Marc Blanchard Virus Docteur

Aller au contenu | Aller au menu | Aller à la recherche

mercredi 7 juillet 2010

Top of cyber attacks per country

Here are the statistics of the Top of cyberattack from Secure Works stats

mardi 6 juillet 2010

Recherche Administrateur / Architecte réseau ayant expérience QoS

Voici une offre d'emploi proposée par BitDefender France:

Lieu : Île de France (92) Contrat :CDI Salaire : en fonction des études, compétences asquises et investissements intellectuels

Description du poste :

Au sein d'une équipe d'experts passionnés et investis au sein de la Direction technique d'un éditeur de logiciels de sécurité, vous serez en charge de l'installation, la mise en production, l'administration et l'exploitation des moyens réseaux et télécom constituant le backend de cette société.

Vous vous positionnerez en tant qu'administrateur infrastructure, et devrez maîtriser totalement le fonctionnement des équipements réseaux centraux et les moyens de production installés et en assurer le bon fonctionnement.

Vous participerez au bon fonctionnement des services délivrés par les réseaux en garantissant le maintien à niveau des différents équipements et infrastructures de communication dans un objectif de qualité, de productivité et de sécurité.

Vous participerez activement à la supervision, l'installation et la configurations des infrastructures et des audits de sécurité et de hautes disponibilités dont vous aurez la responsabilité.

Grande ouverture d'esprit sur les OS / Plateformes / Applications aussi bien serveur que poste de travail

Aptitudes / connaissances techniques parfaitement maitrisées :

Operating System :

Microsoft toutes versions (2000, 2003, 2008) avec ActiveDirectory

Exchange 2007/2010

SharePoint

Linux (Centox, Fedora, Debian, RedHat),

Backup (toutes technologies, y compris collaboratif et déduplication)

Serveur d'impressions

Outils bureautiques Windows/Linux/Apple

Connaissances sur SQL, PHP et réseau TCP, UDP, ARP

Serveurs: Samba intégré LDAP/AD HTTP (Windows et Linux) FTP SMTP DHCP DNS

Routeurs

DNS et reverse

MX

PROXY

Firewalls (hard et software)

Réseaux : xDSL, IP, WiFi, routage, MPLS, sécurité/firewalling.

Voix : VoIP, SIP, MGCP, PABX, IPBX, DECT.

INGENIEUR ADMINISTRATEUR RESEAUX - OPERATEUR H/F

Profil recherché :

Expériences demandées en :

- Administration de Réseaux : Fonctionnement optimal des outils, systèmes ou réseaux, Vision globale et actualisée des services fournis par le réseau (internet, voix, sauvegarde, messagerie convergente …), Suivi et analyse des performances, mise en place des mesures susceptibles d'améliorer la qualité ou la productivité des outils,…, fragmentation de réseaux par des WLANs...

- Les QOS portés à 99.8%

- Les systemes RAID, heartbeat

- Les backup collaboratifs et dédupliqués tout OS

- Les sécurités des réseaux WAN et LANs

- Support : Participation aux actions de maintenance préventives et curatives de support (astreintes possibles), Proposition d'améliorations,…

- Maintenance et sécurité : Gestion des accès, des évolutions et maintenance des matériels, des logiciels et du système, des performances (seuils d'alerte et tuning des ressources et produits du domaine),…

- Exploitation : Validation de l'installation et de l'intégration des nouveaux outils et équipements dans l'environnement de production, Traitement des incidents ou anomalies, formulation et suivi de leur résolution (support niveau 3), configuration et suivi des serveurs de messageries (Exchange) et de workflow (intégration de SharePoint) ,…

- Etudes : Étude, préconisation et implantation des matériels, outils et des logiciels adaptés, Veille technologique ACTIVE sur les différents aspects de l'infrastructure de communication (matériels, architecture, protocole), …

Formation : Niveau Bac + 2 à Bac + 5 ou expérience terrain

DEMANDES DE STAGE / ALTERNANCE /CDD s'abstenir.

Merci d'adresser votre candidature + photo + diplomes à Marc Blanchard via commentaires ici (Les commentaires postés ici sont privés)

mardi 25 mai 2010

Les Ghostnets : Êtes vous un Soldat de la cyber-guerre en cours?

Etat des lieux :

Type de délinquances qu'un simple PC peut héberger :

Espionnage des particuliers:

Comptes mails (mots de passe, accès sites sécurisés, etc)
Comptes Web 2.0
Identités et comptes bancaires
Carte d'identité, passeport, impôts, cartes grises, permis de conduire (documents scannés) au vue de création de faux
Machine zombie pour propager du SPAM (Zeus)
Hébergeur de systèmes de billing pour les FakeAV (mules)

CyberGuerre à partir des machines des particuliers:
Soldat de botnet : essentiellement en IRC
Soldat de ghostnet : en HTTP2P
Hébergeur de codes d'attaques
Des séquences d'attaques
Des logs des états lorsque les attaques sont en cours
L'hôte est référencé sur les moteurs de recherches

Voici un phénotype de ma base encyclopédique malwares qui montre le peu de perception par l’utilisateur face à une infection de ce type. Ces perceptions ne sont que des comportements fréquent du système et donc fréquemment ignorées par les utilisateurs.

La réalité est tout autre !

Voici un phénotype de ma base encyclopédique malwares qui montre toutes les technologies invisibles et pouvant être installées sur la machine de l’internaute à son insu et pleinement fonctionnelles.

Les Ghostnet :

C'est une évolution de grande ampleur des techniques botnet vers un réseau de machines zombies utilisant les technologies suivantes :
CLOUDING via le protocole HTTP-P2P,
Référencements sur les moteurs de recherches
Notion des machines soldats
Bridge de répartition de machines soldats
Processus de calculs des machines dépendantes du bridge

Objectifs:

Les DOS,
DDOS de pays gênants
DDOS des sociétés commerciales gênantes,
Héberger des plans et documents d'états,
Héberger des plans et documents terroristes,
Envoyer des informations nécessaires aux actions terroristes du monde réel
Entretenir une puissance de calcul et de bandes passantes importantes
Création de faux serveurs pour les FakeAV,
Phishing, vols
Rester indétectable

Le clouding ou le cloud computing:

C'est une technologie qui permet d'offrir des services ou logiciels, qui sont déportés sur de grandes infrastructures professionnelles, aux usagés sans aucune (ou presque) installation locale. Cette extraordinaire invention marketing est essentiellement faite pour faire payer les utilisateurs davantage...on leur expliquera que les ordinateurs qu'ils possèdent ne sont plus assez puissants!!!

Le clouding s'est largement développé, et voici un petit résumé de quelques applications/services de cloud computing.

Avantages Pour les TPE/PME:
Bénéficier d'une infrastructure technologique très performante
Bénéficier d'aucun frais de maintenance ou presque
Payer des services logiciels au besoin et à la demande

Pour les grandes structures Bénéficier des dernières innovations logicielles Baisser les coûts administratifs et d'administrations informatiques Bénéficier d'intégrations sur mesure en fonction des standards logiciels/machines du moment Bénéficier d'aucune rotation de matériel serveurs et donc d'administrations réseaux

Désavantages :
La sécurité
La qualité des chiffrements des données
La disponibilité des connexions internet
Les rapidités des lignes internet
Les payements à la demande !

C'est BOINC, qui a été le précurseur dans le domaine du clouding avec les calculs scientifiques du SETI@Home nécessaire pour déporter les unités de calculs puis rapatriement des résultats par le net.

Le principe est simple, un screen saver spécifique se met en mode calcul pendant les inactivités du processeur.
Tout cela a été développé pour des raisons de manque de budgets pour des acquisitions de gros calculateurs.

Aujourd'hui, le Boinc héberge de plus en plus de projet du type SETI@HOME. Le seti, aujourd'hui, a 573.000 machines d'internautes pour une puissance moyenne par heure d'environ : 5,551.80 TeraFLOPS.

Le ghostnet est l'évolution OBLIGATOIRE des botnets de grandes envergures. J'avais traité du sujet botnet sur ce blog, je ne vais donc pas y revenir.

Nous allons étudier cette évolution dans ce post.

Historique : J'ai commencé des études épidémiologiques sur le ver Confiker mutant dès sa naissance.
Depuis février 2010, a évolué de façon émergente du mode technologique du botnet au monde ghostnet, actuellement utilisé.
Les études ont bien démontré que ce ver est en constante évolution.
Je me questionne sur le pourquoi des chercheurs en sécurité informatique délaissent les technologies utilisées par ce ver.

Aller, on va dire que c'est parce qu'ils le détectent : FAUX!

Où bien parce que les patchs Microsoft empêchent le ver de se propager : FAUX.

Je m'explique :

La principale différence entre le monde du botnet et celui des ghostnets est qu'un réseau botnet interface ses clients et ses serveurs de façons nominatives via les IRC ou même celui des référencements sur certains moteurs de recherche de machines d'internautes avec des noms de domaines aléatoires.

Ces machines intégrant un réseau botnet ont une mission de serveur hébergeur ou de client sur un seul niveau Ethernet (à ne pas confondre avec internet;-)
En d'autres termes, les machines d'un réseau de botnet utilisent la technique que l'on ne nomme plus du 'Client/Server'. Un ou plusieurs clients communiquent avec un serveur nominatif.

Le monde des réseaux ghostnet est différent.
On utilise le clouding pour multiplier les puissances de calculs, de stockages, de transmissions de données contenant les instructions des attaques (codes, durée, victimes, stratégies, etc) et contrôler les réplications et gestions des bridges.

Un bridge est un procédé utilisé dans le monde du clouding qui consiste à donner un nom de domaine pour le service offert, et le répartir sur de multiples serveurs qui héberge le service concerné.

Les ghostnet utilisent cette technique afin de renforcer le nombre de machines actives, et obtenir une infrastructure de très forte puissance.

Voici un résultat théorique s’appuyant sur les comportements des différentes mutations de codes et en fonction des puissances des machines, des capacités RAM et bandes passantes que mon campus antimalware a pu vérifier sur diverses plateformes présentes sur le campus antimalware (deux réseaux contaminés indépendants au niveau hardware, lan et connexions internet sur Paris, idem sur un seul réseau contaminé sur la Vendée) :

En fonction des puissances machines, RAM et bandes passantes, il s’est avéré avec les résultats d’études isomorphiques et le compte-rendu des recherches homorphiques, que les comportements d’une machine à l’autre, d’un réseau à l’autre et d’une connexion internet différente de l’autre, des comportements différents.

La copie écran si dessous, démontre bien que le même nom de domaine qu'une machine hôte infectée va rechercher, à quelques minutes d'intervalle, est dirigée sur des adresses IP différentes.

LES RAMIFICATIONS INFECTEES au jour J de l'expérience:

Voici les procédés effectués dans cette expérience.

On infecte une machine utilisateur saine avec le ver.
On y installe une sonde réseau.
On attend que les référencements de nom de domaine dynamique, qui est associé à cette machine utilisateur, soient effectués par le ver.

On attend que la machine soit référencée sur le net.

On commence l'expérience.

Le vers va commencer une activation de recherche de machines hôtes afin qu'il se géolocalise dans une infrastructure réseaux la plus réactive à ses requêtes réseaux. Dans l'exemple ci-dessous, il cherche sur fr.ask.com ses ramifications.

Une fois effectuée, le ver va s'implémenter dans une des ramifications réseaux que nous allons pister pour l'expérience.

Nous prenons un des noms de domaines que le ver contacte. Grâce à notre sonde, nous allons vérifier l'adresse IP qu'il appelle en fonction du nom de domaine.

Nous tentons de tracer cette adresse afin de vérifier si nous sommes en technologie hybride botnet/ghostnet ou bien en technologie pure ghostnet.

Dans le cas d'un botnet, nous n'aurions qu'une seule IP de visible par rapport au nom de domaine.

Nous sommes donc en présence d'une technologie ghostnet.

Cette adresse est donc un bridge, car elle référence une multitude de noms de domaines.

Nous prenons un des noms de domaines afin de continuer notre investigation.

On s'aperçoit sur l'image ci-dessus, qu'une autre ramification est présente.

Nous allons montrer deux cas de figure:

Une autre ramification à partir de cet étage de ramification, qui devra être suivie jusqu'à la terminaison pour finir l'étude de l'investigation de la branche.

Et voici une terminaison de la ramification à partir de ce niveau :

Tout cela pour quoi faire?

Les attaques préférées de ce ghostnet sont les DDOS.

De simples flood sont envoyés à un serveur victime, ou branche de serveurs victimes

Explications de l'attaque sur ce schéma:

Quelle est la puissance d'un tel ver comme Confiker ?

Un confrère chercheur/épidémiologiste a publié un compte-rendu graphique qui démontre bien la puissance d'un tel ghostnet:

Coté sécurité:

Il faut impérativement surveiller les pare-feux logiciels mais également des box ADSL.

Voici un exemple d'une LiveBox ayant conservée les authentifications d'usines : admin/admin

Les lignes surbrillées sont les lignes qui ont été ajoutées par le ver. Il est à noter qu'il ne s'est pas trompé, car la .15 est un linux tandis que les deux autres machines sont infectées.
Je travaille actuellement avec les gens de CISCO qui ont mettent à disposition un logiciel de traçage de botnets, qui devrait bloquer les émergences/attaques botnet mais également ghostnet ou réseaux invisibles.

A suivre dans cette section….

Scientist -The Botnet networks become Ghostnet networks - English Section

I remind some re-publishers that these researches are under copyright and you must contact me for more information’s.

Ghostnet networks : are you a soldier ?

First of all, what is the difference between botnet and ghostnet?

The term ghostnet was used for different attacks from china computers.

Techniques used were interesting to make researches, because, the attack flows were so intense that scientifically difficult to confirm there were botnet capabilities.

The main difference that botnet activities don’t use the multi-level ramification networks, and don’t use the cloud techniques.

We will see in this section the main difference between botnet and ghostnet.

What is the current situation?

Here are the different types of delinquencies that a simple user computer is able to have?

Type of home user spying:

To spy users:

Mails accounts (passwords, secure web site accesses, etc)

Web2.0 acounts

Credit cards, bank logins and bank accounts,

Evasion of identity cards, passports, driving licenses, social security cards & numbers

Internet providing to make the user computer as a SPAM servers or bot (Zeus)

Underground Billing system for Rogues & FakeAlert business

Underground botnet administration consoles or Databases of zombie computers

Internet providing to make the user computer as a SPAM servers or bot (Zeus)

Cyberwar soldier from the home computers users :

Botnet soldier : most of time IRC techniques are used

Ghostnet soldier : use the HTTP2P techniques

Internet providing to make the user computer as attacks codes and instructions repository (most of time encrypted on the hard disk and hidden on bad physical hard disk sectors)

The attack sequences and the logical steps that the soldier (the home computer) can do

Logs repository of the status and states of the current attack

This computer has its own fake domain attribution transparently.

Here is ghostnet malware encyclopedia phenotype that shows us the computer user perception face to such of malware. These perceptions are typically the behaviors that a computer and/or system can show on a normal uses. So these perceptions are often ignored by users.



The reality is other!

Here is ghostnet malware encyclopedia phenotype that shows us all the potential ghostnet technologies that can be invisible and found randomly on computer users (depending the power of the ghostnet)

Ghostnet:

It is a world wide exponential capacity of botnet transformations.

Ghostnet techniques use the clouding on HTTP2P protocol.
They use internet dynamic DNS the most useable to make the user computer as a soldier
They do some bridge reference on search engines as google, yahoo search, ask, etc of home users or enterprise computers
They can have the control to make the computer as a bridge, a repository and/or an attacker

Objectives:
DOS,
DDOS of countries
DDOS important sales companies (VOD, streaming, corprates sales, etc),
To be repository of countries strategies, political, or other documents,
To be repository of terrorist schema and documents
To maintain a quality of service of the ghostnet on calculation and bandwidth capabilities
To be repository of FAKEAV and Rogues billing systems
To stay undetectable by AV and Firewalls including hardware firewalls.

The Clouding or Cloud Computing:

Is the technique that let to move all computer software’s, services, billing to a powerful and professional computers/servers infrastructures. In fact, it is a wonderful marketing invention to force customers and enterprise to pay more and more. Anyway, they will explain lot of advantages like your computers need more power, don’t buy, we will provide you the software on several big servers!!!! You see the message!

Anyway now all is on the cloud, have a look on the following pictures:


In fact, it is the BOINC that demonstrate that the cloud can work. The SETI@Home is a perfect example to cloud the results that screen savers calculations do on users computers during that they drink … coffee, of course !

Today, the SETI@HOME has PER HOUR 573.000 online computers for a POWER of 5,551.80 Teraflops.

The ghostnet is the MANDATORY evolution of botnet that need to be more and more big. I already publish some posts concerning my researches on botnet on this blog.

Historical steps :

Since the born of downadup (confiker) I start epidemiological researches. I put in place a controlled active contaminated architecture, and let the malware to live its life. Millions of logs had been collected to analyze its behaviors since the start period.

In end of august 2009, my probes sent me some information’s that some behaviors changed : some files were created, checksums changed regularly, but no other new processes were created.

I decided to reinforce the controlled contaminated infrastructure and decide to open not one network but three geographically and networks independent in my campus.

In February 2010, the network activities were different as usual, but the files continue to change as usual.

Here are the results of these latest months since Feb 2010.

The ghostnet uses clouding on several layers of computers. The botnet only one. Ghostnet uses the network, CPU, RAM capabilities of infected users computers.

Malware clouding that use networks multi-layers, let the ghostnet to reinforce the number of active computers, but also to have an enormous bandwidth and power of CPUs calculations.

Here are the theorical predictions of capabilities shown on the 3 different infrastructures of the contaminated controlled networks on the campus:

As we can see on this picture, that after isomorphic researches and the homomorphic report, the behavior changes depending the bandwidth network, cpu and ramp capabilities. It is interesting that with the same malware codes executed on the same time, on several differents networks, computers and architectures, that the behaviors are different.

The following screen shot show the bridge techniques used now but this malware. In fact, at its borning, the reseaches were based on more than 500 domains names each two hours. Today the malware search 5 domains names, because they use only ONE same domain name, but the IP change as shown the following shot. It is the same domain name, but have a look on the IPs. The 2 shots were taken at 3 minutes intervals.

Here is the experimentation that was done the D day to analyze the ramifications.

I describe you the processes done on this experimentation:
I installed before infection a network probe
I infect a controlled home user computer
I wait that the fake domain name was created for this computer

I wait that this computer is referenced on the search engine

We can start the experimentation.

The worm will start the research activation of other hosts computers the most near of our infected computer geographically. In the following picture, the worm goes to fr.ask.com because the IP of our infected computer is located in France. By this search engine, the worm will find some hosts to be include on ramifications the most closed geographically OR and this is important to know, will join the ramification that is needed. In other words, if one of ramifications needs some specific capacities to survive, our infected computer will join this particular ramification!

Once done, we are ready to start the ramification profiling.

We take the fake domain name that the worm tries to reach. Our probe will give the IP corresponding of the fake domain name.

So we profile the fake domain name by its IP in the first step.

We will see if the IP is a standalone computer, in this case we are in front of botnet techniques, if it is more than one IP, that’s mean ramification.

In this case, we are face of a ghostnet. You can see multiple fake domains names referenced at this step.

That’s mean that the IP address that our infected computer tries to reach is a ‘Bridge’

What we can conclude at this step:
A. we are face to a clouding network B. it demonstrates that the evolution of this worm was done, and that now, no need to try to reach 500 fake domains to check if attack codes or instructions are available, only one or two are enough.

Let continue our investigation. I will choose one of these domains to follow to check if the stair of ramification is stop after this first stair or not.

We can see that a ramification is there

Now, I will show you two cases:

An other ramification that will drive us to another one.....

And in the following picture, we can see the ended point. This end point is a simple computer user.

All of this, what for?

They have power with the infrastructure that we know now. The every day is to get some new computers to increase more and more the power of such of invisible network.

The preferred ghostnet attacks are the DDOS.

In fact, simple floods are sended to the victims or branch of victims.

The following picture will show an example (in french but easily translated by the concept) :

What is the real power of such of malwares network?

A scientist published a graphical of his researches concerning this kind of network. That is demonstrating the power of such of network.

Security point:

Users must understand that new generations of worms knows how to modify the software firewall, but also the xDSL boxes (the worm tries to connect itself on SSH or http with brute force techniques.

Here is an example of a Orange LiveBox that keeps the factory user/password authentification, I mean : admin/admin

The blue lines are the lines that be added by the worm. We must note, that the worm didn’t open any port on the .15, because it is a linux computer. But the 2 others IP are infected by the ghost. We also can note, that only 1 IP has the 80 port opened not both.

I currently in contact with CISCO R&D, and thy will give me a security software that is able to give me more reports.

To be continued on this section….

mercredi 19 mai 2010

Les projets de cablages au net du continent africain

Voici un plan de cablage du contient africain qui devrait voir le jour début 2011.

100 millions d'internautes sont attendus avec une interconnexion océanique à 1300 gigabits directe avec les backbones francais.

... portes ouvertes aux développements encore plus denses des botnets et ghostnet.

..à suivre...

mardi 11 mai 2010

Contest iAWACS 2010

Samedi 8 mai 2010 – dans la soirée

Pour sa deuxième édition, l’iAWACS (International Alternative Workshop on Aggressive Computing and Security) organisé par ESIEA (Ecole Supérieure d’informatique, électronique et Automatisme) a démontré qu’aucun antivirus du marché n’empêche l’exécution de programmes malveillants. Les défenses basées sur les listes noires de programmes d’attaques des antivirus laissent passer des attaques, dont certaines sont assez simples ou assez anciennes.

Suivez le lien sur MagSecurs.com

Même si je suis anti-contest de ce type, j'aimerai apporter un commentaire aujourd'hui, car vous êtes nombreux à me solliciter pour connaître mon point de vue :

Le challenge de l'IAWACS permet comme dans tout contest (les sécurités linux, réseaux, applicatifs, etc) de démontrer que tout ce qui est créé par l'homme peut être détruit par l'homme.

Dans un premier point, ce contest est intéressant, et montre bien, que les analyses actuelles ont leurs limites, mêmes celles qui utilisent des technologies de proactivités.

Le second point démontre également, que des attaques non référencées développées dans le but de nuire à une entreprise ou à un individu sont tout à fait possible sans aucune détection.

Mais il ne faut pas que le lecteur, au vu de ces résultats qui sont des résultats logiques de part les développements de malwares spécifiques, s'imagine que les antivirus et autres suites de sécurité n'ont aucune utilité.

Une suite antivirus est la ceinture de sécurité de l'ordinateur de l'utilisateur. Cela n'empêchera pas d'avoir un accident, mais les risques seront minimes et le protègera au maximum.

Le SANS Internet Storm Center nous indique que sans protection, une machine connectée au net a un temps de survie de moins de 3 minutes, ensuite les attaques réseau ou de malwares sont tellement nombreuses que la machine finie par deny of service de sa couche réseau voire du système.

Par conséquent, un antivirus arrête 99% des attaques et codes malveillants dits In The Wild, c'est à dire les codes malveillants transitant de façon autonome, transparente sur le réseau et USB, seront arrêtés et nettoyés...l'utilisateur pourra continuer d'utiliser sans problème son ordinateur.

Sans antivirus, l'ordinateur serait un véritable vivier de codes malveillants et un soldat de botnet et ghostnet de deny of services pour contribuer à des attaques d'institutions ou de pays, voire même participant actif de groupes d'hacktistes notoires.

Ca laisse à réfléchir!!!

jeudi 15 avril 2010

All the latest topics of discussion on Virus activities

This is a shortcut of latest news on viruses activities. These informations are promoted by twitter.

All the latest topics of discussion on Botnet activities

This is a shortcut of latest news on Botnet activities. These informations are promoted by twitter.

All the latest topics of discussion on Malwares activities

This is a shortcut of latest news on Malwares. These informations are promoted by twitter.

vendredi 9 avril 2010

Les liens URLs raccourcis utilisé par Twitter et autres...

Beaucoup de gens sur Twitter ou d'autres services sociaux utilise des URL de raccourci pour la promotion des sites web d'informations.

Ce concept est assez simple à utiliser:

Exemple:

Nous avons ce lien d'origine: http://marc-blanchard.com/blog/index.php/toc/toc

Aller sur http://www.bit.ly et taper l'url à raccourcir :

Le résultat sur le lien d'origine est le suivant:

http://bit.ly/cYdLPl

Autre type de services existent avec le même concept mais avec des options d'anonymisation, ou tout autre type de services, ou bien même concept, comme: http://ow.ly

Le danger:

a. Des lots de développeurs de logiciels malveillants utilisent maintenant cette technique:

- Pour la promotion des sites web compromis ou malveillants

- Pour ne pas être détectable par les antivirus ou anti-phishing et ainsi bypasser les filtres des moteurs d'analyse

- Pour ne pas être détectable par les moteurs antispam, parce que beaucoup de spams arrive maintenant avec celle de cette technique.

b. Vous ne savez pas ce que vous obtenez et où vous allez!

- Le principal problème est que lorsque vous cliquez sur ce lien, vous ne pouvez pas savoir ce qui est derrière ou où vous allez et sur quel genre de site, vous cliquez ... Suffit de faire confiance à votre interlocuteur qui vous a envoyé le lien.

Ainsi, vous pouvez télécharger des fichiers malveillants, des exploits PDF, vous dirriger sur des sites web malveillants ... Vous cliquez, vous accédez, vous êtes infecté automatiquement ... trop tard!

Conclusion:

Nous parlons actuellement beaucoup sur les réseaux paralleles de type GhostNet ou botnet qui sont maintenant les centres de gestion et de propagations malwares grâce à des moteurs de recherche en utilisant le httpp2p (http2p), techniques pour leurs codes malveillants males et femelles contribuant aux infections actives via requêtes en temps réel en RAM. Le fait d'utiliser les systèmes de référencement de ce type sur le moteur de recherche avec ce concept signifie que les sites Web infectés deviendrons de plus en plus visités et constituront des zones exploitées sans pour autant y être inquiétés ....

Techniques de suivre attentivement

The Short HTTP Links dangers

Lot of people on Twitter or other social services uses shortcut urls to promote web sites informations.

For this the concept is quiet simple to use:

Example:

We have this orginal link :

http://marc-blanchard.com/blog/index.php/toc/toc

And go to the http://www.bit.ly

The result on the original link is the following:

http://bit.ly/cYdLPl

Other exists kind of such of services with the same concept exists with anonymizer options, or other kind of services, or the same concept like: http://ow.ly

The danger :

a. Lot of malware devs use now this technique :

- To promote compromized web sites

- To do not be detectable on antivirus or antiphishing web filters scan engines

- To do not be detectable on antispam engines, because lot of spams arrives now with such of technique to route you to compromized web sites.

b. You don't know what you get and where you go !

- The main problem is that when you click on such of link, you cannot know what or where you go and what kind of site you click...Just have to trust your contact person that sended you the link.

So you can download malware files, exploited PDF, goes to malicious web sites...You click, you access, you are infected automatically...too late!

