help - about - stats
|
help - about - stats |
|
Snort output for: CZFree.Net.luna-jih (00:02:6F:33:C8:71) |
|
03/15-22:21:15.599879 0:2:6F:33:C8:71 -> 0:E0:98:BE:D4:D5 bssid: 0:2:6F:33:C8:71 Flags: Re 213.151.78.170:411 -> 10.32.15.153:33751 TCP TTL:51 TOS:0x0 ID:30187 IpLen:20 DgmLen:117 DF ***AP*** Seq: 0x398D042D Ack: 0xCB97B175 Win: 0x16D0 TcpLen: 20 $Search 10.1.3.130:20950 F?T?0?9?TTH:EKQT7QJOZVSJ3GALGBYZYSMXVKC KTVX3TLGJMHY| 03/15-22:21:15.621441 0:E0:98:BE:D4:D5 -> 0:2:6F:33:C8:71 bssid: 0:2:6F:33:C8:71 Flags: ToDs FrDs 10.32.15.153:33824 -> 84.42.183.89:27264 TCP TTL:127 TOS:0x0 ID:5687 IpLen:20 DgmLen:1442 DF ***A**** Seq: 0xB920969A Ack: 0x7C990613 Win: 0xFEDB TcpLen: 20 ..,.~7...6%-...Z.O.My}J..K.TN|...Hl.4.\0.>........7X...?...S.... i`....Jm'.?;.9p...h.j*s.........mSf.6pR+.4KL.A.Q...q.2.c...`..:. .......$.....`lY^.....;?u..f.k.....~#... .P.."..,.8ULyGu...Q:... l.@m.|...).R,.Z.......k...M.M.D..H........8.*..+f..6`..g^[;]6.. .Q.x.aVe..W.R..y..<...e6k. ..P...}....b.g}?.K.l.v...}..1.)N#...3 ......L..n......x..z"Q...t.I1v!.........LK..fQ.J4......b...~.y.. s ..../..t.w..pz.Va.d...q{.y.O.?...J.#.X.....|~..j}B.....v...... Zg..o..:Y|U..v.a.B..t..q.B%.R...T.U.p3crx.....i6..4^B>.l.L....2. ..T........m.(\)9..d......;...Z3.4.....k.u..q.....1..z.l..>...>< ..`.0.L-v-.t....R...B..5..L..Z.E...%...6].....~....K...I.......A D>.K..X.. ....."S.S/.={j........:D...Mc f..w......SF.....q.4./p. .q...=.]..`.[.....o.=....../...........S_>...........,j)...s.A.. ..1...f.......'.....v.|....R&...........0......."V.q.B~.*....2.. .....$?kU....s.*ww...X...$........../..M.?..3...~............... JHBf..i....w..............k...?yY..Y...".ATD0.k....w.b9.nqE...p. x.,H...W....m....:..3.0......[.........S..M...(..D"A{GO..r'.IT.. A..gIxi.....:;....)....@.N..=7..kQP..=.o(.....a..p....{...R..Yi. ....U.........@.;g..B.Z....t..5-.GFf@..i....r...fY.M...C."..m... ZO...C......]......u+..55..l@Cq.5..........ZmNM...mj...E..?...P. ..c[Z..r.j..|Z.......y.{..kL.{.e.....`.--..S.(Y.*_U6m.2.....t... E..VpF.l.....T_.vXx.-..|N.....T..Y.S...;.......;...$(.t......... ..^l.....Vu.g....K...v...8F...A6..<.......F."]...t?_;.f..! 03/15-22:21:15.724114 0:2:6F:33:C8:71 -> 0:E0:98:BE:D4:D5 bssid: 0:2:6F:33:C8:71 Flags: 158.194.5.25:8080 -> 10.32.15.153:34522 TCP TTL:119 TOS:0x0 ID:25907 IpLen:20 DgmLen:1442 DF ***A**** Seq: 0x8C7C03CF Ack: 0x6EA49301 Win: 0xFEDE TcpLen: 20 .....C#.gy!*w..GY....g{./(...Y..92y...h...-.90.U.nA.......x. p.f ...B..8...s......C'(Q+.P.i.V.^g.;....lF|.O.^o.......E.M......:z. .-.......#...MB...s.. ...mX....+J.v..4...`......^'....6...Z..AV. E#.(74.i..m......w.rs.Ft/.a.!.n$...5..AB;n.3gj'......O.1A.9.8j.. l.....)..D.d.....C.....}<.<.v.{...% y.......b.......'...3-....V; ..aB.[..C.:54..t....s..pSpS.o...r.n...S(h...h...p..'....,.....S. Z....%.......-.`dp@......t.K....../...b..\t|...........l.y#..... ...CA{...a.o...\...X..>...\..$.#.....g#...Z#.....u ..*K..irQr_.. .....K...S.H..(...q6N..k-w.....dJh.....{."\y..VI........D..&z... ..x<&.Z=L.D.`..T.>>P..1.u8!....1..I..VCZ..57~q.....1...2D....... ...V_.4.C.......}cP...$,..$...."/J..>....W..TD...w.`W.6..lZ.B..^ ..B.D4.....e.*..U........kM#!.....4.n....k.o..T..v..