[Dshield] OK, packet guys, what about 43919 then?

Crowley, C. crowleyc at wiacomm.net
Wed Feb 4 17:00:04 GMT 2004


Thanks, Johannes and Pete. Here is some more data. I wasn't hiding the content
(except my customer's IP); that was a composite. Here are a hundred real ones
(except for the IP, again). This is continuous and has been going on for weeks,
if not months. Just that one customer, just that one port.

NetworkActiv PIAFCTM saved information:

Type Size       Source IP  Destination IP  sPort dPort  Date/Time
----------------------------------------------------------------

 TCP   48    203.45.69.77    qqq.rrr.sss.ttt   3435 43919  [2004.02.04 -
10:51:14.849]

45 00 00 30 7C 52 40 00 6F 06 01 31 CB 2D 45 4D
40 5A 3D 70 0D 6B AB 8F E1 9F 96 73 00 00 00 00
70 02 40 00 83 CC 00 00 02 04 05 B4 01 01 04 02


 TCP   48    203.45.69.77    qqq.rrr.sss.ttt   3435 43919  [2004.02.04 -
10:51:17.873]

45 00 00 30 7C CE 40 00 6F 06 00 B5 CB 2D 45 4D
40 5A 3D 70 0D 6B AB 8F E1 9F 96 73 00 00 00 00
70 02 40 00 83 CC 00 00 02 04 05 B4 01 01 04 02


 UDP  235    qqq.rrr.sss.ttt    64.90.61.255   1086   138  [2004.02.04 -
10:51:18.424]

45 00 00 EB D7 A3 00 00 80 11 66 3B 40 5A 3D 70
40 5A 3D FF 04 3E 00 8A 00 D7 76 D6 11 02 44 06
40 5A 3D 70 00 8A 00 C1 00 00 20 46 44 45 46 46
43 46 47 45 46 46 43 43 41 43 41 43 41 43 41 43
41 43 41 43 41 43 41 43 41 41 41 00 20 46 44 45
4E 45 4A 46 45 45 49 43 41 43 41 43 41 43 41 43
41 43 41 43 41 43 41 43 41 43 41 42 4F 00 FF 53
4D 42 25 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 00
00 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 27 00 56 00 03 00 01 00 01 00 02
00 38 00 5C 4D 41 49 4C 53 4C 4F 54 5C 42 52 4F
57 53 45 00 0F D4 40 77 1B 00 53 45 52 56 45 52
00 00 00 00 00 00 00 00 00 00 04 00 03 20 45 00
15 04 55 AA 53 45 52 56 45 52 00 

 TCP   48    203.45.69.77    qqq.rrr.sss.ttt   3435 43919  [2004.02.04 -
10:51:23.882]

45 00 00 30 7E 56 40 00 6F 06 FF 2C CB 2D 45 4D
40 5A 3D 70 0D 6B AB 8F E1 9F 96 73 00 00 00 00
70 02 40 00 83 CC 00 00 02 04 05 B4 01 01 04 02


 TCP   48 128.206.176.169    qqq.rrr.sss.ttt   2008 43919  [2004.02.04 -
10:51:31.303]

45 00 00 30 62 91 40 00 6C 06 FC F4 80 CE B0 A9
40 5A 3D 70 07 D8 AB 8F 0A 18 E5 6D 00 00 00 00
70 02 20 00 11 40 00 00 02 04 05 64 01 01 04 02


 TCP   48   129.82.64.105    qqq.rrr.sss.ttt   3746 43919  [2004.02.04 -
10:51:32.094]

45 00 00 30 8C 8A 40 00 74 06 3A B8 81 52 40 69
40 5A 3D 70 0E A2 AB 8F 8D AB 0D DC 00 00 00 00
70 02 FA F0 F2 EF 00 00 02 04 05 B4 01 01 04 02


 TCP   48   65.196.41.197    qqq.rrr.sss.ttt   3618 43919  [2004.02.04 -
10:51:33.416]

45 00 00 30 B0 A7 40 00 73 06 6D CD 41 C4 29 C5
40 5A 3D 70 0E 22 AB 8F 94 76 0F 36 00 00 00 00
70 02 FA F0 41 CD 00 00 02 04 05 64 01 01 04 02


 TCP   48 128.206.176.169    qqq.rrr.sss.ttt   2008 43919  [2004.02.04 -
10:51:34.207]

45 00 00 30 70 91 40 00 6C 06 EE F4 80 CE B0 A9
40 5A 3D 70 07 D8 AB 8F 0A 18 E5 6D 00 00 00 00
70 02 20 00 11 40 00 00 02 04 05 64 01 01 04 02


 TCP   48   129.82.64.105    qqq.rrr.sss.ttt   3746 43919  [2004.02.04 -
10:51:35.038]

45 00 00 30 8C A9 40 00 74 06 3A 99 81 52 40 69
40 5A 3D 70 0E A2 AB 8F 8D AB 0D DC 00 00 00 00
70 02 FA F0 F2 EF 00 00 02 04 05 B4 01 01 04 02


 TCP   48   65.196.41.197    qqq.rrr.sss.ttt   3618 43919  [2004.02.04 -
10:51:36.330]

45 00 00 30 B0 C7 40 00 73 06 6D AD 41 C4 29 C5
40 5A 3D 70 0E 22 AB 8F 94 76 0F 36 00 00 00 00
70 02 FA F0 41 CD 00 00 02 04 05 64 01 01 04 02


