pak004_932bdb768b3eeeec3fcd3540acd32aa0.pcap

MD5932bdb768b3eeeec3fcd3540acd32aa0
Submission Date2021-10-04 07:56:18
Tags(not set)
Alert 6
Showing 1-6 of 6 items.
#
TimestampSrc IpDest IpAlert SignatureP
1
2012-09-21T07:42:34.494625-0700173.194.41.188172.18.3.11ET INFO Observed Interesting Content-Type Inbound (application/x-sh)*
2
2012-09-21T07:42:36.845858-0700173.194.41.188172.18.3.11ET INFO Observed Interesting Content-Type Inbound (application/x-sh)*
3
2012-09-21T07:42:37.398726-070080.239.254.72172.18.3.11ET INFO Observed Interesting Content-Type Inbound (application/x-sh)*
4
2012-09-21T07:42:39.445690-0700173.194.41.188172.18.3.11ET INFO Observed Interesting Content-Type Inbound (application/x-sh)*
5
2012-09-21T07:42:39.570006-0700173.194.41.188172.18.3.11ET INFO Observed Interesting Content-Type Inbound (application/x-sh)*
6
2012-09-21T07:43:36.151476-070080.239.254.42172.18.3.11ET INFO Observed Interesting Content-Type Inbound (application/x-sh)*
DNS 327
Showing 41-60 of 327 items.
#
TimestampSrc IpDest IpDns TypeResource Record NameResource Record TypeResource Data
41
2012-09-21T07:41:40.337901-0700172.18.1.100172.18.3.11answerssl.gstatic.comA(not set)
42
2012-09-21T07:41:40.340635-0700172.18.3.11172.18.1.100querytranslate.google.co.ukA(not set)
43
2012-09-21T07:41:40.341246-0700172.18.1.100172.18.3.11answertranslate.google.co.ukA(not set)
44
2012-09-21T07:41:40.365285-0700172.18.3.11172.18.1.100queryvideo.google.co.ukA(not set)
45
2012-09-21T07:41:40.400232-0700172.18.1.100172.18.3.11answervideo.google.co.ukA(not set)
46
2012-09-21T07:41:44.389962-0700172.18.3.11172.18.1.100querynews.bbc.co.ukA(not set)
47
2012-09-21T07:41:44.390298-0700172.18.1.100172.18.3.11answernews.bbc.co.ukA(not set)
48
2012-09-21T07:41:44.471168-0700172.18.3.11172.18.1.100queryemp.bbci.co.ukA(not set)
49
2012-09-21T07:41:44.519478-0700172.18.1.100172.18.3.11answeremp.bbci.co.ukA(not set)
50
2012-09-21T07:41:44.591679-0700172.18.3.11172.18.1.100queryfeeds.bbci.co.ukA(not set)
51
2012-09-21T07:41:44.592029-0700172.18.1.100172.18.3.11answerfeeds.bbci.co.ukA(not set)
52
2012-09-21T07:41:45.205034-0700172.18.3.11172.18.1.100querysa.bbc.co.ukA(not set)
53
2012-09-21T07:41:45.222851-0700172.18.1.100172.18.3.11answersa.bbc.co.ukA(not set)
54
2012-09-21T07:41:45.184970-0700172.18.3.11172.18.1.100queryopen.live.bbc.co.ukA(not set)
55
2012-09-21T07:41:45.185321-0700172.18.1.100172.18.3.11answeropen.live.bbc.co.ukA(not set)
56
2012-09-21T07:41:45.472236-0700172.18.3.11172.18.1.100querystatic.bbc.co.ukA(not set)
57
2012-09-21T07:41:45.494780-0700172.18.1.100172.18.3.11answerstatic.bbc.co.ukA(not set)
58
2012-09-21T07:41:45.750627-0700172.18.3.11172.18.1.100querywww.bbcpersian.comA(not set)
59
2012-09-21T07:41:45.751390-0700172.18.1.100172.18.3.11answerwww.bbcpersian.comA(not set)
60
2012-09-21T07:41:45.750626-0700172.18.3.11172.18.1.100querywww.bbcmundo.comA(not set)
TLS 8
Showing 1-8 of 8 items.