\...B..._... >x{......2...`.$...6%5F.......@.0.h.L...g.0b!............g!..... .J.1 ..e.W....<...c...0e..x..B..5....d........t...w(o..>..xia... ..........[<.O.#4....~.r.....D...:...c..B&og.O?...Rxm;.cE.F@.... .YU.^..............3.....xr".D..b.BK.N.............6_.....b..a3K .d.[.s.isW{o.............,.I.s.....J...1J........5g..k.R.pr..d.. .nR.........*.}C........q..pA.B..Jr..zI..Y.P..0....,D.@..b...9.. Dn.o.c:vd,P+.+..*Q....d.j..I61amppi:u:...b..L~/[\7....I......... xS......v..x...qh3k......)..)#.....>3. J.....2%P.2.q.'........p. ...?..`....&.....U.'.......7.2........B...."..\V+.....R.J.WSx+.% ....[5X.y&7.~..(.R..c...b.vC......`..A8a..[..^c.?..m..-... 03/15-22:21:15.724526 0:E0:98:BE:D4:D5 -> 0:2:6F:33:C8:71 bssid: 0:2:6F:33:C8:71 Flags: ToDs FrDs 10.32.15.153:34522 -> 158.194.5.25:8080 TCP TTL:127 TOS:0x0 ID:5689 IpLen:20 DgmLen:40 DF ***A**** Seq: 0x6EA49301 Ack: 0x8C7C03CF Win: 0xFFFF TcpLen: 20 03/15-22:21:15.733589 0:E0:98:BE:D4:D5 -> 0:2:6F:33:C8:71 bssid: 0:2:6F:33:C8:71 Flags: ToDs FrDs 10.32.15.153:34716 -> 81.95.102.120:411 TCP TTL:127 TOS:0x0 ID:5690 IpLen:20 DgmLen:74 DF ***AP*** Seq: 0xCD9F3F91 Ack: 0xCDCEB3B5 Win: 0xFAEA TcpLen: 20 $RevConnectToMe JaPaPHA [CZ]Lukas| 03/15-22:21:15.741563 0:2:6F:33:C8:71 -> 0:E0:98:BE:D4:D5 bssid: 0:2:6F:33:C8:71 Flags: 81.95.102.120:411 -> 10.32.15.153:34716 TCP TTL:56 TOS:0x0 ID:10128 IpLen:20 DgmLen:40 DF ***A**** Seq: 0xCDCEB3B5 Ack: 0xCD9F3FB3 Win: 0x16D0 TcpLen: 20 03/15-22:21:18.590927 0:E0:98:BE:D4:D5 -> 0:2:6F:33:C8:71 bssid: 0:2:6F:33:C8:71 Flags: ToDs FrDs 10.32.15.153:33824 -> 84.42.183.89:27264 TCP TTL:127 TOS:0x0 ID:5882 IpLen:20 DgmLen:1442 DF ***A**** Seq: 0xB9230C68 Ack: 0x7C990613 Win: 0xFEDB TcpLen: 20 .jB.3G..."L}.f].._.pX....Q...1._-.Ly/rn@....a75N...;9ikxb.L9/... $....[g.......d/..W....~..#I4..t.6...A..7.A...B...)h...)...@.s.@ y.aE|..I./........"...zw.nYU{.".4..K.....n>s6at..2t...."ew4:*..~ ....$J..m$.O^v:.h|.X;.....2T..L....K~...4.............".ss}O..i. `ew..........E.Nn....t.u.4....|.}H....i......=+....qsuq:....{.0. 8.].2.....2...g. .%$/. r..*I......07..?2SuS...*...g$...\...|U... ..........Q...b....W/A..*.gt.......4.......Fb>......55....(.0.q, .wYuu......e..ee;h.RS3.. ,.W].....w.#t..@.YUU.Z........^6...<..% 3....1....D..e..%$f.+]C.B.............5.........J+.H......WUS... |/&.......:.V./..fy.D..f..}QOF...uo..../I...r.;pe.U=....^Q...a\. ...D......KJ^Tm3....t.p?*(..g.cb...l<.......2...4'....d%...n.Cbc ..m.....>...............e...K+++.............w.v......f.../.ZB.. ...w...F...|IE>.....*...... A..LL.F+?.i?.. .(.+...7..;H..2.....|gv...l..x.x..!....@...ph.... .....0.H........*.....z.I.i........ 8.......7.....,....$\..`:..: ]..@!..x[.{.........dO.....0...].0...cf(..9./..TOqqM..... .&&..T .#........~..{.Sn.S..S..(...y..;..0.P..i..y......A....[......... 2..$>>)..$)..$....-j....yzR...@..om..\.\p..W.`I........p.90Yb.=! d.........sgk6.m.""...R...!g..^.V."q.\...k...G..O.Q....@......dD P....#..GO6..p...5.-.D" ...i..."."M.{.6.P.Q..I....{..:.".II|[wB. f.hnm...^.r........|.p. ..5....T........