pak004_932bdb768b3eeeec3fcd3540acd32aa0.pcap

MD5932bdb768b3eeeec3fcd3540acd32aa0
Submission Date2021-10-04 07:56:18
Tags(not set)
Alert 6
Showing 1-6 of 6 items.
#
TimestampSrc IpDest IpAlert SignatureP
1
2012-09-21T07:42:34.494625-0700173.194.41.188172.18.3.11ET INFO Observed Interesting Content-Type Inbound (application/x-sh)*
2
2012-09-21T07:42:36.845858-0700173.194.41.188172.18.3.11ET INFO Observed Interesting Content-Type Inbound (application/x-sh)*
3
2012-09-21T07:42:37.398726-070080.239.254.72172.18.3.11ET INFO Observed Interesting Content-Type Inbound (application/x-sh)*
4
2012-09-21T07:42:39.445690-0700173.194.41.188172.18.3.11ET INFO Observed Interesting Content-Type Inbound (application/x-sh)*
5
2012-09-21T07:42:39.570006-0700173.194.41.188172.18.3.11ET INFO Observed Interesting Content-Type Inbound (application/x-sh)*
6
2012-09-21T07:43:36.151476-070080.239.254.42172.18.3.11ET INFO Observed Interesting Content-Type Inbound (application/x-sh)*
DNS 327
Showing 1-20 of 327 items.
#
TimestampSrc IpDest IpDns TypeResource Record NameResource Record TypeResource Data
1
2012-09-21T07:41:39.704863-0700172.18.3.11172.18.1.100querywww.google.co.ukA(not set)
2
2012-09-21T07:41:40.288015-0700172.18.3.11172.18.1.100queryplay.google.comA(not set)
3
2012-09-21T07:41:40.309850-0700172.18.3.11172.18.1.100querywww.youtube.comA(not set)
4
2012-09-21T07:41:40.337901-0700172.18.1.100172.18.3.11answerplay.google.comA(not set)
5
2012-09-21T07:41:40.339156-0700172.18.3.11172.18.1.100querynews.google.co.ukA(not set)
6
2012-09-21T07:41:40.339186-0700172.18.3.11172.18.1.100querymail.google.comA(not set)
7
2012-09-21T07:41:40.339973-0700172.18.1.100172.18.3.11answerwww.youtube.comA(not set)
8
2012-09-21T07:41:40.339974-0700172.18.1.100172.18.3.11answermail.google.comA(not set)
9
2012-09-21T07:41:40.340579-0700172.18.3.11172.18.1.100querydocs.google.comA(not set)
10
2012-09-21T07:41:40.341765-0700172.18.3.11172.18.1.100querybooks.google.co.ukA(not set)
11
2012-09-21T07:41:40.342098-0700172.18.1.100172.18.3.11answerbooks.google.co.ukA(not set)
12
2012-09-21T07:41:40.342539-0700172.18.3.11172.18.1.100querywww.blogger.comA(not set)
13
2012-09-21T07:41:40.363758-0700172.18.1.100172.18.3.11answernews.google.co.ukA(not set)
14
2012-09-21T07:41:40.363759-0700172.18.1.100172.18.3.11answerwww.blogger.comA(not set)
15
2012-09-21T07:41:40.365252-0700172.18.3.11172.18.1.100querypicasaweb.google.co.ukA(not set)
16
2012-09-21T07:41:40.380116-0700172.18.1.100172.18.3.11answerdocs.google.comA(not set)
17
2012-09-21T07:41:40.409792-0700172.18.1.100172.18.3.11answerpicasaweb.google.co.ukA(not set)
18
2012-09-21T07:41:40.287910-0700172.18.3.11172.18.1.100querymaps.google.co.ukA(not set)
19
2012-09-21T07:41:40.337900-0700172.18.1.100172.18.3.11answermaps.google.co.ukA(not set)
20
2012-09-21T07:41:40.381273-0700172.18.3.11172.18.1.100queryaccounts.google.comA(not set)
TLS 8
Showing 1-8 of 8 items.
