This is a preview. You must login to view/edit this pcap.

O 1. 52:54:00:36:3e:ff » ff:ff:ff:ff:ff:ff arp Who has 192.168.100.234? Tell 192.168.100.2
O 2. 192.168.100.238 » 192.168.100.255 nbns Registration NB USER-PC<00>
O 3. 192.168.100.238 » 192.168.100.255 nbns Registration NB USER-PC<20>
O 4. 192.168.100.238 » 192.168.100.255 nbns Registration NB WORKGROUP<00>
O 5. fe80::a179:b3ff:199:2314 » ff02::1:3 llmnr Standard query A wpad

Here are some of things that registered users can do with this pcap:

  • Reorder packets
  • Fragment packets
  • Reassemble TCP streams
  • Rewrite TCP streams (over IPv4 and IPv6)
  • Extract embedded HTTP content
  • Convert any packet into a DoS generator