 0280 1d 11 8b 45 e4 ff 76 64 44 60 7b 99 0f e4 66 d2 ...E..vdD`{...f. 0290 ff 74 b4 ed 0c 11 45 f5 c8 cf 3c 3a 66 0e e8 2d .t....E...<:f..- 02a0 d2 f7 6f 9b b6 f5 f7 a5 35 63 a4 21 49 99 83 8a ..o.....5c.!I... 02b0 e2 6c 7f 2c 11 38 0a ae 98 db 9f c6 23 b9 55 be .l.,.8......#.U. 02c0 16 7a 4e c1 b7 f7 da c0 d9 61 88 41 ea f3 64 4f .zN......a.A..dO 02d0 c6 4c 8a 47 5f c7 d4 d6 e0 c8 c2 85 d1 30 c5 b1 .L.G_........0.. 02e0 99 65 74 53 97 da ef 55 b9 7e 21 9a f8 a0 f8 e3 .etS...U.~!..... 02f0 5d 86 04 ca 14 8b 61 4b 03 ab a9 89 d0 53 3c 92 ].....aK.....S<. 0300 fa ba 77 da 0d e9 80 43 1b 19 b7 0b 69 19 8d e4 ..w....C....i... 0310 8c 1f 17 3b b4 44 c4 e8 58 7b 04 60 02 a7 b6 6b ...;.D..X{.`...k 0320 d3 8d 07 ef 3b 07 1d da 13 a9 23 f7 76 6e 29 d7 ....;.....#.vn). 0330 a5 1d 05 88 4b 1c 1a 58 7d 7a 62 27 c9 54 1a 51 ....K..X}zb'.T.Q 0340 60 19 3e 4a 26 e8 6e 49 5f 18 6d f8 3d e3 14 7d `.>J&.nI_.m.=..} 0350 0e b5 76 c0 29 e5 e0 cf 28 5a 54 cb 30 7e ab 56 ..v.)...(ZT.0~.V 0360 94 5c f7 f7 ce 31 12 0f 1c df 6d 8d 4b ef 47 3d .\...1....m.K.G= 0370 c2 12 3e 95 30 38 c0 9d 05 68 b9 e7 c4 66 b2 c8 ..>.08...h...f.. 0380 7c 89 77 36 e3 23 11 f4 9d 19 47 6c b8 6e e7 96 |.w6.#....Gl.n.. 0390 31 f6 fb e8 55 1c 80 40 31 9d 8a 10 75 8a 12 a0 1...U..@1...u... 03a0 88 ae 05 60 c4 7a c0 09 3f 2b 6d 0f 8d 0a 3a 84 ...`.z..?+m...:. 03b0 74 b4 f1 eb be 11 f6 51 a5 9b 33 0b 9a 6d 06 4a t......Q..3..m.J 03c0 94 a9 51 9a ac 60 61 77 97 08 55 44 c4 21 f4 05 ..Q..`aw..UD.!.. 03d0 58 3f 53 7f 49 c0 6d 49 4c 02 4f 22 5e 04 58 27 X?S.I.mIL.O"^.X' 03e0 e3 b9 1b 65 c9 ab f7 b5 cc b6 2f ae 9a 98 45 56 ...e....../...EV 03f0 3c 7b cc 67 c5 3e 82 9d fa 7c 95 66 74 c0 1c c4 <{.g.>...|.ft... 0400 bb 9f 99 58 62 50 37 dd 69 d9 db 15 23 ea 67 8f ...XbP7.i...#.g. 0410 b3 fd fc 6c cc 24 df 2f 07 d9 21 57 bb 5e 1d 07 ...l.$./..!W.^.. 0420 c9 49 f5 ea d9 8f 10 e2 67 d1 63 86 69 8f eb 8e .I......g.c.i... 0430 49 7a 4f ae ae 1f 82 c9 bf 4f 1b 0e 26 85 33 dd IzO......O..&.3. 0440 9f c9 f5 2d 6a 37 34 ee bc 37 a2 37 a7 96 a3 81 ...-j74..7.7.... 0450 a9 8a b7 a6 e9 b8 1b 94 e6 fd 6c 0b 2e b5 7a 31 ..........l...z1 0460 b2 cf 02 2b 8b 5f 32 7a 29 00 04 4e f9 18 97 0a ...+._2z)..N.... 0470 05 52 ca 3f ec a7 9f ba 3d 3a 74 c8 33 fc fd 56 .R.?....=:t.3..V 0480 2f cd b2 5e bf e4 63 3c 87 8c 8a 19 1b d5 83 af /..^..c<........ 0490 6f 00 99 cc 56 83 05 31 84 8d d7 9b 2b e5 59 23 o...V..1....+.Y# 04a0 58 b5 c9 a5 b3 22 22 84 6e 5d 32 d3 3e 19 88 02 X...."".n]2.>... 04b0 4f 76 9b 92 95 b6 7d 02 99 95 0f 27 ca ca 9c a7 Ov....}....'.... 04c0 ef 22 f7 61 e0 c3 ca 53 53 19 3f 4b 3f bd a1 89 .".a...SS.?K?... 04d0 6a dc 8c 19 31 0c a3 30 09 37 e1 00 c8 b4 5a b8 j...1..0.7....Z. 04e0 ce a8 e9 3d 81 8e 73 b0 cb 1e 13 dd 07 7c ec 98 ...=..s......|.. 04f0 ef d7 3e 94 af e0 11 9e 42 b8 3f 93 bc 25 0c 2f ..>.....B.?..%./ 0500 95 c5 2a 56 96 bc d3 ab fb 50 8c d8 40 3e 7c be ..*V.....P..@>|. 0510 f7 f7 fe 5a 23 0d 1d 63 5b 8f 53 62 88 58 18 83 ...Z#..c[.Sb.X.. 0520 10 2a 2f d9 72 19 7a 11 a1 02 14 bd e9 78 05 f9 .*/.r.z......x.. 0530 70 c4 4f df 37 7f da d7 cd aa ef 5f 6f a8 a7 37 p.O.7......_o..7 0540 23 67 0e 0c aa ad 46 4f de 8a 3e 3f 6a 8a 67 1e #g....FO..>?j.g. 0550 1d db 6f 12 0f 0b 78 d9 c7 90 52 a7 61 ef d9 bf ..o...x...R.a... 0560 1d 50 39 6d cd fa 3b 91 32 37 8b 91 ed a9 94 89 .P9m..;.27...... 0570 a7 63 6c 32 df 32 ed f0 01 80 92 e0 43 7d a5 53 .cl2.2......C}.S 0580 66 2d d9 e4 d6 c6 72 5c e0 b5 02 5d ca 21 bb e8 f-....r\...].!.. 0590 ec 75 4a 5e 4a b8 2f 05 a1 4b 4b a4 cc a9 e5 d0 .uJ^J./..KK..... 05a0 1d af 32 07 10 b8 e7 35 db 77 38 ac 61 b9 31 9b ..2....5.w8.a.1. 05b0 d0 0e 79 78 2e b9 4b 96 28 bb c1 b7 1b 11 d4 a1 ..yx..K.(....... 