 TCP   48 128.206.176.169    qqq.rrr.sss.ttt   2008 43919  [2004.02.04 -
10:51:40.235]

45 00 00 30 96 91 40 00 6C 06 C8 F4 80 CE B0 A9
40 5A 3D 70 07 D8 AB 8F 0A 18 E5 6D 00 00 00 00
70 02 20 00 11 40 00 00 02 04 05 64 01 01 04 02


 TCP   48   129.82.64.105    qqq.rrr.sss.ttt   3746 43919  [2004.02.04 -
10:51:40.956]

45 00 00 30 8D 12 40 00 74 06 3A 30 81 52 40 69
40 5A 3D 70 0E A2 AB 8F 8D AB 0D DC 00 00 00 00
70 02 FA F0 F2 EF 00 00 02 04 05 B4 01 01 04 02


 TCP   48   65.196.41.197    qqq.rrr.sss.ttt   3618 43919  [2004.02.04 -
10:51:42.358]

45 00 00 30 B0 F1 40 00 73 06 6D 83 41 C4 29 C5
40 5A 3D 70 0E 22 AB 8F 94 76 0F 36 00 00 00 00
70 02 FA F0 41 CD 00 00 02 04 05 64 01 01 04 02


 TCP   48  62.195.163.169    qqq.rrr.sss.ttt  55568 43919  [2004.02.04 -
10:51:43.720]

45 00 00 30 26 42 40 00 6A 06 8A 4F 3E C3 A3 A9
40 5A 3D 70 D9 10 AB 8F 81 D3 A5 89 00 00 00 00
70 02 FA F0 7B FA 00 00 02 04 05 B4 01 01 04 02


 TCP   48  62.195.163.169    qqq.rrr.sss.ttt  55568 43919  [2004.02.04 -
10:51:45.172]

45 00 00 30 26 9C 40 00 6A 06 89 F5 3E C3 A3 A9
40 5A 3D 70 D9 10 AB 8F 81 D3 A5 89 00 00 00 00
70 02 FA F0 7B FA 00 00 02 04 05 B4 01 01 04 02


 TCP   48  62.195.163.169    qqq.rrr.sss.ttt  55568 43919  [2004.02.04 -
10:51:51.191]

45 00 00 30 27 36 40 00 6A 06 89 5B 3E C3 A3 A9
40 5A 3D 70 D9 10 AB 8F 81 D3 A5 89 00 00 00 00
70 02 FA F0 7B FA 00 00 02 04 05 B4 01 01 04 02


 TCP   48 128.206.176.169    qqq.rrr.sss.ttt   2008 43919  [2004.02.04 -
10:51:52.203]

45 00 00 30 D8 91 40 00 6C 06 86 F4 80 CE B0 A9
40 5A 3D 70 07 D8 AB 8F 0A 18 E5 6D 00 00 00 00
70 02 20 00 11 40 00 00 02 04 05 64 01 01 04 02


 TCP   48    203.45.69.77    qqq.rrr.sss.ttt   3798 43919  [2004.02.04 -
10:52:01.917]

45 00 00 30 85 D3 40 00 6F 06 F7 AF CB 2D 45 4D
40 5A 3D 70 0E D6 AB 8F E3 5E F7 3D 00 00 00 00
70 02 40 00 1F D8 00 00 02 04 05 B4 01 01 04 02


 TCP   48    203.45.69.77    qqq.rrr.sss.ttt   3798 43919  [2004.02.04 -
10:52:05.121]

45 00 00 30 86 70 40 00 6F 06 F7 12 CB 2D 45 4D
40 5A 3D 70 0E D6 AB 8F E3 5E F7 3D 00 00 00 00
70 02 40 00 1F D8 00 00 02 04 05 B4 01 01 04 02


 TCP   48    203.45.69.77    qqq.rrr.sss.ttt   3798 43919  [2004.02.04 -
10:52:11.250]

45 00 00 30 87 C1 40 00 6F 06 F5 C1 CB 2D 45 4D
40 5A 3D 70 0E D6 AB 8F E3 5E F7 3D 00 00 00 00
70 02 40 00 1F D8 00 00 02 04 05 B4 01 01 04 02


 TCP   48  62.195.163.169    qqq.rrr.sss.ttt  55697 43919  [2004.02.04 -
10:52:26.933]

45 00 00 30 2A C3 40 00 6A 06 85 CE 3E C3 A3 A9
40 5A 3D 70 D9 91 AB 8F 82 AF 87 5F 00 00 00 00
70 02 FA F0 98 C7 00 00 02 04 05 B4 01 01 04 02


 TCP   48  62.195.163.169    qqq.rrr.sss.ttt  55697 43919  [2004.02.04 -
10:52:29.907]

45 00 00 30 2B 21 40 00 6A 06 85 70 3E C3 A3 A9
40 5A 3D 70 D9 91 AB 8F 82 AF 87 5F 00 00 00 00
70 02 FA F0 98 C7 00 00 02 04 05 B4 01 01 04 02


 TCP   48 128.206.176.169    qqq.rrr.sss.ttt   2083 43919  [2004.02.04 -
10:52:30.978]

45 00 00 30 83 92 40 00 6C 06 DB F3 80 CE B0 A9
40 5A 3D 70 08 23 AB 8F 62 E8 E3 04 00 00 00 00
70 02 20 00 BA 8D 00 00 02 04 05 64 01 01 04 02


 TCP   48   129.82.64.105    qqq.rrr.sss.ttt   4655 43919  [2004.02.04 -
10:52:33.051]