Conclusion:

We currently talk a lot on ghostnet or botnet that are maintaining with malwares propagations thru search engine using also the httpp2p (http2p) techniques for their males and females codes (active infections).

The fact to use the underground referencing systems on search engine with this concept means that some fakes infected web sites or exploited areas can be numerous in the next future....

Techniques to follow carefully ;-)

jeudi 26 novembre 2009

26th November 2009 - Predictive theorical calculations of Conficker Spreading

After to have been study the isomorphic reports and to apply a scientifically calculation, the variants that i have on 3 LANs with the current version of Conficker before the automatic changes is :

Conficker Variant E is able to spread on the global internet on : 23 days, 22 hours, 57 minutes, 1.20 seconds

jeudi 19 novembre 2009

Méthode de calcul de l'emergence d'un stormworm (PenseBête)

Un petit pense bête perso pour mes recherches... Cela m'évite de chercher dans mes tablettes ;-)

Divergente Propagation

ρ=(‡Δt/pi)3600

‡=273000km/s Δt=time between 2 infections

dimanche 15 novembre 2009

Pensee a reflechir sur le green et l'informatique...

Aller, je vais faire mon ecologiste ;-)

Je ne sais pas vous, mais beaucoup de mails que je recois ont de petites notations interessantes apres la signature de mes correspondants :

Ne gaspillons pas! N'imprimez ce mail que si nécessaire....

Oui, ok, alors je me suis amuse a faire un petit calcul dont le sujet est :

Entre un emetteur d'un email et le receveur, le mail passe environ sur 7 ordinateurs (incluant les machines des internautes, serveurs mails, dns, etc) Chaque ordinateur consomme en moyenne 500watts, et ce n'est qu'une moyenne.

J'ai pris des donnees de fabrication de l'electricite d'une petite centrale nucleaire, qui a elles toutes en France, representent quand meme 80% de notre consommation.

Ensuite, entre les joules, les volts, les intensites, les watts, etc, j'ai reussi a atteindre les resultats suivants :

A CHAQUE MAIL QUE NOUS ENVOYONS, 0.0021 NANO GRAMME D'URANIUM EST UTILISE.

Etant donne qu'on ne sait pas quoi faire de nos dechets, alors qu'un arbre peut etre plante, replante, pensez vous qu'on dit revenir au papier, sachant qu'il est recycle ou envoyer un email qui pollue franchement beaucoup plus???

A mediter....

15th November 2009 - Isomorphic Behaviors on 64 bits environment

All samples that i have seems to have problems to be launched on the new Windows 2008 server 64 bits on the LAN002 of Paris Campus.

I will get other samples to try to proceed to new infections on Windows 2008 server 64 bits.

Concerning the SEVEN PRO 64 bits, the infection has been executed. Probes will say if infections worked or not.

samedi 14 novembre 2009

14th November - New version of the auditing controlled infected LANs/WANs for better real time reporting

Due to lake informations that oldest probes didn't catched, i am obligate to change the technologies probes and to choose more sensible probes to have more possibilities to make researches with more details.

That's why new version of the complete controlled infected LANs has been changed this weekend in the LANs located in the Paris Campus.

Specific developed tools didn't changed :

Personal development tool : Malicious Applications Probes version 3.0.0.0

Network Sniffer tool : Packet Analyzer 1.0.1

Taxinomy Phenotype Collector : version 2.0.0.1

I develop two new tools for reporting :

Log-Mailer version 0.0.1.1 : This tool sends to me logs by mail to be implemented automatically on the taxinomy phenotype system

GWLog-Push 0.0.1.2 : This tool send on FTP servers in real time the gateways logs that you can read in this blog

reports-conficker-xxxx.php : developped by JB the BitDefender technical supervisor, this php tool lets the logs to be readable humanly

The global architecture changed :

Geographical Conficker controlled infection on the Paris Campus AntiMalware:

LAN001-dslam-78-velizy : professional 32 bits environment :

Network : 192.168.1.0 / 24

Gateway (linux 32 bits) : 192.168.1.30

XP-SP3 Pro : 192.168.1.20

Windows Server 2003 : 192.168.1.10

LAN002-dslam-78-velizy : professional 64 bits environment :

Network : 172.22.0.0 / 24

Gateway (linux 64 bits) : 172.22.0.30

Seven Pro 64 bits : 172.22.0.20

Windows Server 2008 64 bits : 172.22.0.10

Geographical Conficker controlled infection on the West of France Campus AntiMalware:

LAN001-dslam-85-vendee : professional 32 bits environment :

Network : 192.168.1.0 / 24

Gateway (linux 32 bits) : 192.168.1.15

XP-SP3 Pro : 192.168.1.11

XP-SP2 Pro : 192.168.1.10

vendredi 13 novembre 2009

13rd november 2009 - The softwares statistics do not give enough informations...

After some days of getting informations, the statistics softwares that i choosen don't give me enough informations to provide a good research.

That's why i decided to change the complete infrastructure of the conficker networks.

I will put in place during these next days, and i will explain the new version of infrastructures...

Stay tuned !

dimanche 1 novembre 2009

1st november 2009 - Statistics in real time of the Confiker activities in the Campus located in West France

Follow statistics in real time of the Confiker activities in the Campus located in West France, please click on the picture.

mercredi 28 octobre 2009

28th October 2009 - The West of France Labs is active...

The campus antimalware is devided geographically.

The main reason is to study the behaviors of Conficker / Downadup on different DSLAMs.

I will be able to provide epidemiological researches and to capitalize on behaviors to employ a strong phenotype.

So, currently the campus is located in Paris region and the West of France region.

To capitalize on the Deming methods, both of campuses will work on the same samples to continue to have isomorphical results and homomorphicals reports.

For this I decided to use a real time tool called ntop that is able to publish in real time specific traffics.

These statistics will be published on this blog per campus.

These statistics will show also the activities in case of attacks.

All of this will be published on specific section on this blog : Follow Conficker activities in Real Time.

Soon, the same concept will be published on Paris region

samedi 17 octobre 2009

17th October - Status

Since the 5th, the behaviors of Conficker/Downadup seems to stabilize.

I'm under to prepare a new geographic lab located in the west of France and connected on a different DSLAM.

I also prepare a new architecture on another network with new plateforms : Seven 64 bits, Vista 64 bits, and XP 32 bits.

On the first plateform, i include Windows 2008 FS 64 bits and will run the samples.

So, i will let you know the main conficker modifications on all of the systems.

Stay Tuned ;-)

mardi 6 octobre 2009

Protocole d'éradication de CONFIKER/DOWNADUP en réseau d'entreprise

PROTOCOLE d’ACTION en cas de ver DOWNADUP/CONFIKER nouvelle génération sur un réseau Entreprise

Bit Defender Client Security 3.1.7 ou supérieur :

NMAP version 5.00 ou supérieur

KB security patch Microsoft

Bloquer sur les parefeux de l’entreprise le port 445

Lien Produits BitDefender 3.1.7 et pour la Console : http://download.bitdefender.com/SMB/Workstation_Security_and_Management/BitDefender_Client_Security/Windows/Current/FR/Version_3.0/

Les Addons pour la Console: http://download.bitdefender.com/SMB/Workstation_Security_and_Management/BitDefender_Client_Security/Windows/Current/FR/Version_3.0/server_addon/BitDefender_Security_for_Windows_Servers_Server_Addon_(for_32_bit_Management_Servers)_fr.exe

Antivirus du serveur http://content-down.bitdefender.com/SMB/Windows%20Servers/Current/FR/

Outil de désinstallation serveur en cas de nécessité: ftp://ftp.editions-profil.fr/Versions_Evaluation/BitDefender/Windows/Serveurs/v2/Windows_Servers_Uninstall_Tool.exe

NMAP :

http://nmap.org/dist/nmap-5.00.tar.bz2

KB Microsoft :

http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx

http://www.microsoft.com/technet/security/Bulletin/MS08-068.mspx

http://www.microsoft.com/technet/security/Bulletin/MS09-001.mspx

Outil de désinfection BitDefender

PROTOCOLE A APPLIQUER : En cas de pandémie de ver/worm/stormworm

Méthodes et plan d’action.

ATTENTION : Respecter cette méthode dans l’ordre décrit. Si une des étapes est oubliée, le ver risque de réagir et changer de comportement, et par conséquent incontrôlable.

PS : cette procédure est actuellement adaptée au ver CONFIKER/DOWNADUP, et nous nous réservons le droit de la modifier sans préavis et en temps réel pour répondre aux résultantes des attaques zero day.

Préparations :

1/ Prendre une machine sous linux, la connecter au réseau instable, et installer NMAP comme noté dans ce bulletin

2/ Installer ou passer en version BitDefender console Client Security 3.1.7, BitDefender Business client 11.0.0.8 et BitDefender Security for Windows Server 3.3.0 sur tous les postes et serveurs.

3/ Télécharger les KB de Microsoft sur la machine ou se trouve la console BitDefender Client Security 3.1.7

4/ Appliquer la règle suivante sur les parefeux connectés à internet :

Inbound : Deny : source 0.0.0.0 destination 0.0.0.0.0 port : source 445 destination 445 on TCP+UDP

Outbound : Deny : source 0.0.0.0 destination 0.0.0.0.0 port : source 445 destination 445 on TCP+UDP

Préparations et Procédures d’installations / Migrations

NOTA : Cette section n’est pas le plan d’action (voir plus bas)

Installation NMAP sur la machine Linux:

Si vous avez une distribution RedHat, CentOs ou Fedora récente téléchargez le package comme suit :

yum install nmap

Sinon téléchargez les sources puis compilez le. Attention si vous étes sur une plateforme 64bits, il faut installer les librairies libstdc++

wget http://nmap.org/dist/nmap-5.00.tar.bz2 tar xjfv nmap-5.00.tar.bz2 cd nmap-5.00 ./configure make make install

Utilisation qu’il faudra lancer lors de l’étape du plan d’action :

Pour tester le réseau :

nmap -PN 192.168.0.0/24 -p139,445 -n -v script smb-check-vulns script-args safe=1

Pour loguer le résutat :

nmap -PN 192.168.0.0/24 -p139,445 -n -v script smb-check-vulns script-args safe=1 >> /directory/resultat.log

Tous postes infectés seront taggué comme INFECTED.

Si POSSIBLY INFECTED, soit NMAP n’arrive pas à tester (imprimantes réseaux, SAN, Samba Linux, etc) ou soit une vulnérabilité sur cette machine reste active si elle est sous Windows --> Cette machine devra être analysée par l’administrateur

Installation / Migration des produits BitDefender :

I ) LES PRES REQUIS D'INSTALLATION

Les postes serveurs: Net Framework version 2 minimum *(SP2)* Dernière Mise à jour Windows *(SP2 minimum)* Pare-feu Windows désactivé (PAR LES SERVICES) Partage de fichiers et d’imprimantes activé 800 Mo (minimum) de libre sur le lecteur C:\ Workgroup: partage simple désactivé

Les postes clients Net Framework version 2 minimum *(SP2)* Dernière Mise à jour Windows *(SP2 minimum)* Partage de fichiers et d’imprimantes activés 115 Mo (minimum) de libre sur le lecteur C:\ Workgroup: partage simple désactivé TOUS LES POSTES CLIENTS DOIVENT ETRE ALLUMES.

II ) INSTALLATION DE LA CONSOLE

1] Suppression des programmes Allez dans l'ajout/suppression de programmes de windows. Désinstallez tous les produits BitDefender étant sur la machine serveur.

2] Appliquez l'utilitaire de désinstallation « Windows_Server_Uninstall_Tool.exe » (utilitaire téléchargé précédemment)

3] Redémarrer votre serveur.

AVANT D’ALLER PLUS LOIN IL EST IMPERATIF QUE TOUS LES PRE REQUIS DU SERVEUR SOIENT MIS EN PLACE.

4] Installation BitDefender Client Security.

Sélectionnez une installation personnalisée Gardez les paramètres par défauts et faites suivant. Selon les besoins sélectionnez votre type de serveur. Conservez les ports par défauts Installez une nouvelle base SQL. Garder les options par défaut. Si vous rencontrez des problèmes changer l’instance en « BDMS2 »

7] Installation de l'addon (téléchargé précédemment). BitDefender_Security_for_Windows_Servers_Server_Addon_(for_32_bit_Management_Servers)_fr.exe

III ) INSTALLATIONS DE BITDEFENDER FOR FILE SERVER

1] Installation Installez BitDefender Security for File Server que vous avez téléchargé précédemment. BitDefender_Security_for_Windows_Servers_v3_(x64 ou x86)_FR.exe

2] Choix des composants Sélectionnez le composant BitDefender for File Server uniquement.

3] Terminez l’installation

4] Redémarrer le poste serveur (important)

Installez BitDefender for File Server sur tous les serveurs de votre parc

IV ) DEPLOIEMENT DES POSTES CLIENTS

1] Lancez BitDefender Client Security Double-cliquez sur l’application BitDefender Client Security présente sur le bureau.

2] Identification Identifiez-vous sur la console. Le mot de passe par défaut étant « admin » BitDefender Management Console sous forme de deux fenêtres, celle de gauche permettant de sélectionner les différents menus puis celle de droite qui vous permet de configurer les paramètres.

3] Authentification Rendez-vous dans l’onglet « outils », puis cliquez sur « Administrateurs des authentifications » enfin cliquez sur le boutons « + » en haut à droite.

Renseignez les champs.

4] Enregistrement du produit. Allez dans l’onglet « outils », puis dans « enregistrement » enfin rentrez votre clef d’activation Bitdefender Client Security.

5] Création d’un groupe. Pour administrer les postes clients, la création d’un groupe est nécessaire. Au niveau de la fenêtre de gauche de la console, allez dans « dossier ordinateur ». Dans cette arborescence, 3 menus sont présents. Cliquez droit sur le premier (ordinateurs administrés) et créer un groupe.



6] Création d’une politique Antivirus Dans l'arborescence de gauche, rendez-vous dans le module "politiques". Allez dans créer une nouvelle politique, puis dans l’écran de droite, double cliquez sur « Paramètre Antivirus »

7] Paramétrage de la politique Cochez la protection en temps réel. Mettez le niveau de protection en "Personnalisée" Modifier les actions appliquées en cas de détection :



Action à appliquer lorsqu'un fichier infecté est trouvé Première action : Désinfecter le fichier Deuxième action : Mettre en quarantaine

Action à appliquer lorsqu'un fichier suspect est trouvé Première action : Désinfecter le fichier Deuxième action : Mettre en quarantaine



Conservez les autres options par défaut. Cliquez sur terminer.



8] Affectation de la politique APPLIQUER CETTE POLITIQUE AU GROUPE QUE VOUS AVEZ CRÉÉE

Pour se faire, mettez le groupe en surbrillance. Planification: "Une fois" Puis cliquer sur "cliquez ici pour affecter cette politique"

Grâce à cette politique, chaque nouveau poste intégrant ce groupe recevra l'antivirus automatiquement.

9] Déploiement de l'agent. Rendez-vous dans l'onglet "outils" et sélectionnez le module "Network Builder"

Dans le cadran de gauche vous retrouverez tous les postes du réseau. Dans le cadran de droite vous retrouverez vos groupes.

Grâce au procédé glisser/déposer, déplacez les postes clients dans le groupe créé.

Attention! Ne rentrez pas les serveurs dans ce groupe.

Enfin cliquez sur "Appliquer les modifications"

10] Notifications des utilisateurs Une fenêtre nommé "Déploiement de l'agent" s'affiche.

Dans celle ci, cocher les options suivantes:

Installer l'agent sans interface utilisateur Faire un ping des ordinateurs cibles avant le déploiement Ne pas redémarrer à la fin de l'installation

Enfin vérifiez le nom du serveur et lancez le déploiement.

11] Etat de l’avancement Gardez la fenêtre de contrôle Network Builder jusqu'à la fin du déploiement. Certains postes seront en échec. Cela signifie que ces postes ne disposent pas des prés requis énoncé ci-dessus. Il est donc important de faire le nécessaire pour pouvoir procéder au déploiement.

Faites les mises à jours Windows et net Framework de ces postes.

12] Création d’un serveur de mise à jour Vous pouvez définir un serveur local de mises à jour Pour se faire, allez dans « démarrer », « programmes files », « Bitdefender Management Server » puis « Serveur de mise à jour BitDefender ».

Dans l’assistant de configuration gardez l’adresse par défaut.

Indiquez ensuite un répertoire de stockage de mises à jour. C’est ici que les bases virales seront téléchargées Utilisez le port 80 (ou bien un port libre et ouvert sur votre Firewall).

Sélectionnez les composants Business Client et File server Faites suivant.

Un écran résume les paramètres de la configuration. Pour terminer appuyer sur le bouton « Mettre à jour »

13] Création des politiques

Retourner dans la console. Pour terminer ce déploiement, rendez-vous dans les politiques.

Créer les deux politiques suivantes :

Politique « Paramètre du Pare-feu »

Cochez les options suivantes :

Pare-feu activé Appliquer le profil générique à tous les réseaux Profil générique Profil actuel Règles essentielles

Laissez les réponses automatiques par défaut et terminer la configuration Appliquez cette politique au groupe créé.

Politique « Mise à jour planifiée »

Emplacement principal : http://adresse_ip_serveur Emplacement secondaire http://upgrade.bitdefender.com (cochez la case si un proxy existe)

Paramétrez votre proxy (si proxy il y a)

Puis terminer la politique

Assignez-la au groupe créé.

La migration est terminée

Installation des mises en place des KB de Microsoft prêt à être déployé lorsque le plan d’action le demandera:

Créer un script WMI

Dans la console, allez dans le menus « Script WMI », créer un nouveau script et double cliquez sur le script « exécuter le programme ».

Configuration du script WMI

Sélectionnez «L’application se trouve sur cette machine. Renseignez le chemin ou se trouve les patchs de sécurité Windows. Cochez l’option « paramètres » et rentrez la commande suivante :  /quiet  Cochez « Exécuter avec les droits de l’utilisateur actuel ». Terminer la configuration. Faites de même pour chaque KB de windows

IMPORTANT CHAQUE POSTE DU PARC EST CONCERNE PAR CES MISES A JOUR.

ATTENTION ! Si un seul poste ne dispose pas des versions XP SP2, Net Framework 2.0 SP2 et les KB de windows, le parc sera vulnérable aux nouvelles infections !

Installation des mises en place de l’outil de désinfection prêt à être déployé lorsque le plan d’action le demandera:

Créer un script WMI

Dans la console, allez dans le menus « Script WMI », créer un nouveau script et double cliquez sur le script « exécuter le programme ».

Configuration du script WMI

Sélectionnez «L’application se trouve sur cette machine. Renseignez le chemin ou se trouve l’outil de désinfection. Cochez « Exécuter avec les droits de l’utilisateur actuel ». Terminer la configuration.

IMPORTANT: CHAQUE POSTE DU PARC DOIT APPLIQUER CET OUTIL.

PROTOCOLE DE PLAN D’ACTION CONFIKER

Suivez cette procédure scrupuleusement dans l’ordre indiqué :

1. Fermer les ports 445 inbound et outbound sur les parefeux de l’entreprise y compris pour les réseaux interconnectés avec les règles suivantes: Inbound : Deny : source 0.0.0.0 destination 0.0.0.0.0 port : source 445 destination 445 on TCP+UDP

Outbound : Deny : source 0.0.0.0 destination 0.0.0.0.0 port : source 445 destination 445 on TCP+UDP

NOTA : Pensez bien à remonter ces règles au plus haut des règles globales

2. Migration / Installation de BitDefender (BD) en version 3.1.7 sur un serveur.

3. Installer BitDefender antivirus sur ce serveur et lancer une mise à jour.

4. Vérifier que l’analyse temps réel de ce serveur soit avec les options pour les fichiers infectés et suspects : 1ere action : désinfecter – 2eme action : 40aine

5. Aller dans la console de management BD (ne pas confondre avec la console de l’antivirus serveur) installée sur ce serveur.

6. Application et déploiement sur tous les postes et serveurs d’une politique de l’analyse temps réel de BD (BitDefender) sur TOUS LES FICHIERS pour les fichiers infectés et suspects Action : Désinfecter / Mise en 40aine

7. Vérifier, via la console BD, que toutes les machines du réseau soient à jour avec cette politique de sécurité, et appliquer cette règle pour les nouveaux postes connectés. Il est à noter que certaines machines du réseau ne seront pas forcément à jour au niveau moteur d’analyse ou signatures. Notez ces postes, mais n’intervenez pas tout de suite physiquement. Passer au point suivant.

8. Mettez en place une politique de règles du firewall de BitDefender à partir de la console BD avec les règles suivantes. Ces règles sont temporaires mais doivent être obligatoirement déployées.

Configuration de la politique du pare-feu

Paramètre général Activer le pare-feu : a coché Bloquer le trafic : ne pas cocher Utiliser un profil générique pour tous réseaux : ne pas cocher

Paramètres du profil Profil Générique : a cocher

Appliquer les paramètres à: Profil actuel : a cocher

Vérifiez que toutes les autres options soient décochées exceptés "les politiques d'administration".

Nous allons temporairement pour la désinfection bloquer les ports suivants :

445 en TCP et UDP 139 en TCP et UDP

Appliquez les régles suivantes :

a. Blocage du port 445/TCP

Cliquez sur "Gérer Les Règles" Cliquez sur "Ajouter une règle" Dans processus, laisser décochée cette option Protocol : basculez sur TCP Direction : basculez sur Tout Action : basculez sur refuser

Source Adresse IP : mettez à 0.0.0.0 Mask : appliquer à 0.0.0.0 Port : basculez sur spécifier un port et écrire "445"

Destination Adresse IP : fixer à 0.0.0.0 Mask : fixer à 0.0.0.0 Port : déclarer "N'importe quel ports"

Cliquez sur "ajouter"

b. Blocage du port 445/UDP

Cliquez sur "Gérer Les Règles" Cliquez sur "Ajouter une règle" Dans processus, laisser décochée cette option Protocol : basculez sur UDP Direction : basculez sur Tout Action : basculez sur refuser

Source Adresse IP : mettez à 0.0.0.0 Mask : appliquer à 0.0.0.0 Port : basculez sur spécifier un port et écrire "445"

Destination Adresse IP : fixer à 0.0.0.0 Mask : fixer à 0.0.0.0 Port : déclarer "N'importe quel ports"

Cliquez sur "ajouter"

c. Blocage du port 139/TCP

Cliquez sur "Gérer Les Règles" Cliquez sur "Ajouter une règle" Dans processus, laisser décochée cette option Protocol : basculez sur TCP Direction : basculez sur Tout Action : basculez sur refuser

Source Adresse IP : mettez à 0.0.0.0 Mask : appliquer à 0.0.0.0 Port : basculez sur spécifier un port et écrire "139"

Destination Adresse IP : fixer à 0.0.0.0 Mask : fixer à 0.0.0.0 Port : déclarer "N'importe quel ports"

Cliquez sur "ajouter"

d. Blocage du port 139/UDP

Cliquez sur "Gérer Les Règles" Cliquez sur "Ajouter une règle" Dans processus, laisser décochée cette option Protocol : basculez sur UDP Direction : basculez sur Tout Action : basculez sur refuser

Source Adresse IP : mettez à 0.0.0.0 Mask : appliquer à 0.0.0.0 Port : basculez sur spécifier un port et écrire "139"

Destination Adresse IP : fixer à 0.0.0.0 Mask : fixer à 0.0.0.0 Port : déclarer "N'importe quel ports"

Cliquez sur "ajouter" Cliquez ensuite sur « terminer »

Une fois toutes les règles ajoutées, allez dans "autres paramètres"

Dans les "autres paramètres", vérifiez que les réponses automatiques soient sur "OUI IMPOSE"

9. Lancer NMAP avec la machine linux :

nmap -PN 192.168.0.0/24 -p139,445 -n -v script smb-check-vulns script-args safe=1 >> /directory/etape1.log

Garder précieusement ce log, il servira de référence pour les analyses ultérieures lorsque la procédure sera terminée. Ne pas s’inquiéter sur le nombre de machines qui seront notées comme INFECTED, nous allons les traiter dans les points suivants de ce plan d’action

10. Prendre la console BD, et déployer le script WMI concernant tous les patchs KB de Microsoft (notés dans la procédure de ce document) sur tout le parc. Même si vous pensez que les machines sont à jour, repassez le script WMI, si les KB sont déjà installés, ils ne seront pas réinstallés.

11. Prendre la console BD, et déployer le script WMI de blocage des USB temporairement, le temps du nettoyage du parc. Cette étape est OBLIGATOIRE car un des vecteurs de ce ver est les unités USB via leurs insertions dans les ordinateurs.

12. Lancer NMAP avec la machine linux :

nmap -PN 192.168.0.0/24 -p139,445 -n -v script smb-check-vulns script-args safe=1 >> /directory/etape2.log

13. Vérifier ce log en prêtant attention aux machines notées INFECTED. N’intervenez physiquement pas encore sur ces machines. On les traitera plus tard dans le protocole.

14. Vérifier dans la console BD si ces machines ont bien subies une mise à jour des KB, de la politique concernant le temps réel de l’antivirus, et des scripts WMI et USB. Si tel n’est pas le cas, reforcer ces postes sur les politiques. Si cela ne fonctionne pas, noter ces adresses IP et passer à l’étape suivante

15. Créer et déployer sur tout le parc, la règle de déploiement de l’outil de désinfection. Attendre que cette règle soit lancée sur tous les postes et serveurs.

16. Forcer une règle de mise à jour des signatures et moteurs BitDefender sur l’ensemble des machines et serveurs du parc.

17. Créer une règle d’analyse forcée pour tous les postes et serveurs du parc sur le root (C:\), le répertoire Windows et le répertoire Documents & Settings sur TOUS LES FICHIERS pour les fichiers infectés et suspects: Action : Désinfecter / Mise en 40aine

18. Vérifier que cette opération a été effectuée pour tous les postes et serveurs du parc

19. Lancer NMAP avec la machine linux :

nmap -PN 192.168.0.0/24 -p139,445 -n -v script smb-check-vulns script-args safe=1 >> /directory/etape3.log

20. Vérifier ce log en prêtant attention aux machines notées INFECTED et POSSIBLY INFECTED.

Aller physiquement sur ces machines INFECTED et déconnectez les du réseau, ces machines sont vulnérables. Il faudra les patcher manuellement.

Si ce sont des machines NT, Win98, ME, il faudra ne plus les reconnecter du réseau. Aucun support de KB n’est fourni par Microsoft.

Pour les machines POSSIBLY INFECTED, il s’agit souvent de machines Linux avec samba et ces machines ne sont pas vulnérables à ce ver.

Si il s’agit d’une machine Windows, déconnectez les immédiatement physiquement du réseau, il faut appliquer les KB et outil de désinfection manuellement.

21. Relancer NMAP avec la machine linux :

nmap -PN 192.168.0.0/24 -p139,445 -n -v script smb-check-vulns script-args safe=1 >> /directory/etape4.log

22. Vérifier si aucune machine est noté INFECTED dans le log. Si tel est le cas, plus aucune machine n’est infectée, aller au point suivant du protocole

23. Aller sur la console BD et redonner les accès a tout le parc des clefs USB via le script WMI prévu à cet effet.

24. Toujours sur la console BD, redonnez les politiques du firewall BD qui étaient déclarées avant l’infection. Déployer ces règles de firewall.

