This is a preview. You must login to view/edit this pcap.

O 1. de:ad:01:23:00:0a » ff:ff:ff:ff:ff:ff arp Who has 10.0.0.1? Tell 10.0.0.35
O 2. 00:15:17:e6:69:0e » de:ad:01:23:00:0a arp 10.0.0.1 is at 00:15:17:e6:69:0e
O 3. 10.0.0.35 » 11.0.0.2 tcp 52538 > 80 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 TSV=486253659 TSER=0
O 4. 11.0.0.2 » 10.0.0.35 tcp 80 > 52538 [SYN, ACK] Seq=0 Ack=1 Win=28960 Len=0 MSS=1460 TSV=388338107 TSER=486253659
O 5. 10.0.0.35 » 11.0.0.2 tcp 52538 > 80 [ACK] Seq=1 Ack=1 Win=65535 Len=0 TSV=486253666 TSER=388338107

Here are some of things that registered users can do with this pcap:

  • Reorder packets
  • Fragment packets
  • Reassemble TCP streams
  • Rewrite TCP streams (over IPv4 and IPv6)
  • Extract embedded HTTP content
  • Convert any packet into a DoS generator