05c0 7c 5a dd 8e e7 f5 e0 ef b7 1d ff 3a 41 ff e9 83 |Z.........:A... 05d0 7a 46 e7 1c 34 98 f5 27 70 2a fb 9a 1e 2e 4d f4 zF..4..'p*....M. 05e0 84 4e 33 86 d3 ab f9 06 19 9d c8 4d 62 d0 b0 a3 .N3........Mb... 05f0 68 a3 e2 19 b0 08 af f5 70 98 fb ac 43 fd 56 31 h.......p...C.V1 0600 b8 78 3c 59 f4 29 2f b4 e7 b0 56 bc fc 5d 96 3c .x spw-dialer [ACK] Seq=95041 Ack=10333 Win=64275 Len=0 Frame 381: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 95041, Ack: 10333, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9d 1d 40 00 7e 06 fb 92 a7 eb 0d 30 a7 eb .(..@.~......0.. 0020 07 19 00 8b 0e d4 40 87 e2 93 56 09 fa 92 50 10 ......@...V...P. 0030 fb 13 cd 8a 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 382 12:37:59.613781 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 382: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 95041, Ack: 10333, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9d 1e 40 00 7e 06 f9 51 a7 eb 0d 30 a7 eb .h..@.~..Q...0.. 0020 07 19 00 8b 0e d4 40 87 e2 93 56 09 fa 92 50 18 ......@...V...P. 0030 fb 13 64 3c 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..d<.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 42 9e 0c ff 00 00 00 ff ...0....B....... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 383 12:37:59.613831 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 383: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 95617, Ack: 10396, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9d 1f 40 00 7e 06 f9 50 a7 eb 0d 30 a7 eb .h..@.~..P...0.. 0020 07 19 00 8b 0e d4 40 87 e4 d3 56 09 fa d1 50 18 ......@...V...P. 0030 fa d4 1e fc 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 85 9e 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 384 12:37:59.613885 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 384: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 96193, Ack: 10396, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9d 20 40 00 7e 06 f9 4f a7 eb 0d 30 a7 eb .h. @.~..O...0.. 0020 07 19 00 8b 0e d4 40 87 e7 13 56 09 fa d1 50 18 ......@...V...P. 0030 fa d4 dd bc 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c4 9e 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 385 12:37:59.613935 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 385: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 96769, Ack: 10459, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9d 21 40 00 7e 06 f9 4e a7 eb 0d 30 a7 eb .h.!@.~..N...0.. 0020 07 19 00 8b 0e d4 40 87 e9 53 56 09 fb 10 50 18 ......@..SV...P. 0030 fa 95 9c 7c 00 00 00 00 02 3c ff 53 4d 42 2e 00 ...|.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 03 9f 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 386 12:37:59.613988 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 386: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 97345, Ack: 10459, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9d 22 40 00 7e 06 f9 4d a7 eb 0d 30 a7 eb .h."@.~..M...0.. 0020 07 19 00 8b 0e d4 40 87 eb 93 56 09 fb 10 50 18 ......@...V...P. 0030 fa 95 5c 3c 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..\<.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 41 9f 0c ff 00 00 00 ff ...0....A....... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 387 12:37:59.778287 167.235.7.125 224.0.0.2 HSRP Hello (state Active) Frame 387: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: All-HSRP-routers_32 (00:00:0c:07:ac:32), Dst: IPv4mcast_00:00:02 (01:00:5e:00:00:02) Internet Protocol, Src: 167.235.7.125 (167.235.7.125), Dst: 224.0.0.2 (224.0.0.2) User Datagram Protocol, Src Port: hsrp (1985), Dst Port: hsrp (1985) Cisco Hot Standby Router Protocol 0000 01 00 5e 00 00 02 00 00 0c 07 ac 32 08 00 45 c0 ..^........2..E. 0010 00 30 00 00 00 00 01 11 29 93 a7 eb 07 7d e0 00 .0......)....}.. 0020 00 02 07 c1 07 c1 00 1c 24 9e 00 00 10 03 05 6e ........