mercredi 7 juillet 2010
Top of cyber attacks per country
Par Marc Blanchard [Virus Docteur], mercredi 7 juillet 2010 à 17:41 :: Cybercrime in real time (All languages)
Here are the statistics of the Top of cyberattack from Secure Works stats

Aller au contenu | Aller au menu | Aller à la recherche
mercredi 7 juillet 2010
Par Marc Blanchard [Virus Docteur], mercredi 7 juillet 2010 à 17:41 :: Cybercrime in real time (All languages)
Here are the statistics of the Top of cyberattack from Secure Works stats

mardi 6 juillet 2010
Par Marc Blanchard [Virus Docteur], mardi 6 juillet 2010 à 12:29 :: Offre d'Emploi
Voici une offre d'emploi proposée par BitDefender France:
Lieu : Île de France (92) Contrat :CDI Salaire : en fonction des études, compétences asquises et investissements intellectuels
Description du poste :
Au sein d'une équipe d'experts passionnés et investis au sein de la Direction technique d'un éditeur de logiciels de sécurité, vous serez en charge de l'installation, la mise en production, l'administration et l'exploitation des moyens réseaux et télécom constituant le backend de cette société.
Vous vous positionnerez en tant qu'administrateur infrastructure, et devrez maîtriser totalement le fonctionnement des équipements réseaux centraux et les moyens de production installés et en assurer le bon fonctionnement.
Vous participerez au bon fonctionnement des services délivrés par les réseaux en garantissant le maintien à niveau des différents équipements et infrastructures de communication dans un objectif de qualité, de productivité et de sécurité.
Vous participerez activement à la supervision, l'installation et la configurations des infrastructures et des audits de sécurité et de hautes disponibilités dont vous aurez la responsabilité.
Grande ouverture d'esprit sur les OS / Plateformes / Applications aussi bien serveur que poste de travail
Aptitudes / connaissances techniques parfaitement maitrisées :
Operating System :
Microsoft toutes versions (2000, 2003, 2008) avec ActiveDirectory
Exchange 2007/2010
SharePoint
Linux (Centox, Fedora, Debian, RedHat),
Backup (toutes technologies, y compris collaboratif et déduplication)
Serveur d'impressions
Outils bureautiques Windows/Linux/Apple
Connaissances sur SQL, PHP et réseau TCP, UDP, ARP
Serveurs: Samba intégré LDAP/AD HTTP (Windows et Linux) FTP SMTP DHCP DNS
Routeurs
DNS et reverse
MX
PROXY
Firewalls (hard et software)
Réseaux : xDSL, IP, WiFi, routage, MPLS, sécurité/firewalling.
Voix : VoIP, SIP, MGCP, PABX, IPBX, DECT.
INGENIEUR ADMINISTRATEUR RESEAUX - OPERATEUR H/F
Profil recherché :
Expériences demandées en :
- Administration de Réseaux : Fonctionnement optimal des outils, systèmes ou réseaux, Vision globale et actualisée des services fournis par le réseau (internet, voix, sauvegarde, messagerie convergente …), Suivi et analyse des performances, mise en place des mesures susceptibles d'améliorer la qualité ou la productivité des outils,…, fragmentation de réseaux par des WLANs...
- Les QOS portés à 99.8%
- Les systemes RAID, heartbeat
- Les backup collaboratifs et dédupliqués tout OS
- Les sécurités des réseaux WAN et LANs
- Support : Participation aux actions de maintenance préventives et curatives de support (astreintes possibles), Proposition d'améliorations,…
- Maintenance et sécurité : Gestion des accès, des évolutions et maintenance des matériels, des logiciels et du système, des performances (seuils d'alerte et tuning des ressources et produits du domaine),…
- Exploitation : Validation de l'installation et de l'intégration des nouveaux outils et équipements dans l'environnement de production, Traitement des incidents ou anomalies, formulation et suivi de leur résolution (support niveau 3), configuration et suivi des serveurs de messageries (Exchange) et de workflow (intégration de SharePoint) ,…
- Etudes : Étude, préconisation et implantation des matériels, outils et des logiciels adaptés, Veille technologique ACTIVE sur les différents aspects de l'infrastructure de communication (matériels, architecture, protocole), …
Formation : Niveau Bac + 2 à Bac + 5 ou expérience terrain
DEMANDES DE STAGE / ALTERNANCE /CDD s'abstenir.
Merci d'adresser votre candidature + photo + diplomes à Marc Blanchard via commentaires ici (Les commentaires postés ici sont privés)
mardi 25 mai 2010
Par Marc Blanchard [Virus Docteur], mardi 25 mai 2010 à 14:51 :: Scientifique- Les Egenes, les Zombies, les Botnets, les Ghostnets
Etat des lieux :
Type de délinquances qu'un simple PC peut héberger :
Espionnage des particuliers:
Comptes mails (mots de passe, accès sites sécurisés, etc)
Comptes Web 2.0
Identités et comptes bancaires
Carte d'identité, passeport, impôts, cartes grises, permis de conduire (documents scannés) au vue de création de faux
Machine zombie pour propager du SPAM (Zeus)
Hébergeur de systèmes de billing pour les FakeAV (mules)
CyberGuerre à partir des machines des particuliers:
Soldat de botnet : essentiellement en IRC
Soldat de ghostnet : en HTTP2P
Hébergeur de codes d'attaques
Des séquences d'attaques
Des logs des états lorsque les attaques sont en cours
L'hôte est référencé sur les moteurs de recherches
Voici un phénotype de ma base encyclopédique malwares qui montre le peu de perception par l’utilisateur face à une infection de ce type. Ces perceptions ne sont que des comportements fréquent du système et donc fréquemment ignorées par les utilisateurs.
La réalité est tout autre !
Voici un phénotype de ma base encyclopédique malwares qui montre toutes les technologies invisibles et pouvant être installées sur la machine de l’internaute à son insu et pleinement fonctionnelles.
Les Ghostnet :
C'est une évolution de grande ampleur des techniques botnet vers un réseau de machines zombies utilisant les technologies suivantes :
CLOUDING via le protocole HTTP-P2P,
Référencements sur les moteurs de recherches
Notion des machines soldats
Bridge de répartition de machines soldats
Processus de calculs des machines dépendantes du bridge
Objectifs:
Les DOS,
DDOS de pays gênants
DDOS des sociétés commerciales gênantes,
Héberger des plans et documents d'états,
Héberger des plans et documents terroristes,
Envoyer des informations nécessaires aux actions terroristes du monde réel
Entretenir une puissance de calcul et de bandes passantes importantes
Création de faux serveurs pour les FakeAV,
Phishing, vols
Rester indétectable
Le clouding ou le cloud computing:
C'est une technologie qui permet d'offrir des services ou logiciels, qui sont déportés sur de grandes infrastructures professionnelles, aux usagés sans aucune (ou presque) installation locale. Cette extraordinaire invention marketing est essentiellement faite pour faire payer les utilisateurs davantage...on leur expliquera que les ordinateurs qu'ils possèdent ne sont plus assez puissants!!!
Le clouding s'est largement développé, et voici un petit résumé de quelques applications/services de cloud computing.
Avantages Pour les TPE/PME:
Bénéficier d'une infrastructure technologique très performante
Bénéficier d'aucun frais de maintenance ou presque
Payer des services logiciels au besoin et à la demande
Pour les grandes structures Bénéficier des dernières innovations logicielles Baisser les coûts administratifs et d'administrations informatiques Bénéficier d'intégrations sur mesure en fonction des standards logiciels/machines du moment Bénéficier d'aucune rotation de matériel serveurs et donc d'administrations réseaux
Désavantages :
La sécurité
La qualité des chiffrements des données
La disponibilité des connexions internet
Les rapidités des lignes internet
Les payements à la demande !
C'est BOINC, qui a été le précurseur dans le domaine du clouding avec les calculs scientifiques du SETI@Home nécessaire pour déporter les unités de calculs puis rapatriement des résultats par le net.

Le principe est simple, un screen saver spécifique se met en mode calcul pendant les inactivités du processeur.
Tout cela a été développé pour des raisons de manque de budgets pour des acquisitions de gros calculateurs.
Aujourd'hui, le Boinc héberge de plus en plus de projet du type SETI@HOME. Le seti, aujourd'hui, a 573.000 machines d'internautes pour une puissance moyenne par heure d'environ : 5,551.80 TeraFLOPS.
Le ghostnet est l'évolution OBLIGATOIRE des botnets de grandes envergures. J'avais traité du sujet botnet sur ce blog, je ne vais donc pas y revenir.
Nous allons étudier cette évolution dans ce post.
Historique :
J'ai commencé des études épidémiologiques sur le ver Confiker mutant dès sa naissance.
Depuis février 2010, a évolué de façon émergente du mode technologique du botnet au monde ghostnet, actuellement utilisé.
Les études ont bien démontré que ce ver est en constante évolution.
Je me questionne sur le pourquoi des chercheurs en sécurité informatique délaissent les technologies utilisées par ce ver.
Aller, on va dire que c'est parce qu'ils le détectent : FAUX!
Où bien parce que les patchs Microsoft empêchent le ver de se propager : FAUX.
Je m'explique :
La principale différence entre le monde du botnet et celui des ghostnets est qu'un réseau botnet interface ses clients et ses serveurs de façons nominatives via les IRC ou même celui des référencements sur certains moteurs de recherche de machines d'internautes avec des noms de domaines aléatoires.
Ces machines intégrant un réseau botnet ont une mission de serveur hébergeur ou de client sur un seul niveau Ethernet (à ne pas confondre avec internet;-)
En d'autres termes, les machines d'un réseau de botnet utilisent la technique que l'on ne nomme plus du 'Client/Server'. Un ou plusieurs clients communiquent avec un serveur nominatif.
Le monde des réseaux ghostnet est différent.
On utilise le clouding pour multiplier les puissances de calculs, de stockages, de transmissions de données contenant les instructions des attaques (codes, durée, victimes, stratégies, etc) et contrôler les réplications et gestions des bridges.
Un bridge est un procédé utilisé dans le monde du clouding qui consiste à donner un nom de domaine pour le service offert, et le répartir sur de multiples serveurs qui héberge le service concerné.
Les ghostnet utilisent cette technique afin de renforcer le nombre de machines actives, et obtenir une infrastructure de très forte puissance.
Voici un résultat théorique s’appuyant sur les comportements des différentes mutations de codes et en fonction des puissances des machines, des capacités RAM et bandes passantes que mon campus antimalware a pu vérifier sur diverses plateformes présentes sur le campus antimalware (deux réseaux contaminés indépendants au niveau hardware, lan et connexions internet sur Paris, idem sur un seul réseau contaminé sur la Vendée) :

En fonction des puissances machines, RAM et bandes passantes, il s’est avéré avec les résultats d’études isomorphiques et le compte-rendu des recherches homorphiques, que les comportements d’une machine à l’autre, d’un réseau à l’autre et d’une connexion internet différente de l’autre, des comportements différents.
La copie écran si dessous, démontre bien que le même nom de domaine qu'une machine hôte infectée va rechercher, à quelques minutes d'intervalle, est dirigée sur des adresses IP différentes.
LES RAMIFICATIONS INFECTEES au jour J de l'expérience:
Voici les procédés effectués dans cette expérience.
On infecte une machine utilisateur saine avec le ver.
On y installe une sonde réseau.
On attend que les référencements de nom de domaine dynamique, qui est associé à cette machine utilisateur, soient effectués par le ver.
On attend que la machine soit référencée sur le net.
On commence l'expérience.
Le vers va commencer une activation de recherche de machines hôtes afin qu'il se géolocalise dans une infrastructure réseaux la plus réactive à ses requêtes réseaux. Dans l'exemple ci-dessous, il cherche sur fr.ask.com ses ramifications.
Une fois effectuée, le ver va s'implémenter dans une des ramifications réseaux que nous allons pister pour l'expérience.
Nous prenons un des noms de domaines que le ver contacte. Grâce à notre sonde, nous allons vérifier l'adresse IP qu'il appelle en fonction du nom de domaine.
Nous tentons de tracer cette adresse afin de vérifier si nous sommes en technologie hybride botnet/ghostnet ou bien en technologie pure ghostnet.
Dans le cas d'un botnet, nous n'aurions qu'une seule IP de visible par rapport au nom de domaine.
Nous sommes donc en présence d'une technologie ghostnet.
Cette adresse est donc un bridge, car elle référence une multitude de noms de domaines.
Nous prenons un des noms de domaines afin de continuer notre investigation.
On s'aperçoit sur l'image ci-dessus, qu'une autre ramification est présente.
Nous allons montrer deux cas de figure:
Une autre ramification à partir de cet étage de ramification, qui devra être suivie jusqu'à la terminaison pour finir l'étude de l'investigation de la branche.
Et voici une terminaison de la ramification à partir de ce niveau :
Tout cela pour quoi faire?
Les attaques préférées de ce ghostnet sont les DDOS.
De simples flood sont envoyés à un serveur victime, ou branche de serveurs victimes
Explications de l'attaque sur ce schéma:
Quelle est la puissance d'un tel ver comme Confiker ?
Un confrère chercheur/épidémiologiste a publié un compte-rendu graphique qui démontre bien la puissance d'un tel ghostnet:
Coté sécurité:
Il faut impérativement surveiller les pare-feux logiciels mais également des box ADSL.
Voici un exemple d'une LiveBox ayant conservée les authentifications d'usines : admin/admin
Les lignes surbrillées sont les lignes qui ont été ajoutées par le ver.
Il est à noter qu'il ne s'est pas trompé, car la .15 est un linux tandis que les deux autres machines sont infectées.
Je travaille actuellement avec les gens de CISCO qui ont mettent à disposition un logiciel de traçage de botnets, qui devrait bloquer les émergences/attaques botnet mais également ghostnet ou réseaux invisibles.
A suivre dans cette section….
Par Marc Blanchard [Virus Docteur], mardi 25 mai 2010 à 14:35 :: Epidemiology - english section -
I remind some re-publishers that these researches are under copyright and you must contact me for more information’s.
Ghostnet networks : are you a soldier ?
First of all, what is the difference between botnet and ghostnet?
The term ghostnet was used for different attacks from china computers.
Techniques used were interesting to make researches, because, the attack flows were so intense that scientifically difficult to confirm there were botnet capabilities.
The main difference that botnet activities don’t use the multi-level ramification networks, and don’t use the cloud techniques.
We will see in this section the main difference between botnet and ghostnet.
What is the current situation?
Here are the different types of delinquencies that a simple user computer is able to have?
Type of home user spying:
To spy users:
Mails accounts (passwords, secure web site accesses, etc)
Web2.0 acounts
Credit cards, bank logins and bank accounts,
Evasion of identity cards, passports, driving licenses, social security cards & numbers
Internet providing to make the user computer as a SPAM servers or bot (Zeus)
Underground Billing system for Rogues & FakeAlert business
Underground botnet administration consoles or Databases of zombie computers
Internet providing to make the user computer as a SPAM servers or bot (Zeus)
Cyberwar soldier from the home computers users :
Botnet soldier : most of time IRC techniques are used
Ghostnet soldier : use the HTTP2P techniques
Internet providing to make the user computer as attacks codes and instructions repository (most of time encrypted on the hard disk and hidden on bad physical hard disk sectors)
The attack sequences and the logical steps that the soldier (the home computer) can do
Logs repository of the status and states of the current attack
This computer has its own fake domain attribution transparently.
Here is ghostnet malware encyclopedia phenotype that shows us the computer user perception face to such of malware. These perceptions are typically the behaviors that a computer and/or system can show on a normal uses. So these perceptions are often ignored by users.
The reality is other!
Here is ghostnet malware encyclopedia phenotype that shows us all the potential ghostnet technologies that can be invisible and found randomly on computer users (depending the power of the ghostnet)
Ghostnet:
It is a world wide exponential capacity of botnet transformations.
Ghostnet techniques use the clouding on HTTP2P protocol.
They use internet dynamic DNS the most useable to make the user computer as a soldier
They do some bridge reference on search engines as google, yahoo search, ask, etc of home users or enterprise computers
They can have the control to make the computer as a bridge, a repository and/or an attacker
Objectives:
DOS,
DDOS of countries
DDOS important sales companies (VOD, streaming, corprates sales, etc),
To be repository of countries strategies, political, or other documents,
To be repository of terrorist schema and documents
To maintain a quality of service of the ghostnet on calculation and bandwidth capabilities
To be repository of FAKEAV and Rogues billing systems
To stay undetectable by AV and Firewalls including hardware firewalls.
The Clouding or Cloud Computing:
Is the technique that let to move all computer software’s, services, billing to a powerful and professional computers/servers infrastructures.
In fact, it is a wonderful marketing invention to force customers and enterprise to pay more and more. Anyway, they will explain lot of advantages like your computers need more power, don’t buy, we will provide you the software on several big servers!!!! You see the message!
Anyway now all is on the cloud, have a look on the following pictures:
In fact, it is the BOINC that demonstrate that the cloud can work. The SETI@Home is a perfect example to cloud the results that screen savers calculations do on users computers during that they drink … coffee, of course !
Today, the SETI@HOME has PER HOUR 573.000 online computers for a POWER of 5,551.80 Teraflops.
The ghostnet is the MANDATORY evolution of botnet that need to be more and more big. I already publish some posts concerning my researches on botnet on this blog.
Historical steps :
Since the born of downadup (confiker) I start epidemiological researches. I put in place a controlled active contaminated architecture, and let the malware to live its life. Millions of logs had been collected to analyze its behaviors since the start period.
In end of august 2009, my probes sent me some information’s that some behaviors changed : some files were created, checksums changed regularly, but no other new processes were created.
I decided to reinforce the controlled contaminated infrastructure and decide to open not one network but three geographically and networks independent in my campus.
In February 2010, the network activities were different as usual, but the files continue to change as usual.
Here are the results of these latest months since Feb 2010.
The ghostnet uses clouding on several layers of computers. The botnet only one. Ghostnet uses the network, CPU, RAM capabilities of infected users computers.
Malware clouding that use networks multi-layers, let the ghostnet to reinforce the number of active computers, but also to have an enormous bandwidth and power of CPUs calculations.
Here are the theorical predictions of capabilities shown on the 3 different infrastructures of the contaminated controlled networks on the campus:
As we can see on this picture, that after isomorphic researches and the homomorphic report, the behavior changes depending the bandwidth network, cpu and ramp capabilities. It is interesting that with the same malware codes executed on the same time, on several differents networks, computers and architectures, that the behaviors are different.
The following screen shot show the bridge techniques used now but this malware. In fact, at its borning, the reseaches were based on more than 500 domains names each two hours. Today the malware search 5 domains names, because they use only ONE same domain name, but the IP change as shown the following shot. It is the same domain name, but have a look on the IPs. The 2 shots were taken at 3 minutes intervals.
Here is the experimentation that was done the D day to analyze the ramifications.
I describe you the processes done on this experimentation:
I installed before infection a network probe
I infect a controlled home user computer
I wait that the fake domain name was created for this computer
I wait that this computer is referenced on the search engine
We can start the experimentation.
The worm will start the research activation of other hosts computers the most near of our infected computer geographically. In the following picture, the worm goes to fr.ask.com because the IP of our infected computer is located in France. By this search engine, the worm will find some hosts to be include on ramifications the most closed geographically OR and this is important to know, will join the ramification that is needed. In other words, if one of ramifications needs some specific capacities to survive, our infected computer will join this particular ramification!
Once done, we are ready to start the ramification profiling.
We take the fake domain name that the worm tries to reach. Our probe will give the IP corresponding of the fake domain name.
So we profile the fake domain name by its IP in the first step.
We will see if the IP is a standalone computer, in this case we are in front of botnet techniques, if it is more than one IP, that’s mean ramification.
In this case, we are face of a ghostnet. You can see multiple fake domains names referenced at this step.
That’s mean that the IP address that our infected computer tries to reach is a ‘Bridge’
What we can conclude at this step:
A. we are face to a clouding network
B. it demonstrates that the evolution of this worm was done, and that now, no need to try to reach 500 fake domains to check if attack codes or instructions are available, only one or two are enough.
Let continue our investigation. I will choose one of these domains to follow to check if the stair of ramification is stop after this first stair or not.
We can see that a ramification is there
Now, I will show you two cases:
An other ramification that will drive us to another one.....
And in the following picture, we can see the ended point. This end point is a simple computer user.
All of this, what for?
They have power with the infrastructure that we know now. The every day is to get some new computers to increase more and more the power of such of invisible network.
The preferred ghostnet attacks are the DDOS.
In fact, simple floods are sended to the victims or branch of victims.
The following picture will show an example (in french but easily translated by the concept) :
What is the real power of such of malwares network?
A scientist published a graphical of his researches concerning this kind of network. That is demonstrating the power of such of network.
Security point:
Users must understand that new generations of worms knows how to modify the software firewall, but also the xDSL boxes (the worm tries to connect itself on SSH or http with brute force techniques.
Here is an example of a Orange LiveBox that keeps the factory user/password authentification, I mean : admin/admin
The blue lines are the lines that be added by the worm. We must note, that the worm didn’t open any port on the .15, because it is a linux computer. But the 2 others IP are infected by the ghost. We also can note, that only 1 IP has the 80 port opened not both.
I currently in contact with CISCO R&D, and thy will give me a security software that is able to give me more reports.
To be continued on this section….
mercredi 19 mai 2010
Par Marc Blanchard [Virus Docteur], mercredi 19 mai 2010 à 14:32 :: Pour rester 'online'
Voici un plan de cablage du contient africain qui devrait voir le jour début 2011.
100 millions d'internautes sont attendus avec une interconnexion océanique à 1300 gigabits directe avec les backbones francais.
... portes ouvertes aux développements encore plus denses des botnets et ghostnet.
..à suivre...
mardi 11 mai 2010
Par Marc Blanchard [Virus Docteur], mardi 11 mai 2010 à 15:33 :: Pour rester 'online'
Samedi 8 mai 2010 – dans la soirée
Pour sa deuxième édition, l’iAWACS (International Alternative Workshop on Aggressive Computing and Security) organisé par ESIEA (Ecole Supérieure d’informatique, électronique et Automatisme) a démontré qu’aucun antivirus du marché n’empêche l’exécution de programmes malveillants. Les défenses basées sur les listes noires de programmes d’attaques des antivirus laissent passer des attaques, dont certaines sont assez simples ou assez anciennes.
Suivez le lien sur MagSecurs.com
Même si je suis anti-contest de ce type, j'aimerai apporter un commentaire aujourd'hui, car vous êtes nombreux à me solliciter pour connaître mon point de vue :
Le challenge de l'IAWACS permet comme dans tout contest (les sécurités linux, réseaux, applicatifs, etc) de démontrer que tout ce qui est créé par l'homme peut être détruit par l'homme.
Dans un premier point, ce contest est intéressant, et montre bien, que les analyses actuelles ont leurs limites, mêmes celles qui utilisent des technologies de proactivités.
Le second point démontre également, que des attaques non référencées développées dans le but de nuire à une entreprise ou à un individu sont tout à fait possible sans aucune détection.
Mais il ne faut pas que le lecteur, au vu de ces résultats qui sont des résultats logiques de part les développements de malwares spécifiques, s'imagine que les antivirus et autres suites de sécurité n'ont aucune utilité.
Une suite antivirus est la ceinture de sécurité de l'ordinateur de l'utilisateur. Cela n'empêchera pas d'avoir un accident, mais les risques seront minimes et le protègera au maximum.
Le SANS Internet Storm Center nous indique que sans protection, une machine connectée au net a un temps de survie de moins de 3 minutes, ensuite les attaques réseau ou de malwares sont tellement nombreuses que la machine finie par deny of service de sa couche réseau voire du système.
Par conséquent, un antivirus arrête 99% des attaques et codes malveillants dits In The Wild, c'est à dire les codes malveillants transitant de façon autonome, transparente sur le réseau et USB, seront arrêtés et nettoyés...l'utilisateur pourra continuer d'utiliser sans problème son ordinateur.
Sans antivirus, l'ordinateur serait un véritable vivier de codes malveillants et un soldat de botnet et ghostnet de deny of services pour contribuer à des attaques d'institutions ou de pays, voire même participant actif de groupes d'hacktistes notoires.
Ca laisse à réfléchir!!!
jeudi 15 avril 2010
Par Marc Blanchard [Virus Docteur], jeudi 15 avril 2010 à 19:05 :: Cybercrime in real time (All languages)
Par Marc Blanchard [Virus Docteur], jeudi 15 avril 2010 à 19:03 :: Cybercrime in real time (All languages)
Par Marc Blanchard [Virus Docteur], jeudi 15 avril 2010 à 19:01 :: Cybercrime in real time (All languages)
vendredi 9 avril 2010
Par Marc Blanchard [Virus Docteur], vendredi 9 avril 2010 à 19:18 :: Qu'est-ce que ...
Beaucoup de gens sur Twitter ou d'autres services sociaux utilise des URL de raccourci pour la promotion des sites web d'informations.
Ce concept est assez simple à utiliser:
Exemple:
Nous avons ce lien d'origine: http://marc-blanchard.com/blog/index.php/toc/toc
Aller sur http://www.bit.ly et taper l'url à raccourcir :
Le résultat sur le lien d'origine est le suivant:
Autre type de services existent avec le même concept mais avec des options d'anonymisation, ou tout autre type de services, ou bien même concept, comme: http://ow.ly
Le danger:
a. Des lots de développeurs de logiciels malveillants utilisent maintenant cette technique:
- Pour la promotion des sites web compromis ou malveillants
- Pour ne pas être détectable par les antivirus ou anti-phishing et ainsi bypasser les filtres des moteurs d'analyse
- Pour ne pas être détectable par les moteurs antispam, parce que beaucoup de spams arrive maintenant avec celle de cette technique.
b. Vous ne savez pas ce que vous obtenez et où vous allez!
- Le principal problème est que lorsque vous cliquez sur ce lien, vous ne pouvez pas savoir ce qui est derrière ou où vous allez et sur quel genre de site, vous cliquez ... Suffit de faire confiance à votre interlocuteur qui vous a envoyé le lien.
Ainsi, vous pouvez télécharger des fichiers malveillants, des exploits PDF, vous dirriger sur des sites web malveillants ... Vous cliquez, vous accédez, vous êtes infecté automatiquement ... trop tard!
Conclusion:
Nous parlons actuellement beaucoup sur les réseaux paralleles de type GhostNet ou botnet qui sont maintenant les centres de gestion et de propagations malwares grâce à des moteurs de recherche en utilisant le httpp2p (http2p), techniques pour leurs codes malveillants males et femelles contribuant aux infections actives via requêtes en temps réel en RAM. Le fait d'utiliser les systèmes de référencement de ce type sur le moteur de recherche avec ce concept signifie que les sites Web infectés deviendrons de plus en plus visités et constituront des zones exploitées sans pour autant y être inquiétés ....
Techniques de suivre attentivement
Par Marc Blanchard [Virus Docteur], vendredi 9 avril 2010 à 18:36 :: Web 2.0 comments
Lot of people on Twitter or other social services uses shortcut urls to promote web sites informations.
