http://www.secuobs.com Observatoire de la securite Internet fr webmaster@secuobs.com 2016-04-20 22:44:43 - pcapr updates : by fernando tcp 5 packets, 410 bytes 10413666 10142185148 tcp 64573 80 SYN Seq 0 Win 8192 Len 0 MSS 1460 WS 8 SACK_PERM 1 10413666 10142185148 tcp 64573 80 ACK Seq 1 Ack 1 Win 65536 Len 0 10413666 10142185148 tcp 64573 80 RST, ACK Seq 1 Ack 1489368215 Win 0 Len 0 10413666 10142185148 tcp TCP Previous segment lost 64573 80 ACK Seq 595 Ack 2 Win 65536 Len 0 http://www.secuobs.com/revue/news/604274.shtmlhttp://www.secuobs.com/revue/news/604274.shtml Secuobs.com : 2016-04-20 22:30:11 - pcapr updates - by fernando tcp 10 packets, 796 bytes 10413666 10142185148 tcp 63936 80 SYN Seq 0 Win 8192 Len 0 MSS 1460 WS 8 SACK_PERM 1 10413666 10142185148 tcp 63936 80 ACK Seq 1 Ack 1 Win 65536 Len 0 10413666 10142185148 tcp 63936 80 RST, ACK Seq 1 Ack 4155432594 Win 0 Len 0 10413666 10142185148 tcp TCP Previous segment lost 63936 80 ACK Seq 595 Ack 2 Win 65536 Len 0 http://www.secuobs.com/revue/news/604273.shtmlhttp://www.secuobs.com/revue/news/604273.shtml Secuobs.com : 2016-04-18 23:16:51 - pcapr updates - by rgcampbellnz arp, igmp, lldp, nbns, sip, sip sdp, tcp 57 packets, 9 KB 19216815 20311815897 sip Request REGISTER sip 20311815897 20311815897 19216815 sip Status 200 OK 1 bindings 192168163 1921681255 nbns Name query NB WIN-T7A441M3T7I 192168163 1921681255 nbns Name query NB WIN-T7A441M3T7I http://www.secuobs.com/revue/news/604053.shtmlhttp://www.secuobs.com/revue/news/604053.shtml Secuobs.com : 2016-03-24 14:39:53 - pcapr updates - by wolruf ieee 80211 1 packet, 383 bytes 64 a5 c3 67 0d 11 ff ff ff ff ff ff ieee 80211 Beacon frame, SN 1809, FN 0, Flags C, BI 100, SSID wolruf http://www.secuobs.com/revue/news/601960.shtmlhttp://www.secuobs.com/revue/news/601960.shtml Secuobs.com : 2016-03-24 14:17:46 - pcapr updates - by wolruf 55 packets, 12 KB http://www.secuobs.com/revue/news/601957.shtmlhttp://www.secuobs.com/revue/news/601957.shtml Secuobs.com : 2016-03-05 12:03:15 - pcapr updates - by pcap arp, dns, icmp, igmp, tcp, udp 113 packets, 10 KB 21312215519 239255255250 igmp V2 Leave Group 239255255250 21312215519 8888 dns Standard query A a0wwnpdlplaystationnet 8888 21312215519 dns Standard query response CNAME wildwwnpdlplaystationnetedgekeynet CNAME e3 21312215519 10466247156 tcp 55148 443 SYN Seq 0 Win 65535 Len 0 MSS 1460 WS 0 SACK_PERM 1 TSV 0 TSER 0 http://www.secuobs.com/revue/news/600249.shtmlhttp://www.secuobs.com/revue/news/600249.shtml Secuobs.com : 2016-02-28 20:08:50 - pcapr updates - by xenith dns, icmp, ip, tcp, udp 500 packets, 183 KB 275772152 72239220209 icmp Destination unreachable Port unreachable 37255124231 72239220209 udp Source port 10003 Destination port 8333 11022516929 72239220209 icmp Destination unreachable Port unreachable 419240102 72239220209 icmp Destination unreachable Port unreachable http://www.secuobs.com/revue/news/599592.shtmlhttp://www.secuobs.com/revue/news/599592.shtml Secuobs.com : 2016-02-23 15:39:06 - pcapr updates - by mike tcp 2 packets, 188 bytes 1031916810 2062017029 tcp 34162 80 SYN Seq 0 Win 8192 Len 0 MSS 1460 WS 8 SACK_PERM 1 1031916810 2062017029 tcp 26141 80 SYN Seq 0 Win 8192 Len 0 MSS 1460 WS 8 SACK_PERM 1 http://www.secuobs.com/revue/news/599129.shtmlhttp://www.secuobs.com/revue/news/599129.shtml Secuobs.com : 2016-01-28 04:16:10 - pcapr updates - by best_rafiki IEC 60870 -104 tcp 32 packets, 2 KB 1921681254 192168171 tcp 49191 2008 SYN Seq 0 Win 8192 Len 0 MSS 1460 WS 8 SACK_PERM 1 192168171 1921681254 tcp 2008 49191 SYN, ACK Seq 0 Ack 1 Win 8192 Len 0 MSS 1460 WS 0 1921681254 192168171 tcp 49191 2008 ACK Seq 1 Ack 1 Win 65536 Len 0 1921681254 192168171 tcp 49191 2008 PSH, ACK Seq 1 Ack 1 Win 65536 Len 9 http://www.secuobs.com/revue/news/596696.shtmlhttp://www.secuobs.com/revue/news/596696.shtml Secuobs.com : 2015-12-30 12:12:52 - pcapr updates - by lol rlogin authentication arp, bacnet-apdu, dns, fc, icmpv6, llc, ntp, rlogin, rtps2, tcp, x25 355 packets, 55 KB 1921681253 23925501 rtps2 INFO_TS, DATA p 1921681253 23925501 rtps2 INFO_TS, DATA p 1921681253 23925501 rtps2 INFO_TS, DATA p 1921681253 23925501 rtps2 INFO_TS, DATA p http://www.secuobs.com/revue/news/594483.shtmlhttp://www.secuobs.com/revue/news/594483.shtml Secuobs.com : 2015-12-28 18:21:13 - pcapr updates - by babukannan ssh, stun, tcp, udp 291 packets, 107 KB 17231325 1827216170 udp Source port 50105 Destination port 62340 1827216170 17231325 udp Source port 63149 Destination port 59886 17231325 1827216170 udp Source port 56214 Destination port 53723 17231325 5416531110 udp Source port 39220 Destination port 53049 http://www.secuobs.com/revue/news/594286.shtmlhttp://www.secuobs.com/revue/news/594286.shtml Secuobs.com : 2015-12-18 22:02:43 - pcapr updates - by raosrinivas1989 http, tcp 110 packets, 65 KB 192168325 89187510 tcp 1051 80 SYN Seq 0 Win 64240 Len 0 MSS 1460 SACK_PERM 1 89187510 192168325 tcp 80 1051 SYN, ACK Seq 0 Ack 1 Win 5840 Len 0 MSS 1372 SACK_PERM 1 192168325 89187510 tcp 1051 80 ACK Seq 1 Ack 1 Win 64484 Len 0 192168325 89187510 http GET ribbntar HTTP 11 http://www.secuobs.com/revue/news/593681.shtmlhttp://www.secuobs.com/revue/news/593681.shtml Secuobs.com : 2015-12-14 14:41:22 - pcapr updates - by errowsf arp, classic-stun, rtcp, rtp, sip, sip sdp, stp, tcp, udp 307 packets, 62 KB 00 06 00 00 d1 40 ff ff ff ff ff ff arp Who has 19216801 Tell 1921680123 00 06 00 00 c0 30 ff ff ff ff ff ff arp Who has 19216801 Tell 1921680123 duplicate use of 1921680123 detecte 17325423585 1018118 classic-stun Message Binding Response 00 06 00 00 c7 0f ff ff ff ff ff ff arp Who has 19216801 Tell 1921680123 duplicate use of 1921680123 detecte http://www.secuobs.com/revue/news/593061.shtmlhttp://www.secuobs.com/revue/news/593061.shtml Secuobs.com : 2015-12-05 23:18:48 - pcapr updates - by bonnyr diameter, radius, udp 32 packets, 14 KB 108020571 108020132 radius Accounting-Request 4 id 19, l 412 2222 1111 udp Source port 65020 Destination port 65020 1111 2222 udp Source port 65020 Destination port 65020 10802014 109599116 diameter cmd Credit-ControlRequest 272 flags RP-- appl 3GPP Gx 16777238 h2h 5a20001a e2 http://www.secuobs.com/revue/news/592212.shtmlhttp://www.secuobs.com/revue/news/592212.shtml Secuobs.com : 2015-12-02 19:42:26 - pcapr updates - by barbarianrvua http, jabber xml, ntp, ssl, sslv3, tcp, tlsv12 459 packets, 157 KB 10801 173194113210 tcp 46324 443 SYN Seq 0 Win 65535 Len 0 MSS 1460 SACK_PERM 1 TSV 7863654 TSER 0 173194113210 10801 tcp 443 46324 SYN, ACK Seq 0 Ack 1 Win 65535 Len 0 10801 64233163114 tcp 49271 80 SYN Seq 0 Win 65535 Len 0 MSS 1460 SACK_PERM 1 TSV 7863654 TSER 0 W 64233163114 10801 tcp 80 49271 SYN, ACK Seq 0 Ack 1 Win 65535 Len 0 http://www.secuobs.com/revue/news/591895.shtmlhttp://www.secuobs.com/revue/news/591895.shtml Secuobs.com : 2015-12-01 18:06:15 - pcapr updates - by aswinchidambarampappa tcp 36 packets, 3 KB 19216814477 1722335161 tcp 56797 703 SYN Seq 0 Win 8192 Len 0 MSS 1460 WS 8 SACK_PERM 1 1722335161 19216814477 tcp 703 56797 SYN, ACK Seq 0 Ack 1 Win 5840 Len 0 MSS 1460 SACK_PERM 1 WS 0 19216814477 1722335161 tcp 56797 703 ACK Seq 1 Ack 1 Win 65536 Len 0 19216814477 1722335161 tcp 56797 703 PSH, ACK Seq 1 Ack 1 Win 65536 Len 35 http://www.secuobs.com/revue/news/591736.shtmlhttp://www.secuobs.com/revue/news/591736.shtml Secuobs.com : 2015-11-27 19:12:07 - pcapr updates - by rmfs http, tcp 108 packets, 51 KB 19216811347 104206356 tcp 55514 80 SYN Seq 0 Win 65535 Len 0 MSS 1460 WS 5 TSV 1072631062 TSER 0 SACK_ 104206356 19216811347 tcp 80 55514 SYN, ACK Seq 0 Ack 1 Win 29200 Len 0 MSS 1460 SACK_PERM 1 WS 10 19216811347 104206356 tcp 55514 80 ACK Seq 1 Ack 1 Win 262144 Len 0 19216811347 104206356 tcp TCP segment of a reassembled PDU http://www.secuobs.com/revue/news/591414.shtmlhttp://www.secuobs.com/revue/news/591414.shtml Secuobs.com : 2015-11-26 14:08:56 - pcapr updates - by darkfighterr smpp, tcp 40 packets, 4 KB 8911154189 9516310647 smpp SMPP Deliver_sm 8911154189 9516310647 smpp TCP Out-Of-Order SMPP Deliver_sm 9516310647 8911154189 tcp 39461 44024 ACK Seq 1 Ack 71 Win 83 Len 0 TSV 2276202318 TSER 2221777065 9516310647 8911154189 tcp TCP Dup ACK 3 1 39461 44024 ACK Seq 1 Ack 71 Win 83 Len 0 TSV 2276202318 T http://www.secuobs.com/revue/news/591311.shtmlhttp://www.secuobs.com/revue/news/591311.shtml Secuobs.com : 2015-11-20 23:17:06 - pcapr updates - by metinogtem http, ssl, tcp, tlsv1 483 packets, 690 KB 10801 17325210229 tcp 58224 443 SYN Seq 0 Win 14600 Len 0 MSS 1460 SACK_PERM 1 TSV 19247008 TSER 0 17325210229 10801 tcp 443 58224 SYN, ACK Seq 0 Ack 1 Win 65535 Len 0 10801 17325210229 tcp 58224 443 ACK Seq 1 Ack 1 Win 14600 Len 0 10801 17325210229 ssl Client Hello http://www.secuobs.com/revue/news/590740.shtmlhttp://www.secuobs.com/revue/news/590740.shtml Secuobs.com : 2015-11-18 00:47:14 - pcapr updates - by it srvloc 2 packets, 228 bytes 17217025 123123123123 srvloc Attribute Request, V1 Transaction ID - 62149 17217025 123123123123 srvloc Attribute Request, V1 Transaction ID - 47151 http://www.secuobs.com/revue/news/590353.shtmlhttp://www.secuobs.com/revue/news/590353.shtml Secuobs.com : 2015-11-18 00:47:14 - pcapr updates - by it 0 packets, 24 bytes http://www.secuobs.com/revue/news/590352.shtmlhttp://www.secuobs.com/revue/news/590352.shtml Secuobs.com : 2015-11-07 18:29:32 - pcapr updates - by santhoshreloaded ip, tcp 2 packets, 2 KB 1921688112 19216881252 tcp TCP ZeroWindow 0 0 Seq 1 Win 0 Len 1404 1111 2111 ip Fragmented IP protocol proto GRE 0x2f, off 1504, ID 0000 http://www.secuobs.com/revue/news/589393.shtmlhttp://www.secuobs.com/revue/news/589393.shtml Secuobs.com : 2015-10-30 15:17:38 - pcapr updates - by petraspaulauskas tcp, tns 56 packets, 17 KB 1015321 1015014 tcp 44654 1521 SYN Seq 0 Win 14600 Len 0 MSS 1460 WS 10 1015014 1015321 tcp 1521 44654 SYN, ACK Seq 0 Ack 1 Win 14600 Len 0 MSS 1460 WS 7 1015321 1015014 tcp 44654 1521 ACK Seq 1 Ack 1 Win 15360 Len 0 1015321 1015014 tns Request, Connect 1 , Connect http://www.secuobs.com/revue/news/588540.shtmlhttp://www.secuobs.com/revue/news/588540.shtml Secuobs.com : 2015-10-23 19:12:20 - pcapr updates - by braemarbartlett Tidal Metadata Error http xml, tcp 19 packets, 19 KB 19216880236 54880149 http xml POST sonos HTTP 11 54880149 19216880236 tcp TCP segment of a reassembled PDU 54880149 19216880236 http xml HTTP 11 200 OK 19216880236 54880149 http xml POST sonos HTTP 11 http://www.secuobs.com/revue/news/587787.shtmlhttp://www.secuobs.com/revue/news/587787.shtml Secuobs.com : 2015-10-20 18:01:04 - pcapr updates - by user ntp 2 packets, 240 bytes 1921683310 1921683311 ntp NTP symmetric active 1921683311 1921683310 ntp NTP symmetric passive http://www.secuobs.com/revue/news/587395.shtmlhttp://www.secuobs.com/revue/news/587395.shtml Secuobs.com : 2015-10-15 13:06:02 - pcapr updates - by mcpr11 Jacky ssl, tcp, tlsv1 168 packets, 59 KB 127001 003418 tcp 3129 39278 SYN Seq 0 Win 65535 Len 0 003418 127001 tcp 39278 3129 SYN, ACK Seq 0 Ack 1 Win 65535 Len 0 127001 003418 tcp 3129 39278 ACK Seq 1 Ack 1 Win 65535 Len 0 127001 003418 tcp 58915 39278 ACK Seq 1 Ack 1 Win 65535 Len 207 http://www.secuobs.com/revue/news/586844.shtmlhttp://www.secuobs.com/revue/news/586844.shtml Secuobs.com : 2015-10-12 20:48:46 - pcapr updates - by awesomeninja777 tcp 284 packets, 26 KB 1982119298 382297022 tcp 61509 6697 ACK Seq 1 Ack 1 Win 65160 Len 0 1982119298 382297022 tcp 