25. Relancer NMAP avec la machine linux :

nmap -PN 192.168.0.0/24 -p139,445 -n -v script smb-check-vulns script-args safe=1 >> /directory/etape5.log

Vérifier si aucune machine est noté INFECTED dans le log. Si tel est le cas, plus aucune machine n’est infectée, aller au point suivant du protocole. Sinon des machines restent INFECTED et si il s’agit d’une machine Windows, déconnectez les immédiatement physiquement du réseau, il faut appliquer les KB et outil de désinfection manuellement.

26. Le cas important : les ordinateurs portables. Selon la politique de votre entreprise, il y a plusieurs possibilités de forcer les mises à jour de ces postes.

- Modifier le fichier DHCP.CONF avec des mac-address en forçant les portables à binder une IP qui n’est pas celle du réseau lorsqu’ils se connectent sur la RJ45, et faire une intervention manuelle.

- Dans le même esprit, ouvrir un WLAN sur votre réseau physique sur lequel serait installé un autre serveur BitDefender qui appliquerait les opérations ci-dessus. Une fois effectuées, désinstaller l’agent BD de cette machine, et la reconnecter au réseau initial. L’agent BD du réseau local sera réinstallé avec les politiques de l’entreprise.

- Ou donner à l’administrateur ce portable pour vérification manuelle sur laquelle les KB, installation de l’antivirus devront être installées.

NOTES IMPORTANTES : Si dans le réseau des machines NT, ME, Windows 98 ou Windows 95 sont connectées, ces machines sont vulnérables et aucun patch n’a été fourni par Microsoft.

Le temps d’application du protocole, ces machines doivent IMPERATIVEMENT être déconnectées du réseau. Par la suite, des solutions s’offrent à vous :

- Faire migrer ces machines avec des OS plus récents. - Installer un pare-feu logiciel en bloquant les Inbounds et Outbound sur les ports 139 et 445 - Installer un pare-feu physique (des petits boîtiers aujourd’hui sont commercialisés) en bloquant les Inbounds et Outbound sur les ports 139 et 445

lundi 5 octobre 2009

5rd october 2009 - Isomorphic behaviors

Following the push of the dll, I was waiting the order.... Here it is, the probe sent the order to the computer.

- The alarm is:

Robotization MAP on hybrid network has detected a suspicious activity :

Date : Mon-05-Oct-2009_23_47_41

Suspicious file : c:\windows\system32\Restore\MachineGuid.txt

This file is only a signature that do some order to the soldier computer:

Data dumped in file offset: 0x0 File format: txt

7b 00 41 00 31 00 34 00 30 00 37 00 32 00 39 00 ; 00000 { A 1 4 0 7 2 9

32 00 2d 00 44 00 37 00 39 00 45 00 2d 00 34 00 ; 00010 2 - D 7 9 E - 4

32 00 34 00 37 00 2d 00 39 00 42 00 36 00 46 00 ; 00020 2 4 7 - 9 B 6 F

2d 00 42 00 36 00 30 00 39 00 43 00 44 00 37 00 ; 00030 - B 6 0 9 C D 7

31 00 37 00 41 00 46 00 38 00 7d 00 00 00 ; 00040 1 7 A F 8 }

samedi 3 octobre 2009

3rd october 2009 - Isomorphic Behavior

On one of the conficker networks that i pratice the research sent alarm :

- The alarm is :

Robotization MAP on hybrid network has detected a suspicious activity :

Date : Sat-03-Oct-2009_12_08_50

Suspicious file : c:\windows\system32\twndbpam.dll

It is detected as a generic confiker by AVs.

This file was pushed automatically by the worm.

Here is its entry point:

Entry point in file offset: 0x153f0 File format: PE executable (Win32)

80 7c 24 08 01 0f 85 c2 01 00 00 60 be 00 60 00 ; 00000

10 8d be 00 b0 ff ff 57 eb 10 90 90 90 90 90 90 ; 00010

8a 06 46 88 07 47 01 db 75 07 8b 1e 83 ee fc 11 ; 00020

db 72 ed b8 01 00 00 00 01 db 75 07 8b 1e 83 ee ; 00030

fc 11 db 11 c0 01 db 73 ef 75 09 8b 1e 83 ee fc ; 00040

11 db 73 e4 31 c9 83 e8 03 72 0d c1 e0 08 8a 06 ; 00050

46 83 f0 ff 74 74 89 c5 01 db 75 07 8b 1e 83 ee ; 00060

fc 11 db 11 c9 01 db 75 07 8b 1e 83 ee fc 11 db ; 00070

11 c9 75 20 41 01 db 75 07 8b 1e 83 ee fc 11 db ; 00080

11 c9 01 db 73 ef 75 09 8b 1e 83 ee fc 11 db 73 ; 00090

e4 83 c1 02 81 fd 00 f3 ff ff 83 d1 01 8d 14 2f ; 000a0

83 fd fc 76 0f 8a 02 42 88 07 47 49 75 f7 e9 63 ; 000b0

ff ff ff 90 8b 02 83 c2 04 89 07 83 c7 04 83 e9 ; 000c0

04 77 f1 01 cf e9 4c ff ff ff 5e 89 f7 b9 f6 00 ; 000d0

00 00 8a 07 47 2c e8 3c 01 77 f7 80 3f 00 75 f2 ; 000e0

8b 07 8a 5f 04 66 c1 e8 08 c1 c0 10 86 c4 29 f8 ; 000f0

lundi 28 septembre 2009

28th Spetember 2009 - Confiker launch attack confirmed - 1st homomorphic report

After the isomorphic external report and the viruslab behaviors, i confirm that an attack happened around the confiker network.

Here is the homomorphic report of this attack:

Last week, some files were created temporaly by confiker that listed the hard disks structures.

Some requests were shown that tested the bandwith of confiker' soldiers.

The attack was executed friday 25th against some IP's that are for the moment confidential (76000 requests during 19 minutes per attacked IPs).

Here is the graph on traffic on 80 port:

Here is the graph on 445 trafic:

What results mean:

The 445 port travels the behavior of attack to soldiers the 24th September 2009.

The behavior is following:

1- Bandwith analysis of soldiers

2- Push to soldiers the informations concerning the future attack

3- Files analysis to check if the orders are available on soldiers

4- block the internet traffic in order to use the complete bandwith of soldiers. In this case, the fact to route to soldiers the DNS to localhost, will block users to go to the internet. The soldiers computers can go to the internet with hard coded sites, i mean with IPs instead of human domain names.

The 80 port behavior : the attack is launched the day after, the 25th september 2009

1- Run the complete attack on 80 port as the picture shows the 25th september 2009 on some IPs. The soldiers sent 76000 requests during 19 minutes per attacked IPs.

2- We can see that this attack decreased significantly on saturday, but stay active, because some logs report that during attacks some communications were done, maybe to attacks other IPs. That's why, the graph shows you a little decreasing.

dimanche 27 septembre 2009

27th September 2009 - NMAP Information

The 27th September 2009, two researchers shared with me an interesting tool that check the complete network with linux NMAP.

Here is the description:

Installation :

With the latest distributions of RedHat, CentOs or Fedora, download this package :

  1. yum install nmap

__If you use other distribs, proceed to this part and compile the package. If you use 64bits OS, please install libstdc++__

wget http://nmap.org/dist/nmap-5.00.tar.bz2

tar xjfv nmap-5.00.tar.bz2

cd nmap-5.00

./configure

make

make install

How to use :

Type following sentence :

nmap -PN 192.168.0.0/24 -p139,445 -n -v -script smb-check-vulns -script-args safe=1

If you want to log to report, please type :

nmap -PN 192.168.0.0/24 -p139,445 -n -v -script smb-check-vulns -script-args safe=1 >> /directory/resultat.log

NOTA: on these arguments, please double this caracter '-' the native argument (bug on DotClear): -script smb-check-vulns -script-args

All infected computers will be tagged as INFECTED

CONCLUSION :

This procedure only shows you that some computers of your network are infected, but this tool will not clean it.

vendredi 25 septembre 2009

25th September 2009 - Isomorphic external behavior

The 25th morning, one of my diagnosticians called me to inform me a strange behavior on several networks.

The behavior is on each network computer:

- Local DNS down : mean that computers cannot go anymore to the internet because their DNS is 127.0.0.1

- IPCONFIG : shows errors and doesn't accept any arguments

- NSLOOKUP : also fails.

- No scheduled tasks created usually by the worm

- No rootkit

- Some plug&play drivers are loaded with NT_AUTHORITY and processes dependencies are showed.

- The network computers could goes to the net with dns name of sites, but could go with true IP Addresses.

If we try to stop or delete or just copy, the worm reacts by a blue screen or reboot

So, we decided to make some audits of these computers to check their behaviors. To be more sure concerning the results that we will get, we ask to 3 differents companies do let us to make researches and behavior analysis.

We decided to take a familly as following:

- 1 WIN2008

- 1 XPSP3

- 1 XPSP2

- 1 WIN2003

All of these computers OS's are with latest MS patches including the MS09-01

jeudi 24 septembre 2009

24th September 2009 - Isomorphic behaviors

On XP and 2003 all is stabilized.

BUT : a new information is coming today.

I received on comments some complains that the DNS was changed on several networks on the uses computers.

So after analysis, it seems that a new bahavior is coming today :

- No scheduled task was created

- nobody can access to the internet, the DHCP doesn't answer, the workstation DHCP is disabled and it is impossible to fix IP addr or to run ipconfig

- All DNS are located on 127.0.0.1

- All entries on TCPIP parameters are blocked by the malware, so impossible to modify some values.

But if users try to access to the internet, he can if and only if numeric IP addresses are written.

So this new behavior is needed to be studied.

That's why i decide to install a new computer infected by this new generation and try to analyze what's happen and how.

So, when this new plateform will be online, i will report this one also on this section.

mercredi 23 septembre 2009

23th September 2009 - Isomorphic behaviors

XP Computer:

The confiker continues to act as it : - Get some sites .cn, .info - Proceed to a network scanning - Stops each 2h00 - Restart after 2h00 of quiet.

On Windows 2003:

Same behavior as the report is :

No. Time Source Destination Protocol Info

 37223 2009-09-23 00:00:18.320519 192.168.1.10          tawddgbpsj.cn         TCP      bcs-broker > http RST Seq=1 Win=0 Len=0

Frame 37223 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: bcs-broker (1704), Dst Port: http (80), Seq: 1, Len: 0

No. Time Source Destination Protocol Info

 41676 2009-09-23 00:44:41.936603 192.168.1.10          www.w3.org            TCP      fotogcad > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 41676 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: www.w3.org (128.30.52.38) Transmission Control Protocol, Src Port: fotogcad (3878), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 41678 2009-09-23 00:44:42.057203 192.168.1.10          www.w3.org            TCP      fotogcad > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 41678 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: www.w3.org (128.30.52.38) Transmission Control Protocol, Src Port: fotogcad (3878), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 41679 2009-09-23 00:44:42.057315 192.168.1.10          www.w3.org            HTTP     GET / HTTP/1.0

Frame 41679 (191 bytes on wire, 191 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: www.w3.org (128.30.52.38) Transmission Control Protocol, Src Port: fotogcad (3878), Dst Port: http (80), Seq: 1, Ack: 1, Len: 137 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 41682 2009-09-23 00:44:42.182236 192.168.1.10          www.w3.org            TCP      fotogcad > http RST, ACK Seq=138 Ack=1453 Win=0 Len=0

Frame 41682 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: www.w3.org (128.30.52.38) Transmission Control Protocol, Src Port: fotogcad (3878), Dst Port: http (80), Seq: 138, Ack: 1453, Len: 0

No. Time Source Destination Protocol Info

 41684 2009-09-23 00:44:42.182854 192.168.1.10          www.w3.org            TCP      fotogcad > http RST Seq=138 Win=0 Len=0

Frame 41684 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: www.w3.org (128.30.52.38) Transmission Control Protocol, Src Port: fotogcad (3878), Dst Port: http (80), Seq: 138, Len: 0

No. Time Source Destination Protocol Info

 41691 2009-09-23 00:44:42.185517 192.168.1.10          tawddgbpsj.cn         TCP      appss-lm > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 41691 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: appss-lm (3879), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 41697 2009-09-23 00:44:42.358542 192.168.1.10          vfdfbvkcvmm.org       TCP      igrs > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 41697 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: igrs (3880), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 41699 2009-09-23 00:44:42.414664 192.168.1.10          vfdfbvkcvmm.org       TCP      idac > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 41699 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: idac (3881), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 41701 2009-09-23 00:44:42.423869 192.168.1.10          vfdfbvkcvmm.org       TCP      msdts1 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 41701 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: msdts1 (3882), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 41703 2009-09-23 00:44:42.427175 192.168.1.10          vfdfbvkcvmm.org       TCP      vrpn > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 41703 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: vrpn (3883), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 41706 2009-09-23 00:44:42.551754 192.168.1.10          vfdfbvkcvmm.org       TCP      igrs > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 41706 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: igrs (3880), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 41707 2009-09-23 00:44:42.551833 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 41707 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: igrs (3880), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 41708 2009-09-23 00:44:42.555332 192.168.1.10          vfdfbvkcvmm.org       TCP      softrack-meter > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 41708 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: softrack-meter (3884), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 41710 2009-09-23 00:44:42.562793 192.168.1.10          tawddgbpsj.cn         TCP      appss-lm > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 41710 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: appss-lm (3879), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 41711 2009-09-23 00:44:42.562995 192.168.1.10          tawddgbpsj.cn         HTTP     GET /search?q=0 HTTP/1.0

Frame 41711 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: appss-lm (3879), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 41714 2009-09-23 00:44:42.746605 192.168.1.10          vfdfbvkcvmm.org       TCP      igrs > http RST Seq=151 Win=0 Len=0

Frame 41714 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: igrs (3880), Dst Port: http (80), Seq: 151, Len: 0

No. Time Source Destination Protocol Info

 41719 2009-09-23 00:44:42.942656 192.168.1.10          tawddgbpsj.cn         TCP      appss-lm > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0

Frame 41719 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: appss-lm (3879), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0

No. Time Source Destination Protocol Info

 41721 2009-09-23 00:44:42.942925 192.168.1.10          tawddgbpsj.cn         TCP      appss-lm > http RST, ACK Seq=150 Ack=242 Win=0 Len=0

Frame 41721 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: appss-lm (3879), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0

No. Time Source Destination Protocol Info

 41727 2009-09-23 00:44:43.319615 192.168.1.10          tawddgbpsj.cn         TCP      appss-lm > http RST Seq=150 Win=0 Len=0

Frame 41727 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: appss-lm (3879), Dst Port: http (80), Seq: 150, Len: 0

No. Time Source Destination Protocol Info

 41735 2009-09-23 00:44:45.394304 192.168.1.10          vfdfbvkcvmm.org       TCP      idac > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 41735 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: idac (3881), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 41736 2009-09-23 00:44:45.394322 192.168.1.10          vfdfbvkcvmm.org       TCP      vrpn > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 41736 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: vrpn (3883), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 41737 2009-09-23 00:44:45.394332 192.168.1.10          vfdfbvkcvmm.org       TCP      msdts1 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 41737 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: msdts1 (3882), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 41738 2009-09-23 00:44:45.503591 192.168.1.10          vfdfbvkcvmm.org       TCP      softrack-meter > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 41738 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: softrack-meter (3884), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 41760 2009-09-23 00:44:51.519027 192.168.1.10          vfdfbvkcvmm.org       TCP      vrpn > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 41760 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: vrpn (3883), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 41761 2009-09-23 00:44:51.519065 192.168.1.10          vfdfbvkcvmm.org       TCP      idac > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 41761 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: idac (3881), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 41762 2009-09-23 00:44:51.519075 192.168.1.10          vfdfbvkcvmm.org       TCP      msdts1 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 41762 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: msdts1 (3882), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 41763 2009-09-23 00:44:51.628388 192.168.1.10          vfdfbvkcvmm.org       TCP      softrack-meter > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 41763 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: softrack-meter (3884), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 41814 2009-09-23 00:45:04.426341 192.168.1.10          tawddgbpsj.cn         TCP      cgi-starapi > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 41814 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: cgi-starapi (3893), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 41821 2009-09-23 00:45:04.652576 192.168.1.10          vfdfbvkcvmm.org       TCP      syam-agent > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 41821 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: syam-agent (3894), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 41823 2009-09-23 00:45:04.656363 192.168.1.10          vfdfbvkcvmm.org       TCP      syam-smc > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 41823 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: syam-smc (3895), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 41825 2009-09-23 00:45:04.665251 192.168.1.10          vfdfbvkcvmm.org       TCP      sdo-tls > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 41825 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: sdo-tls (3896), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 41828 2009-09-23 00:45:04.711740 192.168.1.10          vfdfbvkcvmm.org       TCP      sdo-ssh > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 41828 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: sdo-ssh (3897), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 41830 2009-09-23 00:45:04.756461 192.168.1.10          vfdfbvkcvmm.org       TCP      senip > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 41830 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: senip (3898), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 41832 2009-09-23 00:45:04.804028 192.168.1.10          tawddgbpsj.cn         TCP      cgi-starapi > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 41832 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: cgi-starapi (3893), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 41833 2009-09-23 00:45:04.804059 192.168.1.10          tawddgbpsj.cn         HTTP     GET /search?q=0 HTTP/1.0

Frame 41833 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: cgi-starapi (3893), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 41836 2009-09-23 00:45:04.942013 192.168.1.10          vfdfbvkcvmm.org       TCP      senip > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 41836 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: senip (3898), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 41837 2009-09-23 00:45:04.942103 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 41837 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: senip (3898), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 41842 2009-09-23 00:45:05.183570 192.168.1.10          tawddgbpsj.cn         TCP      cgi-starapi > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0

Frame 41842 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: cgi-starapi (3893), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0

No. Time Source Destination Protocol Info

 41844 2009-09-23 00:45:05.183909 192.168.1.10          tawddgbpsj.cn         TCP      cgi-starapi > http RST, ACK Seq=150 Ack=242 Win=0 Len=0

Frame 41844 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: cgi-starapi (3893), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0

No. Time Source Destination Protocol Info

 41853 2009-09-23 00:45:05.560460 192.168.1.10          tawddgbpsj.cn         TCP      cgi-starapi > http RST Seq=150 Win=0 Len=0

Frame 41853 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: cgi-starapi (3893), Dst Port: http (80), Seq: 150, Len: 0

No. Time Source Destination Protocol Info

 41862 2009-09-23 00:45:07.705883 192.168.1.10          vfdfbvkcvmm.org       TCP      sdo-ssh > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 41862 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: sdo-ssh (3897), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 41863 2009-09-23 00:45:07.705957 192.168.1.10          vfdfbvkcvmm.org       TCP      syam-agent > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 41863 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: syam-agent (3894), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 41864 2009-09-23 00:45:07.705974 192.168.1.10          vfdfbvkcvmm.org       TCP      sdo-tls > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 41864 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: sdo-tls (3896), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 41865 2009-09-23 00:45:07.705983 192.168.1.10          vfdfbvkcvmm.org       TCP      syam-smc > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 41865 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: syam-smc (3895), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 41867 2009-09-23 00:45:07.856791 192.168.1.10          vfdfbvkcvmm.org       TCP      sdo-ssh > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 41867 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: sdo-ssh (3897), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 41868 2009-09-23 00:45:07.856867 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 41868 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: sdo-ssh (3897), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 41890 2009-09-23 00:45:13.721437 192.168.1.10          vfdfbvkcvmm.org       TCP      sdo-tls > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 41890 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: sdo-tls (3896), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 41891 2009-09-23 00:45:13.721461 192.168.1.10          vfdfbvkcvmm.org       TCP      syam-agent > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 41891 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: syam-agent (3894), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 41892 2009-09-23 00:45:13.721471 192.168.1.10          vfdfbvkcvmm.org       TCP      syam-smc > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 41892 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: syam-smc (3895), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 41893 2009-09-23 00:45:13.830683 192.168.1.10          vfdfbvkcvmm.org       HTTP     TCP Retransmission GET /search?q=0 HTTP/1.0

Frame 41893 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: sdo-ssh (3897), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 41934 2009-09-23 00:45:25.752640 192.168.1.10          vfdfbvkcvmm.org       TCP      imoguia-port > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 41934 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: imoguia-port (3907), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 41935 2009-09-23 00:45:25.861436 192.168.1.10          vfdfbvkcvmm.org       HTTP     TCP Retransmission GET /search?q=0 HTTP/1.0

Frame 41935 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: sdo-ssh (3897), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 41948 2009-09-23 00:45:27.042123 192.168.1.10          vfdfbvkcvmm.org       TCP      hppronetman > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 41948 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: hppronetman (3908), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 41950 2009-09-23 00:45:27.133787 192.168.1.10          vfdfbvkcvmm.org       TCP      surfcontrolcpa > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 41950 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: surfcontrolcpa (3909), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 41952 2009-09-23 00:45:27.182642 192.168.1.10          vfdfbvkcvmm.org       TCP      prnrequest > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 41952 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: prnrequest (3910), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 41955 2009-09-23 00:45:27.235380 192.168.1.10          vfdfbvkcvmm.org       TCP      hppronetman > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 41955 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: hppronetman (3908), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 41956 2009-09-23 00:45:27.235439 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 41956 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: hppronetman (3908), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 41959 2009-09-23 00:45:27.375578 192.168.1.10          vfdfbvkcvmm.org       TCP      prnrequest > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 41959 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: prnrequest (3910), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 41960 2009-09-23 00:45:27.375620 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 41960 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: prnrequest (3910), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 41962 2009-09-23 00:45:27.427490 192.168.1.10          vfdfbvkcvmm.org       TCP      prnstatus > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 41962 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: prnstatus (3911), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 41964 2009-09-23 00:45:27.430502 192.168.1.10          vfdfbvkcvmm.org       TCP      hppronetman > http RST Seq=151 Win=0 Len=0

Frame 41964 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: hppronetman (3908), Dst Port: http (80), Seq: 151, Len: 0

No. Time Source Destination Protocol Info

 41970 2009-09-23 00:45:27.570783 192.168.1.10          vfdfbvkcvmm.org       TCP      prnrequest > http RST Seq=151 Win=0 Len=0

Frame 41970 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: prnrequest (3910), Dst Port: http (80), Seq: 151, Len: 0

No. Time Source Destination Protocol Info

 41973 2009-09-23 00:45:27.620892 192.168.1.10          vfdfbvkcvmm.org       TCP      prnstatus > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 41973 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: prnstatus (3911), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 41974 2009-09-23 00:45:27.620964 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 41974 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: prnstatus (3911), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 41984 2009-09-23 00:45:28.705168 192.168.1.10          vfdfbvkcvmm.org       TCP      imoguia-port > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 41984 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: imoguia-port (3907), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 41991 2009-09-23 00:45:30.017525 192.168.1.10          vfdfbvkcvmm.org       TCP      surfcontrolcpa > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 41991 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: surfcontrolcpa (3909), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42007 2009-09-23 00:45:34.720613 192.168.1.10          vfdfbvkcvmm.org       TCP      imoguia-port > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42007 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: imoguia-port (3907), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42015 2009-09-23 00:45:36.032921 192.168.1.10          vfdfbvkcvmm.org       TCP      surfcontrolcpa > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42015 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: surfcontrolcpa (3909), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42092 2009-09-23 00:45:49.593354 192.168.1.10          vfdfbvkcvmm.org       TCP      exasoftport1 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42092 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: exasoftport1 (3920), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42094 2009-09-23 00:45:49.615858 192.168.1.10          vfdfbvkcvmm.org       TCP      herodotus-net > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42094 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: herodotus-net (3921), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42096 2009-09-23 00:45:49.620650 192.168.1.10          vfdfbvkcvmm.org       TCP      sor-update > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42096 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: sor-update (3922), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42099 2009-09-23 00:45:49.778298 192.168.1.10          vfdfbvkcvmm.org       TCP      exasoftport1 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 42099 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: exasoftport1 (3920), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 42100 2009-09-23 00:45:49.778345 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 42100 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: exasoftport1 (3920), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 42102 2009-09-23 00:45:49.813498 192.168.1.10          vfdfbvkcvmm.org       TCP      sor-update > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 42102 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: sor-update (3922), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 42103 2009-09-23 00:45:49.813532 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 42103 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: sor-update (3922), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 42104 2009-09-23 00:45:49.813646 192.168.1.10          vfdfbvkcvmm.org       HTTP     TCP Retransmission GET /search?q=0 HTTP/1.0

Frame 42104 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: sdo-ssh (3897), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 42120 2009-09-23 00:45:50.450893 192.168.1.10          vfdfbvkcvmm.org       TCP      sdo-ssh > http FIN, ACK Seq=151 Ack=213 Win=17212 Len=0

Frame 42120 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: sdo-ssh (3897), Dst Port: http (80), Seq: 151, Ack: 213, Len: 0

No. Time Source Destination Protocol Info

 42121 2009-09-23 00:45:50.451187 192.168.1.10          vfdfbvkcvmm.org       TCP      symb-sb-port > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42121 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: symb-sb-port (3923), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42123 2009-09-23 00:45:50.451319 192.168.1.10          vfdfbvkcvmm.org       TCP      sdo-ssh > http ACK Seq=152 Ack=214 Win=17212 Len=0

Frame 42123 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: sdo-ssh (3897), Dst Port: http (80), Seq: 152, Ack: 214, Len: 0

No. Time Source Destination Protocol Info

 42138 2009-09-23 00:45:52.657323 192.168.1.10          vfdfbvkcvmm.org       TCP      herodotus-net > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42138 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: herodotus-net (3921), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42141 2009-09-23 00:45:53.313549 192.168.1.10          vfdfbvkcvmm.org       TCP      symb-sb-port > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42141 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: symb-sb-port (3923), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42162 2009-09-23 00:45:58.672753 192.168.1.10          vfdfbvkcvmm.org       TCP      herodotus-net > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42162 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: herodotus-net (3921), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42164 2009-09-23 00:45:59.328978 192.168.1.10          vfdfbvkcvmm.org       TCP      symb-sb-port > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42164 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: symb-sb-port (3923), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42232 2009-09-23 00:46:11.736855 192.168.1.10          tawddgbpsj.cn         TCP      dyn-site > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42232 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: dyn-site (3932), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42236 2009-09-23 00:46:11.738267 192.168.1.10          tawddgbpsj.cn         TCP      plbserve-port > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42236 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: plbserve-port (3933), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42238 2009-09-23 00:46:11.814823 192.168.1.10          vfdfbvkcvmm.org       TCP      sunfm-port > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42238 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: sunfm-port (3934), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42240 2009-09-23 00:46:11.895109 192.168.1.10          vfdfbvkcvmm.org       TCP      sdp-portmapper > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42240 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: sdp-portmapper (3935), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42242 2009-09-23 00:46:11.950991 192.168.1.10          vfdfbvkcvmm.org       TCP      mailprox > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42242 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: mailprox (3936), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42244 2009-09-23 00:46:12.054912 192.168.1.10          vfdfbvkcvmm.org       TCP      dvbservdsc > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42244 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: dvbservdsc (3937), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42246 2009-09-23 00:46:12.114429 192.168.1.10          tawddgbpsj.cn         TCP      dyn-site > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 42246 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: dyn-site (3932), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 42247 2009-09-23 00:46:12.114465 192.168.1.10          tawddgbpsj.cn         HTTP     GET /search?q=0 HTTP/1.0