For this the concept is quiet simple to use:
Example:
We have this orginal link :
http://marc-blanchard.com/blog/index.php/toc/toc
And go to the http://www.bit.ly
The result on the original link is the following:
Other exists kind of such of services with the same concept exists with anonymizer options, or other kind of services, or the same concept like: http://ow.ly
The danger :
a. Lot of malware devs use now this technique :
- To promote compromized web sites
- To do not be detectable on antivirus or antiphishing web filters scan engines
- To do not be detectable on antispam engines, because lot of spams arrives now with such of technique to route you to compromized web sites.
b. You don't know what you get and where you go !
- The main problem is that when you click on such of link, you cannot know what or where you go and what kind of site you click...Just have to trust your contact person that sended you the link.
So you can download malware files, exploited PDF, goes to malicious web sites...You click, you access, you are infected automatically...too late!
Conclusion:
We currently talk a lot on ghostnet or botnet that are maintaining with malwares propagations thru search engine using also the httpp2p (http2p) techniques for their males and females codes (active infections).
The fact to use the underground referencing systems on search engine with this concept means that some fakes infected web sites or exploited areas can be numerous in the next future....
Techniques to follow carefully 
jeudi 26 novembre 2009
Par Marc Blanchard [Virus Docteur], jeudi 26 novembre 2009 à 02:23 :: Epidemiology - english section -
After to have been study the isomorphic reports and to apply a scientifically calculation, the variants that i have on 3 LANs with the current version of Conficker before the automatic changes is :
Conficker Variant E is able to spread on the global internet on : 23 days, 22 hours, 57 minutes, 1.20 seconds
jeudi 19 novembre 2009
Par Marc Blanchard [Virus Docteur], jeudi 19 novembre 2009 à 01:59 :: Scientifique- Les Egenes, les Zombies, les Botnets, les Ghostnets
Un petit pense bête perso pour mes recherches... Cela m'évite de chercher dans mes tablettes 
Divergente Propagation
ρ=(‡Δt/pi)3600
‡=273000km/s Δt=time between 2 infections
dimanche 15 novembre 2009
Par Marc Blanchard [Virus Docteur], dimanche 15 novembre 2009 à 02:35 :: Pour rester 'online'
Aller, je vais faire mon ecologiste 
Je ne sais pas vous, mais beaucoup de mails que je recois ont de petites notations interessantes apres la signature de mes correspondants :
Ne gaspillons pas! N'imprimez ce mail que si nécessaire....
Oui, ok, alors je me suis amuse a faire un petit calcul dont le sujet est :
Entre un emetteur d'un email et le receveur, le mail passe environ sur 7 ordinateurs (incluant les machines des internautes, serveurs mails, dns, etc) Chaque ordinateur consomme en moyenne 500watts, et ce n'est qu'une moyenne.
J'ai pris des donnees de fabrication de l'electricite d'une petite centrale nucleaire, qui a elles toutes en France, representent quand meme 80% de notre consommation.
Ensuite, entre les joules, les volts, les intensites, les watts, etc, j'ai reussi a atteindre les resultats suivants :
A CHAQUE MAIL QUE NOUS ENVOYONS, 0.0021 NANO GRAMME D'URANIUM EST UTILISE.
Etant donne qu'on ne sait pas quoi faire de nos dechets, alors qu'un arbre peut etre plante, replante, pensez vous qu'on dit revenir au papier, sachant qu'il est recycle ou envoyer un email qui pollue franchement beaucoup plus???
A mediter....
Par Marc Blanchard [Virus Docteur], dimanche 15 novembre 2009 à 01:58 :: Epidemiology - english section -
All samples that i have seems to have problems to be launched on the new Windows 2008 server 64 bits on the LAN002 of Paris Campus.
I will get other samples to try to proceed to new infections on Windows 2008 server 64 bits.
Concerning the SEVEN PRO 64 bits, the infection has been executed. Probes will say if infections worked or not.
samedi 14 novembre 2009
Par Marc Blanchard [Virus Docteur], samedi 14 novembre 2009 à 23:44 :: Epidemiology - english section -
Due to lake informations that oldest probes didn't catched, i am obligate to change the technologies probes and to choose more sensible probes to have more possibilities to make researches with more details.
That's why new version of the complete controlled infected LANs has been changed this weekend in the LANs located in the Paris Campus.
Specific developed tools didn't changed :
Personal development tool : Malicious Applications Probes version 3.0.0.0
Network Sniffer tool : Packet Analyzer 1.0.1
Taxinomy Phenotype Collector : version 2.0.0.1
I develop two new tools for reporting :
Log-Mailer version 0.0.1.1 : This tool sends to me logs by mail to be implemented automatically on the taxinomy phenotype system
GWLog-Push 0.0.1.2 : This tool send on FTP servers in real time the gateways logs that you can read in this blog
reports-conficker-xxxx.php : developped by JB the BitDefender technical supervisor, this php tool lets the logs to be readable humanly
The global architecture changed :
Geographical Conficker controlled infection on the Paris Campus AntiMalware:
LAN001-dslam-78-velizy : professional 32 bits environment :
Network : 192.168.1.0 / 24
Gateway (linux 32 bits) : 192.168.1.30
XP-SP3 Pro : 192.168.1.20
Windows Server 2003 : 192.168.1.10
LAN002-dslam-78-velizy : professional 64 bits environment :
Network : 172.22.0.0 / 24
Gateway (linux 64 bits) : 172.22.0.30
Seven Pro 64 bits : 172.22.0.20
Windows Server 2008 64 bits : 172.22.0.10
Geographical Conficker controlled infection on the West of France Campus AntiMalware:
LAN001-dslam-85-vendee : professional 32 bits environment :
Network : 192.168.1.0 / 24
Gateway (linux 32 bits) : 192.168.1.15
XP-SP3 Pro : 192.168.1.11
XP-SP2 Pro : 192.168.1.10
vendredi 13 novembre 2009
Par Marc Blanchard [Virus Docteur], vendredi 13 novembre 2009 à 12:20 :: Epidemiology - english section -
After some days of getting informations, the statistics softwares that i choosen don't give me enough informations to provide a good research.
That's why i decided to change the complete infrastructure of the conficker networks.
I will put in place during these next days, and i will explain the new version of infrastructures...
Stay tuned !
dimanche 1 novembre 2009
Par Marc Blanchard [Virus Docteur], dimanche 1 novembre 2009 à 21:01 :: Epidemiology - english section -
Follow statistics in real time of the Confiker activities in the Campus located in West France, please click on the picture.
mercredi 28 octobre 2009
Par Marc Blanchard [Virus Docteur], mercredi 28 octobre 2009 à 10:52 :: Epidemiology - english section -
The campus antimalware is devided geographically.
The main reason is to study the behaviors of Conficker / Downadup on different DSLAMs.
I will be able to provide epidemiological researches and to capitalize on behaviors to employ a strong phenotype.
So, currently the campus is located in Paris region and the West of France region.
To capitalize on the Deming methods, both of campuses will work on the same samples to continue to have isomorphical results and homomorphicals reports.
For this I decided to use a real time tool called ntop that is able to publish in real time specific traffics.
These statistics will be published on this blog per campus.
These statistics will show also the activities in case of attacks.
All of this will be published on specific section on this blog : Follow Conficker activities in Real Time.
Soon, the same concept will be published on Paris region
samedi 17 octobre 2009
Par Marc Blanchard [Virus Docteur], samedi 17 octobre 2009 à 00:19 :: Epidemiology - english section -
Since the 5th, the behaviors of Conficker/Downadup seems to stabilize.
I'm under to prepare a new geographic lab located in the west of France and connected on a different DSLAM.
I also prepare a new architecture on another network with new plateforms : Seven 64 bits, Vista 64 bits, and XP 32 bits.
On the first plateform, i include Windows 2008 FS 64 bits and will run the samples.
So, i will let you know the main conficker modifications on all of the systems.
Stay Tuned 
mardi 6 octobre 2009
Par Marc Blanchard [Virus Docteur], mardi 6 octobre 2009 à 00:31 :: Pour rester 'online'
PROTOCOLE d’ACTION en cas de ver DOWNADUP/CONFIKER nouvelle génération sur un réseau Entreprise
Bit Defender Client Security 3.1.7 ou supérieur :
NMAP version 5.00 ou supérieur
KB security patch Microsoft
Bloquer sur les parefeux de l’entreprise le port 445
Lien Produits BitDefender 3.1.7 et pour la Console : http://download.bitdefender.com/SMB/Workstation_Security_and_Management/BitDefender_Client_Security/Windows/Current/FR/Version_3.0/
Les Addons pour la Console: http://download.bitdefender.com/SMB/Workstation_Security_and_Management/BitDefender_Client_Security/Windows/Current/FR/Version_3.0/server_addon/BitDefender_Security_for_Windows_Servers_Server_Addon_(for_32_bit_Management_Servers)_fr.exe
Antivirus du serveur http://content-down.bitdefender.com/SMB/Windows%20Servers/Current/FR/
Outil de désinstallation serveur en cas de nécessité: ftp://ftp.editions-profil.fr/Versions_Evaluation/BitDefender/Windows/Serveurs/v2/Windows_Servers_Uninstall_Tool.exe
NMAP :
http://nmap.org/dist/nmap-5.00.tar.bz2
KB Microsoft :
http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx
http://www.microsoft.com/technet/security/Bulletin/MS08-068.mspx
http://www.microsoft.com/technet/security/Bulletin/MS09-001.mspx
Outil de désinfection BitDefender
PROTOCOLE A APPLIQUER : En cas de pandémie de ver/worm/stormworm
Méthodes et plan d’action.
ATTENTION : Respecter cette méthode dans l’ordre décrit. Si une des étapes est oubliée, le ver risque de réagir et changer de comportement, et par conséquent incontrôlable.
PS : cette procédure est actuellement adaptée au ver CONFIKER/DOWNADUP, et nous nous réservons le droit de la modifier sans préavis et en temps réel pour répondre aux résultantes des attaques zero day.
Préparations :
1/ Prendre une machine sous linux, la connecter au réseau instable, et installer NMAP comme noté dans ce bulletin
2/ Installer ou passer en version BitDefender console Client Security 3.1.7, BitDefender Business client 11.0.0.8 et BitDefender Security for Windows Server 3.3.0 sur tous les postes et serveurs.
3/ Télécharger les KB de Microsoft sur la machine ou se trouve la console BitDefender Client Security 3.1.7
4/ Appliquer la règle suivante sur les parefeux connectés à internet :
Inbound : Deny : source 0.0.0.0 destination 0.0.0.0.0 port : source 445 destination 445 on TCP+UDP
Outbound : Deny : source 0.0.0.0 destination 0.0.0.0.0 port : source 445 destination 445 on TCP+UDP
Préparations et Procédures d’installations / Migrations
NOTA : Cette section n’est pas le plan d’action (voir plus bas)
Installation NMAP sur la machine Linux:
Si vous avez une distribution RedHat, CentOs ou Fedora récente téléchargez le package comme suit :
yum install nmap
Sinon téléchargez les sources puis compilez le. Attention si vous étes sur une plateforme 64bits, il faut installer les librairies libstdc++
wget http://nmap.org/dist/nmap-5.00.tar.bz2 tar xjfv nmap-5.00.tar.bz2 cd nmap-5.00 ./configure make make install
Utilisation qu’il faudra lancer lors de l’étape du plan d’action :
Pour tester le réseau :
nmap -PN 192.168.0.0/24 -p139,445 -n -v script smb-check-vulns script-args safe=1
Pour loguer le résutat :
nmap -PN 192.168.0.0/24 -p139,445 -n -v script smb-check-vulns script-args safe=1 >> /directory/resultat.log
Tous postes infectés seront taggué comme INFECTED.
Si POSSIBLY INFECTED, soit NMAP n’arrive pas à tester (imprimantes réseaux, SAN, Samba Linux, etc) ou soit une vulnérabilité sur cette machine reste active si elle est sous Windows --> Cette machine devra être analysée par l’administrateur
Installation / Migration des produits BitDefender :
I ) LES PRES REQUIS D'INSTALLATION
Les postes serveurs: Net Framework version 2 minimum *(SP2)* Dernière Mise à jour Windows *(SP2 minimum)* Pare-feu Windows désactivé (PAR LES SERVICES) Partage de fichiers et d’imprimantes activé 800 Mo (minimum) de libre sur le lecteur C:\ Workgroup: partage simple désactivé
Les postes clients Net Framework version 2 minimum *(SP2)* Dernière Mise à jour Windows *(SP2 minimum)* Partage de fichiers et d’imprimantes activés 115 Mo (minimum) de libre sur le lecteur C:\ Workgroup: partage simple désactivé TOUS LES POSTES CLIENTS DOIVENT ETRE ALLUMES.
II ) INSTALLATION DE LA CONSOLE
1] Suppression des programmes Allez dans l'ajout/suppression de programmes de windows. Désinstallez tous les produits BitDefender étant sur la machine serveur.
2] Appliquez l'utilitaire de désinstallation « Windows_Server_Uninstall_Tool.exe » (utilitaire téléchargé précédemment)
3] Redémarrer votre serveur.
AVANT D’ALLER PLUS LOIN IL EST IMPERATIF QUE TOUS LES PRE REQUIS DU SERVEUR SOIENT MIS EN PLACE.
4] Installation BitDefender Client Security.
Sélectionnez une installation personnalisée Gardez les paramètres par défauts et faites suivant. Selon les besoins sélectionnez votre type de serveur. Conservez les ports par défauts Installez une nouvelle base SQL. Garder les options par défaut. Si vous rencontrez des problèmes changer l’instance en « BDMS2 »
7] Installation de l'addon (téléchargé précédemment). BitDefender_Security_for_Windows_Servers_Server_Addon_(for_32_bit_Management_Servers)_fr.exe
III ) INSTALLATIONS DE BITDEFENDER FOR FILE SERVER
1] Installation Installez BitDefender Security for File Server que vous avez téléchargé précédemment. BitDefender_Security_for_Windows_Servers_v3_(x64 ou x86)_FR.exe
2] Choix des composants Sélectionnez le composant BitDefender for File Server uniquement.
3] Terminez l’installation
4] Redémarrer le poste serveur (important)
Installez BitDefender for File Server sur tous les serveurs de votre parc
IV ) DEPLOIEMENT DES POSTES CLIENTS
1] Lancez BitDefender Client Security Double-cliquez sur l’application BitDefender Client Security présente sur le bureau.
2] Identification Identifiez-vous sur la console. Le mot de passe par défaut étant « admin » BitDefender Management Console sous forme de deux fenêtres, celle de gauche permettant de sélectionner les différents menus puis celle de droite qui vous permet de configurer les paramètres.
3] Authentification Rendez-vous dans l’onglet « outils », puis cliquez sur « Administrateurs des authentifications » enfin cliquez sur le boutons « + » en haut à droite.
Renseignez les champs.
4] Enregistrement du produit. Allez dans l’onglet « outils », puis dans « enregistrement » enfin rentrez votre clef d’activation Bitdefender Client Security.
5] Création d’un groupe. Pour administrer les postes clients, la création d’un groupe est nécessaire. Au niveau de la fenêtre de gauche de la console, allez dans « dossier ordinateur ». Dans cette arborescence, 3 menus sont présents. Cliquez droit sur le premier (ordinateurs administrés) et créer un groupe.
6] Création d’une politique Antivirus Dans l'arborescence de gauche, rendez-vous dans le module "politiques". Allez dans créer une nouvelle politique, puis dans l’écran de droite, double cliquez sur « Paramètre Antivirus »
7] Paramétrage de la politique Cochez la protection en temps réel. Mettez le niveau de protection en "Personnalisée" Modifier les actions appliquées en cas de détection :
Action à appliquer lorsqu'un fichier infecté est trouvé Première action : Désinfecter le fichier Deuxième action : Mettre en quarantaine
Action à appliquer lorsqu'un fichier suspect est trouvé Première action : Désinfecter le fichier Deuxième action : Mettre en quarantaine
Conservez les autres options par défaut. Cliquez sur terminer.
8] Affectation de la politique APPLIQUER CETTE POLITIQUE AU GROUPE QUE VOUS AVEZ CRÉÉE
Pour se faire, mettez le groupe en surbrillance. Planification: "Une fois" Puis cliquer sur "cliquez ici pour affecter cette politique"
Grâce à cette politique, chaque nouveau poste intégrant ce groupe recevra l'antivirus automatiquement.
9] Déploiement de l'agent. Rendez-vous dans l'onglet "outils" et sélectionnez le module "Network Builder"
Dans le cadran de gauche vous retrouverez tous les postes du réseau. Dans le cadran de droite vous retrouverez vos groupes.
Grâce au procédé glisser/déposer, déplacez les postes clients dans le groupe créé.
Attention! Ne rentrez pas les serveurs dans ce groupe.
Enfin cliquez sur "Appliquer les modifications"
10] Notifications des utilisateurs Une fenêtre nommé "Déploiement de l'agent" s'affiche.
Dans celle ci, cocher les options suivantes:
Installer l'agent sans interface utilisateur Faire un ping des ordinateurs cibles avant le déploiement Ne pas redémarrer à la fin de l'installation
Enfin vérifiez le nom du serveur et lancez le déploiement.
11] Etat de l’avancement Gardez la fenêtre de contrôle Network Builder jusqu'à la fin du déploiement. Certains postes seront en échec. Cela signifie que ces postes ne disposent pas des prés requis énoncé ci-dessus. Il est donc important de faire le nécessaire pour pouvoir procéder au déploiement.
Faites les mises à jours Windows et net Framework de ces postes.
12] Création d’un serveur de mise à jour Vous pouvez définir un serveur local de mises à jour Pour se faire, allez dans « démarrer », « programmes files », « Bitdefender Management Server » puis « Serveur de mise à jour BitDefender ».
Dans l’assistant de configuration gardez l’adresse par défaut.
Indiquez ensuite un répertoire de stockage de mises à jour. C’est ici que les bases virales seront téléchargées Utilisez le port 80 (ou bien un port libre et ouvert sur votre Firewall).
Sélectionnez les composants Business Client et File server Faites suivant.
Un écran résume les paramètres de la configuration. Pour terminer appuyer sur le bouton « Mettre à jour »
13] Création des politiques
Retourner dans la console. Pour terminer ce déploiement, rendez-vous dans les politiques.
Créer les deux politiques suivantes :
Politique « Paramètre du Pare-feu »
Cochez les options suivantes :
Pare-feu activé Appliquer le profil générique à tous les réseaux Profil générique Profil actuel Règles essentielles
Laissez les réponses automatiques par défaut et terminer la configuration Appliquez cette politique au groupe créé.
Politique « Mise à jour planifiée »
Emplacement principal : http://adresse_ip_serveur Emplacement secondaire http://upgrade.bitdefender.com (cochez la case si un proxy existe)
Paramétrez votre proxy (si proxy il y a)
Puis terminer la politique
Assignez-la au groupe créé.
La migration est terminée
Installation des mises en place des KB de Microsoft prêt à être déployé lorsque le plan d’action le demandera:
Créer un script WMI
Dans la console, allez dans le menus « Script WMI », créer un nouveau script et double cliquez sur le script « exécuter le programme ».
Configuration du script WMI
Sélectionnez «L’application se trouve sur cette machine. Renseignez le chemin ou se trouve les patchs de sécurité Windows. Cochez l’option « paramètres » et rentrez la commande suivante : /quiet Cochez « Exécuter avec les droits de l’utilisateur actuel ». Terminer la configuration. Faites de même pour chaque KB de windows
IMPORTANT CHAQUE POSTE DU PARC EST CONCERNE PAR CES MISES A JOUR.
ATTENTION ! Si un seul poste ne dispose pas des versions XP SP2, Net Framework 2.0 SP2 et les KB de windows, le parc sera vulnérable aux nouvelles infections !
Installation des mises en place de l’outil de désinfection prêt à être déployé lorsque le plan d’action le demandera:
Créer un script WMI
Dans la console, allez dans le menus « Script WMI », créer un nouveau script et double cliquez sur le script « exécuter le programme ».
Configuration du script WMI
Sélectionnez «L’application se trouve sur cette machine. Renseignez le chemin ou se trouve l’outil de désinfection. Cochez « Exécuter avec les droits de l’utilisateur actuel ». Terminer la configuration.
IMPORTANT: CHAQUE POSTE DU PARC DOIT APPLIQUER CET OUTIL.
PROTOCOLE DE PLAN D’ACTION CONFIKER
Suivez cette procédure scrupuleusement dans l’ordre indiqué :
1. Fermer les ports 445 inbound et outbound sur les parefeux de l’entreprise y compris pour les réseaux interconnectés avec les règles suivantes: Inbound : Deny : source 0.0.0.0 destination 0.0.0.0.0 port : source 445 destination 445 on TCP+UDP
Outbound : Deny : source 0.0.0.0 destination 0.0.0.0.0 port : source 445 destination 445 on TCP+UDP
NOTA : Pensez bien à remonter ces règles au plus haut des règles globales
2. Migration / Installation de BitDefender (BD) en version 3.1.7 sur un serveur.
3. Installer BitDefender antivirus sur ce serveur et lancer une mise à jour.
4. Vérifier que l’analyse temps réel de ce serveur soit avec les options pour les fichiers infectés et suspects : 1ere action : désinfecter – 2eme action : 40aine
5. Aller dans la console de management BD (ne pas confondre avec la console de l’antivirus serveur) installée sur ce serveur.
6. Application et déploiement sur tous les postes et serveurs d’une politique de l’analyse temps réel de BD (BitDefender) sur TOUS LES FICHIERS pour les fichiers infectés et suspects Action : Désinfecter / Mise en 40aine
7. Vérifier, via la console BD, que toutes les machines du réseau soient à jour avec cette politique de sécurité, et appliquer cette règle pour les nouveaux postes connectés. Il est à noter que certaines machines du réseau ne seront pas forcément à jour au niveau moteur d’analyse ou signatures. Notez ces postes, mais n’intervenez pas tout de suite physiquement. Passer au point suivant.
8. Mettez en place une politique de règles du firewall de BitDefender à partir de la console BD avec les règles suivantes. Ces règles sont temporaires mais doivent être obligatoirement déployées.
Configuration de la politique du pare-feu
Paramètre général Activer le pare-feu : a coché Bloquer le trafic : ne pas cocher Utiliser un profil générique pour tous réseaux : ne pas cocher
Paramètres du profil Profil Générique : a cocher
Appliquer les paramètres à: Profil actuel : a cocher
Vérifiez que toutes les autres options soient décochées exceptés "les politiques d'administration".
Nous allons temporairement pour la désinfection bloquer les ports suivants :
445 en TCP et UDP 139 en TCP et UDP
Appliquez les régles suivantes :
a. Blocage du port 445/TCP
Cliquez sur "Gérer Les Règles" Cliquez sur "Ajouter une règle" Dans processus, laisser décochée cette option Protocol : basculez sur TCP Direction : basculez sur Tout Action : basculez sur refuser
Source Adresse IP : mettez à 0.0.0.0 Mask : appliquer à 0.0.0.0 Port : basculez sur spécifier un port et écrire "445"
Destination Adresse IP : fixer à 0.0.0.0 Mask : fixer à 0.0.0.0 Port : déclarer "N'importe quel ports"
Cliquez sur "ajouter"
b. Blocage du port 445/UDP
Cliquez sur "Gérer Les Règles" Cliquez sur "Ajouter une règle" Dans processus, laisser décochée cette option Protocol : basculez sur UDP Direction : basculez sur Tout Action : basculez sur refuser
Source Adresse IP : mettez à 0.0.0.0 Mask : appliquer à 0.0.0.0 Port : basculez sur spécifier un port et écrire "445"
Destination Adresse IP : fixer à 0.0.0.0 Mask : fixer à 0.0.0.0 Port : déclarer "N'importe quel ports"
Cliquez sur "ajouter"
c. Blocage du port 139/TCP
Cliquez sur "Gérer Les Règles" Cliquez sur "Ajouter une règle" Dans processus, laisser décochée cette option Protocol : basculez sur TCP Direction : basculez sur Tout Action : basculez sur refuser
Source Adresse IP : mettez à 0.0.0.0 Mask : appliquer à 0.0.0.0 Port : basculez sur spécifier un port et écrire "139"
Destination Adresse IP : fixer à 0.0.0.0 Mask : fixer à 0.0.0.0 Port : déclarer "N'importe quel ports"
Cliquez sur "ajouter"
d. Blocage du port 139/UDP
Cliquez sur "Gérer Les Règles" Cliquez sur "Ajouter une règle" Dans processus, laisser décochée cette option Protocol : basculez sur UDP Direction : basculez sur Tout Action : basculez sur refuser
Source Adresse IP : mettez à 0.0.0.0 Mask : appliquer à 0.0.0.0 Port : basculez sur spécifier un port et écrire "139"
Destination Adresse IP : fixer à 0.0.0.0 Mask : fixer à 0.0.0.0 Port : déclarer "N'importe quel ports"
Cliquez sur "ajouter" Cliquez ensuite sur « terminer »
Une fois toutes les règles ajoutées, allez dans "autres paramètres"
Dans les "autres paramètres", vérifiez que les réponses automatiques soient sur "OUI IMPOSE"
9. Lancer NMAP avec la machine linux :
nmap -PN 192.168.0.0/24 -p139,445 -n -v script smb-check-vulns script-args safe=1 >> /directory/etape1.log
Garder précieusement ce log, il servira de référence pour les analyses ultérieures lorsque la procédure sera terminée. Ne pas s’inquiéter sur le nombre de machines qui seront notées comme INFECTED, nous allons les traiter dans les points suivants de ce plan d’action
10. Prendre la console BD, et déployer le script WMI concernant tous les patchs KB de Microsoft (notés dans la procédure de ce document) sur tout le parc. Même si vous pensez que les machines sont à jour, repassez le script WMI, si les KB sont déjà installés, ils ne seront pas réinstallés.
11. Prendre la console BD, et déployer le script WMI de blocage des USB temporairement, le temps du nettoyage du parc. Cette étape est OBLIGATOIRE car un des vecteurs de ce ver est les unités USB via leurs insertions dans les ordinateurs.
12. Lancer NMAP avec la machine linux :
nmap -PN 192.168.0.0/24 -p139,445 -n -v script smb-check-vulns script-args safe=1 >> /directory/etape2.log
13. Vérifier ce log en prêtant attention aux machines notées INFECTED. N’intervenez physiquement pas encore sur ces machines. On les traitera plus tard dans le protocole.
14. Vérifier dans la console BD si ces machines ont bien subies une mise à jour des KB, de la politique concernant le temps réel de l’antivirus, et des scripts WMI et USB. Si tel n’est pas le cas, reforcer ces postes sur les politiques. Si cela ne fonctionne pas, noter ces adresses IP et passer à l’étape suivante
15. Créer et déployer sur tout le parc, la règle de déploiement de l’outil de désinfection. Attendre que cette règle soit lancée sur tous les postes et serveurs.
16. Forcer une règle de mise à jour des signatures et moteurs BitDefender sur l’ensemble des machines et serveurs du parc.
17. Créer une règle d’analyse forcée pour tous les postes et serveurs du parc sur le root (C:\), le répertoire Windows et le répertoire Documents & Settings sur TOUS LES FICHIERS pour les fichiers infectés et suspects: Action : Désinfecter / Mise en 40aine
18. Vérifier que cette opération a été effectuée pour tous les postes et serveurs du parc
19. Lancer NMAP avec la machine linux :
nmap -PN 192.168.0.0/24 -p139,445 -n -v script smb-check-vulns script-args safe=1 >> /directory/etape3.log
20. Vérifier ce log en prêtant attention aux machines notées INFECTED et POSSIBLY INFECTED.
Aller physiquement sur ces machines INFECTED et déconnectez les du réseau, ces machines sont vulnérables. Il faudra les patcher manuellement.
Si ce sont des machines NT, Win98, ME, il faudra ne plus les reconnecter du réseau. Aucun support de KB n’est fourni par Microsoft.
Pour les machines POSSIBLY INFECTED, il s’agit souvent de machines Linux avec samba et ces machines ne sont pas vulnérables à ce ver.
Si il s’agit d’une machine Windows, déconnectez les immédiatement physiquement du réseau, il faut appliquer les KB et outil de désinfection manuellement.
21. Relancer NMAP avec la machine linux :
nmap -PN 192.168.0.0/24 -p139,445 -n -v script smb-check-vulns script-args safe=1 >> /directory/etape4.log
22. Vérifier si aucune machine est noté INFECTED dans le log. Si tel est le cas, plus aucune machine n’est infectée, aller au point suivant du protocole
23. Aller sur la console BD et redonner les accès a tout le parc des clefs USB via le script WMI prévu à cet effet.
24. Toujours sur la console BD, redonnez les politiques du firewall BD qui étaient déclarées avant l’infection. Déployer ces règles de firewall.
25. Relancer NMAP avec la machine linux :
nmap -PN 192.168.0.0/24 -p139,445 -n -v script smb-check-vulns script-args safe=1 >> /directory/etape5.log
Vérifier si aucune machine est noté INFECTED dans le log. Si tel est le cas, plus aucune machine n’est infectée, aller au point suivant du protocole. Sinon des machines restent INFECTED et si il s’agit d’une machine Windows, déconnectez les immédiatement physiquement du réseau, il faut appliquer les KB et outil de désinfection manuellement.
26. Le cas important : les ordinateurs portables. Selon la politique de votre entreprise, il y a plusieurs possibilités de forcer les mises à jour de ces postes.
- Modifier le fichier DHCP.CONF avec des mac-address en forçant les portables à binder une IP qui n’est pas celle du réseau lorsqu’ils se connectent sur la RJ45, et faire une intervention manuelle.
- Dans le même esprit, ouvrir un WLAN sur votre réseau physique sur lequel serait installé un autre serveur BitDefender qui appliquerait les opérations ci-dessus. Une fois effectuées, désinstaller l’agent BD de cette machine, et la reconnecter au réseau initial. L’agent BD du réseau local sera réinstallé avec les politiques de l’entreprise.
- Ou donner à l’administrateur ce portable pour vérification manuelle sur laquelle les KB, installation de l’antivirus devront être installées.
NOTES IMPORTANTES : Si dans le réseau des machines NT, ME, Windows 98 ou Windows 95 sont connectées, ces machines sont vulnérables et aucun patch n’a été fourni par Microsoft.
Le temps d’application du protocole, ces machines doivent IMPERATIVEMENT être déconnectées du réseau. Par la suite, des solutions s’offrent à vous :
- Faire migrer ces machines avec des OS plus récents. - Installer un pare-feu logiciel en bloquant les Inbounds et Outbound sur les ports 139 et 445 - Installer un pare-feu physique (des petits boîtiers aujourd’hui sont commercialisés) en bloquant les Inbounds et Outbound sur les ports 139 et 445
lundi 5 octobre 2009
Par Marc Blanchard [Virus Docteur], lundi 5 octobre 2009 à 23:52 :: Epidemiology - english section -
Following the push of the dll, I was waiting the order.... Here it is, the probe sent the order to the computer.
- The alarm is:
Robotization MAP on hybrid network has detected a suspicious activity :
Date : Mon-05-Oct-2009_23_47_41
Suspicious file : c:\windows\system32\Restore\MachineGuid.txt
This file is only a signature that do some order to the soldier computer:
Data dumped in file offset: 0x0 File format: txt
7b 00 41 00 31 00 34 00 30 00 37 00 32 00 39 00 ; 00000 { A 1 4 0 7 2 9
32 00 2d 00 44 00 37 00 39 00 45 00 2d 00 34 00 ; 00010 2 - D 7 9 E - 4
32 00 34 00 37 00 2d 00 39 00 42 00 36 00 46 00 ; 00020 2 4 7 - 9 B 6 F
2d 00 42 00 36 00 30 00 39 00 43 00 44 00 37 00 ; 00030 - B 6 0 9 C D 7
31 00 37 00 41 00 46 00 38 00 7d 00 00 00 ; 00040 1 7 A F 8 }
samedi 3 octobre 2009
Par Marc Blanchard [Virus Docteur], samedi 3 octobre 2009 à 00:47 :: Epidemiology - english section -
On one of the conficker networks that i pratice the research sent alarm :
- The alarm is :
Robotization MAP on hybrid network has detected a suspicious activity :
Date : Sat-03-Oct-2009_12_08_50
Suspicious file : c:\windows\system32\twndbpam.dll
It is detected as a generic confiker by AVs.
This file was pushed automatically by the worm.
Here is its entry point:
Entry point in file offset: 0x153f0 File format: PE executable (Win32)
80 7c 24 08 01 0f 85 c2 01 00 00 60 be 00 60 00 ; 00000
10 8d be 00 b0 ff ff 57 eb 10 90 90 90 90 90 90 ; 00010
8a 06 46 88 07 47 01 db 75 07 8b 1e 83 ee fc 11 ; 00020
db 72 ed b8 01 00 00 00 01 db 75 07 8b 1e 83 ee ; 00030
fc 11 db 11 c0 01 db 73 ef 75 09 8b 1e 83 ee fc ; 00040
11 db 73 e4 31 c9 83 e8 03 72 0d c1 e0 08 8a 06 ; 00050
46 83 f0 ff 74 74 89 c5 01 db 75 07 8b 1e 83 ee ; 00060
fc 11 db 11 c9 01 db 75 07 8b 1e 83 ee fc 11 db ; 00070
11 c9 75 20 41 01 db 75 07 8b 1e 83 ee fc 11 db ; 00080
11 c9 01 db 73 ef 75 09 8b 1e 83 ee fc 11 db 73 ; 00090
e4 83 c1 02 81 fd 00 f3 ff ff 83 d1 01 8d 14 2f ; 000a0
83 fd fc 76 0f 8a 02 42 88 07 47 49 75 f7 e9 63 ; 000b0
ff ff ff 90 8b 02 83 c2 04 89 07 83 c7 04 83 e9 ; 000c0
04 77 f1 01 cf e9 4c ff ff ff 5e 89 f7 b9 f6 00 ; 000d0
00 00 8a 07 47 2c e8 3c 01 77 f7 80 3f 00 75 f2 ; 000e0
8b 07 8a 5f 04 66 c1 e8 08 c1 c0 10 86 c4 29 f8 ; 000f0
lundi 28 septembre 2009
Par Marc Blanchard [Virus Docteur], lundi 28 septembre 2009 à 14:35 :: Epidemiology - english section -
After the isomorphic external report and the viruslab behaviors, i confirm that an attack happened around the confiker network.
Here is the homomorphic report of this attack:
Last week, some files were created temporaly by confiker that listed the hard disks structures.
Some requests were shown that tested the bandwith of confiker' soldiers.
The attack was executed friday 25th against some IP's that are for the moment confidential (76000 requests during 19 minutes per attacked IPs).
Here is the graph on traffic on 80 port:

Here is the graph on 445 trafic:

What results mean:
The 445 port travels the behavior of attack to soldiers the 24th September 2009.
The behavior is following:
1- Bandwith analysis of soldiers
2- Push to soldiers the informations concerning the future attack
3- Files analysis to check if the orders are available on soldiers
4- block the internet traffic in order to use the complete bandwith of soldiers. In this case, the fact to route to soldiers the DNS to localhost, will block users to go to the internet. The soldiers computers can go to the internet with hard coded sites, i mean with IPs instead of human domain names.
The 80 port behavior : the attack is launched the day after, the 25th september 2009
1- Run the complete attack on 80 port as the picture shows the 25th september 2009 on some IPs. The soldiers sent 76000 requests during 19 minutes per attacked IPs.
2- We can see that this attack decreased significantly on saturday, but stay active, because some logs report that during attacks some communications were done, maybe to attacks other IPs. That's why, the graph shows you a little decreasing.
dimanche 27 septembre 2009
Par Marc Blanchard [Virus Docteur], dimanche 27 septembre 2009 à 20:12 :: Epidemiology - english section -
The 27th September 2009, two researchers shared with me an interesting tool that check the complete network with linux NMAP.
Here is the description:
Installation :
With the latest distributions of RedHat, CentOs or Fedora, download this package :
__If you use other distribs, proceed to this part and compile the package. If you use 64bits OS, please install libstdc++__
wget http://nmap.org/dist/nmap-5.00.tar.bz2
tar xjfv nmap-5.00.tar.bz2
cd nmap-5.00
./configure
make
make install
How to use :
Type following sentence :
nmap -PN 192.168.0.0/24 -p139,445 -n -v -script smb-check-vulns -script-args safe=1
If you want to log to report, please type :
nmap -PN 192.168.0.0/24 -p139,445 -n -v -script smb-check-vulns -script-args safe=1 >> /directory/resultat.log
NOTA: on these arguments, please double this caracter '-' the native argument (bug on DotClear): -script smb-check-vulns -script-args
All infected computers will be tagged as INFECTED
CONCLUSION :
This procedure only shows you that some computers of your network are infected, but this tool will not clean it.
vendredi 25 septembre 2009
Par Marc Blanchard [Virus Docteur], vendredi 25 septembre 2009 à 20:00 :: Epidemiology - english section -
The 25th morning, one of my diagnosticians called me to inform me a strange behavior on several networks.
The behavior is on each network computer:
- Local DNS down : mean that computers cannot go anymore to the internet because their DNS is 127.0.0.1
- IPCONFIG : shows errors and doesn't accept any arguments
- NSLOOKUP : also fails.
- No scheduled tasks created usually by the worm
- No rootkit
- Some plug&play drivers are loaded with NT_AUTHORITY and processes dependencies are showed.
- The network computers could goes to the net with dns name of sites, but could go with true IP Addresses.
If we try to stop or delete or just copy, the worm reacts by a blue screen or reboot
So, we decided to make some audits of these computers to check their behaviors. To be more sure concerning the results that we will get, we ask to 3 differents companies do let us to make researches and behavior analysis.
We decided to take a familly as following:
- 1 WIN2008
- 1 XPSP3
- 1 XPSP2
- 1 WIN2003
All of these computers OS's are with latest MS patches including the MS09-01
jeudi 24 septembre 2009
Par Marc Blanchard [Virus Docteur], jeudi 24 septembre 2009 à 21:27 :: Epidemiology - english section -
On XP and 2003 all is stabilized.
BUT : a new information is coming today.
I received on comments some complains that the DNS was changed on several networks on the uses computers.
So after analysis, it seems that a new bahavior is coming today :
- No scheduled task was created
- nobody can access to the internet, the DHCP doesn't answer, the workstation DHCP is disabled and it is impossible to fix IP addr or to run ipconfig
- All DNS are located on 127.0.0.1
- All entries on TCPIP parameters are blocked by the malware, so impossible to modify some values.
But if users try to access to the internet, he can if and only if numeric IP addresses are written.
So this new behavior is needed to be studied.
That's why i decide to install a new computer infected by this new generation and try to analyze what's happen and how.
So, when this new plateform will be online, i will report this one also on this section.
mercredi 23 septembre 2009
Par Marc Blanchard [Virus Docteur], mercredi 23 septembre 2009 à 21:19 :: Epidemiology - english section -
XP Computer:
The confiker continues to act as it : - Get some sites .cn, .info - Proceed to a network scanning - Stops each 2h00 - Restart after 2h00 of quiet.
On Windows 2003:
Same behavior as the report is :
No. Time Source Destination Protocol Info
37223 2009-09-23 00:00:18.320519 192.168.1.10 tawddgbpsj.cn TCP bcs-broker > http RST Seq=1 Win=0 Len=0
Frame 37223 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: bcs-broker (1704), Dst Port: http (80), Seq: 1, Len: 0
No. Time Source Destination Protocol Info
41676 2009-09-23 00:44:41.936603 192.168.1.10 www.w3.org TCP fotogcad > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 41676 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: www.w3.org (128.30.52.38) Transmission Control Protocol, Src Port: fotogcad (3878), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
41678 2009-09-23 00:44:42.057203 192.168.1.10 www.w3.org TCP fotogcad > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 41678 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: www.w3.org (128.30.52.38) Transmission Control Protocol, Src Port: fotogcad (3878), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
41679 2009-09-23 00:44:42.057315 192.168.1.10 www.w3.org HTTP GET / HTTP/1.0
Frame 41679 (191 bytes on wire, 191 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: www.w3.org (128.30.52.38) Transmission Control Protocol, Src Port: fotogcad (3878), Dst Port: http (80), Seq: 1, Ack: 1, Len: 137 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
41682 2009-09-23 00:44:42.182236 192.168.1.10 www.w3.org TCP fotogcad > http RST, ACK Seq=138 Ack=1453 Win=0 Len=0
Frame 41682 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: www.w3.org (128.30.52.38) Transmission Control Protocol, Src Port: fotogcad (3878), Dst Port: http (80), Seq: 138, Ack: 1453, Len: 0
No. Time Source Destination Protocol Info
41684 2009-09-23 00:44:42.182854 192.168.1.10 www.w3.org TCP fotogcad > http RST Seq=138 Win=0 Len=0
Frame 41684 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: www.w3.org (128.30.52.38) Transmission Control Protocol, Src Port: fotogcad (3878), Dst Port: http (80), Seq: 138, Len: 0
No. Time Source Destination Protocol Info
41691 2009-09-23 00:44:42.185517 192.168.1.10 tawddgbpsj.cn TCP appss-lm > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 41691 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: appss-lm (3879), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
41697 2009-09-23 00:44:42.358542 192.168.1.10 vfdfbvkcvmm.org TCP igrs > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 41697 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: igrs (3880), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
41699 2009-09-23 00:44:42.414664 192.168.1.10 vfdfbvkcvmm.org TCP idac > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 41699 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: idac (3881), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
41701 2009-09-23 00:44:42.423869 192.168.1.10 vfdfbvkcvmm.org TCP msdts1 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 41701 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: msdts1 (3882), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
41703 2009-09-23 00:44:42.427175 192.168.1.10 vfdfbvkcvmm.org TCP vrpn > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 41703 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: vrpn (3883), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
41706 2009-09-23 00:44:42.551754 192.168.1.10 vfdfbvkcvmm.org TCP igrs > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 41706 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: igrs (3880), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
41707 2009-09-23 00:44:42.551833 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 41707 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: igrs (3880), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
41708 2009-09-23 00:44:42.555332 192.168.1.10 vfdfbvkcvmm.org TCP softrack-meter > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 41708 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: softrack-meter (3884), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
41710 2009-09-23 00:44:42.562793 192.168.1.10 tawddgbpsj.cn TCP appss-lm > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 41710 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: appss-lm (3879), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
41711 2009-09-23 00:44:42.562995 192.168.1.10 tawddgbpsj.cn HTTP GET /search?q=0 HTTP/1.0
Frame 41711 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: appss-lm (3879), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
41714 2009-09-23 00:44:42.746605 192.168.1.10 vfdfbvkcvmm.org TCP igrs > http RST Seq=151 Win=0 Len=0
Frame 41714 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: igrs (3880), Dst Port: http (80), Seq: 151, Len: 0
No. Time Source Destination Protocol Info
41719 2009-09-23 00:44:42.942656 192.168.1.10 tawddgbpsj.cn TCP appss-lm > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0
Frame 41719 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: appss-lm (3879), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0
No. Time Source Destination Protocol Info
41721 2009-09-23 00:44:42.942925 192.168.1.10 tawddgbpsj.cn TCP appss-lm > http RST, ACK Seq=150 Ack=242 Win=0 Len=0
Frame 41721 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: appss-lm (3879), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0
No. Time Source Destination Protocol Info
41727 2009-09-23 00:44:43.319615 192.168.1.10 tawddgbpsj.cn TCP appss-lm > http RST Seq=150 Win=0 Len=0
Frame 41727 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: appss-lm (3879), Dst Port: http (80), Seq: 150, Len: 0
No. Time Source Destination Protocol Info
41735 2009-09-23 00:44:45.394304 192.168.1.10 vfdfbvkcvmm.org TCP idac > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 41735 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: idac (3881), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
41736 2009-09-23 00:44:45.394322 192.168.1.10 vfdfbvkcvmm.org TCP vrpn > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 41736 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: vrpn (3883), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
41737 2009-09-23 00:44:45.394332 192.168.1.10 vfdfbvkcvmm.org TCP msdts1 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 41737 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: msdts1 (3882), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
41738 2009-09-23 00:44:45.503591 192.168.1.10 vfdfbvkcvmm.org TCP softrack-meter > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 41738 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: softrack-meter (3884), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
41760 2009-09-23 00:44:51.519027 192.168.1.10 vfdfbvkcvmm.org TCP vrpn > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 41760 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: vrpn (3883), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
41761 2009-09-23 00:44:51.519065 192.168.1.10 vfdfbvkcvmm.org TCP idac > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 41761 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: idac (3881), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
41762 2009-09-23 00:44:51.519075 192.168.1.10 vfdfbvkcvmm.org TCP msdts1 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 41762 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: msdts1 (3882), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
41763 2009-09-23 00:44:51.628388 192.168.1.10 vfdfbvkcvmm.org TCP softrack-meter > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 41763 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: softrack-meter (3884), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
41814 2009-09-23 00:45:04.426341 192.168.1.10 tawddgbpsj.cn TCP cgi-starapi > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 41814 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: cgi-starapi (3893), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
41821 2009-09-23 00:45:04.652576 192.168.1.10 vfdfbvkcvmm.org TCP syam-agent > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 41821 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: syam-agent (3894), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
41823 2009-09-23 00:45:04.656363 192.168.1.10 vfdfbvkcvmm.org TCP syam-smc > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 41823 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: syam-smc (3895), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
41825 2009-09-23 00:45:04.665251 192.168.1.10 vfdfbvkcvmm.org TCP sdo-tls > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 41825 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: sdo-tls (3896), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
41828 2009-09-23 00:45:04.711740 192.168.1.10 vfdfbvkcvmm.org TCP sdo-ssh > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 41828 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: sdo-ssh (3897), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
41830 2009-09-23 00:45:04.756461 192.168.1.10 vfdfbvkcvmm.org TCP senip > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 41830 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: senip (3898), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
41832 2009-09-23 00:45:04.804028 192.168.1.10 tawddgbpsj.cn TCP cgi-starapi > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 41832 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: cgi-starapi (3893), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
41833 2009-09-23 00:45:04.804059 192.168.1.10 tawddgbpsj.cn HTTP GET /search?q=0 HTTP/1.0
Frame 41833 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: cgi-starapi (3893), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
41836 2009-09-23 00:45:04.942013 192.168.1.10 vfdfbvkcvmm.org TCP senip > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 41836 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: senip (3898), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
41837 2009-09-23 00:45:04.942103 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 41837 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: senip (3898), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
41842 2009-09-23 00:45:05.183570 192.168.1.10 tawddgbpsj.cn TCP cgi-starapi > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0
Frame 41842 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: cgi-starapi (3893), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0
No. Time Source Destination Protocol Info
41844 2009-09-23 00:45:05.183909 192.168.1.10 tawddgbpsj.cn TCP cgi-starapi > http RST, ACK Seq=150 Ack=242 Win=0 Len=0
Frame 41844 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: cgi-starapi (3893), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0
No. Time Source Destination Protocol Info
41853 2009-09-23 00:45:05.560460 192.168.1.10 tawddgbpsj.cn TCP cgi-starapi > http RST Seq=150 Win=0 Len=0
Frame 41853 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: cgi-starapi (3893), Dst Port: http (80), Seq: 150, Len: 0
No. Time Source Destination Protocol Info
41862 2009-09-23 00:45:07.705883 192.168.1.10 vfdfbvkcvmm.org TCP sdo-ssh > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 41862 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: sdo-ssh (3897), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
41863 2009-09-23 00:45:07.705957 192.168.1.10 vfdfbvkcvmm.org TCP syam-agent > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 41863 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: syam-agent (3894), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
41864 2009-09-23 00:45:07.705974 192.168.1.10 vfdfbvkcvmm.org TCP sdo-tls > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 41864 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: sdo-tls (3896), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
41865 2009-09-23 00:45:07.705983 192.168.1.10 vfdfbvkcvmm.org TCP syam-smc > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 41865 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: syam-smc (3895), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
41867 2009-09-23 00:45:07.856791 192.168.1.10 vfdfbvkcvmm.org TCP sdo-ssh > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 41867 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: sdo-ssh (3897), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
41868 2009-09-23 00:45:07.856867 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 41868 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: sdo-ssh (3897), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
41890 2009-09-23 00:45:13.721437 192.168.1.10 vfdfbvkcvmm.org TCP sdo-tls > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 41890 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: sdo-tls (3896), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
41891 2009-09-23 00:45:13.721461 192.168.1.10 vfdfbvkcvmm.org TCP syam-agent > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 41891 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: syam-agent (3894), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
41892 2009-09-23 00:45:13.721471 192.168.1.10 vfdfbvkcvmm.org TCP syam-smc > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 41892 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: syam-smc (3895), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
41893 2009-09-23 00:45:13.830683 192.168.1.10 vfdfbvkcvmm.org HTTP TCP Retransmission GET /search?q=0 HTTP/1.0
Frame 41893 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: sdo-ssh (3897), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
41934 2009-09-23 00:45:25.752640 192.168.1.10 vfdfbvkcvmm.org TCP imoguia-port > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 41934 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: imoguia-port (3907), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
41935 2009-09-23 00:45:25.861436 192.168.1.10 vfdfbvkcvmm.org HTTP TCP Retransmission GET /search?q=0 HTTP/1.0
Frame 41935 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: sdo-ssh (3897), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
41948 2009-09-23 00:45:27.042123 192.168.1.10 vfdfbvkcvmm.org TCP hppronetman > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 41948 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: hppronetman (3908), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
41950 2009-09-23 00:45:27.133787 192.168.1.10 vfdfbvkcvmm.org TCP surfcontrolcpa > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 41950 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: surfcontrolcpa (3909), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
41952 2009-09-23 00:45:27.182642 192.168.1.10 vfdfbvkcvmm.org TCP prnrequest > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 41952 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: prnrequest (3910), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
41955 2009-09-23 00:45:27.235380 192.168.1.10 vfdfbvkcvmm.org TCP hppronetman > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 41955 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: hppronetman (3908), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
41956 2009-09-23 00:45:27.235439 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 41956 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: hppronetman (3908), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
41959 2009-09-23 00:45:27.375578 192.168.1.10 vfdfbvkcvmm.org TCP prnrequest > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 41959 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: prnrequest (3910), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
41960 2009-09-23 00:45:27.375620 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 41960 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: prnrequest (3910), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
41962 2009-09-23 00:45:27.427490 192.168.1.10 vfdfbvkcvmm.org TCP prnstatus > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 41962 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: prnstatus (3911), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
41964 2009-09-23 00:45:27.430502 192.168.1.10 vfdfbvkcvmm.org TCP hppronetman > http RST Seq=151 Win=0 Len=0
Frame 41964 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: hppronetman (3908), Dst Port: http (80), Seq: 151, Len: 0
No. Time Source Destination Protocol Info
41970 2009-09-23 00:45:27.570783 192.168.1.10 vfdfbvkcvmm.org TCP prnrequest > http RST Seq=151 Win=0 Len=0
Frame 41970 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: prnrequest (3910), Dst Port: http (80), Seq: 151, Len: 0
No. Time Source Destination Protocol Info
41973 2009-09-23 00:45:27.620892 192.168.1.10 vfdfbvkcvmm.org TCP prnstatus > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 41973 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: prnstatus (3911), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
41974 2009-09-23 00:45:27.620964 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 41974 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: prnstatus (3911), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
41984 2009-09-23 00:45:28.705168 192.168.1.10 vfdfbvkcvmm.org TCP imoguia-port > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 41984 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: imoguia-port (3907), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
41991 2009-09-23 00:45:30.017525 192.168.1.10 vfdfbvkcvmm.org TCP surfcontrolcpa > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 41991 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: surfcontrolcpa (3909), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42007 2009-09-23 00:45:34.720613 192.168.1.10 vfdfbvkcvmm.org TCP imoguia-port > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42007 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: imoguia-port (3907), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42015 2009-09-23 00:45:36.032921 192.168.1.10 vfdfbvkcvmm.org TCP surfcontrolcpa > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42015 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: surfcontrolcpa (3909), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42092 2009-09-23 00:45:49.593354 192.168.1.10 vfdfbvkcvmm.org TCP exasoftport1 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42092 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: exasoftport1 (3920), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42094 2009-09-23 00:45:49.615858 192.168.1.10 vfdfbvkcvmm.org TCP herodotus-net > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42094 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: herodotus-net (3921), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42096 2009-09-23 00:45:49.620650 192.168.1.10 vfdfbvkcvmm.org TCP sor-update > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42096 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: sor-update (3922), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42099 2009-09-23 00:45:49.778298 192.168.1.10 vfdfbvkcvmm.org TCP exasoftport1 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 42099 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: exasoftport1 (3920), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
42100 2009-09-23 00:45:49.778345 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 42100 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: exasoftport1 (3920), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
42102 2009-09-23 00:45:49.813498 192.168.1.10 vfdfbvkcvmm.org TCP sor-update > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 42102 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: sor-update (3922), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
42103 2009-09-23 00:45:49.813532 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 42103 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: sor-update (3922), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
42104 2009-09-23 00:45:49.813646 192.168.1.10 vfdfbvkcvmm.org HTTP TCP Retransmission GET /search?q=0 HTTP/1.0
Frame 42104 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: sdo-ssh (3897), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
42120 2009-09-23 00:45:50.450893 192.168.1.10 vfdfbvkcvmm.org TCP sdo-ssh > http FIN, ACK Seq=151 Ack=213 Win=17212 Len=0
Frame 42120 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: sdo-ssh (3897), Dst Port: http (80), Seq: 151, Ack: 213, Len: 0
No. Time Source Destination Protocol Info
42121 2009-09-23 00:45:50.451187 192.168.1.10 vfdfbvkcvmm.org TCP symb-sb-port > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42121 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: symb-sb-port (3923), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42123 2009-09-23 00:45:50.451319 192.168.1.10 vfdfbvkcvmm.org TCP sdo-ssh > http ACK Seq=152 Ack=214 Win=17212 Len=0
Frame 42123 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: sdo-ssh (3897), Dst Port: http (80), Seq: 152, Ack: 214, Len: 0
No. Time Source Destination Protocol Info
42138 2009-09-23 00:45:52.657323 192.168.1.10 vfdfbvkcvmm.org TCP herodotus-net > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42138 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: herodotus-net (3921), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42141 2009-09-23 00:45:53.313549 192.168.1.10 vfdfbvkcvmm.org TCP symb-sb-port > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42141 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: symb-sb-port (3923), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42162 2009-09-23 00:45:58.672753 192.168.1.10 vfdfbvkcvmm.org TCP herodotus-net > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42162 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: herodotus-net (3921), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42164 2009-09-23 00:45:59.328978 192.168.1.10 vfdfbvkcvmm.org TCP symb-sb-port > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42164 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: symb-sb-port (3923), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42232 2009-09-23 00:46:11.736855 192.168.1.10 tawddgbpsj.cn TCP dyn-site > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42232 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: dyn-site (3932), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42236 2009-09-23 00:46:11.738267 192.168.1.10 tawddgbpsj.cn TCP plbserve-port > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42236 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: plbserve-port (3933), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42238 2009-09-23 00:46:11.814823 192.168.1.10 vfdfbvkcvmm.org TCP sunfm-port > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42238 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: sunfm-port (3934), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42240 2009-09-23 00:46:11.895109 192.168.1.10 vfdfbvkcvmm.org TCP sdp-portmapper > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42240 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: sdp-portmapper (3935), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42242 2009-09-23 00:46:11.950991 192.168.1.10 vfdfbvkcvmm.org TCP mailprox > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42242 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: mailprox (3936), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42244 2009-09-23 00:46:12.054912 192.168.1.10 vfdfbvkcvmm.org TCP dvbservdsc > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42244 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: dvbservdsc (3937), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42246 2009-09-23 00:46:12.114429 192.168.1.10 tawddgbpsj.cn TCP dyn-site > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 42246 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: dyn-site (3932), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
42247 2009-09-23 00:46:12.114465 192.168.1.10 tawddgbpsj.cn HTTP GET /search?q=0 HTTP/1.0
Frame 42247 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: dyn-site (3932), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
42249 2009-09-23 00:46:12.116480 192.168.1.10 tawddgbpsj.cn TCP plbserve-port > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 42249 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: plbserve-port (3933), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
42250 2009-09-23 00:46:12.116514 192.168.1.10 tawddgbpsj.cn HTTP GET /search?q=0 HTTP/1.0
Frame 42250 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: plbserve-port (3933), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
42254 2009-09-23 00:46:12.247641 192.168.1.10 vfdfbvkcvmm.org TCP dvbservdsc > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 42254 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: dvbservdsc (3937), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
42255 2009-09-23 00:46:12.247702 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 42255 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: dvbservdsc (3937), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