45 00 00 30 90 80 40 00 74 06 36 C2 81 52 40 69
40 5A 3D 70 12 2F AB 8F 8F 64 26 E2 00 00 00 00
70 02 FA F0 D4 A3 00 00 02 04 05 B4 01 01 04 02


 TCP   48   65.196.41.197    qqq.rrr.sss.ttt   3733 43919  [2004.02.04 -
10:52:33.182]

45 00 00 30 B2 32 40 00 73 06 6C 42 41 C4 29 C5
40 5A 3D 70 0E 95 AB 8F 5C 47 AF 12 00 00 00 00
70 02 FA F0 D9 AC 00 00 02 04 05 64 01 01 04 02


 TCP   48 128.206.176.169    qqq.rrr.sss.ttt   2083 43919  [2004.02.04 -
10:52:33.883]

45 00 00 30 92 92 40 00 6C 06 CC F3 80 CE B0 A9
40 5A 3D 70 08 23 AB 8F 62 E8 E3 04 00 00 00 00
70 02 20 00 BA 8D 00 00 02 04 05 64 01 01 04 02


 TCP   48  62.195.163.169    qqq.rrr.sss.ttt  55697 43919  [2004.02.04 -
10:52:35.956]

45 00 00 30 2B A1 40 00 6A 06 84 F0 3E C3 A3 A9
40 5A 3D 70 D9 91 AB 8F 82 AF 87 5F 00 00 00 00
70 02 FA F0 98 C7 00 00 02 04 05 B4 01 01 04 02


 TCP   48   129.82.64.105    qqq.rrr.sss.ttt   4655 43919  [2004.02.04 -
10:52:36.036]

45 00 00 30 90 B2 40 00 74 06 36 90 81 52 40 69
40 5A 3D 70 12 2F AB 8F 8F 64 26 E2 00 00 00 00
70 02 FA F0 17 9B BD 08 02 04 05 B4 01 01 04 02


 TCP   48   65.196.41.197    qqq.rrr.sss.ttt   3733 43919  [2004.02.04 -
10:52:36.116]

45 00 00 30 B2 55 40 00 73 06 6C 1F 41 C4 29 C5
40 5A 3D 70 0E 95 AB 8F 5C 47 AF 12 00 00 00 00
70 02 FA F0 D9 AC 00 00 02 04 05 64 01 01 04 02


 TCP   48 128.206.176.169    qqq.rrr.sss.ttt   2083 43919  [2004.02.04 -
10:52:39.891]

45 00 00 30 C0 92 40 00 6C 06 9E F3 80 CE B0 A9
40 5A 3D 70 08 23 AB 8F 62 E8 E3 04 00 00 00 00
70 02 20 00 BA 8D 00 00 02 04 05 64 01 01 04 02


 TCP   48   129.82.64.105    qqq.rrr.sss.ttt   4655 43919  [2004.02.04 -
10:52:41.954]

45 00 00 30 91 0F 40 00 74 06 36 33 81 52 40 69
40 5A 3D 70 12 2F AB 8F 8F 64 26 E2 00 00 00 00
70 02 FA F0 D4 A3 00 00 02 04 05 B4 01 01 04 02


 TCP   48   65.196.41.197    qqq.rrr.sss.ttt   3733 43919  [2004.02.04 -
10:52:42.144]

45 00 00 30 B2 83 40 00 73 06 6B F1 41 C4 29 C5
40 5A 3D 70 0E 95 AB 8F 5C 47 AF 12 00 00 00 00
70 02 FA F0 D9 AC 00 00 02 04 05 64 01 01 04 02


 TCP   48    203.45.69.77    qqq.rrr.sss.ttt   4145 43919  [2004.02.04 -
10:52:48.884]

45 00 00 30 8F 78 40 00 6F 06 EE 0A CB 2D 45 4D
40 5A 3D 70 10 31 AB 8F E5 11 AF FA 00 00 00 00
70 02 40 00 64 0D 00 00 02 04 05 B4 01 01 04 02


 TCP   48    203.45.69.77    qqq.rrr.sss.ttt   4145 43919  [2004.02.04 -
10:52:51.778]

45 00 00 30 90 0A 40 00 6F 06 ED 78 CB 2D 45 4D
40 5A 3D 70 10 31 AB 8F E5 11 AF FA 00 00 00 00
70 02 40 00 64 0D 00 00 02 04 05 B4 01 01 04 02


 TCP   48 128.206.176.169    qqq.rrr.sss.ttt   2083 43919  [2004.02.04 -
10:52:51.888]

45 00 00 30 E7 92 40 00 6C 06 77 F3 80 CE B0 A9
40 5A 3D 70 08 23 AB 8F 62 E8 E3 04 00 00 00 00
70 02 20 00 BA 8D 00 00 02 04 05 64 01 01 04 02


 TCP   48    203.45.69.77    qqq.rrr.sss.ttt   4145 43919  [2004.02.04 -
10:52:57.506]

45 00 00 30 91 11 40 00 6F 06 EC 71 CB 2D 45 4D
40 5A 3D 70 10 31 AB 8F E5 11 AF FA 00 00 00 00
70 02 40 00 64 0D 00 00 02 04 05 B4 01 01 04 02


 TCP   48  62.195.163.169    qqq.rrr.sss.ttt  55831 43919  [2004.02.04 -
10:53:11.627]