$......n 0030 32 00 63 69 73 63 6f 00 00 00 a7 eb 07 01 2.cisco....... No. Time Source Destination Protocol Info 388 12:37:59.809962 Cisco_a6:ad:bf Broadcast 0x0806 ARP Frame 388: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Data (46 bytes) 0000 ff ff ff ff ff ff 00 15 2b a6 ad bf 08 06 00 01 ........+....... 0010 08 00 06 04 00 01 00 15 2b a6 ad bf a7 eb 07 7e ........+......~ 0020 00 00 00 00 00 00 a7 eb 07 1f 00 00 00 00 00 00 ................ 0030 00 00 00 00 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 389 12:37:59.917917 192.168.11.43 167.235.7.45 TCP https > 55752 [ACK] Seq=9565 Ack=4168 Win=65258 Len=0 TSV=174427308 TSER=107662245 Frame 389: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_23:f1:a5 (00:1e:37:23:f1:a5) Internet Protocol, Src: 192.168.11.43 (192.168.11.43), Dst: 167.235.7.45 (167.235.7.45) Transmission Control Protocol, Src Port: https (443), Dst Port: 55752 (55752), Seq: 9565, Ack: 4168, Len: 0 0000 00 1e 37 23 f1 a5 00 15 2b a6 ad bf 08 00 45 00 ..7#....+.....E. 0010 00 34 05 2f 40 00 7e 06 7c a9 c0 a8 0b 2b a7 eb .4./@.~.|....+.. 0020 07 2d 01 bb d9 c8 14 1f 22 53 6e fb 02 64 80 10 .-......"Sn..d.. 0030 fe ea 10 70 00 00 01 01 08 0a 0a 65 8c ac 06 6a ...p.......e...j 0040 cb a5 .. No. Time Source Destination Protocol Info 390 12:37:59.920574 192.168.11.43 167.235.7.45 TLSv1 Application Data Frame 390: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_23:f1:a5 (00:1e:37:23:f1:a5) Internet Protocol, Src: 192.168.11.43 (192.168.11.43), Dst: 167.235.7.45 (167.235.7.45) Transmission Control Protocol, Src Port: https (443), Dst Port: 55752 (55752), Seq: 9565, Ack: 4669, Len: 1448 Secure Socket Layer 0000 00 1e 37 23 f1 a5 00 15 2b a6 ad bf 08 00 45 00 ..7#....+.....E. 0010 05 dc 05 35 40 00 7e 06 76 fb c0 a8 0b 2b a7 eb ...5@.~.v....+.. 0020 07 2d 01 bb d9 c8 14 1f 22 53 6e fb 04 59 80 10 .-......"Sn..Y.. 0030 fc f5 2c 09 00 00 01 01 08 0a 0a 65 8c ac 06 6a ..,........e...j 0040 cc 91 17 03 01 00 20 21 4a 19 f7 0e 86 ef 18 80 ...... !J....... 0050 54 22 94 02 8a a9 f8 bb b6 c6 07 1e a6 eb 9f 80 T".............. 0060 48 c6 b3 24 5c 3f 31 17 03 01 06 60 f6 ac eb e3 H..$\?1....`.... 0070 ef 60 f6 58 f7 fb e5 c5 94 97 e2 9b 13 84 b3 90 .`.X............ 0080 a0 b6 cb 83 4c 04 95 d7 1c 83 95 81 a7 2c bb 0c ....L........,.. 0090 47 75 f4 f5 9d fc bd 19 a8 7d a1 96 07 96 19 3a Gu.......}.....: 00a0 e3 b1 6f 08 92 8e 84 31 c6 07 a4 24 cb 64 37 ac ..o....1...$.d7. 00b0 3a 9d c5 dd 3c d9 e8 d6 1c 57 52 9d 16 dc cb d4 :...<....WR..... 00c0 39 18 e8 34 83 ca 1d ae 1f e4 73 bf 5f d4 1f da 9..4......s._... 00d0 3e 7e f3 a2 ec 54 bc 92 33 f7 c5 b5 9f c3 f0 46 >~...T..3......F 00e0 0d d3 98 b1 25 05 a9 ca 86 ee 26 ab bc 97 96 20 ....%.....&.... 00f0 d0 9c 35 5e 8d b8 06 00 13 b1 79 c8 65 8b 07 2a ..5^......y.e..* 0100 57 7d 08 65 f3 cc f4 76 26 e2 91 9c 4c a3 3e fe W}.e...v&...L.>. 0110 b8 4d d7 f8 09 7f de 08 e1 c7 2e be 91 dc dc 38 .M.............8 0120 32 b8 90 be 1e 5b 4a 67 be 2b 88 3a d5 80 64 6b 2....[Jg.+.:..dk 0130 98 75 62 d3 2e e6 b9 ba f5 17 8d 20 1c 95 37 10 .ub........ ..7. 0140 03 7a cb 9f 18 5f 06 aa 4b ee 02 ce e6 35 59 b9 .z..._..K....5Y. 0150 00 a9 c8 28 d2 1a 57 20 54 f9 ab 50 c8 23 74 3b ...(..W T..P.#t; 0160 28 cd 1d 81 64 8a 46 10 73 f2 40 c5 2a bf 2b d2 (...d.F.s.@.*.+. 0170 cd d4 4f 0a 1b 71 22 be 1f 75 12 3d d9 65 ec 3b ..O..q"..u.=.e.; 0180 ca 1d 39 56 17 03 7c e2 f7 57 d6 55 02 39 b5 de ..9V..|..W.U.9.. 0190 d2 2e bb 86 ef 86 06 d4 19 29 d4 e7 f7 e8 72 ba .........)....r. 01a0 2b 45 ad cb 08 bb 62 ba 18 49 01 fe cf f0 e2 77 +E....b..I.....w 01b0 44 a9 2d 84 d3 87 0a 19 67 62 96 7c 1c f5 41 88 D.-.....gb.|..A. 01c0 7f 7f 52 63 2a ae 96 8d 69 d0 af e2 5b 18 70 5a ..Rc*...i...[.pZ 01d0 b3 0a 8a f1 65 f4 cb 9b 45 09 93 ce e4 4d db 29 ....e...E....M.) 01e0 18 b6 52 1a ae 33 fd 40 d7 86 ed 0c d0 1a bb 2b ..R..3.