42264 2009-09-23 00:46:12.493993 192.168.1.10 tawddgbpsj.cn TCP dyn-site > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0
Frame 42264 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: dyn-site (3932), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0
No. Time Source Destination Protocol Info
42266 2009-09-23 00:46:12.494295 192.168.1.10 tawddgbpsj.cn TCP dyn-site > http RST, ACK Seq=150 Ack=242 Win=0 Len=0
Frame 42266 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: dyn-site (3932), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0
No. Time Source Destination Protocol Info
42269 2009-09-23 00:46:12.496972 192.168.1.10 tawddgbpsj.cn TCP plbserve-port > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0
Frame 42269 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: plbserve-port (3933), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0
No. Time Source Destination Protocol Info
42271 2009-09-23 00:46:12.497298 192.168.1.10 tawddgbpsj.cn TCP plbserve-port > http RST, ACK Seq=150 Ack=242 Win=0 Len=0
Frame 42271 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: plbserve-port (3933), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0
No. Time Source Destination Protocol Info
42276 2009-09-23 00:46:12.871382 192.168.1.10 tawddgbpsj.cn TCP dyn-site > http RST Seq=150 Win=0 Len=0
Frame 42276 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: dyn-site (3932), Dst Port: http (80), Seq: 150, Len: 0
No. Time Source Destination Protocol Info
42278 2009-09-23 00:46:12.873989 192.168.1.10 tawddgbpsj.cn TCP plbserve-port > http RST Seq=150 Win=0 Len=0
Frame 42278 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: plbserve-port (3933), Dst Port: http (80), Seq: 150, Len: 0
No. Time Source Destination Protocol Info
42293 2009-09-23 00:46:14.750230 192.168.1.10 vfdfbvkcvmm.org TCP sdp-portmapper > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42293 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: sdp-portmapper (3935), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42294 2009-09-23 00:46:14.750304 192.168.1.10 vfdfbvkcvmm.org TCP sunfm-port > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42294 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: sunfm-port (3934), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42295 2009-09-23 00:46:14.968940 192.168.1.10 vfdfbvkcvmm.org TCP mailprox > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42295 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: mailprox (3936), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42315 2009-09-23 00:46:20.765591 192.168.1.10 vfdfbvkcvmm.org TCP sdp-portmapper > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42315 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: sdp-portmapper (3935), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42316 2009-09-23 00:46:20.765671 192.168.1.10 vfdfbvkcvmm.org TCP sunfm-port > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42316 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: sunfm-port (3934), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42317 2009-09-23 00:46:20.984335 192.168.1.10 vfdfbvkcvmm.org TCP mailprox > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42317 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: mailprox (3936), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42365 2009-09-23 00:46:34.126140 192.168.1.10 tawddgbpsj.cn TCP namemunge > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42365 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: namemunge (3950), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42366 2009-09-23 00:46:34.126452 192.168.1.10 tawddgbpsj.cn TCP pwgippfax > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42366 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: pwgippfax (3951), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42373 2009-09-23 00:46:34.203765 192.168.1.10 vfdfbvkcvmm.org TCP i3-sessionmgr > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42373 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: i3-sessionmgr (3952), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42375 2009-09-23 00:46:34.311222 192.168.1.10 vfdfbvkcvmm.org TCP xmlink-connect > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42375 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: xmlink-connect (3953), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42377 2009-09-23 00:46:34.393992 192.168.1.10 vfdfbvkcvmm.org TCP adrep > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42377 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: adrep (3954), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42379 2009-09-23 00:46:34.503052 192.168.1.10 tawddgbpsj.cn TCP namemunge > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 42379 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: namemunge (3950), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
42380 2009-09-23 00:46:34.503084 192.168.1.10 tawddgbpsj.cn HTTP GET /search?q=0 HTTP/1.0
Frame 42380 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: namemunge (3950), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
42382 2009-09-23 00:46:34.505414 192.168.1.10 tawddgbpsj.cn TCP pwgippfax > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 42382 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: pwgippfax (3951), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
42383 2009-09-23 00:46:34.505445 192.168.1.10 tawddgbpsj.cn HTTP GET /search?q=0 HTTP/1.0
Frame 42383 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: pwgippfax (3951), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
42390 2009-09-23 00:46:34.882384 192.168.1.10 tawddgbpsj.cn TCP namemunge > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0
Frame 42390 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: namemunge (3950), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0
No. Time Source Destination Protocol Info
42392 2009-09-23 00:46:34.882638 192.168.1.10 tawddgbpsj.cn TCP namemunge > http RST, ACK Seq=150 Ack=242 Win=0 Len=0
Frame 42392 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: namemunge (3950), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0
No. Time Source Destination Protocol Info
42393 2009-09-23 00:46:34.882846 192.168.1.10 tawddgbpsj.cn TCP p2pcommunity > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42393 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: p2pcommunity (3955), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42396 2009-09-23 00:46:34.886315 192.168.1.10 tawddgbpsj.cn TCP pwgippfax > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0
Frame 42396 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: pwgippfax (3951), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0
No. Time Source Destination Protocol Info
42398 2009-09-23 00:46:34.886649 192.168.1.10 tawddgbpsj.cn TCP pwgippfax > http RST, ACK Seq=150 Ack=242 Win=0 Len=0
Frame 42398 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: pwgippfax (3951), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0
No. Time Source Destination Protocol Info
42404 2009-09-23 00:46:35.258304 192.168.1.10 tawddgbpsj.cn TCP namemunge > http RST Seq=150 Win=0 Len=0
Frame 42404 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: namemunge (3950), Dst Port: http (80), Seq: 150, Len: 0
No. Time Source Destination Protocol Info
42406 2009-09-23 00:46:35.261343 192.168.1.10 tawddgbpsj.cn TCP p2pcommunity > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 42406 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: p2pcommunity (3955), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
42407 2009-09-23 00:46:35.261428 192.168.1.10 tawddgbpsj.cn HTTP GET /search?q=0 HTTP/1.0
Frame 42407 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: p2pcommunity (3955), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
42409 2009-09-23 00:46:35.263590 192.168.1.10 tawddgbpsj.cn TCP pwgippfax > http RST Seq=150 Win=0 Len=0
Frame 42409 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: pwgippfax (3951), Dst Port: http (80), Seq: 150, Len: 0
No. Time Source Destination Protocol Info
42415 2009-09-23 00:46:35.640756 192.168.1.10 tawddgbpsj.cn TCP p2pcommunity > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0
Frame 42415 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: p2pcommunity (3955), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0
No. Time Source Destination Protocol Info
42417 2009-09-23 00:46:35.641056 192.168.1.10 tawddgbpsj.cn TCP p2pcommunity > http RST, ACK Seq=150 Ack=242 Win=0 Len=0
Frame 42417 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: p2pcommunity (3955), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0
No. Time Source Destination Protocol Info
42420 2009-09-23 00:46:36.017564 192.168.1.10 tawddgbpsj.cn TCP p2pcommunity > http RST Seq=150 Win=0 Len=0
Frame 42420 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: p2pcommunity (3955), Dst Port: http (80), Seq: 150, Len: 0
No. Time Source Destination Protocol Info
42427 2009-09-23 00:46:37.171265 192.168.1.10 vfdfbvkcvmm.org TCP i3-sessionmgr > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42427 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: i3-sessionmgr (3952), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42428 2009-09-23 00:46:37.390038 192.168.1.10 vfdfbvkcvmm.org TCP xmlink-connect > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42428 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: xmlink-connect (3953), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42429 2009-09-23 00:46:37.390055 192.168.1.10 vfdfbvkcvmm.org TCP adrep > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42429 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: adrep (3954), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42445 2009-09-23 00:46:43.186658 192.168.1.10 vfdfbvkcvmm.org TCP i3-sessionmgr > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42445 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: i3-sessionmgr (3952), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42446 2009-09-23 00:46:43.405391 192.168.1.10 vfdfbvkcvmm.org TCP adrep > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42446 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: adrep (3954), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42447 2009-09-23 00:46:43.405414 192.168.1.10 vfdfbvkcvmm.org TCP xmlink-connect > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42447 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: xmlink-connect (3953), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42509 2009-09-23 00:46:56.550301 192.168.1.10 tawddgbpsj.cn TCP sasggprs > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42509 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: sasggprs (3964), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42515 2009-09-23 00:46:56.787059 192.168.1.10 vfdfbvkcvmm.org TCP ati-ip-to-ncpe > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42515 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: ati-ip-to-ncpe (3965), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42517 2009-09-23 00:46:56.862941 192.168.1.10 vfdfbvkcvmm.org TCP bflckmgr > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42517 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: bflckmgr (3966), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42519 2009-09-23 00:46:56.890509 192.168.1.10 vfdfbvkcvmm.org TCP ppsms > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42519 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: ppsms (3967), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42521 2009-09-23 00:46:56.927363 192.168.1.10 tawddgbpsj.cn TCP sasggprs > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 42521 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: sasggprs (3964), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
42522 2009-09-23 00:46:56.927402 192.168.1.10 tawddgbpsj.cn HTTP GET /search?q=0 HTTP/1.0
Frame 42522 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: sasggprs (3964), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
42524 2009-09-23 00:46:56.942033 192.168.1.10 vfdfbvkcvmm.org TCP ianywhere-dbns > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42524 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: ianywhere-dbns (3968), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42526 2009-09-23 00:46:56.969438 192.168.1.10 vfdfbvkcvmm.org TCP landmarks > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42526 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: landmarks (3969), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42528 2009-09-23 00:46:57.055908 192.168.1.10 vfdfbvkcvmm.org TCP bflckmgr > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 42528 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: bflckmgr (3966), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
42529 2009-09-23 00:46:57.055948 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 42529 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: bflckmgr (3966), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
42531 2009-09-23 00:46:57.135052 192.168.1.10 vfdfbvkcvmm.org TCP ianywhere-dbns > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 42531 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: ianywhere-dbns (3968), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
42532 2009-09-23 00:46:57.135202 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 42532 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: ianywhere-dbns (3968), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
42541 2009-09-23 00:46:57.306996 192.168.1.10 tawddgbpsj.cn TCP sasggprs > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0
Frame 42541 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: sasggprs (3964), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0
No. Time Source Destination Protocol Info
42543 2009-09-23 00:46:57.307287 192.168.1.10 tawddgbpsj.cn TCP sasggprs > http RST, ACK Seq=150 Ack=242 Win=0 Len=0
Frame 42543 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: sasggprs (3964), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0
No. Time Source Destination Protocol Info
42546 2009-09-23 00:46:57.329625 192.168.1.10 vfdfbvkcvmm.org TCP ianywhere-dbns > http RST Seq=151 Win=0 Len=0
Frame 42546 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: ianywhere-dbns (3968), Dst Port: http (80), Seq: 151, Len: 0
No. Time Source Destination Protocol Info
42552 2009-09-23 00:46:57.683545 192.168.1.10 tawddgbpsj.cn TCP sasggprs > http RST Seq=150 Win=0 Len=0
Frame 42552 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: sasggprs (3964), Dst Port: http (80), Seq: 150, Len: 0
No. Time Source Destination Protocol Info
42562 2009-09-23 00:46:59.810997 192.168.1.10 vfdfbvkcvmm.org TCP ppsms > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42562 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: ppsms (3967), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42563 2009-09-23 00:46:59.811009 192.168.1.10 vfdfbvkcvmm.org TCP ati-ip-to-ncpe > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42563 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: ati-ip-to-ncpe (3965), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42564 2009-09-23 00:46:59.920351 192.168.1.10 vfdfbvkcvmm.org TCP landmarks > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42564 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: landmarks (3969), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42582 2009-09-23 00:47:05.826413 192.168.1.10 vfdfbvkcvmm.org TCP ati-ip-to-ncpe > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42582 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: ati-ip-to-ncpe (3965), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42583 2009-09-23 00:47:05.837738 192.168.1.10 vfdfbvkcvmm.org TCP ppsms > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42583 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: ppsms (3967), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42584 2009-09-23 00:47:05.935779 192.168.1.10 vfdfbvkcvmm.org TCP landmarks > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42584 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: landmarks (3969), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42648 2009-09-23 00:47:18.968225 192.168.1.10 tawddgbpsj.cn TCP secure-cfg-svr > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42648 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: secure-cfg-svr (3978), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42650 2009-09-23 00:47:18.968530 192.168.1.10 tawddgbpsj.cn TCP smwan > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42650 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: smwan (3979), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42652 2009-09-23 00:47:19.187312 192.168.1.10 vfdfbvkcvmm.org TCP acms > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42652 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: acms (3980), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42654 2009-09-23 00:47:19.236552 192.168.1.10 vfdfbvkcvmm.org TCP starfish > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42654 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: starfish (3981), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42656 2009-09-23 00:47:19.346222 192.168.1.10 tawddgbpsj.cn TCP secure-cfg-svr > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 42656 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: secure-cfg-svr (3978), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
42657 2009-09-23 00:47:19.346259 192.168.1.10 tawddgbpsj.cn HTTP GET /search?q=0 HTTP/1.0
Frame 42657 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: secure-cfg-svr (3978), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
42659 2009-09-23 00:47:19.565097 192.168.1.10 tawddgbpsj.cn TCP smwan > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 42659 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: smwan (3979), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
42660 2009-09-23 00:47:19.565166 192.168.1.10 tawddgbpsj.cn HTTP GET /search?q=0 HTTP/1.0
Frame 42660 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: smwan (3979), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
42666 2009-09-23 00:47:19.725427 192.168.1.10 tawddgbpsj.cn TCP secure-cfg-svr > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0
Frame 42666 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: secure-cfg-svr (3978), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0
No. Time Source Destination Protocol Info
42668 2009-09-23 00:47:19.725878 192.168.1.10 tawddgbpsj.cn TCP secure-cfg-svr > http RST, ACK Seq=150 Ack=242 Win=0 Len=0
Frame 42668 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: secure-cfg-svr (3978), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0
No. Time Source Destination Protocol Info
42672 2009-09-23 00:47:19.944917 192.168.1.10 tawddgbpsj.cn TCP smwan > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0
Frame 42672 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: smwan (3979), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0
No. Time Source Destination Protocol Info
42674 2009-09-23 00:47:19.945194 192.168.1.10 tawddgbpsj.cn TCP smwan > http RST, ACK Seq=150 Ack=242 Win=0 Len=0
Frame 42674 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: smwan (3979), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0
No. Time Source Destination Protocol Info
42681 2009-09-23 00:47:20.101926 192.168.1.10 tawddgbpsj.cn TCP secure-cfg-svr > http RST Seq=150 Win=0 Len=0
Frame 42681 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: secure-cfg-svr (3978), Dst Port: http (80), Seq: 150, Len: 0
No. Time Source Destination Protocol Info
42684 2009-09-23 00:47:20.321688 192.168.1.10 tawddgbpsj.cn TCP smwan > http RST Seq=150 Win=0 Len=0
Frame 42684 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: smwan (3979), Dst Port: http (80), Seq: 150, Len: 0
No. Time Source Destination Protocol Info
42695 2009-09-23 00:47:22.122636 192.168.1.10 vfdfbvkcvmm.org TCP acms > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42695 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: acms (3980), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42696 2009-09-23 00:47:22.122641 192.168.1.10 vfdfbvkcvmm.org TCP starfish > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42696 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: starfish (3981), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42721 2009-09-23 00:47:28.138042 192.168.1.10 vfdfbvkcvmm.org TCP acms > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42721 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: acms (3980), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42722 2009-09-23 00:47:28.138069 192.168.1.10 vfdfbvkcvmm.org TCP starfish > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42722 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: starfish (3981), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42791 2009-09-23 00:47:41.389472 192.168.1.10 tawddgbpsj.cn TCP bv-is > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42791 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: bv-is (3990), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42794 2009-09-23 00:47:41.623880 192.168.1.10 vfdfbvkcvmm.org TCP bv-smcsrv > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42794 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: bv-smcsrv (3991), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42796 2009-09-23 00:47:41.702659 192.168.1.10 vfdfbvkcvmm.org TCP bv-ds > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42796 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: bv-ds (3992), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42798 2009-09-23 00:47:41.729987 192.168.1.10 vfdfbvkcvmm.org TCP bv-agent > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42798 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: bv-agent (3993), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42800 2009-09-23 00:47:41.754509 192.168.1.10 vfdfbvkcvmm.org TCP 3994 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42800 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 3994 (3994), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42802 2009-09-23 00:47:41.765890 192.168.1.10 tawddgbpsj.cn TCP bv-is > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 42802 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: bv-is (3990), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
42803 2009-09-23 00:47:41.765947 192.168.1.10 tawddgbpsj.cn HTTP GET /search?q=0 HTTP/1.0
Frame 42803 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: bv-is (3990), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
42805 2009-09-23 00:47:41.813189 192.168.1.10 vfdfbvkcvmm.org TCP iss-mgmt-ssl > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42805 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: iss-mgmt-ssl (3995), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42807 2009-09-23 00:47:41.816859 192.168.1.10 vfdfbvkcvmm.org TCP bv-smcsrv > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 42807 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: bv-smcsrv (3991), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
42808 2009-09-23 00:47:41.816910 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 42808 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: bv-smcsrv (3991), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
42810 2009-09-23 00:47:41.888288 192.168.1.10 vfdfbvkcvmm.org TCP bv-ds > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 42810 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: bv-ds (3992), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
42811 2009-09-23 00:47:41.888330 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 42811 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: bv-ds (3992), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
42813 2009-09-23 00:47:41.922596 192.168.1.10 vfdfbvkcvmm.org TCP bv-agent > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 42813 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: bv-agent (3993), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
42814 2009-09-23 00:47:41.922637 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 42814 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: bv-agent (3993), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
42817 2009-09-23 00:47:41.999206 192.168.1.10 vfdfbvkcvmm.org TCP iss-mgmt-ssl > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 42817 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: iss-mgmt-ssl (3995), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
42818 2009-09-23 00:47:41.999242 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 42818 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: iss-mgmt-ssl (3995), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
42828 2009-09-23 00:47:42.117394 192.168.1.10 vfdfbvkcvmm.org TCP bv-agent > http RST Seq=151 Win=0 Len=0
Frame 42828 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: bv-agent (3993), Dst Port: http (80), Seq: 151, Len: 0
No. Time Source Destination Protocol Info
42832 2009-09-23 00:47:42.145000 192.168.1.10 tawddgbpsj.cn TCP bv-is > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0
Frame 42832 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: bv-is (3990), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0
No. Time Source Destination Protocol Info
42834 2009-09-23 00:47:42.145315 192.168.1.10 tawddgbpsj.cn TCP bv-is > http RST, ACK Seq=150 Ack=242 Win=0 Len=0
Frame 42834 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: bv-is (3990), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0
No. Time Source Destination Protocol Info
42841 2009-09-23 00:47:42.520855 192.168.1.10 tawddgbpsj.cn TCP bv-is > http RST Seq=150 Win=0 Len=0
Frame 42841 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: bv-is (3990), Dst Port: http (80), Seq: 150, Len: 0
No. Time Source Destination Protocol Info
42853 2009-09-23 00:47:44.762452 192.168.1.10 vfdfbvkcvmm.org TCP 3994 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42853 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 3994 (3994), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42875 2009-09-23 00:47:50.777816 192.168.1.10 vfdfbvkcvmm.org TCP 3994 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42875 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 3994 (3994), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42935 2009-09-23 00:48:04.091395 192.168.1.10 vfdfbvkcvmm.org TCP netcheque > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42935 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: netcheque (4008), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42937 2009-09-23 00:48:04.172509 192.168.1.10 vfdfbvkcvmm.org TCP chimera-hwm > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42937 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: chimera-hwm (4009), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42939 2009-09-23 00:48:04.201873 192.168.1.10 vfdfbvkcvmm.org TCP samsung-unidex > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42939 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: samsung-unidex (4010), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42941 2009-09-23 00:48:04.234813 192.168.1.10 vfdfbvkcvmm.org TCP altserviceboot > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42941 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: altserviceboot (4011), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42943 2009-09-23 00:48:04.281803 192.168.1.10 vfdfbvkcvmm.org TCP pda-gate > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42943 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: pda-gate (4012), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42945 2009-09-23 00:48:04.284148 192.168.1.10 vfdfbvkcvmm.org TCP netcheque > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 42945 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: netcheque (4008), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
42946 2009-09-23 00:48:04.284178 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 42946 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: netcheque (4008), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
42948 2009-09-23 00:48:04.365187 192.168.1.10 vfdfbvkcvmm.org TCP chimera-hwm > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 42948 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: chimera-hwm (4009), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
42949 2009-09-23 00:48:04.365241 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 42949 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: chimera-hwm (4009), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
42951 2009-09-23 00:48:04.387566 192.168.1.10 vfdfbvkcvmm.org TCP samsung-unidex > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 42951 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: samsung-unidex (4010), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
42952 2009-09-23 00:48:04.387594 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 42952 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: samsung-unidex (4010), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
42976 2009-09-23 00:48:07.292815 192.168.1.10 vfdfbvkcvmm.org TCP pda-gate > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42976 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: pda-gate (4012), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42977 2009-09-23 00:48:07.292911 192.168.1.10 vfdfbvkcvmm.org TCP altserviceboot > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42977 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: altserviceboot (4011), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
42999 2009-09-23 00:48:13.207854 192.168.1.10 vfdfbvkcvmm.org TCP altserviceboot > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 42999 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: altserviceboot (4011), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43000 2009-09-23 00:48:13.308185 192.168.1.10 vfdfbvkcvmm.org TCP pda-gate > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43000 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: pda-gate (4012), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43071 2009-09-23 00:48:26.294768 192.168.1.10 tawddgbpsj.cn TCP bxp > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43071 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: bxp (4027), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43074 2009-09-23 00:48:26.618793 192.168.1.10 vfdfbvkcvmm.org TCP dtserver-port > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43074 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: dtserver-port (4028), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43076 2009-09-23 00:48:26.669839 192.168.1.10 vfdfbvkcvmm.org TCP ip-qsig > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43076 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: ip-qsig (4029), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43078 2009-09-23 00:48:26.672018 192.168.1.10 tawddgbpsj.cn TCP bxp > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 43078 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: bxp (4027), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
43079 2009-09-23 00:48:26.672065 192.168.1.10 tawddgbpsj.cn HTTP GET /search?q=0 HTTP/1.0
Frame 43079 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: bxp (4027), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
43081 2009-09-23 00:48:26.698997 192.168.1.10 vfdfbvkcvmm.org TCP jdmn-port > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43081 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: jdmn-port (4030), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43088 2009-09-23 00:48:27.050716 192.168.1.10 tawddgbpsj.cn TCP bxp > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0
Frame 43088 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: bxp (4027), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0
No. Time Source Destination Protocol Info
43090 2009-09-23 00:48:27.050881 192.168.1.10 tawddgbpsj.cn TCP bxp > http RST, ACK Seq=150 Ack=242 Win=0 Len=0
Frame 43090 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: bxp (4027), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0
No. Time Source Destination Protocol Info
43097 2009-09-23 00:48:27.427524 192.168.1.10 tawddgbpsj.cn TCP bxp > http RST Seq=150 Win=0 Len=0
Frame 43097 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: bxp (4027), Dst Port: http (80), Seq: 150, Len: 0
No. Time Source Destination Protocol Info
43111 2009-09-23 00:48:29.604469 192.168.1.10 vfdfbvkcvmm.org TCP dtserver-port > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43111 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: dtserver-port (4028), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43112 2009-09-23 00:48:29.604572 192.168.1.10 vfdfbvkcvmm.org TCP ip-qsig > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43112 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: ip-qsig (4029), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43113 2009-09-23 00:48:29.604595 192.168.1.10 vfdfbvkcvmm.org TCP jdmn-port > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43113 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: jdmn-port (4030), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43135 2009-09-23 00:48:35.619860 192.168.1.10 vfdfbvkcvmm.org TCP dtserver-port > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43135 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: dtserver-port (4028), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43136 2009-09-23 00:48:35.619868 192.168.1.10 vfdfbvkcvmm.org TCP jdmn-port > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43136 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: jdmn-port (4030), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43137 2009-09-23 00:48:35.619890 192.168.1.10 vfdfbvkcvmm.org TCP ip-qsig > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43137 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: ip-qsig (4029), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43203 2009-09-23 00:48:48.761977 192.168.1.10 tawddgbpsj.cn TCP ltp > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43203 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: ltp (4044), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43208 2009-09-23 00:48:48.763014 192.168.1.10 tawddgbpsj.cn TCP npp > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43208 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: npp (4045), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43210 2009-09-23 00:48:49.022712 192.168.1.10 vfdfbvkcvmm.org TCP acp-proto > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43210 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: acp-proto (4046), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43212 2009-09-23 00:48:49.140151 192.168.1.10 tawddgbpsj.cn TCP ltp > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 43212 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: ltp (4044), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
43213 2009-09-23 00:48:49.140240 192.168.1.10 tawddgbpsj.cn HTTP GET /search?q=0 HTTP/1.0
Frame 43213 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: ltp (4044), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
43215 2009-09-23 00:48:49.143115 192.168.1.10 tawddgbpsj.cn TCP npp > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 43215 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: npp (4045), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
43216 2009-09-23 00:48:49.143160 192.168.1.10 tawddgbpsj.cn HTTP GET /search?q=0 HTTP/1.0
Frame 43216 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: npp (4045), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
43223 2009-09-23 00:48:49.519855 192.168.1.10 tawddgbpsj.cn TCP ltp > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0
Frame 43223 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: ltp (4044), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0
No. Time Source Destination Protocol Info
43225 2009-09-23 00:48:49.520085 192.168.1.10 tawddgbpsj.cn TCP ltp > http RST, ACK Seq=150 Ack=242 Win=0 Len=0
Frame 43225 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: ltp (4044), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0
No. Time Source Destination Protocol Info
43234 2009-09-23 00:48:49.898739 192.168.1.10 tawddgbpsj.cn TCP npp > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0
Frame 43234 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: npp (4045), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0