Frame 42247 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: dyn-site (3932), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 42249 2009-09-23 00:46:12.116480 192.168.1.10          tawddgbpsj.cn         TCP      plbserve-port > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 42249 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: plbserve-port (3933), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 42250 2009-09-23 00:46:12.116514 192.168.1.10          tawddgbpsj.cn         HTTP     GET /search?q=0 HTTP/1.0

Frame 42250 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: plbserve-port (3933), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 42254 2009-09-23 00:46:12.247641 192.168.1.10          vfdfbvkcvmm.org       TCP      dvbservdsc > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 42254 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: dvbservdsc (3937), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 42255 2009-09-23 00:46:12.247702 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 42255 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: dvbservdsc (3937), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 42264 2009-09-23 00:46:12.493993 192.168.1.10          tawddgbpsj.cn         TCP      dyn-site > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0

Frame 42264 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: dyn-site (3932), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0

No. Time Source Destination Protocol Info

 42266 2009-09-23 00:46:12.494295 192.168.1.10          tawddgbpsj.cn         TCP      dyn-site > http RST, ACK Seq=150 Ack=242 Win=0 Len=0

Frame 42266 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: dyn-site (3932), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0

No. Time Source Destination Protocol Info

 42269 2009-09-23 00:46:12.496972 192.168.1.10          tawddgbpsj.cn         TCP      plbserve-port > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0

Frame 42269 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: plbserve-port (3933), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0

No. Time Source Destination Protocol Info

 42271 2009-09-23 00:46:12.497298 192.168.1.10          tawddgbpsj.cn         TCP      plbserve-port > http RST, ACK Seq=150 Ack=242 Win=0 Len=0

Frame 42271 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: plbserve-port (3933), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0

No. Time Source Destination Protocol Info

 42276 2009-09-23 00:46:12.871382 192.168.1.10          tawddgbpsj.cn         TCP      dyn-site > http RST Seq=150 Win=0 Len=0

Frame 42276 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: dyn-site (3932), Dst Port: http (80), Seq: 150, Len: 0

No. Time Source Destination Protocol Info

 42278 2009-09-23 00:46:12.873989 192.168.1.10          tawddgbpsj.cn         TCP      plbserve-port > http RST Seq=150 Win=0 Len=0

Frame 42278 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: plbserve-port (3933), Dst Port: http (80), Seq: 150, Len: 0

No. Time Source Destination Protocol Info

 42293 2009-09-23 00:46:14.750230 192.168.1.10          vfdfbvkcvmm.org       TCP      sdp-portmapper > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42293 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: sdp-portmapper (3935), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42294 2009-09-23 00:46:14.750304 192.168.1.10          vfdfbvkcvmm.org       TCP      sunfm-port > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42294 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: sunfm-port (3934), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42295 2009-09-23 00:46:14.968940 192.168.1.10          vfdfbvkcvmm.org       TCP      mailprox > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42295 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: mailprox (3936), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42315 2009-09-23 00:46:20.765591 192.168.1.10          vfdfbvkcvmm.org       TCP      sdp-portmapper > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42315 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: sdp-portmapper (3935), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42316 2009-09-23 00:46:20.765671 192.168.1.10          vfdfbvkcvmm.org       TCP      sunfm-port > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42316 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: sunfm-port (3934), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42317 2009-09-23 00:46:20.984335 192.168.1.10          vfdfbvkcvmm.org       TCP      mailprox > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42317 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: mailprox (3936), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42365 2009-09-23 00:46:34.126140 192.168.1.10          tawddgbpsj.cn         TCP      namemunge > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42365 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: namemunge (3950), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42366 2009-09-23 00:46:34.126452 192.168.1.10          tawddgbpsj.cn         TCP      pwgippfax > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42366 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: pwgippfax (3951), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42373 2009-09-23 00:46:34.203765 192.168.1.10          vfdfbvkcvmm.org       TCP      i3-sessionmgr > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42373 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: i3-sessionmgr (3952), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42375 2009-09-23 00:46:34.311222 192.168.1.10          vfdfbvkcvmm.org       TCP      xmlink-connect > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42375 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: xmlink-connect (3953), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42377 2009-09-23 00:46:34.393992 192.168.1.10          vfdfbvkcvmm.org       TCP      adrep > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42377 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: adrep (3954), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42379 2009-09-23 00:46:34.503052 192.168.1.10          tawddgbpsj.cn         TCP      namemunge > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 42379 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: namemunge (3950), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 42380 2009-09-23 00:46:34.503084 192.168.1.10          tawddgbpsj.cn         HTTP     GET /search?q=0 HTTP/1.0

Frame 42380 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: namemunge (3950), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 42382 2009-09-23 00:46:34.505414 192.168.1.10          tawddgbpsj.cn         TCP      pwgippfax > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 42382 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: pwgippfax (3951), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 42383 2009-09-23 00:46:34.505445 192.168.1.10          tawddgbpsj.cn         HTTP     GET /search?q=0 HTTP/1.0

Frame 42383 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: pwgippfax (3951), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 42390 2009-09-23 00:46:34.882384 192.168.1.10          tawddgbpsj.cn         TCP      namemunge > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0

Frame 42390 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: namemunge (3950), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0

No. Time Source Destination Protocol Info

 42392 2009-09-23 00:46:34.882638 192.168.1.10          tawddgbpsj.cn         TCP      namemunge > http RST, ACK Seq=150 Ack=242 Win=0 Len=0

Frame 42392 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: namemunge (3950), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0

No. Time Source Destination Protocol Info

 42393 2009-09-23 00:46:34.882846 192.168.1.10          tawddgbpsj.cn         TCP      p2pcommunity > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42393 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: p2pcommunity (3955), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42396 2009-09-23 00:46:34.886315 192.168.1.10          tawddgbpsj.cn         TCP      pwgippfax > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0

Frame 42396 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: pwgippfax (3951), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0

No. Time Source Destination Protocol Info

 42398 2009-09-23 00:46:34.886649 192.168.1.10          tawddgbpsj.cn         TCP      pwgippfax > http RST, ACK Seq=150 Ack=242 Win=0 Len=0

Frame 42398 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: pwgippfax (3951), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0

No. Time Source Destination Protocol Info

 42404 2009-09-23 00:46:35.258304 192.168.1.10          tawddgbpsj.cn         TCP      namemunge > http RST Seq=150 Win=0 Len=0

Frame 42404 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: namemunge (3950), Dst Port: http (80), Seq: 150, Len: 0

No. Time Source Destination Protocol Info

 42406 2009-09-23 00:46:35.261343 192.168.1.10          tawddgbpsj.cn         TCP      p2pcommunity > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 42406 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: p2pcommunity (3955), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 42407 2009-09-23 00:46:35.261428 192.168.1.10          tawddgbpsj.cn         HTTP     GET /search?q=0 HTTP/1.0

Frame 42407 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: p2pcommunity (3955), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 42409 2009-09-23 00:46:35.263590 192.168.1.10          tawddgbpsj.cn         TCP      pwgippfax > http RST Seq=150 Win=0 Len=0

Frame 42409 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: pwgippfax (3951), Dst Port: http (80), Seq: 150, Len: 0

No. Time Source Destination Protocol Info

 42415 2009-09-23 00:46:35.640756 192.168.1.10          tawddgbpsj.cn         TCP      p2pcommunity > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0

Frame 42415 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: p2pcommunity (3955), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0

No. Time Source Destination Protocol Info

 42417 2009-09-23 00:46:35.641056 192.168.1.10          tawddgbpsj.cn         TCP      p2pcommunity > http RST, ACK Seq=150 Ack=242 Win=0 Len=0

Frame 42417 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: p2pcommunity (3955), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0

No. Time Source Destination Protocol Info

 42420 2009-09-23 00:46:36.017564 192.168.1.10          tawddgbpsj.cn         TCP      p2pcommunity > http RST Seq=150 Win=0 Len=0

Frame 42420 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: p2pcommunity (3955), Dst Port: http (80), Seq: 150, Len: 0

No. Time Source Destination Protocol Info

 42427 2009-09-23 00:46:37.171265 192.168.1.10          vfdfbvkcvmm.org       TCP      i3-sessionmgr > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42427 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: i3-sessionmgr (3952), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42428 2009-09-23 00:46:37.390038 192.168.1.10          vfdfbvkcvmm.org       TCP      xmlink-connect > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42428 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: xmlink-connect (3953), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42429 2009-09-23 00:46:37.390055 192.168.1.10          vfdfbvkcvmm.org       TCP      adrep > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42429 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: adrep (3954), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42445 2009-09-23 00:46:43.186658 192.168.1.10          vfdfbvkcvmm.org       TCP      i3-sessionmgr > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42445 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: i3-sessionmgr (3952), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42446 2009-09-23 00:46:43.405391 192.168.1.10          vfdfbvkcvmm.org       TCP      adrep > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42446 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: adrep (3954), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42447 2009-09-23 00:46:43.405414 192.168.1.10          vfdfbvkcvmm.org       TCP      xmlink-connect > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42447 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: xmlink-connect (3953), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42509 2009-09-23 00:46:56.550301 192.168.1.10          tawddgbpsj.cn         TCP      sasggprs > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42509 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: sasggprs (3964), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42515 2009-09-23 00:46:56.787059 192.168.1.10          vfdfbvkcvmm.org       TCP      ati-ip-to-ncpe > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42515 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: ati-ip-to-ncpe (3965), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42517 2009-09-23 00:46:56.862941 192.168.1.10          vfdfbvkcvmm.org       TCP      bflckmgr > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42517 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: bflckmgr (3966), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42519 2009-09-23 00:46:56.890509 192.168.1.10          vfdfbvkcvmm.org       TCP      ppsms > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42519 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: ppsms (3967), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42521 2009-09-23 00:46:56.927363 192.168.1.10          tawddgbpsj.cn         TCP      sasggprs > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 42521 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: sasggprs (3964), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 42522 2009-09-23 00:46:56.927402 192.168.1.10          tawddgbpsj.cn         HTTP     GET /search?q=0 HTTP/1.0

Frame 42522 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: sasggprs (3964), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 42524 2009-09-23 00:46:56.942033 192.168.1.10          vfdfbvkcvmm.org       TCP      ianywhere-dbns > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42524 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: ianywhere-dbns (3968), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42526 2009-09-23 00:46:56.969438 192.168.1.10          vfdfbvkcvmm.org       TCP      landmarks > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42526 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: landmarks (3969), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42528 2009-09-23 00:46:57.055908 192.168.1.10          vfdfbvkcvmm.org       TCP      bflckmgr > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 42528 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: bflckmgr (3966), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 42529 2009-09-23 00:46:57.055948 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 42529 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: bflckmgr (3966), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 42531 2009-09-23 00:46:57.135052 192.168.1.10          vfdfbvkcvmm.org       TCP      ianywhere-dbns > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 42531 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: ianywhere-dbns (3968), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 42532 2009-09-23 00:46:57.135202 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 42532 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: ianywhere-dbns (3968), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 42541 2009-09-23 00:46:57.306996 192.168.1.10          tawddgbpsj.cn         TCP      sasggprs > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0

Frame 42541 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: sasggprs (3964), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0

No. Time Source Destination Protocol Info

 42543 2009-09-23 00:46:57.307287 192.168.1.10          tawddgbpsj.cn         TCP      sasggprs > http RST, ACK Seq=150 Ack=242 Win=0 Len=0

Frame 42543 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: sasggprs (3964), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0

No. Time Source Destination Protocol Info

 42546 2009-09-23 00:46:57.329625 192.168.1.10          vfdfbvkcvmm.org       TCP      ianywhere-dbns > http RST Seq=151 Win=0 Len=0

Frame 42546 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: ianywhere-dbns (3968), Dst Port: http (80), Seq: 151, Len: 0

No. Time Source Destination Protocol Info

 42552 2009-09-23 00:46:57.683545 192.168.1.10          tawddgbpsj.cn         TCP      sasggprs > http RST Seq=150 Win=0 Len=0

Frame 42552 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: sasggprs (3964), Dst Port: http (80), Seq: 150, Len: 0

No. Time Source Destination Protocol Info

 42562 2009-09-23 00:46:59.810997 192.168.1.10          vfdfbvkcvmm.org       TCP      ppsms > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42562 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: ppsms (3967), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42563 2009-09-23 00:46:59.811009 192.168.1.10          vfdfbvkcvmm.org       TCP      ati-ip-to-ncpe > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42563 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: ati-ip-to-ncpe (3965), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42564 2009-09-23 00:46:59.920351 192.168.1.10          vfdfbvkcvmm.org       TCP      landmarks > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42564 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: landmarks (3969), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42582 2009-09-23 00:47:05.826413 192.168.1.10          vfdfbvkcvmm.org       TCP      ati-ip-to-ncpe > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42582 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: ati-ip-to-ncpe (3965), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42583 2009-09-23 00:47:05.837738 192.168.1.10          vfdfbvkcvmm.org       TCP      ppsms > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42583 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: ppsms (3967), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42584 2009-09-23 00:47:05.935779 192.168.1.10          vfdfbvkcvmm.org       TCP      landmarks > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42584 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: landmarks (3969), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42648 2009-09-23 00:47:18.968225 192.168.1.10          tawddgbpsj.cn         TCP      secure-cfg-svr > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42648 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: secure-cfg-svr (3978), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42650 2009-09-23 00:47:18.968530 192.168.1.10          tawddgbpsj.cn         TCP      smwan > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42650 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: smwan (3979), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42652 2009-09-23 00:47:19.187312 192.168.1.10          vfdfbvkcvmm.org       TCP      acms > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42652 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: acms (3980), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42654 2009-09-23 00:47:19.236552 192.168.1.10          vfdfbvkcvmm.org       TCP      starfish > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42654 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: starfish (3981), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42656 2009-09-23 00:47:19.346222 192.168.1.10          tawddgbpsj.cn         TCP      secure-cfg-svr > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 42656 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: secure-cfg-svr (3978), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 42657 2009-09-23 00:47:19.346259 192.168.1.10          tawddgbpsj.cn         HTTP     GET /search?q=0 HTTP/1.0

Frame 42657 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: secure-cfg-svr (3978), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 42659 2009-09-23 00:47:19.565097 192.168.1.10          tawddgbpsj.cn         TCP      smwan > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 42659 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: smwan (3979), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 42660 2009-09-23 00:47:19.565166 192.168.1.10          tawddgbpsj.cn         HTTP     GET /search?q=0 HTTP/1.0

Frame 42660 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: smwan (3979), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 42666 2009-09-23 00:47:19.725427 192.168.1.10          tawddgbpsj.cn         TCP      secure-cfg-svr > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0

Frame 42666 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: secure-cfg-svr (3978), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0

No. Time Source Destination Protocol Info

 42668 2009-09-23 00:47:19.725878 192.168.1.10          tawddgbpsj.cn         TCP      secure-cfg-svr > http RST, ACK Seq=150 Ack=242 Win=0 Len=0

Frame 42668 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: secure-cfg-svr (3978), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0

No. Time Source Destination Protocol Info

 42672 2009-09-23 00:47:19.944917 192.168.1.10          tawddgbpsj.cn         TCP      smwan > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0

Frame 42672 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: smwan (3979), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0

No. Time Source Destination Protocol Info

 42674 2009-09-23 00:47:19.945194 192.168.1.10          tawddgbpsj.cn         TCP      smwan > http RST, ACK Seq=150 Ack=242 Win=0 Len=0

Frame 42674 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: smwan (3979), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0

No. Time Source Destination Protocol Info

 42681 2009-09-23 00:47:20.101926 192.168.1.10          tawddgbpsj.cn         TCP      secure-cfg-svr > http RST Seq=150 Win=0 Len=0

Frame 42681 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: secure-cfg-svr (3978), Dst Port: http (80), Seq: 150, Len: 0

No. Time Source Destination Protocol Info

 42684 2009-09-23 00:47:20.321688 192.168.1.10          tawddgbpsj.cn         TCP      smwan > http RST Seq=150 Win=0 Len=0

Frame 42684 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: smwan (3979), Dst Port: http (80), Seq: 150, Len: 0

No. Time Source Destination Protocol Info

 42695 2009-09-23 00:47:22.122636 192.168.1.10          vfdfbvkcvmm.org       TCP      acms > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42695 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: acms (3980), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42696 2009-09-23 00:47:22.122641 192.168.1.10          vfdfbvkcvmm.org       TCP      starfish > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42696 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: starfish (3981), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42721 2009-09-23 00:47:28.138042 192.168.1.10          vfdfbvkcvmm.org       TCP      acms > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42721 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: acms (3980), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42722 2009-09-23 00:47:28.138069 192.168.1.10          vfdfbvkcvmm.org       TCP      starfish > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42722 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: starfish (3981), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42791 2009-09-23 00:47:41.389472 192.168.1.10          tawddgbpsj.cn         TCP      bv-is > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42791 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: bv-is (3990), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42794 2009-09-23 00:47:41.623880 192.168.1.10          vfdfbvkcvmm.org       TCP      bv-smcsrv > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42794 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: bv-smcsrv (3991), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42796 2009-09-23 00:47:41.702659 192.168.1.10          vfdfbvkcvmm.org       TCP      bv-ds > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42796 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: bv-ds (3992), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42798 2009-09-23 00:47:41.729987 192.168.1.10          vfdfbvkcvmm.org       TCP      bv-agent > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42798 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: bv-agent (3993), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42800 2009-09-23 00:47:41.754509 192.168.1.10          vfdfbvkcvmm.org       TCP      3994 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42800 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 3994 (3994), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42802 2009-09-23 00:47:41.765890 192.168.1.10          tawddgbpsj.cn         TCP      bv-is > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 42802 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: bv-is (3990), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 42803 2009-09-23 00:47:41.765947 192.168.1.10          tawddgbpsj.cn         HTTP     GET /search?q=0 HTTP/1.0

Frame 42803 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: bv-is (3990), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 42805 2009-09-23 00:47:41.813189 192.168.1.10          vfdfbvkcvmm.org       TCP      iss-mgmt-ssl > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42805 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: iss-mgmt-ssl (3995), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42807 2009-09-23 00:47:41.816859 192.168.1.10          vfdfbvkcvmm.org       TCP      bv-smcsrv > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 42807 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: bv-smcsrv (3991), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 42808 2009-09-23 00:47:41.816910 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 42808 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: bv-smcsrv (3991), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 42810 2009-09-23 00:47:41.888288 192.168.1.10          vfdfbvkcvmm.org       TCP      bv-ds > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 42810 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: bv-ds (3992), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 42811 2009-09-23 00:47:41.888330 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 42811 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: bv-ds (3992), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 42813 2009-09-23 00:47:41.922596 192.168.1.10          vfdfbvkcvmm.org       TCP      bv-agent > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 42813 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: bv-agent (3993), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 42814 2009-09-23 00:47:41.922637 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 42814 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: bv-agent (3993), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 42817 2009-09-23 00:47:41.999206 192.168.1.10          vfdfbvkcvmm.org       TCP      iss-mgmt-ssl > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 42817 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: iss-mgmt-ssl (3995), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 42818 2009-09-23 00:47:41.999242 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 42818 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: iss-mgmt-ssl (3995), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 42828 2009-09-23 00:47:42.117394 192.168.1.10          vfdfbvkcvmm.org       TCP      bv-agent > http RST Seq=151 Win=0 Len=0

Frame 42828 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: bv-agent (3993), Dst Port: http (80), Seq: 151, Len: 0

No. Time Source Destination Protocol Info

 42832 2009-09-23 00:47:42.145000 192.168.1.10          tawddgbpsj.cn         TCP      bv-is > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0

Frame 42832 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: bv-is (3990), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0

No. Time Source Destination Protocol Info

 42834 2009-09-23 00:47:42.145315 192.168.1.10          tawddgbpsj.cn         TCP      bv-is > http RST, ACK Seq=150 Ack=242 Win=0 Len=0

Frame 42834 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: bv-is (3990), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0

No. Time Source Destination Protocol Info

 42841 2009-09-23 00:47:42.520855 192.168.1.10          tawddgbpsj.cn         TCP      bv-is > http RST Seq=150 Win=0 Len=0

Frame 42841 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: bv-is (3990), Dst Port: http (80), Seq: 150, Len: 0

No. Time Source Destination Protocol Info

 42853 2009-09-23 00:47:44.762452 192.168.1.10          vfdfbvkcvmm.org       TCP      3994 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42853 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 3994 (3994), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42875 2009-09-23 00:47:50.777816 192.168.1.10          vfdfbvkcvmm.org       TCP      3994 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42875 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 3994 (3994), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42935 2009-09-23 00:48:04.091395 192.168.1.10          vfdfbvkcvmm.org       TCP      netcheque > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42935 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: netcheque (4008), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42937 2009-09-23 00:48:04.172509 192.168.1.10          vfdfbvkcvmm.org       TCP      chimera-hwm > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42937 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: chimera-hwm (4009), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42939 2009-09-23 00:48:04.201873 192.168.1.10          vfdfbvkcvmm.org       TCP      samsung-unidex > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42939 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: samsung-unidex (4010), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42941 2009-09-23 00:48:04.234813 192.168.1.10          vfdfbvkcvmm.org       TCP      altserviceboot > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42941 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: altserviceboot (4011), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42943 2009-09-23 00:48:04.281803 192.168.1.10          vfdfbvkcvmm.org       TCP      pda-gate > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42943 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: pda-gate (4012), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42945 2009-09-23 00:48:04.284148 192.168.1.10          vfdfbvkcvmm.org       TCP      netcheque > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 42945 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: netcheque (4008), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 42946 2009-09-23 00:48:04.284178 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 42946 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: netcheque (4008), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 42948 2009-09-23 00:48:04.365187 192.168.1.10          vfdfbvkcvmm.org       TCP      chimera-hwm > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 42948 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: chimera-hwm (4009), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 42949 2009-09-23 00:48:04.365241 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 42949 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: chimera-hwm (4009), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 42951 2009-09-23 00:48:04.387566 192.168.1.10          vfdfbvkcvmm.org       TCP      samsung-unidex > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 42951 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: samsung-unidex (4010), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 42952 2009-09-23 00:48:04.387594 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 42952 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: samsung-unidex (4010), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 42976 2009-09-23 00:48:07.292815 192.168.1.10          vfdfbvkcvmm.org       TCP      pda-gate > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42976 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: pda-gate (4012), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42977 2009-09-23 00:48:07.292911 192.168.1.10          vfdfbvkcvmm.org       TCP      altserviceboot > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42977 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: altserviceboot (4011), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 42999 2009-09-23 00:48:13.207854 192.168.1.10          vfdfbvkcvmm.org       TCP      altserviceboot > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 42999 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: altserviceboot (4011), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43000 2009-09-23 00:48:13.308185 192.168.1.10          vfdfbvkcvmm.org       TCP      pda-gate > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43000 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: pda-gate (4012), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43071 2009-09-23 00:48:26.294768 192.168.1.10          tawddgbpsj.cn         TCP      bxp > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43071 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: bxp (4027), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43074 2009-09-23 00:48:26.618793 192.168.1.10          vfdfbvkcvmm.org       TCP      dtserver-port > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43074 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: dtserver-port (4028), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43076 2009-09-23 00:48:26.669839 192.168.1.10          vfdfbvkcvmm.org       TCP      ip-qsig > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43076 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: ip-qsig (4029), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43078 2009-09-23 00:48:26.672018 192.168.1.10          tawddgbpsj.cn         TCP      bxp > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 43078 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: bxp (4027), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 43079 2009-09-23 00:48:26.672065 192.168.1.10          tawddgbpsj.cn         HTTP     GET /search?q=0 HTTP/1.0

Frame 43079 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: bxp (4027), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 43081 2009-09-23 00:48:26.698997 192.168.1.10          vfdfbvkcvmm.org       TCP      jdmn-port > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43081 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: jdmn-port (4030), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43088 2009-09-23 00:48:27.050716 192.168.1.10          tawddgbpsj.cn         TCP      bxp > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0

Frame 43088 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: bxp (4027), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0

No. Time Source Destination Protocol Info

 43090 2009-09-23 00:48:27.050881 192.168.1.10          tawddgbpsj.cn         TCP      bxp > http RST, ACK Seq=150 Ack=242 Win=0 Len=0

Frame 43090 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: bxp (4027), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0

No. Time Source Destination Protocol Info

 43097 2009-09-23 00:48:27.427524 192.168.1.10          tawddgbpsj.cn         TCP      bxp > http RST Seq=150 Win=0 Len=0

Frame 43097 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: bxp (4027), Dst Port: http (80), Seq: 150, Len: 0

No. Time Source Destination Protocol Info

 43111 2009-09-23 00:48:29.604469 192.168.1.10          vfdfbvkcvmm.org       TCP      dtserver-port > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43111 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: dtserver-port (4028), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43112 2009-09-23 00:48:29.604572 192.168.1.10          vfdfbvkcvmm.org       TCP      ip-qsig > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43112 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: ip-qsig (4029), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43113 2009-09-23 00:48:29.604595 192.168.1.10          vfdfbvkcvmm.org       TCP      jdmn-port > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43113 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: jdmn-port (4030), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43135 2009-09-23 00:48:35.619860 192.168.1.10          vfdfbvkcvmm.org       TCP      dtserver-port > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43135 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: dtserver-port (4028), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43136 2009-09-23 00:48:35.619868 192.168.1.10          vfdfbvkcvmm.org       TCP      jdmn-port > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43136 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: jdmn-port (4030), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43137 2009-09-23 00:48:35.619890 192.168.1.10          vfdfbvkcvmm.org       TCP      ip-qsig > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43137 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: ip-qsig (4029), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43203 2009-09-23 00:48:48.761977 192.168.1.10          tawddgbpsj.cn         TCP      ltp > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43203 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: ltp (4044), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43208 2009-09-23 00:48:48.763014 192.168.1.10          tawddgbpsj.cn         TCP      npp > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43208 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: npp (4045), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43210 2009-09-23 00:48:49.022712 192.168.1.10          vfdfbvkcvmm.org       TCP      acp-proto > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43210 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: acp-proto (4046), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43212 2009-09-23 00:48:49.140151 192.168.1.10          tawddgbpsj.cn         TCP      ltp > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 43212 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: ltp (4044), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 43213 2009-09-23 00:48:49.140240 192.168.1.10          tawddgbpsj.cn         HTTP     GET /search?q=0 HTTP/1.0