45 00 00 30 2E CF 40 00 6A 06 81 C2 3E C3 A3 A9
40 5A 3D 70 DA 17 AB 8F 83 90 6C F1 00 00 00 00
70 02 FA F0 B1 CE 00 00 02 04 05 B4 01 01 04 02


 TCP   48  62.195.163.169    qqq.rrr.sss.ttt  55831 43919  [2004.02.04 -
10:53:14.551]

45 00 00 30 2F 28 40 00 6A 06 81 69 3E C3 A3 A9
40 5A 3D 70 DA 17 AB 8F 83 90 6C F1 00 00 00 00
70 02 FA F0 B1 CE 00 00 02 04 05 B4 01 01 04 02


 TCP   48 128.206.176.169    qqq.rrr.sss.ttt   2139 43919  [2004.02.04 -
10:53:15.943]

45 00 00 30 54 93 40 00 6C 06 0A F3 80 CE B0 A9
40 5A 3D 70 08 5B AB 8F 5F 33 A9 6A 00 00 00 00
70 02 20 00 F7 A4 00 00 02 04 05 64 01 01 04 02


 TCP   48   65.196.41.197    qqq.rrr.sss.ttt   3807 43919  [2004.02.04 -
10:53:17.676]

45 00 00 30 B3 20 40 00 73 06 6B 54 41 C4 29 C5
40 5A 3D 70 0E DF AB 8F 4C 80 29 67 00 00 00 00
70 02 FA F0 6E D5 00 00 02 04 05 64 01 01 04 02


 TCP   48 128.206.176.169    qqq.rrr.sss.ttt   2139 43919  [2004.02.04 -
10:53:18.887]

45 00 00 30 60 93 40 00 6C 06 FE F2 80 CE B0 A9
40 5A 3D 70 08 5B AB 8F 5F 33 A9 6A 00 00 00 00
70 02 20 00 F7 A4 00 00 02 04 05 64 01 01 04 02


 TCP   48  62.195.163.169    qqq.rrr.sss.ttt  55831 43919  [2004.02.04 -
10:53:20.460]

45 00 00 30 2F E3 40 00 6A 06 80 AE 3E C3 A3 A9
40 5A 3D 70 DA 17 AB 8F 83 90 6C F1 00 00 00 00
70 02 FA F0 B1 CE 00 00 02 04 05 B4 01 01 04 02


 TCP   48   65.196.41.197    qqq.rrr.sss.ttt   3807 43919  [2004.02.04 -
10:53:20.700]

45 00 00 30 B3 43 40 00 73 06 6B 31 41 C4 29 C5
40 5A 3D 70 0E DF AB 8F 4C 80 29 67 00 00 00 00
70 02 FA F0 6E D5 00 00 02 04 05 64 01 01 04 02


 TCP   48 128.206.176.169    qqq.rrr.sss.ttt   2139 43919  [2004.02.04 -
10:53:24.886]

45 00 00 30 8B 93 40 00 6C 06 D3 F2 80 CE B0 A9
40 5A 3D 70 08 5B AB 8F 5F 33 A9 6A 00 00 00 00
70 02 20 00 F7 A4 00 00 02 04 05 64 01 01 04 02


 TCP   48   65.196.41.197    qqq.rrr.sss.ttt   3807 43919  [2004.02.04 -
10:53:26.598]

45 00 00 30 B3 6F 40 00 73 06 6B 05 41 C4 29 C5
40 5A 3D 70 0E DF AB 8F 4C 80 29 67 00 00 00 00
70 02 FA F0 6E D5 00 00 02 04 05 64 01 01 04 02


 TCP   48   129.82.64.105    qqq.rrr.sss.ttt   3612 43919  [2004.02.04 -
10:53:33.919]

45 00 00 30 94 2C 40 00 74 06 33 16 81 52 40 69
40 5A 3D 70 0E 1C AB 8F 91 11 E3 87 00 00 00 00
70 02 FA F0 1A 64 00 00 02 04 05 B4 01 01 04 02


 TCP   48    203.45.69.77    qqq.rrr.sss.ttt   4517 43919  [2004.02.04 -
10:53:36.102]

45 00 00 30 99 FE 40 00 6F 06 E3 84 CB 2D 45 4D
40 5A 3D 70 11 A5 AB 8F E6 CE 00 FE 00 00 00 00
70 02 40 00 0F D9 00 00 02 04 05 B4 01 01 04 02


 TCP   48   129.82.64.105    qqq.rrr.sss.ttt   3612 43919  [2004.02.04 -
10:53:36.833]

45 00 00 30 94 53 40 00 74 06 32 EF 81 52 40 69
40 5A 3D 70 0E 1C AB 8F 91 11 E3 87 00 00 00 00
70 02 FA F0 1A 64 00 00 02 04 05 B4 01 01 04 02


 TCP   48 128.206.176.169    qqq.rrr.sss.ttt   2139 43919  [2004.02.04 -
10:53:36.893]

45 00 00 30 C8 93 40 00 6C 06 96 F2 80 CE B0 A9
40 5A 3D 70 08 5B AB 8F 5F 33 A9 6A 00 00 00 00
70 02 20 00 F7 A4 00 00 02 04 05 64 01 01 04 02


 TCP   48    203.45.69.77    qqq.rrr.sss.ttt   4517 43919  [2004.02.04 -
10:53:38.736]

45 00 00 30 9A DB 40 00 6F 06 E2 A7 CB 2D 45 4D
40 5A 3D 70 11 A5 AB 8F E6 CE 00 FE 00 00 00 00
70 02 40 00 0F D9 00 00 02 04 05 B4 01 01 04 02