#
TimestampSource IPDestination IPTLS VersionServer Name Indication
1
2012-09-21T07:42:39.608580-0700172.18.3.11173.194.41.168TLSv1plusone.google.com
2
2012-09-21T07:42:39.469797-0700172.18.3.11173.194.41.174TLSv1apis.google.com
3
2012-09-21T07:42:39.679741-0700172.18.3.11173.194.41.175TLSv1ssl.gstatic.com
4
2012-09-21T07:42:40.459911-0700172.18.3.112.23.130.110TLSv1s-static.ak.facebook.com
5
2012-09-21T07:42:47.097613-0700172.18.3.11173.194.41.185TLSv1googleads.g.doubleclick.net
6
2012-09-21T07:42:40.801600-0700172.18.3.11173.252.101.16TLSv1www.facebook.com
7
2012-09-21T07:42:59.520623-0700172.18.3.11173.194.67.95TLSv1ajax.googleapis.com
8
2012-09-21T07:43:34.176791-0700172.18.3.11173.194.41.163TLSv1sb-ssl.google.com
TFTP 0
#TimestampSrc IpDest IpTftp PacketTftp FileTftp Mode
No results found.
HTTP 687
Showing 161-180 of 687 items.
#
TimestampSourceHostnamePortMethodURLStatus
161
2012-09-21T07:42:06.659693-0700172.18.3.11www.google.co.uk80GET/s?hl=en&sugexp=les%3B&gs_nf=1&cp=8&gs_id=30&xhr=t&q=The%20key%20&pf=p&output=search&sclient=psy-ab&oq=&gs_l=&pbx=1&bav=on.2,or.r_gc.r_pw.r_qf.&fp=ff301ef4d48490c5&biw=1680&bih=920&tch=1&ech=8&psi=H3tcUJzaJYWf0QW184CYBw.1348238521751.1200
162
2012-09-21T07:42:06.706940-0700172.18.3.11www.google.co.uk80GET/s?hl=en&sugexp=les%3B&gs_nf=1&cp=11&gs_id=4g&xhr=t&q=The%20key%20is%20&pf=p&output=search&sclient=psy-ab&oq=&gs_l=&pbx=1&bav=on.2,or.r_gc.r_pw.r_qf.&fp=ff301ef4d48490c5&biw=1680&bih=920&tch=1&ech=11&psi=H3tcUJzaJYWf0QW184CYBw.1348238521751.1200
163
2012-09-21T07:41:45.538245-0700172.18.3.11news.bbcimg.co.uk80GET/view/3_0_2/cream/hi/shared/img/carousel-prev-next-3.png200
164
2012-09-21T07:41:45.620655-0700172.18.3.11open.live.bbc.co.uk80GET/wurfldemi/network.jsonp?callback=_demi_mobile_network_cb_0200
165
2012-09-21T07:41:45.643105-0700172.18.3.11node1.bbcimg.co.uk80GET/glow/glow/1.7.7/widgets/images/darkpanel/ctr.png200
166
2012-09-21T07:41:54.080921-0700172.18.3.11news.bbcimg.co.uk80GET/view/3_0_2/cream/hi/shared/story.css200
167
2012-09-21T07:42:12.049128-0700172.18.3.11p5-vuomjve4ezg7a-ygiznq2tllkmxoic-759258-i2-v6exp3-v4.metric.gstatic.com80GET/v6exp3/6.gif200
168
2012-09-21T07:41:54.116429-0700172.18.3.11emp.bbci.co.uk80GET/emp/bump?emp=worldwide&enableClear=1301
169
2012-09-21T07:42:18.443981-0700172.18.3.11www.google.co.uk80GET/s?hl=en&sugexp=les%3B&gs_nf=1&cp=12&gs_id=at&xhr=t&q=The%20key%20is%20%22&pf=p&output=search&sclient=psy-ab&oq=&gs_l=&pbx=1&bav=on.2,or.r_gc.r_pw.r_qf.&fp=ff301ef4d48490c5&biw=1680&bih=920&tch=1&ech=12&psi=H3tcUJzaJYWf0QW184CYBw.1348238521751.1200
170
2012-09-21T07:41:54.184463-0700172.18.3.11emp.bbci.co.uk80GET/emp/releases/bump/revisions/872744/embed.js?emp=worldwide&enableClear=1304
171
2012-09-21T07:41:54.252398-0700172.18.3.11stats.bbc.co.uk80GET/o.gif?~RS~s~RS~News~RS~t~RS~HighWeb_Story~RS~i~RS~19674761~RS~p~RS~99113~RS~a~RS~Domestic~RS~u~RS~/news/technology-19674761~RS~r~RS~http://www.bbc.co.uk/news/technology/~RS~q~RS~~RS~z~RS~04~RS~200
172
2012-09-21T07:41:54.275052-0700172.18.3.11emp.bbci.co.uk80GET/emp/worldwide/embed.js?mediaset=journalism-pc301
173
2012-09-21T07:41:45.731110-0700172.18.3.11news.bbcimg.co.uk80GET/js/app/ticker/2_1_1/ticker.js200
174
2012-09-21T07:41:49.838636-0700172.18.3.11news.bbcimg.co.uk80GET/media/images/63031000/jpg/_63031105_000793140-1.jpg200
175
2012-09-21T07:41:49.847598-0700172.18.3.11news.bbcimg.co.uk80GET/media/images/62978000/jpg/_62978075_62978004.jpg200
176