61509 6697 PSH, ACK Seq 1 Ack 1 Win 65160 Len 49 1982119298 382297022 tcp 61509 6697 ACK Seq 50 Ack 88 Win 65139 Len 0 1982119298 382297022 tcp 61509 6697 PSH, ACK Seq 50 Ack 88 Win 65139 Len 61 http://www.secuobs.com/revue/news/586475.shtmlhttp://www.secuobs.com/revue/news/586475.shtml Secuobs.com : 2015-09-21 17:46:20 - pcapr updates - by hectormeza http, tcp 185 packets, 189 KB 662496426 2084383236 http GET wps portal es responsabilidad-corporativa relaciones-de-confianza-con-nuest 2084383236 662496426 tcp TCP segment of a reassembled PDU 2084383236 662496426 http HTTP 11 301 Moved Permanently text html 662496426 2084383236 http GET wps portal es responsabilidad-corporativa relaciones-de-confianza-con-nuest http://www.secuobs.com/revue/news/584183.shtmlhttp://www.secuobs.com/revue/news/584183.shtml Secuobs.com : 2015-09-21 16:45:44 - pcapr updates - by charlesbrownn arp, dns, http, icmpv6, llmnr, ssl, tcp, tlsv12, udp 491 packets, 151 KB fe80 aeb3 13ff fec6 a6c7 ff02 1 icmpv6 Router advertisement fe80 aeb3 13ff fec6 a6c7 ff02 1 icmpv6 Router advertisement fe80 aeb3 13ff fec6 a6c7 ff02 1 icmpv6 Router advertisement fe80 aeb3 13ff fec6 a6c7 ff02 1 icmpv6 Router advertisement http://www.secuobs.com/revue/news/584166.shtmlhttp://www.secuobs.com/revue/news/584166.shtml Secuobs.com : 2015-09-10 23:27:54 - pcapr updates - by shijili HTTP Connect method http, ssl, tcp, tlsv1 307 packets, 223 KB 1001010 10001 tcp 4466 8080 SYN Seq 0 Win 65535 Len 0 MSS 1460 SACK_PERM 1 10001 1001010 tcp 8080 4466 SYN, ACK Seq 0 Ack 1 Win 5840 Len 0 MSS 1460 SACK_PERM 1 1001010 10001 tcp 4466 8080 ACK Seq 1 Ack 1 Win 65535 Len 0 1001010 10001 http GET http wwwgooglecom HTTP 11 http://www.secuobs.com/revue/news/583059.shtmlhttp://www.secuobs.com/revue/news/583059.shtml Secuobs.com : 2015-09-06 13:24:51 - pcapr updates - by hemu8sharma arp_ping arp, icmp 10 packets, 1 KB ca 01 11 ec 00 08 ff ff ff ff ff ff arp Who has 12002 Tell 12001 ca 02 01 c4 00 08 ca 01 11 ec 00 08 arp 12002 is at ca 02 01 c4 00 08 12001 12002 icmp Echo ping request id 0x0000, seq be le 1 256, ttl 255 12002 12001 icmp Echo ping reply id 0x0000, seq be le 1 256, ttl 255 http://www.secuobs.com/revue/news/582546.shtmlhttp://www.secuobs.com/revue/news/582546.shtml Secuobs.com : 2015-08-31 06:42:37 - pcapr updates - by prozachj Capture of 8021ah from a quirky spotter arp, dhcp, llc 10 packets, 1 KB 0c 2a 69 05 ac 1b ff ff ff ff ff ff llc S P, func RNR, N R 64 DSAP NULL LSAP Individual, SSAP NULL LSAP Command 0c 2a 69 05 ac 1b ff ff ff ff ff ff llc S P, func RNR, N R 64 DSAP NULL LSAP Individual, SSAP NULL LSAP Command 0000 255255255255 dhcp DHCP Request - Transaction ID 0x42e1296a 0c 2a 69 05 ac 1b ff ff ff ff ff ff arp Gratuitous ARP for 192168121 Request http://www.secuobs.com/revue/news/581878.shtmlhttp://www.secuobs.com/revue/news/581878.shtml Secuobs.com : 2015-08-21 20:51:18 - pcapr updates - by chriscollins imf, smtp, tcp 22 packets, 4 KB 206712502 102001767 tcp 62019 25 SYN Seq 0 Win 8192 Len 0 MSS 1460 WS 8 SACK_PERM 1 102001767 206712502 tcp 25 62019 SYN, ACK Seq 0 Ack 1 Win 14600 Len 0 MSS 1460 SACK_PERM 1 206712502 102001767 tcp 62019 25 ACK Seq 1 Ack 1 Win 64240 Len 0 102001767 206712502 smtp S 220 mail02aolcom EG5500 SMTP Ready http://www.secuobs.com/revue/news/580988.shtmlhttp://www.secuobs.com/revue/news/580988.shtml Secuobs.com : 2015-08-10 02:32:21 - pcapr updates - by mauricioalpes dns, http, ssl, tcp, tlsv1, tlsv12, udp 423 packets, 209 KB 10801 1211995161 tcp 54812 80 SYN Seq 0 Win 14600 Len 0 MSS 1460 SACK_PERM 1 TSV 126488 TSER 0 WS 1211995161 10801 tcp 80 54812 SYN, ACK Seq 0 Ack 1 Win 65535 Len 0 10801 1211995161 tcp 54812 80 ACK Seq 1 Ack 1 Win 14600 Len 0 10801 1211995161 http Continuation or non-HTTP traffic http://www.secuobs.com/revue/news/579686.shtmlhttp://www.secuobs.com/revue/news/579686.shtml Secuobs.com : 2015-08-05 21:23:22 - pcapr updates - by mattmansmith http, tcp 161 packets, 91 KB 192168599 541696773 tcp 43461 80 SYN Seq 0 Win 14600 Len 0 MSS 1460 SACK_PERM 1 TSV 4294941341 TSER 541696773 192168599 tcp 80 43461 SYN, ACK Seq 0 Ack 1 Win 17898 Len 0 MSS 8961 SACK_PERM 1 TSV 33253 192168599 541696773 tcp 43461 80 ACK Seq 1 Ack 1 Win 14624 Len 0 TSV 4294941367 TSER 3325307759 192168599 541696773 http GET gs cfg000b8262af8f HTTP 10 http://www.secuobs.com/revue/news/579421.shtmlhttp://www.secuobs.com/revue/news/579421.shtml Secuobs.com : 2015-08-05 21:05:37 - pcapr updates - by mattmansmith gs to its servers cap http, tcp 100 packets, 47 KB 192168599 541696773 tcp 56030 80 SYN Seq 0 Win 14600 Len 0 MSS 1460 SACK_PERM 1 TSV 4294941053 TSER 541696773 192168599 tcp 80 56030 SYN, ACK Seq 0 Ack 1 Win 17898 Len 0 MSS 8961 SACK_PERM 1 TSV 33238 192168599 541696773 tcp 56030 80 ACK Seq 1 Ack 1 Win 14624 Len 0 TSV 4294941079 TSER 3323850789 192168599 541696773 http GET gs cfg000b8262af8f HTTP 10 http://www.secuobs.com/revue/news/579420.shtmlhttp://www.secuobs.com/revue/news/579420.shtml Secuobs.com : 2015-08-05 04:07:44 - pcapr updates - by marialibunao dns 1 packet, 126 bytes 1301954162 130195610 dns Standard query A wwwstuffconz http://www.secuobs.com/revue/news/579350.shtmlhttp://www.secuobs.com/revue/news/579350.shtml Secuobs.com : 2015-07-23 21:12:50 - pcapr updates - by jamesfclements sip, sip sdp, sip sdp isup itu 31 packets, 25 KB 1722823686 17227228180 sip sdp isup itu Request INVITE sip 5213338993434 01-sr-nwblwiczilwivzwvncom 5060 transport 1722823686 17227228180 sip sdp isup itu Request INVITE sip 5213338993434 01-sr-nwblwiczilwivzwvncom 5060 transport 17227228180 1722823686 sip Status 100 Trying 17227228180 1722823686 sip Status 100 Trying http://www.secuobs.com/revue/news/578179.shtmlhttp://www.secuobs.com/revue/news/578179.shtml Secuobs.com : 2015-07-23 19:54:22 - pcapr updates - by xxxdandruff 0 packets, 24 bytes http://www.secuobs.com/revue/news/578173.shtmlhttp://www.secuobs.com/revue/news/578173.shtml Secuobs.com : 2015-07-23 19:54:22 - pcapr updates - by xxxdandruff sll 2 packets, 136 bytes sll Unicast to us sll Unicast to us http://www.secuobs.com/revue/news/578172.shtmlhttp://www.secuobs.com/revue/news/578172.shtml Secuobs.com : 2015-07-17 11:29:48 - pcapr updates - by hardik05 32 packets, 17 KB http://www.secuobs.com/revue/news/577426.shtmlhttp://www.secuobs.com/revue/news/577426.shtml Secuobs.com : 2015-07-16 09:54:20 - pcapr updates - by lakhwindersingh browser, cldap, dns, krb5, nbns, ntp, smb, tcp 401 packets, 36 KB 192168241 11122111598 tcp 50254 443 RST, ACK Seq 1 Ack 1 Win 0 Len 0 192168241 11122111598 tcp 50255 443 RST, ACK Seq 1 Ack 1 Win 0 Len 0 192168241 11122111598 tcp 50254 443 RST Seq 4294967207 Win 0 Len 0 192168241 11122111598 tcp 50255 443 RST Seq 1 Win 0 Len 0 http://www.secuobs.com/revue/news/577281.shtmlhttp://www.secuobs.com/revue/news/577281.shtml Secuobs.com : 2015-06-22 18:12:40 - pcapr updates - by vibchhabra tcp 12 packets, 3 KB 172161162 17216896 tcp 60079 8020 SYN Seq 0 Win 5840 Len 0 MSS 1460 SACK_PERM 1 TSV 2997636616 TSER 17216896 172161162 tcp 8020 60079 SYN, ACK Seq 0 Ack 1 Win 64240 Len 0 MSS 1460 WS 0 TSV 0 TSER 0 S 172161162 17216896 tcp 60079 8020 ACK Seq 1 Ack 1 Win 5840 Len 0 TSV 2997636616 TSER 0 172161162 17216896 tcp 60079 8020 PSH, ACK Seq 1 Ack 1 Win 5840 Len 463 TSV 2997636616 TSER 0 http://www.secuobs.com/revue/news/574976.shtmlhttp://www.secuobs.com/revue/news/574976.shtml Secuobs.com : 2015-06-17 09:37:19 - pcapr updates - by nilkanthpuranik arp, dns, http, tcp 165 packets, 63 KB 172160107 121532041 dns Standard query A wwwgooglecom 121532041 172160107 dns Standard query response CNAME wwwlgooglecom A 7412595147 A 741259599 A 172160107 7412595147 tcp 45691 80 SYN Seq 0 Win 5840 Len 0 MSS 1460 SACK_PERM 1 TSV 586590 TSER 0 WS 7412595147 172160107 tcp 80 45691 SYN, ACK Seq 0 Ack 1 Win 5672 Len 0 MSS 1380 TSV 2834267783 TSER 58 http://www.secuobs.com/revue/news/574335.shtmlhttp://www.secuobs.com/revue/news/574335.shtml Secuobs.com : 2015-05-28 23:17:29 - pcapr updates - by cthomas tcp 3 packets, 513 bytes 6619018985 17230210213 tcp 49004 10701 PSH, ACK Seq 1 Ack 1 Win 12 Len 209 TSV 874381582 TSER 844534696 17230210213 6619018985 tcp 10701 49004 PSH, ACK Seq 1 Ack 210 Win 103 Len 34 TSV 844555295 TSER 8743815 6619018985 17230210213 tcp 49004 10701 ACK Seq 210 Ack 35 Win 12 Len 0 TSV 874381585 TSER 844555295 http://www.secuobs.com/revue/news/572314.shtmlhttp://www.secuobs.com/revue/news/572314.shtml Secuobs.com : 2015-05-20 04:23:03 - pcapr updates - by yaniv tcp 10 packets, 870 bytes 5020682181 100025 tcp 49504 2375 SYN Seq 0 Win 8192 Len 0 MSS 1371 WS 8 SACK_PERM 1 5020682181 100025 tcp 49504 2375 ACK Seq 1 Ack 1 Win 65792 Len 0 5020682181 100025 tcp 49504 2375 PSH, ACK Seq 1 Ack 1 Win 65792 Len 122 5020682181 100025 tcp 49504 2375 ACK Seq 123 Ack 2743 Win 65792 Len 0 http://www.secuobs.com/revue/news/571311.shtmlhttp://www.secuobs.com/revue/news/571311.shtml Secuobs.com : 2015-04-14 20:26:42 - pcapr updates - by v2 sip, sip sdp 14 packets, 11 KB 6767170134 7075255133 sip Request REGISTER sip sipcallwithuscom 7075255133 6767170134 sip Status 200 OK 3 bindings 70205219182 6767170134 sip sdp Request INVITE sip 8187451460 207661586, with session description 6767170134 70205219182 sip Status 100 Trying http://www.secuobs.com/revue/news/567336.shtmlhttp://www.secuobs.com/revue/news/567336.shtml Secuobs.com : 2015-04-13 19:01:30 - pcapr updates - by daniel dns, http, ssl, tcp, tlsv12 304 packets, 232 KB 10801 8888 dns Standard query AAAA apifacebookcom 8888 10801 dns Standard query response CNAME starc10rfacebookcom AAAA 2a03 2880 f01c 2 face 10801 8888 dns Standard query A apifacebookcom 8888 10801 dns Standard query response CNAME starc10rfacebookcom A 3113933 http://www.secuobs.com/revue/news/567152.shtmlhttp://www.secuobs.com/revue/news/567152.shtml Secuobs.com : 2015-04-06 10:24:48 - pcapr updates - by yllimihux-0087 arp, dcerpc, dns, drsuapi, epm, krb5, ldap, llmnr, nbns, smb2, tcp 225 packets, 67 KB 19216816 19216815 tcp 49216 88 SYN Seq 0 Win 8192 Len 0 MSS 1460 WS 8 SACK_PERM 1 19216815 19216816 tcp 88 49216 SYN, ACK Seq 0 Ack 1 Win 8192 Len 0 MSS 1460 WS 8 SACK_PERM 1 19216816 19216815 tcp 49216 88 ACK Seq 1 Ack 1 Win 65536 Len 0 19216816 19216815 tcp TCP segment of a reassembled PDU http://www.secuobs.com/revue/news/566148.shtmlhttp://www.secuobs.com/revue/news/566148.shtml Secuobs.com : 2015-03-20 09:38:16 - pcapr updates - by aax-bmw dhcp dhcp 6 packets, 2 KB 0000 255255255255 dhcp DHCP Discover - Transaction ID 0x80406d5f 0000 255255255255 dhcp DHCP Discover - Transaction ID 0x80406d60 1024481 1024493 dhcp DHCP Offer - Transaction ID 0x80406d5f 1024481 1024493 dhcp DHCP Offer - Transaction ID 0x80406d60 http://www.secuobs.com/revue/news/564180.shtmlhttp://www.secuobs.com/revue/news/564180.shtml Secuobs.com : 2015-03-12 16:05:58 - pcapr updates - by aax-bmw DHCPv6 Router turn on after client dns, icmpv6, mdns 105 packets, 15 KB fe80 20c 29ff fe21 cd92 ff02 2 icmpv6 Router solicitation ff02 1 ff21 cd92 icmpv6 Neighbor solicitation fe80 20c 29ff fe21 cd92 ff02 16 icmpv6 Multicast Listener Report Message v2 fe80 20c 29ff fe21 cd92 ff02 1 icmpv6 Neighbor advertisement http://www.secuobs.com/revue/news/563191.shtmlhttp://www.secuobs.com/revue/news/563191.shtml Secuobs.com : 2015-03-12 10:38:08 - pcapr updates - by aax-bmw ipv6 Router Solicitation Advertisement arp, dhcp, icmpv6, mdns 51 packets, 10 KB 00 0c 29 2b 58 a9 00 23 05 8c 0d 47 arp Who has 