@[;)iv29....q_..M. 03/15-22:21:18.593170 0:2:6F:33:C8:71 -> 0:E0:98:BE:D4:D5 bssid: 0:2:6F:33:C8:71 Flags: 217.11.227.77:411 -> 10.32.15.153:34901 TCP TTL:56 TOS:0x0 ID:17011 IpLen:20 DgmLen:82 DF ***AP*** Seq: 0xEF111D4E Ack: 0xBAB873AA Win: 0x16D0 TcpLen: 20 $ConnectToMe JaPaPHA 194.228.236.162:6404| 03/15-22:21:18.594785 0:2:6F:33:C8:71 -> 0:E0:98:BE:D4:D5 bssid: 0:2:6F:33:C8:71 Flags: 194.228.236.162:6404 -> 10.32.15.153:35021 TCP TTL:118 TOS:0x0 ID:45308 IpLen:20 DgmLen:48 DF ***A**S* Seq: 0x5EEC9F60 Ack: 0xB5A43897 Win: 0xFFFF TcpLen: 28 TCP Options (4) => MSS: 1260 NOP NOP SackOK 03/15-22:21:18.596263 0:2:6F:33:C8:71 -> 0:E0:98:BE:D4:D5 bssid: 0:2:6F:33:C8:71 Flags: 84.42.183.89:27264 -> 10.32.15.153:33824 TCP TTL:119 TOS:0x0 ID:53691 IpLen:20 DgmLen:68 DF ***A**** Seq: 0x7C990613 Ack: 0xB9224740 Win: 0xFFFF TcpLen: 48 TCP Options (3) => NOP NOP Sack: 47394@22446 03/15-22:21:18.597569 0:E0:98:BE:D4:D5 -> 0:2:6F:33:C8:71 bssid: 0:2:6F:33:C8:71 Flags: ToDs FrDs 10.32.15.153:34901 -> 217.11.227.77:411 TCP TTL:127 TOS:0x0 ID:5883 IpLen:20 DgmLen:40 DF ***A**** Seq: 0xBAB873AA Ack: 0xEF111D78 Win: 0xFC12 TcpLen: 20 03/15-22:21:18.616361 0:2:6F:33:C8:71 -> 0:E0:98:BE:D4:D5 bssid: 0:2:6F:33:C8:71 Flags: 84.42.183.89:27264 -> 10.32.15.153:33824 TCP TTL:119 TOS:0x0 ID:53692 IpLen:20 DgmLen:68 DF ***A**** Seq: 0x7C990613 Ack: 0xB9224740 Win: 0xFFFF TcpLen: 48 TCP Options (3) => NOP NOP Sack: 47394@30858 03/15-22:21:18.618887 0:2:6F:33:C8:71 -> 0:E0:98:BE:D4:D5 bssid: 0:2:6F:33:C8:71 Flags: Re 84.42.183.89:27264 -> 10.32.15.153:33824 TCP TTL:119 TOS:0x0 ID:53694 IpLen:20 DgmLen:60 DF ***A**** Seq: 0x7C990613 Ack: 0xB9224740 Win: 0xFFFF TcpLen: 40 TCP Options (3) => NOP NOP Sack: 47394@22446 03/15-22:21:18.646515 0:2:6F:33:C8:71 -> 0:E0:98:BE:D4:D5 bssid: 0:2:6F:33:C8:71 Flags: 84.42.183.89:27264 -> 10.32.15.153:33824 TCP TTL:119 TOS:0x0 ID:53695 IpLen:20 DgmLen:40 DF ***A**** Seq: 0x7C990613 Ack: 0xB9227310 Win: 0xFFFF TcpLen: 20 03/15-22:21:18.673181 0:2:6F:33:C8:71 -> 0:E0:98:BE:D4:D5 bssid: 0:2:6F:33:C8:71 Flags: 158.194.190.32:28730 -> 10.32.15.153:35048 TCP TTL:118 TOS:0x0 ID:14548 IpLen:20 DgmLen:1442 DF ***AP*** Seq: 0xE9A5FFE0 Ack: 0x265D8F8A Win: 0xFEDE TcpLen: 20 ..O.@...p>o.-...d*...,....p.. .....T..P.h.....@d..@2....A...-Fa. .O4......@......a.Ah."ZA.....W.&....=.........b.D"..g..d.......l $...N......`...`P.uT<...iy.K...C..4....az......_...J.n...T..H|.S .........do........'G~.2....9.T*.:..p.*..,5...H.v.....imG.aoAP[. ........|..h0&@&....x....`.l.....Qqx...U.ag...aQ.._.W.S..C.$.>.. j....-|...Z..*.....A..@.......... <.......V...sSZu...i..h\HV...pz....y.....9...[D|.0..lg..L..S&... ......r;.TD..%..,^...Z...e.H|i ...ia..mf.UU~U.b..`.].r .{/}...+. ^un....j#Ik9:/.BM."..?....E@.P..!-]..!_.?U.>.z.0.ja.\.X.......t. ....M.N.E....Z...Y...|6$.V9k......A....8}..a.SW....=CE.h.....OKE .i.t..~s@b .......B.b."*{......@...O...{....KI..5..|G..0.K.$'... ..n...~ ...............<.M.......b:.%..xke...h.K......j.'..K-... .>..n.<0T....?{....+kN............J......|1.hDc..|.d.B./....n..U ../..EX....0v.B...&....xu.d........%...w.....*..%......o...E&..] ........8L..Qgo... sk..x..l"..{.s.t....b......y.x.r.)R..CD...b.. ....U....#....c...U.....=........t...Sh...r..:.Lq]]..F.9.."Y.B.