This is a preview. You must login to view/edit this pcap.

O 1. 2a01:e35:8bd9:8bb0:1a03:73ff:fe66:e568 » ff02::fb mdns Standard query response PTR, cache flush tyrion.local HINFO, cache flush I686 LINUX PTR, cache flush tyrion.local AAAA, cache flush 2a01:e35:8bd9:8bb0:e8da:ad6b:cb5a:69d5 AAAA, cache flush 2a01:e35:8bd9:8bb0:1a03:73ff:fe66:e568
O 2. 192.168.2.26 » 224.0.0.251 mdns Standard query response PTR, cache flush tyrion.local HINFO, cache flush I686 LINUX A, cache flush 192.168.2.26 PTR, cache flush tyrion.local PTR, cache flush tyrion.local AAAA, cache flush 2a01:e35:8bd9:8bb0:e8da:ad6b:cb5a:69d5 AAAA, cache flush 2a01:e35:8bd9:8bb0:1a03:73ff:fe66:e568
O 3. 2a01:e35:8bd9:8bb0:1a03:73ff:fe66:e568 » ff02::fb mdns Standard query response TXT, cache flush PTR tyrion._udisks-ssh._tcp.local SRV, cache flush 0 0 22 tyrion.local AAAA, cache flush 2a01:e35:8bd9:8bb0:1a03:73ff:fe66:e568 AAAA, cache flush 2a01:e35:8bd9:8bb0:e8da:ad6b:cb5a:69d5 TXT, cache flush PTR _udisks-ssh._tcp.local PTR tyrion [18:03:73:66:e5:68]._workstation._tcp.local SRV, cache flush 0 0 9 tyrion.local PTR _workstation._tcp.local
O 4. 2a01:e35:8bd9:8bb0:1a03:73ff:fe66:e568 » ff02::fb mdns Standard query response TXT, cache flush PTR Virtualization Host tyrion._libvirt._tcp.local SRV, cache flush 0 0 65535 tyrion.local PTR _libvirt._tcp.local
O 5. 192.168.2.26 » 224.0.0.251 mdns Standard query response TXT, cache flush PTR tyrion._udisks-ssh._tcp.local SRV, cache flush 0 0 22 tyrion.local AAAA, cache flush 2a01:e35:8bd9:8bb0:1a03:73ff:fe66:e568 AAAA, cache flush 2a01:e35:8bd9:8bb0:e8da:ad6b:cb5a:69d5 A, cache flush 192.168.2.26 TXT, cache flush PTR _udisks-ssh._tcp.local PTR tyrion [18:03:73:66:e5:68]._workstation._tcp.local SRV, cache flush 0 0 9 tyrion.local PTR _workstation._tcp.local

Here are some of things that registered users can do with this pcap:

  • Reorder packets
  • Fragment packets
  • Reassemble TCP streams
  • Rewrite TCP streams (over IPv4 and IPv6)
  • Extract embedded HTTP content
  • Convert any packet into a DoS generator