@.......+ 01f0 67 cb f9 7e 6e 12 a5 7a 42 ad 6d 96 c6 7f 97 59 g..~n..zB.m....Y 0200 b7 04 8a 2b 1f 4c 32 ea 66 19 87 5f 2c e6 18 5a ...+.L2.f.._,..Z 0210 84 a2 26 01 e7 f2 45 0d 2a 94 18 cc ab ca 13 b4 ..&...E.*....... 0220 e1 aa fd 20 19 2c 52 7d ea a4 9d e2 12 ef 25 d4 ... .,R}......%. 0230 e2 5f 0d e9 33 7c b6 9b 6c f4 7c 69 86 70 74 a7 ._..3|..l.|i.pt. 0240 90 06 40 ce d9 49 36 20 68 c9 4f c5 b5 20 13 26 ..@..I6 h.O.. .& 0250 5d d4 fb f8 61 85 69 10 b4 6f d0 91 36 f9 da 40 ]...a.i..o..6..@ 0260 03 85 45 85 6e de c9 27 1d 69 2a 53 05 10 66 c0 ..E.n..'.i*S..f. 0270 94 bc b2 9d 4d 31 ec 78 2c a6 98 8b 4c 79 71 0f ....M1.x,...Lyq. 0280 0b 2f 97 a6 36 11 45 89 89 10 4d 6f 45 c0 dd 48 ./..6.E...MoE..H 0290 e6 84 f2 24 86 6a 81 05 3c 21 40 15 9c 5a f8 9f ...$.j...kuD.%. 0400 04 26 15 25 b4 2f c0 a1 de 4d 82 0d b5 26 d4 8f .&.%./...M...&.. 0410 53 e7 38 4b cd 57 d3 9d 95 a8 4b 1c 84 d8 55 6f S.8K.W....K...Uo 0420 1a 52 f3 21 8a e7 92 74 48 75 8d 26 89 ee 45 3d .R.!...tHu.&..E= 0430 23 39 37 ee 37 35 b5 73 b2 ee 67 e2 6e 10 48 8a #97.75.s..g.n.H. 0440 8d a8 80 52 16 4c 90 e1 54 aa a4 84 32 a6 4f a2 ...R.L..T...2.O. 0450 a2 28 ac c8 66 d1 82 0c 21 66 ea c5 74 dc b7 70 .(..f...!f..t..p 0460 1e 68 7d c6 fa 0e 30 c3 2f f9 95 07 a8 d9 55 40 .h}...0./.....U@ 0470 70 e4 d2 cc 3f 0c c3 27 fa 5d 11 44 a6 1b 46 22 p...?..'.].D..F" 0480 32 de fc e8 de c7 88 7b cb e9 75 3d f2 5e f9 05 2......{..u=.^.. 0490 65 4d 8f f6 c9 97 5e ef 5e b5 44 43 51 38 e4 a8 eM....^.^.DCQ8.. 04a0 e4 01 e5 f5 eb 2f c3 c4 f7 bf e9 8e 03 c2 79 8c ...../........y. 04b0 a9 e3 7a 1c cc 78 43 0e 88 38 0f 5b e2 a3 94 59 ..z..xC..8.[...Y 04c0 58 58 99 80 c7 2a bd 8d 2e 2d 5d 02 50 f5 cb 1f XX...*...-].P... 04d0 df 84 00 0d 83 7d cd c0 c5 59 23 3f 10 d7 29 54 .....}...Y#?..)T 04e0 8c c3 14 ff ba c0 9e f3 2c f7 11 b6 b7 a7 eb a5 ........,....... 04f0 a4 e8 9e 38 51 6f 07 5c ba f6 b5 68 9c ca 6f f0 ...8Qo.\...h..o. 0500 85 41 54 86 0e bc c2 22 c5 47 63 ad a5 c0 41 29 .AT....".Gc...A) 0510 3e d3 c4 14 d4 1b 02 fd 71 66 31 31 66 5f db 0d >.......qf11f_.. 0520 8b b5 28 be a6 6f 7e cf be a2 63 43 05 f1 88 56 ..(..o~...cC...V 0530 9c 8c c4 db b4 94 09 59 17 66 57 3a 13 7d 63 cd .......Y.fW:.}c. 0540 fe c8 6d b6 ec 2a c8 12 e7 20 fa b8 0c 31 14 1f ..m..*... ...1.. 0550 bc ff 0d e1 6a 10 cc 61 42 be fa 31 ba 94 94 7d ....j..aB..1...} 0560 02 6a c2 09 a4 35 cb a7 f7 73 10 96 13 4f 72 eb .j...5...s...Or. 0570 8d 52 c2 f2 58 36 93 80 2c a8 6b 7d 8a 9c 5b e5 .R..X6..,.k}..[. 0580 15 31 b2 95 f7 1f 86 2a d6 a2 e4 7a 97 e2 b8 f1 .1.....*...z.... 0590 a1 3d fe ff a3 be 3d e3 59 ca b0 c6 e2 4c 30 20 .=....=.Y....L0 05a0 8c c5 8a 2b 48 19 6d 5f 44 4d bf 41 1c 95 4a a2 ...+H.m_DM.A..J. 05b0 be 33 a1 1d 23 d3 0d b0 24 85 1d 49 b4 4f d4 54 .3..#...$..I.O.T 05c0 4d f0 a2 87 c8 04 96 f9 a9 5c bc b5 85 15 cf 01 M........\...... 05d0 03 29 46 04 96 56 3f 09 ef 4e 44 35 42 4e 13 db .)F..V?..ND5BN.. 05e0 18 87 f4 22 43 34 0e ac 54 df ..."C4..T. No. Time Source Destination Protocol Info 391 12:37:59.920598 192.168.11.43 167.235.7.45 TLSv1 Application Data Frame 391: 292 bytes on wire (2336 bits), 292 bytes captured (2336 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_23:f1:a5 (00:1e:37:23:f1:a5) Internet Protocol, Src: 192.168.11.43 (192.168.11.43), Dst: 167.235.7.45 (167.235.7.45) Transmission Control Protocol, Src Port: https (443), Dst Port: 55752 (55752), Seq: 11013, Ack: 4669, Len: 226 [Reassembled TCP Segments (1637 bytes): #390(1411), #391(226)] Secure Socket Layer Frame (292 bytes): 0000 00 1e 37 23 f1 a5 00 15 2b a6 ad bf 08 00 45 00 ..7#....+.....E. 0010 01 16 05 36 40 00 7e 06 7b c0 c0 a8 0b 2b a7 eb ...6@.~.{....+.. 0020 07 2d 01 bb d9 c8 14 1f 27 fb 6e fb 04 59 80 18 .-......'.n..Y.. 0030 fc f5 3b 2e 00 00 01 01 08 0a 0a 65 8c ac 06 6a ..;........e...j 0040 cc 91 03 12 e7 40 76 7d 82 fc 94 d2 3b bb 58 cb .....@v}....;.X. 0050 57 c3 af 2a a9 bd d1 1f ff 7c 97 75 4e ec 8f 12 W..*.....|.uN... 0060 6a 68 04 e4 26 7c 5c 97 78 3e 48 55 b0 05 ba 4e jh..&|\.x>HU...N 0070 f6 69 0a ef ef 3f 02 85 58 45 f6 0d e9 3a 34 82 .i...?..XE...:4. 0080 38 5c aa cd 0b f8 9e 9d 43 75 71 4c 58 bc 02 e2 8\......CuqLX... 0090 2c 5e 89 74 03 7f 40 fd 53 1b 02 eb 53 b6 a4 38 ,^.t..@.S...S..8 00a0 43 f5 de 36 a5 39 6e a9 92 3f cd 8f 8f 30 15 2d C..6.9n..?...0.- 00b0 5d 53 a8 cb c6 33 db f5 48 be 77 34 76 0d ac f1 ]S...3..H.w4v... 00c0 c7 17 12 3d b1 80 c7 f7 ec 24 c9 1b 70 9d 8e 9a ...=.....$..p... 00d0 b2 df 09 2a 86 90 81 d4 6c 7a 3f 1f 5c 2b b6 54 ...*....lz?.\+.T 00e0 c7 64 28 fa fc 39 2b 9b d1 d0 7f ea b7 bd af 9e .d(..9+......... 00f0 eb d3 be 18 f5 6f 16 08 82 d3 c5 a2 47 77 83 55 .....o......Gw.U 0100 b2 4d fe f4 e3 27 f1 ec bf 6a cf b2 9c b6 53 9d .M...'...j....S. 0110 75 bf 68 e5 75 e1 6e 19 14 2c aa ff aa 26 e1 21 u.h.u.n..,...&.! 0120 c6 80 a4 6f ...o Reassembled TCP (1637 bytes): 0000 17 03 01 06 60 f6 ac eb e3 ef 60 f6 58 f7 fb e5 ....`.....`.X... 0010 c5 94 97 e2 9b 13 84 b3 90 a0 b6 cb 83 4c 04 95 .............L.. 0020 d7 1c 83 95 81 a7 2c bb 0c 47 75 f4 f5 9d fc bd ......,..Gu..... 0030 19 a8 7d a1 96 07 96 19 3a e3 b1 6f 08 92 8e 84 ..}.....:..o.... 0040 31 c6 07 a4 24 cb 64 37 ac 3a 9d c5 dd 3c d9 e8 1...$.d7.:...<.. 0050 d6 1c 57 52 9d 16 dc cb d4 39 18 e8 34 83 ca 1d ..WR.....9..4... 0060 ae 1f e4 73 bf 5f d4 1f da 3e 7e f3 a2 ec 54 bc ...s._...>~...T. 0070 92 33 f7 c5 b5 9f c3 f0 46 0d d3 98 b1 25 05 a9 .3......F....%.. 0080 ca 86 ee 26 ab bc 97 96 20 d0 9c 35 5e 8d b8 06 ...&.... ..5^... 0090 00 13 b1 79 c8 65 8b 07 2a 57 7d 08 65 f3 cc f4 ...y.e..*W}.e... 00a0 76 26 e2 91 9c 4c a3 3e fe b8 4d d7 f8 09 7f de v&...L.>..M..... 00b0 08 e1 c7 2e be 91 dc dc 38 32 b8 90 be 1e 5b 4a ........82....[J 00c0 67 be 2b 88 3a d5 80 64 6b 98 75 62 d3 2e e6 b9 g.+.:..dk.ub.... 00d0 ba f5 17 8d 20 1c 95 37 10 03 7a cb 9f 18 5f 06 .... ..7..z..._. 00e0 aa 4b ee 02 ce e6 35 59 b9 00 a9 c8 28 d2 1a 57 .K....5Y....(..W 00f0 20 54 f9 ab 50 c8 23 74 3b 28 cd 1d 81 64 8a 46 T..P.#t;(...d.F 0100 10 73 f2 40 c5 2a bf 2b d2 cd d4 4f 0a 1b 71 22 .s.@.*.+...O..q" 0110 be 1f 75 12 3d d9 65 ec 3b ca 1d 39 56 17 03 7c ..u.=.e.;..9V..| 0120 e2 f7 57 d6 55 02 39 b5 de d2 2e bb 86 ef 86 06 ..W.U.9......... 0130 d4 19 29 d4 e7 f7 e8 72 ba 2b 45 ad cb 08 bb 62 ..)....r.+E....b 0140 ba 18 49 01 fe cf f0 e2 77 44 a9 2d 84 d3 87 0a ..I.....wD.-.... 0150 19 67 62 96 7c 1c f5 41 88 7f 7f 52 63 2a ae 96 .gb.|..A...Rc*.. 0160 8d 69 d0 af e2 5b 18 70 5a b3 0a 8a f1 65 f4 cb .i...[.pZ....e.. 0170 9b 45 09 93 ce e4 4d db 29 18 b6 52 1a ae 33 fd .E....M.)..R..3. 0180 40 d7 86 ed 0c d0 1a bb 2b 67 cb f9 7e 6e 12 a5 @.......+g..~n.. 0190 7a 42 ad 6d 96 c6 7f 97 59 b7 04 8a 2b 1f 4c 32 zB.m....Y...+.L2 01a0 ea 66 19 87 5f 2c e6 18 5a 84 a2 26 01 e7 f2 45 .f.._,..Z..&...E 01b0 0d 2a 94 18 cc ab ca 13 b4 e1 aa fd 20 19 2c 52 .*.......... .,R 01c0 7d ea a4 9d e2 12 ef 25 d4 e2 5f 0d e9 33 7c b6 }......%.._..3|. 01d0 9b 6c f4 7c 69 86 70 74 a7 90 06 40 ce d9 49 36 .l.|i.pt...@..I6 01e0 20 68 c9 4f c5 b5 20 13 26 5d d4 fb f8 61 85 69 h.O.. .&]...a.i 01f0 10 b4 6f d0 91 36 f9 da 40 03 85 45 85 6e de c9 ..o..6..@..E.n.. 0200 27 1d 69 2a 53 05 10 66 c0 94 bc b2 9d 4d 31 ec '.i*S..f.....M1. 0210 78 2c a6 98 8b 4c 79 71 0f 0b 2f 97 a6 36 11 45 x,...Lyq../..6.E 0220 89 89 10 4d 6f 45 c0 dd 48 e6 84 f2 24 86 6a 81 ...MoE..H...$.j. 0230 05 3c 21 40 15 9c 5a f8 9f 51 25 cd b7 13 61 0c ..kuD.%..&.%./. 03a0 a1 de 4d 82 0d b5 26 d4 8f 53 e7 38 4b cd 57 d3 ..M...&..S.8K.W. 03b0 9d 95 a8 4b 1c 84 d8 55 6f 1a 52 f3 21 8a e7 92 ...K...Uo.R.!... 03c0 74 48 75 8d 26 89 ee 45 3d 23 39 37 ee 37 35 b5 tHu.