` .H>$......^88...d..t.<.}......q...>\#..z....5...(./..l.d........ .UW2yJ........%.b..^$.rj......p.|!%.v...j.........P...o.j.....h. ^6aZ...V2a9.....j.Q.:......H..:2..*4E. ..\%}Z..H.....D......Z.`. %]...<.{ .!..E......se...yr.O5>;. .Mi....j..rB(_g...j3..L.Hp>..o ....U..}ZD-.I..|H3^kFTA2........29.....c..:...`.)v.5z....> 03/15-22:21:18.686471 0:2:6F:33:C8:71 -> 0:E0:98:BE:D4:D5 bssid: 0:2:6F:33:C8:71 Flags: 82.119.123.213:7730 -> 10.32.15.153:34894 TCP TTL:113 TOS:0x0 ID:40154 IpLen:20 DgmLen:1442 DF ***AP*** Seq: 0x432C85C0 Ack: 0xD36901B6 Win: 0xFEE0 TcpLen: 20 ...Q....}l.G.6.Ru..t.B.|...5.b.j[.L@W.>%...(.>.(fyh..$.l...4B_.. ..?.z.._....Q*......&!..K.?|..i._"...TZ..;....0#42L.(..T!..(r'.. 'R......C.....!...Zc..-.....7..).o..5..%....Q.*.....Y{dw.....Q.. ......S.0ZjL..,.^...@tR.o.F....W.'.B..K.......P.._.>%kR..J.\r.B. ...........R.J..I.......%\#.Pj....JJ..........R.z.....J..l...7Vb ....O.>....mr&C..m......{.6...aY..^.W....Gm....m4...,.F..0.!...= .cr.'0...,..9.<.Ae.....O.....d..cZ.p..........5gHn..yK,...eV.k.. .r.M..'...Sg.VE............&.j`J(.r. ....?.K.[....me.....(..r... .T.n..H....u8f1Nh..6.....mL..9?..n.....l........!...g.....;.$M.. ..t^.M....Vo..........)......-...~...#!...>.].m.m..s..V^........ n....S.....N2.a.',.$m.......C*..Z0>....v...R..f.....\.t2%".Wf... $.(9. .{.............L..G..t..?.8Q..b.nKeT...S.0.Q..U.#W..D..b.~ .zR7./QD9hD..h..O.=.t.0SZ..We...~..p...u.5........P...........`. 0.~....E..^;m.3.#.W@=Or.....O...x.ka....~..........Bj..89...4X.. .............wv.)..I:.E...h..?....-.Z..2.t..W..w..... ..zpM>rn.t .$........^..0.V#O...j.%~.......'..);aX..G-......T....}$av.Q.... ...t.b...m..c.>e ....b!(9}...i].....lD..>WL'.o....s.>.IW...#.j.{ m'.\.n>9n. .....T/]..........P..=..#..8.>..r|.7..o.z...ny...f... .ef.T3a.\.7.9..B.G\(qsE.SS..S...2'K.g.T...T\a.."P.q.p.....f..c.. ...B...F.yeQ|4n2Jf.6lwh...N.....P.3.&..y....N.?.........9...m..y ..b?...o........j.Z...dl..(Vx..A.@...f.>.:k....w...Y... Gn..k..L .i.*.'.9]K..\..^..3....H.?.C..p.I....au....m.>.s.g...dWuD. 03/15-22:21:18.686666 0:E0:98:BE:D4:D5 -> 0:2:6F:33:C8:71 bssid: 0:2:6F:33:C8:71 Flags: ToDs FrDs 10.32.15.153:35048 -> 158.194.190.32:28730 TCP TTL:127 TOS:0x0 ID:5890 IpLen:20 DgmLen:40 DF ***A**** Seq: 0x265D8F8A Ack: 0xE9A6055A Win: 0xFFFF TcpLen: 20 03/15-22:21:18.688024 0:E0:98:BE:D4:D5 -> 0:2:6F:33:C8:71 bssid: 0:2:6F:33:C8:71 Flags: ToDs FrDs 10.32.15.153:33995 -> 217.31.176.50:411 TCP TTL:63 TOS:0x0 ID:588 IpLen:20 DgmLen:40 DF ***A**** Seq: 0x558A4DCE Ack: 0x5EEC8918 Win: 0xF7D2 TcpLen: 20 03/15-22:21:18.689834 0:E0:98:BE:D4:D5 -> 0:2:6F:33:C8:71 bssid: 0:2:6F:33:C8:71 Flags: ToDs FrDs 10.32.15.153:34716 -> 81.95.102.120:411 TCP TTL:127 TOS:0x0 ID:5891 IpLen:20 DgmLen:108 DF ***AP*** Seq: 0xCD9F3FB3 Ack: 0xCDCEB7AC Win: 0xFCA8 TcpLen: 20 $RevConnectToMe JaPaPHA Vampires[CZ]|$RevConnectToMe JaPaPHA paj ik2| 03/15-22:21:18.691185 0:2:6F:33:C8:71 -> 0:E0:98:BE:D4:D5 bssid: 0:2:6F:33:C8:71 Flags: 82.119.123.213:7730 -> 10.32.15.153:34894 TCP TTL:113 TOS:0x0 ID:40155 IpLen:20 DgmLen:46 DF ***AP*** Seq: 0x432C8B3A Ack: 0xD36901B6 Win: 0xFEE0 TcpLen: 20 |.G}.. 