This is a preview. You must login to view/edit this pcap.

O 1. 10.46.140.192 » 10.46.142.27 smb Tree Connect AndX Response
O 2. 10.46.142.27 » 10.46.140.192 tcp 49178 > 139 [ACK] Seq=1 Ack=61 Win=65535 Len=0 TSV=46609973 TSER=918163
O 3. 10.46.142.27 » 10.46.140.192 smb NT Create AndX Request, Path: \srvsvc
O 4. 10.46.140.192 » 10.46.142.27 smb NT Create AndX Response, FID: 0x4000
O 5. 10.46.142.27 » 10.46.140.192 tcp 49178 > 139 [ACK] Seq=105 Ack=168 Win=65535 Len=0 TSV=46609973 TSER=918163

Here are some of things that registered users can do with this pcap:

  • Reorder packets
  • Fragment packets
  • Reassemble TCP streams
  • Rewrite TCP streams (over IPv4 and IPv6)
  • Extract embedded HTTP content
  • Convert any packet into a DoS generator