Frame 43213 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: ltp (4044), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 43215 2009-09-23 00:48:49.143115 192.168.1.10          tawddgbpsj.cn         TCP      npp > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 43215 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: npp (4045), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 43216 2009-09-23 00:48:49.143160 192.168.1.10          tawddgbpsj.cn         HTTP     GET /search?q=0 HTTP/1.0

Frame 43216 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: npp (4045), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 43223 2009-09-23 00:48:49.519855 192.168.1.10          tawddgbpsj.cn         TCP      ltp > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0

Frame 43223 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: ltp (4044), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0

No. Time Source Destination Protocol Info

 43225 2009-09-23 00:48:49.520085 192.168.1.10          tawddgbpsj.cn         TCP      ltp > http RST, ACK Seq=150 Ack=242 Win=0 Len=0

Frame 43225 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: ltp (4044), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0

No. Time Source Destination Protocol Info

 43234 2009-09-23 00:48:49.898739 192.168.1.10          tawddgbpsj.cn         TCP      npp > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0

Frame 43234 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: npp (4045), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0

No. Time Source Destination Protocol Info

 43236 2009-09-23 00:48:49.899038 192.168.1.10          tawddgbpsj.cn         TCP      npp > http RST, ACK Seq=150 Ack=242 Win=0 Len=0

Frame 43236 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: npp (4045), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0

No. Time Source Destination Protocol Info

 43238 2009-09-23 00:48:49.899563 192.168.1.10          tawddgbpsj.cn         TCP      ltp > http RST Seq=150 Win=0 Len=0

Frame 43238 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: ltp (4044), Dst Port: http (80), Seq: 150, Len: 0

No. Time Source Destination Protocol Info

 43241 2009-09-23 00:48:50.275302 192.168.1.10          tawddgbpsj.cn         TCP      npp > http RST Seq=150 Win=0 Len=0

Frame 43241 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: npp (4045), Dst Port: http (80), Seq: 150, Len: 0

No. Time Source Destination Protocol Info

 43261 2009-09-23 00:48:51.931716 192.168.1.10          vfdfbvkcvmm.org       TCP      acp-proto > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43261 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: acp-proto (4046), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43264 2009-09-23 00:48:52.082800 192.168.1.10          vfdfbvkcvmm.org       TCP      acp-proto > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 43264 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: acp-proto (4046), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 43265 2009-09-23 00:48:52.082868 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 43265 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: acp-proto (4046), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 43289 2009-09-23 00:48:58.056512 192.168.1.10          vfdfbvkcvmm.org       HTTP     TCP Retransmission GET /search?q=0 HTTP/1.0

Frame 43289 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: acp-proto (4046), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 43355 2009-09-23 00:49:10.181048 192.168.1.10          vfdfbvkcvmm.org       HTTP     TCP Retransmission GET /search?q=0 HTTP/1.0

Frame 43355 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: acp-proto (4046), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 43371 2009-09-23 00:49:11.443889 192.168.1.10          vfdfbvkcvmm.org       TCP      avanti_cdp > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43371 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: avanti_cdp (4065), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43373 2009-09-23 00:49:11.491448 192.168.1.10          vfdfbvkcvmm.org       TCP      pmas > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43373 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: pmas (4066), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43375 2009-09-23 00:49:11.635144 192.168.1.10          vfdfbvkcvmm.org       TCP      idp > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43375 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: idp (4067), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43379 2009-09-23 00:49:11.829065 192.168.1.10          vfdfbvkcvmm.org       TCP      idp > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 43379 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: idp (4067), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 43380 2009-09-23 00:49:11.829159 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 43380 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: idp (4067), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 43401 2009-09-23 00:49:14.337125 192.168.1.10          vfdfbvkcvmm.org       TCP      avanti_cdp > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43401 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: avanti_cdp (4065), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43402 2009-09-23 00:49:14.337143 192.168.1.10          vfdfbvkcvmm.org       TCP      pmas > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43402 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: pmas (4066), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43405 2009-09-23 00:49:14.489903 192.168.1.10          vfdfbvkcvmm.org       TCP      pmas > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 43405 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: pmas (4066), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 43406 2009-09-23 00:49:14.489976 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 43406 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: pmas (4066), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 43431 2009-09-23 00:49:20.352536 192.168.1.10          vfdfbvkcvmm.org       TCP      avanti_cdp > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43431 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: avanti_cdp (4065), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43433 2009-09-23 00:49:20.571306 192.168.1.10          vfdfbvkcvmm.org       HTTP     TCP Retransmission GET /search?q=0 HTTP/1.0

Frame 43433 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: pmas (4066), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 43438 2009-09-23 00:49:21.266871 192.168.1.10          vfdfbvkcvmm.org       TCP      pmas > http FIN, ACK Seq=151 Ack=213 Win=17212 Len=0

Frame 43438 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: pmas (4066), Dst Port: http (80), Seq: 151, Ack: 213, Len: 0

No. Time Source Destination Protocol Info

 43440 2009-09-23 00:49:21.267276 192.168.1.10          vfdfbvkcvmm.org       TCP      pmas > http ACK Seq=152 Ack=214 Win=17212 Len=0

Frame 43440 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: pmas (4066), Dst Port: http (80), Seq: 152, Ack: 214, Len: 0

No. Time Source Destination Protocol Info

 43525 2009-09-23 00:49:33.494670 192.168.1.10          tawddgbpsj.cn         TCP      lorica-in-sec > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43525 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: lorica-in-sec (4081), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43527 2009-09-23 00:49:33.733664 192.168.1.10          vfdfbvkcvmm.org       TCP      lorica-out > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43527 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: lorica-out (4082), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43529 2009-09-23 00:49:33.778964 192.168.1.10          vfdfbvkcvmm.org       TCP      lorica-out-sec > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43529 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: lorica-out-sec (4083), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43531 2009-09-23 00:49:33.872014 192.168.1.10          tawddgbpsj.cn         TCP      lorica-in-sec > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 43531 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: lorica-in-sec (4081), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 43532 2009-09-23 00:49:33.872077 192.168.1.10          tawddgbpsj.cn         HTTP     GET /search?q=0 HTTP/1.0

Frame 43532 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: lorica-in-sec (4081), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 43534 2009-09-23 00:49:33.878704 192.168.1.10          vfdfbvkcvmm.org       TCP      4084 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43534 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4084 (4084), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43536 2009-09-23 00:49:34.148862 192.168.1.10          vfdfbvkcvmm.org       HTTP     TCP Retransmission GET /search?q=0 HTTP/1.0

Frame 43536 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: acp-proto (4046), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 43541 2009-09-23 00:49:34.250775 192.168.1.10          tawddgbpsj.cn         TCP      lorica-in-sec > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0

Frame 43541 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: lorica-in-sec (4081), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0

No. Time Source Destination Protocol Info

 43543 2009-09-23 00:49:34.251049 192.168.1.10          tawddgbpsj.cn         TCP      lorica-in-sec > http RST, ACK Seq=150 Ack=242 Win=0 Len=0

Frame 43543 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: lorica-in-sec (4081), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0

No. Time Source Destination Protocol Info

 43551 2009-09-23 00:49:34.628094 192.168.1.10          tawddgbpsj.cn         TCP      lorica-in-sec > http RST Seq=150 Win=0 Len=0

Frame 43551 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: lorica-in-sec (4081), Dst Port: http (80), Seq: 150, Len: 0

No. Time Source Destination Protocol Info

 43555 2009-09-23 00:49:34.790558 192.168.1.10          vfdfbvkcvmm.org       TCP      acp-proto > http FIN, ACK Seq=151 Ack=213 Win=17212 Len=0

Frame 43555 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: acp-proto (4046), Dst Port: http (80), Seq: 151, Ack: 213, Len: 0

No. Time Source Destination Protocol Info

 43557 2009-09-23 00:49:34.790945 192.168.1.10          vfdfbvkcvmm.org       TCP      acp-proto > http ACK Seq=152 Ack=214 Win=17212 Len=0

Frame 43557 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: acp-proto (4046), Dst Port: http (80), Seq: 152, Ack: 214, Len: 0

No. Time Source Destination Protocol Info

 43568 2009-09-23 00:49:36.758174 192.168.1.10          vfdfbvkcvmm.org       TCP      lorica-out > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43568 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: lorica-out (4082), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43569 2009-09-23 00:49:36.758197 192.168.1.10          vfdfbvkcvmm.org       TCP      lorica-out-sec > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43569 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: lorica-out-sec (4083), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43570 2009-09-23 00:49:36.867530 192.168.1.10          vfdfbvkcvmm.org       TCP      4084 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43570 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4084 (4084), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43572 2009-09-23 00:49:36.916312 192.168.1.10          vfdfbvkcvmm.org       TCP      4084 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 43572 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4084 (4084), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 43573 2009-09-23 00:49:36.916383 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 43573 (201 bytes on wire, 201 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4084 (4084), Dst Port: http (80), Seq: 1, Ack: 1, Len: 147 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 43577 2009-09-23 00:49:36.967831 192.168.1.10          vfdfbvkcvmm.org       TCP      4084 > http FIN, ACK Seq=148 Ack=499 Win=16926 Len=0

Frame 43577 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4084 (4084), Dst Port: http (80), Seq: 148, Ack: 499, Len: 0

No. Time Source Destination Protocol Info

 43579 2009-09-23 00:49:36.968166 192.168.1.10          vfdfbvkcvmm.org       TCP      4084 > http ACK Seq=149 Ack=500 Win=16926 Len=0

Frame 43579 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4084 (4084), Dst Port: http (80), Seq: 149, Ack: 500, Len: 0

No. Time Source Destination Protocol Info

 43600 2009-09-23 00:49:42.773528 192.168.1.10          vfdfbvkcvmm.org       TCP      lorica-out-sec > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43600 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: lorica-out-sec (4083), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43601 2009-09-23 00:49:42.773540 192.168.1.10          vfdfbvkcvmm.org       TCP      lorica-out > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43601 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: lorica-out (4082), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43674 2009-09-23 00:49:55.852942 192.168.1.10          tawddgbpsj.cn         TCP      drmsfsd > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43674 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: drmsfsd (4098), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43676 2009-09-23 00:49:56.142308 192.168.1.10          vfdfbvkcvmm.org       TCP      dpcp > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43676 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: dpcp (4099), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43678 2009-09-23 00:49:56.162973 192.168.1.10          vfdfbvkcvmm.org       TCP      igo-incognito > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43678 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: igo-incognito (4100), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43680 2009-09-23 00:49:56.214535 192.168.1.10          vfdfbvkcvmm.org       TCP      brlp-0 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43680 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: brlp-0 (4101), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43682 2009-09-23 00:49:56.229459 192.168.1.10          tawddgbpsj.cn         TCP      drmsfsd > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 43682 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: drmsfsd (4098), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 43683 2009-09-23 00:49:56.229492 192.168.1.10          tawddgbpsj.cn         HTTP     GET /search?q=0 HTTP/1.0

Frame 43683 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: drmsfsd (4098), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 43686 2009-09-23 00:49:56.327475 192.168.1.10          vfdfbvkcvmm.org       TCP      dpcp > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 43686 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: dpcp (4099), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 43687 2009-09-23 00:49:56.327543 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 43687 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: dpcp (4099), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 43689 2009-09-23 00:49:56.356549 192.168.1.10          vfdfbvkcvmm.org       TCP      igo-incognito > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 43689 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: igo-incognito (4100), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 43690 2009-09-23 00:49:56.356577 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 43690 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: igo-incognito (4100), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 43692 2009-09-23 00:49:56.401609 192.168.1.10          vfdfbvkcvmm.org       TCP      brlp-0 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 43692 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: brlp-0 (4101), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 43693 2009-09-23 00:49:56.401631 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 43693 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: brlp-0 (4101), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 43697 2009-09-23 00:49:56.515880 192.168.1.10          vfdfbvkcvmm.org       TCP      brlp-1 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43697 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: brlp-1 (4102), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43702 2009-09-23 00:49:56.551787 192.168.1.10          vfdfbvkcvmm.org       TCP      igo-incognito > http RST Seq=151 Win=0 Len=0

Frame 43702 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: igo-incognito (4100), Dst Port: http (80), Seq: 151, Len: 0

No. Time Source Destination Protocol Info

 43711 2009-09-23 00:49:56.611003 192.168.1.10          tawddgbpsj.cn         TCP      drmsfsd > http ACK Seq=149 Ack=243 Win=17183 Len=0

Frame 43711 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: drmsfsd (4098), Dst Port: http (80), Seq: 149, Ack: 243, Len: 0

No. Time Source Destination Protocol Info

 43712 2009-09-23 00:49:56.611128 192.168.1.10          tawddgbpsj.cn         TCP      drmsfsd > http RST, ACK Seq=149 Ack=243 Win=0 Len=0

Frame 43712 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: drmsfsd (4098), Dst Port: http (80), Seq: 149, Ack: 243, Len: 0

No. Time Source Destination Protocol Info

 43715 2009-09-23 00:49:56.701422 192.168.1.10          vfdfbvkcvmm.org       TCP      brlp-1 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 43715 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: brlp-1 (4102), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 43716 2009-09-23 00:49:56.701501 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 43716 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: brlp-1 (4102), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 43820 2009-09-23 00:50:18.557813 192.168.1.10          vfdfbvkcvmm.org       TCP      hillrserv > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43820 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: hillrserv (4117), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43822 2009-09-23 00:50:18.563560 192.168.1.10          vfdfbvkcvmm.org       TCP      netscript > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43822 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: netscript (4118), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43824 2009-09-23 00:50:18.690386 192.168.1.10          vfdfbvkcvmm.org       TCP      assuria-slm > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43824 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: assuria-slm (4119), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43849 2009-09-23 00:50:21.600206 192.168.1.10          vfdfbvkcvmm.org       TCP      hillrserv > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43849 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: hillrserv (4117), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43850 2009-09-23 00:50:21.600225 192.168.1.10          vfdfbvkcvmm.org       TCP      netscript > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43850 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: netscript (4118), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43851 2009-09-23 00:50:21.600235 192.168.1.10          vfdfbvkcvmm.org       TCP      assuria-slm > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43851 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: assuria-slm (4119), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43879 2009-09-23 00:50:27.615597 192.168.1.10          vfdfbvkcvmm.org       TCP      netscript > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43879 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: netscript (4118), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43880 2009-09-23 00:50:27.615615 192.168.1.10          vfdfbvkcvmm.org       TCP      hillrserv > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43880 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: hillrserv (4117), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43881 2009-09-23 00:50:27.615625 192.168.1.10          vfdfbvkcvmm.org       TCP      assuria-slm > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43881 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: assuria-slm (4119), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43911 2009-09-23 00:50:34.474887 192.168.1.10          HSIB.home             TCP      nufw > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43911 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: HSIB.home (192.168.1.1) Transmission Control Protocol, Src Port: nufw (4128), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43922 2009-09-23 00:50:34.943422 192.168.1.10          HSIB.home             TCP      nufw > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43922 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: HSIB.home (192.168.1.1) Transmission Control Protocol, Src Port: nufw (4128), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43930 2009-09-23 00:50:35.490269 192.168.1.10          HSIB.home             TCP      nufw > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43930 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: HSIB.home (192.168.1.1) Transmission Control Protocol, Src Port: nufw (4128), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43950 2009-09-23 00:50:39.647027 192.168.1.10          vfdfbvkcvmm.org       TCP      cl-db-attach > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43950 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: cl-db-attach (4135), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43959 2009-09-23 00:50:40.757466 192.168.1.10          tawddgbpsj.cn         TCP      cl-db-remote > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43959 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: cl-db-remote (4137), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43966 2009-09-23 00:50:40.999250 192.168.1.10          vfdfbvkcvmm.org       TCP      nettest > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43966 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: nettest (4138), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43968 2009-09-23 00:50:41.098473 192.168.1.10          vfdfbvkcvmm.org       TCP      thrtx > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43968 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: thrtx (4139), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 43970 2009-09-23 00:50:41.133898 192.168.1.10          tawddgbpsj.cn         TCP      cl-db-remote > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 43970 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: cl-db-remote (4137), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 43971 2009-09-23 00:50:41.133928 192.168.1.10          tawddgbpsj.cn         HTTP     GET /search?q=0 HTTP/1.0

Frame 43971 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: cl-db-remote (4137), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 43978 2009-09-23 00:50:41.513211 192.168.1.10          tawddgbpsj.cn         TCP      cl-db-remote > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0

Frame 43978 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: cl-db-remote (4137), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0

No. Time Source Destination Protocol Info

 43980 2009-09-23 00:50:41.513454 192.168.1.10          tawddgbpsj.cn         TCP      cl-db-remote > http RST, ACK Seq=150 Ack=242 Win=0 Len=0

Frame 43980 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: cl-db-remote (4137), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0

No. Time Source Destination Protocol Info

 43989 2009-09-23 00:50:41.889796 192.168.1.10          tawddgbpsj.cn         TCP      cl-db-remote > http RST Seq=150 Win=0 Len=0

Frame 43989 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: cl-db-remote (4137), Dst Port: http (80), Seq: 150, Len: 0

No. Time Source Destination Protocol Info

 43994 2009-09-23 00:50:42.599397 192.168.1.10          vfdfbvkcvmm.org       TCP      cl-db-attach > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 43994 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: cl-db-attach (4135), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44004 2009-09-23 00:50:43.911829 192.168.1.10          vfdfbvkcvmm.org       TCP      nettest > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44004 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: nettest (4138), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44005 2009-09-23 00:50:44.021221 192.168.1.10          vfdfbvkcvmm.org       TCP      thrtx > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44005 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: thrtx (4139), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44021 2009-09-23 00:50:48.614801 192.168.1.10          vfdfbvkcvmm.org       TCP      cl-db-attach > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44021 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: cl-db-attach (4135), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44031 2009-09-23 00:50:49.927244 192.168.1.10          vfdfbvkcvmm.org       TCP      nettest > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44031 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: nettest (4138), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44032 2009-09-23 00:50:50.036631 192.168.1.10          vfdfbvkcvmm.org       TCP      thrtx > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44032 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: thrtx (4139), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44034 2009-09-23 00:50:50.078669 192.168.1.10          vfdfbvkcvmm.org       TCP      nettest > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 44034 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: nettest (4138), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 44035 2009-09-23 00:50:50.078730 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 44035 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: nettest (4138), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 44106 2009-09-23 00:51:02.067407 192.168.1.10          vfdfbvkcvmm.org       HTTP     TCP Retransmission GET /search?q=0 HTTP/1.0

Frame 44106 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: nettest (4138), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 44107 2009-09-23 00:51:02.067854 192.168.1.10          vfdfbvkcvmm.org       TCP      stat-cc > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44107 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: stat-cc (4158), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44116 2009-09-23 00:51:03.178398 192.168.1.10          tawddgbpsj.cn         TCP      jini-discovery > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44116 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: jini-discovery (4160), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44121 2009-09-23 00:51:03.255998 192.168.1.10          vfdfbvkcvmm.org       TCP      omscontact > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44121 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: omscontact (4161), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44124 2009-09-23 00:51:03.475718 192.168.1.10          vfdfbvkcvmm.org       TCP      omstopology > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44124 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: omstopology (4162), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44126 2009-09-23 00:51:03.555311 192.168.1.10          vfdfbvkcvmm.org       TCP      silverpeakpeer > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44126 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: silverpeakpeer (4163), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44128 2009-09-23 00:51:03.556543 192.168.1.10          tawddgbpsj.cn         TCP      jini-discovery > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 44128 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: jini-discovery (4160), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 44129 2009-09-23 00:51:03.556620 192.168.1.10          tawddgbpsj.cn         HTTP     GET /search?q=0 HTTP/1.0

Frame 44129 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: jini-discovery (4160), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 44132 2009-09-23 00:51:03.749006 192.168.1.10          vfdfbvkcvmm.org       TCP      silverpeakpeer > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 44132 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: silverpeakpeer (4163), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 44133 2009-09-23 00:51:03.749057 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 44133 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: silverpeakpeer (4163), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 44141 2009-09-23 00:51:03.936634 192.168.1.10          tawddgbpsj.cn         TCP      jini-discovery > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0

Frame 44141 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: jini-discovery (4160), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0

No. Time Source Destination Protocol Info

 44143 2009-09-23 00:51:03.936917 192.168.1.10          tawddgbpsj.cn         TCP      jini-discovery > http RST, ACK Seq=150 Ack=242 Win=0 Len=0

Frame 44143 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: jini-discovery (4160), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0

No. Time Source Destination Protocol Info

 44150 2009-09-23 00:51:04.313121 192.168.1.10          tawddgbpsj.cn         TCP      jini-discovery > http RST Seq=150 Win=0 Len=0

Frame 44150 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: jini-discovery (4160), Dst Port: http (80), Seq: 150, Len: 0

No. Time Source Destination Protocol Info

 44156 2009-09-23 00:51:05.020423 192.168.1.10          vfdfbvkcvmm.org       TCP      stat-cc > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44156 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: stat-cc (4158), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44162 2009-09-23 00:51:06.114110 192.168.1.10          vfdfbvkcvmm.org       TCP      omscontact > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44162 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: omscontact (4161), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44163 2009-09-23 00:51:06.442228 192.168.1.10          vfdfbvkcvmm.org       TCP      omstopology > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44163 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: omstopology (4162), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44165 2009-09-23 00:51:06.587280 192.168.1.10          vfdfbvkcvmm.org       TCP      omstopology > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 44165 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: omstopology (4162), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 44166 2009-09-23 00:51:06.587357 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 44166 (205 bytes on wire, 205 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: omstopology (4162), Dst Port: http (80), Seq: 1, Ack: 1, Len: 151 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 44169 2009-09-23 00:51:06.735909 192.168.1.10          vfdfbvkcvmm.org       TCP      omstopology > http FIN, ACK Seq=152 Ack=672 Win=16753 Len=0

Frame 44169 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: omstopology (4162), Dst Port: http (80), Seq: 152, Ack: 672, Len: 0

No. Time Source Destination Protocol Info

 44171 2009-09-23 00:51:06.736232 192.168.1.10          vfdfbvkcvmm.org       TCP      omstopology > http ACK Seq=153 Ack=673 Win=16753 Len=0

Frame 44171 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: omstopology (4162), Dst Port: http (80), Seq: 153, Ack: 673, Len: 0

No. Time Source Destination Protocol Info

 44189 2009-09-23 00:51:11.035831 192.168.1.10          vfdfbvkcvmm.org       TCP      stat-cc > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44189 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: stat-cc (4158), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44197 2009-09-23 00:51:12.129511 192.168.1.10          vfdfbvkcvmm.org       TCP      omscontact > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44197 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: omscontact (4161), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44260 2009-09-23 00:51:23.176347 192.168.1.10          vfdfbvkcvmm.org       TCP      pcptcpservice > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44260 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: pcptcpservice (4182), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44274 2009-09-23 00:51:25.646692 192.168.1.10          tawddgbpsj.cn         TCP      universe_suite > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44274 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: universe_suite (4184), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44275 2009-09-23 00:51:25.646791 192.168.1.10          tawddgbpsj.cn         TCP      wcpp > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44275 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: wcpp (4185), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44278 2009-09-23 00:51:25.865888 192.168.1.10          vfdfbvkcvmm.org       TCP      boxbackupstore > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44278 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: boxbackupstore (4186), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44279 2009-09-23 00:51:26.019606 192.168.1.10          vfdfbvkcvmm.org       HTTP     TCP Retransmission GET /search?q=0 HTTP/1.0

Frame 44279 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: nettest (4138), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 44281 2009-09-23 00:51:26.024501 192.168.1.10          tawddgbpsj.cn         TCP      universe_suite > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 44281 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: universe_suite (4184), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 44282 2009-09-23 00:51:26.024576 192.168.1.10          tawddgbpsj.cn         HTTP     GET /search?q=0 HTTP/1.0

Frame 44282 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: universe_suite (4184), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 44284 2009-09-23 00:51:26.025283 192.168.1.10          tawddgbpsj.cn         TCP      wcpp > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 44284 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: wcpp (4185), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 44285 2009-09-23 00:51:26.025337 192.168.1.10          tawddgbpsj.cn         HTTP     GET /search?q=0 HTTP/1.0

Frame 44285 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: wcpp (4185), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 44287 2009-09-23 00:51:26.047861 192.168.1.10          vfdfbvkcvmm.org       TCP      csc_proxy > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44287 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: csc_proxy (4187), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44289 2009-09-23 00:51:26.050761 192.168.1.10          vfdfbvkcvmm.org       TCP      boxbackupstore > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 44289 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: boxbackupstore (4186), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 44290 2009-09-23 00:51:26.050795 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 44290 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: boxbackupstore (4186), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 44291 2009-09-23 00:51:26.128972 192.168.1.10          vfdfbvkcvmm.org       TCP      pcptcpservice > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44291 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: pcptcpservice (4182), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44298 2009-09-23 00:51:26.404705 192.168.1.10          tawddgbpsj.cn         TCP      universe_suite > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0

Frame 44298 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: universe_suite (4184), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0

No. Time Source Destination Protocol Info

 44300 2009-09-23 00:51:26.405004 192.168.1.10          tawddgbpsj.cn         TCP      universe_suite > http RST, ACK Seq=150 Ack=242 Win=0 Len=0

Frame 44300 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: universe_suite (4184), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0

No. Time Source Destination Protocol Info

 44303 2009-09-23 00:51:26.407284 192.168.1.10          tawddgbpsj.cn         TCP      wcpp > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0

Frame 44303 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: wcpp (4185), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0

No. Time Source Destination Protocol Info

 44305 2009-09-23 00:51:26.407583 192.168.1.10          tawddgbpsj.cn         TCP      wcpp > http RST, ACK Seq=150 Ack=242 Win=0 Len=0

Frame 44305 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: wcpp (4185), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0

No. Time Source Destination Protocol Info

 44312 2009-09-23 00:51:26.781313 192.168.1.10          tawddgbpsj.cn         TCP      universe_suite > http RST Seq=150 Win=0 Len=0

Frame 44312 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: universe_suite (4184), Dst Port: http (80), Seq: 150, Len: 0

No. Time Source Destination Protocol Info

 44314 2009-09-23 00:51:26.784435 192.168.1.10          tawddgbpsj.cn         TCP      wcpp > http RST Seq=150 Win=0 Len=0

Frame 44314 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: wcpp (4185), Dst Port: http (80), Seq: 150, Len: 0