03/15-22:21:18.704980 0:2:6F:33:C8:71 -> 0:E0:98:BE:D4:D5 bssid: 0:2:6F:33:C8:71 Flags: 81.19.44.44:23643 -> 10.32.15.153:32851 TCP TTL:121 TOS:0x0 ID:52309 IpLen:20 DgmLen:1442 DF ***A**** Seq: 0x94FAA4D7 Ack: 0x39B2D4D7 Win: 0xFEDD TcpLen: 20 l.m..c.h...p..>..S2*.5.]....*I./V..........(....d.ZEBR.M.=x....Q jQV.........^...l..qQ)~..<.;.).*.#....s..F..k.R.".E..T.S9n|7C... .E..w.0...~...gh...Z.V%s..i...kbP.p....2.^J..N...}....7.QZ^.!xCs .q.y.@.IfY...%q.....@.&44N#.. .."./.H..ha6.O.Hr.....e(0u,...I... `.E3.W.ZT........&...W.|.,5fg...h...i...{.....p.4......5.g..Y6.. Z.y.,...k"..........`t.....:".7.[.....d..b@NO...]6WT:4..H.a..N.. =j..)...^.w......<.....Q.....A!).........`.2.2..z.=rj.owzhC#...9 ..F.....[#..:$....)\...?../....m}...)7)...........~F`M3C...H..[. N._Hx.OF"zw.+WuvM...r....... ...i/u...!k8k.......(..bt..!A..j6QV ....(.F1U1 ...._...}M.....s.f..7..."0Ri...z%.s..*[....p.m...:..{ ....|.|1......`.H.c..c...1......RU...4%.X.M..O..........Q....... uX@Y..F..1S.1....D....*...{z...?..q....Yz....,....2<.)......9..R ...ev1<....c...+..bk]..I..,,R.....(7...Y....W.V$...Lcyc..Pl.)..p s....``v............W.b.N..N.!........c....7.................... .)....q..u..x.....X].oC.7-..~....z...e.6...7o.\0e.J..j.P.H.....w ..;NJ:H%.YQ......V........r.k.......*."}b...l.....).......?....c .......G..*...(DE"..L..&m..8.$j..j.5....'.<{X.....>"$.@. x.`.dl.....O.TD./..i....4F2.8.x...P.6._.....YD..S..A3._T:6.....' ...@.;.....[+x[.{...,.Z...#....l..4..?}..OK.W.iD.......-..:SS".. ~..Sold.....Y.cDl.SE..Y`c4!r...a..N...qn.<<.x....YS...:.'....... s..N...R.1....'..K....8..&.#....3V^}9....-k.$);..m../.k... 03/15-22:21:18.705401 0:E0:98:BE:D4:D5 -> 0:2:6F:33:C8:71 bssid: 0:2:6F:33:C8:71 Flags: ToDs FrDs 10.32.15.153:34894 -> 82.119.123.213:7730 TCP TTL:127 TOS:0x0 ID:5892 IpLen:20 DgmLen:40 DF ***A**** Seq: 0xD36901B6 Ack: 0x432C8B40 Win: 0xFFFF TcpLen: 20 03/15-22:21:18.737036 0:2:6F:33:C8:71 -> 0:E0:98:BE:D4:D5 bssid: 0:2:6F:33:C8:71 Flags: 84.42.183.89:27264 -> 10.32.15.153:33824 TCP TTL:119 TOS:0x0 ID:53699 IpLen:20 DgmLen:40 DF ***A**** Seq: 0x7C990613 Ack: 0xB922837E Win: 0xFFFF TcpLen: 20 03/15-22:21:18.740493 0:2:6F:33:C8:71 -> 0:E0:98:BE:D4:D5 bssid: 0:2:6F:33:C8:71 Flags: Re 84.42.183.89:27264 -> 10.32.15.153:33824 TCP TTL:119 TOS:0x0 ID:53699 IpLen:20 DgmLen:40 DF ***A**** Seq: 0x7C990613 Ack: 0xB922837E Win: 0xFFFF TcpLen: 20 03/15-22:21:18.742377 0:2:6F:33:C8:71 -> 0:E0:98:BE:D4:D5 bssid: 0:2:6F:33:C8:71 Flags: 84.42.183.89:27264 -> 10.32.15.153:33824 TCP TTL:119 TOS:0x0 ID:53700 IpLen:20 DgmLen:40 DF ***A**** Seq: 0x7C990613 Ack: 0xB9228E72 Win: 0xFFFF TcpLen: 20 03/15-22:21:18.756959 0:2:6F:33:C8:71 -> 0:E0:98:BE:D4:D5 bssid: 0:2:6F:33:C8:71 Flags: 81.19.44.44:23643 -> 10.32.15.153:32851 TCP TTL:121 TOS:0x0 ID:52311 IpLen:20 DgmLen:1442 DF ***A**** Seq: 0x94FAAFCB Ack: 0x39B2D4D7 Win: 0xFEDD TcpLen: 20 W....4......P....Ha%/..b.QLh............E......(.s.,...X6Z.....K D#4.G,A.....J:...9.. .n..u@d....N..0.....?_T.d.....`.E2Re..\.... ......:..k.......T......=..&Z .........H....{...U:Kjl\.(.v....*. .;..A...z...%!Fc|.bC..J..Z...B.*.}....0."TM.;.....(5?..i..|....) .8.T.X1Md.3T..I...{E...Q..........B{..K ..9N..9XBE#..)