Som
65 20 75 6C 74 72 61 73 20 49 27 76 65 20 72 75 e ultras I've ru
6E 3C 2F 61 3E 20 61 6E 64 0D 0A 20 20 3C 61 20 n and.. mountains
49 27 76 65 20 63 6C 69 6D 62 65 64 3C 2F 61 3E I've climbed
2E 0D 0A 0D 0A 3C 70 3E 4D 79 20 77 69 66 65 20 .....My wife
4A 6F 61 6E 20 68 6F 6C 64 73 20 77 6F 72 6C 64 Joan holds world
20 72 65 63 6F 72 64 73 20 69 6E 0D 0A 3C 61 20 records in..perimeter..bic
79 63 6C 69 6E 67 3C 2F 61 3E 2C 20 69 6E 63 6C ycling, incl
75 64 69 6E 67 20 72 69 64 65 73 20 61 72 6F 75 uding rides arou
6E 64 20 32 30 20 63 6F 75 6E 74 72 69 65 73 2C nd 20 countries,
20 61 6C 6C 0D 0A 73 6F 6C 6F 2C 20 61 6E 64 20 all..solo, and
70 65 72 69 6D 65 74 65 72 73 20 69 6E 20 65 76 perimeters in ev
65 72 79 20 73 74 61 74 65 20 69 6E 20 74 68 65 ery state in the
20 63 6F 6E 74 69 6E 74 65 6E 74 61 6C 20 55 2E contintental U.
53 2E 20 20 53 68 65 20 68 61 73 0D 0A 63 6F 6D S. She has..com
70 6C 65 74 65 64 20 74 68 65 20 48 61 77 61 69 pleted the Hawai
69 20 49 72 6F 6E 6D 61 6E 20 33 20 74 69 6D 65 i Ironman 3 time
73 20 28 73 77 69 6D 20 32 2E 34 20 6D 69 6C 65 s (swim 2.4 mile
73 2C 20 62 69 6B 65 20 31 31 32 2C 20 72 75 6E s, bike 112, run
20 32 36 29 2E 0D 0A 57 65 20 68 61 76 65 20 3C 26)...We have <
61 20 68 72 65 66 3D 63 61 74 73 2F 3E 37 20 63 a href=cats/>7 c
61 74 73 3C 2F 61 3E 2E 0D 0A 0D 0A 3C 70 3E 49 ats.....
I
20 6D 61 69 6E 74 61 69 6E 20 74 68 65 20 3C 61 maintain the ..race calenda
72 3C 2F 61 3E 20 61 6E 64 0D 0A 3C 61 20 68 72 r and..re
73 75 6C 74 73 3C 2F 61 3E 20 66 6F 72 20 74 68 sults for th
65 0D 0A 3C 61 20 68 72 65 66 3D 68 74 74 70 3A e..Spac
65 20 43 6F 61 73 74 20 52 75 6E 6E 65 72 73 3C e Coast Runners<
2F 61 3E 20 69 6E 0D 0A 65 61 73 74 2D 63 65 6E /a> in..east-cen
74 72 61 6C 20 46 6C 6F 72 69 64 61 2E 0D 0A 0D tral Florida....
0A 3C 70 3E 3C 61 20 68 72 65 66 3D 73 75 64 6F . 0:40:5:58:67:7D type:0x800 len:0x36
192.168.0.102:1066 -> 66.218.79.171:80 TCP TTL:128 TOS:0x0 ID:531 IpLen:20 DgmLen:40 DF
***A**** Seq: 0x72A023F8 Ack: 0x54C8875B Win: 0xFFFF TcpLen: 20
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
[Note: server appends 2 web bugs and Javascript for tracking]
02/02-13:55:36.951428 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x2B2
66.218.79.171:80 -> 192.168.0.102:1066 TCP TTL:49 TOS:0x0 ID:40686 IpLen:20 DgmLen:676 DF
***AP*** Seq: 0x54C8875B Ack: 0x72A023F8 Win: 0xFFFF TcpLen: 20
74 6D 6C 3E 53 75 64 6F 6B 75 20 53 6F 6C 76 65 tml>Sudoku Solve
72 3C 2F 61 3E 0D 0A 0D 0A 3C 70 3E 3C 61 20 68 r....
OCR tes
74 20 69 6D 61 67 65 73 3C 2F 61 3E 0D 0A 0D 0A t images....
3C 70 3E 4D 61 74 74 20 4D 61 68 6F 6E 65 79 2C
Matt Mahoney,
20 3C 61 20 68 72 65 66 3D 6D 61 69 6C 74 6F 3A mmahoney@cs.
66 69 74 2E 65 64 75 3C 2F 61 3E 0D 0A 3C 2F 61 fit.edu..
..
0D 0A 3C 2F 68 74 6D 6C 3E 0D 0A 0D 0A 3C 21 2D ......geovisit
28 29 3B 3C 2F 73 63 72 69 70 74 3E 3C 6E 6F 73 ();....
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
[server closes connection (in spite of keepalive)]
02/02-13:55:36.951472 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x3C
66.218.79.171:80 -> 192.168.0.102:1066 TCP TTL:49 TOS:0x0 ID:40687 IpLen:20 DgmLen:40 DF
***A***F Seq: 0x54C889D7 Ack: 0x72A023F8 Win: 0xFFFF TcpLen: 20
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:36.951535 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36
192.168.0.102:1066 -> 66.218.79.171:80 TCP TTL:128 TOS:0x0 ID:532 IpLen:20 DgmLen:40 DF
***A**** Seq: 0x72A023F8 Ack: 0x54C889D8 Win: 0xFD83 TcpLen: 20
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:36.955930 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36
192.168.0.102:1066 -> 66.218.79.171:80 TCP TTL:128 TOS:0x0 ID:547 IpLen:20 DgmLen:40 DF
***A***F Seq: 0x72A023F8 Ack: 0x54C889D8 Win: 0xFD83 TcpLen: 20
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
[client opens connections on local ports 1068 and 1070 to get embedded images
matt.jpg and a web bug]
02/02-13:55:36.988488 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x3E
192.168.0.102:1068 -> 66.218.79.171:80 TCP TTL:128 TOS:0x0 ID:559 IpLen:20 DgmLen:48 DF
******S* Seq: 0x8F7AF134 Ack: 0x0 Win: 0xFFFF TcpLen: 28
TCP Options (4) => MSS: 1460 NOP NOP SackOK
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:37.022648 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x3E
192.168.0.102:1070 -> 66.218.79.180:80 TCP TTL:128 TOS:0x0 ID:573 IpLen:20 DgmLen:48 DF
******S* Seq: 0x382DF45D Ack: 0x0 Win: 0xFFFF TcpLen: 28
TCP Options (4) => MSS: 1460 NOP NOP SackOK
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:37.053318 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x3C
66.218.79.171:80 -> 192.168.0.102:1066 TCP TTL:49 TOS:0x0 ID:41079 IpLen:20 DgmLen:40 DF
***A**** Seq: 0x54C889D8 Ack: 0x72A023F9 Win: 0xFFFF TcpLen: 20
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:37.089020 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x3C
66.218.79.171:80 -> 192.168.0.102:1068 TCP TTL:49 TOS:0x0 ID:41229 IpLen:20 DgmLen:44 DF
***A**S* Seq: 0x3AA82121 Ack: 0x8F7AF135 Win: 0xFFFF TcpLen: 24
TCP Options (1) => MSS: 1460
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:37.089112 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36
192.168.0.102:1068 -> 66.218.79.171:80 TCP TTL:128 TOS:0x0 ID:574 IpLen:20 DgmLen:40 DF
***A**** Seq: 0x8F7AF135 Ack: 0x3AA82122 Win: 0xFFFF TcpLen: 20
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:37.091603 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x1C5
192.168.0.102:1068 -> 66.218.79.171:80 TCP TTL:128 TOS:0x0 ID:577 IpLen:20 DgmLen:439 DF
***AP*** Seq: 0x8F7AF135 Ack: 0x3AA82122 Win: 0xFFFF TcpLen: 20
47 45 54 20 2F 6D 61 74 74 2E 6A 70 67 20 48 54 GET /matt.jpg HT
54 50 2F 31 2E 31 0D 0A 48 6F 73 74 3A 20 77 77 TP/1.1..Host: ww
77 2E 6D 61 74 74 6D 61 68 6F 6E 65 79 2E 6E 65 w.mattmahoney.ne
74 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 4D t..User-Agent: M
6F 7A 69 6C 6C 61 2F 35 2E 30 20 28 57 69 6E 64 ozilla/5.0 (Wind
6F 77 73 3B 20 55 3B 20 57 69 6E 64 6F 77 73 20 ows; U; Windows
4E 54 20 35 2E 31 3B 20 65 6E 2D 55 53 3B 20 72 NT 5.1; en-US; r
76 3A 31 2E 38 29 20 47 65 63 6B 6F 2F 32 30 30 v:1.8) Gecko/200
35 31 31 31 31 20 46 69 72 65 66 6F 78 2F 31 2E 51111 Firefox/1.
35 0D 0A 41 63 63 65 70 74 3A 20 69 6D 61 67 65 5..Accept: image
2F 70 6E 67 2C 2A 2F 2A 3B 71 3D 30 2E 35 0D 0A /png,*/*;q=0.5..
41 63 63 65 70 74 2D 4C 61 6E 67 75 61 67 65 3A Accept-Language:
20 65 6E 2D 75 73 2C 65 6E 3B 71 3D 30 2E 35 0D en-us,en;q=0.5.
0A 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D .---------------
3A 20 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 0D 0A : ------------..
41 63 63 65 70 74 2D 43 68 61 72 73 65 74 3A 20 Accept-Charset:
49 53 4F 2D 38 38 35 39 2D 31 2C 75 74 66 2D 38 ISO-8859-1,utf-8
3B 71 3D 30 2E 37 2C 2A 3B 71 3D 30 2E 37 0D 0A ;q=0.7,*;q=0.7..
4B 65 65 70 2D 41 6C 69 76 65 3A 20 33 30 30 0D Keep-Alive: 300.
0A 43 6F 6E 6E 65 63 74 69 6F 6E 3A 20 6B 65 65 .Connection: kee
70 2D 61 6C 69 76 65 0D 0A 52 65 66 65 72 65 72 p-alive..Referer
3A 20 68 74 74 70 3A 2F 2F 77 77 77 2E 6D 61 74 : http://www.mat
74 6D 61 68 6F 6E 65 79 2E 6E 65 74 2F 0D 0A 43 tmahoney.net/..C
6F 6F 6B 69 65 3A 20 42 58 3D 34 6C 6C 62 6F 62 ookie: BX=4llbob
31 31 75 34 6B 6E 6F 26 62 3D 32 0D 0A 0D 0A 11u4kno&b=2....
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:37.120834 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x3C
66.218.79.180:80 -> 192.168.0.102:1070 TCP TTL:49 TOS:0x0 ID:26490 IpLen:20 DgmLen:44 DF
***A**S* Seq: 0x3E266D3B Ack: 0x382DF45E Win: 0xFFFF TcpLen: 24
TCP Options (1) => MSS: 1460
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:37.120978 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36
192.168.0.102:1070 -> 66.218.79.180:80 TCP TTL:128 TOS:0x0 ID:578 IpLen:20 DgmLen:40 DF
***A**** Seq: 0x382DF45E Ack: 0x3E266D3C Win: 0xFFFF TcpLen: 20
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:37.121835 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x19D
192.168.0.102:1070 -> 66.218.79.180:80 TCP TTL:128 TOS:0x0 ID:581 IpLen:20 DgmLen:399 DF
***AP*** Seq: 0x382DF45E Ack: 0x3E266D3C Win: 0xFFFF TcpLen: 20
47 45 54 20 2F 6A 73 5F 73 6F 75 72 63 65 2F 67 GET /js_source/g
65 6F 76 32 2E 6A 73 20 48 54 54 50 2F 31 2E 31 eov2.js HTTP/1.1
0D 0A 48 6F 73 74 3A 20 68 6F 73 74 69 6E 67 70 ..Host: hostingp
72 6F 64 2E 63 6F 6D 0D 0A 55 73 65 72 2D 41 67 rod.com..User-Ag
65 6E 74 3A 20 4D 6F 7A 69 6C 6C 61 2F 35 2E 30 ent: Mozilla/5.0
20 28 57 69 6E 64 6F 77 73 3B 20 55 3B 20 57 69 (Windows; U; Wi
6E 64 6F 77 73 20 4E 54 20 35 2E 31 3B 20 65 6E ndows NT 5.1; en
2D 55 53 3B 20 72 76 3A 31 2E 38 29 20 47 65 63 -US; rv:1.8) Gec
6B 6F 2F 32 30 30 35 31 31 31 31 20 46 69 72 65 ko/20051111 Fire
66 6F 78 2F 31 2E 35 0D 0A 41 63 63 65 70 74 3A fox/1.5..Accept:
20 2A 2F 2A 0D 0A 41 63 63 65 70 74 2D 4C 61 6E */*..Accept-Lan
67 75 61 67 65 3A 20 65 6E 2D 75 73 2C 65 6E 3B guage: en-us,en;
71 3D 30 2E 35 0D 0A 2D 2D 2D 2D 2D 2D 2D 2D 2D q=0.5..---------
2D 2D 2D 2D 2D 2D 3A 20 2D 2D 2D 2D 2D 2D 2D 2D ------: --------
2D 2D 2D 2D 0D 0A 41 63 63 65 70 74 2D 43 68 61 ----..Accept-Cha
72 73 65 74 3A 20 49 53 4F 2D 38 38 35 39 2D 31 rset: ISO-8859-1
2C 75 74 66 2D 38 3B 71 3D 30 2E 37 2C 2A 3B 71 ,utf-8;q=0.7,*;q
3D 30 2E 37 0D 0A 4B 65 65 70 2D 41 6C 69 76 65 =0.7..Keep-Alive
3A 20 33 30 30 0D 0A 43 6F 6E 6E 65 63 74 69 6F : 300..Connectio
6E 3A 20 6B 65 65 70 2D 61 6C 69 76 65 0D 0A 2D n: keep-alive..-
2D 2D 2D 2D 2D 2D 3A 20 2D 2D 2D 2D 3A 2D 2D 2D ------: ----:---
2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ----------------
2D 2D 2D 0D 0A 0D 0A ---....
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:37.209610 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x5EA
66.218.79.171:80 -> 192.168.0.102:1068 TCP TTL:49 TOS:0x0 ID:41917 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x3AA82122 Ack: 0x8F7AF2C4 Win: 0xFFFF TcpLen: 20
48 54 54 50 2F 31 2E 31 20 32 30 30 20 4F 4B 0D HTTP/1.1 200 OK.
0A 44 61 74 65 3A 20 54 68 75 2C 20 30 32 20 46 .Date: Thu, 02 F
65 62 20 32 30 30 36 20 31 38 3A 35 35 3A 33 38 eb 2006 18:55:38
20 47 4D 54 0D 0A 50 33 50 3A 20 70 6F 6C 69 63 GMT..P3P: polic
79 72 65 66 3D 22 68 74 74 70 3A 2F 2F 70 33 70 yref="http://p3p
2E 79 61 68 6F 6F 2E 63 6F 6D 2F 77 33 63 2F 70 .yahoo.com/w3c/p
33 70 2E 78 6D 6C 22 2C 20 43 50 3D 22 43 41 4F 3p.xml", CP="CAO
20 44 53 50 20 43 4F 52 20 43 55 52 20 41 44 4D DSP COR CUR ADM
20 44 45 56 20 54 41 49 20 50 53 41 20 50 53 44 DEV TAI PSA PSD
20 49 56 41 69 20 49 56 44 69 20 43 4F 4E 69 20 IVAi IVDi CONi
54 45 4C 6F 20 4F 54 50 69 20 4F 55 52 20 44 45 TELo OTPi OUR DE
4C 69 20 53 41 4D 69 20 4F 54 52 69 20 55 4E 52 Li SAMi OTRi UNR
69 20 50 55 42 69 20 49 4E 44 20 50 48 59 20 4F i PUBi IND PHY O
4E 4C 20 55 4E 49 20 50 55 52 20 46 49 4E 20 43 NL UNI PUR FIN C
4F 4D 20 4E 41 56 20 49 4E 54 20 44 45 4D 20 43 OM NAV INT DEM C
4E 54 20 53 54 41 20 50 4F 4C 20 48 45 41 20 50 NT STA POL HEA P
52 45 20 47 4F 56 22 0D 0A 4C 61 73 74 2D 4D 6F RE GOV"..Last-Mo
64 69 66 69 65 64 3A 20 53 75 6E 2C 20 30 33 20 dified: Sun, 03
46 65 62 20 32 30 30 32 20 31 34 3A 34 36 3A 32 Feb 2002 14:46:2
37 20 47 4D 54 0D 0A 45 54 61 67 3A 20 22 38 61 7 GMT..ETag: "8a
39 38 66 2D 31 38 37 30 2D 33 63 35 64 34 64 34 98f-1870-3c5d4d4
33 22 0D 0A 41 63 63 65 70 74 2D 52 61 6E 67 65 3"..Accept-Range
73 3A 20 62 79 74 65 73 0D 0A 43 6F 6E 74 65 6E s: bytes..Conten
74 2D 4C 65 6E 67 74 68 3A 20 36 32 35 36 0D 0A t-Length: 6256..
43 6F 6E 6E 65 63 74 69 6F 6E 3A 20 63 6C 6F 73 Connection: clos
65 0D 0A 43 6F 6E 74 65 6E 74 2D 54 79 70 65 3A e..Content-Type:
20 69 6D 61 67 65 2F 6A 70 65 67 0D 0A 0D 0A FF image/jpeg.....
D8 FF E0 00 10 4A 46 49 46 00 01 01 01 01 2C 01 .....JFIF.....,.
2C 00 00 FF DB 00 43 00 08 06 06 07 06 05 08 07 ,.....C.........
07 07 09 09 08 0A 0C 14 0D 0C 0B 0B 0C 19 12 13 ................
0F 14 1D 1A 1F 1E 1D 1A 1C 1C 20 24 2E 27 20 22 .......... $.' "
2C 23 1C 1C 28 37 29 2C 30 31 34 34 34 1F 27 39 ,#..(7),01444.'9
3D 38 32 3C 2E 33 34 32 FF DB 00 43 01 09 09 09 =82<.342...C....
0C 0B 0C 18 0D 0D 18 32 21 1C 21 32 32 32 32 32 .......2!.!22222
32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 2222222222222222
32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 2222222222222222
32 32 32 32 32 32 32 32 32 32 32 32 32 FF C0 00 2222222222222...
11 08 00 D0 00 B0 03 01 22 00 02 11 01 03 11 01 ........".......
FF C4 00 1F 00 00 01 05 01 01 01 01 01 01 00 00 ................
00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0A ................
0B FF C4 00 B5 10 00 02 01 03 03 02 04 03 05 05 ................
04 04 00 00 01 7D 01 02 03 00 04 11 05 12 21 31 .....}........!1
41 06 13 51 61 07 22 71 14 32 81 91 A1 08 23 42 A..Qa."q.2....#B
B1 C1 15 52 D1 F0 24 33 62 72 82 09 0A 16 17 18 ...R..$3br......
19 1A 25 26 27 28 29 2A 34 35 36 37 38 39 3A 43 ..%&'()*456789:C
44 45 46 47 48 49 4A 53 54 55 56 57 58 59 5A 63 DEFGHIJSTUVWXYZc
64 65 66 67 68 69 6A 73 74 75 76 77 78 79 7A 83 defghijstuvwxyz.
84 85 86 87 88 89 8A 92 93 94 95 96 97 98 99 9A ................
A2 A3 A4 A5 A6 A7 A8 A9 AA B2 B3 B4 B5 B6 B7 B8 ................
B9 BA C2 C3 C4 C5 C6 C7 C8 C9 CA D2 D3 D4 D5 D6 ................
D7 D8 D9 DA E1 E2 E3 E4 E5 E6 E7 E8 E9 EA F1 F2 ................
F3 F4 F5 F6 F7 F8 F9 FA FF C4 00 1F 01 00 03 01 ................
01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 ................
03 04 05 06 07 08 09 0A 0B FF C4 00 B5 11 00 02 ................
01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 .............w..
02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 .....!1..AQ.aq."
32 81 08 14 42 91 A1 B1 C1 09 23 33 52 F0 15 62 2...B.....#3R..b
72 D1 0A 16 24 34 E1 25 F1 17 18 19 1A 26 27 28 r...$4.%.....&'(
29 2A 35 36 37 38 39 3A 43 44 45 46 47 48 49 4A )*56789:CDEFGHIJ
53 54 55 56 57 58 59 5A 63 64 65 66 67 68 69 6A STUVWXYZcdefghij
73 74 75 76 77 78 79 7A 82 83 84 85 86 87 88 89 stuvwxyz........
8A 92 93 94 95 96 97 98 99 9A A2 A3 A4 A5 A6 A7 ................
A8 A9 AA B2 B3 B4 B5 B6 B7 B8 B9 BA C2 C3 C4 C5 ................
C6 C7 C8 C9 CA D2 D3 D4 D5 D6 D7 D8 D9 DA E2 E3 ................
E4 E5 E6 E7 E8 E9 EA F2 F3 F4 F5 F6 F7 F8 F9 FA ................
FF DA 00 0C 03 01 00 02 11 03 11 00 3F 00 D7 E8 ............?...
33 C9 A3 1C 8E A7 34 67 91 48 39 F6 F7 AF 64 CA 3.....4g.H9...d.
C3 B1 49 8F E7 49 9E 33 9A 51 D7 AE 68 68 76 13 ..I..I.3.Q..hhv.
BE 0F E5 46 07 5C 74 A3 19 E9 D7 9A 64 D2 88 93 ...F.\t.....d...
68 00 B1 EA 4F 6A CE AD 45 05 76 69 18 5D 81 75 h...Oj..E.vi.].u
53 C9 CF A0 35 1B B8 24 0C F3 55 5D CB 1C 9E 58 S...5..$..U]...X
71 CF 4C 53 07 9A E4 00 09 EA 06 45 79 95 2B 39 q.LS.......Ey.+9
3D CD D4 12 26 62 33 92 E0 7F 8D 22 4B 80 01 70 =...&b3...."K..p
72 08 19 A6 2D A4 8C 06 F7 D8 47 63 E9 4C 96 14 r...-.....Gc.L..
8D 47 CD 9E 78 AC 6F 72 BA 16 1A 75 56 F9 90 67 .G..x.or...uV..g
D4 55 69 0A C9 92 AD 8F AD 40 64 0B C0 6C E0 55 .Ui......@d..l.U
79 26 20 F0 39 02 A9 22 59 2A CE 62 90 02 70 4F y& .9.."Y*.b..pO
4F 7A B7 1D C0 24 13 83 83 DE B1 E6 63 20 04 83 Oz...$......c ..
C1 E2 A2 17 0E 83 04 E3 06 98 92 B2 B9 D0 B5 DF ................
9A E8 A4 FC A0 E7 1E BF 5A EA 7C 2D 61 A7 6A F0 ........Z.|-a.j.
EA 16 FA 81 55 6F 97 C9 2D C6 06 CE 4F E7 9F CA ....Uo..-...O...
BC EE 0B A2 58 02 73 93 D3 F2 AE BF C2 D0 47 A8 ....X.s.......G.
EB 36 D6 92 B9 11 14 66 60 AD 82 70 57 8C FE 26 .6.....f`..pW..&
9D 90 29 77 2A DF E9 E3 4F 73 0F 9E 92 34 67 1B ..)w*...Os...4g.
D7 80 7A 60 E3 B7 5A CC 28 58 02 08 2A 7A 1F 63 ..z`..Z.(X..*z.c
D2 BD BA EB C3 DA 45 D6 9C 6C A4 B3 89 60 3D 30 ......E..l...`=0
30 41 EC 73 D7 35 E6 DA D7 84 EF B4 94 F2 AD 2D 0A.s.5.........-
A5 BC 8D 08 CB 44 32 D8 C0 EA 07 4C 73 F8 50 27 .....D2....Ls.P'
25 23 98 11 92 41 C1 A9 90 0C 60 80 4F A9 AA CB %#...A....`.O...
72 3C CC 10 50 83 8F 98 11 D7 B7 35 6D 48 2B C3 r<..P......5mH+.
02 73 D3 23 8A 10 D4 5F 61 E0 80 06 3A 01 50 5C .s.#..._a...:.P\
38 4B 77 77 8Kww
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:37.209807 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x5EA
66.218.79.171:80 -> 192.168.0.102:1068 TCP TTL:49 TOS:0x0 ID:41918 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x3AA826D6 Ack: 0x8F7AF2C4 Win: 0xFFFF TcpLen: 20
E4 0C 7F E8 42 A4 66 44 19 79 11 40 3C E4 8A BD ....B.fD.y.@<...
E1 FD 06 7F 15 DF C7 0C 2B 22 69 B1 B0 37 37 0C ........+"i..77.
B8 0C 06 0E C5 F5 27 8E BD 3A FD 69 5D 6A 0E E9 ......'..:.i]j..
6A 4D 8E 41 FC 28 23 8E B9 A4 24 7B 75 A5 1E BE jM.A.(#...${u...
B5 EB EA 72 8B C7 19 E9 DE 93 1F 30 A0 FF 00 9E ...r.......0....
29 72 36 9E 7B 77 FC 69 37 65 71 AD EC 34 B0 04 )r6.{w.i7eq..4..
E0 FD 7E 95 9D 25 C2 33 12 06 78 A2 FA EB CA 8D ..~..%.3..x.....
94 1F 9D 8F 27 D8 E2 B2 16 66 89 39 39 3D 0E 4D ....'....f.99=.M
79 75 A6 E4 CE 88 D9 22 E4 B7 21 38 5E 05 44 75 yu....."..!8^.Du
26 5E 8C 41 C7 6A AA B1 C9 29 DC 41 23 9A B4 BA &^.A.j...).A#...
79 73 D3 19 EB C5 60 EC 8B 49 8C 7D 4D D8 0E 58 ys....`..I.}M..X
93 DC D5 79 27 77 00 EE 23 F1 EB 5A 29 A3 CA 59 ...y'w..#..Z)..Y
48 07 DF E9 5A 70 E8 25 88 04 64 F4 E4 52 72 48 H...Zp.%..d..RrH
A5 06 CE 61 04 DB B8 24 8A B3 14 52 33 28 70 71 ...a...$...R3(pq
9F 4A EA E3 D0 51 00 CA 72 3D AA 55 D2 90 30 05 .J...Q..r=.U..0.
40 FC 2A 7D A2 1A A6 64 59 E9 A5 93 2C A7 1D B8 @.*}...dY...,...
A8 6F B4 12 CD 98 86 0E 09 23 1C 7F 9E 2B AB 8E .o.......#...+..
05 89 40 C5 04 0C F4 C6 39 F4 A9 E7 6D 97 C8 AC ..@.....9...m...
79 C3 C1 25 AC C1 5D 48 C1 03 3E B5 BB A0 EB AF y..%..]H..>.....
A5 5D C7 75 1C 31 CB 20 05 42 BF 03 04 8C 9F D2 .].u.1. .B......
B5 75 6D 3A 2B B8 09 00 6E 1F C4 2B 8F 96 36 B7 .um:+...n..+..6.
97 CB 65 21 81 3D 6B 58 CA E6 12 56 3D 93 4F F1 ..e!.=kX...V=.O.
CD 85 DC 31 CB 7B B6 3B CF F9 67 6E A7 20 13 DF ...1.{.;..gn. ..
3E BE FE 87 DE B5 AC 6F D2 D6 D5 4C 93 8B CB FB >......o...L....
B6 12 79 50 9E 73 85 1C 0E CA 38 C9 3D 2B C5 34 ..yP.s....8.=+.4
F8 ED A6 95 7E D4 58 47 91 C4 7F 78 F4 00 0F A9 ....~.XG...x....
23 F4 AE F7 C2 BE 1D BD D2 64 5D 5E E6 48 34 DB #........d]^.H4.
62 BF 23 CD 2E F7 DA FB 70 0E 78 19 FA F5 35 A6 b.#.....p.x...5.
86 56 56 3B 6B 8D 0B 4F D5 60 07 54 D3 6D A4 95 .VV;k..O.`.T.m..
86 58 63 38 3E C7 83 58 D2 FC 35 F0 CC AF BB EC .Xc8>..X..5.....
B2 A7 B2 4C C0 57 4D 65 71 15 D5 A4 73 41 70 2E ...L.WMeq...sAp.
23 61 95 94 63 0D EE 31 C5 58 A4 25 26 8E 66 CF #a..c..1.X.%&.f.
E1 F7 86 6C DB 70 D3 12 66 F5 9D 8C 9F A1 38 AE ...l.p..f.....8.
8A 18 22 B6 85 61 82 24 8A 24 18 54 45 0A A3 E8 .."..a.$.$.TE...
05 49 45 02 B9 E2 A4 12 46 47 34 01 82 7E B4 B9 .IE.....FG4..~..
CE 29 70 7B 73 5E C9 9E A2 01 C6 39 FC E9 B2 BA .)p{s^.....9....
C4 9B DC 9C 0E 47 B9 C9 FF 00 1A 77 20 1F CA A8 .....G.....w ...
EA F2 11 6A 00 E7 1C 7E 39 AC 6B CA D0 2A 09 DC ...j...~9.k..*..
C3 BD B9 32 4A 5B 39 62 49 FA 0A 7E 9B 64 D7 92 ...2J[9bI..~.d..
E4 82 54 7A FA D5 78 61 33 4C 10 0E 49 C6 7D CE ..Tz..xa3L..I.}.
2B B9 D2 34 D4 B5 B6 51 81 B8 0F 4F AD 79 33 96 +..4...Q...O.y3.
87 55 38 A6 41 06 92 00 DA 54 70 79 AD 08 74 F4 .U8.A....Tpy..t.
1C 00 73 DF 3E B5 7C 20 E8 07 03 AD 4A 8B ED 8A ..s.>.| ....J...
E6 72 6C E9 49 22 28 AC 91 79 C0 03 D3 1D FD 6B .rl.I"(..y.....k
41 2D A3 52 A3 03 81 E9 50 86 00 82 49 20 74 15 A-.R....P...I t.
21 90 E0 61 4F 22 B3 72 6C A5 E4 2B A2 02 70 33 !..aO".rl..+..p3
E9 EF 55 64 53 C8 C6 31 CD 4C 5C 91 D0 FE 75 13 ..UdS..1.L\...u.
12 4E 70 47 6A 01 DC A7 33 11 8E 30 39 E6 A0 76 .NpGj...3..09..v
21 B9 E4 1A B1 32 90 73 8E 47 6A AD 2E 76 FD DF !....2.s.Gj..v..
D6 B4 5B 12 F4 22 93 05 3A E3 DA B1 35 5B 11 34 ..[.."..:...5[.4
5E 60 18 20 FA 56 C1 3E BD 41 A8 E5 01 A1 60 D8 ^`. .V.>.A....`.
C1 F6 AD 21 A1 94 8E 52 D2 27 86 E6 37 64 2E 11 ...!...R.'..7d..
C1 2A 33 C8 0C 09 FA 70 0F E5 5E D7 A0 41 A4 EA .*3....p..^..A..
7A 64 17 71 A0 9C 48 A1 F6 4C FE 66 C3 C7 18 3C zd.q..H..L.f...<
0E 6B CA 6C A6 5B 7B D8 C4 AA 19 77 84 39 1E A5 .k.l.[{....w.9..
46 7F 0C D7 B3 E9 16 76 56 FA 65 B0 B3 8D 04 7E F......vV.e....~
58 DA E0 0C 9E 3D 6B 74 73 4A C5 E5 5D 80 2A A8 X....=ktsJ..].*.
0A 07 00 71 8F C2 9D 45 14 C8 0A 28 A2 80 3C 54 ...q...E...(...
02 A3 1D 86 41 FE B5 D2 CA E2 28 8B F2 4F 41 9F ....A.....(..OA.
7C 8F F0 AE 6E E6 0D B6 F0 CC F9 F3 1C 02 73 EE |...n.........s.
48 FE 95 C5 89 7D 11 A4 34 45 8D 22 4C 4C 06 71 H....}..4E."LL.q
93 8C 93 5D A5 BB 65 07 39 AF 3C B6 90 A4 D1 10 ...]..e.9.<.....
3A 1C FF 00 2A EF 2C 9B 75 AA BE 7A 8E 39 FA D7 :...*.,.u..z.9..
04 D5 F5 3A ...:
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:37.209874 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36
192.168.0.102:1068 -> 66.218.79.171:80 TCP TTL:128 TOS:0x0 ID:582 IpLen:20 DgmLen:40 DF
***A**** Seq: 0x8F7AF2C4 Ack: 0x3AA82C8A Win: 0xFFFF TcpLen: 20
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:37.214667 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x5EA
66.218.79.171:80 -> 192.168.0.102:1068 TCP TTL:49 TOS:0x0 ID:41919 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x3AA82C8A Ack: 0x8F7AF2C4 Win: 0xFFFF TcpLen: 20
29 BB 9A 88 D8 E5 8E 07 BF F2 A8 25 D5 21 84 9F )..........%.!..
9C 13 8C 60 1A C7 D4 B5 26 47 F2 A2 EA BC 1C 7B ...`....&G.....{
56 31 85 EE 4A 99 24 20 0E A3 35 8A 85 D9 AB 97 V1..J.$ ..5.....
43 A0 9B C4 96 91 B6 0B 8F C0 F3 4B 0E BD 6F 31 C..........K..o1
1B 5C 0C FA 9E B5 CE 4B 61 6A 10 36 FC B0 23 82 .\.....Kaj.6..#.
73 55 52 34 56 C0 62 0F B1 AB E4 44 A9 33 BD 8E sUR4V.b....D.3..
73 28 04 12 45 47 79 72 60 8B 39 19 E9 59 9A 14 s(..EGyr`.9..Y..
CF FB C4 62 48 1D 33 F4 A9 35 96 20 0C 1C 8E BF ...bH.3..5. ....
8E 6A 1D 93 34 6F 43 0B 52 D5 AE AE 24 31 C4 C4 .j..4oC.R...$1..
01 C7 AD 55 B6 D3 2E 2E 24 DC F3 E3 24 9C 13 CF ...U....$...$...
E1 4B 2A BA AA B2 A9 C9 19 E9 EF 8A 40 DA 8A 10 .K*.........@...
20 03 9E F8 AD D5 AC 61 AB 2D 9D 35 A2 00 A5 C9 ......a.-.5....
24 7A FF 00 4A B5 65 3D C2 49 B2 51 90 73 82 2A $z..J.e=.I.Q.s.*
9C 51 6A 0E 14 B8 01 F2 49 AD 38 03 30 1B C6 18 .Qj.....I.8.0...
0E B8 EB 49 BB 0E D7 31 F5 C4 2B 7F 8C 60 30 27 ...I...1..+..`0'
3F 88 AA 11 DB 66 23 26 48 00 F4 CF 5F F3 8A DA ?....f#&H..._...
D7 A1 66 92 09 31 C1 C8 27 D3 26 B3 6E 07 D9 90 ..f..1..'.&.n...
C5 8C 82 79 FC 29 C7 52 24 88 25 95 DD 55 79 20 ...y.).R$.%..Uy
02 00 FC 68 86 26 EE 3B E6 A1 49 59 46 04 64 F0 ...h.&.;..IYF.d.
79 A9 12 EA 65 3C 42 0F D4 FE B5 A7 23 EC 65 72 y...e..
01 18 F5 1E BD 29 0F 1C 74 A4 C7 A0 F7 A5 60 4B .....)..t.....`K
52 2D 59 59 8D B0 53 80 72 33 E8 72 31 56 B4 76 R-YY..S.r3.r1V.v
16 C1 ED 89 E1 0E 07 B8 03 AF EB 56 2D 21 8E EF ...........V-!..
6C 32 E3 20 92 3D BB E6 B3 EE 4F D8 F5 F3 1E 4E l2. .=....O....N
D2 4F F4 AF 2B 11 0B 4C ED 83 4D 26 74 F1 02 C0 .O..+..L..M&t...
64 F0 6A 70 A3 39 E9 8E F5 46 DE 42 D1 92 4E 00 d.jp.9...F.B..N.
1F A9 A5 6B A2 01 E7 39 F7 AE 39 2D 4E 85 62 D3 ...k...9..9-N.b.
CC A1 08 1F 7A A9 F9 7B 99 99 BA FA FF 00 4A 80 ....z..{......J.
DC 95 F9 8F 40 3A 7B D3 60 96 49 50 3B 9C 03 C8 ....@:{.`.IP;...
A4 32 C2 F0 09 27 A0 E0 66 91 C0 6B 42 49 00 E7 .2...'..f..kBI..
A0 AC DB 8D 41 E1 72 8C 00 5C F5 3D EA 07 D4 C0 ....A.r..\.=....
50 03 71 F5 A6 A2 D9 2E 56 43 F0 80 B6 E3 D0 E4 P.q.....VC......
7A D6 8C 33 AA A2 BF 3C 8C F3 5C CB 5F 09 25 C2 z..3...<..\._.%.
B1 3C 8C D6 9C 33 6E 45 04 F0 05 68 E3 64 42 91 .<...3nE...h.dB.
B6 26 04 64 37 1D FF 00 1A AF 71 2A E3 03 AE 3A .&.d7.....q*...:
F7 AA 0B 31 89 C2 92 4A 9E 94 92 39 C8 E3 27 1C ...1...J...9..'.
54 A4 96 C0 E4 57 BE 73 E5 36 40 C1 A8 F4 49 53 T....W.s.6@...IS
FB 33 0D CE 31 8F C4 1A 6D EB 11 03 0E 39 15 5B .3..1...m....9.[
49 E2 CD 46 46 30 38 FA 8A E9 A5 16 DA 31 9B B1 I..FF08......1..
A8 49 67 C9 E0 92 68 3D 71 92 0F F4 A6 82 41 CF .Ig...h=q.....A.
3C E7 1E F4 00 73 EB CD 7A D1 56 56 39 85 E9 D4 <....s..z.VV9...
9E B4 83 AE 41 A4 3F D6 93 FC 69 E8 1A 12 0E 30 ....A.?...i....0
4E 33 FD 28 00 1E 49 C7 F2 A6 92 72 28 DC 78 E7 N3.(..I....r(.x.
A5 31 58 70 FD 69 A7 F4 A4 0C 7A 67 AD 04 9E 3B .1Xp.i....zg...;
D1 A0 24 3D 67 6B 76 DE 9D 47 5F A7 AD 55 D7 2E ..$=gkv..G_..U..
E0 B9 9E D2 78 48 DE 78 70 0F 39 24 75 F6 A7 CC ....xH.xp.9$u...
C4 46 48 C1 E0 8C 7D 41 1F D6 B9 C6 86 48 DC 33 .FH...}A.....H.3
82 18 91 9E 78 07 23 FC 2B 8B 15 1B AD 0D A0 ED ....x.#.+.......
A1 DA DB 4A 7C 90 72 79 F5 A9 63 53 24 A5 4E 70 ...J|.ry..cS$.Np
A4 F7 E0 E0 56 5D 95 C8 68 14 11 D3 9C D5 AB 5B ....V]..h......[
AC CD 20 EC 01 03 EA 45 79 92 57 67 4A 95 D0 EB .. ....Ey.WgJ...
99 03 DD 2C 08 3E 45 E5 B1 EA 31 C5 5A 64 65 85 ...,.>E...1.Zde.
72 30 31 C0 AC D9 2E 16 D6 21 23 91 B9 89 25 BF r01......!#...%.
A5 57 1E 20 59 26 11 A0 2E E0 E0 0E C4 0A 95 16 .W. Y&..........
C6 E7 64 25 C2 96 9D 8B 8C E0 13 8E DC D6 5B DB ..d%..........[.
3B 48 48 24 02 49 E0 FF 00 2A D9 8B 4E D4 EF E4 ;HH$.I...*..N...
77 8A DC EE 93 2E 32 78 00 0A 74 7A 16 AC 60 0E w.....2x..tz..`.
53 83 8E 4D 68 B4 21 B4 FA 98 F1 5B AC 72 29 6C S..Mh.!....[.r)l
F2 39 1E BE F5 AC B2 C0 02 67 83 8C 75 AD 05 F0 .9.......g..u...
9D EB 3C 66 E6 5C 06 52 78 03 8F 41 9A C8 D5 74 .. 0:40:5:58:67:7D type:0x800 len:0x36
192.168.0.102:1068 -> 66.218.79.171:80 TCP TTL:128 TOS:0x0 ID:583 IpLen:20 DgmLen:40 DF
***A**** Seq: 0x8F7AF2C4 Ack: 0x3AA8323E Win: 0xFFFF TcpLen: 20
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:37.231180 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x3C
66.218.79.180:80 -> 192.168.0.102:1070 TCP TTL:49 TOS:0x0 ID:27158 IpLen:20 DgmLen:40 DF
***A***F Seq: 0x3E2671BC Ack: 0x382DF5C5 Win: 0xFFFF TcpLen: 20
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:37.231300 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36
192.168.0.102:1070 -> 66.218.79.180:80 TCP TTL:128 TOS:0x0 ID:592 IpLen:20 DgmLen:40 DF
***A**** Seq: 0x382DF5C5 Ack: 0x3E266D3C Win: 0xFFFF TcpLen: 20
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:37.232376 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x4B6
66.218.79.180:80 -> 192.168.0.102:1070 TCP TTL:49 TOS:0x0 ID:27157 IpLen:20 DgmLen:1192 DF
***AP*** Seq: 0x3E266D3C Ack: 0x382DF5C5 Win: 0xFFFF TcpLen: 20
48 54 54 50 2F 31 2E 31 20 32 30 30 20 4F 4B 0D HTTP/1.1 200 OK.
0A 44 61 74 65 3A 20 54 68 75 2C 20 30 32 20 46 .Date: Thu, 02 F
65 62 20 32 30 30 36 20 31 38 3A 35 35 3A 33 38 eb 2006 18:55:38
20 47 4D 54 0D 0A 50 33 50 3A 20 70 6F 6C 69 63 GMT..P3P: polic
79 72 65 66 3D 22 68 74 74 70 3A 2F 2F 70 33 70 yref="http://p3p
2E 79 61 68 6F 6F 2E 63 6F 6D 2F 77 33 63 2F 70 .yahoo.com/w3c/p
33 70 2E 78 6D 6C 22 2C 20 43 50 3D 22 43 41 4F 3p.xml", CP="CAO
20 44 53 50 20 43 4F 52 20 43 55 52 20 41 44 4D DSP COR CUR ADM
20 44 45 56 20 54 41 49 20 50 53 41 20 50 53 44 DEV TAI PSA PSD
20 49 56 41 69 20 49 56 44 69 20 43 4F 4E 69 20 IVAi IVDi CONi
54 45 4C 6F 20 4F 54 50 69 20 4F 55 52 20 44 45 TELo OTPi OUR DE
4C 69 20 53 41 4D 69 20 4F 54 52 69 20 55 4E 52 Li SAMi OTRi UNR
69 20 50 55 42 69 20 49 4E 44 20 50 48 59 20 4F i PUBi IND PHY O
4E 4C 20 55 4E 49 20 50 55 52 20 46 49 4E 20 43 NL UNI PUR FIN C
4F 4D 20 4E 41 56 20 49 4E 54 20 44 45 4D 20 43 OM NAV INT DEM C
4E 54 20 53 54 41 20 50 4F 4C 20 48 45 41 20 50 NT STA POL HEA P
52 45 20 47 4F 56 22 0D 0A 43 61 63 68 65 2D 43 RE GOV"..Cache-C
6F 6E 74 72 6F 6C 3A 20 6D 61 78 2D 61 67 65 3D ontrol: max-age=
33 31 35 33 36 30 30 30 30 0D 0A 45 78 70 69 72 315360000..Expir
65 73 3A 20 53 75 6E 2C 20 33 31 20 4A 61 6E 20 es: Sun, 31 Jan
32 30 31 36 20 31 38 3A 35 35 3A 33 38 20 47 4D 2016 18:55:38 GM
54 0D 0A 4C 61 73 74 2D 4D 6F 64 69 66 69 65 64 T..Last-Modified
3A 20 54 75 65 2C 20 32 30 20 53 65 70 20 32 30 : Tue, 20 Sep 20
30 35 20 31 38 3A 33 30 3A 31 32 20 47 4D 54 0D 05 18:30:12 GMT.
0A 45 54 61 67 3A 20 22 31 37 35 39 61 2D 32 37 .ETag: "1759a-27
62 2D 34 33 33 30 35 35 33 34 22 0D 0A 41 63 63 b-43305534"..Acc
65 70 74 2D 52 61 6E 67 65 73 3A 20 62 79 74 65 ept-Ranges: byte
73 0D 0A 43 6F 6E 74 65 6E 74 2D 4C 65 6E 67 74 s..Content-Lengt
68 3A 20 36 33 35 0D 0A 43 6F 6E 6E 65 63 74 69 h: 635..Connecti
6F 6E 3A 20 63 6C 6F 73 65 0D 0A 43 6F 6E 74 65 on: close..Conte
6E 74 2D 54 79 70 65 3A 20 61 70 70 6C 69 63 61 nt-Type: applica
74 69 6F 6E 2F 78 2D 6A 61 76 61 73 63 72 69 70 tion/x-javascrip
74 0D 0A 0D 0A 76 61 72 20 79 63 73 64 6F 6E 65 t....var ycsdone
3B 0A 66 75 6E 63 74 69 6F 6E 20 67 65 6F 76 69 ;.function geovi
73 69 74 28 29 0A 7B 0A 20 20 76 61 72 20 7A 3B sit().{. var z;
0A 20 20 69 66 20 28 79 63 73 64 6F 6E 65 29 0A . if (ycsdone).
20 20 20 20 72 65 74 75 72 6E 3B 0A 20 20 7A 3D return;. z=
22 26 72 3D 22 2B 65 73 63 61 70 65 28 64 6F 63 "&r="+escape(doc
75 6D 65 6E 74 2E 72 65 66 65 72 72 65 72 29 3B ument.referrer);
0A 20 20 7A 3D 7A 2B 22 26 62 3D 22 2B 65 73 63 . z=z+"&b="+esc
61 70 65 28 6E 61 76 69 67 61 74 6F 72 2E 61 70 ape(navigator.ap
70 4E 61 6D 65 2B 22 20 22 2B 6E 61 76 69 67 61 pName+" "+naviga
74 6F 72 2E 61 70 70 56 65 72 73 69 6F 6E 29 3B tor.appVersion);
0A 20 20 77 3D 70 61 72 73 65 46 6C 6F 61 74 28 . w=parseFloat(
6E 61 76 69 67 61 74 6F 72 2E 61 70 70 56 65 72 navigator.appVer
73 69 6F 6E 29 3B 0A 20 20 69 66 20 28 77 20 3E sion);. if (w >
20 32 2E 30 29 20 7B 0A 20 20 20 20 7A 3D 7A 2B 2.0) {. z=z+
22 26 73 3D 22 2B 73 63 72 65 65 6E 2E 77 69 64 "&s="+screen.wid
74 68 2B 22 78 22 2B 73 63 72 65 65 6E 2E 68 65 th+"x"+screen.he
69 67 68 74 3B 0A 20 20 20 20 7A 3D 7A 2B 22 26 ight;. z=z+"&
6F 3D 22 2B 6E 61 76 69 67 61 74 6F 72 2E 70 6C o="+navigator.pl
61 74 66 6F 72 6D 3B 0A 20 20 20 20 76 3D 22 31 atform;. v="1
2E 32 22 3B 0A 20 20 20 20 69 66 20 28 6E 61 76 .2";. if (nav
69 67 61 74 6F 72 2E 61 70 70 4E 61 6D 65 20 21 igator.appName !
3D 20 22 4E 65 74 73 63 61 70 65 22 29 20 7B 0A = "Netscape") {.
20 20 20 20 20 20 7A 3D 7A 2B 22 26 63 3D 22 2B z=z+"&c="+
73 63 72 65 65 6E 2E 63 6F 6C 6F 72 44 65 70 74 screen.colorDept
68 3B 0A 20 20 20 20 7D 20 65 6C 73 65 20 7B 0A h;. } else {.
20 20 20 20 20 20 7A 3D 7A 2B 22 26 63 3D 22 2B z=z+"&c="+
73 63 72 65 65 6E 2E 70 69 78 65 6C 44 65 70 74 screen.pixelDept
68 0A 20 20 20 20 7D 0A 20 20 20 20 7A 3D 7A 2B h. }. z=z+
22 26 6A 3D 22 2B 6E 61 76 69 67 61 74 6F 72 2E "&j="+navigator.
6A 61 76 61 45 6E 61 62 6C 65 64 28 29 3B 0A 20 javaEnabled();.
20 7D 20 65 6C 73 65 20 7B 0A 20 20 20 20 76 3D } else {. v=
31 2E 30 3B 0A 20 20 7D 0A 20 20 7A 3D 7A 2B 22 1.0;. }. z=z+"
26 76 3D 22 2B 76 3B 0A 20 20 64 6F 63 75 6D 65 &v="+v;. docume
6E 74 2E 77 72 69 74 65 6C 6E 28 22 3C 49 4D 47 nt.writeln("");
0A 20 20 79 63 73 64 6F 6E 65 3D 31 3B 0A 7D 0A . ycsdone=1;.}.