No. Time Source Destination Protocol Info

 44335 2009-09-23 00:51:29.082027 192.168.1.10          vfdfbvkcvmm.org       TCP      csc_proxy > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44335 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: csc_proxy (4187), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44349 2009-09-23 00:51:32.144404 192.168.1.10          vfdfbvkcvmm.org       TCP      pcptcpservice > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44349 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: pcptcpservice (4182), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44361 2009-09-23 00:51:35.097395 192.168.1.10          vfdfbvkcvmm.org       TCP      csc_proxy > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44361 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: csc_proxy (4187), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44429 2009-09-23 00:51:45.458312 192.168.1.10          192.168.1.20          TCP      4205 > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44429 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 192.168.1.20 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: 4205 (4205), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44431 2009-09-23 00:51:45.831345 192.168.1.10          192.168.1.20          TCP      4205 > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44431 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 192.168.1.20 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: 4205 (4205), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44434 2009-09-23 00:51:46.362582 192.168.1.10          192.168.1.20          TCP      4205 > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44434 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 192.168.1.20 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: 4205 (4205), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44447 2009-09-23 00:51:48.067505 192.168.1.10          tawddgbpsj.cn         TCP      4208 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44447 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4208 (4208), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44449 2009-09-23 00:51:48.308853 192.168.1.10          vfdfbvkcvmm.org       TCP      4209 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44449 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4209 (4209), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44451 2009-09-23 00:51:48.384500 192.168.1.10          vfdfbvkcvmm.org       TCP      4210 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44451 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4210 (4210), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44453 2009-09-23 00:51:48.444036 192.168.1.10          tawddgbpsj.cn         TCP      4208 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 44453 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4208 (4208), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 44454 2009-09-23 00:51:48.444110 192.168.1.10          tawddgbpsj.cn         HTTP     GET /search?q=0 HTTP/1.0

Frame 44454 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4208 (4208), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 44456 2009-09-23 00:51:48.483037 192.168.1.10          vfdfbvkcvmm.org       TCP      4211 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44456 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4211 (4211), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44458 2009-09-23 00:51:48.494286 192.168.1.10          vfdfbvkcvmm.org       TCP      4209 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 44458 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4209 (4209), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 44459 2009-09-23 00:51:48.508042 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 44459 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4209 (4209), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 44467 2009-09-23 00:51:48.823206 192.168.1.10          tawddgbpsj.cn         TCP      4208 > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0

Frame 44467 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4208 (4208), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0

No. Time Source Destination Protocol Info

 44469 2009-09-23 00:51:48.823457 192.168.1.10          tawddgbpsj.cn         TCP      4208 > http RST, ACK Seq=150 Ack=242 Win=0 Len=0

Frame 44469 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4208 (4208), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0

No. Time Source Destination Protocol Info

 44477 2009-09-23 00:51:49.198968 192.168.1.10          tawddgbpsj.cn         TCP      4208 > http RST Seq=150 Win=0 Len=0

Frame 44477 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4208 (4208), Dst Port: http (80), Seq: 150, Len: 0

No. Time Source Destination Protocol Info

 44496 2009-09-23 00:51:51.393679 192.168.1.10          vfdfbvkcvmm.org       TCP      4210 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44496 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4210 (4210), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44497 2009-09-23 00:51:51.393703 192.168.1.10          vfdfbvkcvmm.org       TCP      4211 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44497 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4211 (4211), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44520 2009-09-23 00:51:57.409031 192.168.1.10          vfdfbvkcvmm.org       TCP      4211 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44520 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4211 (4211), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44521 2009-09-23 00:51:57.409042 192.168.1.10          vfdfbvkcvmm.org       TCP      4210 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44521 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4210 (4210), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44597 2009-09-23 00:52:10.505088 192.168.1.10          tawddgbpsj.cn         TCP      4234 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44597 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4234 (4234), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44601 2009-09-23 00:52:10.684251 192.168.1.10          vfdfbvkcvmm.org       TCP      4235 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44601 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4235 (4235), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44603 2009-09-23 00:52:10.746566 192.168.1.10          vfdfbvkcvmm.org       TCP      4236 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44603 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: 4236 (4236), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44605 2009-09-23 00:52:10.765352 192.168.1.10          vfdfbvkcvmm.org       TCP      4237 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44605 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4237 (4237), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44607 2009-09-23 00:52:10.882962 192.168.1.10          tawddgbpsj.cn         TCP      4234 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 44607 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4234 (4234), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 44608 2009-09-23 00:52:10.883057 192.168.1.10          tawddgbpsj.cn         HTTP     GET /search?q=0 HTTP/1.0

Frame 44608 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4234 (4234), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 44610 2009-09-23 00:52:10.932946 192.168.1.10          vfdfbvkcvmm.org       TCP      4238 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44610 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4238 (4238), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44612 2009-09-23 00:52:10.951394 192.168.1.10          vfdfbvkcvmm.org       TCP      4237 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 44612 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4237 (4237), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 44613 2009-09-23 00:52:10.951433 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 44613 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4237 (4237), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 44621 2009-09-23 00:52:11.262181 192.168.1.10          tawddgbpsj.cn         TCP      4234 > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0

Frame 44621 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4234 (4234), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0

No. Time Source Destination Protocol Info

 44623 2009-09-23 00:52:11.262506 192.168.1.10          tawddgbpsj.cn         TCP      4234 > http RST, ACK Seq=150 Ack=242 Win=0 Len=0

Frame 44623 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4234 (4234), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0

No. Time Source Destination Protocol Info

 44631 2009-09-23 00:52:11.639011 192.168.1.10          tawddgbpsj.cn         TCP      4234 > http RST Seq=150 Win=0 Len=0

Frame 44631 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4234 (4234), Dst Port: http (80), Seq: 150, Len: 0

No. Time Source Destination Protocol Info

 44645 2009-09-23 00:52:13.705317 192.168.1.10          vfdfbvkcvmm.org       TCP      4235 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44645 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4235 (4235), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44646 2009-09-23 00:52:13.705337 192.168.1.10          vfdfbvkcvmm.org       TCP      4236 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44646 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: 4236 (4236), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44647 2009-09-23 00:52:13.814682 192.168.1.10          vfdfbvkcvmm.org       TCP      4238 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44647 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4238 (4238), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44648 2009-09-23 00:52:14.033430 192.168.1.10          vfdfbvkcvmm.org       HTTP     TCP Retransmission GET /search?q=0 HTTP/1.0

Frame 44648 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: nettest (4138), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 44673 2009-09-23 00:52:19.736338 192.168.1.10          vfdfbvkcvmm.org       TCP      4236 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44673 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: 4236 (4236), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44674 2009-09-23 00:52:19.736361 192.168.1.10          vfdfbvkcvmm.org       TCP      4235 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44674 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4235 (4235), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44675 2009-09-23 00:52:19.830094 192.168.1.10          vfdfbvkcvmm.org       TCP      4238 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44675 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4238 (4238), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44755 2009-09-23 00:52:33.198587 192.168.1.10          vfdfbvkcvmm.org       TCP      4259 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44755 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4259 (4259), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44757 2009-09-23 00:52:33.208785 192.168.1.10          vfdfbvkcvmm.org       TCP      4260 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44757 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4260 (4260), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44759 2009-09-23 00:52:33.233769 192.168.1.10          vfdfbvkcvmm.org       TCP      4261 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44759 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4261 (4261), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44762 2009-09-23 00:52:33.336327 192.168.1.10          vfdfbvkcvmm.org       TCP      4262 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44762 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4262 (4262), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44764 2009-09-23 00:52:33.521546 192.168.1.10          vfdfbvkcvmm.org       TCP      4262 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 44764 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4262 (4262), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 44765 2009-09-23 00:52:33.521637 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 44765 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4262 (4262), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 44788 2009-09-23 00:52:36.126305 192.168.1.10          vfdfbvkcvmm.org       TCP      4259 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44788 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4259 (4259), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44789 2009-09-23 00:52:36.126311 192.168.1.10          vfdfbvkcvmm.org       TCP      4261 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44789 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4261 (4261), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44790 2009-09-23 00:52:36.126318 192.168.1.10          vfdfbvkcvmm.org       TCP      4260 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44790 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4260 (4260), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44811 2009-09-23 00:52:42.141722 192.168.1.10          vfdfbvkcvmm.org       TCP      4261 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44811 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4261 (4261), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44812 2009-09-23 00:52:42.141816 192.168.1.10          vfdfbvkcvmm.org       TCP      4260 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44812 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4260 (4260), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44813 2009-09-23 00:52:42.141839 192.168.1.10          vfdfbvkcvmm.org       TCP      4259 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44813 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4259 (4259), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44873 2009-09-23 00:52:54.173246 192.168.1.10          vfdfbvkcvmm.org       TCP      4281 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44873 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4281 (4281), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44883 2009-09-23 00:52:55.408992 192.168.1.10          tawddgbpsj.cn         TCP      4282 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44883 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4282 (4282), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44884 2009-09-23 00:52:55.409065 192.168.1.10          tawddgbpsj.cn         TCP      4283 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44884 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4283 (4283), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44886 2009-09-23 00:52:55.577995 192.168.1.10          vfdfbvkcvmm.org       TCP      4284 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44886 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: 4284 (4284), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44888 2009-09-23 00:52:55.655130 192.168.1.10          vfdfbvkcvmm.org       TCP      4285 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44888 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4285 (4285), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44891 2009-09-23 00:52:55.677126 192.168.1.10          vfdfbvkcvmm.org       TCP      4286 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44891 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4286 (4286), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44893 2009-09-23 00:52:55.696123 192.168.1.10          vfdfbvkcvmm.org       TCP      4287 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44893 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4287 (4287), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44895 2009-09-23 00:52:55.785485 192.168.1.10          tawddgbpsj.cn         TCP      4282 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 44895 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4282 (4282), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 44896 2009-09-23 00:52:55.785536 192.168.1.10          tawddgbpsj.cn         HTTP     GET /search?q=0 HTTP/1.0

Frame 44896 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4282 (4282), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 44898 2009-09-23 00:52:55.787105 192.168.1.10          tawddgbpsj.cn         TCP      4283 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 44898 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4283 (4283), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 44899 2009-09-23 00:52:55.787144 192.168.1.10          tawddgbpsj.cn         HTTP     GET /search?q=0 HTTP/1.0

Frame 44899 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4283 (4283), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 44901 2009-09-23 00:52:55.841577 192.168.1.10          vfdfbvkcvmm.org       TCP      4287 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 44901 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4287 (4287), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 44902 2009-09-23 00:52:55.841637 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 44902 (205 bytes on wire, 205 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4287 (4287), Dst Port: http (80), Seq: 1, Ack: 1, Len: 151 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 44907 2009-09-23 00:52:55.990066 192.168.1.10          vfdfbvkcvmm.org       TCP      4287 > http FIN, ACK Seq=152 Ack=672 Win=16753 Len=0

Frame 44907 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4287 (4287), Dst Port: http (80), Seq: 152, Ack: 672, Len: 0

No. Time Source Destination Protocol Info

 44909 2009-09-23 00:52:55.990380 192.168.1.10          vfdfbvkcvmm.org       TCP      4287 > http ACK Seq=153 Ack=673 Win=16753 Len=0

Frame 44909 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4287 (4287), Dst Port: http (80), Seq: 153, Ack: 673, Len: 0

No. Time Source Destination Protocol Info

 44913 2009-09-23 00:52:56.164950 192.168.1.10          tawddgbpsj.cn         TCP      4282 > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0

Frame 44913 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4282 (4282), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0

No. Time Source Destination Protocol Info

 44914 2009-09-23 00:52:56.165134 192.168.1.10          tawddgbpsj.cn         TCP      4288 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44914 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4288 (4288), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44916 2009-09-23 00:52:56.165249 192.168.1.10          tawddgbpsj.cn         TCP      4282 > http RST, ACK Seq=150 Ack=242 Win=0 Len=0

Frame 44916 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4282 (4282), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0

No. Time Source Destination Protocol Info

 44919 2009-09-23 00:52:56.169500 192.168.1.10          tawddgbpsj.cn         TCP      4283 > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0

Frame 44919 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4283 (4283), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0

No. Time Source Destination Protocol Info

 44920 2009-09-23 00:52:56.169720 192.168.1.10          tawddgbpsj.cn         TCP      4289 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44920 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4289 (4289), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44922 2009-09-23 00:52:56.169825 192.168.1.10          tawddgbpsj.cn         TCP      4283 > http RST, ACK Seq=150 Ack=242 Win=0 Len=0

Frame 44922 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4283 (4283), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0

No. Time Source Destination Protocol Info

 44931 2009-09-23 00:52:56.540454 192.168.1.10          tawddgbpsj.cn         TCP      4282 > http RST Seq=150 Win=0 Len=0

Frame 44931 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4282 (4282), Dst Port: http (80), Seq: 150, Len: 0

No. Time Source Destination Protocol Info

 44933 2009-09-23 00:52:56.542258 192.168.1.10          tawddgbpsj.cn         TCP      4288 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 44933 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4288 (4288), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 44934 2009-09-23 00:52:56.542305 192.168.1.10          tawddgbpsj.cn         HTTP     GET /search?q=0 HTTP/1.0

Frame 44934 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4288 (4288), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 44936 2009-09-23 00:52:56.546514 192.168.1.10          tawddgbpsj.cn         TCP      4283 > http RST Seq=150 Win=0 Len=0

Frame 44936 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4283 (4283), Dst Port: http (80), Seq: 150, Len: 0

No. Time Source Destination Protocol Info

 44938 2009-09-23 00:52:56.548031 192.168.1.10          tawddgbpsj.cn         TCP      4289 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 44938 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4289 (4289), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 44939 2009-09-23 00:52:56.548066 192.168.1.10          tawddgbpsj.cn         HTTP     GET /search?q=0 HTTP/1.0

Frame 44939 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4289 (4289), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 44942 2009-09-23 00:52:56.921770 192.168.1.10          tawddgbpsj.cn         TCP      4288 > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0

Frame 44942 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4288 (4288), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0

No. Time Source Destination Protocol Info

 44944 2009-09-23 00:52:56.922047 192.168.1.10          tawddgbpsj.cn         TCP      4288 > http RST, ACK Seq=150 Ack=242 Win=0 Len=0

Frame 44944 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4288 (4288), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0

No. Time Source Destination Protocol Info

 44947 2009-09-23 00:52:56.927579 192.168.1.10          tawddgbpsj.cn         TCP      4289 > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0

Frame 44947 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4289 (4289), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0

No. Time Source Destination Protocol Info

 44949 2009-09-23 00:52:56.927893 192.168.1.10          tawddgbpsj.cn         TCP      4289 > http RST, ACK Seq=150 Ack=242 Win=0 Len=0

Frame 44949 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4289 (4289), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0

No. Time Source Destination Protocol Info

 44950 2009-09-23 00:52:57.141131 192.168.1.10          vfdfbvkcvmm.org       TCP      4281 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44950 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4281 (4281), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44953 2009-09-23 00:52:57.298062 192.168.1.10          tawddgbpsj.cn         TCP      4288 > http RST Seq=150 Win=0 Len=0

Frame 44953 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4288 (4288), Dst Port: http (80), Seq: 150, Len: 0

No. Time Source Destination Protocol Info

 44955 2009-09-23 00:52:57.304108 192.168.1.10          tawddgbpsj.cn         TCP      4289 > http RST Seq=150 Win=0 Len=0

Frame 44955 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4289 (4289), Dst Port: http (80), Seq: 150, Len: 0

No. Time Source Destination Protocol Info

 44959 2009-09-23 00:52:58.547333 192.168.1.10          vfdfbvkcvmm.org       TCP      4284 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44959 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: 4284 (4284), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44960 2009-09-23 00:52:58.656702 192.168.1.10          vfdfbvkcvmm.org       TCP      4286 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44960 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4286 (4286), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44961 2009-09-23 00:52:58.656761 192.168.1.10          vfdfbvkcvmm.org       TCP      4285 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44961 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4285 (4285), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44964 2009-09-23 00:52:58.823813 192.168.1.10          vfdfbvkcvmm.org       TCP      4286 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 44964 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4286 (4286), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 44965 2009-09-23 00:52:58.823892 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 44965 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4286 (4286), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 44969 2009-09-23 00:52:59.147435 192.168.1.10          vfdfbvkcvmm.org       TCP      4286 > http ACK Seq=151 Ack=19 Win=17407 Len=0

Frame 44969 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4286 (4286), Dst Port: http (80), Seq: 151, Ack: 19, Len: 0

No. Time Source Destination Protocol Info

 44970 2009-09-23 00:52:59.147461 192.168.1.10          vfdfbvkcvmm.org       TCP      4286 > http FIN, ACK Seq=151 Ack=19 Win=17407 Len=0

Frame 44970 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4286 (4286), Dst Port: http (80), Seq: 151, Ack: 19, Len: 0

No. Time Source Destination Protocol Info

 44987 2009-09-23 00:53:03.250319 192.168.1.10          vfdfbvkcvmm.org       TCP      4281 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44987 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4281 (4281), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44993 2009-09-23 00:53:04.562861 192.168.1.10          vfdfbvkcvmm.org       TCP      4284 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44993 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: 4284 (4284), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 44995 2009-09-23 00:53:04.672138 192.168.1.10          vfdfbvkcvmm.org       TCP      4285 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 44995 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4285 (4285), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 45043 2009-09-23 00:53:17.658487 192.168.1.10          tawddgbpsj.cn         TCP      dserver > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 45043 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: dserver (4309), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 45045 2009-09-23 00:53:17.884495 192.168.1.10          vfdfbvkcvmm.org       TCP      mirrtex > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 45045 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: mirrtex (4310), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 45047 2009-09-23 00:53:17.895632 192.168.1.10          vfdfbvkcvmm.org       TCP      4311 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 45047 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4311 (4311), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 45049 2009-09-23 00:53:17.920102 192.168.1.10          vfdfbvkcvmm.org       TCP      4312 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 45049 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: 4312 (4312), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 45051 2009-09-23 00:53:17.945754 192.168.1.10          vfdfbvkcvmm.org       TCP      4313 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 45051 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4313 (4313), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 45053 2009-09-23 00:53:18.035382 192.168.1.10          tawddgbpsj.cn         TCP      dserver > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 45053 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: dserver (4309), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 45054 2009-09-23 00:53:18.035430 192.168.1.10          tawddgbpsj.cn         HTTP     GET /search?q=0 HTTP/1.0

Frame 45054 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: dserver (4309), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 45056 2009-09-23 00:53:18.042312 192.168.1.10          vfdfbvkcvmm.org       TCP      4315 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 45056 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4315 (4315), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 45058 2009-09-23 00:53:18.077693 192.168.1.10          vfdfbvkcvmm.org       TCP      mirrtex > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 45058 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: mirrtex (4310), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 45059 2009-09-23 00:53:18.077756 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 45059 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: mirrtex (4310), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 45061 2009-09-23 00:53:18.131282 192.168.1.10          vfdfbvkcvmm.org       TCP      4313 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 45061 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4313 (4313), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 45062 2009-09-23 00:53:18.131323 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 45062 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4313 (4313), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 45065 2009-09-23 00:53:18.229535 192.168.1.10          vfdfbvkcvmm.org       TCP      4315 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 45065 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4315 (4315), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 45066 2009-09-23 00:53:18.229574 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 45066 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4315 (4315), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 45075 2009-09-23 00:53:18.421914 192.168.1.10          tawddgbpsj.cn         TCP      dserver > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0

Frame 45075 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: dserver (4309), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0

No. Time Source Destination Protocol Info

 45077 2009-09-23 00:53:18.422269 192.168.1.10          tawddgbpsj.cn         TCP      dserver > http RST, ACK Seq=150 Ack=242 Win=0 Len=0

Frame 45077 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: dserver (4309), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0

No. Time Source Destination Protocol Info

 45084 2009-09-23 00:53:18.798721 192.168.1.10          tawddgbpsj.cn         TCP      dserver > http RST Seq=150 Win=0 Len=0

Frame 45084 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: dserver (4309), Dst Port: http (80), Seq: 150, Len: 0

No. Time Source Destination Protocol Info

 45093 2009-09-23 00:53:20.858992 192.168.1.10          vfdfbvkcvmm.org       TCP      4311 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 45093 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4311 (4311), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 45094 2009-09-23 00:53:20.968412 192.168.1.10          vfdfbvkcvmm.org       TCP      4312 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 45094 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: 4312 (4312), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 45116 2009-09-23 00:53:26.874379 192.168.1.10          vfdfbvkcvmm.org       TCP      4311 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 45116 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4311 (4311), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 45118 2009-09-23 00:53:26.922329 192.168.1.10          vfdfbvkcvmm.org       TCP      4311 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 45118 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4311 (4311), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 45119 2009-09-23 00:53:26.922408 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 45119 (201 bytes on wire, 201 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4311 (4311), Dst Port: http (80), Seq: 1, Ack: 1, Len: 147 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 45122 2009-09-23 00:53:26.974235 192.168.1.10          vfdfbvkcvmm.org       TCP      4311 > http FIN, ACK Seq=148 Ack=499 Win=16926 Len=0

Frame 45122 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4311 (4311), Dst Port: http (80), Seq: 148, Ack: 499, Len: 0

No. Time Source Destination Protocol Info

 45124 2009-09-23 00:53:26.974607 192.168.1.10          vfdfbvkcvmm.org       TCP      4311 > http ACK Seq=149 Ack=500 Win=16926 Len=0

Frame 45124 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4311 (4311), Dst Port: http (80), Seq: 149, Ack: 500, Len: 0

No. Time Source Destination Protocol Info

 45125 2009-09-23 00:53:26.983746 192.168.1.10          vfdfbvkcvmm.org       TCP      4312 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 45125 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: 4312 (4312), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 45197 2009-09-23 00:53:40.298844 192.168.1.10          vfdfbvkcvmm.org       TCP      4334 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 45197 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4334 (4334), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 45199 2009-09-23 00:53:40.313300 192.168.1.10          vfdfbvkcvmm.org       TCP      4335 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 45199 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4335 (4335), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 45202 2009-09-23 00:53:40.339687 192.168.1.10          vfdfbvkcvmm.org       TCP      4336 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 45202 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4336 (4336), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 45204 2009-09-23 00:53:40.468390 192.168.1.10          vfdfbvkcvmm.org       TCP      4337 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 45204 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4337 (4337), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 45206 2009-09-23 00:53:40.492675 192.168.1.10          vfdfbvkcvmm.org       TCP      4334 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 45206 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4334 (4334), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 45207 2009-09-23 00:53:40.492727 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 45207 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4334 (4334), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 45209 2009-09-23 00:53:40.526176 192.168.1.10          vfdfbvkcvmm.org       TCP      4336 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 45209 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4336 (4336), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 45210 2009-09-23 00:53:40.526210 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 45210 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4336 (4336), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 45212 2009-09-23 00:53:40.661530 192.168.1.10          vfdfbvkcvmm.org       TCP      4337 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 45212 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4337 (4337), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 45213 2009-09-23 00:53:40.661599 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 45213 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4337 (4337), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

 45239 2009-09-23 00:53:43.280030 192.168.1.10          vfdfbvkcvmm.org       TCP      4335 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 45239 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4335 (4335), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 45266 2009-09-23 00:53:49.200944 192.168.1.10          vfdfbvkcvmm.org       TCP      4335 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 45266 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4335 (4335), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 46991 2009-09-23 01:06:46.406647 192.168.1.10          192.168.1.240         TCP      geniuslm > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 46991 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 192.168.1.240 (00:08:da:51:03:d1) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.240 (192.168.1.240) Transmission Control Protocol, Src Port: geniuslm (3005), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 46996 2009-09-23 01:06:49.437631 192.168.1.10          192.168.1.240         TCP      geniuslm > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 46996 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 192.168.1.240 (00:08:da:51:03:d1) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.240 (192.168.1.240) Transmission Control Protocol, Src Port: geniuslm (3005), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 50457 2009-09-23 01:41:00.682940 192.168.1.20          192.168.1.10          TCP      tr-rsrb-p1 > microsoft-ds SYN Seq=0 Win=65535 Len=0 MSS=1460

Frame 50457 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: 192.168.1.20 (00:01:02:1d:42:a7), Dst: Dell_2e:9e:54 (00:1e:c9:2e:9e:54) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 192.168.1.10 (192.168.1.10) Transmission Control Protocol, Src Port: tr-rsrb-p1 (1987), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 50459 2009-09-23 01:41:00.683155 192.168.1.20          192.168.1.10          TCP      tr-rsrb-p1 > microsoft-ds ACK Seq=1 Ack=1 Win=65535 Len=0

Frame 50459 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: 192.168.1.20 (00:01:02:1d:42:a7), Dst: Dell_2e:9e:54 (00:1e:c9:2e:9e:54) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 192.168.1.10 (192.168.1.10) Transmission Control Protocol, Src Port: tr-rsrb-p1 (1987), Dst Port: microsoft-ds (445), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 50460 2009-09-23 01:41:00.683282 192.168.1.20          192.168.1.10          SMB      Negotiate Protocol Request

Frame 50460 (105 bytes on wire, 105 bytes captured) Ethernet II, Src: 192.168.1.20 (00:01:02:1d:42:a7), Dst: Dell_2e:9e:54 (00:1e:c9:2e:9e:54) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 192.168.1.10 (192.168.1.10) Transmission Control Protocol, Src Port: tr-rsrb-p1 (1987), Dst Port: microsoft-ds (445), Seq: 1, Ack: 1, Len: 51 NetBIOS Session Service SMB (Server Message Block Protocol)

No. Time Source Destination Protocol Info

 50462 2009-09-23 01:41:00.683580 192.168.1.20          192.168.1.10          SMB      Session Setup AndX Request, User: anonymous

Frame 50462 (131 bytes on wire, 131 bytes captured) Ethernet II, Src: 192.168.1.20 (00:01:02:1d:42:a7), Dst: Dell_2e:9e:54 (00:1e:c9:2e:9e:54) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 192.168.1.10 (192.168.1.10) Transmission Control Protocol, Src Port: tr-rsrb-p1 (1987), Dst Port: microsoft-ds (445), Seq: 52, Ack: 134, Len: 77 NetBIOS Session Service SMB (Server Message Block Protocol)

No. Time Source Destination Protocol Info

 50464 2009-09-23 01:41:00.683854 192.168.1.20          192.168.1.10          TCP      tr-rsrb-p1 > microsoft-ds FIN, ACK Seq=129 Ack=238 Win=65298 Len=0

Frame 50464 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: 192.168.1.20 (00:01:02:1d:42:a7), Dst: Dell_2e:9e:54 (00:1e:c9:2e:9e:54) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 192.168.1.10 (192.168.1.10) Transmission Control Protocol, Src Port: tr-rsrb-p1 (1987), Dst Port: microsoft-ds (445), Seq: 129, Ack: 238, Len: 0

No. Time Source Destination Protocol Info

 50466 2009-09-23 01:41:00.684070 192.168.1.20          192.168.1.10          TCP      tr-rsrb-p1 > microsoft-ds ACK Seq=130 Ack=239 Win=65298 Len=0

Frame 50466 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: 192.168.1.20 (00:01:02:1d:42:a7), Dst: Dell_2e:9e:54 (00:1e:c9:2e:9e:54) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 192.168.1.10 (192.168.1.10) Transmission Control Protocol, Src Port: tr-rsrb-p1 (1987), Dst Port: microsoft-ds (445), Seq: 130, Ack: 239, Len: 0

No. Time Source Destination Protocol Info

 50467 2009-09-23 01:41:00.701836 192.168.1.20          192.168.1.10          TCP      tr-rsrb-p2 > http SYN Seq=0 Win=65535 Len=0 MSS=1460

Frame 50467 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: 192.168.1.20 (00:01:02:1d:42:a7), Dst: Dell_2e:9e:54 (00:1e:c9:2e:9e:54) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 192.168.1.10 (192.168.1.10) Transmission Control Protocol, Src Port: tr-rsrb-p2 (1988), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 50470 2009-09-23 01:41:01.040810 192.168.1.20          192.168.1.10          TCP      tr-rsrb-p2 > http SYN Seq=0 Win=65535 Len=0 MSS=1460

Frame 50470 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: 192.168.1.20 (00:01:02:1d:42:a7), Dst: Dell_2e:9e:54 (00:1e:c9:2e:9e:54) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 192.168.1.10 (192.168.1.10) Transmission Control Protocol, Src Port: tr-rsrb-p2 (1988), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 50473 2009-09-23 01:41:01.587640 192.168.1.20          192.168.1.10          TCP      tr-rsrb-p2 > http SYN Seq=0 Win=65535 Len=0 MSS=1460

Frame 50473 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: 192.168.1.20 (00:01:02:1d:42:a7), Dst: Dell_2e:9e:54 (00:1e:c9:2e:9e:54) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 192.168.1.10 (192.168.1.10) Transmission Control Protocol, Src Port: tr-rsrb-p2 (1988), Dst Port: http (80), Seq: 0, Len: 0

mardi 22 septembre 2009

22th September 2009 - Isomorphic Behaviors

XP Computer:

At 00:28:25, a file was created on the XP computers as Malicious Application Probe notifies:

Robotization MAP on hybrid network has detected a suspicious activity :

Date : Tue-22-Sep-2009_00_28_25

Suspicious file : c:\windows\system32\LZDRXJMDKFKAHA

This file contains the complete list of all the files of the hard drive. But what i can say after analysis that this list doesn't contain the Windows structure.