#
TimestampSource IPDestination IPTLS VersionServer Name Indication
1
2012-09-21T07:42:39.608580-0700172.18.3.11173.194.41.168TLSv1plusone.google.com
2
2012-09-21T07:42:39.469797-0700172.18.3.11173.194.41.174TLSv1apis.google.com
3
2012-09-21T07:42:39.679741-0700172.18.3.11173.194.41.175TLSv1ssl.gstatic.com
4
2012-09-21T07:42:40.459911-0700172.18.3.112.23.130.110TLSv1s-static.ak.facebook.com
5
2012-09-21T07:42:47.097613-0700172.18.3.11173.194.41.185TLSv1googleads.g.doubleclick.net
6
2012-09-21T07:42:40.801600-0700172.18.3.11173.252.101.16TLSv1www.facebook.com
7
2012-09-21T07:42:59.520623-0700172.18.3.11173.194.67.95TLSv1ajax.googleapis.com
8
2012-09-21T07:43:34.176791-0700172.18.3.11173.194.41.163TLSv1sb-ssl.google.com
TFTP 0
#TimestampSrc IpDest IpTftp PacketTftp FileTftp Mode
No results found.
HTTP 687
Showing 241-260 of 687 items.
#
TimestampSourceHostnamePortMethodURLStatus
241
2012-09-21T07:42:33.516174-0700172.18.3.11media.skynews.com80GET/media/images/generated/2012/9/21/194328/default/v1/leroy-james-1-136x75.jpg200
242
2012-09-21T07:42:33.524827-0700172.18.3.11www.google.co.uk80GET/gen_204?atyp=i&ct=fif&cad=&ei=M3tcUIiuNsXhtQaGpoDIDw&psi=&kc=221&zx=1348238553263204
243
2012-09-21T07:42:34.268178-0700172.18.3.11media.skynews.com80GET/media/images/generated/2012/9/21/194325/default/v2/explosion1-1-306x172.jpg200
244
2012-09-21T07:42:34.281498-0700172.18.3.11media.skynews.com80GET/media/images/generated/2012/4/27/5444/default/v1/children-hands-1-176x99.jpg200
245
2012-09-21T07:42:33.814742-0700172.18.3.11news.sky.com80GET/static/wb5zXuVVRlMPAPwtsmsO74wyIr0pWvrH7Kc1WDHMEmX.js200
246
2012-09-21T07:42:34.315211-0700172.18.3.11media.skynews.com80GET/media/images/generated/sky-news/content/StaticFile/jpg/2012/Apr/Week3/4800/default/v3/16212636-145x82.jpg200
247
2012-09-21T07:42:33.855794-0700172.18.3.11media.skynews.com80GET/media/images/generated/2012/9/21/194272/default/v1/114263390-1-176x99.jpg200
248
2012-09-21T07:42:33.861874-0700172.18.3.11news.sky.com80GET/static/IqB8LvIorLLmsJ1SMxbmKbZdLsX5MsoCbGgYLUi9Whc.js200
249
2012-09-21T07:42:33.871888-0700172.18.3.11news.sky.com80GET/static/IKfETRJERwBRdVMGxGDGgTIvzB2B464w7472lQKpd3b.js200
250
2012-09-21T07:42:33.896627-0700172.18.3.11media.skynews.com80GET/media/images/generated/sky-news/content/StaticFile/jpg/2012/Feb/Week2/428/default/v1/16165948-176x99.jpg200
251
2012-09-21T07:42:34.366754-0700172.18.3.11media.skynews.com80GET/media/images/generated/2012/9/21/194274/default/v1/rtr387pb-main-pic-1-145x82.jpg200
252
2012-09-21T07:42:34.379545-0700172.18.3.11www.google.co.uk80GET/s?hl=en&sugexp=les%3B&gs_nf=1&pq=the%20key%20is%20%22ad7b9c14083b52bc532fba5948342b98%22&cp=46&gs_id=kh&xhr=t&q=The%20key%20is%20%22ad7b9c14083b52bc532fba5948342b98%22%20&pf=p&sclient=psy-ab&oq=&gs_l=&pbx=1&bav=on.2,or.r_gc.r_pw.r_qf.&fp=ff301ef4d48490c5&biw=1680&bih=920&tch=1&ech=2&psi=H3tcUJzaJYWf0QW184CYBw.1348238521751.3200
253
2012-09-21T07:42:34.389176-0700172.18.3.11media.skynews.com80GET/media/images/generated/2012/9/21/194283/default/v1/52275626-1-145x82.jpg200
254
2012-09-21T07:42:33.583696-0700172.18.3.11media.skynews.com80GET/media/images/generated/2012/8/13/187237/default/v1/l-g4s-2-136x75.jpg200
255