 TCP   48   129.82.64.105    qqq.rrr.sss.ttt   3612 43919  [2004.02.04 -
10:53:42.872]

45 00 00 30 94 BA 40 00 74 06 32 88 81 52 40 69
40 5A 3D 70 0E 1C AB 8F 91 11 E3 87 00 00 00 00
70 02 FA F0 1A 64 00 00 02 04 05 B4 01 01 04 02


 TCP   48    203.45.69.77    qqq.rrr.sss.ttt   4517 43919  [2004.02.04 -
10:53:44.774]

45 00 00 30 9C 76 40 00 6F 06 E1 0C CB 2D 45 4D
40 5A 3D 70 11 A5 AB 8F E6 CE 00 FE 00 00 00 00
70 02 40 00 0F D9 00 00 02 04 05 B4 01 01 04 02


 TCP   48  62.195.163.169    qqq.rrr.sss.ttt  55054 43919  [2004.02.04 -
10:53:56.451]

45 00 00 30 34 85 40 00 6A 06 7C 0C 3E C3 A3 A9
40 5A 3D 70 D7 0E AB 8F 84 6D 5D 2E 00 00 00 00
70 02 FA F0 C3 BD 00 00 02 04 05 B4 01 01 04 02


 TCP   48  62.195.163.169    qqq.rrr.sss.ttt  55054 43919  [2004.02.04 -
10:53:59.285]

45 00 00 30 34 F7 40 00 6A 06 7B 9A 3E C3 A3 A9
40 5A 3D 70 D7 0E AB 8F 84 6D 5D 2E 00 00 00 00
70 02 FA F0 B8 9C 0B 21 02 04 05 B4 01 01 04 02


 TCP   48  62.195.163.169    qqq.rrr.sss.ttt  55054 43919  [2004.02.04 -
10:54:05.294]

45 00 00 30 35 C0 40 00 6A 06 7A D1 3E C3 A3 A9
40 5A 3D 70 D7 0E AB 8F 84 6D 5D 2E 00 00 00 00
70 02 FA F0 C3 BD 00 00 02 04 05 B4 01 01 04 02


 TCP   48 128.206.176.169    qqq.rrr.sss.ttt   2217 43919  [2004.02.04 -
10:54:16.320]

45 00 00 30 83 94 40 00 6C 06 DB F1 80 CE B0 A9
40 5A 3D 70 08 A9 AB 8F 14 63 49 F6 00 00 00 00
70 02 20 00 A1 9B 00 00 02 04 05 64 01 01 04 02


 TCP   48   65.196.41.197    qqq.rrr.sss.ttt   3907 43919  [2004.02.04 -
10:54:17.341]

45 00 00 30 B4 93 40 00 73 06 69 E1 41 C4 29 C5
40 5A 3D 70 0F 43 AB 8F 2F CF 5B 32 00 00 00 00
70 02 FA F0 59 57 00 00 02 04 05 64 01 01 04 02


 TCP   48 128.206.176.169    qqq.rrr.sss.ttt   2217 43919  [2004.02.04 -
10:54:19.374]

45 00 00 30 87 94 40 00 6C 06 D7 F1 80 CE B0 A9
40 5A 3D 70 08 A9 AB 8F 14 63 49 F6 00 00 00 00
70 02 20 00 A1 9B 00 00 02 04 05 64 01 01 04 02


 TCP   48   65.196.41.197    qqq.rrr.sss.ttt   3907 43919  [2004.02.04 -
10:54:20.255]

45 00 00 30 B4 A0 40 00 73 06 69 D4 41 C4 29 C5
40 5A 3D 70 0F 43 AB 8F 2F CF 5B 32 00 00 00 00
70 02 FA F0 59 57 00 00 02 04 05 64 01 01 04 02


 TCP   48    203.45.69.77    qqq.rrr.sss.ttt   3013 43919  [2004.02.04 -
10:54:24.181]

45 00 00 30 A5 CF 40 00 6F 06 D7 B3 CB 2D 45 4D
40 5A 3D 70 0B C5 AB 8F E8 91 8B 7C 00 00 00 00
70 02 40 00 89 77 00 00 02 04 05 B4 01 01 04 02


 TCP   48 128.206.176.169    qqq.rrr.sss.ttt   2217 43919  [2004.02.04 -
10:54:25.373]

45 00 00 30 A7 94 40 00 6C 06 B7 F1 80 CE B0 A9
40 5A 3D 70 08 A9 AB 8F 14 63 49 F6 00 00 00 00
70 02 20 00 A1 9B 00 00 02 04 05 64 01 01 04 02


 TCP   48   65.196.41.197    qqq.rrr.sss.ttt   3907 43919  [2004.02.04 -
10:54:26.284]

45 00 00 30 B4 B7 40 00 73 06 69 BD 41 C4 29 C5
40 5A 3D 70 0F 43 AB 8F 2F CF 5B 32 00 00 00 00
70 02 FA F0 59 57 00 00 02 04 05 64 01 01 04 02


 TCP   48    203.45.69.77    qqq.rrr.sss.ttt   3013 43919  [2004.02.04 -
10:54:27.736]

45 00 00 30 A7 03 40 00 6F 06 D6 7F CB 2D 45 4D
40 5A 3D 70 0B C5 AB 8F E8 91 8B 7C 00 00 00 00
70 02 40 00 89 77 00 00 02 04 05 B4 01 01 04 02