1024481 Tell 10244919 0000 255255255255 dhcp DHCP Request - Transaction ID 0x5e407e12 00 0c 29 2b 58 a9 00 23 05 8c 0d 47 arp Who has 1024481 Tell 10244919 00 0c 29 2b 58 a9 00 23 05 8c 0d 47 arp Who has 1024481 Tell 10244919 http://www.secuobs.com/revue/news/563133.shtmlhttp://www.secuobs.com/revue/news/563133.shtml Secuobs.com : 2015-03-09 14:45:45 - pcapr updates - by accumulatorx diameter, tcp 199 packets, 29 KB 904036 10235743 tcp 33177 3868 SYN Seq 0 Win 5600 Len 0 MSS 1400 SACK_PERM 1 TSV 37393477 TSER 0 10235743 904036 tcp 3868 33177 RST, ACK Seq 1 Ack 1 Win 0 Len 0 904037 10235743 tcp 38482 3868 SYN Seq 0 Win 5600 Len 0 MSS 1400 SACK_PERM 1 TSV 37392353 TSER 0 10235743 904037 tcp 3868 38482 RST, ACK Seq 1 Ack 1 Win 0 Len 0 http://www.secuobs.com/revue/news/562652.shtmlhttp://www.secuobs.com/revue/news/562652.shtml Secuobs.com : 2015-03-06 01:16:16 - pcapr updates - by tomaszbukowski Test DNS dns 8 packets, 1 KB 10250250171 19516449134 dns Standard query PTR 443322dns-testbukowskipro 19516449134 10250250171 dns Standard query response PTR iamtrollingyou n fake commandline n still' tr 10250250171 19516449134 dns Standard query A uglydns-testbukowskipro 19516449134 10250250171 dns Standard query response CNAME iamtrollingyou b t n v fxxoverride-wwwpl http://www.secuobs.com/revue/news/562330.shtmlhttp://www.secuobs.com/revue/news/562330.shtml Secuobs.com : 2015-02-19 09:54:48 - pcapr updates - by iam33three arp, dns, stp, tcp 42 packets, 3 KB 2c 54 cf b9 ab 14 ff ff ff ff ff ff arp Who has 1921681254 Tell 1921681214 2c 54 cf b9 ab 14 ff ff ff ff ff ff arp Who has 1921681254 Tell 1921681214 2c 54 cf b9 ab 14 ff ff ff ff ff ff arp Who has 1921681254 Tell 1921681214 2c 54 cf b9 ab 14 ff ff ff ff ff ff arp Who has 1921681254 Tell 1921681214 http://www.secuobs.com/revue/news/560188.shtmlhttp://www.secuobs.com/revue/news/560188.shtml Secuobs.com : 2015-02-13 13:13:30 - pcapr updates - by vipul007 arp, dhcpv6, edp, nbns, rtcp, rtp, sip, sip sdp, udp 127 packets, 23 KB 101050115 10105050 udp Source port 5060 Destination port 5060 101050150 1010255255 nbns Name query NB HP 101050150 1010255255 nbns Name query NB HP 101050150 1010255255 nbns Name query NB HP http://www.secuobs.com/revue/news/559466.shtmlhttp://www.secuobs.com/revue/news/559466.shtml Secuobs.com : 2015-02-04 20:59:08 - pcapr updates - by danshanahan Retransmissions http thevisiblenetworkcom 2015 02 04 graphing-packet-retransm http, tcp 446 packets, 306 KB 192168012 192080250 tcp 62981 80 SYN Seq 0 Win 65535 Len 0 MSS 1460 WS 5 TSV 1013036663 TSER 0 SACK_ 192080250 192168012 tcp 80 62981 SYN, ACK Seq 0 Ack 1 Win 29200 Len 0 MSS 1460 SACK_PERM 1 WS 9 192168012 192080250 tcp 62981 80 ACK Seq 1 Ack 1 Win 262144 Len 0 192168012 192080250 http GET attachment_id 156 HTTP 11 http://www.secuobs.com/revue/news/558077.shtmlhttp://www.secuobs.com/revue/news/558077.shtml Secuobs.com : 2015-02-02 09:07:33 - pcapr updates - by jayeshkamble snmp 4 packets, 2 KB 17216110 172162155 snmp sNMPv2-Trap 136121130 13616311410 136141997191111 17216110 172162149 snmp sNMPv2-Trap 136121130 13616311410 136141997191111 17216110 172162155 snmp sNMPv2-Trap 136121130 13616311410 136141997191111 17216110 172162149 snmp sNMPv2-Trap 136121130 13616311410 136141997191111 http://www.secuobs.com/revue/news/557569.shtmlhttp://www.secuobs.com/revue/news/557569.shtml Secuobs.com : 2015-01-29 14:04:42 - pcapr updates - by bvalera sslv2, tcp, tlsv1 32 packets, 16 KB 17230220248 134170109200 tcp 58397 443 SYN Seq 0 Win 65535 Len 0 MSS 1460 WS 4 TSV 957171234 TSER 0 SACK_ 134170109200 17230220248 tcp 443 58397 SYN, ACK Seq 0 Ack 1 Win 8192 Len 0 MSS 1386 WS 8 SACK_PERM 1 TSV 17230220248 134170109200 tcp 58397 443 ACK Seq 1 Ack 1 Win 131904 Len 0 TSV 957171581 TSER 18686886 17230220248 134170109200 sslv2 Client Hello http://www.secuobs.com/revue/news/557110.shtmlhttp://www.secuobs.com/revue/news/557110.shtml Secuobs.com : 2015-01-27 14:41:46 - pcapr updates - by kawai ruckus wtp lwapp boot log arp, dhcp, dns, icmpv6, ieee 80211, lwapp 53 packets, 13 KB fe80 6eaa b3ff fe21 5500 ff02 2 icmpv6 Router solicitation 0000 255255255255 dhcp DHCP Discover - Transaction ID 0x238b77d5 19216810200 1921681075 dhcp DHCP Offer - Transaction ID 0x238b77d5 0000 255255255255 dhcp DHCP Request - Transaction ID 0x238b77d5 http://www.secuobs.com/revue/news/556732.shtmlhttp://www.secuobs.com/revue/news/556732.shtml Secuobs.com : 2015-01-27 14:41:46 - pcapr updates - by kawai WLC controlled cisco aironet boot sequence arp, capwap, cdp, dns, dtlsv10, ieee 80211 422 packets, 107 KB 192168109 1921681010 dtlsv10 Encrypted Alert 1921681010 255255255255 dns Standard query A CISCO-CAPWAP-CONTROLLER 1921681010 255255255255 dns Standard query A CISCO-CAPWAP-CONTROLLER b8 38 61 f3 05 ac 01 00 0c cc cc cc cdp Device ID APb83861f305ac Port ID GigabitEthernet0 http://www.secuobs.com/revue/news/556731.shtmlhttp://www.secuobs.com/revue/news/556731.shtml Secuobs.com : 2015-01-24 00:54:54 - pcapr updates - by souless993 arp, ssdp, tcp, udp 133 packets, 45 KB fe80 c912 d1f6 a4f2 bf51 ff02 c ssdp M-SEARCH HTTP 11 19216814 173231152226 tcp 38660 80 FIN, ACK Seq 1 Ack 1 Win 364 Len 0 TSV 4041564 TSER 1653422161 19216814 18538201209 tcp 39012 80 FIN, ACK Seq 1 Ack 1 Win 862 Len 0 TSV 4041564 TSER 28164633 19216814 5417584195 tcp 57833 80 FIN, ACK Seq 1 Ack 1 Win 229 Len 0 TSV 4041564 TSER 30706693 http://www.secuobs.com/revue/news/556374.shtmlhttp://www.secuobs.com/revue/news/556374.shtml Secuobs.com : 2015-01-23 08:22:00 - pcapr updates - by bvalera sslv2, tcp, tlsv1 32 packets, 16 KB 1921681101 134170106176 tcp 49326 443 SYN Seq 0 Win 65535 Len 0 MSS 1460 WS 4 TSV 499831402 TSER 0 SACK_ 134170106176 1921681101 tcp 443 49326 SYN, ACK Seq 0 Ack 1 Win 8192 Len 0 MSS 1440 WS 8 SACK_PERM 1 TSV 1921681101 134170106176 tcp 49326 443 ACK Seq 1 Ack 1 Win 131376 Len 0 TSV 499831707 TSER 3195888 1921681101 134170106176 sslv2 Client Hello http://www.secuobs.com/revue/news/556237.shtmlhttp://www.secuobs.com/revue/news/556237.shtml Secuobs.com : 2015-01-22 20:43:52 - pcapr updates - by jmahmutovic sslv2, tcp, tlsv1 359 packets, 194 KB 17230220248 134170110200 tcp 51379 443 SYN Seq 0 Win 65535 Len 0 MSS 1460 WS 4 TSV 312903411 TSER 0 SACK_ 134170110200 17230220248 tcp 443 51379 SYN, ACK Seq 0 Ack 1 Win 8192 Len 0 MSS 1386 WS 8 SACK_PERM 1 TSV 17230220248 134170110200 tcp 51379 443 ACK Seq 1 Ack 1 Win 131904 Len 0 TSV 312903677 TSER 92391532 17230220248 134170110200 sslv2 Client Hello http://www.secuobs.com/revue/news/556146.shtmlhttp://www.secuobs.com/revue/news/556146.shtml Secuobs.com : 2015-01-22 09:57:18 - pcapr updates - by bvalera ssl, tcp, tlsv12 34 packets, 12 KB 17229212154 134170104218 tcp 53588 443 SYN Seq 0 Win 14600 Len 0 MSS 1460 SACK_PERM 1 TSV 45408474 TSER 0 134170104218 17229212154 tcp 443 53588 SYN, ACK Seq 0 Ack 1 Win 8192 Len 0 MSS 1460 WS 8 SACK_PERM 1 TSV 17229212154 134170104218 tcp 53588 443 ACK Seq 1 Ack 1 Win 14720 Len 0 TSV 45408536 TSER 243081162 17229212154 134170104218 ssl Client Hello http://www.secuobs.com/revue/news/555831.shtmlhttp://www.secuobs.com/revue/news/555831.shtml Secuobs.com : 2015-01-19 11:39:31 - pcapr updates - by bvalera http, tcp 39 packets, 25 KB 19216802 7412523675 tcp 51996 80 SYN Seq 0 Win 65535 Len 0 MSS 1460 WS 3 TSV 201482756 TSER 0 SACK_P 7412523675 19216802 tcp 80 51996 SYN, ACK Seq 0 Ack 1 Win 5672 Len 0 MSS 1430 SACK_PERM 1 TSV 414240 19216802 7412523675 tcp 51996 80 ACK Seq 1 Ack 1 Win 524280 Len 0 TSV 201482757 TSER 4142404426 19216802 7412523675 tcp TCP segment of a reassembled PDU http://www.secuobs.com/revue/news/555299.shtmlhttp://www.secuobs.com/revue/news/555299.shtml Secuobs.com : 2015-01-19 11:16:13 - pcapr updates - by bvalera http, tcp 33 packets, 22 KB 19216802 7412523691 tcp 51989 80 SYN Seq 0 Win 65535 Len 0 MSS 1460 WS 3 TSV 201482756 TSER 0 SACK_P 7412523691 19216802 tcp 80 51989 SYN, ACK Seq 0 Ack 1 Win 5672 Len 0 MSS 1430 SACK_PERM 1 TSV 209433 19216802 7412523691 tcp 51989 80 ACK Seq 1 Ack 1 Win 524280 Len 0 TSV 201482756 TSER 209433541 19216802 7412523691 http GET adi comythome default sz 970x250,960x250 tile 1 dcopt ist kgender m k21 1 http://www.secuobs.com/revue/news/555297.shtmlhttp://www.secuobs.com/revue/news/555297.shtml Secuobs.com : 2015-01-09 16:59:52 - pcapr updates - by vibchhabra http, tcp 14 packets, 4 KB 192168134129 192168134130 tcp 51268 8080 SYN Seq 0 Win 29200 Len 0 MSS 1460 SACK_PERM 1 TSV 4665850 TSER 0 192168134130 192168134129 tcp 8080 51268 SYN, ACK Seq 0 Ack 1 Win 64240 Len 0 MSS 1460 WS 0 TSV 0 TSER 0 S 192168134129 192168134130 tcp 51268 8080 ACK Seq 1 Ack 1 Win 29696 Len 0 TSV 4665850 TSER 0 192168134129 192168134130 http GET Allegro HTTP 11 http://www.secuobs.com/revue/news/553834.shtmlhttp://www.secuobs.com/revue/news/553834.shtml Secuobs.com : 2015-01-08 09:17:23 - pcapr updates - by algirdasbat udp 133 packets, 21 KB 17221001 17221002 udp Source port 7555 Destination port 7555 17221001 17221002 udp Source port 7555 Destination port 7555 17221001 17221002 udp Source port 7555 Destination port 7555 17221001 17221002 udp Source port 7555 Destination port 7555 http://www.secuobs.com/revue/news/553554.shtmlhttp://www.secuobs.com/revue/news/553554.shtml Secuobs.com : 2015-01-05 07:34:26 - pcapr updates - by pizznipple dns, http, ssl, tcp, tlsv1, tlsv12 391 packets, 91 KB 10093943 64233186114 tcp 43532 80 FIN, ACK Seq 1 Ack 1 Win 229 Len 0 TSV 640297 TSER 1490259592 64233186114 10093943 tcp 80 43532 FIN, ACK Seq 1 Ack 2 Win 333 Len 0 TSV 1490279839 TSER 640297 10093943 64233186114 tcp 43532 80 ACK Seq 2 Ack 2 Win 229 Len 0 TSV 640380 TSER 1490279839 10093943 10177034 dns Standard query A datamobclixcom http://www.secuobs.com/revue/news/553028.shtmlhttp://www.secuobs.com/revue/news/553028.shtml Secuobs.com : 2014-12-31 19:29:12 - pcapr updates - by checkmatebusani tcp 1 packet, 100 bytes 192168133 16220912221 tcp 53396 80 ACK Seq 1 Ack 1 Win 258 Len 0 http://www.secuobs.com/revue/news/552547.shtmlhttp://www.secuobs.com/revue/news/552547.shtml Secuobs.com : 2014-12-20 04:11:53 - pcapr updates - by vibchhabra imf, smtp, tcp 22 packets, 19 KB 1716867 17216888 tcp 34456 25 SYN Seq 0 Win 43690 Len 0 MSS 65495 SACK_PERM 1 TSV 44054364 TSER 0 1716867 17216888 tcp 25 34456 SYN, ACK Seq 0 Ack 0 Win 43690 Len 0 MSS 65495 SACK_PERM 1 TSV 4405 1716867 17216888 tcp 34456 25 ACK Seq 1 Ack 1 Win 44032 Len 0 TSV 44054364 TSER 44054364 1716867 17216888 smtp S 220 kali Python SMTP proxy version 02 http://www.secuobs.com/revue/news/551186.shtmlhttp://www.secuobs.com/revue/news/551186.shtml Secuobs.com : 2014-12-20 03:50:38 - pcapr updates - by vibchhabra http, imf, tcp 18 packets, 28 KB 1921681001 192168100157 tcp 50062 8080 SYN Seq 0 Win 8192 Len 0 MSS 1460 WS 8 SACK_PERM 1 192168100157 1921681001 tcp 8080 50062 SYN, ACK Seq 0 Ack 1 Win 8192 Len 0 MSS 1460 WS 8 SACK_PERM 1 1921681001 192168100157 tcp 50062 8080 ACK Seq 1 Ack 1 Win 65536 Len 0 1921681001 192168100157 http GET word2010WithMacroeml HTTP 11 http://www.secuobs.com/revue/news/551183.shtmlhttp://www.secuobs.com/revue/news/551183.shtml Secuobs.com : 2014-12-20 03:36:17 - pcapr updates - by vibchhabra http, imf, tcp 17 packets, 19 KB 1921681001 192168100157 tcp 50077 8080 SYN Seq 0 Win 8192 Len 0 MSS 1460 WS 8 SACK_PERM 1 192168100157 1921681001 tcp 8080 50077 SYN, ACK Seq 0 Ack 1 Win 8192 Len 0 MSS 1460 WS 8 SACK_PERM 1 1921681001 192168100157 tcp 50077 8080 ACK Seq 1 Ack 1 Win 65536 Len 