...7Dg+... .-.q....+.$.A*>........k......e,SL.z.VL.)b.q..XYn#.(.s.J...K.... N.....MP..F...`..Ao+FS.l........A.$"..$.....U\D`...Bd@.Mv.n..... .2...U.C4.:B.|.| W....W^^f.1...!...S..J.k.w....:.8.......Q..X:.. ...(..Ku..$.*D..w.p3W{.b....:.)Y. .L..U]..*...q....J..Q..Z...... ..X.@..&Z.......................H1)..Z{S........*.qDS4.e1,.....8 O...u.xx...)}..}J...S.`....... O. .....D..M&.l....0$......z@.... .).P.....r.e....M..J2.'.4.6.(.[4H U....R..2,z....f.i....",S).... ...................?C.Vv%....)...V,.p....9..J.....[O...i./w.az.. .......$"...#j..........%5[:._2.?*..o.F.}.0>n...,.E. 03/15-22:33:01.010701 0:E0:98:BE:D4:D5 -> 0:2:6F:33:C8:71 bssid: 0:2:6F:33:C8:71 Flags: ToDs FrDs 10.32.15.153:33824 -> 84.42.183.89:27264 TCP TTL:127 TOS:0x0 ID:45556 IpLen:20 DgmLen:1442 DF ***A**** Seq: 0xBAE35B40 Ack: 0x7C990613 Win: 0xFEDB TcpLen: 20 .6...y..#.T.....CJ.Km.(..9..k...rW....w..i,....'/...........f... f.....uK.....o`..h..#..As..c.)(..{G.......W.....j..gH....7.o.B.D .=H..hB.|.C@.l....}....P81...JkTZ._.?R.....2.......g..Fz.1...I}. }..;d 3...p*. .........k..+ ....=e...i..L.D.....a.J..MR...7....f ).Ld..\...H.[.l...X.......?A.&._.~..Q......Q..b2.f..L)....t#.... .....p'.....[..../....._ ..q..}W......{...a.....SU.B.)D..]>p.|Q......3......"7S.t...`..r. ....8b...E.O..................V&@.......G.q....6.s..:....l.%.8.o .t....`5._K...>.v#...]k.|.J9....._9Pr._..t.ug5N2.r}C....D.#...p. K.\tMg.Ah.+...........L_:..$...R.1s+Q..su....v>...._*n..._.i.!.( P?........c>.})..S.Jz.KH.x....#.%...../.l.U.2i..6_..t..M.y._.... ..LJ.&...Y,......e$.q.....u.Vb.E...0du_(..P.%-.A..._..C<..x...Zr .Sa....e..i.K.....<...B..n4:&&..!De=....I..`..HS...nxg.^..4...B. o..|(.y..g.{{.F(..4../...\_........33.Y.!p..\..U.i.s.(...?.PS..g kx..m......)..6{#.ix.k......m....../.;.o.T..Ir.+.S..04...O..w|.. v...:..BA.....?....G)<'... ]I....A.d.........s.&m......D..G(.....B.)...%(5...0Q.}......D..K .....7.!. llG. Z..........K8B...i..0e[6`....1.o...V.....^...cq.. ....gL.c...X.AAJ......R.&t.5=..B..h..y'......<...sj..di-u.]...f. ...u@..'~.......W.Gf..2pHW|.-zx.2....I.......X.D....r..... 03/15-22:33:01.023187 0:E0:98:BE:D4:D5 -> 0:2:6F:33:C8:71 bssid: 0:2:6F:33:C8:71 Flags: ToDs FrDs 10.32.15.153:33824 -> 84.42.183.89:27264 TCP TTL:127 TOS:0x0 ID:45557 IpLen:20 DgmLen:1442 DF ***A**** Seq: 0xBAE360BA Ack: 0x7C990613 Win: 0xFEDB TcpLen: 20 ..4..{.......`.....uX.wi.+NF.G@4&....Y.l.9...r.?..7...M......{.d ....:^.2uS...q..........5.R.-S]b.Ym..H...&...;...-o.~ .8+#.?.... .[.R.E.....k....Tz.B.?...`.1ZQ...F..&.l *..M.C.7..0..G.g.,...W.. .Z.......(N...q$..#.....d..mw.?k....V|..U-(.=5lS....4...3....f.. ]...G......C..X..Wx.$L....D..% ..=g.7.j.Ov.F...... x..K..M..J... ....u.ct.o..=..T...Lz..F...BPo....8.O.:...A.<..qY...)sP......... >..FL........1...%.?W|..X5.....QK.R.7).+[PT.t7G.....*.x... ....k .SG.....R....S......n.o.x..u................Y(.j.L.w.l..C..oc.]. .S..A.fJ._.i.NV:..Rt......}..M./.../M.."...z.fV..(....9L..#..S.. .rq.b..8.8.j..:.t...R..vS._t.).....S.u...>.Ja9_...H|..5..!*b...u T..........8.F.'.$k..9...b..,/....;)..D.....m...m.._.pf.f+...... k.UP..........A...di........p...n...R....&.......@[v..R.F..t...m .../..C2....maIQ.mM..e.