机窝安全——包浏览

首页 > 抓包

Subject	Content
/pkt/up/20170719/20170719123240_91366.pcap Size is:	2215
FileHeader is:	d4c3b2a1020004000000000000000000 0000040001000000

Pack 1
PackHeader is:	e3da6e598cf302004200000042000000
DateTime:	2017-07-19 12:06:59.193420
Pack Caplen is:	66
Src MAC is:	0050563f9c7e
Dst MAC is:	ec26caaf42ba
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.0.124
DecIP Addr is:	69.171.79.109
Data Proctol is:	06(TCP)
Src Port is:	49174
Dec Port is:	80
SEQ -> NSEQ is:	666342055->0
Data Len is:	12
Hex Data is:	020405b40103030201010402
Binary Data is:	�
Pack 2
PackHeader is:	e3da6e593a9105004200000042000000
DateTime:	2017-07-19 12:06:59.364858
Pack Caplen is:	66
Src MAC is:	ec26caaf42ba
Dst MAC is:	0050563f9c7e
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	69.171.79.109
DecIP Addr is:	192.168.0.124
Data Proctol is:	06(TCP)
Src Port is:	80
Dec Port is:	49174
SEQ -> NSEQ is:	1975943535->666342056
Data Len is:	12
Hex Data is:	020405840101040201030307
Binary Data is:	�
Pack 3
PackHeader is:	e3da6e596a9105003600000036000000
DateTime:	2017-07-19 12:06:59.364906
Pack Caplen is:	54
Src MAC is:	0050563f9c7e
Dst MAC is:	ec26caaf42ba
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.0.124
DecIP Addr is:	69.171.79.109
Data Proctol is:	06(TCP)
Src Port is:	49174
Dec Port is:	80
SEQ -> NSEQ is:	666342056->1975943536
Data Len is:	0
Hex Data is:
Binary Data is:
Pack 4
PackHeader is:	e3da6e59feba0500e8010000e8010000
DateTime:	2017-07-19 12:06:59.375550
Pack Caplen is:	488
Src MAC is:	0050563f9c7e
Dst MAC is:	ec26caaf42ba
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.0.124
DecIP Addr is:	69.171.79.109
Data Proctol is:	06(TCP)
Src Port is:	49174
Dec Port is:	80
SEQ -> NSEQ is:	666342056->1975943536
Data Len is:	434
Hex Data is:	474554202f74756e6e656c2e6e6f736f 636b65742e70687020485454502f312e 310d0a4163636570743a206170706c69 636174696f6e2f782d6d732d6170706c 69636174696f6e2c20696d6167652f6a 7065672c206170706c69636174696f6e 2f78616d6c2b786d6c2c20696d616765 2f6769662c20696d6167652f706a7065 672c206170706c69636174696f6e2f78 2d6d732d786261702c202a2f2a0d0a41 63636570742d4c616e67756167653a20 7a682d434e0d0a557365722d4167656e 743a204d6f7a696c6c612f342e302028 636f6d70617469626c653b204d534945 20382e303b2057696e646f7773204e54 20362e313b20574f5736343b20547269 64656e742f342e303b20534c4343323b 202e4e455420434c5220322e302e3530 3732373b202e4e455420434c5220332e 352e33303732393b202e4e455420434c 5220332e302e33303732393b204d6564 69612043656e74657220504320362e30 290d0a4163636570742d456e636f6469 6e673a20677a69702c206465666c6174 650d0a486f73743a2036392e3137312e 37392e3130390d0a436f6e6e65637469 6f6e3a204b6565702d416c6976650d0a 0d0a
Binary Data is:	GET /tunnel.nosocket.php HTTP/1.1 Accept: application/x-ms-application, image/jpeg, application/xaml+xml, image/gif, image/pjpeg, application/x-ms-xbap, / Accept-Language: zh-CN User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0) Accept-Encoding: gzip, deflate Host: 69.171.79.109 Connection: Keep-Alive
Pack 5
PackHeader is:	e3da6e59c2150a003c0000003c000000
DateTime:	2017-07-19 12:06:59.660930
Pack Caplen is:	60
Src MAC is:	ec26caaf42ba
Dst MAC is:	0050563f9c7e
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	69.171.79.109
DecIP Addr is:	192.168.0.124
Data Proctol is:	06(TCP)
Src Port is:	80
Dec Port is:	49174
SEQ -> NSEQ is:	1975943536->666342490
Data Len is:	6
Hex Data is:	000000000000
Binary Data is:	��
Pack 6
PackHeader is:	e3da6e59e9160a001e0100001e010000
DateTime:	2017-07-19 12:06:59.661225
Pack Caplen is:	286
Src MAC is:	ec26caaf42ba
Dst MAC is:	0050563f9c7e
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	69.171.79.109
DecIP Addr is:	192.168.0.124
Data Proctol is:	06(TCP)
Src Port is:	80
Dec Port is:	49174
SEQ -> NSEQ is:	1975943536->666342490
Data Len is:	232
Hex Data is:	485454502f312e3120323030204f4b0d 0a446174653a205765642c203139204a 756c20323031372030343a30373a3030 20474d540d0a5365727665723a204170 616368652f322e342e31302028446562 69616e290d0a436f6e74656e742d4c65 6e6774683a2032380d0a4b6565702d41 6c6976653a2074696d656f75743d352c 206d61783d3130300d0a436f6e6e6563 74696f6e3a204b6565702d416c697665 0d0a436f6e74656e742d547970653a20 746578742f68746d6c3b206368617273 65743d5554462d380d0a0d0a47656f72 6720736179732c2027416c6c20736565 6d732066696e6527