2012-09-21T07:42:33.608943-0700172.18.3.11news.sky.com80GET/static/KQp9iG5dSsq2EwNnhZeR5lRUSgjPh9Qod9DN54jfyKD.png200
256
2012-09-21T07:42:33.638136-0700172.18.3.11media.skynews.com80GET/media/images/generated/2012/9/21/194308/default/v1/8646789-1-1-198x111.jpg200
257
2012-09-21T07:42:33.955997-0700172.18.3.11adserver.adtech.de80GET/multiad/3.0/999/0/0/-1/ADTECH;cfp=1;rndc=1348238143;grp=3;mode=multiad;plcids=3749300,3749301;loc=100;target=_blank;key=;misc=1348238553711200
258
2012-09-21T07:42:33.646844-0700172.18.3.11media.skynews.com80GET/media/images/generated/2012/9/21/194371/default/v1/mdr56-10smith-copy-1-136x75.jpg200
259
2012-09-21T07:42:34.430067-0700172.18.3.11media.skynews.com80GET/media/images/generated/2012/6/25/176829/default/v1/108192314-1-61x46.jpg200
260
2012-09-21T07:42:33.993038-0700172.18.3.11media.skynews.com80GET/media/images/generated/2012/9/21/194283/default/v1/52275626-1-176x99.jpg200
SMB 0
#
TimestampSrc IpDest IpSMB DialectCommandSessionTree
No results found.
SMTP 0
#
TimestampSourceDestinationEmail FromEmail ToSubject
No results found.
Flow 405
Showing 1-20 of 405 items.
#
TimestampFlow IdEvent TypeSourceSource PortDestinationDestination PortProtocolHost
1
2012-09-21T07:41:39.704863-0700954277252052231flow172.18.3.1158234255.255.255.2551947UDPpcapanalyzer
2
2012-09-21T07:41:39.704863-0700118968389913127flow172.18.3.116405172.18.3.4980TCPpcapanalyzer
3
2012-09-21T07:41:40.359876-0700268514856517983flow172.18.3.1150167172.18.1.10053UDPpcapanalyzer
4
2012-09-21T07:42:33.881814-0700751578418267952flow172.18.3.1158234172.18.255.2551947UDPpcapanalyzer
5
2012-09-21T07:42:33.881814-0700268514856473418flow172.18.1.10053172.18.3.1150167UDPpcapanalyzer
6
2012-09-21T07:43:38.102668-0700141053112448034flow172.18.3.1158471172.18.1.10053UDPpcapanalyzer
7
2012-09-21T07:43:38.102668-07001126275663755394flow172.18.3.1156951172.18.1.10053UDPpcapanalyzer
8
2012-09-21T07:43:38.102668-0700563830371169239flow172.18.3.116599204.152.194.21880TCPpcapanalyzer
9
2012-09-21T07:43:38.102668-07001267732563203033flow172.18.3.1162003172.18.1.10053UDPpcapanalyzer
10
2012-09-21T07:43:38.102668-0700845689741651186flow172.18.3.1156536172.18.1.10053UDPpcapanalyzer
11
2012-09-21T07:43:38.102668-07001690230639403618flow172.18.3.11648464.236.124.22980TCPpcapanalyzer
12
2012-09-21T07:43:38.102668-07001972334825587849flow172.18.3.1149568172.18.1.10053UDPpcapanalyzer
13
2012-09-21T07:43:38.102668-0700284116325262502flow172.18.3.1160687172.18.1.10053UDPpcapanalyzer
14
2012-09-21T07:43:38.102668-0700426541739252755flow172.18.3.1153110172.18.1.10053UDPpcapanalyzer
15
2012-09-21T07:43:38.102668-07001834479260316737flow172.18.3.11643380.239.254.2480TCPpcapanalyzer
16
2012-09-21T07:43:38.102668-0700145799055393495flow172.18.3.1163879172.18.1.10053UDPpcapanalyzer
17
2012-09-21T07:43:38.102668-0700568043728287493flow172.18.3.1164864172.18.1.10053UDPpcapanalyzer
18
2012-09-21T07:43:38.102668-0700568110305485653flow172.18.3.116586213.174.142.2980TCPpcapanalyzer
19
2012-09-21T07:43:38.102668-07001975551755764055flow172.18.3.116410173.194.65.9480TCPpcapanalyzer
20
2012-09-21T07:43:38.102668-0700287150723368471flow172.18.3.116519194.60.187.23080TCPpcapanalyzer
File 654
Showing 61-80 of 654 items.