&..E=#97.75. 03d0 73 b2 ee 67 e2 6e 10 48 8a 8d a8 80 52 16 4c 90 s..g.n.H....R.L. 03e0 e1 54 aa a4 84 32 a6 4f a2 a2 28 ac c8 66 d1 82 .T...2.O..(..f.. 03f0 0c 21 66 ea c5 74 dc b7 70 1e 68 7d c6 fa 0e 30 .!f..t..p.h}...0 0400 c3 2f f9 95 07 a8 d9 55 40 70 e4 d2 cc 3f 0c c3 ./.....U@p...?.. 0410 27 fa 5d 11 44 a6 1b 46 22 32 de fc e8 de c7 88 '.].D..F"2...... 0420 7b cb e9 75 3d f2 5e f9 05 65 4d 8f f6 c9 97 5e {..u=.^..eM....^ 0430 ef 5e b5 44 43 51 38 e4 a8 e4 01 e5 f5 eb 2f c3 .^.DCQ8......./. 0440 c4 f7 bf e9 8e 03 c2 79 8c a9 e3 7a 1c cc 78 43 .......y...z..xC 0450 0e 88 38 0f 5b e2 a3 94 59 58 58 99 80 c7 2a bd ..8.[...YXX...*. 0460 8d 2e 2d 5d 02 50 f5 cb 1f df 84 00 0d 83 7d cd ..-].P........}. 0470 c0 c5 59 23 3f 10 d7 29 54 8c c3 14 ff ba c0 9e ..Y#?..)T....... 0480 f3 2c f7 11 b6 b7 a7 eb a5 a4 e8 9e 38 51 6f 07 .,..........8Qo. 0490 5c ba f6 b5 68 9c ca 6f f0 85 41 54 86 0e bc c2 \...h..o..AT.... 04a0 22 c5 47 63 ad a5 c0 41 29 3e d3 c4 14 d4 1b 02 ".Gc...A)>...... 04b0 fd 71 66 31 31 66 5f db 0d 8b b5 28 be a6 6f 7e .qf11f_....(..o~ 04c0 cf be a2 63 43 05 f1 88 56 9c 8c c4 db b4 94 09 ...cC...V....... 04d0 59 17 66 57 3a 13 7d 63 cd fe c8 6d b6 ec 2a c8 Y.fW:.}c...m..*. 04e0 12 e7 20 fa b8 0c 31 14 1f bc ff 0d e1 6a 10 cc .. ...1......j.. 04f0 61 42 be fa 31 ba 94 94 7d 02 6a c2 09 a4 35 cb aB..1...}.j...5. 0500 a7 f7 73 10 96 13 4f 72 eb 8d 52 c2 f2 58 36 93 ..s...Or..R..X6. 0510 80 2c a8 6b 7d 8a 9c 5b e5 15 31 b2 95 f7 1f 86 .,.k}..[..1..... 0520 2a d6 a2 e4 7a 97 e2 b8 f1 a1 3d fe ff a3 be 3d *...z.....=....= 0530 e3 59 ca b0 c6 e2 4c 30 20 8c c5 8a 2b 48 19 6d .Y....L0 ...+H.m 0540 5f 44 4d bf 41 1c 95 4a a2 be 33 a1 1d 23 d3 0d _DM.A..J..3..#.. 0550 b0 24 85 1d 49 b4 4f d4 54 4d f0 a2 87 c8 04 96 .$..I.O.TM...... 0560 f9 a9 5c bc b5 85 15 cf 01 03 29 46 04 96 56 3f ..\.......)F..V? 0570 09 ef 4e 44 35 42 4e 13 db 18 87 f4 22 43 34 0e ..ND5BN....."C4. 0580 ac 54 df 03 12 e7 40 76 7d 82 fc 94 d2 3b bb 58 .T....@v}....;.X 0590 cb 57 c3 af 2a a9 bd d1 1f ff 7c 97 75 4e ec 8f .W..*.....|.uN.. 05a0 12 6a 68 04 e4 26 7c 5c 97 78 3e 48 55 b0 05 ba .jh..&|\.x>HU... 05b0 4e f6 69 0a ef ef 3f 02 85 58 45 f6 0d e9 3a 34 N.i...?..XE...:4 05c0 82 38 5c aa cd 0b f8 9e 9d 43 75 71 4c 58 bc 02 .8\......CuqLX.. 05d0 e2 2c 5e 89 74 03 7f 40 fd 53 1b 02 eb 53 b6 a4 .,^.t..@.S...S.. 05e0 38 43 f5 de 36 a5 39 6e a9 92 3f cd 8f 8f 30 15 8C..6.9n..?...0. 05f0 2d 5d 53 a8 cb c6 33 db f5 48 be 77 34 76 0d ac -]S...3..H.w4v.. 0600 f1 c7 17 12 3d b1 80 c7 f7 ec 24 c9 1b 70 9d 8e ....=.....$..p.. 0610 9a b2 df 09 2a 86 90 81 d4 6c 7a 3f 1f 5c 2b b6 ....*....lz?.\+. 0620 54 c7 64 28 fa fc 39 2b 9b d1 d0 7f ea b7 bd af T.d(..9+........ 0630 9e eb d3 be 18 f5 6f 16 08 82 d3 c5 a2 47 77 83 ......o......Gw. 0640 55 b2 4d fe f4 e3 27 f1 ec bf 6a cf b2 9c b6 53 U.M...'...j....S 0650 9d 75 bf 68 e5 75 e1 6e 19 14 2c aa ff aa 26 e1 .u.h.u.n..,...&. 0660 21 c6 80 a4 6f !...o No. Time Source Destination Protocol Info 392 12:38:00.113770 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 392: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 97921, Ack: 10522, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9d 24 40 00 7e 06 f9 4b a7 eb 0d 30 a7 eb .h.$@.~..K...0.. 0020 07 19 00 8b 0e d4 40 87 ed d3 56 09 fb 4f 50 18 ......@...V..OP. 0030 fa 56 19 fc 00 00 00 00 02 3c ff 53 4d 42 2e 00 .V.......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 81 9f 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 393 12:38:00.114512 167.235.13.48 167.235.7.25 TCP netbios-ssn > spw-dialer [ACK] Seq=98497 Ack=10648 Win=65535 Len=0 Frame 393: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 98497, Ack: 10648, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9d 25 40 00 7e 06 fb 8a a7 eb 0d 30 a7 eb .(.%@.~......0.. 