tcpdata_santg_ss_20181004073632.pcap

MD5	e3d0759ab1590c32c207bc6f0ca8361e
Submission Date	2018-10-04 00:44:10
Tags	(not set)

Alert 0

#		Timestamp	Src Ip	Dest Ip	Alert Signature	P
No results found.

DNS 24

Showing 1-20 of 24 items.

Timestamp

Src Ip

Dest Ip

Dns Type

Resource Record Name

Resource Record Type

Resource Data

2018-10-03T23:38:31.683092-0700

10.155.52.54

10.87.63.117

query

version.bind

TXT

(not set)

2018-10-03T23:38:31.794187-0700

10.155.52.54

10.87.63.117

query

117.63.87.10.in-addr.arpa

PTR

(not set)

2018-10-03T23:39:39.652408-0700

10.155.52.54

10.87.63.117

query

version.bind

TXT

(not set)

2018-10-03T23:39:39.763497-0700

10.155.52.54

10.87.63.117

query

117.63.87.10.in-addr.arpa

PTR

(not set)

2018-10-03T23:40:52.387340-0700

10.155.52.54

10.87.63.117

query

version.bind

TXT

(not set)

2018-10-03T23:40:52.498454-0700

10.155.52.54

10.87.63.117

query

117.63.87.10.in-addr.arpa

PTR

(not set)

2018-10-03T23:42:13.108499-0700

10.155.52.54

10.87.63.117

query

version.bind

TXT

(not set)

2018-10-03T23:42:13.219614-0700

10.155.52.54

10.87.63.117

query

117.63.87.10.in-addr.arpa

PTR

(not set)

2018-10-03T23:43:29.427676-0700

10.155.52.54

10.87.63.117

query

version.bind

TXT

(not set)

2018-10-03T23:43:29.538731-0700

10.155.52.54

10.87.63.117

query

117.63.87.10.in-addr.arpa

PTR

(not set)

2018-10-03T23:44:03.563938-0700

10.155.52.54

10.87.63.117

query

version.bind

TXT

(not set)

2018-10-03T23:44:03.674856-0700

10.155.52.54

10.87.63.117

query

117.63.87.10.in-addr.arpa

PTR

(not set)

2018-10-03T23:38:31.683092-0700

10.155.52.54

10.87.63.117

query

version.bind

TXT

(not set)

2018-10-03T23:38:31.794187-0700

10.155.52.54

10.87.63.117

query

117.63.87.10.in-addr.arpa

PTR

(not set)

2018-10-03T23:39:39.652408-0700

10.155.52.54

10.87.63.117

query

version.bind

TXT

(not set)

2018-10-03T23:39:39.763497-0700

10.155.52.54

10.87.63.117

query

117.63.87.10.in-addr.arpa

PTR

(not set)

2018-10-03T23:40:52.387340-0700

10.155.52.54

10.87.63.117

query

version.bind

TXT

(not set)

2018-10-03T23:40:52.498454-0700

10.155.52.54

10.87.63.117

query

117.63.87.10.in-addr.arpa

PTR

(not set)

2018-10-03T23:42:13.108499-0700

10.155.52.54

10.87.63.117

query

version.bind

TXT

(not set)

2018-10-03T23:42:13.219614-0700

10.155.52.54

10.87.63.117

query

117.63.87.10.in-addr.arpa

PTR

(not set)

TLS 6

Showing 1-6 of 6 items.

Timestamp

Source IP

Destination IP

TLS Version

Server Name Indication

2018-10-03T23:41:28.027022-0700

10.155.52.54

10.154.37.233

TLS 1.2

monitoring.qualys.eu

2018-10-03T23:41:23.898352-0700

10.155.52.54

10.154.37.233

TLS 1.2

monitoring.qualys.eu

2018-10-03T23:41:28.260050-0700

10.155.52.54

10.154.37.233

TLS 1.2

monitoring.qualys.eu

2018-10-03T23:41:28.027022-0700

10.155.52.54

10.154.37.233

TLS 1.2

monitoring.qualys.eu

2018-10-03T23:41:23.898352-0700

10.155.52.54

10.154.37.233

TLS 1.2

monitoring.qualys.eu

2018-10-03T23:41:28.260050-0700

10.155.52.54

10.154.37.233

TLS 1.2

monitoring.qualys.eu

TFTP 8

Showing 1-8 of 8 items.

#	Timestamp	Src Ip	Dest Ip	Tftp Packet	Tftp File	Tftp Mode
1	2018-10-03T23:38:58.145943-0700	10.155.52.54	10.87.63.117	read	kernel	netascii
2	2018-10-03T23:40:06.115289-0700	10.155.52.54	10.87.63.117	read	kernel	netascii
3	2018-10-03T23:41:24.100478-0700	10.155.52.54	10.87.63.117	read	kernel	netascii
4	2018-10-03T23:42:44.821541-0700	10.155.52.54	10.87.63.117	read	kernel	netascii
5	2018-10-03T23:38:58.145943-0700	10.155.52.54	10.87.63.117	read	kernel	netascii
6	2018-10-03T23:40:06.115289-0700	10.155.52.54	10.87.63.117	read	kernel	netascii
7	2018-10-03T23:41:24.100478-0700	10.155.52.54	10.87.63.117	read	kernel	netascii
8	2018-10-03T23:42:44.821541-0700	10.155.52.54	10.87.63.117	read	kernel	netascii

HTTP 6

Showing 1-6 of 6 items.