{C2.T.5....;.8.2..D.f......\2...(.......b i.Z.D.......BV.IrYS7......&}..(N[..\..\.5z...2p ..{...U....N^).= ...!Q.p#..rb....W...(=OE.5B%.\.x..c\.C.t......Y....|...".=.b..Vy ...H...+.n..6(f..Q... 'n{....G...R...E..i..{(%/..]s-.?I.;*....Mn V..K...,.......b...+Na..E.`.W9L=.........}%.....-(\niA..W'...*.. 8..N.}Nt...~..h.abhU...E./i....~...C...q.(;5s..a.>.....dC..j.... .........X....Q..S.X". "_x..Cy......h~.......[.2.;\q">]Cw..|.I.z .Q5./...v$_..<;t.$u.?..]..J'a...~.TS.....Rg...;=.UJ..@!..3'.I,.. h/..,..G..`C...l..<..../YZ.%W.K.\...6.B.&.S....".i.@B...B./a..QxY0..$.ck..8.lh...(M..i..~..D.JMH..H..S0d=.2A..P# 03/15-22:33:01.024858 0:E0:98:BE:D4:D5 -> 0:2:6F:33:C8:71 bssid: 0:2:6F:33:C8:71 Flags: ToDs FrDs 10.32.15.153:33019 -> 213.113.224.59:22 TCP TTL:63 TOS:0x0 ID:5108 IpLen:20 DgmLen:40 DF ***A**** Seq: 0xF401198F Ack: 0xBBAD3780 Win: 0xF917 TcpLen: 20 03/15-22:33:01.044140 0:E0:98:BE:D4:D5 -> 0:2:6F:33:C8:71 bssid: 0:2:6F:33:C8:71 Flags: ToDs FrDs 10.32.15.153:33824 -> 84.42.183.89:27264 TCP TTL:127 TOS:0x0 ID:45558 IpLen:20 DgmLen:1442 DF ***A**** Seq: 0xBAE36634 Ack: 0x7C990613 Win: 0xFEDB TcpLen: 20 .W\...]I.d...;Z.S~..........8...bk..<.k..s]Yqv\;rY..kf...Y...... a.1s?@..Wq.;.^..p.....P.Z.h.l.eh.1o.g.,`.@.2~.e.......;....Z.|M. 2~...]~4._..p./Y..:o>.....e_K?...Zi@."{.f..#.%..._...lV.wz".b... ....h@B..-g.......U... ..R.g.F...y...{t..4.......:?..q..Py.d...p[...).d.}.hj...ooV..H.] >..UsT...5"bd...b...b...../..Y....#fw..6.../m...luZ.S.+.t@..R(e. .H1.....[S....fqW..j|~..reF.l...\{...%.0...h..aJ1...b.......2^.. .]..@~....kNIg......F.D...w....l.h%.../...K..........R!........H .Z...G~..[....."x..Q....7t.88c.'..x...f%q|.....O..P.<....F.J..{h _0...G...4.M._f.......G.|...l....e.....jr...Q.C&......9...W..._1 }..r.HE".B..%..2|...0..]N.....B.........6..{..}..ou..h>7...m...C _/M..h...x...k.9s .&.R.}.....G......#9..s..`....!..........U.s.. ...F..g....O..w.n.R*.s..?...^ *...+.....'Y48.|j$d/ .D.F...Q..Wf. ......?...Y.P.L.,.=..1....k.H[.O3y.!Q..e....J.?U....3R..F.,..2.= .{..c........N..r!.{.'Gt#....#.),7G{c.ED|.'F...N....Y.C..g..aG\F .b......B,......#...c....Xi..*V$...H..qHr..}.e.%.............[3. ..lcN!:.m.....w.456....1...Q9.TY....m.....z..7Oj.....H..Jf....O. ..r>.v..{..,.F..}_U...R.U....@B.....kQt.-(.....8..MOB.....a..._t ..j.....!>j..<....v.X......'w..C...}.R....h.A../.U....t....h>..p .I.L....n......f.a.NZ.~H.....}....k.[\b..;.}.G......5.d.......y6 .....V.....|e.......U....}........N...J..++......p\:....w3 03/15-22:33:01.334521 0:E0:98:BE:D4:D5 -> 0:2:6F:33:C8:71 bssid: 0:2:6F:33:C8:71 Flags: ToDs FrDs Re 10.32.15.153:33824 -> 84.42.183.89:27264 TCP TTL:127 TOS:0x0 ID:45573 IpLen:20 DgmLen:1442 DF ***A**** Seq: 0xBAE38C8A Ack: 0x7C990613 Win: 0xFEDB TcpLen: 20 .P..k...U.$...L...5|@...Rh.A....w.... .......{......./..>A.5.=.......~.9..".......6.{..?.U...h3..k.9.. ...m...O....2\....c.<:..~...........mAz..|..}Z..+....._#m..y;... .....>..vm..t.#7.+.4....L.>.l..j..Y..0.........1...A..D....zFvw+ ^..kzV...M.9_..^....`l&.dY.FS.......L.Kh5.{P..3`.9..H.0..K.i-.2. .5.(.P....&.....\...b9.fL6i... \.^u.`....V*....Y.F.r.. F...q.... ........,.X.x....C....%|.Fs..