No. Time Source Destination Protocol Info
43236 2009-09-23 00:48:49.899038 192.168.1.10 tawddgbpsj.cn TCP npp > http RST, ACK Seq=150 Ack=242 Win=0 Len=0
Frame 43236 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: npp (4045), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0
No. Time Source Destination Protocol Info
43238 2009-09-23 00:48:49.899563 192.168.1.10 tawddgbpsj.cn TCP ltp > http RST Seq=150 Win=0 Len=0
Frame 43238 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: ltp (4044), Dst Port: http (80), Seq: 150, Len: 0
No. Time Source Destination Protocol Info
43241 2009-09-23 00:48:50.275302 192.168.1.10 tawddgbpsj.cn TCP npp > http RST Seq=150 Win=0 Len=0
Frame 43241 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: npp (4045), Dst Port: http (80), Seq: 150, Len: 0
No. Time Source Destination Protocol Info
43261 2009-09-23 00:48:51.931716 192.168.1.10 vfdfbvkcvmm.org TCP acp-proto > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43261 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: acp-proto (4046), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43264 2009-09-23 00:48:52.082800 192.168.1.10 vfdfbvkcvmm.org TCP acp-proto > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 43264 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: acp-proto (4046), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
43265 2009-09-23 00:48:52.082868 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 43265 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: acp-proto (4046), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
43289 2009-09-23 00:48:58.056512 192.168.1.10 vfdfbvkcvmm.org HTTP TCP Retransmission GET /search?q=0 HTTP/1.0
Frame 43289 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: acp-proto (4046), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
43355 2009-09-23 00:49:10.181048 192.168.1.10 vfdfbvkcvmm.org HTTP TCP Retransmission GET /search?q=0 HTTP/1.0
Frame 43355 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: acp-proto (4046), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
43371 2009-09-23 00:49:11.443889 192.168.1.10 vfdfbvkcvmm.org TCP avanti_cdp > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43371 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: avanti_cdp (4065), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43373 2009-09-23 00:49:11.491448 192.168.1.10 vfdfbvkcvmm.org TCP pmas > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43373 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: pmas (4066), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43375 2009-09-23 00:49:11.635144 192.168.1.10 vfdfbvkcvmm.org TCP idp > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43375 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: idp (4067), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43379 2009-09-23 00:49:11.829065 192.168.1.10 vfdfbvkcvmm.org TCP idp > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 43379 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: idp (4067), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
43380 2009-09-23 00:49:11.829159 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 43380 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: idp (4067), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
43401 2009-09-23 00:49:14.337125 192.168.1.10 vfdfbvkcvmm.org TCP avanti_cdp > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43401 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: avanti_cdp (4065), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43402 2009-09-23 00:49:14.337143 192.168.1.10 vfdfbvkcvmm.org TCP pmas > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43402 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: pmas (4066), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43405 2009-09-23 00:49:14.489903 192.168.1.10 vfdfbvkcvmm.org TCP pmas > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 43405 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: pmas (4066), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
43406 2009-09-23 00:49:14.489976 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 43406 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: pmas (4066), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
43431 2009-09-23 00:49:20.352536 192.168.1.10 vfdfbvkcvmm.org TCP avanti_cdp > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43431 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: avanti_cdp (4065), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43433 2009-09-23 00:49:20.571306 192.168.1.10 vfdfbvkcvmm.org HTTP TCP Retransmission GET /search?q=0 HTTP/1.0
Frame 43433 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: pmas (4066), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
43438 2009-09-23 00:49:21.266871 192.168.1.10 vfdfbvkcvmm.org TCP pmas > http FIN, ACK Seq=151 Ack=213 Win=17212 Len=0
Frame 43438 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: pmas (4066), Dst Port: http (80), Seq: 151, Ack: 213, Len: 0
No. Time Source Destination Protocol Info
43440 2009-09-23 00:49:21.267276 192.168.1.10 vfdfbvkcvmm.org TCP pmas > http ACK Seq=152 Ack=214 Win=17212 Len=0
Frame 43440 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: pmas (4066), Dst Port: http (80), Seq: 152, Ack: 214, Len: 0
No. Time Source Destination Protocol Info
43525 2009-09-23 00:49:33.494670 192.168.1.10 tawddgbpsj.cn TCP lorica-in-sec > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43525 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: lorica-in-sec (4081), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43527 2009-09-23 00:49:33.733664 192.168.1.10 vfdfbvkcvmm.org TCP lorica-out > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43527 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: lorica-out (4082), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43529 2009-09-23 00:49:33.778964 192.168.1.10 vfdfbvkcvmm.org TCP lorica-out-sec > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43529 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: lorica-out-sec (4083), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43531 2009-09-23 00:49:33.872014 192.168.1.10 tawddgbpsj.cn TCP lorica-in-sec > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 43531 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: lorica-in-sec (4081), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
43532 2009-09-23 00:49:33.872077 192.168.1.10 tawddgbpsj.cn HTTP GET /search?q=0 HTTP/1.0
Frame 43532 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: lorica-in-sec (4081), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
43534 2009-09-23 00:49:33.878704 192.168.1.10 vfdfbvkcvmm.org TCP 4084 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43534 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4084 (4084), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43536 2009-09-23 00:49:34.148862 192.168.1.10 vfdfbvkcvmm.org HTTP TCP Retransmission GET /search?q=0 HTTP/1.0
Frame 43536 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: acp-proto (4046), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
43541 2009-09-23 00:49:34.250775 192.168.1.10 tawddgbpsj.cn TCP lorica-in-sec > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0
Frame 43541 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: lorica-in-sec (4081), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0
No. Time Source Destination Protocol Info
43543 2009-09-23 00:49:34.251049 192.168.1.10 tawddgbpsj.cn TCP lorica-in-sec > http RST, ACK Seq=150 Ack=242 Win=0 Len=0
Frame 43543 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: lorica-in-sec (4081), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0
No. Time Source Destination Protocol Info
43551 2009-09-23 00:49:34.628094 192.168.1.10 tawddgbpsj.cn TCP lorica-in-sec > http RST Seq=150 Win=0 Len=0
Frame 43551 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: lorica-in-sec (4081), Dst Port: http (80), Seq: 150, Len: 0
No. Time Source Destination Protocol Info
43555 2009-09-23 00:49:34.790558 192.168.1.10 vfdfbvkcvmm.org TCP acp-proto > http FIN, ACK Seq=151 Ack=213 Win=17212 Len=0
Frame 43555 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: acp-proto (4046), Dst Port: http (80), Seq: 151, Ack: 213, Len: 0
No. Time Source Destination Protocol Info
43557 2009-09-23 00:49:34.790945 192.168.1.10 vfdfbvkcvmm.org TCP acp-proto > http ACK Seq=152 Ack=214 Win=17212 Len=0
Frame 43557 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: acp-proto (4046), Dst Port: http (80), Seq: 152, Ack: 214, Len: 0
No. Time Source Destination Protocol Info
43568 2009-09-23 00:49:36.758174 192.168.1.10 vfdfbvkcvmm.org TCP lorica-out > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43568 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: lorica-out (4082), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43569 2009-09-23 00:49:36.758197 192.168.1.10 vfdfbvkcvmm.org TCP lorica-out-sec > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43569 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: lorica-out-sec (4083), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43570 2009-09-23 00:49:36.867530 192.168.1.10 vfdfbvkcvmm.org TCP 4084 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43570 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4084 (4084), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43572 2009-09-23 00:49:36.916312 192.168.1.10 vfdfbvkcvmm.org TCP 4084 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 43572 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4084 (4084), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
43573 2009-09-23 00:49:36.916383 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 43573 (201 bytes on wire, 201 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4084 (4084), Dst Port: http (80), Seq: 1, Ack: 1, Len: 147 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
43577 2009-09-23 00:49:36.967831 192.168.1.10 vfdfbvkcvmm.org TCP 4084 > http FIN, ACK Seq=148 Ack=499 Win=16926 Len=0
Frame 43577 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4084 (4084), Dst Port: http (80), Seq: 148, Ack: 499, Len: 0
No. Time Source Destination Protocol Info
43579 2009-09-23 00:49:36.968166 192.168.1.10 vfdfbvkcvmm.org TCP 4084 > http ACK Seq=149 Ack=500 Win=16926 Len=0
Frame 43579 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4084 (4084), Dst Port: http (80), Seq: 149, Ack: 500, Len: 0
No. Time Source Destination Protocol Info
43600 2009-09-23 00:49:42.773528 192.168.1.10 vfdfbvkcvmm.org TCP lorica-out-sec > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43600 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: lorica-out-sec (4083), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43601 2009-09-23 00:49:42.773540 192.168.1.10 vfdfbvkcvmm.org TCP lorica-out > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43601 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: lorica-out (4082), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43674 2009-09-23 00:49:55.852942 192.168.1.10 tawddgbpsj.cn TCP drmsfsd > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43674 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: drmsfsd (4098), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43676 2009-09-23 00:49:56.142308 192.168.1.10 vfdfbvkcvmm.org TCP dpcp > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43676 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: dpcp (4099), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43678 2009-09-23 00:49:56.162973 192.168.1.10 vfdfbvkcvmm.org TCP igo-incognito > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43678 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: igo-incognito (4100), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43680 2009-09-23 00:49:56.214535 192.168.1.10 vfdfbvkcvmm.org TCP brlp-0 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43680 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: brlp-0 (4101), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43682 2009-09-23 00:49:56.229459 192.168.1.10 tawddgbpsj.cn TCP drmsfsd > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 43682 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: drmsfsd (4098), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
43683 2009-09-23 00:49:56.229492 192.168.1.10 tawddgbpsj.cn HTTP GET /search?q=0 HTTP/1.0
Frame 43683 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: drmsfsd (4098), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
43686 2009-09-23 00:49:56.327475 192.168.1.10 vfdfbvkcvmm.org TCP dpcp > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 43686 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: dpcp (4099), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
43687 2009-09-23 00:49:56.327543 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 43687 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: dpcp (4099), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
43689 2009-09-23 00:49:56.356549 192.168.1.10 vfdfbvkcvmm.org TCP igo-incognito > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 43689 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: igo-incognito (4100), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
43690 2009-09-23 00:49:56.356577 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 43690 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: igo-incognito (4100), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
43692 2009-09-23 00:49:56.401609 192.168.1.10 vfdfbvkcvmm.org TCP brlp-0 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 43692 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: brlp-0 (4101), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
43693 2009-09-23 00:49:56.401631 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 43693 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: brlp-0 (4101), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
43697 2009-09-23 00:49:56.515880 192.168.1.10 vfdfbvkcvmm.org TCP brlp-1 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43697 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: brlp-1 (4102), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43702 2009-09-23 00:49:56.551787 192.168.1.10 vfdfbvkcvmm.org TCP igo-incognito > http RST Seq=151 Win=0 Len=0
Frame 43702 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: igo-incognito (4100), Dst Port: http (80), Seq: 151, Len: 0
No. Time Source Destination Protocol Info
43711 2009-09-23 00:49:56.611003 192.168.1.10 tawddgbpsj.cn TCP drmsfsd > http ACK Seq=149 Ack=243 Win=17183 Len=0
Frame 43711 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: drmsfsd (4098), Dst Port: http (80), Seq: 149, Ack: 243, Len: 0
No. Time Source Destination Protocol Info
43712 2009-09-23 00:49:56.611128 192.168.1.10 tawddgbpsj.cn TCP drmsfsd > http RST, ACK Seq=149 Ack=243 Win=0 Len=0
Frame 43712 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: drmsfsd (4098), Dst Port: http (80), Seq: 149, Ack: 243, Len: 0
No. Time Source Destination Protocol Info
43715 2009-09-23 00:49:56.701422 192.168.1.10 vfdfbvkcvmm.org TCP brlp-1 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 43715 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: brlp-1 (4102), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
43716 2009-09-23 00:49:56.701501 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 43716 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: brlp-1 (4102), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
43820 2009-09-23 00:50:18.557813 192.168.1.10 vfdfbvkcvmm.org TCP hillrserv > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43820 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: hillrserv (4117), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43822 2009-09-23 00:50:18.563560 192.168.1.10 vfdfbvkcvmm.org TCP netscript > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43822 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: netscript (4118), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43824 2009-09-23 00:50:18.690386 192.168.1.10 vfdfbvkcvmm.org TCP assuria-slm > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43824 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: assuria-slm (4119), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43849 2009-09-23 00:50:21.600206 192.168.1.10 vfdfbvkcvmm.org TCP hillrserv > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43849 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: hillrserv (4117), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43850 2009-09-23 00:50:21.600225 192.168.1.10 vfdfbvkcvmm.org TCP netscript > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43850 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: netscript (4118), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43851 2009-09-23 00:50:21.600235 192.168.1.10 vfdfbvkcvmm.org TCP assuria-slm > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43851 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: assuria-slm (4119), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43879 2009-09-23 00:50:27.615597 192.168.1.10 vfdfbvkcvmm.org TCP netscript > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43879 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: netscript (4118), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43880 2009-09-23 00:50:27.615615 192.168.1.10 vfdfbvkcvmm.org TCP hillrserv > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43880 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: hillrserv (4117), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43881 2009-09-23 00:50:27.615625 192.168.1.10 vfdfbvkcvmm.org TCP assuria-slm > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43881 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: assuria-slm (4119), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43911 2009-09-23 00:50:34.474887 192.168.1.10 HSIB.home TCP nufw > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43911 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: HSIB.home (192.168.1.1) Transmission Control Protocol, Src Port: nufw (4128), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43922 2009-09-23 00:50:34.943422 192.168.1.10 HSIB.home TCP nufw > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43922 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: HSIB.home (192.168.1.1) Transmission Control Protocol, Src Port: nufw (4128), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43930 2009-09-23 00:50:35.490269 192.168.1.10 HSIB.home TCP nufw > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43930 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: HSIB.home (192.168.1.1) Transmission Control Protocol, Src Port: nufw (4128), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43950 2009-09-23 00:50:39.647027 192.168.1.10 vfdfbvkcvmm.org TCP cl-db-attach > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43950 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: cl-db-attach (4135), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43959 2009-09-23 00:50:40.757466 192.168.1.10 tawddgbpsj.cn TCP cl-db-remote > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43959 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: cl-db-remote (4137), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43966 2009-09-23 00:50:40.999250 192.168.1.10 vfdfbvkcvmm.org TCP nettest > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43966 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: nettest (4138), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43968 2009-09-23 00:50:41.098473 192.168.1.10 vfdfbvkcvmm.org TCP thrtx > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43968 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: thrtx (4139), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
43970 2009-09-23 00:50:41.133898 192.168.1.10 tawddgbpsj.cn TCP cl-db-remote > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 43970 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: cl-db-remote (4137), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
43971 2009-09-23 00:50:41.133928 192.168.1.10 tawddgbpsj.cn HTTP GET /search?q=0 HTTP/1.0
Frame 43971 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: cl-db-remote (4137), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
43978 2009-09-23 00:50:41.513211 192.168.1.10 tawddgbpsj.cn TCP cl-db-remote > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0
Frame 43978 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: cl-db-remote (4137), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0
No. Time Source Destination Protocol Info
43980 2009-09-23 00:50:41.513454 192.168.1.10 tawddgbpsj.cn TCP cl-db-remote > http RST, ACK Seq=150 Ack=242 Win=0 Len=0
Frame 43980 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: cl-db-remote (4137), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0
No. Time Source Destination Protocol Info
43989 2009-09-23 00:50:41.889796 192.168.1.10 tawddgbpsj.cn TCP cl-db-remote > http RST Seq=150 Win=0 Len=0
Frame 43989 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: cl-db-remote (4137), Dst Port: http (80), Seq: 150, Len: 0
No. Time Source Destination Protocol Info
43994 2009-09-23 00:50:42.599397 192.168.1.10 vfdfbvkcvmm.org TCP cl-db-attach > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 43994 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: cl-db-attach (4135), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44004 2009-09-23 00:50:43.911829 192.168.1.10 vfdfbvkcvmm.org TCP nettest > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44004 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: nettest (4138), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44005 2009-09-23 00:50:44.021221 192.168.1.10 vfdfbvkcvmm.org TCP thrtx > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44005 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: thrtx (4139), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44021 2009-09-23 00:50:48.614801 192.168.1.10 vfdfbvkcvmm.org TCP cl-db-attach > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44021 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: cl-db-attach (4135), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44031 2009-09-23 00:50:49.927244 192.168.1.10 vfdfbvkcvmm.org TCP nettest > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44031 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: nettest (4138), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44032 2009-09-23 00:50:50.036631 192.168.1.10 vfdfbvkcvmm.org TCP thrtx > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44032 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: thrtx (4139), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44034 2009-09-23 00:50:50.078669 192.168.1.10 vfdfbvkcvmm.org TCP nettest > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 44034 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: nettest (4138), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
44035 2009-09-23 00:50:50.078730 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 44035 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: nettest (4138), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
44106 2009-09-23 00:51:02.067407 192.168.1.10 vfdfbvkcvmm.org HTTP TCP Retransmission GET /search?q=0 HTTP/1.0
Frame 44106 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: nettest (4138), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
44107 2009-09-23 00:51:02.067854 192.168.1.10 vfdfbvkcvmm.org TCP stat-cc > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44107 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: stat-cc (4158), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44116 2009-09-23 00:51:03.178398 192.168.1.10 tawddgbpsj.cn TCP jini-discovery > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44116 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: jini-discovery (4160), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44121 2009-09-23 00:51:03.255998 192.168.1.10 vfdfbvkcvmm.org TCP omscontact > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44121 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: omscontact (4161), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44124 2009-09-23 00:51:03.475718 192.168.1.10 vfdfbvkcvmm.org TCP omstopology > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44124 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: omstopology (4162), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44126 2009-09-23 00:51:03.555311 192.168.1.10 vfdfbvkcvmm.org TCP silverpeakpeer > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44126 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: silverpeakpeer (4163), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44128 2009-09-23 00:51:03.556543 192.168.1.10 tawddgbpsj.cn TCP jini-discovery > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 44128 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: jini-discovery (4160), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
44129 2009-09-23 00:51:03.556620 192.168.1.10 tawddgbpsj.cn HTTP GET /search?q=0 HTTP/1.0
Frame 44129 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: jini-discovery (4160), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
44132 2009-09-23 00:51:03.749006 192.168.1.10 vfdfbvkcvmm.org TCP silverpeakpeer > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 44132 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: silverpeakpeer (4163), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
44133 2009-09-23 00:51:03.749057 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 44133 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: silverpeakpeer (4163), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
44141 2009-09-23 00:51:03.936634 192.168.1.10 tawddgbpsj.cn TCP jini-discovery > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0
Frame 44141 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: jini-discovery (4160), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0
No. Time Source Destination Protocol Info
44143 2009-09-23 00:51:03.936917 192.168.1.10 tawddgbpsj.cn TCP jini-discovery > http RST, ACK Seq=150 Ack=242 Win=0 Len=0
Frame 44143 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: jini-discovery (4160), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0
No. Time Source Destination Protocol Info
44150 2009-09-23 00:51:04.313121 192.168.1.10 tawddgbpsj.cn TCP jini-discovery > http RST Seq=150 Win=0 Len=0
Frame 44150 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: jini-discovery (4160), Dst Port: http (80), Seq: 150, Len: 0
No. Time Source Destination Protocol Info
44156 2009-09-23 00:51:05.020423 192.168.1.10 vfdfbvkcvmm.org TCP stat-cc > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44156 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: stat-cc (4158), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44162 2009-09-23 00:51:06.114110 192.168.1.10 vfdfbvkcvmm.org TCP omscontact > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44162 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: omscontact (4161), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44163 2009-09-23 00:51:06.442228 192.168.1.10 vfdfbvkcvmm.org TCP omstopology > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44163 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: omstopology (4162), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44165 2009-09-23 00:51:06.587280 192.168.1.10 vfdfbvkcvmm.org TCP omstopology > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 44165 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: omstopology (4162), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
44166 2009-09-23 00:51:06.587357 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 44166 (205 bytes on wire, 205 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: omstopology (4162), Dst Port: http (80), Seq: 1, Ack: 1, Len: 151 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
44169 2009-09-23 00:51:06.735909 192.168.1.10 vfdfbvkcvmm.org TCP omstopology > http FIN, ACK Seq=152 Ack=672 Win=16753 Len=0
Frame 44169 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: omstopology (4162), Dst Port: http (80), Seq: 152, Ack: 672, Len: 0
No. Time Source Destination Protocol Info
44171 2009-09-23 00:51:06.736232 192.168.1.10 vfdfbvkcvmm.org TCP omstopology > http ACK Seq=153 Ack=673 Win=16753 Len=0
Frame 44171 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: omstopology (4162), Dst Port: http (80), Seq: 153, Ack: 673, Len: 0
No. Time Source Destination Protocol Info
44189 2009-09-23 00:51:11.035831 192.168.1.10 vfdfbvkcvmm.org TCP stat-cc > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44189 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: stat-cc (4158), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44197 2009-09-23 00:51:12.129511 192.168.1.10 vfdfbvkcvmm.org TCP omscontact > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44197 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: omscontact (4161), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44260 2009-09-23 00:51:23.176347 192.168.1.10 vfdfbvkcvmm.org TCP pcptcpservice > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44260 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: pcptcpservice (4182), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44274 2009-09-23 00:51:25.646692 192.168.1.10 tawddgbpsj.cn TCP universe_suite > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44274 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: universe_suite (4184), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44275 2009-09-23 00:51:25.646791 192.168.1.10 tawddgbpsj.cn TCP wcpp > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44275 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: wcpp (4185), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44278 2009-09-23 00:51:25.865888 192.168.1.10 vfdfbvkcvmm.org TCP boxbackupstore > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44278 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: boxbackupstore (4186), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44279 2009-09-23 00:51:26.019606 192.168.1.10 vfdfbvkcvmm.org HTTP TCP Retransmission GET /search?q=0 HTTP/1.0
Frame 44279 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: nettest (4138), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
44281 2009-09-23 00:51:26.024501 192.168.1.10 tawddgbpsj.cn TCP universe_suite > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 44281 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: universe_suite (4184), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
44282 2009-09-23 00:51:26.024576 192.168.1.10 tawddgbpsj.cn HTTP GET /search?q=0 HTTP/1.0
Frame 44282 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: universe_suite (4184), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
44284 2009-09-23 00:51:26.025283 192.168.1.10 tawddgbpsj.cn TCP wcpp > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 44284 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: wcpp (4185), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
44285 2009-09-23 00:51:26.025337 192.168.1.10 tawddgbpsj.cn HTTP GET /search?q=0 HTTP/1.0
Frame 44285 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: wcpp (4185), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
44287 2009-09-23 00:51:26.047861 192.168.1.10 vfdfbvkcvmm.org TCP csc_proxy > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44287 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: csc_proxy (4187), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44289 2009-09-23 00:51:26.050761 192.168.1.10 vfdfbvkcvmm.org TCP boxbackupstore > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 44289 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: boxbackupstore (4186), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
44290 2009-09-23 00:51:26.050795 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 44290 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: boxbackupstore (4186), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
44291 2009-09-23 00:51:26.128972 192.168.1.10 vfdfbvkcvmm.org TCP pcptcpservice > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44291 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: pcptcpservice (4182), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44298 2009-09-23 00:51:26.404705 192.168.1.10 tawddgbpsj.cn TCP universe_suite > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0
Frame 44298 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: universe_suite (4184), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0
No. Time Source Destination Protocol Info
44300 2009-09-23 00:51:26.405004 192.168.1.10 tawddgbpsj.cn TCP universe_suite > http RST, ACK Seq=150 Ack=242 Win=0 Len=0
Frame 44300 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: universe_suite (4184), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0
No. Time Source Destination Protocol Info
44303 2009-09-23 00:51:26.407284 192.168.1.10 tawddgbpsj.cn TCP wcpp > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0
Frame 44303 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: wcpp (4185), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0
No. Time Source Destination Protocol Info
44305 2009-09-23 00:51:26.407583 192.168.1.10 tawddgbpsj.cn TCP wcpp > http RST, ACK Seq=150 Ack=242 Win=0 Len=0
Frame 44305 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: wcpp (4185), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0
No. Time Source Destination Protocol Info
44312 2009-09-23 00:51:26.781313 192.168.1.10 tawddgbpsj.cn TCP universe_suite > http RST Seq=150 Win=0 Len=0
Frame 44312 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: universe_suite (4184), Dst Port: http (80), Seq: 150, Len: 0
No. Time Source Destination Protocol Info
44314 2009-09-23 00:51:26.784435 192.168.1.10 tawddgbpsj.cn TCP wcpp > http RST Seq=150 Win=0 Len=0
Frame 44314 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: wcpp (4185), Dst Port: http (80), Seq: 150, Len: 0
No. Time Source Destination Protocol Info
44335 2009-09-23 00:51:29.082027 192.168.1.10 vfdfbvkcvmm.org TCP csc_proxy > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44335 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: csc_proxy (4187), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44349 2009-09-23 00:51:32.144404 192.168.1.10 vfdfbvkcvmm.org TCP pcptcpservice > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44349 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: pcptcpservice (4182), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44361 2009-09-23 00:51:35.097395 192.168.1.10 vfdfbvkcvmm.org TCP csc_proxy > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44361 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: csc_proxy (4187), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44429 2009-09-23 00:51:45.458312 192.168.1.10 192.168.1.20 TCP 4205 > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44429 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 192.168.1.20 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: 4205 (4205), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44431 2009-09-23 00:51:45.831345 192.168.1.10 192.168.1.20 TCP 4205 > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44431 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 192.168.1.20 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: 4205 (4205), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44434 2009-09-23 00:51:46.362582 192.168.1.10 192.168.1.20 TCP 4205 > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44434 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 192.168.1.20 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: 4205 (4205), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44447 2009-09-23 00:51:48.067505 192.168.1.10 tawddgbpsj.cn TCP 4208 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44447 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4208 (4208), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44449 2009-09-23 00:51:48.308853 192.168.1.10 vfdfbvkcvmm.org TCP 4209 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44449 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4209 (4209), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44451 2009-09-23 00:51:48.384500 192.168.1.10 vfdfbvkcvmm.org TCP 4210 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44451 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4210 (4210), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44453 2009-09-23 00:51:48.444036 192.168.1.10 tawddgbpsj.cn TCP 4208 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 44453 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4208 (4208), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
