This is a preview. You must login to view/edit this pcap.

O 1. 172.17.203.34 » 172.17.203.47 tcp 3201 > 502 [SYN] Seq=0 Win=64512 Len=0 MSS=1460 WS=0 TSV=0 TSER=0
O 2. 172.17.203.47 » 172.17.203.34 tcp 502 > 3201 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=18954852 TSER=0
O 3. 172.17.203.34 » 172.17.203.47 tcp 3201 > 502 [ACK] Seq=1 Ack=1 Win=64512 Len=0 TSV=617859 TSER=18954852
O 4. 172.17.203.34 » 172.17.203.47 modbus/tcp query [ 1 pkt(s)]: trans: 0; unit: 1, func: 1: Read coils.
O 5. 172.17.203.47 » 172.17.203.34 modbus/tcp response [ 1 pkt(s)]: trans: 0; unit: 1, func: 1: Read coils.

Here are some of things that registered users can do with this pcap:

  • Reorder packets
  • Fragment packets
  • Reassemble TCP streams
  • Rewrite TCP streams (over IPv4 and IPv6)
  • Extract embedded HTTP content
  • Convert any packet into a DoS generator