 TCP   48   129.82.64.105    qqq.rrr.sss.ttt   4519 43919  [2004.02.04 -
10:54:34.806]

45 00 00 30 97 D5 40 00 74 06 2F 6D 81 52 40 69
40 5A 3D 70 11 A7 AB 8F 92 C3 3E 06 00 00 00 00
70 02 FA F0 BA A8 00 00 02 04 05 B4 01 01 04 02


 TCP   48 128.206.176.169    qqq.rrr.sss.ttt   2217 43919  [2004.02.04 -
10:54:37.450]

45 00 00 30 E8 94 40 00 6C 06 76 F1 80 CE B0 A9
40 5A 3D 70 08 A9 AB 8F 14 63 49 F6 00 00 00 00
70 02 20 00 A1 9B 00 00 02 04 05 64 01 01 04 02


 TCP   48   129.82.64.105    qqq.rrr.sss.ttt   4519 43919  [2004.02.04 -
10:54:37.731]

45 00 00 30 98 00 40 00 74 06 2F 42 81 52 40 69
40 5A 3D 70 11 A7 AB 8F 92 C3 3E 06 00 00 00 00
70 02 FA F0 BA A8 00 00 02 04 05 B4 01 01 04 02


 TCP   48  62.195.163.169    qqq.rrr.sss.ttt  55271 43919  [2004.02.04 -
10:54:41.125]

45 00 00 30 39 2D 40 00 6A 06 77 64 3E C3 A3 A9
40 5A 3D 70 D7 E7 AB 8F 85 45 84 19 00 00 00 00
70 02 FA F0 D6 E7 C4 39 02 04 05 B4 01 01 04 02


 TCP   48   129.82.64.105    qqq.rrr.sss.ttt   4519 43919  [2004.02.04 -
10:54:43.749]

45 00 00 30 98 5C 40 00 74 06 2E E6 81 52 40 69
40 5A 3D 70 11 A7 AB 8F 92 C3 3E 06 00 00 00 00
70 02 FA F0 BA A8 00 00 02 04 05 B4 01 01 04 02


 TCP   48  62.195.163.169    qqq.rrr.sss.ttt  55271 43919  [2004.02.04 -
10:54:44.060]

45 00 00 30 39 5B 40 00 6A 06 77 36 3E C3 A3 A9
40 5A 3D 70 D7 E7 AB 8F 85 45 84 19 00 00 00 00
70 02 FA F0 9B 21 00 00 02 04 05 B4 01 01 04 02


 TCP   48  62.195.163.169    qqq.rrr.sss.ttt  55271 43919  [2004.02.04 -
10:54:50.058]

45 00 00 30 39 E3 40 00 6A 06 76 AE 3E C3 A3 A9
40 5A 3D 70 D7 E7 AB 8F 85 45 84 19 00 00 00 00
70 02 FA F0 9B 21 00 00 02 04 05 B4 01 01 04 02


 TCP   48   65.196.41.197    qqq.rrr.sss.ttt   3982 43919  [2004.02.04 -
10:55:02.246]

45 00 00 30 B5 7F 40 00 73 06 68 F5 41 C4 29 C5
40 5A 3D 70 0F 8E AB 8F 25 0C F3 78 00 00 00 00
70 02 FA F0 CB 88 00 00 02 04 05 64 01 01 04 02


 TCP   48   65.196.41.197    qqq.rrr.sss.ttt   3982 43919  [2004.02.04 -
10:55:05.200]

45 00 00 30 B5 8E 40 00 73 06 68 E6 41 C4 29 C5
40 5A 3D 70 0F 8E AB 8F 25 0C F3 78 00 00 00 00
70 02 FA F0 CB 88 00 00 02 04 05 64 01 01 04 02


 TCP   53    qqq.rrr.sss.ttt   130.74.208.83   1046 41969  [2004.02.04 -
10:55:09.036]

45 00 00 35 30 C0 40 00 7F 06 FA 9A 40 5A 3D 70
82 4A D0 53 04 16 A3 F1 13 A5 FB 37 1A 4A 23 E2
50 18 1E 6A 05 3C 00 00 0A 00 1E AA CA FE CE F8
D8 AE 33 4F F8 

 TCP   69   130.74.208.83    qqq.rrr.sss.ttt  41969  1046  [2004.02.04 -
10:55:09.086]

45 00 00 45 39 2A 40 00 71 06 00 21 82 4A D0 53
40 5A 3D 70 A3 F1 04 16 1A 4A 23 E2 13 A5 FB 44
50 18 0B 68 EA 6B 00 00 1A 00 1E 1B 3C 98 0E CF
17 D6 FD 6E E3 75 34 CF EF C0 23 84 02 D6 95 05
40 E3 C0 44 97 

 TCP   40    qqq.rrr.sss.ttt   130.74.208.83   1046 41969  [2004.02.04 -
10:55:09.276]

45 00 00 28 31 C0 40 00 7F 06 F9 A7 40 5A 3D 70
82 4A D0 53 04 16 A3 F1 13 A5 FB 44 1A 4A 23 FF
50 10 1E 4D CB E4 00 00 

 TCP   48   65.196.41.197    qqq.rrr.sss.ttt   3982 43919  [2004.02.04 -
10:55:11.219]

45 00 00 30 B5 A2 40 00 73 06 68 D2 41 C4 29 C5
40 5A 3D 70 0F 8E AB 8F 25 0C F3 78 00 00 00 00
70 02 FA F0 CB 88 00 00 02 04 05 64 01 01 04 02