Timestamp

Source

Hostname

Port

Method

URL

Status

2018-10-03T23:41:27.961471-0700

10.155.52.54

monitoring.qualys.eu

8080

CONNECT

monitoring.qualys.eu:443

200

2018-10-03T23:41:23.831973-0700

10.155.52.54

monitoring.qualys.eu

8080

CONNECT

monitoring.qualys.eu:443

200

2018-10-03T23:41:28.203112-0700

10.155.52.54

monitoring.qualys.eu

8080

CONNECT

monitoring.qualys.eu:443

200

2018-10-03T23:41:27.961471-0700

10.155.52.54

monitoring.qualys.eu

8080

CONNECT

monitoring.qualys.eu:443

200

2018-10-03T23:41:23.831973-0700

10.155.52.54

monitoring.qualys.eu

8080

CONNECT

monitoring.qualys.eu:443

200

2018-10-03T23:41:28.203112-0700

10.155.52.54

monitoring.qualys.eu

8080

CONNECT

monitoring.qualys.eu:443

200

SMB 0

#		Timestamp	Src Ip	Dest Ip	SMB Dialect	Command	Session	Tree
No results found.

SMTP 0

#		Timestamp	Source	Destination	Email From	Email To	Subject
No results found.

Flow 19763

Showing 61-80 of 19,763 items.

Timestamp

Flow Id

Event Type

Source

Source Port

Destination

Destination Port

Protocol

Host

2018-10-03T23:41:52.178676-0700

1559608744832376

flow

10.155.52.54

771

10.87.63.117

UDP

pcapanalyzer

2018-10-03T23:41:52.178676-0700

1562155660444282

flow

10.155.52.54

1799

10.87.63.117

21129

UDP

pcapanalyzer

2018-10-03T23:41:52.178676-0700

717825219626406

flow

10.155.52.54

4626

10.87.63.117

UDP

pcapanalyzer

2018-10-03T23:41:52.178676-0700

155257518343998

flow

10.155.52.54

3598

10.87.63.117

UDP

pcapanalyzer

2018-10-03T23:41:52.178676-0700

1984900701479784

flow

10.155.52.54

257

10.87.63.117

21129

UDP

pcapanalyzer

2018-10-03T23:41:52.178676-0700

577671847094789

flow

10.155.52.54

6682

10.87.63.117

21129

UDP

pcapanalyzer

2018-10-03T23:41:52.178676-0700

2127738429283934

flow

10.155.52.54

6169

10.87.63.117

UDP

pcapanalyzer

2018-10-03T23:41:52.178676-0700

580940317406690

flow

10.155.52.54

7454

10.87.63.117

21129

UDP

pcapanalyzer

2018-10-03T23:41:52.178676-0700

1004784869094636

flow

10.155.52.54

34870

10.87.63.117

517

UDP

pcapanalyzer

2018-10-03T23:41:52.178676-0700

723447331416764

flow

10.155.52.54

34870

10.87.63.117

6771

UDP

pcapanalyzer

2018-10-03T23:41:52.178676-0700

1005613798714273

flow

10.155.52.54

4884

10.87.63.117

21129

UDP

pcapanalyzer

2018-10-03T23:41:52.178676-0700

444566515178357

flow

10.155.52.54

34870

10.87.63.117

1040

UDP

pcapanalyzer

2018-10-03T23:41:52.178676-0700

1429746113465024

flow

10.155.52.54

34870

10.87.63.117

1043

UDP

pcapanalyzer

2018-10-03T23:41:52.178676-0700

1852207686468985

flow

10.155.52.54

7711

10.87.63.117

21129

UDP

pcapanalyzer

2018-10-03T23:41:52.178676-0700

1150195281823189

flow

10.155.52.54

34870

10.87.63.117

1055

UDP

pcapanalyzer

2018-10-03T23:41:52.178676-0700

1572669740014560

flow

10.155.52.54

3212

10.87.63.117

1029

TCP

pcapanalyzer

2018-10-03T23:41:52.178676-0700

166235454523114

flow

10.155.52.54

34870

10.87.63.117

4000

UDP

pcapanalyzer

2018-10-03T23:41:52.178676-0700

729352912812161

flow

10.155.52.188

138

10.155.53.255

138

UDP

pcapanalyzer

2018-10-03T23:41:52.178676-0700

1714992071441698

flow

10.155.52.54

34870

10.87.63.117

22222

UDP

pcapanalyzer

2018-10-03T23:41:52.178676-0700

1433521390679670

flow

10.155.53.59

137

10.155.53.255

137

UDP

pcapanalyzer

File 0

#		Timestamp	Source	Destination	File Name	File Magic	File Size
No results found.

Comments	(not set)

Update Download PCAP Delete