+...Q.......k..........(...L7D.[.?. ....o.....2.";..}7U.9.."&..B......R.>D@x...%...J..a......l+h.... V....O....'e6.w..[.2"....(..AD..*.`..C..hG.y..L.R...T..=.-4..O`< .....K.....%M..Q..O6|.0s.W...w..B'...A.cZ.x.^..N2...S.w.f......' _.dY.._...9.U.u..t...o..7.{.-....@..%\.A[..H.W#P.T.i"..x.-.zT.L. ....>..L.k.%%s..7>wJf. ,..J:9y.2...nt....K.....>.....*...%.XV..Q ...(lh...u`k..q...U..}..r9O.....e..l$..O..R...W....N...5..G...e. ...GUX9....S..@!..X......?Ve.qrFo..S........<;.9RE...'.......+.. ae..`..].o.........m.... ..+z..>......*}D.5......t,.8.>......_.. ...%..~..sN....w&M9;.._s...Fl..d.%..cj{).}).....b./...%.......H. ...g..O.}...v.ISz.6c-...^.......=.)(3....a.WX....9q>..k.......px kMT...x. N.j.A.k...'..q.-E.z.5a).@...*.L.\~..............IO...". ...=../..9.&Wa.DS...-Va....7.5Y.0.......F.M.....'n......Y.n>,... tO.+j.3..-...mk.{Ko....?.b..X.*.G.fE.. 03/15-22:33:01.523022 0:E0:98:BE:D4:D5 -> 0:2:6F:33:C8:71 bssid: 0:2:6F:33:C8:71 Flags: ToDs FrDs 10.32.15.153:34344 -> 217.11.246.53:1134 TCP TTL:127 TOS:0x0 ID:45586 IpLen:20 DgmLen:92 DF ***AP*** Seq: 0x8F307F4E Ack: 0x60C53145 Win: 0xFFFF TcpLen: 20 0...@............................................... 03/15-22:33:03.257147 0:E0:98:BE:D4:D5 -> 0:2:6F:33:C8:71 bssid: 0:2:6F:33:C8:71 Flags: ToDs FrDs 10.32.15.153:33824 -> 84.42.183.89:27264 TCP TTL:127 TOS:0x0 ID:45683 IpLen:20 DgmLen:1442 DF ***A**** Seq: 0xBAE500F2 Ack: 0x7C990613 Win: 0xFEDB TcpLen: 20 .3Xx".....!0.|......S..e..B.+.(x..x.`P.jV!2...g..&.r.F....;..7LN f..Ql2=.!.~t~....c'.2!..{D...z....@q..W.^Z.J.<..U.?ZC...+q..w.<. M.......?.o:.y...g..+..@........6QHY.Z.D.......Y..._............ 5.\52...U.......Wr\}...B`....}.Z.E..k....:.k...A..%*mW..l!..?.CM .I..9.3..35....Po...j.sia[.....^.u..5F$t.Cj...XE-.O..._!T...K*.n 0 O..L..y.+.........I._..K_.0.T#...lIV+..........3.[Oc4|29.~}h.. .s?@.u....`.[3.~..;..2,i2 ..n...j.....'.}....,...X.......&...... d...........|.>..'...O.".....<.~l.Z.f.....g<.#........Rz.s....C. .......}..U...Ht+e..P..=.P}..........K{.......|D.zr..4.%al.N..&b ..........9.I.....[........n....Tt....R.'/7&..|x.s..r...QO..u.+. .?..~....s..xUP?......r....|!+.J...?.&.G.:&.&..u...........#5y.v 58{/.>....gW...b.X....UM..R....?lY.lxuM.*N..: .d..^/.<.CN.s...). .1i....pY....\....v.J]....b....M.J/......@g .vbP..K.p....4B...>. .~.6a....M.....p(..m(M..'....@.p....0-.L..mFa.I=.=%.......3..... L.o$..2".h....U...........r.h....T.$..7E....]r.T.....=..hri.T... *...{...........]S~....m.i...._..:4V...I.k&.l3....6.+P3.)T.Dc1F. .N..Qd....8...S../.y.Z....t0.>....z.i..XhMU..3 .@r.ga.C.-.\.M..[ .....01.#@;L......q4UC.+.&......a.Z...V?,...+..^ *...Dk......... ./.U.@.a.....{r.1.|rb..&.....aY......>..{...w.X.....;.k....=F... =.L.........V&Ul..L.\M............RP..MM..iM...agv5d...^SL<..E.. ..`..(fe..L..\....1.......V@7Y.p.....RmD4}.......&@....8..$.u=.. ..Z.Cc...........~...A.I..!...>..._. 03/15-22:33:03.330789 0:E0:98:BE:D4:D5 -> 0:2:6F:33:C8:71 bssid: 0:2:6F:33:C8:71 Flags: ToDs FrDs 10.32.15.153:32851 -> 81.19.44.44:23643 TCP TTL:127 TOS:0x0 ID:45689 IpLen:20 DgmLen:52 DF ***A**** Seq: 0x39B2D4D7 Ack: 0x95155187 Win: 0xFFFF TcpLen: 32 TCP Options (3) => NOP NOP Sack: 38165@22273 |