This is a preview. You must login to view/edit this pcap.

O 1. 127.0.1.1 » 127.0.1.1 tcp 40189 > 80 [SYN] Seq=0 Win=43690 Len=0 MSS=65495 SACK_PERM=1 TSV=17656075 TSER=0 WS=10
O 2. 127.0.1.1 » 127.0.1.1 tcp 80 > 40189 [SYN, ACK] Seq=0 Ack=1 Win=43690 Len=0 MSS=65495 SACK_PERM=1 TSV=17656075 TSER=17656075 WS=10
O 3. 127.0.1.1 » 127.0.1.1 tcp 40189 > 80 [ACK] Seq=1 Ack=1 Win=44032 Len=0 TSV=17656075 TSER=17656075
O 4. 127.0.1.1 » 127.0.1.1 http/xml POST /drupal/xmlrpc.php HTTP/1.1
O 5. 127.0.1.1 » 127.0.1.1 tcp 80 > 40189 [ACK] Seq=1 Ack=902 Win=46080 Len=0 TSV=17656075 TSER=17656075

Here are some of things that registered users can do with this pcap:

  • Reorder packets
  • Fragment packets
  • Reassemble TCP streams
  • Rewrite TCP streams (over IPv4 and IPv6)
  • Extract embedded HTTP content
  • Convert any packet into a DoS generator