This is a preview. You must login to view/edit this pcap.

O 1. » smb NT Create AndX Request, Path: \wkssvc
O 2. » smb NT Create AndX Response, FID: 0x4000
O 3. » dcerpc Bind: call_id: 1 WKSSVC V1.0
O 4. » smb Write AndX Response, FID: 0x4000, 72 bytes
O 5. » smb Read AndX Request, FID: 0x4000, 1024 bytes at offset 0

Here are some of things that registered users can do with this pcap:

  • Reorder packets
  • Fragment packets
  • Reassemble TCP streams
  • Rewrite TCP streams (over IPv4 and IPv6)
  • Extract embedded HTTP content
  • Convert any packet into a DoS generator