This is a preview. You must login to view/edit this pcap.

O 1. 192.168.2.25 » 192.168.2.100 modbus/tcp response [ 1 pkt(s)]: trans: 0; unit: 255, func: 1: Read coils.
O 2. 192.168.2.100 » 192.168.2.25 tcp 1111 > 502 [ACK] Seq=1 Ack=11 Win=65515 Len=0
O 3. 192.168.2.100 » 192.168.2.25 modbus/tcp query [ 1 pkt(s)]: trans: 0; unit: 255, func: 1: Read coils.
O 4. 192.168.2.25 » 192.168.2.100 modbus/tcp response [ 1 pkt(s)]: trans: 0; unit: 255, func: 1: Read coils.
O 5. 192.168.2.100 » 192.168.2.25 tcp 1111 > 502 [ACK] Seq=13 Ack=21 Win=65505 Len=0

Here are some of things that registered users can do with this pcap:

  • Reorder packets
  • Fragment packets
  • Reassemble TCP streams
  • Rewrite TCP streams (over IPv4 and IPv6)
  • Extract embedded HTTP content
  • Convert any packet into a DoS generator