0 1921681001 192168100157 http GET excel2010WithMacroeml HTTP 11 http://www.secuobs.com/revue/news/551181.shtmlhttp://www.secuobs.com/revue/news/551181.shtml Secuobs.com : 2014-12-12 19:49:17 - pcapr updates - by paulc iPhone 6 VoLTE and a GSM phone registering to YateUCN and exchanging SMS gtp , gtp , sccp int itu , sip 80 packets, 30 KB fd00 183 1 1 1886 9040 8605 32b8 fd01 183 gtp 5060 5060 SYN Seq 0 Win 65535 Len 0 MSS 1350 WS 5 TSV 590501518 TSER 0 SACK_ fd01 183 fd00 183 1 1 1886 9040 8605 32b8 gtp 5060 5060 SYN, ACK Seq 0 Ack 1 Win 14280 Len 0 MSS 1440 SACK_PERM 1 TSV 2511 fd00 183 1 1 1886 9040 8605 32b8 fd01 183 gtp 5060 5060 ACK Seq 1 Ack 1 Win 131104 Len 0 TSV 590501548 TSER 2511958301 fd00 183 1 1 1886 9040 8605 32b8 fd01 183 gtp TCP segment of a reassembled PDU http://www.secuobs.com/revue/news/549966.shtmlhttp://www.secuobs.com/revue/news/549966.shtml Secuobs.com : 2014-12-09 18:52:04 - pcapr updates - by vibchhabra tcp 24 packets, 18 KB 1 1 tcp 53988 1025 SYN Seq 0 Win 43690 Len 0 MSS 65476 SACK_PERM 1 TSV 39889723 TSER 1 1 tcp 1025 53988 RST, ACK Seq 1 Ack 1 Win 0 Len 0 127001 127001 tcp 59667 1025 SYN Seq 0 Win 43690 Len 0 MSS 65495 SACK_PERM 1 TSV 39889723 TSER 127001 127001 tcp 1025 59667 SYN, ACK Seq 0 Ack 1 Win 43690 Len 0 MSS 65495 SACK_PERM 1 TSV 39 http://www.secuobs.com/revue/news/549256.shtmlhttp://www.secuobs.com/revue/news/549256.shtml Secuobs.com : 2014-12-03 07:46:41 - pcapr updates - by 842829547 ssh, sshv2, tcp 141 packets, 28 KB 192168246 1921682156 tcp 1640 22 SYN Seq 0 Win 65535 Len 0 MSS 1460 WS 0 SACK_PERM 1 1921682156 192168246 tcp 22 1640 SYN, ACK Seq 0 Ack 1 Win 5840 Len 0 MSS 1460 SACK_PERM 1 WS 7 192168246 1921682156 tcp 1640 22 ACK Seq 1 Ack 1 Win 65535 Len 0 1921682156 192168246 ssh Server Protocol SSH-20-OpenSSH_51p1 Debian-5 r http://www.secuobs.com/revue/news/548174.shtmlhttp://www.secuobs.com/revue/news/548174.shtml Secuobs.com : 2014-11-27 00:48:58 - pcapr updates - by florisvda MLD messages during IPv6 Duplicate address detection for a FreeBSD 83-RELEASE-p icmpv6 3 packets, 330 bytes ff02 1 ff00 1234 icmpv6 Neighbor solicitation fe80 20d b9ff fe2d e38 ff02 16 icmpv6 Multicast Listener Report Message v2 fe80 20d b9ff fe2d e38 ff02 16 icmpv6 Multicast Listener Report Message v2 http://www.secuobs.com/revue/news/547454.shtmlhttp://www.secuobs.com/revue/news/547454.shtml Secuobs.com : 2014-11-26 21:33:45 - pcapr updates - by florisvda MLD messages during IPv6 Duplicate address detection for a modern Linux host Ub icmpv6 4 packets, 476 bytes ff02 16 icmpv6 Multicast Listener Report Message v2 ff02 16 icmpv6 Multicast Listener Report Message v2 ff02 1 ff3b 23ad icmpv6 Neighbor solicitation fe80 20e 8eff fe3b 23ad ff02 16 icmpv6 Multicast Listener Report Message v2 http://www.secuobs.com/revue/news/547444.shtmlhttp://www.secuobs.com/revue/news/547444.shtml Secuobs.com : 2014-11-26 21:33:45 - pcapr updates - by florisvda MLD messages during IPv6 Duplicate address detection for a Windows7 64bit host icmpv6 4 packets, 432 bytes ff02 1 ffe4 d4aa icmpv6 Neighbor solicitation fe80 c14b 8228 ee4 d4aa ff02 16 icmpv6 Multicast Listener Report Message v2 fe80 c14b 8228 ee4 d4aa ff02 16 icmpv6 Multicast Listener Report Message v2 fe80 c14b 8228 ee4 d4aa ff02 1 icmpv6 Neighbor advertisement http://www.secuobs.com/revue/news/547443.shtmlhttp://www.secuobs.com/revue/news/547443.shtml Secuobs.com : 2014-11-25 17:51:42 - pcapr updates - by michaelmoose afp, dsi, ssdp, tcp 173 packets, 29 KB 100112 10017 afp FPLogout request 10017 100112 afp FPLogout reply 100112 10017 tcp 63983 548 ACK Seq 19 Ack 17 Win 4113 Len 0 TSV 324965162 TSER 26446281 100112 10017 tcp 63983 548 FIN, ACK Seq 19 Ack 17 Win 4113 Len 0 TSV 324965162 TSER 26446281 http://www.secuobs.com/revue/news/547213.shtmlhttp://www.secuobs.com/revue/news/547213.shtml Secuobs.com : 2014-11-20 20:02:02 - pcapr updates - by sarsjits dns, http, jabber xml, ssl, tcp, tlsv1, tlsv11 213 packets, 43 KB 10801 12216012056 dns Standard query A fnmldvxfmgwc 12216012056 10801 dns Standard query response, No such name 10801 12216012056 dns Standard query A xjsdawebteu 12216012056 10801 dns Standard query response, No such name http://www.secuobs.com/revue/news/546508.shtmlhttp://www.secuobs.com/revue/news/546508.shtml Secuobs.com : 2014-11-19 21:32:19 - pcapr updates - by gwenaeldespres dns, ssl, tcp, tlsv1 297 packets, 186 KB 10801 1921680254 dns Standard query A logspotifycom 1921680254 10801 dns Standard query response CNAME lonweblbgslbspotifycom A 194132196194 A 194 19216806 194132198211 tcp 50358 4070 PSH, ACK Seq 1 Ack 1 Win 1384 Len 90 TSV 9750806 TSER 1670138908 10801 194132196194 tcp 51397 443 SYN Seq 0 Win 42340 Len 0 MSS 1460 SACK_PERM 1 TSV 9750810 TSER 0 http://www.secuobs.com/revue/news/546299.shtmlhttp://www.secuobs.com/revue/news/546299.shtml Secuobs.com : 2014-11-14 21:01:09 - pcapr updates - by paulc iPhone 6 registering and calling over VoLTE, ITU-MAP ANSI-SS7 core network gtp , gtp , gtp , gtp , gtp , gtp , gtp , gtp , ppp ipcp, s1ap, s1ap nas-eps, sccp int itu 163 packets, 41 KB 192168168183 192168168183 ppp ipcp Configuration Request 192168168183 192168168183 s1ap nas-eps SACK id-downlinkNASTransport Authentication request 192168168183 192168168183 s1ap nas-eps SACK id-uplinkNASTransport Authentication response 192168168183 192168168183 s1ap nas-eps SACK id-downlinkNASTransport Security mode command http://www.secuobs.com/revue/news/545558.shtmlhttp://www.secuobs.com/revue/news/545558.shtml Secuobs.com : 2014-11-11 21:36:38 - pcapr updates - by cathy_093 tcp http, stp, tcp 500 packets, 425 KB 2339657 1921681154 http Continuation or non-HTTP traffic 2339657 1921681154 http Continuation or non-HTTP traffic 1921681154 2339657 tcp 18951 80 ACK Seq 1 Ack 2921 Win 3564 Len 0 2339657 1921681154 http Continuation or non-HTTP traffic http://www.secuobs.com/revue/news/544897.shtmlhttp://www.secuobs.com/revue/news/544897.shtml Secuobs.com : 2014-11-07 13:26:12 - pcapr updates - by ilyk tcp, turn channel 18 packets, 3 KB 1921681133 1921681172 tcp 55778 9090 SYN Seq 0 Win 29200 Len 0 MSS 1460 SACK_PERM 1 TSV 2421250 TSER 0 1921681172 1921681133 tcp 9090 55778 SYN, ACK Seq 0 Ack 1 Win 14480 Len 0 MSS 1460 SACK_PERM 1 TSV 142 1921681133 1921681172 tcp 55778 9090 ACK Seq 1 Ack 1 Win 29312 Len 0 TSV 2421250 TSER 1426845 1921681133 1921681172 tcp 55778 9090 PSH, ACK Seq 1 Ack 1 Win 29312 Len 254 TSV 2421251 TSER 1426845 http://www.secuobs.com/revue/news/544314.shtmlhttp://www.secuobs.com/revue/news/544314.shtml Secuobs.com : 2014-11-02 17:54:07 - pcapr updates - by bortzmeyer pcapr TCP FastOpen connections to Gmail No cookie the first time but FastOpen worked http, tcp 56 packets, 40 KB 2046214153 17319412321 tcp 56097 80 SYN Seq 0 Win 29200 Len 0 MSS 1460 SACK_PERM 1 TSV 325915996 TSER 0 17319412321 2046214153 tcp 80 56097 SYN, ACK Seq 0 Ack 1 Win 42540 Len 0 MSS 1430 SACK_PERM 1 TSV 27001 2046214153 17319412321 http GET HTTP 11 17319412321 2046214153 tcp 80 56097 ACK Seq 1 Ack 91 Win 42624 Len 0 TSV 2700117814 TSER 325915997 http://www.secuobs.com/revue/news/543498.shtmlhttp://www.secuobs.com/revue/news/543498.shtml Secuobs.com : 2014-10-31 22:28:35 - pcapr updates - by wddahlenburg http, tcp 160 packets, 51 KB 172161132 20880154224 tcp 55711 80 SYN Seq 0 Win 65535 Len 0 MSS 1460 WS 4 TSV 458470438 TSER 0 SACK_P 20880154224 172161132 tcp 80 55711 SYN, ACK Seq 0 Ack 1 Win 14480 Len 0 MSS 1380 SACK_PERM 1 TSV 13179 172161132 20880154224 tcp 55711 80 ACK Seq 1 Ack 1 Win 131328 Len 0 TSV 458470493 TSER 1317912745 172161132 20880154224 http GET HTTP 11 http://www.secuobs.com/revue/news/543406.shtmlhttp://www.secuobs.com/revue/news/543406.shtml Secuobs.com : 2014-10-23 07:12:16 - pcapr updates - by contact Malicious network traffic MD5 a8ef5ccebd2e3babdd243a2861673c26 filen 319 packets, 78 KB http://www.secuobs.com/revue/news/542231.shtmlhttp://www.secuobs.com/revue/news/542231.shtml Secuobs.com : 2014-10-19 16:43:56 - pcapr updates - by ahmada dns 55 packets, 7 KB 19216816 1941651304 dns Standard query A javadl-esd-secureoraclecom 1941651304 19216816 dns Standard query response CNAME javadl-esd-secureoraclecomedgekeynet CNAME e54 19216816 1941651304 dns Standard query A wwwdownloadwindowsupdatecom 1941651304 19216816 dns Standard query response CNAME wwwdownloadwindowsupdatensatcnet CNAME maindl http://www.secuobs.com/revue/news/541201.shtmlhttp://www.secuobs.com/revue/news/541201.shtml Secuobs.com : 2014-09-30 23:04:16 - pcapr updates - by ponnyslakteri http, tcp 94 packets, 33 KB 17216244207 17216244209 http GET 000c29dd215epng ver 1 typ pgv rnd yjmFMwnLdqa3 arf ugML acc 1 sid 48204983 17216244209 17216244207 http HTTP 11 200 OK 17216244208 17216244209 http GET 000c29253a54png ver 1 typ pgv rnd yjmFMwnLdqa3 arf Vrvq acc 1 sid 48204983 17216244209 17216244208 http HTTP 11 200 OK http://www.secuobs.com/revue/news/537743.shtmlhttp://www.secuobs.com/revue/news/537743.shtml Secuobs.com : 2014-09-23 23:44:46 - pcapr updates - by nos 6 packets, 492 bytes 0a 76 ff 0c 8d 60 00 90 d0 00 00 00 0x88b5 Ethernet II 0a 76 ff 0c 8d 60 00 90 d0 00 00 00 0x88b5 Ethernet II 0a 76 ff 0c 8d 60 00 90 d0 00 00 00 0x88b5 Ethernet II 0a 76 ff 0c 8d 60 00 90 d0 00 00 00 0x88b5 Ethernet II http://www.secuobs.com/revue/news/536462.shtmlhttp://www.secuobs.com/revue/news/536462.shtml Secuobs.com : 2014-09-23 22:09:32 - pcapr updates - by vibchhabra http, http xml, tcp 10 packets, 2 KB 127011 127011 tcp 40189 80 SYN Seq 0 Win 43690 Len 0 MSS 65495 SACK_PERM 1 TSV 17656075 TSER 0 127011 127011 tcp 80 40189 SYN, ACK Seq 0 Ack 1 Win 43690 Len 0 MSS 65495 SACK_PERM 1 TSV 1765 127011 127011 tcp 40189 80 ACK Seq 1 Ack 1 Win 44032 Len 0 TSV 17656075 TSER 17656075 127011 127011 http xml POST drupal xmlrpcphp HTTP 11 http://www.secuobs.com/revue/news/536449.shtmlhttp://www.secuobs.com/revue/news/536449.shtml Secuobs.com : 2014-09-21 19:37:53 - pcapr updates - by nos 7 packets, 670 bytes 06 05 04 03 02 01 01 02 03 04 05 06 0x88c8 PRI 0 CFI 0 ID 1 06 05 04 03 02 01 01 02 03 04 05 06 0x88c8 PRI 0 CFI 0 ID 1 06 05 04 03 02 01 01 02 03 04 05 06 0x88c8 PRI 0 CFI 0 ID 1 06 05 04 03 02 01 01 02 03 04 05 06 0x88c8 PRI 0 CFI 0 ID 1 http://www.secuobs.com/revue/news/535901.shtmlhttp://www.secuobs.com/revue/news/535901.shtml Secuobs.com : 2014-09-21 19:37:53 - pcapr updates - by nos icmp, isup itu , m2pa, mgcp, mtp3mg int itu , sctp, sip 437 packets, 56 KB 192168120 192168155 icmp Destination unreachable Port unreachable 192168155 192168120 mgcp RSIP 1 dummy0 192168155 2427 MGCP 10 192168120 192168155 icmp Destination unreachable Port unreachable 192168155 192168120 sctp INIT http://www.secuobs.com/revue/news/535900.shtmlhttp://www.secuobs.com/revue/news/535900.shtml Secuobs.com : 2014-09-21 19:37:53 - pcapr updates - by nos gsmtap, icmp, tcp 184 packets, 25 KB 127001 127001 gsmtap 127001 127001 gsmtap 127001 127001 gsmtap 127001 127001 gsmtap http://www.secuobs.com/revue/news/535899.shtmlhttp://www.secuobs.com/revue/news/535899.shtml Secuobs.com : 2014-09-21 19:37:53 - pcapr updates - by nos bicc sdp 1 packet, 370 bytes 19216802 19216801 bicc sdp IAM CIC 1 , with session description http://www.secuobs.com/revue/news/535898.shtmlhttp://www.secuobs.com/revue/news/535898.shtml Secuobs.com : 2014-09-21 19:37:53 - pcapr updates - by nos x2ap 2 packets, 352 bytes 192168150 192168151 x2ap id-handoverPreparation Malformed Packet 192168151 192168150 x2ap id-handoverPreparation