44454 2009-09-23 00:51:48.444110 192.168.1.10 tawddgbpsj.cn HTTP GET /search?q=0 HTTP/1.0
Frame 44454 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4208 (4208), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
44456 2009-09-23 00:51:48.483037 192.168.1.10 vfdfbvkcvmm.org TCP 4211 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44456 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4211 (4211), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44458 2009-09-23 00:51:48.494286 192.168.1.10 vfdfbvkcvmm.org TCP 4209 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 44458 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4209 (4209), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
44459 2009-09-23 00:51:48.508042 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 44459 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4209 (4209), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
44467 2009-09-23 00:51:48.823206 192.168.1.10 tawddgbpsj.cn TCP 4208 > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0
Frame 44467 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4208 (4208), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0
No. Time Source Destination Protocol Info
44469 2009-09-23 00:51:48.823457 192.168.1.10 tawddgbpsj.cn TCP 4208 > http RST, ACK Seq=150 Ack=242 Win=0 Len=0
Frame 44469 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4208 (4208), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0
No. Time Source Destination Protocol Info
44477 2009-09-23 00:51:49.198968 192.168.1.10 tawddgbpsj.cn TCP 4208 > http RST Seq=150 Win=0 Len=0
Frame 44477 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4208 (4208), Dst Port: http (80), Seq: 150, Len: 0
No. Time Source Destination Protocol Info
44496 2009-09-23 00:51:51.393679 192.168.1.10 vfdfbvkcvmm.org TCP 4210 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44496 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4210 (4210), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44497 2009-09-23 00:51:51.393703 192.168.1.10 vfdfbvkcvmm.org TCP 4211 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44497 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4211 (4211), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44520 2009-09-23 00:51:57.409031 192.168.1.10 vfdfbvkcvmm.org TCP 4211 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44520 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4211 (4211), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44521 2009-09-23 00:51:57.409042 192.168.1.10 vfdfbvkcvmm.org TCP 4210 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44521 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4210 (4210), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44597 2009-09-23 00:52:10.505088 192.168.1.10 tawddgbpsj.cn TCP 4234 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44597 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4234 (4234), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44601 2009-09-23 00:52:10.684251 192.168.1.10 vfdfbvkcvmm.org TCP 4235 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44601 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4235 (4235), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44603 2009-09-23 00:52:10.746566 192.168.1.10 vfdfbvkcvmm.org TCP 4236 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44603 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: 4236 (4236), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44605 2009-09-23 00:52:10.765352 192.168.1.10 vfdfbvkcvmm.org TCP 4237 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44605 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4237 (4237), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44607 2009-09-23 00:52:10.882962 192.168.1.10 tawddgbpsj.cn TCP 4234 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 44607 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4234 (4234), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
44608 2009-09-23 00:52:10.883057 192.168.1.10 tawddgbpsj.cn HTTP GET /search?q=0 HTTP/1.0
Frame 44608 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4234 (4234), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
44610 2009-09-23 00:52:10.932946 192.168.1.10 vfdfbvkcvmm.org TCP 4238 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44610 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4238 (4238), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44612 2009-09-23 00:52:10.951394 192.168.1.10 vfdfbvkcvmm.org TCP 4237 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 44612 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4237 (4237), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
44613 2009-09-23 00:52:10.951433 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 44613 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4237 (4237), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
44621 2009-09-23 00:52:11.262181 192.168.1.10 tawddgbpsj.cn TCP 4234 > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0
Frame 44621 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4234 (4234), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0
No. Time Source Destination Protocol Info
44623 2009-09-23 00:52:11.262506 192.168.1.10 tawddgbpsj.cn TCP 4234 > http RST, ACK Seq=150 Ack=242 Win=0 Len=0
Frame 44623 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4234 (4234), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0
No. Time Source Destination Protocol Info
44631 2009-09-23 00:52:11.639011 192.168.1.10 tawddgbpsj.cn TCP 4234 > http RST Seq=150 Win=0 Len=0
Frame 44631 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4234 (4234), Dst Port: http (80), Seq: 150, Len: 0
No. Time Source Destination Protocol Info
44645 2009-09-23 00:52:13.705317 192.168.1.10 vfdfbvkcvmm.org TCP 4235 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44645 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4235 (4235), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44646 2009-09-23 00:52:13.705337 192.168.1.10 vfdfbvkcvmm.org TCP 4236 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44646 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: 4236 (4236), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44647 2009-09-23 00:52:13.814682 192.168.1.10 vfdfbvkcvmm.org TCP 4238 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44647 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4238 (4238), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44648 2009-09-23 00:52:14.033430 192.168.1.10 vfdfbvkcvmm.org HTTP TCP Retransmission GET /search?q=0 HTTP/1.0
Frame 44648 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: nettest (4138), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
44673 2009-09-23 00:52:19.736338 192.168.1.10 vfdfbvkcvmm.org TCP 4236 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44673 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: 4236 (4236), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44674 2009-09-23 00:52:19.736361 192.168.1.10 vfdfbvkcvmm.org TCP 4235 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44674 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4235 (4235), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44675 2009-09-23 00:52:19.830094 192.168.1.10 vfdfbvkcvmm.org TCP 4238 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44675 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4238 (4238), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44755 2009-09-23 00:52:33.198587 192.168.1.10 vfdfbvkcvmm.org TCP 4259 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44755 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4259 (4259), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44757 2009-09-23 00:52:33.208785 192.168.1.10 vfdfbvkcvmm.org TCP 4260 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44757 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4260 (4260), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44759 2009-09-23 00:52:33.233769 192.168.1.10 vfdfbvkcvmm.org TCP 4261 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44759 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4261 (4261), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44762 2009-09-23 00:52:33.336327 192.168.1.10 vfdfbvkcvmm.org TCP 4262 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44762 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4262 (4262), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44764 2009-09-23 00:52:33.521546 192.168.1.10 vfdfbvkcvmm.org TCP 4262 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 44764 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4262 (4262), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
44765 2009-09-23 00:52:33.521637 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 44765 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4262 (4262), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
44788 2009-09-23 00:52:36.126305 192.168.1.10 vfdfbvkcvmm.org TCP 4259 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44788 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4259 (4259), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44789 2009-09-23 00:52:36.126311 192.168.1.10 vfdfbvkcvmm.org TCP 4261 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44789 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4261 (4261), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44790 2009-09-23 00:52:36.126318 192.168.1.10 vfdfbvkcvmm.org TCP 4260 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44790 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4260 (4260), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44811 2009-09-23 00:52:42.141722 192.168.1.10 vfdfbvkcvmm.org TCP 4261 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44811 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4261 (4261), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44812 2009-09-23 00:52:42.141816 192.168.1.10 vfdfbvkcvmm.org TCP 4260 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44812 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4260 (4260), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44813 2009-09-23 00:52:42.141839 192.168.1.10 vfdfbvkcvmm.org TCP 4259 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44813 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4259 (4259), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44873 2009-09-23 00:52:54.173246 192.168.1.10 vfdfbvkcvmm.org TCP 4281 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44873 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4281 (4281), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44883 2009-09-23 00:52:55.408992 192.168.1.10 tawddgbpsj.cn TCP 4282 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44883 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4282 (4282), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44884 2009-09-23 00:52:55.409065 192.168.1.10 tawddgbpsj.cn TCP 4283 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44884 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4283 (4283), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44886 2009-09-23 00:52:55.577995 192.168.1.10 vfdfbvkcvmm.org TCP 4284 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44886 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: 4284 (4284), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44888 2009-09-23 00:52:55.655130 192.168.1.10 vfdfbvkcvmm.org TCP 4285 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44888 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4285 (4285), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44891 2009-09-23 00:52:55.677126 192.168.1.10 vfdfbvkcvmm.org TCP 4286 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44891 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4286 (4286), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44893 2009-09-23 00:52:55.696123 192.168.1.10 vfdfbvkcvmm.org TCP 4287 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44893 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4287 (4287), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44895 2009-09-23 00:52:55.785485 192.168.1.10 tawddgbpsj.cn TCP 4282 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 44895 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4282 (4282), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
44896 2009-09-23 00:52:55.785536 192.168.1.10 tawddgbpsj.cn HTTP GET /search?q=0 HTTP/1.0
Frame 44896 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4282 (4282), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
44898 2009-09-23 00:52:55.787105 192.168.1.10 tawddgbpsj.cn TCP 4283 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 44898 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4283 (4283), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
44899 2009-09-23 00:52:55.787144 192.168.1.10 tawddgbpsj.cn HTTP GET /search?q=0 HTTP/1.0
Frame 44899 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4283 (4283), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
44901 2009-09-23 00:52:55.841577 192.168.1.10 vfdfbvkcvmm.org TCP 4287 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 44901 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4287 (4287), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
44902 2009-09-23 00:52:55.841637 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 44902 (205 bytes on wire, 205 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4287 (4287), Dst Port: http (80), Seq: 1, Ack: 1, Len: 151 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
44907 2009-09-23 00:52:55.990066 192.168.1.10 vfdfbvkcvmm.org TCP 4287 > http FIN, ACK Seq=152 Ack=672 Win=16753 Len=0
Frame 44907 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4287 (4287), Dst Port: http (80), Seq: 152, Ack: 672, Len: 0
No. Time Source Destination Protocol Info
44909 2009-09-23 00:52:55.990380 192.168.1.10 vfdfbvkcvmm.org TCP 4287 > http ACK Seq=153 Ack=673 Win=16753 Len=0
Frame 44909 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4287 (4287), Dst Port: http (80), Seq: 153, Ack: 673, Len: 0
No. Time Source Destination Protocol Info
44913 2009-09-23 00:52:56.164950 192.168.1.10 tawddgbpsj.cn TCP 4282 > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0
Frame 44913 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4282 (4282), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0
No. Time Source Destination Protocol Info
44914 2009-09-23 00:52:56.165134 192.168.1.10 tawddgbpsj.cn TCP 4288 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44914 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4288 (4288), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44916 2009-09-23 00:52:56.165249 192.168.1.10 tawddgbpsj.cn TCP 4282 > http RST, ACK Seq=150 Ack=242 Win=0 Len=0
Frame 44916 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4282 (4282), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0
No. Time Source Destination Protocol Info
44919 2009-09-23 00:52:56.169500 192.168.1.10 tawddgbpsj.cn TCP 4283 > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0
Frame 44919 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4283 (4283), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0
No. Time Source Destination Protocol Info
44920 2009-09-23 00:52:56.169720 192.168.1.10 tawddgbpsj.cn TCP 4289 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44920 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4289 (4289), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44922 2009-09-23 00:52:56.169825 192.168.1.10 tawddgbpsj.cn TCP 4283 > http RST, ACK Seq=150 Ack=242 Win=0 Len=0
Frame 44922 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4283 (4283), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0
No. Time Source Destination Protocol Info
44931 2009-09-23 00:52:56.540454 192.168.1.10 tawddgbpsj.cn TCP 4282 > http RST Seq=150 Win=0 Len=0
Frame 44931 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4282 (4282), Dst Port: http (80), Seq: 150, Len: 0
No. Time Source Destination Protocol Info
44933 2009-09-23 00:52:56.542258 192.168.1.10 tawddgbpsj.cn TCP 4288 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 44933 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4288 (4288), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
44934 2009-09-23 00:52:56.542305 192.168.1.10 tawddgbpsj.cn HTTP GET /search?q=0 HTTP/1.0
Frame 44934 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4288 (4288), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
44936 2009-09-23 00:52:56.546514 192.168.1.10 tawddgbpsj.cn TCP 4283 > http RST Seq=150 Win=0 Len=0
Frame 44936 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4283 (4283), Dst Port: http (80), Seq: 150, Len: 0
No. Time Source Destination Protocol Info
44938 2009-09-23 00:52:56.548031 192.168.1.10 tawddgbpsj.cn TCP 4289 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 44938 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4289 (4289), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
44939 2009-09-23 00:52:56.548066 192.168.1.10 tawddgbpsj.cn HTTP GET /search?q=0 HTTP/1.0
Frame 44939 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4289 (4289), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
44942 2009-09-23 00:52:56.921770 192.168.1.10 tawddgbpsj.cn TCP 4288 > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0
Frame 44942 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4288 (4288), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0
No. Time Source Destination Protocol Info
44944 2009-09-23 00:52:56.922047 192.168.1.10 tawddgbpsj.cn TCP 4288 > http RST, ACK Seq=150 Ack=242 Win=0 Len=0
Frame 44944 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4288 (4288), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0
No. Time Source Destination Protocol Info
44947 2009-09-23 00:52:56.927579 192.168.1.10 tawddgbpsj.cn TCP 4289 > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0
Frame 44947 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4289 (4289), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0
No. Time Source Destination Protocol Info
44949 2009-09-23 00:52:56.927893 192.168.1.10 tawddgbpsj.cn TCP 4289 > http RST, ACK Seq=150 Ack=242 Win=0 Len=0
Frame 44949 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4289 (4289), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0
No. Time Source Destination Protocol Info
44950 2009-09-23 00:52:57.141131 192.168.1.10 vfdfbvkcvmm.org TCP 4281 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44950 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4281 (4281), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44953 2009-09-23 00:52:57.298062 192.168.1.10 tawddgbpsj.cn TCP 4288 > http RST Seq=150 Win=0 Len=0
Frame 44953 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4288 (4288), Dst Port: http (80), Seq: 150, Len: 0
No. Time Source Destination Protocol Info
44955 2009-09-23 00:52:57.304108 192.168.1.10 tawddgbpsj.cn TCP 4289 > http RST Seq=150 Win=0 Len=0
Frame 44955 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4289 (4289), Dst Port: http (80), Seq: 150, Len: 0
No. Time Source Destination Protocol Info
44959 2009-09-23 00:52:58.547333 192.168.1.10 vfdfbvkcvmm.org TCP 4284 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44959 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: 4284 (4284), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44960 2009-09-23 00:52:58.656702 192.168.1.10 vfdfbvkcvmm.org TCP 4286 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44960 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4286 (4286), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44961 2009-09-23 00:52:58.656761 192.168.1.10 vfdfbvkcvmm.org TCP 4285 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44961 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4285 (4285), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44964 2009-09-23 00:52:58.823813 192.168.1.10 vfdfbvkcvmm.org TCP 4286 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 44964 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4286 (4286), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
44965 2009-09-23 00:52:58.823892 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 44965 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4286 (4286), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
44969 2009-09-23 00:52:59.147435 192.168.1.10 vfdfbvkcvmm.org TCP 4286 > http ACK Seq=151 Ack=19 Win=17407 Len=0
Frame 44969 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4286 (4286), Dst Port: http (80), Seq: 151, Ack: 19, Len: 0
No. Time Source Destination Protocol Info
44970 2009-09-23 00:52:59.147461 192.168.1.10 vfdfbvkcvmm.org TCP 4286 > http FIN, ACK Seq=151 Ack=19 Win=17407 Len=0
Frame 44970 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4286 (4286), Dst Port: http (80), Seq: 151, Ack: 19, Len: 0
No. Time Source Destination Protocol Info
44987 2009-09-23 00:53:03.250319 192.168.1.10 vfdfbvkcvmm.org TCP 4281 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44987 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4281 (4281), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44993 2009-09-23 00:53:04.562861 192.168.1.10 vfdfbvkcvmm.org TCP 4284 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44993 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: 4284 (4284), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
44995 2009-09-23 00:53:04.672138 192.168.1.10 vfdfbvkcvmm.org TCP 4285 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 44995 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4285 (4285), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
45043 2009-09-23 00:53:17.658487 192.168.1.10 tawddgbpsj.cn TCP dserver > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 45043 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: dserver (4309), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
45045 2009-09-23 00:53:17.884495 192.168.1.10 vfdfbvkcvmm.org TCP mirrtex > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 45045 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: mirrtex (4310), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
45047 2009-09-23 00:53:17.895632 192.168.1.10 vfdfbvkcvmm.org TCP 4311 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 45047 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4311 (4311), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
45049 2009-09-23 00:53:17.920102 192.168.1.10 vfdfbvkcvmm.org TCP 4312 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 45049 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: 4312 (4312), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
45051 2009-09-23 00:53:17.945754 192.168.1.10 vfdfbvkcvmm.org TCP 4313 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 45051 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4313 (4313), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
45053 2009-09-23 00:53:18.035382 192.168.1.10 tawddgbpsj.cn TCP dserver > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 45053 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: dserver (4309), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
45054 2009-09-23 00:53:18.035430 192.168.1.10 tawddgbpsj.cn HTTP GET /search?q=0 HTTP/1.0
Frame 45054 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: dserver (4309), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
45056 2009-09-23 00:53:18.042312 192.168.1.10 vfdfbvkcvmm.org TCP 4315 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 45056 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4315 (4315), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
45058 2009-09-23 00:53:18.077693 192.168.1.10 vfdfbvkcvmm.org TCP mirrtex > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 45058 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: mirrtex (4310), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
45059 2009-09-23 00:53:18.077756 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 45059 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: mirrtex (4310), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
45061 2009-09-23 00:53:18.131282 192.168.1.10 vfdfbvkcvmm.org TCP 4313 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 45061 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4313 (4313), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
45062 2009-09-23 00:53:18.131323 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 45062 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4313 (4313), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
45065 2009-09-23 00:53:18.229535 192.168.1.10 vfdfbvkcvmm.org TCP 4315 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 45065 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4315 (4315), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
45066 2009-09-23 00:53:18.229574 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 45066 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4315 (4315), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
45075 2009-09-23 00:53:18.421914 192.168.1.10 tawddgbpsj.cn TCP dserver > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0
Frame 45075 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: dserver (4309), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0
No. Time Source Destination Protocol Info
45077 2009-09-23 00:53:18.422269 192.168.1.10 tawddgbpsj.cn TCP dserver > http RST, ACK Seq=150 Ack=242 Win=0 Len=0
Frame 45077 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: dserver (4309), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0
No. Time Source Destination Protocol Info
45084 2009-09-23 00:53:18.798721 192.168.1.10 tawddgbpsj.cn TCP dserver > http RST Seq=150 Win=0 Len=0
Frame 45084 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: dserver (4309), Dst Port: http (80), Seq: 150, Len: 0
No. Time Source Destination Protocol Info
45093 2009-09-23 00:53:20.858992 192.168.1.10 vfdfbvkcvmm.org TCP 4311 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 45093 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4311 (4311), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
45094 2009-09-23 00:53:20.968412 192.168.1.10 vfdfbvkcvmm.org TCP 4312 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 45094 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: 4312 (4312), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
45116 2009-09-23 00:53:26.874379 192.168.1.10 vfdfbvkcvmm.org TCP 4311 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 45116 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4311 (4311), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
45118 2009-09-23 00:53:26.922329 192.168.1.10 vfdfbvkcvmm.org TCP 4311 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 45118 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4311 (4311), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
45119 2009-09-23 00:53:26.922408 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 45119 (201 bytes on wire, 201 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4311 (4311), Dst Port: http (80), Seq: 1, Ack: 1, Len: 147 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
45122 2009-09-23 00:53:26.974235 192.168.1.10 vfdfbvkcvmm.org TCP 4311 > http FIN, ACK Seq=148 Ack=499 Win=16926 Len=0
Frame 45122 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4311 (4311), Dst Port: http (80), Seq: 148, Ack: 499, Len: 0
No. Time Source Destination Protocol Info
45124 2009-09-23 00:53:26.974607 192.168.1.10 vfdfbvkcvmm.org TCP 4311 > http ACK Seq=149 Ack=500 Win=16926 Len=0
Frame 45124 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4311 (4311), Dst Port: http (80), Seq: 149, Ack: 500, Len: 0
No. Time Source Destination Protocol Info
45125 2009-09-23 00:53:26.983746 192.168.1.10 vfdfbvkcvmm.org TCP 4312 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 45125 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: 4312 (4312), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
45197 2009-09-23 00:53:40.298844 192.168.1.10 vfdfbvkcvmm.org TCP 4334 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 45197 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4334 (4334), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
45199 2009-09-23 00:53:40.313300 192.168.1.10 vfdfbvkcvmm.org TCP 4335 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 45199 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4335 (4335), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
45202 2009-09-23 00:53:40.339687 192.168.1.10 vfdfbvkcvmm.org TCP 4336 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 45202 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4336 (4336), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
45204 2009-09-23 00:53:40.468390 192.168.1.10 vfdfbvkcvmm.org TCP 4337 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 45204 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4337 (4337), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
45206 2009-09-23 00:53:40.492675 192.168.1.10 vfdfbvkcvmm.org TCP 4334 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 45206 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4334 (4334), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
45207 2009-09-23 00:53:40.492727 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 45207 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4334 (4334), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
45209 2009-09-23 00:53:40.526176 192.168.1.10 vfdfbvkcvmm.org TCP 4336 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 45209 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4336 (4336), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
45210 2009-09-23 00:53:40.526210 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 45210 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4336 (4336), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
45212 2009-09-23 00:53:40.661530 192.168.1.10 vfdfbvkcvmm.org TCP 4337 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 45212 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4337 (4337), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
45213 2009-09-23 00:53:40.661599 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 45213 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4337 (4337), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
45239 2009-09-23 00:53:43.280030 192.168.1.10 vfdfbvkcvmm.org TCP 4335 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 45239 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4335 (4335), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
45266 2009-09-23 00:53:49.200944 192.168.1.10 vfdfbvkcvmm.org TCP 4335 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 45266 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4335 (4335), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
46991 2009-09-23 01:06:46.406647 192.168.1.10 192.168.1.240 TCP geniuslm > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 46991 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 192.168.1.240 (00:08:da:51:03:d1) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.240 (192.168.1.240) Transmission Control Protocol, Src Port: geniuslm (3005), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
46996 2009-09-23 01:06:49.437631 192.168.1.10 192.168.1.240 TCP geniuslm > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 46996 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 192.168.1.240 (00:08:da:51:03:d1) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.240 (192.168.1.240) Transmission Control Protocol, Src Port: geniuslm (3005), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
50457 2009-09-23 01:41:00.682940 192.168.1.20 192.168.1.10 TCP tr-rsrb-p1 > microsoft-ds SYN Seq=0 Win=65535 Len=0 MSS=1460
Frame 50457 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: 192.168.1.20 (00:01:02:1d:42:a7), Dst: Dell_2e:9e:54 (00:1e:c9:2e:9e:54) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 192.168.1.10 (192.168.1.10) Transmission Control Protocol, Src Port: tr-rsrb-p1 (1987), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
50459 2009-09-23 01:41:00.683155 192.168.1.20 192.168.1.10 TCP tr-rsrb-p1 > microsoft-ds ACK Seq=1 Ack=1 Win=65535 Len=0
Frame 50459 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: 192.168.1.20 (00:01:02:1d:42:a7), Dst: Dell_2e:9e:54 (00:1e:c9:2e:9e:54) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 192.168.1.10 (192.168.1.10) Transmission Control Protocol, Src Port: tr-rsrb-p1 (1987), Dst Port: microsoft-ds (445), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
50460 2009-09-23 01:41:00.683282 192.168.1.20 192.168.1.10 SMB Negotiate Protocol Request
Frame 50460 (105 bytes on wire, 105 bytes captured) Ethernet II, Src: 192.168.1.20 (00:01:02:1d:42:a7), Dst: Dell_2e:9e:54 (00:1e:c9:2e:9e:54) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 192.168.1.10 (192.168.1.10) Transmission Control Protocol, Src Port: tr-rsrb-p1 (1987), Dst Port: microsoft-ds (445), Seq: 1, Ack: 1, Len: 51 NetBIOS Session Service SMB (Server Message Block Protocol)
No. Time Source Destination Protocol Info
50462 2009-09-23 01:41:00.683580 192.168.1.20 192.168.1.10 SMB Session Setup AndX Request, User: anonymous
Frame 50462 (131 bytes on wire, 131 bytes captured) Ethernet II, Src: 192.168.1.20 (00:01:02:1d:42:a7), Dst: Dell_2e:9e:54 (00:1e:c9:2e:9e:54) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 192.168.1.10 (192.168.1.10) Transmission Control Protocol, Src Port: tr-rsrb-p1 (1987), Dst Port: microsoft-ds (445), Seq: 52, Ack: 134, Len: 77 NetBIOS Session Service SMB (Server Message Block Protocol)
No. Time Source Destination Protocol Info
50464 2009-09-23 01:41:00.683854 192.168.1.20 192.168.1.10 TCP tr-rsrb-p1 > microsoft-ds FIN, ACK Seq=129 Ack=238 Win=65298 Len=0
Frame 50464 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: 192.168.1.20 (00:01:02:1d:42:a7), Dst: Dell_2e:9e:54 (00:1e:c9:2e:9e:54) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 192.168.1.10 (192.168.1.10) Transmission Control Protocol, Src Port: tr-rsrb-p1 (1987), Dst Port: microsoft-ds (445), Seq: 129, Ack: 238, Len: 0
No. Time Source Destination Protocol Info
50466 2009-09-23 01:41:00.684070 192.168.1.20 192.168.1.10 TCP tr-rsrb-p1 > microsoft-ds ACK Seq=130 Ack=239 Win=65298 Len=0
Frame 50466 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: 192.168.1.20 (00:01:02:1d:42:a7), Dst: Dell_2e:9e:54 (00:1e:c9:2e:9e:54) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 192.168.1.10 (192.168.1.10) Transmission Control Protocol, Src Port: tr-rsrb-p1 (1987), Dst Port: microsoft-ds (445), Seq: 130, Ack: 239, Len: 0
No. Time Source Destination Protocol Info
50467 2009-09-23 01:41:00.701836 192.168.1.20 192.168.1.10 TCP tr-rsrb-p2 > http SYN Seq=0 Win=65535 Len=0 MSS=1460
Frame 50467 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: 192.168.1.20 (00:01:02:1d:42:a7), Dst: Dell_2e:9e:54 (00:1e:c9:2e:9e:54) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 192.168.1.10 (192.168.1.10) Transmission Control Protocol, Src Port: tr-rsrb-p2 (1988), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
50470 2009-09-23 01:41:01.040810 192.168.1.20 192.168.1.10 TCP tr-rsrb-p2 > http SYN Seq=0 Win=65535 Len=0 MSS=1460
Frame 50470 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: 192.168.1.20 (00:01:02:1d:42:a7), Dst: Dell_2e:9e:54 (00:1e:c9:2e:9e:54) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 192.168.1.10 (192.168.1.10) Transmission Control Protocol, Src Port: tr-rsrb-p2 (1988), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
50473 2009-09-23 01:41:01.587640 192.168.1.20 192.168.1.10 TCP tr-rsrb-p2 > http SYN Seq=0 Win=65535 Len=0 MSS=1460
Frame 50473 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: 192.168.1.20 (00:01:02:1d:42:a7), Dst: Dell_2e:9e:54 (00:1e:c9:2e:9e:54) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 192.168.1.10 (192.168.1.10) Transmission Control Protocol, Src Port: tr-rsrb-p2 (1988), Dst Port: http (80), Seq: 0, Len: 0
mardi 22 septembre 2009
Par Marc Blanchard [Virus Docteur], mardi 22 septembre 2009 à 20:57 :: Epidemiology - english section -
XP Computer:
At 00:28:25, a file was created on the XP computers as Malicious Application Probe notifies:
Robotization MAP on hybrid network has detected a suspicious activity :
Date : Tue-22-Sep-2009_00_28_25
Suspicious file : c:\windows\system32\LZDRXJMDKFKAHA
This file contains the complete list of all the files of the hard drive. But what i can say after analysis that this list doesn't contain the Windows structure.