 TCP   48    203.45.69.77    qqq.rrr.sss.ttt   3389 43919  [2004.02.04 -
10:55:12.320]

45 00 00 30 B3 62 40 00 6F 06 CA 20 CB 2D 45 4D
40 5A 3D 70 0D 3D AB 8F EA 5C 1C D8 00 00 00 00
70 02 40 00 F4 D8 00 00 02 04 05 B4 01 01 04 02


 TCP   48    203.45.69.77    qqq.rrr.sss.ttt   3389 43919  [2004.02.04 -
10:55:14.954]

45 00 00 30 B4 26 40 00 6F 06 C9 5C CB 2D 45 4D
40 5A 3D 70 0D 3D AB 8F EA 5C 1C D8 00 00 00 00
70 02 40 00 F4 D8 00 00 02 04 05 B4 01 01 04 02


 TCP   48 128.206.176.169    qqq.rrr.sss.ttt   2295 43919  [2004.02.04 -
10:55:16.857]

45 00 00 30 96 95 40 00 6C 06 C8 F0 80 CE B0 A9
40 5A 3D 70 08 F7 AB 8F 39 CB DD BE 00 00 00 00
70 02 20 00 E8 1C 00 00 02 04 05 64 01 01 04 02


 TCP   48 128.206.176.169    qqq.rrr.sss.ttt   2295 43919  [2004.02.04 -
10:55:19.751]

45 00 00 30 A3 95 40 00 6C 06 BB F0 80 CE B0 A9
40 5A 3D 70 08 F7 AB 8F 39 CB DD BE 00 00 00 00
70 02 20 00 E8 1C 00 00 02 04 05 64 01 01 04 02


 TCP   48    203.45.69.77    qqq.rrr.sss.ttt   3389 43919  [2004.02.04 -
10:55:21.023]

45 00 00 30 B6 33 40 00 6F 06 C7 4F CB 2D 45 4D
40 5A 3D 70 0D 3D AB 8F EA 5C 1C D8 00 00 00 00
70 02 40 00 F4 D8 00 00 02 04 05 B4 01 01 04 02


 TCP   48 128.206.176.169    qqq.rrr.sss.ttt   2295 43919  [2004.02.04 -
10:55:25.750]

45 00 00 30 C2 95 40 00 6C 06 9C F0 80 CE B0 A9
40 5A 3D 70 08 F7 AB 8F 39 CB DD BE 00 00 00 00
70 02 20 00 E8 1C 00 00 02 04 05 64 01 01 04 02


 TCP   48  62.195.163.169    qqq.rrr.sss.ttt  55635 43919  [2004.02.04 -
10:55:25.840]

45 00 00 30 3D 66 40 00 6A 06 73 2B 3E C3 A3 A9
40 5A 3D 70 D9 53 AB 8F 86 1D 32 29 00 00 00 00
70 02 FA F0 EA CD 00 00 02 04 05 B4 01 01 04 02


 TCP   48  62.195.163.169    qqq.rrr.sss.ttt  55635 43919  [2004.02.04 -
10:55:28.764]

45 00 00 30 3D 91 40 00 6A 06 73 00 3E C3 A3 A9
40 5A 3D 70 D9 53 AB 8F 86 1D 32 29 00 00 00 00
70 02 FA F0 EA CD 00 00 02 04 05 B4 01 01 04 02


 TCP   48  62.195.163.169    qqq.rrr.sss.ttt  55635 43919  [2004.02.04 -
10:55:34.793]

45 00 00 30 3E 32 40 00 6A 06 72 5F 3E C3 A3 A9
40 5A 3D 70 D9 53 AB 8F 86 1D 32 29 00 00 00 00
70 02 FA F0 EA CD 00 00 02 04 05 B4 01 01 04 02


 TCP   48 128.206.176.169    qqq.rrr.sss.ttt   2295 43919  [2004.02.04 -
10:55:37.757]

45 00 00 30 0D 96 40 00 6C 06 51 F0 80 CE B0 A9
40 5A 3D 70 08 F7 AB 8F 39 CB DD BE 00 00 00 00
70 02 20 00 E8 1C 00 00 02 04 05 64 01 01 04 02


 TCP   48   129.82.64.105    qqq.rrr.sss.ttt   3752 43919  [2004.02.04 -
10:55:48.743]

45 00 00 30 9C 4C 40 00 74 06 2A F6 81 52 40 69
40 5A 3D 70 0E A8 AB 8F 94 DD 8D F4 00 00 00 00
70 02 FA F0 6B 9F 00 00 02 04 05 B4 01 01 04 02


 TCP   48   129.82.64.105    qqq.rrr.sss.ttt   3752 43919  [2004.02.04 -
10:55:51.577]

45 00 00 30 9C 7F 40 00 74 06 2A C3 81 52 40 69
40 5A 3D 70 0E A8 AB 8F 94 DD 8D F4 00 00 00 00
70 02 FA F0 6B 9F 00 00 02 04 05 B4 01 01 04 02


 TCP   48   129.82.64.105    qqq.rrr.sss.ttt   3752 43919  [2004.02.04 -
10:55:57.585]

45 00 00 30 9C DB 40 00 74 06 2A 67 81 52 40 69
40 5A 3D 70 0E A8 AB 8F 94 DD 8D F4 00 00 00 00
70 02 FA F0 6B 9F 00 00 02 04 05 B4 01 01 04 02


 TCP   48    203.45.69.77    qqq.rrr.sss.ttt   3756 43919  [2004.02.04 -
10:56:00.219]