Malformed Packet http://www.secuobs.com/revue/news/535897.shtmlhttp://www.secuobs.com/revue/news/535897.shtml Secuobs.com : 2014-09-21 19:37:53 - pcapr updates - by nos udp 22 packets, 5 KB 1 1 udp Source port 56523 Destination port 61616 1 1 udp Source port 61616 Destination port 56523 1 1 udp Source port 59507 Destination port 61616 1 1 udp Source port 61616 Destination port 59507 http://www.secuobs.com/revue/news/535896.shtmlhttp://www.secuobs.com/revue/news/535896.shtml Secuobs.com : 2014-09-21 19:37:53 - pcapr updates - by nos bgp, tcp 56 packets, 6 KB 192168173 1921681201 tcp 31180 179 SYN Seq 0 Win 16384 Len 0 MSS 1460 SACK_PERM 1 WS 3 TSV 4036198372 1921681201 192168173 tcp 179 31180 SYN, ACK Seq 0 Ack 1 Win 16384 Len 0 MSS 1460 WS 0 TSV 5248540 TSE 192168173 1921681201 tcp 31180 179 ACK Seq 1 Ack 1 Win 16384 Len 0 TSV 4036198372 TSER 5248540 192168173 1921681201 bgp OPEN Message http://www.secuobs.com/revue/news/535895.shtmlhttp://www.secuobs.com/revue/news/535895.shtml Secuobs.com : 2014-09-21 19:37:53 - pcapr updates - by nos ip 443 packets, 69 KB 102328213 102328223 ip ISO Internet Protocol 0x50 102328213 102328223 ip ISO Internet Protocol 0x50 102328223 102328213 ip ISO Internet Protocol 0x50 102328213 102328223 ip ISO Internet Protocol 0x50 http://www.secuobs.com/revue/news/535894.shtmlhttp://www.secuobs.com/revue/news/535894.shtml Secuobs.com : 2014-09-21 19:37:53 - pcapr updates - by nos icmp, udp 155 packets, 12 KB 127001 127001 udp Source port 7777 Destination port 23000 127001 127001 icmp Destination unreachable Port unreachable 127001 127001 udp Source port 7777 Destination port 23000 127001 127001 icmp Destination unreachable Port unreachable http://www.secuobs.com/revue/news/535893.shtmlhttp://www.secuobs.com/revue/news/535893.shtml Secuobs.com : 2014-09-21 19:10:58 - pcapr updates - by nos homeplug, igmp 21 packets, 2 KB 00 00 00 00 00 00 ff ff ff ff ff ff 0x88e1 Ethernet II 4c 60 de 8d eb 4c 00 00 00 00 00 00 0x88e1 Ethernet II 4c 60 de 8d eb 4d 00 00 00 00 00 00 0x88e1 Ethernet II 19216811 224001 igmp V2 Membership Query, general http://www.secuobs.com/revue/news/535891.shtmlhttp://www.secuobs.com/revue/news/535891.shtml Secuobs.com : 2014-09-21 19:10:58 - pcapr updates - by nos gtp 1 packet, 442 bytes 102531664 18415162105 gtp SGSN context response http://www.secuobs.com/revue/news/535890.shtmlhttp://www.secuobs.com/revue/news/535890.shtml Secuobs.com : 2014-09-21 19:10:58 - pcapr updates - by nos ssl, tcp, tlsv11 49 packets, 36 KB 192168179 69648189 tcp 36564 443 SYN, ECN, CWR Seq 0 Win 29200 Len 0 MSS 1460 SACK_PERM 1 TSV 25927 69648189 192168179 tcp 443 36564 SYN, ACK, ECN Seq 0 Ack 1 Win 14480 Len 0 MSS 1460 SACK_PERM 1 TSV 192168179 69648189 tcp 36564 443 ACK Seq 1 Ack 1 Win 29312 Len 0 TSV 259275945 TSER 893989237 192168179 69648189 ssl Client Hello http://www.secuobs.com/revue/news/535889.shtmlhttp://www.secuobs.com/revue/news/535889.shtml Secuobs.com : 2014-09-21 19:10:58 - pcapr updates - by nos udp 143 packets, 26 KB 192168179 239111 udp Source port 43444 Destination port 8472 192168179 239111 udp Source port 40792 Destination port 8472 192168179 239111 udp Source port 53678 Destination port 8472 192168179 239111 udp Source port 53678 Destination port 8472 http://www.secuobs.com/revue/news/535888.shtmlhttp://www.secuobs.com/revue/news/535888.shtml Secuobs.com : 2014-09-21 19:10:58 - pcapr updates - by nos 52 packets, 6 KB http://www.secuobs.com/revue/news/535887.shtmlhttp://www.secuobs.com/revue/news/535887.shtml Secuobs.com : 2014-09-20 11:28:12 - pcapr updates - by hmfarooqbutt tftp 100 packets, 30 KB 19216801 192168013 tftp Write Request, File rfc1350txt 000, Transfer type octet 000 192168013 19216801 tftp Acknowledgement, Block 0 19216801 192168013 tftp Data Packet, Block 1 192168013 19216801 tftp Acknowledgement, Block 1 http://www.secuobs.com/revue/news/535826.shtmlhttp://www.secuobs.com/revue/news/535826.shtml Secuobs.com : 2014-09-18 22:20:32 - pcapr updates - by vibchhabra http, tcp 9 packets, 2 KB 281898454 8543111159 tcp 36263 80 SYN Seq 0 Win 8192 Len 0 8543111159 281898454 tcp 80 36263 SYN, ACK Seq 0 Ack 1 Win 8192 Len 0 281898454 8543111159 tcp 36263 80 ACK Seq 1 Ack 1 Win 8192 Len 0 281898454 8543111159 http GET xmlrpcphp HTTP 11 http://www.secuobs.com/revue/news/535606.shtmlhttp://www.secuobs.com/revue/news/535606.shtml Secuobs.com : 2014-09-12 23:27:38 - pcapr updates - by harrybrian cotp, lldp, tcp 34 packets, 3 KB 00 0c 29 15 02 dd 01 80 c2 00 00 0e lldp Chassis Id win-ktdodndsgqb Port Id port-001 TTL 20 00 1c 06 13 26 e7 01 80 c2 00 00 0e lldp Chassis Id plcxb1d0ed Port Id port-001 TTL 20 1921683237 19216838 cotp DT TPDU 0 EOT 19216838 1921683237 cotp DT TPDU 0 EOT http://www.secuobs.com/revue/news/534744.shtmlhttp://www.secuobs.com/revue/news/534744.shtml Secuobs.com : 2014-09-10 06:10:20 - pcapr updates - by kuolaisha tcp 65 packets, 6 KB 19216875111 19216875112 tcp 57281 4000 SYN Seq 0 Win 5840 Len 0 MSS 1460 SACK_PERM 1 TSV 274082348 TSER 19216875112 19216875111 tcp 4000 57281 SYN, ACK Seq 0 Ack 1 Win 4096 Len 0 MSS 1460 19216875111 19216875112 tcp 57281 4000 ACK Seq 1 Ack 1 Win 5840 Len 0 19216875111 19216875112 tcp 57285 4000 SYN Seq 0 Win 5840 Len 0 MSS 1460 SACK_PERM 1 TSV 274085098 TSER http://www.secuobs.com/revue/news/533926.shtmlhttp://www.secuobs.com/revue/news/533926.shtml Secuobs.com : 2014-09-05 07:50:34 - pcapr updates - by panwarrahul ip, sip, sip sdp 62 packets, 50 KB 192168447 1921684243 sip sdp Request INVITE sip 205 1921684243 5060, with session description 1921684243 192168447 sip Status 100 Trying 1921684243 192168447 sip Status 407 Proxy Authentication Required 192168447 1921684243 sip Request ACK sip 205 1921684243 5060 http://www.secuobs.com/revue/news/533137.shtmlhttp://www.secuobs.com/revue/news/533137.shtml Secuobs.com : 2014-09-03 20:54:37 - pcapr updates - by manojpaul91 http 1 packet, 297 bytes 1001 133 1001 140 http GET HTTP 11 http://www.secuobs.com/revue/news/532861.shtmlhttp://www.secuobs.com/revue/news/532861.shtml Secuobs.com : 2014-08-29 17:23:55 - pcapr updates - by tamaboss dns, eapol, http, mdns, ssl, tcp, tlsv1, turn channel 394 packets, 127 KB 36 23 ba b3 ad c9 34 23 ba b3 ad c9 0x886c Ethernet II 36 23 ba b3 ad c9 34 23 ba b3 ad c9 0x886c Ethernet II 36 23 ba b3 ad c9 34 23 ba b3 ad c9 0x886c Ethernet II 36 23 ba b3 ad c9 34 23 ba b3 ad c9 0x886c Ethernet II http://www.secuobs.com/revue/news/532186.shtmlhttp://www.secuobs.com/revue/news/532186.shtml Secuobs.com : 2014-08-25 01:27:04 - pcapr updates - by fahadabdulazizalmutairi tcp 1 packet, 575 bytes 10116116114 1014715 tcp 59427 9090 PSH, ACK Seq 1 Ack 1 Win 16425 Len 481 http://www.secuobs.com/revue/news/531295.shtmlhttp://www.secuobs.com/revue/news/531295.shtml Secuobs.com : 2014-08-20 21:40:28 - pcapr updates - by skhouangsathiene diameter, dns 8 packets, 4 KB 1661811448 20428228182 diameter cmd 3GPP-Authentication-InformationRequest 318 flags RP-- appl 3GPP S6a S6d 167 20428228182 1661811448 diameter cmd 3GPP-Authentication-InformationAnswer 318 flags -P-- appl 3GPP S6a S6d 1677 1661811448 20428229230 diameter cmd 3GPP-Update-LocationRequest 316 flags RP-- appl 3GPP S6a S6d 16777251 h2h 20428229230 1661811448 diameter cmd 3GPP-Update-LocationAnswer 316 flags -P-- appl 3GPP S6a S6d 16777251 h2h 4 http://www.secuobs.com/revue/news/530751.shtmlhttp://www.secuobs.com/revue/news/530751.shtml Secuobs.com : 2014-08-20 21:21:51 - pcapr updates - by skhouangsathiene ULA tcp 4 packets, 3 KB 1018124150 1096127132 tcp 65512 3869 PSH, ACK Seq 1 Ack 1 Win 65535 Len 452 1096127132 1018124151 tcp 3869 65512 PSH, ACK Seq 1 Ack 1 Win 65535 Len 528 1018124151 1096127132 tcp 65512 3869 PSH, ACK Seq 1 Ack 529 Win 65535 Len 1076 1096127132 1018124150 tcp TCP ACKed lost segment 3869 65512 PSH, ACK Seq 529 Ack 1529 Win 65535 Len http://www.secuobs.com/revue/news/530743.shtmlhttp://www.secuobs.com/revue/news/530743.shtml Secuobs.com : 2014-08-19 06:16:02 - pcapr updates - by veerendra udp 1 packet, 505 bytes 192168140 192168130 udp Source port 4000 Destination port 40392 http://www.secuobs.com/revue/news/530444.shtmlhttp://www.secuobs.com/revue/news/530444.shtml Secuobs.com : 2014-08-19 06:16:02 - pcapr updates - by veerendra udp 1 packet, 454 bytes 192168120 192168130 udp Source port 2000 Destination port 40392 http://www.secuobs.com/revue/news/530443.shtmlhttp://www.secuobs.com/revue/news/530443.shtml Secuobs.com : 2014-08-19 06:00:05 - pcapr updates - by veerendra tcp 1 packet, 496 bytes 192168120 192168110 tcp 2000 1000 Seq 1 Win 89 Len 360 http://www.secuobs.com/revue/news/530441.shtmlhttp://www.secuobs.com/revue/news/530441.shtml Secuobs.com : 2014-08-12 15:58:47 - pcapr updates - by urykhy http 418 packets, 255 KB 1247811375 61172207237 http GET 1134233684 50 40007761851 1 HTTP 11 1247811375 222732854 http GET thumbnail 771bf8b7jw1dz0dtckfhmjjpg HTTP 11 1247811375 61172207237 http GET 1708942053 50 5643161149 1 HTTP 11 1247811375 222732854 http GET thumbnail 61fd0433jw1dz0feoxwg7jjpg HTTP 11 http://www.secuobs.com/revue/news/529480.shtmlhttp://www.secuobs.com/revue/news/529480.shtml Secuobs.com : 2014-08-10 13:45:50 - pcapr updates - by kadirkoyici arp, tcp 4 packets, 286 bytes 00 50 56 c0 00 08 ff ff ff ff ff ff arp Who has 192168199143 Tell 1921681991 00 0c 29 e9 50 1b 00 50 56 c0 00 08 arp 192168199143 is at 00 0c 29 e9 50 1b 1921681991 192168199143 tcp 3005 6845 PSH, ACK Seq 1 Ack 1 Win 256 Len 6 192168199143 1921681991 tcp 6845 3005 ACK Seq 1 Ack 7 Win 229 Len 0 http://www.secuobs.com/revue/news/529161.shtmlhttp://www.secuobs.com/revue/news/529161.shtml Secuobs.com : 2014-08-10 13:45:50 - pcapr updates - by kadirkoyici 14 packets, 866 bytes http://www.secuobs.com/revue/news/529160.shtmlhttp://www.secuobs.com/revue/news/529160.shtml Secuobs.com : 2014-08-05 14:06:17 - pcapr updates - by arsenya cflow netflow v9 template and data udp 1 packet, 782 bytes 10241925 101698210 udp Source port 62347 Destination port 9995 http://www.secuobs.com/revue/news/528429.shtmlhttp://www.secuobs.com/revue/news/528429.shtml Secuobs.com : 2014-08-01 01:21:31 - pcapr updates - by asciimoo tcp 24 packets, 3 KB 127001 127001 tcp 50934 8888 SYN Seq 0 Win 43690 Len 0 MSS 65495 SACK_PERM 1 TSV 638761188 TSE 127001 127001 tcp 8888 50934 SYN, ACK Seq 0 Ack 1 Win 43690 Len 0 MSS 65495 SACK_PERM 1 TSV 63 127001 127001 tcp 50934 8888 ACK Seq 1 Ack 1 Win 44032 Len 0 TSV 638761188 TSER 638761188 127001 127001 tcp 50934 8888 PSH, ACK Seq 1 Ack 1 Win 44032 Len 92 TSV 638761188 TSER 63876118 http://www.secuobs.com/revue/news/527875.shtmlhttp://www.secuobs.com/revue/news/527875.shtml Secuobs.com : 2014-07-30 08:07:36 - pcapr updates - by veerendra tcp 1 packet, 502 bytes 2001 20 2001 10 tcp 2000 1000 ACK Seq 1 Ack 1 Win 4096 Len 380 http://www.secuobs.com/revue/news/527505.shtmlhttp://www.secuobs.com/revue/news/527505.shtml Secuobs.com : 2014-07-26 10:06:02 - pcapr updates - by zdwillie http, ssl, tcp 30 packets, 14 KB 10801 17319412782 tcp 43953 443 SYN Seq 0 Win 14600 Len 0 MSS 1460 SACK_PERM 1 TSV 4294966407 TSER 17319412782 10801 tcp 443 43953 SYN, ACK Seq 0 Ack 1 Win 65535 Len 0 10801 17319412782 tcp 43953 443 ACK Seq 1 Ack 1 Win 14600 Len 0 10801 17319412782 ssl Client Hello http://www.secuobs.com/revue/news/527058.shtmlhttp://www.secuobs.com/revue/news/527058.shtml Secuobs.com : 2014-07-16 17:58:51 - pcapr updates - by afenkart ip, nfs 210 packets, 195 KB 19216813141 192168131 nfs V2 GETATTR Call, FH 0x33e47e33 192168131 19216813141 nfs V2 GETATTR Reply Call In 1 19216813141 192168131 nfs V2 GETATTR Call, FH 0xd9207992 192168131 19216813141 nfs V2 GETATTR Reply Call In 3 http://www.secuobs.com/revue/news/525466.shtmlhttp://www.secuobs.com/revue/news/525466.shtml Secuobs.com : 2014-07-16 10:32:55 - pcapr updates - by afenkart ip, nfs 296 packets, 281 KB 19216813141 192168131 nfs V2 READ Call, FH 0x8ec775a4 Offset 286720 Count 4096 TotalCount 4096 192168131 19216813141 ip Fragmented IP protocol proto UDP 0x11, off 0, ID c7a0 192168131 19216813141 ip Fragmented IP protocol proto UDP 0x11, off 1480, ID c7a0 192168131 19216813141 nfs V2 READ Reply Call In 1 http://www.secuobs.com/revue/news/525388.shtmlhttp://www.secuobs.com/revue/news/525388.shtml Secuobs.com : 2014-07-09 16:16:20 - pcapr updates - by deniz tcp 1 packet, 106 bytes 103402 1787914222 tcp 54754 80 SYN Seq 0 Win 8192 Len 0 MSS 1464 WS 2 SACK_PERM 1 http://www.secuobs.com/revue/news/524391.shtmlhttp://www.secuobs.com/revue/news/524391.shtml Secuobs.com : 2014-07-09 07:12:44 - pcapr updates - by steve Client requesting DHCP lease, but seems to not recognise that it's being offered dhcp 16 packets, 6 KB 0000 255255255255 dhcp DHCP Discover - Transaction ID 0x7e7cc2fb 192168130154 255255255255 dhcp DHCP Offer - Transaction ID 0x7e7cc2fb 0000 255255255255 dhcp DHCP Discover - Transaction ID 0x7e7cc2fb 192168130154 255255255255 dhcp DHCP Offer - Transaction ID 0x7e7cc2fb http://www.secuobs.com/revue/news/524265.shtmlhttp://www.secuobs.com/revue/news/524265.shtml Secuobs.com : 2014-06-29 05:45:16 - pcapr updates - by crashbit arp 91 packets, 16 KB 60 21 c0 42 95 43 ff ff ff ff ff ff arp Who has 19216801 Tell 192168031 60 21 c0 42 95 43 ff ff ff ff ff ff arp Who has 19216801 Tell 192168031 60 21 c0 42 95 43 ff ff ff ff ff ff arp Who has 19216801 Tell 192168031 60 21 c0 42 95 43 ff ff ff ff ff ff arp Who has 19216801 Tell 192168031 http://www.secuobs.com/revue/news/522712.shtmlhttp://www.secuobs.com/revue/news/522712.shtml Secuobs.com : 2014-06-29 05:45:16 - pcapr updates - by crashbit arp, icmpv6 22 packets, 1 KB 60 21 c0 42 95 43 ff ff ff ff ff ff arp Who has 19216801 Tell 192168031 60 21 c0 42 95 43 ff ff ff ff ff ff arp Who has 19216801 Tell 192168031 fe80 6221 c0ff fe42 9543 ff02 2 icmpv6 Router solicitation 60 21 c0 42 95 43 ff ff ff ff ff ff arp Who has 19216801 Tell 192168031 http://www.secuobs.com/revue/news/522711.shtmlhttp://www.secuobs.com/revue/news/522711.shtml Secuobs.com : 2014-06-27 02:04:22 - pcapr updates - by fry_rob_g http, tcp 273 packets, 139 KB 101924811 1019248140 tcp 29866 7101 PSH, ACK Seq 1 Ack 1 Win 65535 Len 178 102230206 20520313132 tcp 51597 80 ACK Seq 1 Ack 1 Win 65535 Len 0 102230206 20520313132 tcp 51597 80 ACK Seq 1 Ack 2721 Win 65535 Len 0 102230206 20520313132 tcp 51597 80 ACK Seq 1 Ack 3483 Win 65535 Len 0 http://www.secuobs.com/revue/news/522487.shtmlhttp://www.secuobs.com/revue/news/522487.shtml Secuobs.com : 2014-06-19 10:42:18 - pcapr updates - by desmond rtsp, rtsp xml, tcp 262 packets, 107 KB 172251130 17225555 tcp 554 53796 SYN, ACK Seq 0 Ack 0 Win 8192 Len 0 WS 8 SACK_PERM 1 172251130 17225555 rtsp Reply RTSP 10 401 Unauthorized 17225555 172251130 tcp TCP Port numbers reused 53796 554 SYN Seq 0 Win 65535 Len 0 MSS 1460 WS 1 17225555 172251130 tcp 53796 554 ACK Seq 1 Ack 1 Win 81920 Len 0 http://www.secuobs.com/revue/news/519689.shtmlhttp://www.secuobs.com/revue/news/519689.shtml Secuobs.com : 2014-06-19 08:50:01 - pcapr updates - by abhaysapru007 CSFB sms MT sctp 30 packets, 3 KB 12112634 10199063 sctp DATA 10199063 12112634 sctp SACK DATA 12112634 10199063 sctp SACK DATA 12112634 10199063 sctp DATA http://www.secuobs.com/revue/news/519676.shtmlhttp://www.secuobs.com/revue/news/519676.shtml Secuobs.com : 2014-06-12 11:39:34 - pcapr updates - by davidevicedomini bootp, browser 66 packets, 10 KB 00 60 2b 06 67 77 01 60 2b ff ff 01 0x8819 Cirrus Cobranet Packet 1721912143 17219121255 browser Local Master Announcement EXPO2015-GEWS01, Workstation, Server, NT Workstation, 00 60 2b 06 67 77 01 60 2b ff ff 01 0x8819 Cirrus Cobranet Packet 00 60 2b 06 67 77 01 60 2b ff ff 01 0x8819 Cirrus Cobranet Packet http://www.secuobs.com/revue/news/518500.shtmlhttp://www.secuobs.com/revue/news/518500.shtml Secuobs.com : 2014-06-02 16:46:41 - pcapr updates - by temp ssl, tcp, tlsv11 36 packets, 20 KB 106067182 7412513199 tcp 51593 443 SYN Seq 0 Win 14600 Len 0 MSS 1460 SACK_PERM 1 TSV 114957379 TSER 7412513199 106067182 tcp 443 51593 SYN, ACK Seq 0 Ack 1 Win 42540 Len 0 MSS 1430 SACK_PERM 1 TSV 4856 106067182 7412513199 tcp 51593 443 ACK Seq 1 Ack 1 Win 14656 Len 0 TSV 114957382 TSER 485602856 106067182 7412513199 ssl Client Hello http://www.secuobs.com/revue/news/516647.shtmlhttp://www.secuobs.com/revue/news/516647.shtml Secuobs.com : 2014-06-02 16:46:41 - pcapr updates - by kaspars smpp, tcp 113 packets, 12 KB 100451 213175749 smpp SMPP Enquire_link 213175749 100451 smpp SMPP Enquire_link - resp Ok 100451 213175749 tcp 41270 7777 ACK Seq 17 Ack 17 Win 353 Len 0 TSV 1745577687 TSER 4036975744 100451 213175749 smpp SMPP Enquire_link http://www.secuobs.com/revue/news/516646.shtmlhttp://www.secuobs.com/revue/news/516646.shtml Secuobs.com : 2014-05-31 19:49:30 - pcapr updates - by xstorm007x tcp 18 packets, 2 KB 100215 100824 tcp 33309 5151 SYN Seq 0 Win 14600 Len 0 MSS 1460 SACK_PERM 1 TSV 23318373 TSER 100824 100215 tcp 5151 33309 SYN, ACK Seq 0 Ack 1 Win 65535 Len 0 MSS 1460 100215 100824 tcp 33309 5151 ACK Seq 1 Ack 1 Win 14600 Len 0 100824 100215 tcp 5151 33309 SYN, ACK Seq 0 Ack 1 Win 65535 Len 0 MSS 1460 http://www.secuobs.com/revue/news/516478.shtmlhttp://www.secuobs.com/revue/news/516478.shtml Secuobs.com : 2014-05-27 08:08:48 - pcapr updates - by nnt icmp 82 packets, 7 KB 1721619 1921681041 icmp Echo ping request id 0x3d70, seq be le 13 3328, ttl 1 1921681041 1721619 icmp Echo ping reply id 0x3d70, seq be le 13 3328, ttl 255 1721619 1921681041 icmp Echo ping request id 0x3d70, seq be le 15 3840, ttl 1 1921681041 1721619 icmp Echo ping reply id 0x3d70, seq be le 15 3840, ttl 255 http://www.secuobs.com/revue/news/515569.shtmlhttp://www.secuobs.com/revue/news/515569.shtml Secuobs.com : 2014-05-16 14:32:05 - pcapr updates - by christiaanschade 1 packet, 110 bytes http://www.secuobs.com/revue/news/513934.shtmlhttp://www.secuobs.com/revue/news/513934.shtml Secuobs.com : 2014-05-13 18:33:16 - pcapr updates - by gjmartino tcp 138 packets, 11 KB 1051230 101023197 tcp 57325 7 SYN Seq 0 Win 8192 Len 0 MSS 1380 WS 8 SACK_PERM 1 1051230 101023197 tcp 57325 7 SYN Seq 0 Win 8192 Len 0 MSS 1380 WS 8 SACK_PERM 1 1051230 101023197 tcp 57325 7 SYN Seq 0 Win 8192 Len 0 MSS 1380 SACK_PERM 1 1051230 101023199 tcp 57327 7 SYN Seq 0 Win 8192 Len 0 MSS 1380 WS 8 SACK_PERM 1 http://www.secuobs.com/revue/news/513327.shtmlhttp://www.secuobs.com/revue/news/513327.shtml Secuobs.com : 2014-05-08 00:26:11 - pcapr updates - by amaoz ssh, tcp 180 packets, 14 KB 172168230 17216891 tcp 45298 22 SYN Seq 0 Win 32768 Len 0 17216891 172168230 tcp 22 45298 SYN, ACK Seq 0 Ack 1 Win 32768 Len 0 172168230 17216891 tcp 45298 22 ACK Seq 1 Ack 1 Win 32768 Len 0 172168230 17216891 tcp 22081 22 SYN Seq 0 Win 32768 Len 0 http://www.secuobs.com/revue/news/512402.shtmlhttp://www.secuobs.com/revue/news/512402.shtml Secuobs.com : 2014-04-28 01:17:42 - pcapr updates - by tolisdx imf, pop, tcp 215 packets, 131 KB 1722604 38113321 tcp 47359 110 SYN Seq 0 Win 5840 Len 0 MSS 1460 SACK_PERM 1 TSV 5836924 TSER 0 W 38113321 1722604 tcp 110 47359 SYN, ACK Seq 0 Ack 1 Win 5792 Len 0 MSS 1452 SACK_PERM 1 TSV 15210 1722604 38113321 tcp 47359 110 ACK Seq 1 Ack 1 Win 5888 Len 0 TSV 5836960 TSER 152107288 38113321 1722604 pop S OK http://www.secuobs.com/revue/news/510570.shtmlhttp://www.secuobs.com/revue/news/510570.shtml Secuobs.com : 2014-04-25 22:11:22 - pcapr updates - by my_telecom_job bbnn snmp 116 packets, 31 KB 1016976248 10169774 snmp sNMPv2-Trap 136121130 13616311410 1361411931834133 1016976248 101697710 snmp sNMPv2-Trap 136121130 13616311410 1361411931834133 1016976248 10169774 snmp sNMPv2-Trap 136121130 13616311410 1361411931834133 1016976248 101697710 snmp sNMPv2-Trap 136121130 13616311410 1361411931834133 http://www.secuobs.com/revue/news/510396.shtmlhttp://www.secuobs.com/revue/news/510396.shtml Secuobs.com : 2014-04-24 13:56:50 - pcapr updates - by infrastation PGM with encapsulated ZMTP 10 ZeroMQ Message Transport Protocol as sent by th udp 15 packets, 4 KB 100045 239255016 udp Source port 33280 Destination port 5563 100045 239255016 udp Source port 33280 Destination port 5563 100045 239255016 udp Source port 33280 Destination port 5563 100045 239255016 udp Source port 33280 Destination port 5563 http://www.secuobs.com/revue/news/510095.shtmlhttp://www.secuobs.com/revue/news/510095.shtml Secuobs.com : 2014-04-23 12:00:20 - pcapr updates - by marcmeulensteen Avalanche HTTP_GET session arp, http, tcp 12 packets, 2 KB 00 15 17 a7 73 3b ff ff ff ff ff ff arp Gratuitous ARP for 19216812 Request 00 15 17 a7 73 3b ff ff ff ff ff ff arp Who has 19216811 Tell 19216812 00 15 17 a7 73 39 ff ff ff ff ff ff arp Gratuitous ARP for 19216811 Request 19216812 19216811 tcp 21287 80 SYN Seq 0 Win 32768 Len 0 MSS 1460 http://www.secuobs.com/revue/news/509828.shtmlhttp://www.secuobs.com/revue/news/509828.shtml Secuobs.com : 2014-04-23 07:31:37 - pcapr updates - by tack http revelsystemscom website redirect issue dns, http, tcp, tlsv1 220 packets, 88 KB 5097233188 192168225 tcp 80 57804 FIN, ACK Seq 1 Ack 1 Win 123 Len 0 192168225 5097233188 tcp 57804 80 ACK Seq 1 Ack 2 Win 16384 Len 0 5097233188 192168225 tcp 80 57804 FIN, ACK Seq 1 Ack 1 Win 123 Len 0 192168225 5097233188 tcp TCP Dup ACK 2 1 57804 80 ACK Seq 1 Ack 2 Win 16384 Len 0 http://www.secuobs.com/revue/news/509725.shtmlhttp://www.secuobs.com/revue/news/509725.shtml Secuobs.com : 2014-04-23 07:31:37 - pcapr updates - by tack http revelupcom capture issue with redirect website 301 error weird see it http, tcp, tlsv1 218 packets, 103 KB 192168225 541864427 tcp TCP segment of a reassembled PDU 192168225 541864427 http GET HTTP 11 1741292326 192168225 tcp 80 58003 SYN, ACK Seq 0 Ack 0 Win 14480 Len 0 MSS 1460 SACK_PERM 1 TSV 21851 541864427 192168225 tcp 80 57989 ACK Seq 1 Ack 1676 Win 272 Len 0 TSV 377668945 TSER 395826657 http://www.secuobs.com/revue/news/509724.shtmlhttp://www.secuobs.com/revue/news/509724.shtml Secuobs.com : 2014-04-22 17:09:24 - pcapr updates - by elblaireau85 jabber xml, tcp 37 packets, 6 KB 192168010 20868163220 tcp 58340 5222 SYN Seq 0 Win 14600 Len 0 MSS 1460 SACK_PERM 1 TSV 429845 TSER 0 192168010 20868163220 tcp 58341 5222 SYN Seq 0 Win 14600 Len 0 MSS 1460 SACK_PERM 1 TSV 429845 TSER 0 20868163220 192168010 tcp 5222 58340 SYN, ACK Seq 0 Ack 1 Win 5792 Len 0 MSS 1460 SACK_PERM 1 TSV 2550 192168010 20868163220 tcp 58340 5222 ACK Seq 1 Ack 1 Win 14624 Len 0 TSV 429883 TSER 2550330309 http://www.secuobs.com/revue/news/509607.shtmlhttp://www.secuobs.com/revue/news/509607.shtml Secuobs.com : 2014-04-18 20:26:21 - pcapr updates - by gmbh78 EtherType ----- Linux Cookied dns, http, igmp, tcp 18 packets, 3 KB 17812611486 2176914317 tcp 29010 80 RST, ACK Seq 1 Ack 1 Win 0 Len 0 17812611486 8220920016 dns Standard query A teredoipv6microsoftcom 17812611486 8220920017 dns Standard query A teredoipv6microsoftcom 8220920016 17812611486 dns Standard query response CNAME