This file disapeared 30 seconds after its creation.

On the Windows 2003:

Confiker continues their jobs on the stabilized plateform as the following report on Windows Server 2003:

No. Time Source Destination Protocol Info

    15 2009-09-22 21:40:38.624951 192.168.1.10          vfdfbvkcvmm.org       TCP      4707 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 15 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4707 (4707), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

    16 2009-09-22 21:40:38.718696 192.168.1.10          vfdfbvkcvmm.org       TCP      4708 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 16 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4708 (4708), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

    18 2009-09-22 21:40:38.937446 192.168.1.10          vfdfbvkcvmm.org       TCP      4710 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 18 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4710 (4710), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

    35 2009-09-22 21:40:44.734145 192.168.1.10          vfdfbvkcvmm.org       TCP      4707 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 35 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4707 (4707), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

    36 2009-09-22 21:40:44.734167 192.168.1.10          vfdfbvkcvmm.org       TCP      4708 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 36 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4708 (4708), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

    38 2009-09-22 21:40:44.952860 192.168.1.10          vfdfbvkcvmm.org       TCP      4710 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 38 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4710 (4710), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

    85 2009-09-22 21:40:56.780982 192.168.1.10          vfdfbvkcvmm.org       TCP      4724 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 85 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4724 (4724), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

    96 2009-09-22 21:40:57.954241 192.168.1.10          tawddgbpsj.cn         TCP      4726 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 96 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4726 (4726), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

    98 2009-09-22 21:40:58.106610 192.168.1.10          vfdfbvkcvmm.org       TCP      4727 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 98 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4727 (4727), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   100 2009-09-22 21:40:58.193877 192.168.1.10          vfdfbvkcvmm.org       TCP      capmux > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 100 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: capmux (4728), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   103 2009-09-22 21:40:58.299865 192.168.1.10          vfdfbvkcvmm.org       TCP      4727 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 103 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4727 (4727), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

   104 2009-09-22 21:40:58.299919 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 104 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4727 (4727), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

   106 2009-09-22 21:40:58.331829 192.168.1.10          tawddgbpsj.cn         TCP      4726 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 106 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4726 (4726), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

   107 2009-09-22 21:40:58.331883 192.168.1.10          tawddgbpsj.cn         HTTP     GET /search?q=0 HTTP/1.0

Frame 107 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4726 (4726), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

   109 2009-09-22 21:40:58.352573 192.168.1.10          vfdfbvkcvmm.org       TCP      4729 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 109 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4729 (4729), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   115 2009-09-22 21:40:58.731420 192.168.1.10          tawddgbpsj.cn         TCP      4726 > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0

Frame 115 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4726 (4726), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0

No. Time Source Destination Protocol Info

   117 2009-09-22 21:40:58.731723 192.168.1.10          tawddgbpsj.cn         TCP      4726 > http RST, ACK Seq=150 Ack=242 Win=0 Len=0

Frame 117 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4726 (4726), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0

No. Time Source Destination Protocol Info

   125 2009-09-22 21:40:59.108453 192.168.1.10          tawddgbpsj.cn         TCP      4726 > http RST Seq=150 Win=0 Len=0

Frame 125 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4726 (4726), Dst Port: http (80), Seq: 150, Len: 0

No. Time Source Destination Protocol Info

   130 2009-09-22 21:40:59.827278 192.168.1.10          vfdfbvkcvmm.org       TCP      4724 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 130 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4724 (4724), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   139 2009-09-22 21:41:01.139765 192.168.1.10          vfdfbvkcvmm.org       TCP      capmux > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 139 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: capmux (4728), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   141 2009-09-22 21:41:01.249130 192.168.1.10          vfdfbvkcvmm.org       TCP      4729 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 141 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4729 (4729), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   158 2009-09-22 21:41:05.842697 192.168.1.10          vfdfbvkcvmm.org       TCP      4724 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 158 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4724 (4724), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   167 2009-09-22 21:41:07.155138 192.168.1.10          vfdfbvkcvmm.org       TCP      capmux > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 167 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: capmux (4728), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   169 2009-09-22 21:41:07.264501 192.168.1.10          vfdfbvkcvmm.org       TCP      4729 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 169 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4729 (4729), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   239 2009-09-22 21:41:20.628256 192.168.1.10          vfdfbvkcvmm.org       TCP      openhpid > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 239 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: openhpid (4743), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   241 2009-09-22 21:41:20.655744 192.168.1.10          vfdfbvkcvmm.org       TCP      ifsp > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 241 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: ifsp (4744), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   243 2009-09-22 21:41:20.683836 192.168.1.10          vfdfbvkcvmm.org       TCP      fmp > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 243 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: fmp (4745), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   245 2009-09-22 21:41:20.704431 192.168.1.10          vfdfbvkcvmm.org       TCP      4746 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 245 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4746 (4746), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   247 2009-09-22 21:41:20.710867 192.168.1.10          vfdfbvkcvmm.org       TCP      4747 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 247 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4747 (4747), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   249 2009-09-22 21:41:20.715249 192.168.1.10          gmsjljnp.ws           TCP      4748 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 249 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: gmsjljnp.ws (74.208.164.166) Transmission Control Protocol, Src Port: 4748 (4748), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   252 2009-09-22 21:41:20.869612 192.168.1.10          vfdfbvkcvmm.org       TCP      fmp > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 252 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: fmp (4745), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

   253 2009-09-22 21:41:20.869670 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 253 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: fmp (4745), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

   277 2009-09-22 21:41:23.560784 192.168.1.10          vfdfbvkcvmm.org       TCP      4747 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 277 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4747 (4747), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   278 2009-09-22 21:41:23.560805 192.168.1.10          vfdfbvkcvmm.org       TCP      ifsp > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 278 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: ifsp (4744), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   279 2009-09-22 21:41:23.560815 192.168.1.10          vfdfbvkcvmm.org       TCP      4746 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 279 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4746 (4746), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   280 2009-09-22 21:41:23.560824 192.168.1.10          gmsjljnp.ws           TCP      4748 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 280 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: gmsjljnp.ws (74.208.164.166) Transmission Control Protocol, Src Port: 4748 (4748), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   281 2009-09-22 21:41:23.670154 192.168.1.10          vfdfbvkcvmm.org       TCP      openhpid > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 281 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: openhpid (4743), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   304 2009-09-22 21:41:29.576149 192.168.1.10          vfdfbvkcvmm.org       TCP      4747 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 304 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4747 (4747), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   305 2009-09-22 21:41:29.576169 192.168.1.10          gmsjljnp.ws           TCP      4748 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 305 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: gmsjljnp.ws (74.208.164.166) Transmission Control Protocol, Src Port: 4748 (4748), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   306 2009-09-22 21:41:29.576178 192.168.1.10          vfdfbvkcvmm.org       TCP      4746 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 306 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4746 (4746), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   307 2009-09-22 21:41:29.576186 192.168.1.10          vfdfbvkcvmm.org       TCP      ifsp > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 307 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: ifsp (4744), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   308 2009-09-22 21:41:29.685529 192.168.1.10          vfdfbvkcvmm.org       TCP      openhpid > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 308 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: openhpid (4743), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   365 2009-09-22 21:41:42.898109 192.168.1.10          tawddgbpsj.cn         TCP      4763 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 365 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4763 (4763), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   367 2009-09-22 21:41:43.137650 192.168.1.10          vfdfbvkcvmm.org       TCP      4764 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 367 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: 4764 (4764), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   369 2009-09-22 21:41:43.142450 192.168.1.10          vfdfbvkcvmm.org       TCP      4765 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 369 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4765 (4765), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   371 2009-09-22 21:41:43.192220 192.168.1.10          vfdfbvkcvmm.org       TCP      4765 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 371 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4765 (4765), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

   372 2009-09-22 21:41:43.192327 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 372 (201 bytes on wire, 201 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4765 (4765), Dst Port: http (80), Seq: 1, Ack: 1, Len: 147 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

   376 2009-09-22 21:41:43.243850 192.168.1.10          vfdfbvkcvmm.org       TCP      4766 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 376 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4766 (4766), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   378 2009-09-22 21:41:43.247061 192.168.1.10          vfdfbvkcvmm.org       TCP      4765 > http FIN, ACK Seq=148 Ack=499 Win=16926 Len=0

Frame 378 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4765 (4765), Dst Port: http (80), Seq: 148, Ack: 499, Len: 0

No. Time Source Destination Protocol Info

   380 2009-09-22 21:41:43.247435 192.168.1.10          vfdfbvkcvmm.org       TCP      4765 > http ACK Seq=149 Ack=500 Win=16926 Len=0

Frame 380 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4765 (4765), Dst Port: http (80), Seq: 149, Ack: 500, Len: 0

No. Time Source Destination Protocol Info

   382 2009-09-22 21:41:43.275754 192.168.1.10          tawddgbpsj.cn         TCP      4763 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 382 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4763 (4763), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

   383 2009-09-22 21:41:43.275789 192.168.1.10          tawddgbpsj.cn         HTTP     GET /search?q=0 HTTP/1.0

Frame 383 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4763 (4763), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

   390 2009-09-22 21:41:43.655645 192.168.1.10          tawddgbpsj.cn         TCP      4763 > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0

Frame 390 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4763 (4763), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0

No. Time Source Destination Protocol Info

   392 2009-09-22 21:41:43.655909 192.168.1.10          tawddgbpsj.cn         TCP      4763 > http RST, ACK Seq=150 Ack=242 Win=0 Len=0

Frame 392 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4763 (4763), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0

No. Time Source Destination Protocol Info

   399 2009-09-22 21:41:44.032049 192.168.1.10          tawddgbpsj.cn         TCP      4763 > http RST Seq=150 Win=0 Len=0

Frame 399 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4763 (4763), Dst Port: http (80), Seq: 150, Len: 0

No. Time Source Destination Protocol Info

   410 2009-09-22 21:41:46.200543 192.168.1.10          vfdfbvkcvmm.org       TCP      4764 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 410 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: 4764 (4764), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   411 2009-09-22 21:41:46.200566 192.168.1.10          vfdfbvkcvmm.org       TCP      4766 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 411 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4766 (4766), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   436 2009-09-22 21:41:52.325327 192.168.1.10          vfdfbvkcvmm.org       TCP      4766 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 436 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4766 (4766), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   437 2009-09-22 21:41:52.325344 192.168.1.10          vfdfbvkcvmm.org       TCP      4764 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 437 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: 4764 (4764), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   509 2009-09-22 21:42:05.374215 192.168.1.10          tawddgbpsj.cn         TCP      4780 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 509 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4780 (4780), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   511 2009-09-22 21:42:05.607489 192.168.1.10          vfdfbvkcvmm.org       TCP      4781 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 511 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4781 (4781), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   513 2009-09-22 21:42:05.612586 192.168.1.10          vfdfbvkcvmm.org       TCP      4782 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 513 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4782 (4782), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   515 2009-09-22 21:42:05.668720 192.168.1.10          vfdfbvkcvmm.org       TCP      4783 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 515 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4783 (4783), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   517 2009-09-22 21:42:05.718860 192.168.1.10          vfdfbvkcvmm.org       TCP      bfd-multi-ctl > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 517 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: bfd-multi-ctl (4784), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   519 2009-09-22 21:42:05.751473 192.168.1.10          tawddgbpsj.cn         TCP      4780 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 519 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4780 (4780), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

   520 2009-09-22 21:42:05.751513 192.168.1.10          tawddgbpsj.cn         HTTP     GET /search?q=0 HTTP/1.0

Frame 520 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4780 (4780), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

   522 2009-09-22 21:42:05.792857 192.168.1.10          vfdfbvkcvmm.org       TCP      4781 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 522 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4781 (4781), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

   523 2009-09-22 21:42:05.792880 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 523 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4781 (4781), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

   532 2009-09-22 21:42:06.130784 192.168.1.10          tawddgbpsj.cn         TCP      4780 > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0

Frame 532 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4780 (4780), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0

No. Time Source Destination Protocol Info

   534 2009-09-22 21:42:06.131048 192.168.1.10          tawddgbpsj.cn         TCP      4780 > http RST, ACK Seq=150 Ack=242 Win=0 Len=0

Frame 534 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4780 (4780), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0

No. Time Source Destination Protocol Info

   541 2009-09-22 21:42:06.507437 192.168.1.10          tawddgbpsj.cn         TCP      4780 > http RST Seq=150 Win=0 Len=0

Frame 541 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4780 (4780), Dst Port: http (80), Seq: 150, Len: 0

No. Time Source Destination Protocol Info

   555 2009-09-22 21:42:08.621554 192.168.1.10          vfdfbvkcvmm.org       TCP      4782 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 555 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4782 (4782), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   556 2009-09-22 21:42:08.621566 192.168.1.10          vfdfbvkcvmm.org       TCP      bfd-multi-ctl > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 556 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: bfd-multi-ctl (4784), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   557 2009-09-22 21:42:08.621584 192.168.1.10          vfdfbvkcvmm.org       TCP      4783 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 557 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4783 (4783), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   577 2009-09-22 21:42:14.636971 192.168.1.10          vfdfbvkcvmm.org       TCP      4782 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 577 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4782 (4782), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   578 2009-09-22 21:42:14.636981 192.168.1.10          vfdfbvkcvmm.org       TCP      bfd-multi-ctl > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 578 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: bfd-multi-ctl (4784), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   579 2009-09-22 21:42:14.637003 192.168.1.10          vfdfbvkcvmm.org       TCP      4783 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 579 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4783 (4783), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   581 2009-09-22 21:42:14.814282 192.168.1.10          vfdfbvkcvmm.org       TCP      4782 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 581 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4782 (4782), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

   582 2009-09-22 21:42:14.814352 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 582 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4782 (4782), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

   586 2009-09-22 21:42:14.995692 192.168.1.10          vfdfbvkcvmm.org       TCP      4782 > http ACK Seq=151 Ack=19 Win=17407 Len=0

Frame 586 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4782 (4782), Dst Port: http (80), Seq: 151, Ack: 19, Len: 0

No. Time Source Destination Protocol Info

   587 2009-09-22 21:42:14.995731 192.168.1.10          vfdfbvkcvmm.org       TCP      4782 > http FIN, ACK Seq=151 Ack=19 Win=17407 Len=0

Frame 587 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4782 (4782), Dst Port: http (80), Seq: 151, Ack: 19, Len: 0

No. Time Source Destination Protocol Info

   652 2009-09-22 21:42:27.794408 192.168.1.10          tawddgbpsj.cn         TCP      notateit > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 652 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: notateit (4803), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   658 2009-09-22 21:42:28.040427 192.168.1.10          vfdfbvkcvmm.org       TCP      4804 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 658 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4804 (4804), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   660 2009-09-22 21:42:28.078326 192.168.1.10          vfdfbvkcvmm.org       TCP      4805 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 660 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: 4805 (4805), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   662 2009-09-22 21:42:28.171245 192.168.1.10          tawddgbpsj.cn         TCP      notateit > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 662 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: notateit (4803), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

   663 2009-09-22 21:42:28.171336 192.168.1.10          tawddgbpsj.cn         HTTP     GET /search?q=0 HTTP/1.0

Frame 663 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: notateit (4803), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

   669 2009-09-22 21:42:28.550694 192.168.1.10          tawddgbpsj.cn         TCP      notateit > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0

Frame 669 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: notateit (4803), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0

No. Time Source Destination Protocol Info

   671 2009-09-22 21:42:28.550994 192.168.1.10          tawddgbpsj.cn         TCP      notateit > http RST, ACK Seq=150 Ack=242 Win=0 Len=0

Frame 671 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: notateit (4803), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0

No. Time Source Destination Protocol Info

   681 2009-09-22 21:42:28.927207 192.168.1.10          tawddgbpsj.cn         TCP      notateit > http RST Seq=150 Win=0 Len=0

Frame 681 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: notateit (4803), Dst Port: http (80), Seq: 150, Len: 0

No. Time Source Destination Protocol Info

   697 2009-09-22 21:42:30.933213 192.168.1.10          vfdfbvkcvmm.org       TCP      4805 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 697 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: 4805 (4805), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   698 2009-09-22 21:42:30.933214 192.168.1.10          vfdfbvkcvmm.org       TCP      4804 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 698 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4804 (4804), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   720 2009-09-22 21:42:36.948606 192.168.1.10          vfdfbvkcvmm.org       TCP      4805 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 720 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: 4805 (4805), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   721 2009-09-22 21:42:36.948692 192.168.1.10          vfdfbvkcvmm.org       TCP      4804 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 721 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4804 (4804), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   802 2009-09-22 21:42:50.278340 192.168.1.10          tawddgbpsj.cn         TCP      4819 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 802 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4819 (4819), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   806 2009-09-22 21:42:50.531767 192.168.1.10          vfdfbvkcvmm.org       TCP      4820 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 806 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4820 (4820), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   808 2009-09-22 21:42:50.545537 192.168.1.10          vfdfbvkcvmm.org       TCP      4821 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 808 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4821 (4821), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   810 2009-09-22 21:42:50.654747 192.168.1.10          tawddgbpsj.cn         TCP      4819 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 810 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4819 (4819), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

   811 2009-09-22 21:42:50.654793 192.168.1.10          tawddgbpsj.cn         HTTP     GET /search?q=0 HTTP/1.0

Frame 811 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4819 (4819), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

   813 2009-09-22 21:42:50.682662 192.168.1.10          vfdfbvkcvmm.org       TCP      4822 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 813 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4822 (4822), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   818 2009-09-22 21:42:51.033846 192.168.1.10          tawddgbpsj.cn         TCP      4819 > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0

Frame 818 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4819 (4819), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0

No. Time Source Destination Protocol Info

   820 2009-09-22 21:42:51.034181 192.168.1.10          tawddgbpsj.cn         TCP      4819 > http RST, ACK Seq=150 Ack=242 Win=0 Len=0

Frame 820 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4819 (4819), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0

No. Time Source Destination Protocol Info

   827 2009-09-22 21:42:51.409943 192.168.1.10          tawddgbpsj.cn         TCP      4819 > http RST Seq=150 Win=0 Len=0

Frame 827 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4819 (4819), Dst Port: http (80), Seq: 150, Len: 0

No. Time Source Destination Protocol Info

   840 2009-09-22 21:42:53.463655 192.168.1.10          vfdfbvkcvmm.org       TCP      4821 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 840 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4821 (4821), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   841 2009-09-22 21:42:53.463657 192.168.1.10          vfdfbvkcvmm.org       TCP      4820 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 841 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4820 (4820), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   843 2009-09-22 21:42:53.682379 192.168.1.10          vfdfbvkcvmm.org       TCP      4822 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 843 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4822 (4822), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   863 2009-09-22 21:42:59.479000 192.168.1.10          vfdfbvkcvmm.org       TCP      4821 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 863 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4821 (4821), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   864 2009-09-22 21:42:59.479069 192.168.1.10          vfdfbvkcvmm.org       TCP      4820 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 864 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4820 (4820), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   865 2009-09-22 21:42:59.697741 192.168.1.10          vfdfbvkcvmm.org       TCP      4822 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 865 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4822 (4822), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   869 2009-09-22 21:42:59.745640 192.168.1.10          vfdfbvkcvmm.org       TCP      4822 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 869 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4822 (4822), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

   870 2009-09-22 21:42:59.745711 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 870 (201 bytes on wire, 201 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4822 (4822), Dst Port: http (80), Seq: 1, Ack: 1, Len: 147 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

   873 2009-09-22 21:42:59.796716 192.168.1.10          vfdfbvkcvmm.org       TCP      4822 > http FIN, ACK Seq=148 Ack=499 Win=16926 Len=0

Frame 873 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4822 (4822), Dst Port: http (80), Seq: 148, Ack: 499, Len: 0

No. Time Source Destination Protocol Info

   875 2009-09-22 21:42:59.797092 192.168.1.10          vfdfbvkcvmm.org       TCP      4822 > http ACK Seq=149 Ack=500 Win=16926 Len=0

Frame 875 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4822 (4822), Dst Port: http (80), Seq: 149, Ack: 500, Len: 0

No. Time Source Destination Protocol Info

   948 2009-09-22 21:43:12.846938 192.168.1.10          vfdfbvkcvmm.org       TCP      varadero-0 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 948 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: varadero-0 (4837), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   950 2009-09-22 21:43:12.875174 192.168.1.10          vfdfbvkcvmm.org       TCP      varadero-1 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 950 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: varadero-1 (4838), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   952 2009-09-22 21:43:12.878593 192.168.1.10          vfdfbvkcvmm.org       TCP      varadero-2 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 952 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: varadero-2 (4839), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   954 2009-09-22 21:43:12.949291 192.168.1.10          vfdfbvkcvmm.org       TCP      opcua-tcp > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 954 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: opcua-tcp (4840), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   957 2009-09-22 21:43:13.029402 192.168.1.10          vfdfbvkcvmm.org       TCP      quosa > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 957 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: quosa (4841), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   959 2009-09-22 21:43:13.032510 192.168.1.10          vfdfbvkcvmm.org       TCP      varadero-0 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 959 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: varadero-0 (4837), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

   960 2009-09-22 21:43:13.032586 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 960 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: varadero-0 (4837), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

   962 2009-09-22 21:43:13.060409 192.168.1.10          vfdfbvkcvmm.org       TCP      varadero-1 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 962 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: varadero-1 (4838), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

   963 2009-09-22 21:43:13.060450 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 963 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: varadero-1 (4838), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

   987 2009-09-22 21:43:15.884669 192.168.1.10          vfdfbvkcvmm.org       TCP      varadero-2 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 987 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: varadero-2 (4839), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   989 2009-09-22 21:43:15.994030 192.168.1.10          vfdfbvkcvmm.org       TCP      opcua-tcp > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 989 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: opcua-tcp (4840), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   990 2009-09-22 21:43:15.994050 192.168.1.10          vfdfbvkcvmm.org       TCP      quosa > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 990 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: quosa (4841), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

   992 2009-09-22 21:43:16.043216 192.168.1.10          vfdfbvkcvmm.org       TCP      quosa > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 992 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: quosa (4841), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

   993 2009-09-22 21:43:16.043341 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 993 (201 bytes on wire, 201 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: quosa (4841), Dst Port: http (80), Seq: 1, Ack: 1, Len: 147 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

   996 2009-09-22 21:43:16.095201 192.168.1.10          vfdfbvkcvmm.org       TCP      quosa > http FIN, ACK Seq=148 Ack=499 Win=16926 Len=0

Frame 996 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: quosa (4841), Dst Port: http (80), Seq: 148, Ack: 499, Len: 0

No. Time Source Destination Protocol Info

   998 2009-09-22 21:43:16.095611 192.168.1.10          vfdfbvkcvmm.org       TCP      quosa > http ACK Seq=149 Ack=500 Win=16926 Len=0

Frame 998 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: quosa (4841), Dst Port: http (80), Seq: 149, Ack: 500, Len: 0

No. Time Source Destination Protocol Info

  1020 2009-09-22 21:43:21.900030 192.168.1.10          vfdfbvkcvmm.org       TCP      varadero-2 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1020 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: varadero-2 (4839), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  1021 2009-09-22 21:43:22.025059 192.168.1.10          vfdfbvkcvmm.org       TCP      opcua-tcp > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1021 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: opcua-tcp (4840), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  1095 2009-09-22 21:43:35.318651 192.168.1.10          vfdfbvkcvmm.org       TCP      4855 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1095 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4855 (4855), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  1097 2009-09-22 21:43:35.326695 192.168.1.10          vfdfbvkcvmm.org       TCP      4856 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1097 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: 4856 (4856), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  1100 2009-09-22 21:43:35.504916 192.168.1.10          vfdfbvkcvmm.org       TCP      4857 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1100 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4857 (4857), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  1104 2009-09-22 21:43:35.689957 192.168.1.10          vfdfbvkcvmm.org       TCP      4857 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 1104 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4857 (4857), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

  1105 2009-09-22 21:43:35.690011 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 1105 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4857 (4857), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

  1128 2009-09-22 21:43:38.305695 192.168.1.10          vfdfbvkcvmm.org       TCP      4855 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1128 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4855 (4855), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  1129 2009-09-22 21:43:38.305709 192.168.1.10          vfdfbvkcvmm.org       TCP      4856 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1129 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: 4856 (4856), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  1153 2009-09-22 21:43:44.321054 192.168.1.10          vfdfbvkcvmm.org       TCP      4855 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1153 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4855 (4855), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  1154 2009-09-22 21:43:44.321064 192.168.1.10          vfdfbvkcvmm.org       TCP      4856 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1154 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: 4856 (4856), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  1230 2009-09-22 21:43:57.525059 192.168.1.10          tawddgbpsj.cn         TCP      wired > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1230 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: wired (4871), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  1236 2009-09-22 21:43:57.526780 192.168.1.10          tawddgbpsj.cn         TCP      4872 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1236 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4872 (4872), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  1238 2009-09-22 21:43:57.626635 192.168.1.10          vfdfbvkcvmm.org       TCP      4873 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1238 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4873 (4873), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  1240 2009-09-22 21:43:57.677167 192.168.1.10          vfdfbvkcvmm.org       TCP      4875 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1240 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4875 (4875), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  1242 2009-09-22 21:43:57.705992 192.168.1.10          vfdfbvkcvmm.org       TCP      4876 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1242 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4876 (4876), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  1244 2009-09-22 21:43:57.733201 192.168.1.10          vfdfbvkcvmm.org       TCP      4877 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1244 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4877 (4877), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  1246 2009-09-22 21:43:57.819718 192.168.1.10          vfdfbvkcvmm.org       TCP      4873 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 1246 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4873 (4873), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