Binary Data is:	HTTP/1.1 200 OK Date: Wed, 19 Jul 2017 04:07:00 GMT Server: Apache/2.4.10 (Debian) Content-Length: 28 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Georg says, 'All seems fine'
Pack 7
PackHeader is:	e3da6e5908350d003600000036000000
DateTime:	2017-07-19 12:06:59.865544
Pack Caplen is:	54
Src MAC is:	0050563f9c7e
Dst MAC is:	ec26caaf42ba
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.0.124
DecIP Addr is:	69.171.79.109
Data Proctol is:	06(TCP)
Src Port is:	49174
Dec Port is:	80
SEQ -> NSEQ is:	666342490->1975943768
Data Len is:	0
Hex Data is:
Binary Data is:
Pack 8
PackHeader is:	e3da6e595e910e005901000059010000
DateTime:	2017-07-19 12:06:59.954718
Pack Caplen is:	345
Src MAC is:	0050563f9c7e
Dst MAC is:	ec26caaf42ba
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.0.124
DecIP Addr is:	69.171.79.109
Data Proctol is:	06(TCP)
Src Port is:	49174
Dec Port is:	80
SEQ -> NSEQ is:	666342490->1975943768
Data Len is:	291
Hex Data is:	474554202f66617669636f6e2e69636f 20485454502f312e310d0a4163636570 743a202a2f2a0d0a4163636570742d45 6e636f64696e673a20677a69702c2064 65666c6174650d0a557365722d416765 6e743a204d6f7a696c6c612f342e3020 28636f6d70617469626c653b204d5349 4520382e303b2057696e646f7773204e 5420362e313b20574f5736343b205472 6964656e742f342e303b20534c434332 3b202e4e455420434c5220322e302e35 303732373b202e4e455420434c522033 2e352e33303732393b202e4e45542043 4c5220332e302e33303732393b204d65 6469612043656e74657220504320362e 30290d0a486f73743a2036392e313731 2e37392e3130390d0a436f6e6e656374 696f6e3a204b6565702d416c6976650d 0a0d0a
Binary Data is:	GET /favicon.ico HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0) Host: 69.171.79.109 Connection: Keep-Alive
Pack 9
PackHeader is:	e4da6e5958a102002e0200002e020000
DateTime:	2017-07-19 12:07:00.172376
Pack Caplen is:	558
Src MAC is:	ec26caaf42ba
Dst MAC is:	0050563f9c7e
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	69.171.79.109
DecIP Addr is:	192.168.0.124
Data Proctol is:	06(TCP)
Src Port is:	80
Dec Port is:	49174
SEQ -> NSEQ is:	1975943768->666342781
Data Len is:	504
Hex Data is:	485454502f312e3120343034204e6f74 20466f756e640d0a446174653a205765 642c203139204a756c20323031372030 343a30373a303120474d540d0a536572 7665723a204170616368652f322e342e 3130202844656269616e290d0a436f6e 74656e742d4c656e6774683a20323838 0d0a4b6565702d416c6976653a207469 6d656f75743d352c206d61783d39390d 0a436f6e6e656374696f6e3a204b6565 702d416c6976650d0a436f6e74656e74 2d547970653a20746578742f68746d6c 3b20636861727365743d69736f2d3838 35392d310d0a0d0a3c21444f43545950 452048544d4c205055424c494320222d 2f2f494554462f2f4454442048544d4c 20322e302f2f454e223e0a3c68746d6c 3e3c686561643e0a3c7469746c653e34 3034204e6f7420466f756e643c2f7469 746c653e0a3c2f686561643e3c626f64 793e0a3c68313e4e6f7420466f756e64 3c2f68313e0a3c703e54686520726571 7565737465642055524c202f66617669 636f6e2e69636f20776173206e6f7420 666f756e64206f6e2074686973207365 727665722e3c2f703e0a3c68723e0a3c 616464726573733e4170616368652f32 2e342e3130202844656269616e292053 65727665722061742036392e3137312e 37392e31303920506f72742038303c2f 616464726573733e0a3c2f626f64793e 3c2f68746d6c3e0a
Binary Data is:	HTTP/1.1 404 Not Found Date: Wed, 19 Jul 2017 04:07:01 GMT Server: Apache/2.4.10 (Debian) Content-Length: 288 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>404 Not Found</title> </head><body> <h1>Not Found</h1> <p>The requested URL /favicon.ico was not found on this server.</p> <hr> <address>Apache/2.4.10 (Debian) Server at 69.171.79.109 Port 80</address> </body></html>
Pack 10
PackHeader is:	e4da6e596dce05003600000036000000
DateTime:	2017-07-19 12:07:00.380525
Pack Caplen is:	54
Src MAC is:	0050563f9c7e
Dst MAC is:	ec26caaf42ba
Ethertype is:	0800
IP Version is:	4
IP Header Len is:	20(bytes)
SrcIP Addr is:	192.168.0.124
DecIP Addr is:	69.171.79.109
Data Proctol is:	06(TCP)
Src Port is:	49174
Dec Port is:	80
SEQ -> NSEQ is:	666342781->1975944272
Data Len is:	0
Hex Data is:
Binary Data is: