test.pcap

MD520e4892aa11e2fe8dd43a217d57132a7
Submission Date2018-11-12 23:49:25
Tags(not set)
Alert 26
Showing 1-20 of 26 items.
#
TimestampSrc IpDest IpAlert SignatureP
1
2018-11-05T03:59:21.313242-0800192.168.156.100192.168.156.128ET SCAN Possible Nmap User-Agent Observed*
2
2018-11-05T03:59:21.313865-0800192.168.156.100192.168.156.128ET SCAN Possible Nmap User-Agent Observed*
3
2018-11-05T03:59:21.317220-0800192.168.156.100192.168.156.128ET SCAN Possible Nmap User-Agent Observed*
4
2018-11-05T03:59:21.319380-0800192.168.156.100192.168.156.128ET SCAN Possible Nmap User-Agent Observed*
5
2018-11-05T03:59:21.366479-0800192.168.156.100192.168.156.128ET SCAN Possible Nmap User-Agent Observed*
6
2018-11-05T03:59:21.318898-0800192.168.156.100192.168.156.128ET SCAN Possible Nmap User-Agent Observed*
7
2018-11-05T03:59:21.370849-0800192.168.156.100192.168.156.128ET SCAN Possible Nmap User-Agent Observed*
8
2018-11-05T03:59:21.374874-0800192.168.156.100192.168.156.128ET SCAN Possible Nmap User-Agent Observed*
9
2018-11-05T03:59:21.319989-0800192.168.156.100192.168.156.128ET SCAN Possible Nmap User-Agent Observed*
10
2018-11-05T03:59:21.364060-0800192.168.156.100192.168.156.128ET SCAN Possible Nmap User-Agent Observed*
11
2018-11-05T03:59:21.369776-0800192.168.156.100192.168.156.128ET SCAN Possible Nmap User-Agent Observed*
12
2018-11-05T03:59:21.382329-0800192.168.156.100192.168.156.128ET SCAN Possible Nmap User-Agent Observed*
13
2018-11-05T03:59:21.371212-0800192.168.156.100192.168.156.128ET SCAN Possible Nmap User-Agent Observed*
14
2018-11-05T03:59:21.386933-0800192.168.156.100192.168.156.128ET SCAN Possible Nmap User-Agent Observed*
15
2018-11-05T03:59:21.381649-0800192.168.156.100192.168.156.128ET SCAN Possible Nmap User-Agent Observed*
16
2018-11-05T03:59:21.383915-0800192.168.156.100192.168.156.128ET SCAN Possible Nmap User-Agent Observed*
17
2018-11-05T03:59:21.317746-0800192.168.156.100192.168.156.128ET SCAN Possible Nmap User-Agent Observed*
18
2018-11-05T03:59:21.384994-0800192.168.156.100192.168.156.128ET SCAN Possible Nmap User-Agent Observed*
19
2018-11-05T03:59:21.318312-0800192.168.156.100192.168.156.128ET SCAN Possible Nmap User-Agent Observed*
20
2018-11-05T03:59:21.323314-0800192.168.156.100192.168.156.128ET SCAN Possible Nmap User-Agent Observed*
DNS 0
#
TimestampSrc IpDest IpDns TypeResource Record NameResource Record TypeResource Data
No results found.
TLS 0
#
TimestampSource IPDestination IPTLS VersionServer Name Indication
No results found.
TFTP 0
#TimestampSrc IpDest IpTftp PacketTftp FileTftp Mode
No results found.
HTTP 167
Showing 1-20 of 167 items.