teredoipv6microsoftcomnsatcnet A 157561442 http://www.secuobs.com/revue/news/509182.shtmlhttp://www.secuobs.com/revue/news/509182.shtml Secuobs.com : 2014-04-18 15:59:45 - pcapr updates - by qixuanbjzhou VEPA_VDP lldp 23 packets, 3 KB 00 10 94 cd 00 05 01 80 c2 00 00 00 0x8940 PRI 7 CFI 0 ID 200 00 10 94 de ad 02 01 80 c2 00 00 00 0x8940 PRI 0 CFI 0 ID 200 00 10 94 de ad 02 01 80 c2 00 00 00 0x8940 PRI 0 CFI 0 ID 200 00 10 94 cd 00 05 01 80 c2 00 00 00 0x8940 PRI 7 CFI 0 ID 200 http://www.secuobs.com/revue/news/509153.shtmlhttp://www.secuobs.com/revue/news/509153.shtml Secuobs.com : 2014-04-16 06:12:28 - pcapr updates - by 731990937 has tags arp, oicq, ssdp, stp, tcp, tlsv1, udp 16 packets, 3 KB 44 87 fc c4 c3 b1 ff ff ff ff ff ff arp Who has 19216821 Tell 192168234 1921682231 141730115 udp Source port 49152 Destination port 8000 141730115 1921682231 udp Source port 8000 Destination port 49152 ec 44 76 89 10 0d 01 80 c2 00 00 00 stp Conf Root 32768 3 ec 44 76 89 10 00 Cost 0 Port 0x800d http://www.secuobs.com/revue/news/508492.shtmlhttp://www.secuobs.com/revue/news/508492.shtml Secuobs.com : 2014-04-16 06:12:28 - pcapr updates - by 731990937 sdfds arp, dhcpv6, http, oicq, ssdp, stp, tcp, tlsv1 52 packets, 5 KB 18417390195 1921682231 http Continuation or non-HTTP traffic 1921682231 542452420 tcp 51372 80 FIN, ACK Seq 1 Ack 1 Win 1021 Len 0 1921682231 542452420 tcp 51373 80 FIN, ACK Seq 1 Ack 1 Win 1024 Len 0 1921682231 18417390195 http Continuation or non-HTTP traffic http://www.secuobs.com/revue/news/508491.shtmlhttp://www.secuobs.com/revue/news/508491.shtml Secuobs.com : 2014-04-10 01:51:15 - pcapr updates - by edwardhoch pcap1 ssl, tcp, tlsv11 57 packets, 38 KB 1050213 105048 tcp 65021 443 SYN Seq 0 Win 65535 Len 0 MSS 1460 WS 4 TSV 201802690 TSER 0 SACK_ 105048 1050213 tcp 443 65021 SYN, ACK Seq 0 Ack 1 Win 65535 Len 0 MSS 1320 WS 4 TSV 2616515933 1050213 105048 tcp 65021 443 ACK Seq 1 Ack 1 Win 132096 Len 0 TSV 201802851 TSER 2616515933 1050213 105048 ssl Client Hello http://www.secuobs.com/revue/news/507398.shtmlhttp://www.secuobs.com/revue/news/507398.shtml Secuobs.com : 2014-04-09 18:13:49 - pcapr updates - by carlosgarciabraschi 7 packets, 553 bytes 40 00 40 06 fc 20 45 00 00 34 7a 15 0x0a01 Ethernet II 40 00 3b 06 9e f9 45 00 00 34 dc 3c 0x0a8a Ethernet II 40 00 3b 06 9e f8 45 00 00 34 dc 3d 0x0a8a Ethernet II 40 00 40 06 76 36 45 00 00 34 00 00 0x0a01 Ethernet II http://www.secuobs.com/revue/news/507310.shtmlhttp://www.secuobs.com/revue/news/507310.shtml Secuobs.com : 2014-04-03 18:36:36 - pcapr updates - by ipushino tcp, tns 78 packets, 14 KB 19216811 19216814 tcp 2241 1521 SYN Seq 0 Win 5840 Len 0 MSS 1460 SACK_PERM 1 WS 0 19216814 19216811 tcp 1521 2241 SYN, ACK Seq 0 Ack 1 Win 65535 Len 0 MSS 1460 WS 0 SACK_PERM 1 19216811 19216814 tcp 2241 1521 ACK Seq 1 Ack 1 Win 5840 Len 0 19216811 19216814 tns Request, Connect 1 , Connect http://www.secuobs.com/revue/news/506376.shtmlhttp://www.secuobs.com/revue/news/506376.shtml Secuobs.com : 2014-04-01 09:09:23 - pcapr updates - by xproto eastmoney tcp 40 packets, 13 KB 192168248130 1148023029 tcp 49418 1860 SYN Seq 0 Win 32768 Len 0 MSS 1460 WS 0 SACK_PERM 1 1148023029 192168248130 tcp 1860 49418 SYN, ACK Seq 0 Ack 1 Win 64240 Len 0 MSS 1460 192168248130 1148023029 tcp 49418 1860 ACK Seq 1 Ack 1 Win 32768 Len 0 192168248130 1148023029 tcp 49418 1860 PSH, ACK Seq 1 Ack 1 Win 32768 Len 288 http://www.secuobs.com/revue/news/505817.shtmlhttp://www.secuobs.com/revue/news/505817.shtml Secuobs.com : 2014-03-31 00:41:01 - pcapr updates - by tack iPad POS capture from revelupcom arp, dns, http, ssl, stp, tcp, tlsv1, tlsv12 181 packets, 41 KB 68 1c a2 01 32 d5 a8 20 66 21 3b 6f arp Who has 19216822100 Tell 192168221 a8 20 66 21 3b 6f 68 1c a2 01 32 d5 arp 19216822100 is at a8 20 66 21 3b 6f 00 0e 58 18 28 1a 01 80 c2 00 00 00 stp Conf Root 32768 0 00 0e 58 18 28 1a Cost 0 Port 0x8001 6423515148 19216822100 tlsv1 Application Data http://www.secuobs.com/revue/news/505588.shtmlhttp://www.secuobs.com/revue/news/505588.shtml Secuobs.com : 2014-03-31 00:41:01 - pcapr updates - by tack Revel frozen Yogurt POS pcap tracking website data to POS arp, dns, http, ssl, stp, tcp, tlsv12 493 packets, 198 KB 19216822100 192237192141 http GET pos-products frozen-yogurt-pos HTTP 11 00 0e 58 18 28 1a 01 80 c2 00 00 00 stp Conf Root 32768 0 00 0e 58 18 28 1a Cost 0 Port 0x8001 8888 19216822100 dns Standard query response A 192237192141 192237192141 19216822100 tcp 80 63506 ACK Seq 1 Ack 974 Win 33 Len 0 TSV 2123150724 TSER 707365114 http://www.secuobs.com/revue/news/505587.shtmlhttp://www.secuobs.com/revue/news/505587.shtml Secuobs.com : 2014-03-29 07:48:12 - pcapr updates - by atotsularto http, icmp, ssh, tcp 166 packets, 28 KB 1921681110 10331232202 icmp Echo ping request id 0x0001, seq be le 374 30209, ttl 128 1921681110 10331232202 icmp Echo ping request id 0x0001, seq be le 375 30465, ttl 128 1921681110 10331232202 icmp Echo ping request id 0x0001, seq be le 376 30721, ttl 128 1921681110 10331232202 icmp Echo ping request id 0x0001, seq be le 377 30977, ttl 128 http://www.secuobs.com/revue/news/505457.shtmlhttp://www.secuobs.com/revue/news/505457.shtml Secuobs.com : 2014-03-11 20:31:12 - pcapr updates - by wthomson pnio-cm 1 packet, 783 bytes 1921682141 1921682142 pnio-cm Connect request, ARBlockReq, IOCRBlockReq, IOCRBlockReq, ExpectedSubmoduleBlockR http://www.secuobs.com/revue/news/502349.shtmlhttp://www.secuobs.com/revue/news/502349.shtml Secuobs.com : 2014-03-04 08:51:32 - pcapr updates - by ersunil05 ymsg 6 packets, 1 KB 1921681108 66163181175 ymsg Peer To Peer status Default 66163181175 1921681108 ymsg Peer To Peer status Playing Game 1921681108 66163181175 ymsg Message status Offline 66163181175 1921681108 ymsg Message status Away http://www.secuobs.com/revue/news/500940.shtmlhttp://www.secuobs.com/revue/news/500940.shtml Secuobs.com : 2014-03-03 03:28:19 - pcapr updates - by liangxu arp, http, tcp 13 packets, 2 KB 00 1e 67 4d 70 70 ff ff ff ff ff ff arp Gratuitous ARP for 19216814 Request 00 1e 67 4d 70 6f ff ff ff ff ff ff arp Gratuitous ARP for 19216811 Request 00 1e 67 4d 70 6f ff ff ff ff ff ff arp Gratuitous ARP for 19216812 Request 00 1e 67 4d 70 70 ff ff ff ff ff ff arp Gratuitous ARP for 19216815 Request http://www.secuobs.com/revue/news/500709.shtmlhttp://www.secuobs.com/revue/news/500709.shtml Secuobs.com : 2014-03-03 02:31:06 - pcapr updates - by huzd785 LTE S1-MME id-E-RABModify procedure pcap s1ap, s1ap nas-eps 2 packets, 308 bytes 102471110 17229305 s1ap nas-eps id-E-RABModify 17229305 102471110 s1ap id-E-RABModify http://www.secuobs.com/revue/news/500707.shtmlhttp://www.secuobs.com/revue/news/500707.shtml Secuobs.com : 2014-03-01 01:00:49 - pcapr updates - by ankitshakya007 arp 1 packet, 100 bytes 00 03 47 b7 f2 f5 ff ff ff ff ff ff arp Gratuitous ARP for 24612519 Request http://www.secuobs.com/revue/news/500593.shtmlhttp://www.secuobs.com/revue/news/500593.shtml Secuobs.com : 2014-02-27 03:15:24 - pcapr updates - by 3388200285 arp, dns, http, icmp, tcp, tlsv1 269 packets, 32 KB 34 cd be c4 80 ad 3c e0 72 2f a8 3b arp 19216811 is at 34 cd be c4 80 ad 3c e0 72 2f a8 3b ff ff ff ff ff ff arp 19216811 is at 3c e0 72 2f a8 3b duplicate use of 19216811 detected 1921681168 5423671213 tlsv1 Application Data 1921681168 5423671213 tlsv1 TCP Retransmission Application Data http://www.secuobs.com/revue/news/500091.shtmlhttp://www.secuobs.com/revue/news/500091.shtml Secuobs.com : 2014-02-27 03:15:24 - pcapr updates - by 3388200285 arp, dns, http, icmp, mdns, ssl, tcp, tlsv1, tlsv11, tlsv12 467 packets, 76 KB 1921681162 22400251 mdns Standard query response PTR 00HedE11AiPhone di Manuel_iuuml3qu1uslan_udploc fe80 1069 8ff 99a4 dff7 ff02 fb mdns Standard query response PTR 00HedE11AiPhone di Manuel_iuuml3qu1uslan_udploc 1921681162 22400251 mdns Standard query response PTR 00HedE11AiPhone di Manuel_iuuml3qu1uslan_udploc fe80 1069 8ff 99a4 dff7 ff02 fb mdns Standard query response PTR 00HedE11AiPhone di Manuel_iuuml3qu1uslan_udploc http://www.secuobs.com/revue/news/500090.shtmlhttp://www.secuobs.com/revue/news/500090.shtml Secuobs.com : 2014-02-27 03:15:24 - pcapr updates - by 3388200285 arp, dns, icmp, tcp, tlsv1, tlsv12 320 packets, 26 KB 1921681168 19916156102 tcp 51862 443 FIN, ACK Seq 1 Ack 1 Win 8192 Len 0 TSV 881834095 TSER 2955979377 1921681168 19916156102 tcp 51862 443 FIN, ACK Seq 1 Ack 1 Win 8192 Len 0 TSV 881834095 TSER 2955979377 1921681168 19424445118 tcp 51699 80 FIN, ACK Seq 1 Ack 1 Win 8192 Len 0 TSV 881834903 TSER 3048398750 1921681168 19424445118 tcp 51699 80 FIN, ACK Seq 1 Ack 1 Win 8192 Len 0 TSV 881834903 TSER 3048398750 http://www.secuobs.com/revue/news/500089.shtmlhttp://www.secuobs.com/revue/news/500089.shtml Secuobs.com : 2014-02-20 11:53:34 - pcapr updates - by yangjunnanke dns 2 packets, 309 bytes 127001 127001 dns Standard query ANY ipv4examplecom 127001 127001 dns Standard query response A 19216801 http://www.secuobs.com/revue/news/498872.shtmlhttp://www.secuobs.com/revue/news/498872.shtml Secuobs.com : 2014-02-19 05:05:36 - pcapr updates - by johnsyrinek stp 2 packets, 184 bytes 00 1a 2f 2f 46 99 01 80 c2 00 00 00 stp Conf Root 24576 1 00 1a 2f 12 d9 80 Cost 8 Port 0x8019 00 1a 2f 2f 46 99 01 80 c2 00 00 00 stp Conf Root 24576 1 00 1a 2f 12 d9 80 Cost 8 Port 0x8019 http://www.secuobs.com/revue/news/498613.shtmlhttp://www.secuobs.com/revue/news/498613.shtml Secuobs.com : 2014-02-17 19:27:17 - pcapr updates - by byteman07 tcp 182 packets, 13 KB 103814169 101382352 tcp 48888 389 Seq 1 Win 512 Len 0 101382352 103814169 tcp 389 48888 RST, ACK Seq 1 Ack 1 Win 0 Len 0 103814169 101382352 tcp 48888 389 Seq 3620473816 Win 512 Len 0 101382352 103814169 tcp 389 48888 RST, ACK Seq 1 Ack 3620473816 Win 0 Len 0 http://www.secuobs.com/revue/news/498335.shtmlhttp://www.secuobs.com/revue/news/498335.shtml Secuobs.com : 2014-02-17 19:27:17 - pcapr updates - by 3388200285 arp, dns, icmp, mdns, tcp, tlsv1 59 packets, 10 KB 34 cd be c4 80 ad 3c e0 72 2f a8 3b arp Who has 1921681162 Tell 19216811 3c e0 72 2f a8 3b 34 cd be c4 80 ad arp 1921681162 is at 3c e0 72 2f a8 3b 3c e0 72 2f a8 3b ff ff ff ff ff ff arp 19216811 is at 3c e0 72 2f a8 3b duplicate use of 19216811 detected 1921681196 22400251 mdns Standard query response TXT http://www.secuobs.com/revue/news/498334.shtmlhttp://www.secuobs.com/revue/news/498334.shtml Secuobs.com : 2014-02-16 05:27:24 - pcapr updates - by 3388200285 arp, jabber xml, tcp 26 packets, 2 KB 1921681168 17172232200 tcp 58978 5223 PSH, ACK Seq 1 Ack 1 Win 8192 Len 37 TSV 532879682 TSER 239780610 1921681168 17172232200 tcp 58978 5223 FIN, ACK Seq 38 Ack 1 Win 8192 Len 0 TSV 532879687 TSER 239780610 1921681168 17172232200 tcp TCP Out-Of-Order 58978 5223 PSH, ACK Seq 1 Ack 1 Win 8192 Len 37 TSV 53287 1921681168 17172232200 tcp 58978 5223 FIN, ACK Seq 38 Ack 1 Win 8192 Len 0 TSV 532879687 TSER 239780610 http://www.secuobs.com/revue/news/498137.shtmlhttp://www.secuobs.com/revue/news/498137.shtml Secuobs.com : 2014-02-16 02:44:06 - pcapr updates - by 3388200285 arp, tcp, tlsv1 20 packets, 2 KB 1921681168 54236115213 tcp 57171 443 ACK Seq 1 Ack 1 Win 8189 Len 0 TSV 516657778 TSER 1574309525 1921681168 54236115213 tcp TCP Dup ACK 1 1 57171 443 ACK Seq 1 Ack 1 Win 8189 Len 0 TSV 516657778 TSE 1921681168 54236115213 tlsv1 Application Data 1921681168 54236115213 tlsv1 TCP Out-Of-Order Application Data