This file disapeared 30 seconds after its creation.
On the Windows 2003:
Confiker continues their jobs on the stabilized plateform as the following report on Windows Server 2003:
No. Time Source Destination Protocol Info
15 2009-09-22 21:40:38.624951 192.168.1.10 vfdfbvkcvmm.org TCP 4707 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 15 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4707 (4707), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
16 2009-09-22 21:40:38.718696 192.168.1.10 vfdfbvkcvmm.org TCP 4708 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 16 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4708 (4708), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
18 2009-09-22 21:40:38.937446 192.168.1.10 vfdfbvkcvmm.org TCP 4710 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 18 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4710 (4710), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
35 2009-09-22 21:40:44.734145 192.168.1.10 vfdfbvkcvmm.org TCP 4707 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 35 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4707 (4707), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
36 2009-09-22 21:40:44.734167 192.168.1.10 vfdfbvkcvmm.org TCP 4708 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 36 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4708 (4708), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
38 2009-09-22 21:40:44.952860 192.168.1.10 vfdfbvkcvmm.org TCP 4710 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 38 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4710 (4710), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
85 2009-09-22 21:40:56.780982 192.168.1.10 vfdfbvkcvmm.org TCP 4724 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 85 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4724 (4724), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
96 2009-09-22 21:40:57.954241 192.168.1.10 tawddgbpsj.cn TCP 4726 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 96 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4726 (4726), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
98 2009-09-22 21:40:58.106610 192.168.1.10 vfdfbvkcvmm.org TCP 4727 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 98 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4727 (4727), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
100 2009-09-22 21:40:58.193877 192.168.1.10 vfdfbvkcvmm.org TCP capmux > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 100 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: capmux (4728), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
103 2009-09-22 21:40:58.299865 192.168.1.10 vfdfbvkcvmm.org TCP 4727 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 103 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4727 (4727), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
104 2009-09-22 21:40:58.299919 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 104 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4727 (4727), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
106 2009-09-22 21:40:58.331829 192.168.1.10 tawddgbpsj.cn TCP 4726 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 106 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4726 (4726), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
107 2009-09-22 21:40:58.331883 192.168.1.10 tawddgbpsj.cn HTTP GET /search?q=0 HTTP/1.0
Frame 107 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4726 (4726), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
109 2009-09-22 21:40:58.352573 192.168.1.10 vfdfbvkcvmm.org TCP 4729 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 109 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4729 (4729), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
115 2009-09-22 21:40:58.731420 192.168.1.10 tawddgbpsj.cn TCP 4726 > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0
Frame 115 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4726 (4726), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0
No. Time Source Destination Protocol Info
117 2009-09-22 21:40:58.731723 192.168.1.10 tawddgbpsj.cn TCP 4726 > http RST, ACK Seq=150 Ack=242 Win=0 Len=0
Frame 117 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4726 (4726), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0
No. Time Source Destination Protocol Info
125 2009-09-22 21:40:59.108453 192.168.1.10 tawddgbpsj.cn TCP 4726 > http RST Seq=150 Win=0 Len=0
Frame 125 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4726 (4726), Dst Port: http (80), Seq: 150, Len: 0
No. Time Source Destination Protocol Info
130 2009-09-22 21:40:59.827278 192.168.1.10 vfdfbvkcvmm.org TCP 4724 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 130 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4724 (4724), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
139 2009-09-22 21:41:01.139765 192.168.1.10 vfdfbvkcvmm.org TCP capmux > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 139 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: capmux (4728), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
141 2009-09-22 21:41:01.249130 192.168.1.10 vfdfbvkcvmm.org TCP 4729 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 141 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4729 (4729), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
158 2009-09-22 21:41:05.842697 192.168.1.10 vfdfbvkcvmm.org TCP 4724 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 158 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4724 (4724), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
167 2009-09-22 21:41:07.155138 192.168.1.10 vfdfbvkcvmm.org TCP capmux > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 167 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: capmux (4728), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
169 2009-09-22 21:41:07.264501 192.168.1.10 vfdfbvkcvmm.org TCP 4729 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 169 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4729 (4729), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
239 2009-09-22 21:41:20.628256 192.168.1.10 vfdfbvkcvmm.org TCP openhpid > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 239 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: openhpid (4743), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
241 2009-09-22 21:41:20.655744 192.168.1.10 vfdfbvkcvmm.org TCP ifsp > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 241 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: ifsp (4744), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
243 2009-09-22 21:41:20.683836 192.168.1.10 vfdfbvkcvmm.org TCP fmp > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 243 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: fmp (4745), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
245 2009-09-22 21:41:20.704431 192.168.1.10 vfdfbvkcvmm.org TCP 4746 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 245 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4746 (4746), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
247 2009-09-22 21:41:20.710867 192.168.1.10 vfdfbvkcvmm.org TCP 4747 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 247 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4747 (4747), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
249 2009-09-22 21:41:20.715249 192.168.1.10 gmsjljnp.ws TCP 4748 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 249 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: gmsjljnp.ws (74.208.164.166) Transmission Control Protocol, Src Port: 4748 (4748), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
252 2009-09-22 21:41:20.869612 192.168.1.10 vfdfbvkcvmm.org TCP fmp > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 252 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: fmp (4745), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
253 2009-09-22 21:41:20.869670 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 253 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: fmp (4745), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
277 2009-09-22 21:41:23.560784 192.168.1.10 vfdfbvkcvmm.org TCP 4747 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 277 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4747 (4747), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
278 2009-09-22 21:41:23.560805 192.168.1.10 vfdfbvkcvmm.org TCP ifsp > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 278 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: ifsp (4744), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
279 2009-09-22 21:41:23.560815 192.168.1.10 vfdfbvkcvmm.org TCP 4746 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 279 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4746 (4746), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
280 2009-09-22 21:41:23.560824 192.168.1.10 gmsjljnp.ws TCP 4748 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 280 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: gmsjljnp.ws (74.208.164.166) Transmission Control Protocol, Src Port: 4748 (4748), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
281 2009-09-22 21:41:23.670154 192.168.1.10 vfdfbvkcvmm.org TCP openhpid > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 281 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: openhpid (4743), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
304 2009-09-22 21:41:29.576149 192.168.1.10 vfdfbvkcvmm.org TCP 4747 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 304 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4747 (4747), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
305 2009-09-22 21:41:29.576169 192.168.1.10 gmsjljnp.ws TCP 4748 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 305 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: gmsjljnp.ws (74.208.164.166) Transmission Control Protocol, Src Port: 4748 (4748), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
306 2009-09-22 21:41:29.576178 192.168.1.10 vfdfbvkcvmm.org TCP 4746 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 306 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4746 (4746), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
307 2009-09-22 21:41:29.576186 192.168.1.10 vfdfbvkcvmm.org TCP ifsp > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 307 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: ifsp (4744), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
308 2009-09-22 21:41:29.685529 192.168.1.10 vfdfbvkcvmm.org TCP openhpid > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 308 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: openhpid (4743), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
365 2009-09-22 21:41:42.898109 192.168.1.10 tawddgbpsj.cn TCP 4763 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 365 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4763 (4763), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
367 2009-09-22 21:41:43.137650 192.168.1.10 vfdfbvkcvmm.org TCP 4764 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 367 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: 4764 (4764), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
369 2009-09-22 21:41:43.142450 192.168.1.10 vfdfbvkcvmm.org TCP 4765 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 369 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4765 (4765), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
371 2009-09-22 21:41:43.192220 192.168.1.10 vfdfbvkcvmm.org TCP 4765 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 371 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4765 (4765), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
372 2009-09-22 21:41:43.192327 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 372 (201 bytes on wire, 201 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4765 (4765), Dst Port: http (80), Seq: 1, Ack: 1, Len: 147 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
376 2009-09-22 21:41:43.243850 192.168.1.10 vfdfbvkcvmm.org TCP 4766 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 376 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4766 (4766), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
378 2009-09-22 21:41:43.247061 192.168.1.10 vfdfbvkcvmm.org TCP 4765 > http FIN, ACK Seq=148 Ack=499 Win=16926 Len=0
Frame 378 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4765 (4765), Dst Port: http (80), Seq: 148, Ack: 499, Len: 0
No. Time Source Destination Protocol Info
380 2009-09-22 21:41:43.247435 192.168.1.10 vfdfbvkcvmm.org TCP 4765 > http ACK Seq=149 Ack=500 Win=16926 Len=0
Frame 380 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4765 (4765), Dst Port: http (80), Seq: 149, Ack: 500, Len: 0
No. Time Source Destination Protocol Info
382 2009-09-22 21:41:43.275754 192.168.1.10 tawddgbpsj.cn TCP 4763 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 382 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4763 (4763), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
383 2009-09-22 21:41:43.275789 192.168.1.10 tawddgbpsj.cn HTTP GET /search?q=0 HTTP/1.0
Frame 383 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4763 (4763), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
390 2009-09-22 21:41:43.655645 192.168.1.10 tawddgbpsj.cn TCP 4763 > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0
Frame 390 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4763 (4763), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0
No. Time Source Destination Protocol Info
392 2009-09-22 21:41:43.655909 192.168.1.10 tawddgbpsj.cn TCP 4763 > http RST, ACK Seq=150 Ack=242 Win=0 Len=0
Frame 392 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4763 (4763), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0
No. Time Source Destination Protocol Info
399 2009-09-22 21:41:44.032049 192.168.1.10 tawddgbpsj.cn TCP 4763 > http RST Seq=150 Win=0 Len=0
Frame 399 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4763 (4763), Dst Port: http (80), Seq: 150, Len: 0
No. Time Source Destination Protocol Info
410 2009-09-22 21:41:46.200543 192.168.1.10 vfdfbvkcvmm.org TCP 4764 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 410 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: 4764 (4764), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
411 2009-09-22 21:41:46.200566 192.168.1.10 vfdfbvkcvmm.org TCP 4766 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 411 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4766 (4766), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
436 2009-09-22 21:41:52.325327 192.168.1.10 vfdfbvkcvmm.org TCP 4766 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 436 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4766 (4766), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
437 2009-09-22 21:41:52.325344 192.168.1.10 vfdfbvkcvmm.org TCP 4764 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 437 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: 4764 (4764), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
509 2009-09-22 21:42:05.374215 192.168.1.10 tawddgbpsj.cn TCP 4780 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 509 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4780 (4780), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
511 2009-09-22 21:42:05.607489 192.168.1.10 vfdfbvkcvmm.org TCP 4781 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 511 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4781 (4781), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
513 2009-09-22 21:42:05.612586 192.168.1.10 vfdfbvkcvmm.org TCP 4782 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 513 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4782 (4782), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
515 2009-09-22 21:42:05.668720 192.168.1.10 vfdfbvkcvmm.org TCP 4783 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 515 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4783 (4783), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
517 2009-09-22 21:42:05.718860 192.168.1.10 vfdfbvkcvmm.org TCP bfd-multi-ctl > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 517 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: bfd-multi-ctl (4784), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
519 2009-09-22 21:42:05.751473 192.168.1.10 tawddgbpsj.cn TCP 4780 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 519 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4780 (4780), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
520 2009-09-22 21:42:05.751513 192.168.1.10 tawddgbpsj.cn HTTP GET /search?q=0 HTTP/1.0
Frame 520 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4780 (4780), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
522 2009-09-22 21:42:05.792857 192.168.1.10 vfdfbvkcvmm.org TCP 4781 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 522 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4781 (4781), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
523 2009-09-22 21:42:05.792880 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 523 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4781 (4781), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
532 2009-09-22 21:42:06.130784 192.168.1.10 tawddgbpsj.cn TCP 4780 > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0
Frame 532 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4780 (4780), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0
No. Time Source Destination Protocol Info
534 2009-09-22 21:42:06.131048 192.168.1.10 tawddgbpsj.cn TCP 4780 > http RST, ACK Seq=150 Ack=242 Win=0 Len=0
Frame 534 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4780 (4780), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0
No. Time Source Destination Protocol Info
541 2009-09-22 21:42:06.507437 192.168.1.10 tawddgbpsj.cn TCP 4780 > http RST Seq=150 Win=0 Len=0
Frame 541 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4780 (4780), Dst Port: http (80), Seq: 150, Len: 0
No. Time Source Destination Protocol Info
555 2009-09-22 21:42:08.621554 192.168.1.10 vfdfbvkcvmm.org TCP 4782 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 555 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4782 (4782), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
556 2009-09-22 21:42:08.621566 192.168.1.10 vfdfbvkcvmm.org TCP bfd-multi-ctl > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 556 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: bfd-multi-ctl (4784), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
557 2009-09-22 21:42:08.621584 192.168.1.10 vfdfbvkcvmm.org TCP 4783 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 557 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4783 (4783), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
577 2009-09-22 21:42:14.636971 192.168.1.10 vfdfbvkcvmm.org TCP 4782 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 577 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4782 (4782), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
578 2009-09-22 21:42:14.636981 192.168.1.10 vfdfbvkcvmm.org TCP bfd-multi-ctl > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 578 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: bfd-multi-ctl (4784), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
579 2009-09-22 21:42:14.637003 192.168.1.10 vfdfbvkcvmm.org TCP 4783 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 579 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4783 (4783), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
581 2009-09-22 21:42:14.814282 192.168.1.10 vfdfbvkcvmm.org TCP 4782 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 581 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4782 (4782), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
582 2009-09-22 21:42:14.814352 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 582 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4782 (4782), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
586 2009-09-22 21:42:14.995692 192.168.1.10 vfdfbvkcvmm.org TCP 4782 > http ACK Seq=151 Ack=19 Win=17407 Len=0
Frame 586 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4782 (4782), Dst Port: http (80), Seq: 151, Ack: 19, Len: 0
No. Time Source Destination Protocol Info
587 2009-09-22 21:42:14.995731 192.168.1.10 vfdfbvkcvmm.org TCP 4782 > http FIN, ACK Seq=151 Ack=19 Win=17407 Len=0
Frame 587 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4782 (4782), Dst Port: http (80), Seq: 151, Ack: 19, Len: 0
No. Time Source Destination Protocol Info
652 2009-09-22 21:42:27.794408 192.168.1.10 tawddgbpsj.cn TCP notateit > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 652 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: notateit (4803), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
658 2009-09-22 21:42:28.040427 192.168.1.10 vfdfbvkcvmm.org TCP 4804 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 658 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4804 (4804), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
660 2009-09-22 21:42:28.078326 192.168.1.10 vfdfbvkcvmm.org TCP 4805 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 660 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: 4805 (4805), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
662 2009-09-22 21:42:28.171245 192.168.1.10 tawddgbpsj.cn TCP notateit > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 662 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: notateit (4803), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
663 2009-09-22 21:42:28.171336 192.168.1.10 tawddgbpsj.cn HTTP GET /search?q=0 HTTP/1.0
Frame 663 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: notateit (4803), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
669 2009-09-22 21:42:28.550694 192.168.1.10 tawddgbpsj.cn TCP notateit > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0
Frame 669 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: notateit (4803), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0
No. Time Source Destination Protocol Info
671 2009-09-22 21:42:28.550994 192.168.1.10 tawddgbpsj.cn TCP notateit > http RST, ACK Seq=150 Ack=242 Win=0 Len=0
Frame 671 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: notateit (4803), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0
No. Time Source Destination Protocol Info
681 2009-09-22 21:42:28.927207 192.168.1.10 tawddgbpsj.cn TCP notateit > http RST Seq=150 Win=0 Len=0
Frame 681 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: notateit (4803), Dst Port: http (80), Seq: 150, Len: 0
No. Time Source Destination Protocol Info
697 2009-09-22 21:42:30.933213 192.168.1.10 vfdfbvkcvmm.org TCP 4805 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 697 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: 4805 (4805), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
698 2009-09-22 21:42:30.933214 192.168.1.10 vfdfbvkcvmm.org TCP 4804 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 698 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4804 (4804), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
720 2009-09-22 21:42:36.948606 192.168.1.10 vfdfbvkcvmm.org TCP 4805 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 720 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: 4805 (4805), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
721 2009-09-22 21:42:36.948692 192.168.1.10 vfdfbvkcvmm.org TCP 4804 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 721 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4804 (4804), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
802 2009-09-22 21:42:50.278340 192.168.1.10 tawddgbpsj.cn TCP 4819 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 802 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4819 (4819), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
806 2009-09-22 21:42:50.531767 192.168.1.10 vfdfbvkcvmm.org TCP 4820 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 806 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4820 (4820), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
808 2009-09-22 21:42:50.545537 192.168.1.10 vfdfbvkcvmm.org TCP 4821 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 808 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4821 (4821), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
810 2009-09-22 21:42:50.654747 192.168.1.10 tawddgbpsj.cn TCP 4819 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 810 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4819 (4819), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
811 2009-09-22 21:42:50.654793 192.168.1.10 tawddgbpsj.cn HTTP GET /search?q=0 HTTP/1.0
Frame 811 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4819 (4819), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
813 2009-09-22 21:42:50.682662 192.168.1.10 vfdfbvkcvmm.org TCP 4822 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 813 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4822 (4822), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
818 2009-09-22 21:42:51.033846 192.168.1.10 tawddgbpsj.cn TCP 4819 > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0
Frame 818 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4819 (4819), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0
No. Time Source Destination Protocol Info
820 2009-09-22 21:42:51.034181 192.168.1.10 tawddgbpsj.cn TCP 4819 > http RST, ACK Seq=150 Ack=242 Win=0 Len=0
Frame 820 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4819 (4819), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0
No. Time Source Destination Protocol Info
827 2009-09-22 21:42:51.409943 192.168.1.10 tawddgbpsj.cn TCP 4819 > http RST Seq=150 Win=0 Len=0
Frame 827 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4819 (4819), Dst Port: http (80), Seq: 150, Len: 0
No. Time Source Destination Protocol Info
840 2009-09-22 21:42:53.463655 192.168.1.10 vfdfbvkcvmm.org TCP 4821 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 840 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4821 (4821), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
841 2009-09-22 21:42:53.463657 192.168.1.10 vfdfbvkcvmm.org TCP 4820 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 841 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4820 (4820), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
843 2009-09-22 21:42:53.682379 192.168.1.10 vfdfbvkcvmm.org TCP 4822 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 843 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4822 (4822), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
863 2009-09-22 21:42:59.479000 192.168.1.10 vfdfbvkcvmm.org TCP 4821 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 863 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4821 (4821), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
864 2009-09-22 21:42:59.479069 192.168.1.10 vfdfbvkcvmm.org TCP 4820 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 864 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4820 (4820), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
865 2009-09-22 21:42:59.697741 192.168.1.10 vfdfbvkcvmm.org TCP 4822 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 865 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4822 (4822), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
869 2009-09-22 21:42:59.745640 192.168.1.10 vfdfbvkcvmm.org TCP 4822 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 869 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4822 (4822), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
870 2009-09-22 21:42:59.745711 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 870 (201 bytes on wire, 201 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4822 (4822), Dst Port: http (80), Seq: 1, Ack: 1, Len: 147 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
873 2009-09-22 21:42:59.796716 192.168.1.10 vfdfbvkcvmm.org TCP 4822 > http FIN, ACK Seq=148 Ack=499 Win=16926 Len=0
Frame 873 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4822 (4822), Dst Port: http (80), Seq: 148, Ack: 499, Len: 0
No. Time Source Destination Protocol Info
875 2009-09-22 21:42:59.797092 192.168.1.10 vfdfbvkcvmm.org TCP 4822 > http ACK Seq=149 Ack=500 Win=16926 Len=0
Frame 875 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4822 (4822), Dst Port: http (80), Seq: 149, Ack: 500, Len: 0
No. Time Source Destination Protocol Info
948 2009-09-22 21:43:12.846938 192.168.1.10 vfdfbvkcvmm.org TCP varadero-0 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 948 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: varadero-0 (4837), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
950 2009-09-22 21:43:12.875174 192.168.1.10 vfdfbvkcvmm.org TCP varadero-1 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 950 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: varadero-1 (4838), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
952 2009-09-22 21:43:12.878593 192.168.1.10 vfdfbvkcvmm.org TCP varadero-2 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 952 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: varadero-2 (4839), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
954 2009-09-22 21:43:12.949291 192.168.1.10 vfdfbvkcvmm.org TCP opcua-tcp > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 954 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: opcua-tcp (4840), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
957 2009-09-22 21:43:13.029402 192.168.1.10 vfdfbvkcvmm.org TCP quosa > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 957 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: quosa (4841), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
959 2009-09-22 21:43:13.032510 192.168.1.10 vfdfbvkcvmm.org TCP varadero-0 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 959 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: varadero-0 (4837), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
960 2009-09-22 21:43:13.032586 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 960 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: varadero-0 (4837), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
962 2009-09-22 21:43:13.060409 192.168.1.10 vfdfbvkcvmm.org TCP varadero-1 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 962 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: varadero-1 (4838), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
963 2009-09-22 21:43:13.060450 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 963 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: varadero-1 (4838), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
987 2009-09-22 21:43:15.884669 192.168.1.10 vfdfbvkcvmm.org TCP varadero-2 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 987 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: varadero-2 (4839), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
989 2009-09-22 21:43:15.994030 192.168.1.10 vfdfbvkcvmm.org TCP opcua-tcp > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 989 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: opcua-tcp (4840), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
990 2009-09-22 21:43:15.994050 192.168.1.10 vfdfbvkcvmm.org TCP quosa > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 990 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: quosa (4841), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
992 2009-09-22 21:43:16.043216 192.168.1.10 vfdfbvkcvmm.org TCP quosa > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 992 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: quosa (4841), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
993 2009-09-22 21:43:16.043341 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 993 (201 bytes on wire, 201 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: quosa (4841), Dst Port: http (80), Seq: 1, Ack: 1, Len: 147 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
996 2009-09-22 21:43:16.095201 192.168.1.10 vfdfbvkcvmm.org TCP quosa > http FIN, ACK Seq=148 Ack=499 Win=16926 Len=0
Frame 996 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: quosa (4841), Dst Port: http (80), Seq: 148, Ack: 499, Len: 0
No. Time Source Destination Protocol Info
998 2009-09-22 21:43:16.095611 192.168.1.10 vfdfbvkcvmm.org TCP quosa > http ACK Seq=149 Ack=500 Win=16926 Len=0
Frame 998 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: quosa (4841), Dst Port: http (80), Seq: 149, Ack: 500, Len: 0
No. Time Source Destination Protocol Info
1020 2009-09-22 21:43:21.900030 192.168.1.10 vfdfbvkcvmm.org TCP varadero-2 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1020 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: varadero-2 (4839), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
1021 2009-09-22 21:43:22.025059 192.168.1.10 vfdfbvkcvmm.org TCP opcua-tcp > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1021 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: opcua-tcp (4840), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
1095 2009-09-22 21:43:35.318651 192.168.1.10 vfdfbvkcvmm.org TCP 4855 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1095 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4855 (4855), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
1097 2009-09-22 21:43:35.326695 192.168.1.10 vfdfbvkcvmm.org TCP 4856 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1097 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: 4856 (4856), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
1100 2009-09-22 21:43:35.504916 192.168.1.10 vfdfbvkcvmm.org TCP 4857 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1100 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4857 (4857), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
1104 2009-09-22 21:43:35.689957 192.168.1.10 vfdfbvkcvmm.org TCP 4857 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 1104 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4857 (4857), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
1105 2009-09-22 21:43:35.690011 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 1105 (203 bytes on wire, 203 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (149.20.56.32) Transmission Control Protocol, Src Port: 4857 (4857), Dst Port: http (80), Seq: 1, Ack: 1, Len: 149 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
1128 2009-09-22 21:43:38.305695 192.168.1.10 vfdfbvkcvmm.org TCP 4855 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1128 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4855 (4855), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
1129 2009-09-22 21:43:38.305709 192.168.1.10 vfdfbvkcvmm.org TCP 4856 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1129 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: 4856 (4856), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
1153 2009-09-22 21:43:44.321054 192.168.1.10 vfdfbvkcvmm.org TCP 4855 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1153 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4855 (4855), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
