Share

This is a preview. You must login to view/edit this pcap.

O 1. 00:04:23:d8:42:f7 » ff:ff:ff:ff:ff:ff arp Who has 1.1.1.2? Tell 1.1.1.1
O 2. 00:04:23:d8:e3:63 » 00:04:23:d8:42:f7 arp 1.1.1.2 is at 00:04:23:d8:e3:63
O 3. 1.1.1.1 » 1.1.1.2 tcp 43661 > 20000 [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=118518510 TSER=0 WS=3
O 4. 1.1.1.2 » 1.1.1.1 tcp 20000 > 43661 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=118518512 TSER=118518510 WS=3
O 5. 1.1.1.1 » 1.1.1.2 tcp 43661 > 20000 [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=118518512 TSER=118518512

Here are some of things that registered users can do with this pcap:

  • Reorder packets
  • Fragment packets
  • Reassemble TCP streams
  • Rewrite TCP streams (over IPv4 and IPv6)
  • Extract embedded HTTP content
  • Convert any packet into a DoS generator