http://www.secuobs.com/revue/news/498131.shtmlhttp://www.secuobs.com/revue/news/498131.shtml Secuobs.com : 2014-02-16 02:44:06 - pcapr updates - by 3388200285 arp, tcp, tlsv1 17 packets, 1 KB 1921681168 21325417160 tcp 57161 80 FIN, ACK Seq 1 Ack 1 Win 8194 Len 0 TSV 516491867 TSER 448607455 1921681168 21325417160 tcp 57161 80 FIN, ACK Seq 1 Ack 1 Win 8194 Len 0 TSV 516491867 TSER 448607455 34 cd be c4 80 ad 3c e0 72 2f a8 3b arp Who has 1921681162 Tell 19216811 3c e0 72 2f a8 3b 34 cd be c4 80 ad arp 1921681162 is at 3c e0 72 2f a8 3b http://www.secuobs.com/revue/news/498130.shtmlhttp://www.secuobs.com/revue/news/498130.shtml Secuobs.com : 2014-02-16 02:44:06 - pcapr updates - by 3388200285 arp, dns, http, icmp, tcp, tlsv1 165 packets, 23 KB 1921681168 107232538 tlsv1 Encrypted Alert 1921681168 107232538 tcp 56518 443 FIN, ACK Seq 38 Ack 1 Win 8192 Len 0 TSV 507060808 TSER 2110440380 1921681168 107232538 tlsv1 TCP Out-Of-Order Encrypted Alert 1921681168 107232538 tcp 56518 443 FIN, ACK Seq 38 Ack 1 Win 8192 Len 0 TSV 507060808 TSER 2110440380 http://www.secuobs.com/revue/news/498129.shtmlhttp://www.secuobs.com/revue/news/498129.shtml Secuobs.com : 2014-02-16 02:16:46 - pcapr updates - by 3388200285 arp, dns, http, icmp, ssl, tcp, tlsv1, tlsv12 204 packets, 32 KB 1921681168 19216811 dns Standard query A 7-courierpushapplecom 1921681168 19216811 dns Standard query A 43-courierpushapplecom 1921681168 19216811 dns Standard query A 7-courierpushapplecom 1921681162 1921681168 icmp Redirect Redirect for host http://www.secuobs.com/revue/news/498126.shtmlhttp://www.secuobs.com/revue/news/498126.shtml Secuobs.com : 2014-02-16 02:16:46 - pcapr updates - by 3388200285 arp, dns, icmp, ssl, tcp, tlsv1, tlsv12 135 packets, 19 KB 2088914135 1921681162 tcp 80 51115 RST, ACK Seq 1 Ack 1 Win 0 Len 0 1921681168 1072123195 tcp 61997 443 ACK Seq 1 Ack 1 Win 8189 Len 0 TSV 558390707 TSER 1613044067 1921681168 1072123195 tlsv1 Application Data 1921681168 1072123195 tcp 61997 443 ACK Seq 1 Ack 1 Win 8189 Len 0 TSV 558390707 TSER 1613044067 http://www.secuobs.com/revue/news/498125.shtmlhttp://www.secuobs.com/revue/news/498125.shtml Secuobs.com : 2014-02-16 02:16:46 - pcapr updates - by 3388200285 arp, tcp, tlsv1 47 packets, 4 KB 1921681168 1072321040 tcp 63710 443 ACK Seq 1 Ack 1 Win 8189 Len 0 TSV 220913460 TSER 1292531808 1921681168 1072321040 tlsv1 Application Data 1921681168 1072321040 tcp 63710 443 ACK Seq 1 Ack 1 Win 8189 Len 0 TSV 220913460 TSER 1292531808 1921681168 1072321040 tlsv1 TCP Out-Of-Order Application Data http://www.secuobs.com/revue/news/498124.shtmlhttp://www.secuobs.com/revue/news/498124.shtml Secuobs.com : 2014-02-16 00:46:04 - pcapr updates - by 3388200285 arp, dns, http, icmp, jabber xml, ssl, tcp, tlsv1 241 packets, 32 KB 1921681168 5423611633 tcp 61953 443 ACK Seq 1 Ack 1 Win 8189 Len 0 TSV 557897481 TSER 1333511623 1921681168 5423611633 tlsv1 Application Data 1921681168 5423611633 tcp 61953 443 ACK Seq 1 Ack 1 Win 8189 Len 0 TSV 557897481 TSER 1333511623 1921681168 5423611633 tlsv1 TCP Retransmission Application Data http://www.secuobs.com/revue/news/498122.shtmlhttp://www.secuobs.com/revue/news/498122.shtml Secuobs.com : 2014-02-16 00:46:04 - pcapr updates - by 3388200285 arp, dns, http, icmp, tcp, tlsv1 264 packets, 35 KB 1921681168 1072324192 tcp 63769 443 ACK Seq 1 Ack 1 Win 8189 Len 0 TSV 221230655 TSER 1231292714 1921681168 1072324192 tcp TCP Dup ACK 1 1 63769 443 ACK Seq 1 Ack 1 Win 8189 Len 0 TSV 221230655 TSE 1921681168 1072324192 tlsv1 Application Data 1921681168 1072324192 tlsv1 TCP Out-Of-Order Application Data http://www.secuobs.com/revue/news/498121.shtmlhttp://www.secuobs.com/revue/news/498121.shtml Secuobs.com : 2014-02-03 17:18:46 - pcapr updates - by mobile_suit_zero dell lldp lldp 76 packets, 20 KB 28 93 fe 32 f4 2e 01 80 c2 00 00 0e lldp Chassis Id 28 93 fe 32 f4 2e Port Id Gi0 46 TTL 120 28 93 fe 32 f4 2e 01 80 c2 00 00 0e lldp Chassis Id 28 93 fe 32 f4 2e Port Id Gi0 46 TTL 120 28 93 fe 32 f4 2e 01 80 c2 00 00 0e lldp Chassis Id 28 93 fe 32 f4 2e Port Id Gi0 46 TTL 120 28 93 fe 32 f4 2e 01 80 c2 00 00 0e lldp Chassis Id 28 93 fe 32 f4 2e Port Id Gi0 46 TTL 120 http://www.secuobs.com/revue/news/495658.shtmlhttp://www.secuobs.com/revue/news/495658.shtml Secuobs.com : 2014-01-30 20:12:50 - pcapr updates - by luis_arturogo sip, sip sdp 144 packets, 111 KB 7917068186 7917069243 sip sdp Request INVITE sip 326461573204933357 7917069243 5060, with session descript 7917069243 7917068186 sip Status 100 Trying 7917069243 7917068186 sip Status 100 Trying 7917069243 7917068186 sip sdp Status 200 OK, with session description http://www.secuobs.com/revue/news/495102.shtmlhttp://www.secuobs.com/revue/news/495102.shtml Secuobs.com : 2014-01-27 23:18:37 - pcapr updates - by fognog tftp 99 packets, 31 KB 1921680253 192168010 tftp Read Request, File rfc1350txt 000, Transfer type octet 000 192168010 1921680253 tftp Data Packet, Block 1 1921680253 192168010 tftp Acknowledgement, Block 1 192168010 1921680253 tftp Data Packet, Block 2 http://www.secuobs.com/revue/news/494409.shtmlhttp://www.secuobs.com/revue/news/494409.shtml Secuobs.com : 2014-01-27 05:37:49 - pcapr updates - by sharadjhingran dns, http, tcp 380 packets, 212 KB 1714936167 10022 tcp 5223 49559 ACK Seq 1 Ack 1 Win 1024 Len 0 1714936167 10022 tcp TCP Previous segment lost 5223 49559 ACK Seq 2 Ack 2 Win 78 Len 0 TSV 2154 10022 1714936167 tcp 49559 5223 ACK Seq 2 Ack 2 Win 32976 Len 0 TSV 850791080 TSER 2154095569 10022 10021 dns Standard query A enwikipediaorg http://www.secuobs.com/revue/news/494206.shtmlhttp://www.secuobs.com/revue/news/494206.shtml Secuobs.com : 2014-01-26 07:49:16 - pcapr updates - by mandatory dns 223 packets, 29 KB 192168561 19216856101 dns Standard query TXT AAAAAItgAA authtunnelphd 19216856101 192168561 dns Standard query response TXT 192168561 19216856101 dns Standard query TXT le FgAABADk4OUIxQTZEQkFEQjJBNUM5MUExNDA4MkRGOEFBQUFDMTdBQTkwN 19216856101 192168561 dns Standard query response TXT http://www.secuobs.com/revue/news/494126.shtmlhttp://www.secuobs.com/revue/news/494126.shtml Secuobs.com : 2014-01-20 09:56:21 - pcapr updates - by 731990937 http, tcp 28 packets, 18 KB 1921684879 12416013650 tcp 50019 80 SYN Seq 0 Win 8192 Len 0 MSS 1460 WS 2 SACK_PERM 1 1921684879 12416013650 tcp 50020 80 SYN Seq 0 Win 8192 Len 0 MSS 1460 WS 2 SACK_PERM 1 12416013650 1921684879 tcp 80 50020 SYN, ACK Seq 0 Ack 1 Win 14600 Len 0 MSS 1460 SACK_PERM 1 WS 9 12416013650 1921684879 tcp 80 50019 SYN, ACK Seq 0 Ack 1 Win 14600 Len 0 MSS 1460 SACK_PERM 1 WS 9 http://www.secuobs.com/revue/news/492744.shtmlhttp://www.secuobs.com/revue/news/492744.shtml Secuobs.com : 2014-01-13 03:27:42 - pcapr updates - by marka Revel iPad POS site capture squid 55 packets, 37 KB http://www.secuobs.com/revue/news/491171.shtmlhttp://www.secuobs.com/revue/news/491171.shtml Secuobs.com : 2013-12-20 00:24:52 - pcapr updates - by santosh udp 50 packets, 11 KB 203520107 10882383 udp Source port 18922 Destination port 16426 203520107 10882383 udp Source port 18922 Destination port 16426 203520107 10882383 udp Source port 18922 Destination port 16426 203520107 10882383 udp Source port 18922 Destination port 16426 http://www.secuobs.com/revue/news/487563.shtmlhttp://www.secuobs.com/revue/news/487563.shtml Secuobs.com : 2013-12-16 21:11:08 - pcapr updates - by nmariolis arp 441 packets, 25 KB 00 90 7f 8c 7a 1d ff ff ff ff ff ff arp Who has 37188102107 Tell 776919100 00 90 7f 8c 7a 1d ff ff ff ff ff ff arp Who has 37188102107 Tell 776919100 00 90 7f 8c 7a 1d ff ff ff ff ff ff arp Who has 37188102107 Tell 776919100 00 90 7f 8c 7a 1d ff ff ff ff ff ff arp Who has 37188102107 Tell 776919100 http://www.secuobs.com/revue/news/486681.shtmlhttp://www.secuobs.com/revue/news/486681.shtml Secuobs.com : 2013-12-11 19:34:36 - pcapr updates - by pierre dns 30 packets, 3 KB 192168120 19216811 dns Standard query AAAA kaiyoufr 19216811 192168120 dns Standard query response 192168120 19216811 dns Standard query AAAA kaiyoufr 19216811 192168120 dns Standard query response http://www.secuobs.com/revue/news/485727.shtmlhttp://www.secuobs.com/revue/news/485727.shtml Secuobs.com : 2013-12-10 13:24:49 - pcapr updates - by goodvinl4 http, tcp 86 packets, 64 KB 172179161 10100105 http GET employees Pages Homeaspx k pourcentsD0pourcents9FpourcentsD0pourcentsBEpourcentsD0pourcentsB8pourcentsD1pourcents81pourcentsD0pourcentsBApourcents20pourcentsD0pourcentsBDpourcentsD0pourcentsB0pourcents2 10100105 172179161 tcp 80 56727 ACK Seq 1 Ack 553 Win 254 Len 0 10100105 172179161 tcp TCP segment of a reassembled PDU 10100105 172179161 tcp TCP segment of a reassembled PDU http://www.secuobs.com/revue/news/485358.shtmlhttp://www.secuobs.com/revue/news/485358.shtml Secuobs.com : 2013-12-10 08:46:49 - pcapr updates - by goodvinl4 ssl, tcp 17 packets, 2 KB 1091951199 172179170 tcp 443 57704 ACK Seq 1 Ack 1 Win 2321 Len 0 1091951199 172179170 tcp 443 57704 ACK Seq 1 Ack 88 Win 2321 Len 0 1091951199 172179170 ssl Continuation Data 172179170 1091951199 tcp 57704 443 ACK Seq 88 Ack 56 Win 49972 Len 0 http://www.secuobs.com/revue/news/485266.shtmlhttp://www.secuobs.com/revue/news/485266.shtml Secuobs.com : 2013-12-09 00:55:32 - pcapr updates - by vibchhabra http, tcp 33 packets, 21 KB 1675999152 24615187111 tcp 33728 80 SYN Seq 0 Win 8192 Len 0 24615187111 1675999152 tcp 80 33728 SYN, ACK Seq 0 Ack 1 Win 8192 Len 0 1675999152 24615187111 tcp 33728 80 ACK Seq 1 Ack 1 Win 8192 Len 0 1675999152 24615187111 http GET yqRSQexe HTTP 11 http://www.secuobs.com/revue/news/485031.shtmlhttp://www.secuobs.com/revue/news/485031.shtml Secuobs.com : 2013-11-23 23:03:00 - pcapr updates - by fsiamp Anonymized IPv6 traffic fc, ip, llc, sna 244 packets, 394 KB 00 00 c0 05 3d 00 f4 01 c7 f0 c0 f8 0x8be8 Ethernet II c6 47 01 3d 83 08 05 ea 2a 00 62 e8 0x8955 Ethernet II 00 00 01 05 f6 48 04 04 8d ff 00 83 0xff50 Ethernet II ff 35 3d 38 81 85 00 8d ff 48 e3 06 0x8d46 Ethernet II http://www.secuobs.com/revue/news/482783.shtmlhttp://www.secuobs.com/revue/news/482783.shtml Secuobs.com : 2013-11-14 21:19:39 - pcapr updates - by lukguz read from TFTP Server arp, cdp, loop, tftp 29 packets, 6 KB cc 02 09 c0 00 00 cc 02 09 c0 00 00 loop Reply cc 02 09 c0 00 00 01 00 0c cc cc cc cdp Device ID R3 Port ID Ethernet0 0 cc 02 09 c0 00 00 ff ff ff ff ff ff arp Gratuitous ARP for 1721611 Reply 1721611 17216110 tftp Read Request, File backup_r3 000, Transfer type octet 000 http://www.secuobs.com/revue/news/481076.shtmlhttp://www.secuobs.com/revue/news/481076.shtml Secuobs.com : 2013-11-14 21:19:39 - pcapr updates - by lukguz write to TFTP Server - Cisco running config arp, browser, cdp, loop, nbns, tftp 24 packets, 3 KB 17216110 172161255 nbns Name query NB GRUPA_ROBOCZA cc 02 09 c0 00 00 cc 02 09 c0 00 00 loop Reply 17216110 172161255 browser Get Backup List Request 17216110 172161255 nbns Name query NB GRUPA_ROBOCZA http://www.secuobs.com/revue/news/481075.shtmlhttp://www.secuobs.com/revue/news/481075.shtml Secuobs.com : 2013-11-05 19:15:09 - pcapr updates - by gserrao http, tcp 35 packets, 27 KB 1012546124 107226179 http GET http ahyoh6inowebstonet 8000 ahkrk ffemboy 4389617 HTTP 11 107226179 1012546124 tcp 8080 1102 ACK Seq 1 Ack 732 Win 50209 Len 0 107226179 1012546124 tcp TCP segment of a reassembled PDU 107226179 1012546124 tcp TCP segment of a reassembled PDU http://www.secuobs.com/revue/news/479157.shtmlhttp://www.secuobs.com/revue/news/479157.shtml