45 00 00 30 C0 1A 40 00 6F 06 BD 68 CB 2D 45 4D
40 5A 3D 70 0E AC AB 8F EC 22 89 D4 00 00 00 00
70 02 40 00 84 A7 00 00 02 04 05 B4 01 01 04 02


 TCP   48   65.196.41.197    qqq.rrr.sss.ttt   4089 43919  [2004.02.04 -
10:56:02.482]

45 00 00 30 B6 C9 40 00 73 06 67 AB 41 C4 29 C5
40 5A 3D 70 0F F9 AB 8F 89 9F 9C 63 00 00 00 00
70 02 FA F0 BD 9F 00 00 02 04 05 64 01 01 04 02


 TCP   48    203.45.69.77    qqq.rrr.sss.ttt   3756 43919  [2004.02.04 -
10:56:03.224]

45 00 00 30 C0 DD 40 00 6F 06 BC A5 CB 2D 45 4D
40 5A 3D 70 0E AC AB 8F EC 22 89 D4 00 00 00 00
70 02 40 00 84 A7 00 00 02 04 05 B4 01 01 04 02


 TCP   48   65.196.41.197    qqq.rrr.sss.ttt   4089 43919  [2004.02.04 -
10:56:05.387]

45 00 00 30 B6 DA 40 00 73 06 67 9A 41 C4 29 C5
40 5A 3D 70 0F F9 AB 8F 89 9F 9C 63 00 00 00 00
70 02 FA F0 BD 9F 00 00 02 04 05 64 01 01 04 02


 TCP   48    203.45.69.77    qqq.rrr.sss.ttt   3756 43919  [2004.02.04 -
10:56:09.242]

45 00 00 30 C2 A5 40 00 6F 06 BA DD CB 2D 45 4D
40 5A 3D 70 0E AC AB 8F EC 22 89 D4 00 00 00 00
70 02 40 00 84 A7 00 00 02 04 05 B4 01 01 04 02


 TCP   48  62.195.163.169    qqq.rrr.sss.ttt  55012 43919  [2004.02.04 -
10:56:10.524]

45 00 00 30 41 A2 40 00 6A 06 6E EF 3E C3 A3 A9
40 5A 3D 70 D6 E4 AB 8F 86 F9 B2 AF 00 00 00 00
70 02 FA F0 6B DA 00 00 02 04 05 B4 01 01 04 02


 TCP   48   65.196.41.197    qqq.rrr.sss.ttt   4089 43919  [2004.02.04 -
10:56:11.405]

45 00 00 30 B6 FD 40 00 73 06 67 77 41 C4 29 C5
40 5A 3D 70 0F F9 AB 8F 89 9F 9C 63 00 00 00 00
70 02 FA F0 BD 9F 00 00 02 04 05 64 01 01 04 02


 TCP   48  62.195.163.169    qqq.rrr.sss.ttt  55012 43919  [2004.02.04 -
10:56:13.498]

45 00 00 30 41 FC 40 00 6A 06 6E 95 3E C3 A3 A9
40 5A 3D 70 D6 E4 AB 8F 86 F9 B2 AF 00 00 00 00
70 02 FA F0 6B DA 00 00 02 04 05 B4 01 01 04 02


 TCP   48 128.206.176.169    qqq.rrr.sss.ttt   2370 43919  [2004.02.04 -
10:56:16.242]

45 00 00 30 B7 96 40 00 6C 06 A7 EF 80 CE B0 A9
40 5A 3D 70 09 42 AB 8F 2A E1 75 5E 00 00 00 00
70 02 20 00 5F 1C 00 00 02 04 05 64 01 01 04 02


 TCP   48 128.206.176.169    qqq.rrr.sss.ttt   2370 43919  [2004.02.04 -
10:56:19.237]

45 00 00 30 C2 96 40 00 6C 06 9C EF 80 CE B0 A9
40 5A 3D 70 09 42 AB 8F 2A E1 75 5E 00 00 00 00
70 02 20 00 5F 1C 00 00 02 04 05 64 01 01 04 02


 TCP   48  62.195.163.169    qqq.rrr.sss.ttt  55012 43919  [2004.02.04 -
10:56:19.537]

45 00 00 30 42 B0 40 00 6A 06 6D E1 3E C3 A3 A9
40 5A 3D 70 D6 E4 AB 8F 86 F9 B2 AF 00 00 00 00
70 02 FA F0 6B DA 00 00 02 04 05 B4 01 01 04 02


 TCP   48 128.206.176.169    qqq.rrr.sss.ttt   2370 43919  [2004.02.04 -
10:56:25.385]

45 00 00 30 E2 96 40 00 6C 06 7C EF 80 CE B0 A9
40 5A 3D 70 09 42 AB 8F 2A E1 75 5E 00 00 00 00
70 02 20 00 5F 1C 00 00 02 04 05 64 01 01 04 02


 TCP   48 128.206.176.169    qqq.rrr.sss.ttt   2370 43919  [2004.02.04 -
10:56:37.383]

45 00 00 30 11 97 40 00 6C 06 4D EF 80 CE B0 A9
40 5A 3D 70 09 42 AB 8F 2A E1 75 5E 00 00 00 00
70 02 20 00 5F 1C 00 00 02 04 05 64 01 01 04 02


----------------------------------------------------------------
Type Size       Source IP  Destination IP  sPort dPort  Date/Time

102 Packets listed in 30 milliseconds.





More information about the list mailing list