0020 07 19 00 8b 0e d4 40 87 f0 13 56 09 fb cd 50 10 ......@...V...P. 0030 ff ff b9 e3 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 394 12:38:00.114587 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 394: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 98497, Ack: 10648, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9d 26 40 00 7e 06 f9 49 a7 eb 0d 30 a7 eb .h.&@.~..I...0.. 0020 07 19 00 8b 0e d4 40 87 f0 13 56 09 fb cd 50 18 ......@...V...P. 0030 ff ff d1 94 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c1 9f 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 395 12:38:00.114639 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 395: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 99073, Ack: 10648, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9d 27 40 00 7e 06 f9 48 a7 eb 0d 30 a7 eb .h.'@.~..H...0.. 0020 07 19 00 8b 0e d4 40 87 f2 53 56 09 fb cd 50 18 ......@..SV...P. 0030 ff ff 8c 54 00 00 00 00 02 3c ff 53 4d 42 2e 00 ...T.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 04 a0 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 396 12:38:00.114693 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 396: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 99649, Ack: 10711, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9d 28 40 00 7e 06 f9 47 a7 eb 0d 30 a7 eb .h.(@.~..G...0.. 0020 07 19 00 8b 0e d4 40 87 f4 93 56 09 fc 0c 50 18 ......@...V...P. 0030 ff c0 4b 14 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..K......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 43 a0 0c ff 00 00 00 ff ...0....C....... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 397 12:38:00.114751 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 397: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 100225, Ack: 10774, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9d 29 40 00 7e 06 f9 46 a7 eb 0d 30 a7 eb .h.)@.~..F...0.. 0020 07 19 00 8b 0e d4 40 87 f6 d3 56 09 fc 4b 50 18 ......@...V..KP. 0030 ff 81 06 d3 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 85 a0 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 398 12:38:00.613772 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 398: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 100801, Ack: 10837, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9d 2b 40 00 7e 06 f9 44 a7 eb 0d 30 a7 eb .h.+@.~..D...0.. 0020 07 19 00 8b 0e d4 40 87 f9 13 56 09 fc 8a 50 18 ......@...V...P. 0030 ff 42 c4 92 00 00 00 00 02 3c ff 53 4d 42 2e 00 .B.......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c5 a0 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 399 12:38:00.614532 167.235.13.48 167.235.7.25 TCP netbios-ssn > spw-dialer [ACK] Seq=101377 Ack=10963 Win=65220 Len=0 Frame 399: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 101377, Ack: 10963, Len: 0 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 00 28 9d 2c 40 00 7e 06 fb 83 a7 eb 0d 30 a7 eb .(.,@.~......0.. 0020 07 19 00 8b 0e d4 40 87 fb 53 56 09 fd 08 50 10 ......@..SV...P. 0030 fe c4 ae a3 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 400 12:38:00.614630 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 400: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 101377, Ack: 11026, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9d 2d 40 00 7e 06 f9 42 a7 eb 0d 30 a7 eb .h.-@.~..B...0.. 0020 07 19 00 8b 0e d4 40 87 fb 53 56 09 fd 47 50 18 ......@..SV..GP. 0030 fe 85 82 53 00 00 00 00 02 3c ff 53 4d 42 2e 00 ...S.....<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 05 a1 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 401 12:38:00.614681 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 401: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 101953, Ack: 11026, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9d 2e 40 00 7e 06 f9 41 a7 eb 0d 30 a7 eb .h..@.~..A...0.. 0020 07 19 00 8b 0e d4 40 87 fd 93 56 09 fd 47 50 18 ......@...V..GP. 0030 fe 85 42 12 00 00 00 00 02 3c ff 53 4d 42 2e 00 ..B......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 43 a1 0c ff 00 00 00 ff ...0....C....... 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 01 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 402 12:38:00.614743 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 402: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 102529, Ack: 11026, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9d 2f 40 00 7e 06 f9 40 a7 eb 0d 30 a7 eb .h./@.~..@...0.. 0020 07 19 00 8b 0e d4 40 87 ff d3 56 09 fd 47 50 18 ......@...V..GP. 0030 fe 85 fe d2 00 00 00 00 02 3c ff 53 4d 42 2e 00 .........<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 84 a1 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ...... No. Time Source Destination Protocol Info 403 12:38:00.614786 167.235.13.48 167.235.7.25 SMB Read AndX Response, 512 bytes Frame 403: 630 bytes on wire (5040 bits), 630 bytes captured (5040 bits) Ethernet II, Src: Cisco_a6:ad:bf (00:15:2b:a6:ad:bf), Dst: Universa_6c:aa:14 (00:1a:6b:6c:aa:14) Internet Protocol, Src: 167.235.13.48 (167.235.13.48), Dst: 167.235.7.25 (167.235.7.25) Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: spw-dialer (3796), Seq: 103105, Ack: 11089, Len: 576 NetBIOS Session Service SMB (Server Message Block Protocol) 0000 00 1a 6b 6c aa 14 00 15 2b a6 ad bf 08 00 45 00 ..kl....+.....E. 0010 02 68 9d 30 40 00 7e 06 f9 3f a7 eb 0d 30 a7 eb .h.0@.~..?...0.. 0020 07 19 00 8b 0e d4 40 88 02 13 56 09 fd 86 50 18 ......@...V...P. 0030 fe 46 bf 92 00 00 00 00 02 3c ff 53 4d 42 2e 00 .F.......<.SMB.. 0040 00 00 00 98 07 c8 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 06 30 ff fe 01 08 c1 a1 0c ff 00 00 00 ff ...0............ 0060 ff 00 00 00 00 00 02 3c 00 00 00 00 00 00 00 00 .......<........ 0070 00 00 00 01 02 00 01 01 f5 0a a1 01 5b 46 ad 0b ............[F.. 0080 25 84 25 74 96 25 91 0d 89 07 de 15 2b 1b 45 06 %.%t.%......+.E. 0090 97 02 1a 03 64 01 3b 01 16 01 03 01 05 01 02 01 ....d.;......... 00a0 2a 01 02 01 01 01 00 01 00 01 00 01 00 01 00 01 *............... 00b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 00f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0100 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0110 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0120 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0130 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0140 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0150 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0160 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0170 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0180 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0190 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01a0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01b0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01c0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01d0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01e0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 01f0 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0200 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0210 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0220 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0230 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0240 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0250 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0260 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 ................ 0270 00 01 00 01 00 01 ......