#
TimestampSourceHostnamePortMethodURLStatus
1
2018-11-05T03:59:21.313242-0800192.168.156.100192.168.156.12880GET/nmaplowercheck1541419161404
2
2018-11-05T03:59:21.317220-0800192.168.156.100192.168.156.12880PROPFIND/405
3
2018-11-05T03:59:21.319380-0800192.168.156.100192.168.156.12880OPTIONS/200
4
2018-11-05T03:59:21.316596-0800192.168.156.100192.168.156.12880GET/200
5
2018-11-05T03:59:21.366479-0800192.168.156.100192.168.156.12880GET/robots.txt404
6
2018-11-05T03:59:19.958941-0800192.168.156.100(not set)80GET/200
7
2018-11-05T03:59:21.370849-0800192.168.156.100192.168.156.12880OPTIONS/200
8
2018-11-05T03:59:21.318898-0800192.168.156.100192.168.156.12880GET/.git/HEAD404
9
2018-11-05T03:59:21.319989-0800192.168.156.100192.168.156.12880OPTIONS/200
10
2018-11-05T03:59:21.364060-0800192.168.156.100192.168.156.12880PROPFIND/405
11
2018-11-05T03:59:21.376915-0800192.168.156.100192.168.156.12880GET/200
12
2018-11-05T03:59:21.369776-0800192.168.156.100192.168.156.12880GET/evox/about404
13
2018-11-05T03:59:21.371212-0800192.168.156.100192.168.156.12880PROPFIND/405
14
2018-11-05T03:59:21.382329-0800192.168.156.100192.168.156.12880OPTIONS/200
15
2018-11-05T03:59:21.386933-0800192.168.156.100192.168.156.12880OPTIONS/200
16
2018-11-05T04:00:36.100461-0800192.168.156.100192.168.156.12880GET/200
17
2018-11-05T03:59:21.381933-0800192.168.156.100192.168.156.12880GET/favicon.ico200
18
2018-11-05T04:00:36.240814-0800192.168.156.100192.168.156.12880GET/animatedcollapse.js200
19
2018-11-05T03:59:21.383915-0800192.168.156.100192.168.156.12880OPTIONS/200
20
2018-11-05T03:59:21.384994-0800192.168.156.100192.168.156.12880OPTIONS/200
SMB 0
#
TimestampSrc IpDest IpSMB DialectCommandSessionTree
No results found.
SMTP 0
#
TimestampSourceDestinationEmail FromEmail ToSubject
No results found.
Flow 146
Showing 1-20 of 146 items.
#
TimestampFlow IdEvent TypeSourceSource PortDestinationDestination PortProtocolHost
1
2018-11-05T03:59:13.849769-0800136681702381127flow192.168.156.10049744192.168.156.1283389TCPpcapanalyzer
2
2018-11-05T03:59:13.849769-08002107401676346913flow192.168.156.10049744192.168.156.12822TCPpcapanalyzer
3
2018-11-05T03:59:13.849769-08002248216474113439flow192.168.156.10049744192.168.156.12821TCPpcapanalyzer
4
2018-11-05T04:12:43.245678-08001642082774010162flow192.168.156.137961239.255.255.2501900UDPpcapanalyzer
5
2018-11-05T04:12:43.245678-0800253519841144984flow192.168.156.1003390254.246.133.196443TCPpcapanalyzer
6
2018-11-05T04:12:43.245678-08001980777453126076flow192.168.156.128138192.168.156.255138UDPpcapanalyzer
7
2018-11-05T04:12:43.245678-08001701933145968839flow192.168.156.10039564192.168.156.12837351UDPpcapanalyzer
8
2018-11-05T04:12:43.245678-08002011795704337856flow192.168.156.10049744192.168.156.12880TCPpcapanalyzer
9
2018-11-05T04:12:43.245678-0800324809864534589flow192.168.156.10039612192.168.156.12880TCPpcapanalyzer
10
2018-11-05T04:12:43.245678-0800327938748224889flow192.168.156.10039610192.168.156.12880TCPpcapanalyzer
11
2018-11-05T04:12:43.245678-0800926691544356361flow192.168.156.10049744192.168.156.12853TCPpcapanalyzer
12
2018-11-05T04:12:43.245678-0800232556114540531flow192.168.156.10039611192.168.156.12880TCPpcapanalyzer