1154 2009-09-22 21:43:44.321064 192.168.1.10 vfdfbvkcvmm.org TCP 4856 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1154 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (205.188.161.4) Transmission Control Protocol, Src Port: 4856 (4856), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
1230 2009-09-22 21:43:57.525059 192.168.1.10 tawddgbpsj.cn TCP wired > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1230 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: wired (4871), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
1236 2009-09-22 21:43:57.526780 192.168.1.10 tawddgbpsj.cn TCP 4872 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1236 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4872 (4872), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
1238 2009-09-22 21:43:57.626635 192.168.1.10 vfdfbvkcvmm.org TCP 4873 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1238 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4873 (4873), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
1240 2009-09-22 21:43:57.677167 192.168.1.10 vfdfbvkcvmm.org TCP 4875 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1240 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4875 (4875), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
1242 2009-09-22 21:43:57.705992 192.168.1.10 vfdfbvkcvmm.org TCP 4876 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1242 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4876 (4876), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
1244 2009-09-22 21:43:57.733201 192.168.1.10 vfdfbvkcvmm.org TCP 4877 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1244 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4877 (4877), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
1246 2009-09-22 21:43:57.819718 192.168.1.10 vfdfbvkcvmm.org TCP 4873 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 1246 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4873 (4873), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
1247 2009-09-22 21:43:57.819763 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 1247 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4873 (4873), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
1249 2009-09-22 21:43:57.872293 192.168.1.10 vfdfbvkcvmm.org TCP 4878 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1249 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4878 (4878), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
1251 2009-09-22 21:43:57.901156 192.168.1.10 vfdfbvkcvmm.org TCP 4879 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1251 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4879 (4879), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
1253 2009-09-22 21:43:57.902804 192.168.1.10 tawddgbpsj.cn TCP wired > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 1253 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: wired (4871), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
1254 2009-09-22 21:43:57.902836 192.168.1.10 tawddgbpsj.cn HTTP GET /search?q=0 HTTP/1.0
Frame 1254 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: wired (4871), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
1256 2009-09-22 21:43:57.905096 192.168.1.10 tawddgbpsj.cn TCP 4872 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 1256 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4872 (4872), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
1257 2009-09-22 21:43:57.905121 192.168.1.10 tawddgbpsj.cn HTTP GET /search?q=0 HTTP/1.0
Frame 1257 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4872 (4872), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
1259 2009-09-22 21:43:57.920611 192.168.1.10 vfdfbvkcvmm.org TCP 4878 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 1259 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4878 (4878), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
1260 2009-09-22 21:43:57.920692 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 1260 (201 bytes on wire, 201 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4878 (4878), Dst Port: http (80), Seq: 1, Ack: 1, Len: 147 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
1263 2009-09-22 21:43:57.972331 192.168.1.10 vfdfbvkcvmm.org TCP 4878 > http FIN, ACK Seq=148 Ack=499 Win=16926 Len=0
Frame 1263 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4878 (4878), Dst Port: http (80), Seq: 148, Ack: 499, Len: 0
No. Time Source Destination Protocol Info
1265 2009-09-22 21:43:57.972685 192.168.1.10 vfdfbvkcvmm.org TCP 4878 > http ACK Seq=149 Ack=500 Win=16926 Len=0
Frame 1265 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4878 (4878), Dst Port: http (80), Seq: 149, Ack: 500, Len: 0
No. Time Source Destination Protocol Info
1271 2009-09-22 21:43:58.095267 192.168.1.10 vfdfbvkcvmm.org TCP 4879 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 1271 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4879 (4879), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
1272 2009-09-22 21:43:58.095350 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 1272 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4879 (4879), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
1276 2009-09-22 21:43:58.284384 192.168.1.10 tawddgbpsj.cn TCP wired > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0
Frame 1276 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: wired (4871), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0
No. Time Source Destination Protocol Info
1278 2009-09-22 21:43:58.285093 192.168.1.10 tawddgbpsj.cn TCP wired > http RST, ACK Seq=150 Ack=242 Win=0 Len=0
Frame 1278 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: wired (4871), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0
No. Time Source Destination Protocol Info
1281 2009-09-22 21:43:58.287557 192.168.1.10 tawddgbpsj.cn TCP 4872 > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0
Frame 1281 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4872 (4872), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0
No. Time Source Destination Protocol Info
1283 2009-09-22 21:43:58.287810 192.168.1.10 tawddgbpsj.cn TCP 4872 > http RST, ACK Seq=150 Ack=242 Win=0 Len=0
Frame 1283 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4872 (4872), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0
No. Time Source Destination Protocol Info
1288 2009-09-22 21:43:58.661064 192.168.1.10 tawddgbpsj.cn TCP wired > http RST Seq=150 Win=0 Len=0
Frame 1288 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: wired (4871), Dst Port: http (80), Seq: 150, Len: 0
No. Time Source Destination Protocol Info
1290 2009-09-22 21:43:58.663628 192.168.1.10 tawddgbpsj.cn TCP 4872 > http RST Seq=150 Win=0 Len=0
Frame 1290 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4872 (4872), Dst Port: http (80), Seq: 150, Len: 0
No. Time Source Destination Protocol Info
1297 2009-09-22 21:44:00.617329 192.168.1.10 vfdfbvkcvmm.org TCP 4876 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1297 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4876 (4876), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
1298 2009-09-22 21:44:00.617343 192.168.1.10 vfdfbvkcvmm.org TCP 4877 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1298 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4877 (4877), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
1299 2009-09-22 21:44:00.726689 192.168.1.10 vfdfbvkcvmm.org TCP 4875 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1299 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4875 (4875), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
1315 2009-09-22 21:44:06.648367 192.168.1.10 vfdfbvkcvmm.org TCP 4877 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1315 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (97.74.200.45) Transmission Control Protocol, Src Port: 4877 (4877), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
1316 2009-09-22 21:44:06.648389 192.168.1.10 vfdfbvkcvmm.org TCP 4876 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1316 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4876 (4876), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
1317 2009-09-22 21:44:06.742113 192.168.1.10 vfdfbvkcvmm.org TCP 4875 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1317 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (74.208.64.145) Transmission Control Protocol, Src Port: 4875 (4875), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
1359 2009-09-22 21:44:19.885301 192.168.1.10 tawddgbpsj.cn TCP 4893 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1359 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4893 (4893), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
1361 2009-09-22 21:44:20.084925 192.168.1.10 vfdfbvkcvmm.org TCP lyskom > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1361 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: lyskom (4894), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
1364 2009-09-22 21:44:20.118189 192.168.1.10 vfdfbvkcvmm.org TCP 4895 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1364 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4895 (4895), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
1366 2009-09-22 21:44:20.128141 192.168.1.10 vfdfbvkcvmm.org TCP 4896 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1366 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4896 (4896), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
1368 2009-09-22 21:44:20.198065 192.168.1.10 vfdfbvkcvmm.org TCP 4897 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1368 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4897 (4897), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
1370 2009-09-22 21:44:20.263621 192.168.1.10 tawddgbpsj.cn TCP 4893 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 1370 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4893 (4893), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
1371 2009-09-22 21:44:20.263672 192.168.1.10 tawddgbpsj.cn HTTP GET /search?q=0 HTTP/1.0
Frame 1371 (202 bytes on wire, 202 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4893 (4893), Dst Port: http (80), Seq: 1, Ack: 1, Len: 148 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
1373 2009-09-22 21:44:20.271134 192.168.1.10 vfdfbvkcvmm.org TCP 4898 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1373 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4898 (4898), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
1375 2009-09-22 21:44:20.311556 192.168.1.10 vfdfbvkcvmm.org TCP 4895 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 1375 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4895 (4895), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
1376 2009-09-22 21:44:20.311589 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 1376 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4895 (4895), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
1378 2009-09-22 21:44:20.464184 192.168.1.10 vfdfbvkcvmm.org TCP 4898 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 1378 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4898 (4898), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
1379 2009-09-22 21:44:20.464288 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 1379 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4898 (4898), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
1382 2009-09-22 21:44:20.505981 192.168.1.10 vfdfbvkcvmm.org TCP 4895 > http RST Seq=151 Win=0 Len=0
Frame 1382 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (199.2.137.252) Transmission Control Protocol, Src Port: 4895 (4895), Dst Port: http (80), Seq: 151, Len: 0
No. Time Source Destination Protocol Info
1387 2009-09-22 21:44:20.642551 192.168.1.10 tawddgbpsj.cn TCP 4893 > http FIN, ACK Seq=149 Ack=150 Win=17275 Len=0
Frame 1387 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4893 (4893), Dst Port: http (80), Seq: 149, Ack: 150, Len: 0
No. Time Source Destination Protocol Info
1389 2009-09-22 21:44:20.642923 192.168.1.10 tawddgbpsj.cn TCP 4893 > http RST, ACK Seq=150 Ack=242 Win=0 Len=0
Frame 1389 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4893 (4893), Dst Port: http (80), Seq: 150, Ack: 242, Len: 0
No. Time Source Destination Protocol Info
1396 2009-09-22 21:44:21.019050 192.168.1.10 tawddgbpsj.cn TCP 4893 > http RST Seq=150 Win=0 Len=0
Frame 1396 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: 4893 (4893), Dst Port: http (80), Seq: 150, Len: 0
No. Time Source Destination Protocol Info
1403 2009-09-22 21:44:22.928987 192.168.1.10 vfdfbvkcvmm.org TCP lyskom > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1403 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: lyskom (4894), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
1406 2009-09-22 21:44:23.038349 192.168.1.10 vfdfbvkcvmm.org TCP 4896 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1406 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4896 (4896), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
1408 2009-09-22 21:44:23.086196 192.168.1.10 vfdfbvkcvmm.org TCP 4896 > http ACK Seq=1 Ack=1 Win=17424 Len=0
Frame 1408 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4896 (4896), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
1409 2009-09-22 21:44:23.086262 192.168.1.10 vfdfbvkcvmm.org HTTP GET /search?q=0 HTTP/1.0
Frame 1409 (201 bytes on wire, 201 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4896 (4896), Dst Port: http (80), Seq: 1, Ack: 1, Len: 147 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
1411 2009-09-22 21:44:23.147710 192.168.1.10 vfdfbvkcvmm.org TCP 4897 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1411 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4897 (4897), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
1413 2009-09-22 21:44:23.248855 192.168.1.10 vfdfbvkcvmm.org TCP 4896 > http FIN, ACK Seq=148 Ack=499 Win=16926 Len=0
Frame 1413 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4896 (4896), Dst Port: http (80), Seq: 148, Ack: 499, Len: 0
No. Time Source Destination Protocol Info
1415 2009-09-22 21:44:23.249198 192.168.1.10 vfdfbvkcvmm.org TCP 4896 > http ACK Seq=149 Ack=500 Win=16926 Len=0
Frame 1415 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: 4896 (4896), Dst Port: http (80), Seq: 149, Ack: 500, Len: 0
No. Time Source Destination Protocol Info
1435 2009-09-22 21:44:28.944408 192.168.1.10 vfdfbvkcvmm.org TCP lyskom > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1435 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (83.68.16.6) Transmission Control Protocol, Src Port: lyskom (4894), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
1437 2009-09-22 21:44:29.163143 192.168.1.10 vfdfbvkcvmm.org TCP 4897 > http SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1437 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: vfdfbvkcvmm.org (143.215.143.11) Transmission Control Protocol, Src Port: 4897 (4897), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
3821 2009-09-22 22:08:21.205545 192.168.1.10 HSIB.home TCP must-p2p > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 3821 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: HSIB.home (192.168.1.1) Transmission Control Protocol, Src Port: must-p2p (3514), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
3823 2009-09-22 22:08:21.593326 192.168.1.10 HSIB.home TCP must-p2p > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 3823 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: HSIB.home (192.168.1.1) Transmission Control Protocol, Src Port: must-p2p (3514), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
3827 2009-09-22 22:08:22.140241 192.168.1.10 HSIB.home TCP must-p2p > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 3827 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: HSIB.home (192.168.1.1) Transmission Control Protocol, Src Port: must-p2p (3514), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
3977 2009-09-22 22:09:32.106777 192.168.1.10 192.168.1.20 TCP iniserve-port > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 3977 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 192.168.1.20 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: iniserve-port (3560), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
3980 2009-09-22 22:09:32.465645 192.168.1.10 192.168.1.20 TCP iniserve-port > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 3980 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 192.168.1.20 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: iniserve-port (3560), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
3982 2009-09-22 22:09:33.012521 192.168.1.10 192.168.1.20 TCP iniserve-port > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 3982 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 192.168.1.20 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: iniserve-port (3560), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
5858 2009-09-22 22:24:33.056792 192.168.1.10 192.168.1.240 TCP tigv2 > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 5858 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 192.168.1.240 (00:08:da:51:03:d1) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.240 (192.168.1.240) Transmission Control Protocol, Src Port: tigv2 (4124), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
5863 2009-09-22 22:24:36.087801 192.168.1.10 192.168.1.240 TCP tigv2 > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 5863 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 192.168.1.240 (00:08:da:51:03:d1) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.240 (192.168.1.240) Transmission Control Protocol, Src Port: tigv2 (4124), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
10877 2009-09-22 23:01:23.529791 192.168.1.20 192.168.1.10 TCP 1027 > microsoft-ds SYN Seq=0 Win=65535 Len=0 MSS=1460
Frame 10877 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: 192.168.1.20 (00:01:02:1d:42:a7), Dst: Dell_2e:9e:54 (00:1e:c9:2e:9e:54) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 192.168.1.10 (192.168.1.10) Transmission Control Protocol, Src Port: 1027 (1027), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
10879 2009-09-22 23:01:23.530034 192.168.1.20 192.168.1.10 TCP 1027 > microsoft-ds ACK Seq=1 Ack=1 Win=65535 Len=0
Frame 10879 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: 192.168.1.20 (00:01:02:1d:42:a7), Dst: Dell_2e:9e:54 (00:1e:c9:2e:9e:54) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 192.168.1.10 (192.168.1.10) Transmission Control Protocol, Src Port: 1027 (1027), Dst Port: microsoft-ds (445), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
10880 2009-09-22 23:01:23.530178 192.168.1.20 192.168.1.10 SMB Negotiate Protocol Request
Frame 10880 (105 bytes on wire, 105 bytes captured) Ethernet II, Src: 192.168.1.20 (00:01:02:1d:42:a7), Dst: Dell_2e:9e:54 (00:1e:c9:2e:9e:54) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 192.168.1.10 (192.168.1.10) Transmission Control Protocol, Src Port: 1027 (1027), Dst Port: microsoft-ds (445), Seq: 1, Ack: 1, Len: 51 NetBIOS Session Service SMB (Server Message Block Protocol)
No. Time Source Destination Protocol Info
10882 2009-09-22 23:01:23.530498 192.168.1.20 192.168.1.10 SMB Session Setup AndX Request, User: anonymous
Frame 10882 (131 bytes on wire, 131 bytes captured) Ethernet II, Src: 192.168.1.20 (00:01:02:1d:42:a7), Dst: Dell_2e:9e:54 (00:1e:c9:2e:9e:54) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 192.168.1.10 (192.168.1.10) Transmission Control Protocol, Src Port: 1027 (1027), Dst Port: microsoft-ds (445), Seq: 52, Ack: 134, Len: 77 NetBIOS Session Service SMB (Server Message Block Protocol)
No. Time Source Destination Protocol Info
10884 2009-09-22 23:01:23.530832 192.168.1.20 192.168.1.10 TCP 1027 > microsoft-ds FIN, ACK Seq=129 Ack=238 Win=65298 Len=0
Frame 10884 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: 192.168.1.20 (00:01:02:1d:42:a7), Dst: Dell_2e:9e:54 (00:1e:c9:2e:9e:54) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 192.168.1.10 (192.168.1.10) Transmission Control Protocol, Src Port: 1027 (1027), Dst Port: microsoft-ds (445), Seq: 129, Ack: 238, Len: 0
No. Time Source Destination Protocol Info
10886 2009-09-22 23:01:23.531042 192.168.1.20 192.168.1.10 TCP 1027 > microsoft-ds ACK Seq=130 Ack=239 Win=65298 Len=0
Frame 10886 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: 192.168.1.20 (00:01:02:1d:42:a7), Dst: Dell_2e:9e:54 (00:1e:c9:2e:9e:54) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 192.168.1.10 (192.168.1.10) Transmission Control Protocol, Src Port: 1027 (1027), Dst Port: microsoft-ds (445), Seq: 130, Ack: 239, Len: 0
No. Time Source Destination Protocol Info
10887 2009-09-22 23:01:23.560636 192.168.1.20 192.168.1.10 TCP 1028 > http SYN Seq=0 Win=65535 Len=0 MSS=1460
Frame 10887 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: 192.168.1.20 (00:01:02:1d:42:a7), Dst: Dell_2e:9e:54 (00:1e:c9:2e:9e:54) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 192.168.1.10 (192.168.1.10) Transmission Control Protocol, Src Port: 1028 (1028), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
10891 2009-09-22 23:01:24.028406 192.168.1.20 192.168.1.10 TCP 1028 > http SYN Seq=0 Win=65535 Len=0 MSS=1460
Frame 10891 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: 192.168.1.20 (00:01:02:1d:42:a7), Dst: Dell_2e:9e:54 (00:1e:c9:2e:9e:54) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 192.168.1.10 (192.168.1.10) Transmission Control Protocol, Src Port: 1028 (1028), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
10895 2009-09-22 23:01:24.465869 192.168.1.20 192.168.1.10 TCP 1028 > http SYN Seq=0 Win=65535 Len=0 MSS=1460
Frame 10895 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: 192.168.1.20 (00:01:02:1d:42:a7), Dst: Dell_2e:9e:54 (00:1e:c9:2e:9e:54) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 192.168.1.10 (192.168.1.10) Transmission Control Protocol, Src Port: 1028 (1028), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
32021 2009-09-22 23:12:17.380365 192.168.1.10 tawddgbpsj.cn TCP audio-activmail > http RST Seq=1 Win=0 Len=0
Frame 32021 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: audio-activmail (1397), Dst Port: http (80), Seq: 1, Len: 0
No. Time Source Destination Protocol Info
32035 2009-09-22 23:12:22.384317 192.168.1.10 tawddgbpsj.cn TCP cadkey-tablet > http RST Seq=1 Win=0 Len=0
Frame 32035 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: cadkey-tablet (1400), Dst Port: http (80), Seq: 1, Len: 0
No. Time Source Destination Protocol Info
32679 2009-09-22 23:17:30.506719 192.168.1.10 tawddgbpsj.cn TCP winddlb > http RST Seq=1 Win=0 Len=0
Frame 32679 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: winddlb (1565), Dst Port: http (80), Seq: 1, Len: 0
No. Time Source Destination Protocol Info
32689 2009-09-22 23:17:35.518291 192.168.1.10 tawddgbpsj.cn TCP tsspmap > http RST Seq=1 Win=0 Len=0
Frame 32689 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: tsspmap (1568), Dst Port: http (80), Seq: 1, Len: 0
No. Time Source Destination Protocol Info
32910 2009-09-22 23:19:33.431587 192.168.1.10 tawddgbpsj.cn TCP xs-openstorage > http RST Seq=1 Win=0 Len=0
Frame 32910 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: xs-openstorage (1619), Dst Port: http (80), Seq: 1, Len: 0
No. Time Source Destination Protocol Info
33479 2009-09-22 23:24:59.419453 192.168.1.10 tawddgbpsj.cn TCP t128-gateway > http RST Seq=1 Win=0 Len=0
Frame 33479 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: t128-gateway (1627), Dst Port: http (80), Seq: 1, Len: 0
No. Time Source Destination Protocol Info
35143 2009-09-22 23:40:27.373205 192.168.1.10 tawddgbpsj.cn TCP skip-mc-gikreq > http RST Seq=1 Win=0 Len=0
Frame 35143 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: skip-mc-gikreq (1660), Dst Port: http (80), Seq: 1, Len: 0
No. Time Source Destination Protocol Info
35401 2009-09-22 23:42:56.410040 192.168.1.10 tawddgbpsj.cn TCP netview-aix-3 > http RST Seq=1 Win=0 Len=0
Frame 35401 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: netview-aix-3 (1663), Dst Port: http (80), Seq: 1, Len: 0
No. Time Source Destination Protocol Info
36015 2009-09-22 23:48:44.381050 192.168.1.10 tawddgbpsj.cn TCP netview-aix-10 > http RST Seq=1 Win=0 Len=0
Frame 36015 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: netview-aix-10 (1670), Dst Port: http (80), Seq: 1, Len: 0
No. Time Source Destination Protocol Info
36181 2009-09-22 23:50:16.673136 192.168.1.10 tawddgbpsj.cn TCP prolink > http RST Seq=1 Win=0 Len=0
Frame 36181 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: tawddgbpsj.cn (221.7.91.31) Transmission Control Protocol, Src Port: prolink (1678), Dst Port: http (80), Seq: 1, Len: 0
samedi 19 septembre 2009
Par Marc Blanchard [Virus Docteur], samedi 19 septembre 2009 à 13:15 :: Epidemiology - english section -
Isomorphic behaviors :
On XP:
The activity seems stabilized and proceed to infection and get external sites / Internal network each 2 hours.
No file were modified or created
On WIN2003:
The activity seems stabilized and proceed to infection and get external sites / Internal network each 2 hours.
No file were modified or created
NOTA:
To analyze now the viruslab and confiker behaviors, it seems that the plateform is now stabilized.
So, I decide to wait few days and to let probes and lan analyzer to get informations to start to study some activities behaviors.
No. Time Source Destination Protocol Info
712359 2009-09-19 00:39:11.459587 192.168.1.10 192.168.1.20 TCP nesh-broker > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 712359 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: nesh-broker (3507), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
712365 2009-09-19 00:39:11.912276 192.168.1.10 192.168.1.20 TCP nesh-broker > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 712365 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: nesh-broker (3507), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
712369 2009-09-19 00:39:12.349806 192.168.1.10 192.168.1.20 TCP nesh-broker > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 712369 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: nesh-broker (3507), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
773854 2009-09-19 02:43:49.252061 192.168.1.20 www.l.google.com TCP pxc-sapxom > http SYN Seq=0 Win=65535 Len=0 MSS=1460
Frame 773854 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: 3com_1d:42:a7 (00:01:02:1d:42:a7), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: www.l.google.com (209.85.229.147) Transmission Control Protocol, Src Port: pxc-sapxom (2680), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
773856 2009-09-19 02:43:49.298232 192.168.1.20 www.l.google.com TCP pxc-sapxom > http ACK Seq=1 Ack=1 Win=65535 Len=0
Frame 773856 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: 3com_1d:42:a7 (00:01:02:1d:42:a7), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: www.l.google.com (209.85.229.147) Transmission Control Protocol, Src Port: pxc-sapxom (2680), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
773858 2009-09-19 02:43:49.310283 192.168.1.20 www.l.google.com HTTP GET /tools/swg2/update?auv=1&r=2&up=30&p=w&ma=5&mi=1&b=2600&sp=ServicePack2&as=swg&pv=5.2.4204.1700&type=a&hl=fr&os=win&ie=6.0.2900.2180&brand=GGLL&pds=1&ds=1&su=0&gus=1&hpi=-1&lsp=86281&rep=1&rlz=I7:,W1:,R2:&dcc=T4:1T4ADBR_frFR283FR298&dsc1=0&hpc1=0&sdsa1=0&sdsa7=0&dsbc1=0&dsbc7=0&ust=3 HTTP/1.0
Frame 773858 (724 bytes on wire, 724 bytes captured) Ethernet II, Src: 3com_1d:42:a7 (00:01:02:1d:42:a7), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: www.l.google.com (209.85.229.147) Transmission Control Protocol, Src Port: pxc-sapxom (2680), Dst Port: http (80), Seq: 1, Ack: 1, Len: 670 Hypertext Transfer Protocol
No. Time Source Destination Protocol Info
773862 2009-09-19 02:43:49.375586 192.168.1.20 www.l.google.com TCP pxc-sapxom > http ACK Seq=671 Ack=390 Win=65147 Len=0
Frame 773862 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: 3com_1d:42:a7 (00:01:02:1d:42:a7), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: www.l.google.com (209.85.229.147) Transmission Control Protocol, Src Port: pxc-sapxom (2680), Dst Port: http (80), Seq: 671, Ack: 390, Len: 0
No. Time Source Destination Protocol Info
773869 2009-09-19 02:43:49.634774 192.168.1.20 www.l.google.com TCP pxc-sapxom > http FIN, ACK Seq=671 Ack=390 Win=65147 Len=0
Frame 773869 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: 3com_1d:42:a7 (00:01:02:1d:42:a7), Dst: HSIB.home (00:19:4b:f3:54:12) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: www.l.google.com (209.85.229.147) Transmission Control Protocol, Src Port: pxc-sapxom (2680), Dst Port: http (80), Seq: 671, Ack: 390, Len: 0
No. Time Source Destination Protocol Info
794586 2009-09-19 03:25:24.995844 192.168.1.10 192.168.1.20 TCP 4210 > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 794586 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: 4210 (4210), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
794591 2009-09-19 03:25:25.464227 192.168.1.10 192.168.1.20 TCP 4210 > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 794591 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: 4210 (4210), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
794597 2009-09-19 03:25:25.901713 192.168.1.10 192.168.1.20 TCP 4210 > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 794597 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: 4210 (4210), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
875197 2009-09-19 06:10:38.505103 192.168.1.10 192.168.1.20 TCP 4886 > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 875197 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: 4886 (4886), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
875203 2009-09-19 06:10:38.973358 192.168.1.10 192.168.1.20 TCP 4886 > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 875203 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: 4886 (4886), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
875212 2009-09-19 06:10:39.520209 192.168.1.10 192.168.1.20 TCP 4886 > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 875212 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: 4886 (4886), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
950886 2009-09-19 08:44:52.290427 192.168.1.10 192.168.1.20 TCP uohost > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 950886 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: uohost (3314), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
950893 2009-09-19 08:44:52.743105 192.168.1.10 192.168.1.20 TCP uohost > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 950893 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: uohost (3314), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info
950900 2009-09-19 08:44:53.289926 192.168.1.10 192.168.1.20 TCP uohost > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 950900 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: uohost (3314), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info 1020429 2009-09-19 11:03:05.960251 192.168.1.10 192.168.1.20 TCP hicp > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1020429 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: hicp (3250), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info 1020435 2009-09-19 11:03:06.428629 192.168.1.10 192.168.1.20 TCP hicp > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1020435 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: hicp (3250), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info 1020441 2009-09-19 11:03:06.975463 192.168.1.10 192.168.1.20 TCP hicp > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1020441 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: hicp (3250), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info 1099802 2009-09-19 13:46:19.590963 192.168.1.10 192.168.1.20 TCP ciphire-data > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1099802 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: ciphire-data (3887), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info 1099811 2009-09-19 13:46:20.168725 192.168.1.10 192.168.1.20 TCP ciphire-data > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1099811 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: ciphire-data (3887), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info 1099818 2009-09-19 13:46:20.715577 192.168.1.10 192.168.1.20 TCP ciphire-data > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1099818 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: ciphire-data (3887), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info 1174609 2009-09-19 16:20:33.468964 192.168.1.10 192.168.1.20 TCP 4315 > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1174609 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: 4315 (4315), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info 1174617 2009-09-19 16:20:33.952927 192.168.1.10 192.168.1.20 TCP 4315 > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1174617 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: 4315 (4315), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info 1174623 2009-09-19 16:20:34.374814 192.168.1.10 192.168.1.20 TCP 4315 > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1174623 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: 4315 (4315), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info 1254243 2009-09-19 19:05:46.981383 192.168.1.10 192.168.1.20 TCP parallel > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1254243 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: parallel (4989), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info 1254248 2009-09-19 19:05:47.449677 192.168.1.10 192.168.1.20 TCP parallel > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1254248 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: parallel (4989), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info 1254253 2009-09-19 19:05:48.012164 192.168.1.10 192.168.1.20 TCP parallel > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1254253 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: parallel (4989), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info 1329172 2009-09-19 21:40:00.751117 192.168.1.10 192.168.1.20 TCP twcss > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1329172 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: twcss (3428), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info 1329178 2009-09-19 21:40:01.219493 192.168.1.10 192.168.1.20 TCP twcss > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1329178 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: twcss (3428), Dst Port: microsoft-ds (445), Seq: 0, Len: 0
No. Time Source Destination Protocol Info 1329181 2009-09-19 21:40:01.656970 192.168.1.10 192.168.1.20 TCP twcss > microsoft-ds SYN Seq=0 Win=16384 Len=0 MSS=1460
Frame 1329181 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_2e:9e:54 (00:1e:c9:2e:9e:54), Dst: 3com_1d:42:a7 (00:01:02:1d:42:a7) Internet Protocol, Src: 192.168.1.10 (192.168.1.10), Dst: 192.168.1.20 (192.168.1.20) Transmission Control Protocol, Src Port: twcss (3428), Dst Port: microsoft-ds (445), Seq: 0, Len: 0