2012-09-21T07:41:49.879909-0700172.18.3.11newsimg.bbc.co.uk80GET/news/special/2012/newsspec_4095/widget/css/style_w.css200
177
2012-09-21T07:42:20.597822-0700172.18.3.11news.google.co.uk80GET/news/tbn/Zslr3463hrQJ/6.jpg200
178
2012-09-21T07:42:20.599260-0700172.18.3.11www.google.co.uk80GET/s?hl=en&sugexp=les%3B&gs_nf=1&cp=44&gs_id=da&xhr=t&q=The%20key%20is%20%22ad7b9c14083b52bc532fba5948342b98&pf=p&output=search&sclient=psy-ab&oq=&gs_l=&pbx=1&bav=on.2,or.r_gc.r_pw.r_qf.&fp=ff301ef4d48490c5&biw=1680&bih=920&tch=1&ech=13&psi=H3tcUJzaJYWf0QW184CYBw.1348238521751.1200
179
2012-09-21T07:42:20.771452-0700172.18.3.11id.google.co.uk80GET/verify/EAAAAOUmQ06UkEvBLgmOHOaVuYg.gif200
180
2012-09-21T07:42:20.824447-0700172.18.3.11www.google.co.uk80GET/csi?v=3&s=web&action=&ei=MXtcULqJFYi5hAebh4GYCQ&e=17259,18168,28290,28663,37102,39523,39977,4000116,4000354,4000473,4000519,4000545,4000553,4000833,4000841,4000949,4000974,4001007&cr=c&imp=1&pf=1&pfa=n.10,ttfc.59,ttlc.0,cbt.1&pfm=n.10,ttfc.106,ttlc.0,cbt.52&pmd=max.1,avg.0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1&imn=3&rt=prt.68,pprt.69,ol.69,jsrt.1203,iml.167,kpr.15010,bpl.18917204
SMB 0
#
TimestampSrc IpDest IpSMB DialectCommandSessionTree
No results found.
SMTP 0
#
TimestampSourceDestinationEmail FromEmail ToSubject
No results found.
Flow 405
Showing 161-180 of 405 items.
#
TimestampFlow IdEvent TypeSourceSource PortDestinationDestination PortProtocolHost
161
2012-09-21T07:43:38.102668-07001463600247564879flow172.18.3.11647480.239.254.13880TCPpcapanalyzer
162
2012-09-21T07:43:38.102668-07002027121431617043flow172.18.3.11647780.239.221.4380TCPpcapanalyzer
163
2012-09-21T07:43:38.102668-0700901872211608047flow172.18.3.1152490172.18.1.10053UDPpcapanalyzer
164
2012-09-21T07:43:38.102668-0700620893308581305flow172.18.3.11663980.239.149.4480TCPpcapanalyzer
165
2012-09-21T07:43:38.102668-0700621408697317743flow172.18.3.11644987.249.105.5880TCPpcapanalyzer
166
2012-09-21T07:43:38.102668-07001606785871149356flow172.18.3.1161801172.18.1.10053UDPpcapanalyzer
167
2012-09-21T07:43:38.102668-070058699269040922flow172.18.3.116626212.58.244.8080TCPpcapanalyzer
168
2012-09-21T07:43:38.102668-0700621928388892889flow172.18.3.116460212.58.244.7580TCPpcapanalyzer
169
2012-09-21T07:43:38.102668-0700340481332420894flow172.18.3.11652464.236.124.22980TCPpcapanalyzer
170
2012-09-21T07:43:38.102668-0700763142621311496flow172.18.3.1149369172.18.1.10053UDPpcapanalyzer
171
2012-09-21T07:43:38.102668-07001889175675006049flow172.18.3.116605213.174.142.2980TCPpcapanalyzer
172
2012-09-21T07:43:38.102668-07001326403956875693flow172.18.3.11645680.239.254.2480TCPpcapanalyzer
173
2012-09-21T07:43:38.102668-07001326880701218610flow172.18.3.1152464172.18.1.10053UDPpcapanalyzer
174
2012-09-21T07:43:38.102668-0700905389791076026flow172.18.3.1164110172.18.1.10053UDPpcapanalyzer
175
2012-09-21T07:43:38.102668-07002172787395330868flow172.18.3.11654398.124.224.24380TCPpcapanalyzer
176
2012-09-21T07:43:38.102668-0700624803872458189flow172.18.3.1163166172.18.1.10053UDPpcapanalyzer
177
2012-09-21T07:43:38.102668-0700766061051761553flow172.18.3.1153765172.18.1.10053UDPpcapanalyzer
178
2012-09-21T07:43:38.102668-07001892061890523973flow172.18.3.116557173.252.101.16443TCPpcapanalyzer
179
2012-09-21T07:43:38.102668-07001329605854638704flow172.18.3.11642480.239.217.17180TCPpcapanalyzer
180
2012-09-21T07:43:38.102668-0700907563040781089flow172.18.3.11642580.239.254.3480TCPpcapanalyzer
File 654
Showing 81-100 of 654 items.