13
2018-11-05T04:12:43.245678-08001930674514198862flow192.168.156.10039615192.168.156.128443TCPpcapanalyzer
14
2018-11-05T04:12:43.245678-0800951756973495621flow192.168.156.10049744192.168.156.128443TCPpcapanalyzer
15
2018-11-05T04:12:43.245678-08001687018871987972flow192.168.156.10039614192.168.156.128443TCPpcapanalyzer
16
2018-11-05T04:12:43.245678-08001830504802002flow192.168.156.254(not set)192.168.156.128(not set)ICMPpcapanalyzer
17
2018-11-05T04:12:43.245678-0800146835038534407flow192.168.156.140609239.255.255.2501900UDPpcapanalyzer
18
2018-11-05T04:12:43.245678-08001836668422473050flow192.168.156.10043140192.168.156.12880TCPpcapanalyzer
19
2018-11-05T04:12:43.245678-08001980777480727697flow192.168.156.128138192.168.156.255138UDPpcapanalyzer
20
2018-11-05T04:12:43.245678-08001982304316134027flow192.168.156.10043078192.168.156.12880TCPpcapanalyzer
File 156
Showing 1-20 of 156 items.
#
TimestampSourceDestinationFile NameFile MagicFile Size
1
2018-11-05T03:59:21.313242-0800192.168.156.128192.168.156.100/nmaplowercheck1541419161HTML document, ASCII text222
2
2018-11-05T03:59:21.317220-0800192.168.156.128192.168.156.100/HTML document, ASCII text236
3
2018-11-05T03:59:21.316596-0800192.168.156.128192.168.156.100/HTML document, ASCII text23832
4
2018-11-05T03:59:19.958941-0800192.168.156.128192.168.156.100/HTML document, ASCII text23832
5
2018-11-05T03:59:21.366479-0800192.168.156.128192.168.156.100/robots.txtHTML document, ASCII text208
6
2018-11-05T03:59:21.312139-0800192.168.156.100192.168.156.128/sdkASCII text, with very long lines, with no line terminators441
7
2018-11-05T03:59:21.318898-0800192.168.156.128192.168.156.100/.git/HEADHTML document, ASCII text207
8
2018-11-05T03:59:21.364060-0800192.168.156.128192.168.156.100/HTML document, ASCII text236
9
2018-11-05T03:59:21.376915-0800192.168.156.128192.168.156.100/HTML document, ASCII text23832
10
2018-11-05T03:59:21.369776-0800192.168.156.128192.168.156.100/evox/aboutHTML document, ASCII text208
11
2018-11-05T03:59:21.371212-0800192.168.156.128192.168.156.100/HTML document, ASCII text236
12
2018-11-05T04:00:36.100461-0800192.168.156.128192.168.156.100/HTML document, ASCII text, with very long lines23832
13
2018-11-05T03:59:21.381933-0800192.168.156.128192.168.156.100/favicon.icoMS Windows icon resource - 2 icons, 16x163638
14
2018-11-05T03:59:21.312404-0800192.168.156.100192.168.156.128/ASCII text, with no line terminators88
15
2018-11-05T04:00:36.240814-0800192.168.156.128192.168.156.100/animatedcollapse.jsASCII text, with CRLF line terminators11822
16
2018-11-05T03:59:21.318312-0800192.168.156.128192.168.156.100/sdkHTML document, ASCII text201
17
2018-11-05T04:00:36.244483-0800192.168.156.128192.168.156.100/jquery.min.jsASCII text, with very long lines57254
18
2018-11-05T04:00:36.241527-0800192.168.156.128192.168.156.100/index.cssASCII text1227
19
2018-11-05T03:59:21.322827-0800192.168.156.128192.168.156.100/HTML document, ASCII text23832
20
2018-11-05T04:00:36.282724-0800192.168.156.128192.168.156.100/images/Knob_Add.pngPNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced4321

Comments(not set)

Update Download PCAP Delete