  1247 2009-09-22 21:43:57.819763 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 1247 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4873 (4873), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

  1249 2009-09-22 21:43:57.872293 192.168.1.10          vfdfbvkcvmm.org       TCP      4878 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1249 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4878 (4878), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  1251 2009-09-22 21:43:57.901156 192.168.1.10          vfdfbvkcvmm.org       TCP      4879 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1251 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4879 (4879), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  1253 2009-09-22 21:43:57.902804 192.168.1.10          tawddgbpsj.cn         TCP      wired > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 1253 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: wired (4871), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

  1254 2009-09-22 21:43:57.902836 192.168.1.10          tawddgbpsj.cn         HTTP     GET /search?q=0 HTTP/1.0

Frame 1254 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: wired (4871), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

  1256 2009-09-22 21:43:57.905096 192.168.1.10          tawddgbpsj.cn         TCP      4872 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 1256 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4872 (4872), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

  1257 2009-09-22 21:43:57.905121 192.168.1.10          tawddgbpsj.cn         HTTP     GET /search?q=0 HTTP/1.0

Frame 1257 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4872 (4872), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

  1259 2009-09-22 21:43:57.920611 192.168.1.10          vfdfbvkcvmm.org       TCP      4878 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 1259 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4878 (4878), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

  1260 2009-09-22 21:43:57.920692 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 1260 (201 bytes on wire, 201 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4878 (4878), Dst Port: http (80), Seq: 1, Ack: 1, Len: 147 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

  1263 2009-09-22 21:43:57.972331 192.168.1.10          vfdfbvkcvmm.org       TCP      4878 > http FIN, ACK Seq=148 Ack=499 Win=16926 Len=0

Frame 1263 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4878 (4878), Dst Port: http (80), Seq: 148, Ack: 499, Len: 0

No. Time Source Destination Protocol Info

  1265 2009-09-22 21:43:57.972685 192.168.1.10          vfdfbvkcvmm.org       TCP      4878 > http ACK Seq=149 Ack=500 Win=16926 Len=0

Frame 1265 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4878 (4878), Dst Port: http (80), Seq: 149, Ack: 500, Len: 0

No. Time Source Destination Protocol Info

  1271 2009-09-22 21:43:58.095267 192.168.1.10          vfdfbvkcvmm.org       TCP      4879 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 1271 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4879 (4879), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

  1272 2009-09-22 21:43:58.095350 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 1272 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4879 (4879), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

  1276 2009-09-22 21:43:58.284384 192.168.1.10          tawddgbpsj.cn         TCP      wired > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0

Frame 1276 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: wired (4871), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0

No. Time Source Destination Protocol Info

  1278 2009-09-22 21:43:58.285093 192.168.1.10          tawddgbpsj.cn         TCP      wired > http RST, ACK Seq=150 Ack=242 Win=0 Len=0

Frame 1278 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: wired (4871), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0

No. Time Source Destination Protocol Info

  1281 2009-09-22 21:43:58.287557 192.168.1.10          tawddgbpsj.cn         TCP      4872 > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0

Frame 1281 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4872 (4872), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0

No. Time Source Destination Protocol Info

  1283 2009-09-22 21:43:58.287810 192.168.1.10          tawddgbpsj.cn         TCP      4872 > http RST, ACK Seq=150 Ack=242 Win=0 Len=0

Frame 1283 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4872 (4872), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0

No. Time Source Destination Protocol Info

  1288 2009-09-22 21:43:58.661064 192.168.1.10          tawddgbpsj.cn         TCP      wired > http RST Seq=150 Win=0 Len=0

Frame 1288 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: wired (4871), Dst Port: http (80), Seq: 150, Len: 0

No. Time Source Destination Protocol Info

  1290 2009-09-22 21:43:58.663628 192.168.1.10          tawddgbpsj.cn         TCP      4872 > http RST Seq=150 Win=0 Len=0

Frame 1290 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4872 (4872), Dst Port: http (80), Seq: 150, Len: 0

No. Time Source Destination Protocol Info

  1297 2009-09-22 21:44:00.617329 192.168.1.10          vfdfbvkcvmm.org       TCP      4876 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1297 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4876 (4876), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  1298 2009-09-22 21:44:00.617343 192.168.1.10          vfdfbvkcvmm.org       TCP      4877 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1298 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4877 (4877), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  1299 2009-09-22 21:44:00.726689 192.168.1.10          vfdfbvkcvmm.org       TCP      4875 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1299 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4875 (4875), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  1315 2009-09-22 21:44:06.648367 192.168.1.10          vfdfbvkcvmm.org       TCP      4877 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1315 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4877 (4877), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  1316 2009-09-22 21:44:06.648389 192.168.1.10          vfdfbvkcvmm.org       TCP      4876 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1316 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4876 (4876), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  1317 2009-09-22 21:44:06.742113 192.168.1.10          vfdfbvkcvmm.org       TCP      4875 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1317 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4875 (4875), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  1359 2009-09-22 21:44:19.885301 192.168.1.10          tawddgbpsj.cn         TCP      4893 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1359 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4893 (4893), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  1361 2009-09-22 21:44:20.084925 192.168.1.10          vfdfbvkcvmm.org       TCP      lyskom > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1361 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: lyskom (4894), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  1364 2009-09-22 21:44:20.118189 192.168.1.10          vfdfbvkcvmm.org       TCP      4895 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1364 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4895 (4895), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  1366 2009-09-22 21:44:20.128141 192.168.1.10          vfdfbvkcvmm.org       TCP      4896 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1366 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4896 (4896), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  1368 2009-09-22 21:44:20.198065 192.168.1.10          vfdfbvkcvmm.org       TCP      4897 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1368 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4897 (4897), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  1370 2009-09-22 21:44:20.263621 192.168.1.10          tawddgbpsj.cn         TCP      4893 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 1370 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4893 (4893), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

  1371 2009-09-22 21:44:20.263672 192.168.1.10          tawddgbpsj.cn         HTTP     GET /search?q=0 HTTP/1.0

Frame 1371 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4893 (4893), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

  1373 2009-09-22 21:44:20.271134 192.168.1.10          vfdfbvkcvmm.org       TCP      4898 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1373 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4898 (4898), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  1375 2009-09-22 21:44:20.311556 192.168.1.10          vfdfbvkcvmm.org       TCP      4895 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 1375 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4895 (4895), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

  1376 2009-09-22 21:44:20.311589 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 1376 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4895 (4895), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

  1378 2009-09-22 21:44:20.464184 192.168.1.10          vfdfbvkcvmm.org       TCP      4898 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 1378 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4898 (4898), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

  1379 2009-09-22 21:44:20.464288 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 1379 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4898 (4898), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

  1382 2009-09-22 21:44:20.505981 192.168.1.10          vfdfbvkcvmm.org       TCP      4895 > http RST Seq=151 Win=0 Len=0

Frame 1382 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4895 (4895), Dst Port: http (80), Seq: 151, Len: 0

No. Time Source Destination Protocol Info

  1387 2009-09-22 21:44:20.642551 192.168.1.10          tawddgbpsj.cn         TCP      4893 > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0

Frame 1387 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4893 (4893), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0

No. Time Source Destination Protocol Info

  1389 2009-09-22 21:44:20.642923 192.168.1.10          tawddgbpsj.cn         TCP      4893 > http RST, ACK Seq=150 Ack=242 Win=0 Len=0

Frame 1389 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4893 (4893), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0

No. Time Source Destination Protocol Info

  1396 2009-09-22 21:44:21.019050 192.168.1.10          tawddgbpsj.cn         TCP      4893 > http RST Seq=150 Win=0 Len=0

Frame 1396 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4893 (4893), Dst Port: http (80), Seq: 150, Len: 0

No. Time Source Destination Protocol Info

  1403 2009-09-22 21:44:22.928987 192.168.1.10          vfdfbvkcvmm.org       TCP      lyskom > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1403 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: lyskom (4894), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  1406 2009-09-22 21:44:23.038349 192.168.1.10          vfdfbvkcvmm.org       TCP      4896 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1406 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4896 (4896), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  1408 2009-09-22 21:44:23.086196 192.168.1.10          vfdfbvkcvmm.org       TCP      4896 > http ACK Seq=1 Ack=1 Win=17424 Len=0

Frame 1408 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4896 (4896), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

  1409 2009-09-22 21:44:23.086262 192.168.1.10          vfdfbvkcvmm.org       HTTP     GET /search?q=0 HTTP/1.0

Frame 1409 (201 bytes on wire, 201 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4896 (4896), Dst Port: http (80), Seq: 1, Ack: 1, Len: 147 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

  1411 2009-09-22 21:44:23.147710 192.168.1.10          vfdfbvkcvmm.org       TCP      4897 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1411 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4897 (4897), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  1413 2009-09-22 21:44:23.248855 192.168.1.10          vfdfbvkcvmm.org       TCP      4896 > http FIN, ACK Seq=148 Ack=499 Win=16926 Len=0

Frame 1413 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4896 (4896), Dst Port: http (80), Seq: 148, Ack: 499, Len: 0

No. Time Source Destination Protocol Info

  1415 2009-09-22 21:44:23.249198 192.168.1.10          vfdfbvkcvmm.org       TCP      4896 > http ACK Seq=149 Ack=500 Win=16926 Len=0

Frame 1415 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4896 (4896), Dst Port: http (80), Seq: 149, Ack: 500, Len: 0

No. Time Source Destination Protocol Info

  1435 2009-09-22 21:44:28.944408 192.168.1.10          vfdfbvkcvmm.org       TCP      lyskom > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1435 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: lyskom (4894), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  1437 2009-09-22 21:44:29.163143 192.168.1.10          vfdfbvkcvmm.org       TCP      4897 > http SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1437 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4897 (4897), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  3821 2009-09-22 22:08:21.205545 192.168.1.10          HSIB.home             TCP      must-p2p > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 3821 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: HSIB.home (192.168.1.1) Transmission Control Protocol, Src Port: must-p2p (3514), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  3823 2009-09-22 22:08:21.593326 192.168.1.10          HSIB.home             TCP      must-p2p > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 3823 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: HSIB.home (192.168.1.1) Transmission Control Protocol, Src Port: must-p2p (3514), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  3827 2009-09-22 22:08:22.140241 192.168.1.10          HSIB.home             TCP      must-p2p > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 3827 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: HSIB.home (192.168.1.1) Transmission Control Protocol, Src Port: must-p2p (3514), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  3977 2009-09-22 22:09:32.106777 192.168.1.10          192.168.1.20          TCP      iniserve-port > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 3977 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 192.168.1.20 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: iniserve-port (3560), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  3980 2009-09-22 22:09:32.465645 192.168.1.10          192.168.1.20          TCP      iniserve-port > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 3980 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 192.168.1.20 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: iniserve-port (3560), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  3982 2009-09-22 22:09:33.012521 192.168.1.10          192.168.1.20          TCP      iniserve-port > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 3982 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 192.168.1.20 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: iniserve-port (3560), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  5858 2009-09-22 22:24:33.056792 192.168.1.10          192.168.1.240         TCP      tigv2 > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 5858 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 192.168.1.240 (00:08:da:51:03:d1) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.240 (192.168.1.240) Transmission Control Protocol, Src Port: tigv2 (4124), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

  5863 2009-09-22 22:24:36.087801 192.168.1.10          192.168.1.240         TCP      tigv2 > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 5863 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 192.168.1.240 (00:08:da:51:03:d1) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.240 (192.168.1.240) Transmission Control Protocol, Src Port: tigv2 (4124), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 10877 2009-09-22 23:01:23.529791 192.168.1.20          192.168.1.10          TCP      1027 > microsoft-ds SYN Seq=0 Win=65535 Len=0 MSS=1460

Frame 10877 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: 192.168.1.20 (00:01:02:1d:42:a7), Dst: Dell_2e:9e:54 (00:1e:c9:2e:9e:54) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 192.168.1.10 (192.168.1.10) Transmission Control Protocol, Src Port: 1027 (1027), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 10879 2009-09-22 23:01:23.530034 192.168.1.20          192.168.1.10          TCP      1027 > microsoft-ds ACK Seq=1 Ack=1 Win=65535 Len=0

Frame 10879 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: 192.168.1.20 (00:01:02:1d:42:a7), Dst: Dell_2e:9e:54 (00:1e:c9:2e:9e:54) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 192.168.1.10 (192.168.1.10) Transmission Control Protocol, Src Port: 1027 (1027), Dst Port: microsoft-ds (445), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

 10880 2009-09-22 23:01:23.530178 192.168.1.20          192.168.1.10          SMB      Negotiate Protocol Request

Frame 10880 (105 bytes on wire, 105 bytes captured) Ethernet II, Src: 192.168.1.20 (00:01:02:1d:42:a7), Dst: Dell_2e:9e:54 (00:1e:c9:2e:9e:54) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 192.168.1.10 (192.168.1.10) Transmission Control Protocol, Src Port: 1027 (1027), Dst Port: microsoft-ds (445), Seq: 1, Ack: 1, Len: 51 NetBIOS Session Service SMB (Server Message Block Protocol)

No. Time Source Destination Protocol Info

 10882 2009-09-22 23:01:23.530498 192.168.1.20          192.168.1.10          SMB      Session Setup AndX Request, User: anonymous

Frame 10882 (131 bytes on wire, 131 bytes captured) Ethernet II, Src: 192.168.1.20 (00:01:02:1d:42:a7), Dst: Dell_2e:9e:54 (00:1e:c9:2e:9e:54) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 192.168.1.10 (192.168.1.10) Transmission Control Protocol, Src Port: 1027 (1027), Dst Port: microsoft-ds (445), Seq: 52, Ack: 134, Len: 77 NetBIOS Session Service SMB (Server Message Block Protocol)

No. Time Source Destination Protocol Info

 10884 2009-09-22 23:01:23.530832 192.168.1.20          192.168.1.10          TCP      1027 > microsoft-ds FIN, ACK Seq=129 Ack=238 Win=65298 Len=0

Frame 10884 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: 192.168.1.20 (00:01:02:1d:42:a7), Dst: Dell_2e:9e:54 (00:1e:c9:2e:9e:54) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 192.168.1.10 (192.168.1.10) Transmission Control Protocol, Src Port: 1027 (1027), Dst Port: microsoft-ds (445), Seq: 129, Ack: 238, Len: 0

No. Time Source Destination Protocol Info

 10886 2009-09-22 23:01:23.531042 192.168.1.20          192.168.1.10          TCP      1027 > microsoft-ds ACK Seq=130 Ack=239 Win=65298 Len=0

Frame 10886 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: 192.168.1.20 (00:01:02:1d:42:a7), Dst: Dell_2e:9e:54 (00:1e:c9:2e:9e:54) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 192.168.1.10 (192.168.1.10) Transmission Control Protocol, Src Port: 1027 (1027), Dst Port: microsoft-ds (445), Seq: 130, Ack: 239, Len: 0

No. Time Source Destination Protocol Info

 10887 2009-09-22 23:01:23.560636 192.168.1.20          192.168.1.10          TCP      1028 > http SYN Seq=0 Win=65535 Len=0 MSS=1460

Frame 10887 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: 192.168.1.20 (00:01:02:1d:42:a7), Dst: Dell_2e:9e:54 (00:1e:c9:2e:9e:54) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 192.168.1.10 (192.168.1.10) Transmission Control Protocol, Src Port: 1028 (1028), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 10891 2009-09-22 23:01:24.028406 192.168.1.20          192.168.1.10          TCP      1028 > http SYN Seq=0 Win=65535 Len=0 MSS=1460

Frame 10891 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: 192.168.1.20 (00:01:02:1d:42:a7), Dst: Dell_2e:9e:54 (00:1e:c9:2e:9e:54) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 192.168.1.10 (192.168.1.10) Transmission Control Protocol, Src Port: 1028 (1028), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 10895 2009-09-22 23:01:24.465869 192.168.1.20          192.168.1.10          TCP      1028 > http SYN Seq=0 Win=65535 Len=0 MSS=1460

Frame 10895 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: 192.168.1.20 (00:01:02:1d:42:a7), Dst: Dell_2e:9e:54 (00:1e:c9:2e:9e:54) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 192.168.1.10 (192.168.1.10) Transmission Control Protocol, Src Port: 1028 (1028), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

 32021 2009-09-22 23:12:17.380365 192.168.1.10          tawddgbpsj.cn         TCP      audio-activmail > http RST Seq=1 Win=0 Len=0

Frame 32021 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: audio-activmail (1397), Dst Port: http (80), Seq: 1, Len: 0

No. Time Source Destination Protocol Info

 32035 2009-09-22 23:12:22.384317 192.168.1.10          tawddgbpsj.cn         TCP      cadkey-tablet > http RST Seq=1 Win=0 Len=0

Frame 32035 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: cadkey-tablet (1400), Dst Port: http (80), Seq: 1, Len: 0

No. Time Source Destination Protocol Info

 32679 2009-09-22 23:17:30.506719 192.168.1.10          tawddgbpsj.cn         TCP      winddlb > http RST Seq=1 Win=0 Len=0

Frame 32679 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: winddlb (1565), Dst Port: http (80), Seq: 1, Len: 0

No. Time Source Destination Protocol Info

 32689 2009-09-22 23:17:35.518291 192.168.1.10          tawddgbpsj.cn         TCP      tsspmap > http RST Seq=1 Win=0 Len=0

Frame 32689 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: tsspmap (1568), Dst Port: http (80), Seq: 1, Len: 0

No. Time Source Destination Protocol Info

 32910 2009-09-22 23:19:33.431587 192.168.1.10          tawddgbpsj.cn         TCP      xs-openstorage > http RST Seq=1 Win=0 Len=0

Frame 32910 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: xs-openstorage (1619), Dst Port: http (80), Seq: 1, Len: 0

No. Time Source Destination Protocol Info

 33479 2009-09-22 23:24:59.419453 192.168.1.10          tawddgbpsj.cn         TCP      t128-gateway > http RST Seq=1 Win=0 Len=0

Frame 33479 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: t128-gateway (1627), Dst Port: http (80), Seq: 1, Len: 0

No. Time Source Destination Protocol Info

 35143 2009-09-22 23:40:27.373205 192.168.1.10          tawddgbpsj.cn         TCP      skip-mc-gikreq > http RST Seq=1 Win=0 Len=0

Frame 35143 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: skip-mc-gikreq (1660), Dst Port: http (80), Seq: 1, Len: 0

No. Time Source Destination Protocol Info

 35401 2009-09-22 23:42:56.410040 192.168.1.10          tawddgbpsj.cn         TCP      netview-aix-3 > http RST Seq=1 Win=0 Len=0

Frame 35401 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: netview-aix-3 (1663), Dst Port: http (80), Seq: 1, Len: 0

No. Time Source Destination Protocol Info

 36015 2009-09-22 23:48:44.381050 192.168.1.10          tawddgbpsj.cn         TCP      netview-aix-10 > http RST Seq=1 Win=0 Len=0

Frame 36015 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: netview-aix-10 (1670), Dst Port: http (80), Seq: 1, Len: 0

No. Time Source Destination Protocol Info

 36181 2009-09-22 23:50:16.673136 192.168.1.10          tawddgbpsj.cn         TCP      prolink > http RST Seq=1 Win=0 Len=0

Frame 36181 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: prolink (1678), Dst Port: http (80), Seq: 1, Len: 0

samedi 19 septembre 2009

19th september 2009 : Infection plateforms are now stabilized

Isomorphic behaviors :

On XP:

The activity seems stabilized and proceed to infection and get external sites / Internal network each 2 hours.

No file were modified or created

On WIN2003:

The activity seems stabilized and proceed to infection and get external sites / Internal network each 2 hours.

No file were modified or created

NOTA:

To analyze now the viruslab and confiker behaviors, it seems that the plateform is now stabilized.

So, I decide to wait few days and to let probes and lan analyzer to get informations to start to study some activities behaviors.


No. Time Source Destination Protocol Info

712359 2009-09-19 00:39:11.459587 192.168.1.10          192.168.1.20          TCP      nesh-broker > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 712359 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: nesh-broker (3507), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

712365 2009-09-19 00:39:11.912276 192.168.1.10          192.168.1.20          TCP      nesh-broker > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 712365 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: nesh-broker (3507), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

712369 2009-09-19 00:39:12.349806 192.168.1.10          192.168.1.20          TCP      nesh-broker > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 712369 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: nesh-broker (3507), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

773854 2009-09-19 02:43:49.252061 192.168.1.20          www.l.google.com      TCP      pxc-sapxom > http SYN Seq=0 Win=65535 Len=0 MSS=1460

Frame 773854 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: 3com_1d:42:a7 (00:01:02:1d:42:a7), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: www.l.google.com (209.85.229.147) Transmission Control Protocol, Src Port: pxc-sapxom (2680), Dst Port: http (80), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

773856 2009-09-19 02:43:49.298232 192.168.1.20          www.l.google.com      TCP      pxc-sapxom > http ACK Seq=1 Ack=1 Win=65535 Len=0

Frame 773856 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: 3com_1d:42:a7 (00:01:02:1d:42:a7), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: www.l.google.com (209.85.229.147) Transmission Control Protocol, Src Port: pxc-sapxom (2680), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info

773858 2009-09-19 02:43:49.310283 192.168.1.20          www.l.google.com      HTTP     GET /tools/swg2/update?auv=1&r=2&up=30&p=w&ma=5&mi=1&b=2600&sp=ServicePack2&as=swg&pv=5.2.4204.1700&type=a&hl=fr&os=win&ie=6.0.2900.2180&brand=GGLL&pds=1&ds=1&su=0&gus=1&hpi=-1&lsp=86281&rep=1&rlz=I7:,W1:,R2:&dcc=T4:1T4ADBR_frFR283FR298&dsc1=0&hpc1=0&sdsa1=0&sdsa7=0&dsbc1=0&dsbc7=0&ust=3 HTTP/1.0

Frame 773858 (724 bytes on wire, 724 bytes captured) Ethernet II, Src: 3com_1d:42:a7 (00:01:02:1d:42:a7), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: www.l.google.com (209.85.229.147) Transmission Control Protocol, Src Port: pxc-sapxom (2680), Dst Port: http (80), Seq: 1, Ack: 1, Len: 670 Hypertext Transfer Protocol

No. Time Source Destination Protocol Info

773862 2009-09-19 02:43:49.375586 192.168.1.20          www.l.google.com      TCP      pxc-sapxom > http ACK Seq=671 Ack=390 Win=65147 Len=0

Frame 773862 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: 3com_1d:42:a7 (00:01:02:1d:42:a7), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: www.l.google.com (209.85.229.147) Transmission Control Protocol, Src Port: pxc-sapxom (2680), Dst Port: http (80), Seq: 671, Ack: 390, Len: 0

No. Time Source Destination Protocol Info

773869 2009-09-19 02:43:49.634774 192.168.1.20          www.l.google.com      TCP      pxc-sapxom > http FIN, ACK Seq=671 Ack=390 Win=65147 Len=0

Frame 773869 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: 3com_1d:42:a7 (00:01:02:1d:42:a7), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: www.l.google.com (209.85.229.147) Transmission Control Protocol, Src Port: pxc-sapxom (2680), Dst Port: http (80), Seq: 671, Ack: 390, Len: 0

No. Time Source Destination Protocol Info

794586 2009-09-19 03:25:24.995844 192.168.1.10          192.168.1.20          TCP      4210 > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 794586 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: 4210 (4210), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

794591 2009-09-19 03:25:25.464227 192.168.1.10          192.168.1.20          TCP      4210 > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 794591 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: 4210 (4210), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

794597 2009-09-19 03:25:25.901713 192.168.1.10          192.168.1.20          TCP      4210 > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 794597 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: 4210 (4210), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

875197 2009-09-19 06:10:38.505103 192.168.1.10          192.168.1.20          TCP      4886 > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 875197 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: 4886 (4886), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

875203 2009-09-19 06:10:38.973358 192.168.1.10          192.168.1.20          TCP      4886 > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 875203 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: 4886 (4886), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

875212 2009-09-19 06:10:39.520209 192.168.1.10          192.168.1.20          TCP      4886 > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 875212 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: 4886 (4886), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

950886 2009-09-19 08:44:52.290427 192.168.1.10          192.168.1.20          TCP      uohost > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 950886 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: uohost (3314), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

950893 2009-09-19 08:44:52.743105 192.168.1.10          192.168.1.20          TCP      uohost > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 950893 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: uohost (3314), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info

950900 2009-09-19 08:44:53.289926 192.168.1.10          192.168.1.20          TCP      uohost > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 950900 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: uohost (3314), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info 1020429 2009-09-19 11:03:05.960251 192.168.1.10 192.168.1.20 TCP hicp > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1020429 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: hicp (3250), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info 1020435 2009-09-19 11:03:06.428629 192.168.1.10 192.168.1.20 TCP hicp > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1020435 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: hicp (3250), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info 1020441 2009-09-19 11:03:06.975463 192.168.1.10 192.168.1.20 TCP hicp > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1020441 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: hicp (3250), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info 1099802 2009-09-19 13:46:19.590963 192.168.1.10 192.168.1.20 TCP ciphire-data > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1099802 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: ciphire-data (3887), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info 1099811 2009-09-19 13:46:20.168725 192.168.1.10 192.168.1.20 TCP ciphire-data > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1099811 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: ciphire-data (3887), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info 1099818 2009-09-19 13:46:20.715577 192.168.1.10 192.168.1.20 TCP ciphire-data > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1099818 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: ciphire-data (3887), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info 1174609 2009-09-19 16:20:33.468964 192.168.1.10 192.168.1.20 TCP 4315 > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1174609 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: 4315 (4315), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info 1174617 2009-09-19 16:20:33.952927 192.168.1.10 192.168.1.20 TCP 4315 > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1174617 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: 4315 (4315), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info 1174623 2009-09-19 16:20:34.374814 192.168.1.10 192.168.1.20 TCP 4315 > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1174623 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: 4315 (4315), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info 1254243 2009-09-19 19:05:46.981383 192.168.1.10 192.168.1.20 TCP parallel > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1254243 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: parallel (4989), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info 1254248 2009-09-19 19:05:47.449677 192.168.1.10 192.168.1.20 TCP parallel > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1254248 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: parallel (4989), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info 1254253 2009-09-19 19:05:48.012164 192.168.1.10 192.168.1.20 TCP parallel > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1254253 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: parallel (4989), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info 1329172 2009-09-19 21:40:00.751117 192.168.1.10 192.168.1.20 TCP twcss > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1329172 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: twcss (3428), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info 1329178 2009-09-19 21:40:01.219493 192.168.1.10 192.168.1.20 TCP twcss > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1329178 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: twcss (3428), Dst Port: microsoft-ds (445), Seq: 0, Len: 0

No. Time Source Destination Protocol Info 1329181 2009-09-19 21:40:01.656970 192.168.1.10 192.168.1.20 TCP twcss > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460

Frame 1329181 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: twcss (3428), Dst Port: microsoft-ds (445), Seq: 0, Len: 0