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:37.232466 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36
192.168.0.102:1070 -> 66.218.79.180:80 TCP TTL:128 TOS:0x0 ID:593 IpLen:20 DgmLen:40 DF
***A**** Seq: 0x382DF5C5 Ack: 0x3E2671BD Win: 0xFB7F TcpLen: 20
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:37.247978 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36
192.168.0.102:1070 -> 66.218.79.180:80 TCP TTL:128 TOS:0x0 ID:618 IpLen:20 DgmLen:40 DF
***A***F Seq: 0x382DF5C5 Ack: 0x3E2671BD Win: 0xFB7F TcpLen: 20
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
[Client opens connection on local port 1072]
02/02-13:55:37.251832 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x3E
192.168.0.102:1072 -> 66.218.77.64:80 TCP TTL:128 TOS:0x0 ID:625 IpLen:20 DgmLen:48 DF
******S* Seq: 0x9EB403E2 Ack: 0x0 Win: 0xFFFF TcpLen: 28
TCP Options (4) => MSS: 1460 NOP NOP SackOK
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:37.257940 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x3E
192.168.0.102:1074 -> 66.218.77.72:80 TCP TTL:128 TOS:0x0 ID:632 IpLen:20 DgmLen:48 DF
******S* Seq: 0x52A71B10 Ack: 0x0 Win: 0xFFFF TcpLen: 28
TCP Options (4) => MSS: 1460 NOP NOP SackOK
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:37.308786 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x5EA
66.218.79.171:80 -> 192.168.0.102:1068 TCP TTL:49 TOS:0x0 ID:42368 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x3AA8323E Ack: 0x8F7AF2C4 Win: 0xFFFF TcpLen: 20
8B 76 4C A0 80 B1 AE 09 24 9F E9 4F 74 2B A4 58 .vL.....$..Ot+.X
77 88 AA 8C F2 0F AF 6A 56 CF 90 84 90 72 39 3F w......jV....r9?
D2 B9 D8 BE D3 0E C0 E4 E4 F2 01 ED CD 6C 09 49 .............l.I
B3 53 9E 72 06 49 FC C7 D6 95 AC 17 4C 8A E6 51 .S.r.I......L..Q
E5 90 D9 3D 78 F4 AA DA 4B 15 8F 69 04 E3 03 19 ...=x...K..i....
F4 15 0D DC A3 70 C6 79 39 EB 52 E8 E0 91 21 EB .....p.y9.R...!.
82 47 E8 2B 7A 3B A3 19 EA 6C 83 83 F4 E2 97 A1 .G.+z;...l......
A6 F4 C7 BF 34 16 20 E6 BD 55 AA 30 69 0B D7 90 ....4. ..U.0i...
33 CF 4F 4A 43 C1 03 9A 4E DE F4 64 82 06 0F 34 3.OJC...N..d...4
ED 62 92 14 F0 47 BD 18 E3 AF 7A 33 C7 4C 62 81 .b...G....z3.Lb.
F9 E2 9D C0 5C 63 F3 A4 38 C0 CE 41 CD 2E 78 EF ....\c..8..A..x.
48 7D 85 21 36 26 DC E0 9E 84 E4 E6 A8 EA 11 6E H}.!6&.........n
85 48 1C 82 00 FA 67 35 78 9C 7B 66 98 EA 1B 00 .H....g5x.{f....
E7 07 9E 45 67 38 B6 87 16 EE 51 B7 7D B1 05 24 ...Eg8....Q.}..$
8C 1E 7F 2A B3 67 21 5B 90 4F 42 7A FB 62 A1 B9 ...*.g![.OBz.b..
4D CF 95 07 04 F6 1F 4A 84 C8 63 60 BC 82 07 F5 M......J..c`....
AF 2E A4 5A 6D 1D 31 7A 13 DE AB CA 76 8E 84 8C ...Zm.1z....v...
7E 7F FD 7A 2D B4 90 16 29 D7 EF 63 9E 38 FF 00 ~..z-...)..c.8..
3C 54 6B 71 E6 85 50 39 27 07 E9 9A DD B5 60 A8 .....H.ry..X.
FC F3 28 18 18 E9 C7 BD 6F 59 93 E5 F2 BC 63 FA ..(.....oY....c.
56 F4 95 E4 65 27 A1 70 75 04 76 FE B4 87 39 C6 V...e'.pu.v...9.
3D BA 51 BB 18 C8 C8 CD 38 9C 63 3C FB 57 AA B6 =.Q.....8.c<.W..
32 43 47 03 27 34 BC F4 E7 FA 52 13 4B B8 60 0F 2CG.'4....R.K.`.
6A 4C AB 0B 92 47 43 D7 1D 28 03 1D BB 1A 39 00 jL...GC..(....9.
13 9A 38 E2 82 75 0C 73 9C 62 94 E3 23 23 3E A2 ..8..u.s.b..##>.
8E E0 02 3F FA D4 64 70 46 28 E8 31 0E 31 9F 4A ...?..dpF(.1.1.J
6B 74 E8 39 FF 00 0A 70 C1 18 39 EB 9F 7A 46 E4 kt.9...p..9..zF.
75 A5 A5 81 3D 48 A7 61 E5 F0 70 72 7F 9D 63 CE u...=H.a..pr..c.
70 C3 2D C1 F7 FA 56 B4 D1 82 AA 06 73 8E 6B 26 p.-...V.....s.k&
68 4A B7 39 3C FA F4 AF 3A BA F7 8D 93 D0 97 4F hJ.9<...:......O
60 24 04 F1 CF 06 B5 83 39 75 20 10 00 C1 3E A6 `$......9u ...>.
B1 61 70 BE 59 27 EE F3 81 5B F6 CA F7 5E 4A 20 .ap.Y'...[...^J
00 10 58 93 D7 8A E6 6B 43 58 BB 8A CF E6 82 D9 ..X....kCX......
24 B3 7A D5 55 D8 B3 C9 2C 84 60 71 F8 1E D5 A2 $.z.U...,.`q....
B0 92 CE A1 4E C5 25 57 8E 71 D6 AB DF 59 F9 30 ....N.%W.q...Y.0
EF 20 E5 8E 71 ED 9F FE B5 46 C5 BD 81 82 85 57 . ..q....F.....W
52 30 4F 3E D9 A6 BE E2 C0 10 70 38 FC 2A 1B 42 R0O>......p8.*.B
D3 22 E0 12 08 04 03 5A B1 5B 01 6D 23 91 F3 0E .".....Z.[.m#...
7A 7D 69 D9 B2 5B EE 73 D7 40 E0 F3 C0 3D 71 58 z}i..[.s.@...=qX
F3 00 AD D7 1C D6 E6 AA 44 2C 40 C1 CF 5C 56 34 ........D,@..\V4
70 B4 8C 32 30 BC 62 B4 4A C8 CA 4E E4 B6 70 97 p..20.b.J..N..p.
2A D8 23 3C 0F CE B6 E1 4D AA 01 1C 63 A7 E0 6A *.#<....M...c..j
8D A4 65 58 29 53 82 72 6B 4C 60 01 ED 5D 74 23 ..eX)S.rkL`..]t#
AD CC A4 C4 C9 2D C7 61 C5 28 1D 3D 7A D1 D0 8F .....-.a.(.=z...
71 FE 45 00 9E A4 72 6B BF 62 10 99 39 23 27 FC q.E...rk.b..9#'.
F7 A3 27 20 60 FD 69 4F 07 AF E9 FA D1 EE 4D 26 ..' `.iO......M&
50 A4 7D 45 18 3F 86 29 47 04 74 C0 34 71 91 41 P.}E.?.)G.t.4q.A
3A 88 41 00 67 22 8E 3B E7 EB 4A 7B 0E D9 A8 A5 :.A.g".;..J{....
96 38 54 19 1F 19 E0 00 32 49 C8 C0 03 BD 26 EC .8T.....2I....&.
34 9B 24 19 C8 CE 73 44 51 4F 77 7B 15 95 A4 46 4.$...sDQOw{...F
6B A9 8E 11 01 C6 07 72 4F 60 3A 92 6B AA D0 FC k......rO`:.k...
10 D7 F6 F0 5C EA EF 24 3E 6A EF 5B 58 F2 30 3F ....\..$>j.[X.0?
DB 3C 1C FB 57 5D A3 78 57 49 D0 65 92 6B 2B 7C .<..W].xWI.e.k+|
4D 20 C1 91 CE E6 03 D0 1F 4A E7 A9 88 4B 44 52 M .......J...KDR
8A EA 79 CC 9A 64 10 4F 3C 02 47 9A 68 1C C4 EF ..y..d.O<.G.h...
8C 26 40 04 E0 77 1C 8A E7 F5 0B 43 1B 31 04 F5 .&@..w.....C.1..
ED EB 9A ED 2E 2D DA DB 51 BE B7 64 24 AC A5 81 .....-..Q..d$...
3C E4 10 3A 9A CB BA B6 57 0C 08 CF A5 79 95 2B <..:....W....y.+
39 4B 53 B1 41 59 34 71 61 0E F1 C9 23 3C D6 BE 9KS.AY4qa...#<..
99 A8 98 75 18 8E 72 81 4A 80 7D 0E 29 B3 D9 15 ...u..r.J.}.)...
62 C0 1E BD 0D 40 96 C1 9C 10 08 60 73 92 7F CF b....@.....`s...
A5 52 77 46 6E 2D 3B A3 B4 B1 68 E6 86 E5 B2 00 .RwFn-;...h.....
24 1E 3E 9F E3 55 2F A2 77 D3 C3 15 27 03 04 E7 $.>..U/.w...'...
DE B3 2C 6F E4 B3 42 AD 92 A4 60 9E BD 78 FF 00 ..,o..B...`..x..
F5 55 E9 6F CA 58 2D B9 C9 C0 18 0D D7 8F 5F 7A .U.o.X-......._z
96 87 A9 97 68 EF 13 01 1E 39 20 72 33 DA B4 EE ....h....9 r3...
25 58 6D 55 59 F0 1D 79 E7 BE 7F FA D5 92 65 00 %XmUY..y......e.
80 8A 70 30 08 FA D5 6B 89 65 B9 2A 8A 00 51 D0 ..p0...k.e.*..Q.
93 CE 2A D2 D0 4D BD 86 5F B8 9D D4 70 70 38 1E ..*..M.._...pp8.
BC F5 A4 B5 B6 3B 01 23 38 14 E8 ED 70 72 79 27 .....;.#8...pry'
9E 7B 8A BD 14 41 40 03 91 DF F9 D0 DD 86 92 4B .{...A@........K
53 4F C3 FA 52 6B 73 C9 68 25 F2 66 89 72 84 0C SO..Rks.h%.f.r..
E7 80 7A 53 AE B4 0D 56 CA 59 16 5B 56 75 53 80 ..zS...V.Y.[VuS.
EB D0 8F 5C 7A D6 B7 C3 EB 37 7B FD 47 50 C7 EE ...\z....7{.GP..
D4 08 90 9E B9 D8 0F 1E D5 DD C8 C5 ED CA 93 92 ................
