This is a preview. You must login to view/edit this pcap.

O 1. 196.254.234.224 » 196.254.234.224 smb NT Create AndX Request, Path: \wkssvc
O 2. 196.254.234.224 » 196.254.234.224 smb NT Create AndX Response, FID: 0xc005
O 3. 196.254.234.224 » 196.254.234.224 dcerpc Bind: call_id: 1 WKSSVC V1.0
O 4. 196.254.234.224 » 196.254.234.224 smb Write AndX Response, FID: 0xc005, 72 bytes
O 5. 196.254.234.224 » 196.254.234.224 smb Read AndX Request, FID: 0xc005, 1024 bytes at offset 0

Here are some of things that registered users can do with this pcap:

  • Reorder packets
  • Fragment packets
  • Reassemble TCP streams
  • Rewrite TCP streams (over IPv4 and IPv6)
  • Extract embedded HTTP content
  • Convert any packet into a DoS generator