#
TimestampSourceDestinationFile NameFile MagicFile Size
81
2012-09-21T07:41:44.893419-070080.239.254.24172.18.3.11/media/images/62967000/jpg/_62967972_hi016012954.jpgJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 144x81, frames 37308
82
2012-09-21T07:41:44.897784-070080.239.254.24172.18.3.11/media/images/62987000/jpg/_62987391_hi016011678.jpgJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 144x81, frames 35577
83
2012-09-21T07:41:44.904783-070080.239.254.24172.18.3.11/media/images/63018000/jpg/_63018262_hi016017809.jpgJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 144x81, frames 37657
84
2012-09-21T07:41:45.254892-070087.249.105.58172.18.3.11/bbc/bbc/sHTML document, ASCII text, with very long lines857
85
2012-09-21T07:41:45.380959-070080.239.254.24172.18.3.11/js/view/0_0_32/news-index.jsASCII text, with very long lines, with no line terminators28046
86
2012-09-21T07:41:44.933637-070080.239.254.24172.18.3.11/media/images/63025000/jpg/_63025125_016028534-1.jpgJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 144x81, frames 36250
87
2012-09-21T07:41:44.936981-070080.239.254.24172.18.3.11/media/images/63028000/jpg/_63028641_binoche640.jpgJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 144x81, frames 34047
88
2012-09-21T07:41:45.414479-070087.249.105.58172.18.3.11/bbc/bbc/sGIF image data, version 89a, 1 x 143
89
2012-09-21T07:41:44.950703-070080.239.254.24172.18.3.11/media/images/63012000/jpg/_63012675_63012074.jpgJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 144x81, frames 37013
90
2012-09-21T07:41:45.380433-070080.239.217.171172.18.3.11/frameworks/demi/0.9.8/sharedmodules/demi-1.jsASCII text17723
91
2012-09-21T07:41:45.418689-070080.239.217.171172.18.3.11/frameworks/barlesque/2.10.0/desktop/3.5/img/bbccookies/cookie_prompt_sprite.pngPNG image data, 16 x 330, 16-bit/color RGB, non-interlaced2779
92
2012-09-21T07:41:45.435571-070080.239.254.24172.18.3.11/view/1_4_35/cream/hi/news/img/subnav-divider.pngPNG image data, 1 x 10, 8-bit colormap, non-interlaced126
93
2012-09-21T07:41:45.435721-070080.239.254.24172.18.3.11/view/3_0_2/cream/hi/shared/img/transparencies/rgba-0-0-0-07.pngPNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced130
94
2012-09-21T07:41:45.481766-070080.239.254.24172.18.3.11/view/3_0_2/cream/hi/shared/img/search.pngPNG image data, 32 x 24, 8-bit/color RGBA, non-interlaced390
95
2012-09-21T07:41:45.478856-070080.239.254.24172.18.3.11/view/1_4_35/cream/hi/news/img/red-masthead.pngPNG image data, 1800 x 128, 8-bit/color RGB, non-interlaced36830
96
2012-09-21T07:41:45.521161-070080.239.254.24172.18.3.11/view/3_0_2/cream/hi/shared/img/programmes-iplayer-brand.pngPNG image data, 122 x 22, 8-bit colormap, non-interlaced2240
97
2012-09-21T07:41:45.524575-070080.239.254.24172.18.3.11/view/1_4_35/cream/hi/news/img/languages-sprite.gifGIF image data, version 89a, 1873 x 4811937
98
2012-09-21T07:41:45.566662-070080.239.217.171172.18.3.11/frameworks/istats/0.11.1/modules/istats-1.jsASCII text, with very long lines, with no line terminators8005
99
2012-09-21T07:41:45.508437-070080.239.254.42172.18.3.11/emp/worldwide/embed.jsHTML document, ASCII text317
100
2012-09-21T07:41:45.613716-070080.239.217.171172.18.3.11/frameworks/swfobject/0.1.3/sharedmodules/swfobject-2.jsC source, ASCII text25620

Comments(not set)

Update Download PCAP Delete