79 E7 A7 7A D6 9D 49 45 5D 18 C9 2B 9E 3C 51 80 y..z..IE]..+. 0:15:F2:8:8D:AB type:0x800 len:0x385
66.218.79.171:80 -> 192.168.0.102:1068 TCP TTL:49 TOS:0x0 ID:42369 IpLen:20 DgmLen:887 DF
***AP**F Seq: 0x3AA837F2 Ack: 0x8F7AF2C4 Win: 0xFFFF TcpLen: 20
28 3F 78 0C 8F F1 AA C3 04 E1 48 3D B0 2B 65 35 (?x.......H=.+e5
2D 99 2D 31 57 A0 CD 32 47 48 C6 E7 60 A3 3D 49 -.-1W..2GH..`.=I
C6 7D 07 BE 4D 5A D2 F4 EB ED 72 7F 2B 4A 84 48 .}..MZ....r.+J.H
8B 8D F3 C9 91 12 67 07 19 C7 27 07 FC 6B D0 B4 ......g...'..k..
2F 04 69 FA 53 47 73 73 FE 9B 7C A3 FD 6C A3 21 /.i.SGss..|..l.!
49 EB B5 7B 74 A8 A9 5E 31 2C E2 34 5F 0D 6A FA I..{t..^1,.4_.j.
F1 49 62 8F EC 76 2C 72 6E 26 04 33 2E 3F 85 7F .Ib..v,rn&.3.?..
91 FC 6B D0 34 6F 07 69 1A 28 57 8E 01 3D C8 EB ..k.4o.i.(W..=..
3C DF 33 67 DB B0 FC 2B 7C 74 E3 A5 23 02 7A 1C <.3g...+|t..#.z.
7A D7 14 EA CA 60 44 CA 05 D2 36 0E 4A 30 CF A7 z....`D...6.J0..
22 A6 A4 38 1C 9A 5A C8 0E 57 C4 FA 7B 24 D1 EA "..8..Z..W..{$..
31 82 50 0D 92 28 E3 A9 1F 31 FA 62 B9 49 B0 C3 1.P..(...1.b.I..
72 90 41 19 07 B1 CF 4A F5 37 45 92 36 47 50 CA r.A....J.7E.6GP.
C3 04 1E F5 E7 BA EE 87 73 A3 CD E6 DB C6 D3 D9 ........s.......
1E 70 A0 96 4E 98 18 FC CD 65 38 5D DD 1D 14 EA .p..N....e8]....
69 CA CE 7A 48 F2 70 40 DD 8E C2 AA B5 B0 DD D3 i..zH.p@........
8F A5 5E 57 8A 64 05 1C 90 06 7A F3 F8 D2 94 04 ..^W.d....z.....
E4 82 0F 6A 85 75 B9 BB D8 A8 B0 2E D1 9C 71 E9 ...j.u........q.
4C 30 AE 4E 41 E7 B9 AB 5B 40 20 1E D5 19 C6 3D L0.NA...[@ ....=
A8 4D 93 64 53 30 A2 8C 63 AF 26 9B E5 01 C8 E9 .M.dS0..c.&.....
56 59 41 39 00 77 E6 A2 66 50 4E E2 00 E7 92 70 VYA9.w..fPN....p
2B 44 DD 89 62 2A 61 72 7F 3A 6A AC F7 37 B0 59 +D..b*ar.:j..7.Y
5A 46 64 B9 95 80 00 02 70 01 19 27 1D 00 07 39 ZFd.....p..'...9
AB 56 96 97 FA 9C 82 3D 3A D2 49 72 46 64 60 55 .V.....=:.IrFd`U
14 7A E7 BF E1 FD 6B BE F0 E7 85 A0 D0 A2 12 BB .z....k.........
F9 B7 D2 A9 F3 AE 58 72 49 18 C0 F4 1C 55 46 2D ......XrI....UF-
BD 48 9C 92 5A 1A 3A 16 95 1E 8B A3 DB E9 D0 9D .H..Z.:.........
E6 21 87 7F EF 37 20 9F D6 AF 49 19 D8 47 00 91 .!...7 ...I..G..
80 07 EA 6A 54 5D A7 E5 E8 38 E2 94 AE E0 58 8C ...jT]...8....X.
11 C0 F7 F7 AD 9E 86 3B B2 AD A8 02 25 53 9E 00 .......;....%S..
1F 85 3C A9 12 63 A6 78 04 F1 4E 86 31 8C F3 91 ..<..c.x..N.1...
ED 52 32 E4 03 CE 40 C7 4A 8B 15 64 88 5A 11 82 .R2...@.J..d.Z..
AE 15 D7 A9 0E 32 2B 2B 50 F0 96 9F A8 E4 88 D6 .....2++P.......
09 0F 46 41 D0 FA FE 95 B8 14 10 3E 98 15 32 AE ..FA.......>..2.
D5 C5 09 B5 B0 A5 61 96 D6 D0 59 DB A4 16 D0 A4 ......a...Y.....
50 A0 C2 A2 2E 00 A9 68 A2 91 01 45 23 12 14 95 P......h...E#...
5D C7 D3 38 A5 A0 02 8A 28 A0 02 82 32 30 68 A2 ]..8....(...20h.
80 30 35 3F 09 E9 5A 93 99 1A 23 6F 38 39 F3 62 .05?..Z...#o89.b
3B 4F F9 E2 B0 9F C0 F7 D1 71 6D A8 47 2A 76 32 ;O.......qm.G*v2
AF 35 DE 53 4A 00 72 38 C5 26 93 2D 54 92 EA 79 .5.SJ.r8.&.-T..y
AC FE 11 F1 08 C8 48 6D 24 1D 8F 9A 45 56 3E 11 ......Hm$...EV>.
F1 1C A4 1F 22 D9 3D 49 90 D7 A8 34 41 C6 D2 48 ....".=I...4A..H
15 0C 96 EE 7E 55 76 03 1D 73 42 82 2B DA CB B9 ....~Uv..sB.+...
E7 B0 78 0A FE 42 A6 FF 00 53 8A 1E E5 21 1C 9F ..x..B...S...!..
C4 D6 DD 9F 85 B4 4D 3D 94 3C 4D 79 38 3D 65 39 ......M=. 0:40:5:58:67:7D type:0x800 len:0x36
192.168.0.102:1068 -> 66.218.79.171:80 TCP TTL:128 TOS:0x0 ID:633 IpLen:20 DgmLen:40 DF
***A**** Seq: 0x8F7AF2C4 Ack: 0x3AA83B42 Win: 0xFFFF TcpLen: 20
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:37.311344 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36
192.168.0.102:1068 -> 66.218.79.171:80 TCP TTL:128 TOS:0x0 ID:642 IpLen:20 DgmLen:40 DF
***A***F Seq: 0x8F7AF2C4 Ack: 0x3AA83B42 Win: 0xFFFF TcpLen: 20
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:37.348372 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x3C
66.218.77.64:80 -> 192.168.0.102:1072 TCP TTL:49 TOS:0x0 ID:33913 IpLen:20 DgmLen:44 DF
***A**S* Seq: 0x6AA954C9 Ack: 0x9EB403E3 Win: 0xFFFF TcpLen: 24
TCP Options (1) => MSS: 1460
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:37.348526 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36
192.168.0.102:1072 -> 66.218.77.64:80 TCP TTL:128 TOS:0x0 ID:645 IpLen:20 DgmLen:40 DF
***A**** Seq: 0x9EB403E3 Ack: 0x6AA954CA Win: 0xFFFF TcpLen: 20
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:37.349126 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x3C
66.218.79.180:80 -> 192.168.0.102:1070 TCP TTL:49 TOS:0x0 ID:27920 IpLen:20 DgmLen:40 DF
***A**** Seq: 0x3E2671BD Ack: 0x382DF5C6 Win: 0xFFFF TcpLen: 20
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
[Request web bug]
02/02-13:55:37.349725 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x1FD
192.168.0.102:1072 -> 66.218.77.64:80 TCP TTL:128 TOS:0x0 ID:648 IpLen:20 DgmLen:495 DF
***AP*** Seq: 0x9EB403E3 Ack: 0x6AA954CA Win: 0xFFFF TcpLen: 20
47 45 54 20 2F 76 69 73 69 74 2E 67 69 66 3F 26 GET /visit.gif?&
72 3D 26 62 3D 4E 65 74 73 63 61 70 65 25 32 30 r=&b=Netscape%20
35 2E 30 25 32 30 25 32 38 57 69 6E 64 6F 77 73 5.0%20%28Windows
25 33 42 25 32 30 65 6E 2D 55 53 25 32 39 26 73 %3B%20en-US%29&s
3D 31 30 32 34 78 37 36 38 26 6F 3D 57 69 6E 33 =1024x768&o=Win3
32 26 63 3D 33 32 26 6A 3D 74 72 75 65 26 76 3D 2&c=32&j=true&v=
31 2E 32 20 48 54 54 50 2F 31 2E 31 0D 0A 48 6F 1.2 HTTP/1.1..Ho
73 74 3A 20 76 69 73 69 74 2E 67 65 6F 63 69 74 st: visit.geocit
69 65 73 2E 63 6F 6D 0D 0A 55 73 65 72 2D 41 67 ies.com..User-Ag
65 6E 74 3A 20 4D 6F 7A 69 6C 6C 61 2F 35 2E 30 ent: Mozilla/5.0
20 28 57 69 6E 64 6F 77 73 3B 20 55 3B 20 57 69 (Windows; U; Wi
6E 64 6F 77 73 20 4E 54 20 35 2E 31 3B 20 65 6E ndows NT 5.1; en
2D 55 53 3B 20 72 76 3A 31 2E 38 29 20 47 65 63 -US; rv:1.8) Gec
6B 6F 2F 32 30 30 35 31 31 31 31 20 46 69 72 65 ko/20051111 Fire
66 6F 78 2F 31 2E 35 0D 0A 41 63 63 65 70 74 3A fox/1.5..Accept:
20 69 6D 61 67 65 2F 70 6E 67 2C 2A 2F 2A 3B 71 image/png,*/*;q
3D 30 2E 35 0D 0A 41 63 63 65 70 74 2D 4C 61 6E =0.5..Accept-Lan
67 75 61 67 65 3A 20 65 6E 2D 75 73 2C 65 6E 3B guage: en-us,en;
71 3D 30 2E 35 0D 0A 2D 2D 2D 2D 2D 2D 2D 2D 2D q=0.5..---------
2D 2D 2D 2D 2D 2D 3A 20 2D 2D 2D 2D 2D 2D 2D 2D ------: --------
2D 2D 2D 2D 0D 0A 41 63 63 65 70 74 2D 43 68 61 ----..Accept-Cha
72 73 65 74 3A 20 49 53 4F 2D 38 38 35 39 2D 31 rset: ISO-8859-1
2C 75 74 66 2D 38 3B 71 3D 30 2E 37 2C 2A 3B 71 ,utf-8;q=0.7,*;q
3D 30 2E 37 0D 0A 4B 65 65 70 2D 41 6C 69 76 65 =0.7..Keep-Alive
3A 20 33 30 30 0D 0A 43 6F 6E 6E 65 63 74 69 6F : 300..Connectio
6E 3A 20 6B 65 65 70 2D 61 6C 69 76 65 0D 0A 2D n: keep-alive..-
2D 2D 2D 2D 2D 2D 3A 20 2D 2D 2D 2D 3A 2D 2D 2D ------: ----:---
2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ----------------
2D 2D 2D 0D 0A 0D 0A ---....