#
TimestampSourceDestinationFile NameFile MagicFile Size
61
2012-09-21T07:41:44.834048-070080.239.217.171172.18.3.11/frameworks/barlesque/2.10.0/desktop/3.5/img/blq-search_grey_alpha.pngPNG image data, 13 x 13, 8-bit/color RGBA, non-interlaced188
62
2012-09-21T07:41:44.979458-070080.239.254.24172.18.3.11/media/images/63025000/jpg/_63025403_post.jpgJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 144x81, frames 35117
63
2012-09-21T07:41:44.868677-070080.239.254.24172.18.3.11/media/images/63007000/jpg/_63007925_63003380.jpgJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 144x81, frames 36163
64
2012-09-21T07:41:45.037413-070080.239.254.24172.18.3.11/media/images/63012000/jpg/_63012843_lynher_dairies_220511_0465.jpgJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 144x81, frames 36038
65
2012-09-21T07:41:45.087322-070080.239.254.24172.18.3.11/js/map/map_0_0_32.jsASCII text, with very long lines, with no line terminators889
66
2012-09-21T07:41:44.873271-070080.239.254.24172.18.3.11/media/images/63001000/jpg/_63001711_63001544.jpgJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 144x81, frames 35968
67
2012-09-21T07:41:44.834057-070080.239.254.34172.18.3.11/iplayer/images/episode/b01mxyyc_150_84.jpgJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 150x84, frames 35292
68
2012-09-21T07:41:44.905789-070080.239.217.171172.18.3.11/frameworks/jquery/0.1.8/sharedmodules/jquery-1.6.2.jsASCII text, with very long lines133644
69
2012-09-21T07:41:44.910416-070080.239.254.24172.18.3.11/media/images/62937000/jpg/_62937264_62934668.jpgJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 144x81, frames 35200
70
2012-09-21T07:41:44.843648-070080.239.254.24172.18.3.11/media/images/63030000/jpg/_63030020_photo(5).jpgJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 144x81, frames 36076
71
2012-09-21T07:41:44.844035-070080.239.217.171172.18.3.11/frameworks/barlesque/2.10.0/desktop/3.5/script/barlesque.jsUTF-8 Unicode text, with very long lines, with no line terminators16858
72
2012-09-21T07:41:44.914523-070080.239.254.24172.18.3.11/media/images/62960000/jpg/_62960904_62960902.jpgJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, xresolution=50, yresolution=58, resolutionunit=2], baseline, precision 8, 144x81, frames 35053
73
2012-09-21T07:41:44.953927-070080.239.254.24172.18.3.11/media/images/63025000/jpg/_63025721_trav.jpgJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 144x81, frames 33974
74
2012-09-21T07:41:44.847059-070080.239.254.24172.18.3.11/media/images/63035000/jpg/_63035362_000145217-1.jpgJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 144x81, frames 34457
75
2012-09-21T07:41:44.957724-070080.239.254.24172.18.3.11/media/images/63014000/jpg/_63014224_jex_1517346_de27-1.jpgJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 144x81, frames 35087
76
2012-09-21T07:41:44.850881-070080.239.254.24172.18.3.11/media/images/63033000/jpg/_63033568_hi016036863.jpgJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 144x81, frames 34747
77
2012-09-21T07:41:44.887840-070080.239.254.34172.18.3.11/glow/glow/1.7.7/core/core.jsASCII text, with very long lines98133
78
2012-09-21T07:41:45.000780-070080.239.254.24172.18.3.11/media/images/63017000/jpg/_63017897_136238087.jpgJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 112x63, frames 34520
79
2012-09-21T07:41:45.128132-070080.239.254.24172.18.3.11/js/view/0_0_32/view.jsHTML document, ASCII text, with very long lines, with no line terminators9927
80
2012-09-21T07:41:45.004622-070080.239.254.24172.18.3.11/media/images/63021000/jpg/_63021371_eatrich144_getty.jpgJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 112x63, frames 34997

Comments(not set)

Update Download PCAP Delete