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
[Client opens connection on local port 1074]
02/02-13:55:37.355017 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x3C
66.218.77.72:80 -> 192.168.0.102:1074 TCP TTL:49 TOS:0x0 ID:63736 IpLen:20 DgmLen:44
***A**S* Seq: 0x7C8875D Ack: 0x52A71B11 Win: 0xFFFF TcpLen: 24
TCP Options (1) => MSS: 1460
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:37.355167 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36
192.168.0.102:1074 -> 66.218.77.72:80 TCP TTL:128 TOS:0x0 ID:649 IpLen:20 DgmLen:40 DF
***A**** Seq: 0x52A71B11 Ack: 0x7C8875E Win: 0xFFFF TcpLen: 20
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:37.356915 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x1B5
192.168.0.102:1074 -> 66.218.77.72:80 TCP TTL:128 TOS:0x0 ID:652 IpLen:20 DgmLen:423 DF
***AP*** Seq: 0x52A71B11 Ack: 0x7C8875E Win: 0xFFFF TcpLen: 20
47 45 54 20 2F 73 65 72 76 3F 73 3D 37 36 30 30 GET /serv?s=7600
31 34 30 34 26 74 3D 31 31 33 38 39 30 36 35 33 1404&t=113890653
37 20 48 54 54 50 2F 31 2E 31 0D 0A 48 6F 73 74 7 HTTP/1.1..Host
3A 20 67 65 6F 2E 79 61 68 6F 6F 2E 63 6F 6D 0D : geo.yahoo.com.
0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 4D 6F 7A .User-Agent: Moz
69 6C 6C 61 2F 35 2E 30 20 28 57 69 6E 64 6F 77 illa/5.0 (Window
73 3B 20 55 3B 20 57 69 6E 64 6F 77 73 20 4E 54 s; U; Windows NT
20 35 2E 31 3B 20 65 6E 2D 55 53 3B 20 72 76 3A 5.1; en-US; rv:
31 2E 38 29 20 47 65 63 6B 6F 2F 32 30 30 35 31 1.8) Gecko/20051
31 31 31 20 46 69 72 65 66 6F 78 2F 31 2E 35 0D 111 Firefox/1.5.
0A 41 63 63 65 70 74 3A 20 69 6D 61 67 65 2F 70 .Accept: image/p
6E 67 2C 2A 2F 2A 3B 71 3D 30 2E 35 0D 0A 41 63 ng,*/*;q=0.5..Ac
63 65 70 74 2D 4C 61 6E 67 75 61 67 65 3A 20 65 cept-Language: e
6E 2D 75 73 2C 65 6E 3B 71 3D 30 2E 35 0D 0A 2D n-us,en;q=0.5..-
2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 3A 20 --------------:
2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 0D 0A 41 63 ------------..Ac
63 65 70 74 2D 43 68 61 72 73 65 74 3A 20 49 53 cept-Charset: IS
4F 2D 38 38 35 39 2D 31 2C 75 74 66 2D 38 3B 71 O-8859-1,utf-8;q
3D 30 2E 37 2C 2A 3B 71 3D 30 2E 37 0D 0A 4B 65 =0.7,*;q=0.7..Ke
65 70 2D 41 6C 69 76 65 3A 20 33 30 30 0D 0A 43 ep-Alive: 300..C
6F 6E 6E 65 63 74 69 6F 6E 3A 20 6B 65 65 70 2D onnection: keep-
61 6C 69 76 65 0D 0A 2D 2D 2D 2D 2D 2D 2D 3A 20 alive..-------:
2D 2D 2D 2D 3A 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ----:-----------
2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 0D 0A 0D 0A -----------....
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:37.411249 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x3C
66.218.79.171:80 -> 192.168.0.102:1068 TCP TTL:49 TOS:0x0 ID:43026 IpLen:20 DgmLen:40 DF
***A**** Seq: 0x3AA83B42 Ack: 0x8F7AF2C5 Win: 0xFFFF TcpLen: 20
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:37.457933 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x1B9
66.218.77.72:80 -> 192.168.0.102:1074 TCP TTL:49 TOS:0x0 ID:63822 IpLen:20 DgmLen:427 DF
***AP*** Seq: 0x7C8875E Ack: 0x52A71C90 Win: 0xFFFF TcpLen: 20
48 54 54 50 2F 31 2E 31 20 32 30 30 20 4F 4B 0D HTTP/1.1 200 OK.
0A 44 61 74 65 3A 20 54 68 75 2C 20 30 32 20 46 .Date: Thu, 02 F
65 62 20 32 30 30 36 20 31 38 3A 35 35 3A 33 38 eb 2006 18:55:38
20 47 4D 54 0D 0A 50 33 50 3A 20 70 6F 6C 69 63 GMT..P3P: polic
79 72 65 66 3D 22 68 74 74 70 3A 2F 2F 70 33 70 yref="http://p3p
2E 79 61 68 6F 6F 2E 63 6F 6D 2F 77 33 63 2F 70 .yahoo.com/w3c/p
33 70 2E 78 6D 6C 22 2C 20 43 50 3D 22 43 41 4F 3p.xml", CP="CAO
20 44 53 50 20 43 4F 52 20 43 55 52 20 41 44 4D DSP COR CUR ADM
20 44 45 56 20 54 41 49 20 50 53 41 20 50 53 44 DEV TAI PSA PSD
20 49 56 41 69 20 49 56 44 69 20 43 4F 4E 69 20 IVAi IVDi CONi
54 45 4C 6F 20 4F 54 50 69 20 4F 55 52 20 44 45 TELo OTPi OUR DE
4C 69 20 53 41 4D 69 20 4F 54 52 69 20 55 4E 52 Li SAMi OTRi UNR
69 20 50 55 42 69 20 49 4E 44 20 50 48 59 20 4F i PUBi IND PHY O
4E 4C 20 55 4E 49 20 50 55 52 20 46 49 4E 20 43 NL UNI PUR FIN C
4F 4D 20 4E 41 56 20 49 4E 54 20 44 45 4D 20 43 OM NAV INT DEM C
4E 54 20 53 54 41 20 50 4F 4C 20 48 45 41 20 50 NT STA POL HEA P
52 45 20 47 4F 56 22 0D 0A 43 61 63 68 65 2D 43 RE GOV"..Cache-C
6F 6E 74 72 6F 6C 3A 20 6E 6F 2D 63 61 63 68 65 ontrol: no-cache
0D 0A 43 6F 6E 6E 65 63 74 69 6F 6E 3A 20 63 6C ..Connection: cl
6F 73 65 0D 0A 54 72 61 6E 73 66 65 72 2D 45 6E ose..Transfer-En
63 6F 64 69 6E 67 3A 20 63 68 75 6E 6B 65 64 0D coding: chunked.
0A 43 6F 6E 74 65 6E 74 2D 54 79 70 65 3A 20 69 .Content-Type: i
6D 61 67 65 2F 67 69 66 0D 0A 0D 0A 37 20 20 20 mage/gif....7
20 20 20 0D 0A 47 49 46 38 39 61 01 0D 0A 30 0D ..GIF89a...0.
0A 0D 0A ...
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:37.458008 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x3C
66.218.77.72:80 -> 192.168.0.102:1074 TCP TTL:49 TOS:0x0 ID:63823 IpLen:20 DgmLen:40 DF
***A***F Seq: 0x7C888E1 Ack: 0x52A71C90 Win: 0xFFFF TcpLen: 20
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:37.458086 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36
192.168.0.102:1074 -> 66.218.77.72:80 TCP TTL:128 TOS:0x0 ID:653 IpLen:20 DgmLen:40 DF
***A**** Seq: 0x52A71C90 Ack: 0x7C888E2 Win: 0xFE7C TcpLen: 20
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:37.461681 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36
192.168.0.102:1074 -> 66.218.77.72:80 TCP TTL:128 TOS:0x0 ID:664 IpLen:20 DgmLen:40 DF
***A***F Seq: 0x52A71C90 Ack: 0x7C888E2 Win: 0xFE7C TcpLen: 20
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:37.546483 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x3C
66.218.77.64:80 -> 192.168.0.102:1072 TCP TTL:49 TOS:0x0 ID:34267 IpLen:20 DgmLen:40 DF
***A**** Seq: 0x6AA954CA Ack: 0x9EB405AA Win: 0xFEDD TcpLen: 20
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:37.558871 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x3C
66.218.77.72:80 -> 192.168.0.102:1074 TCP TTL:49 TOS:0x0 ID:63914 IpLen:20 DgmLen:40 DF
***A**** Seq: 0x7C888E2 Ack: 0x52A71C91 Win: 0xFFFF TcpLen: 20
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
[NetBIOS packet (unrelated to HTTP session)]
02/02-13:55:41.045922 0:15:F2:8:8D:AB -> FF:FF:FF:FF:FF:FF type:0x800 len:0xF8
192.168.0.102:138 -> 192.168.0.255:138 UDP TTL:128 TOS:0x0 ID:665 IpLen:20 DgmLen:234
Len: 206
11 0E 80 2A C0 A8 00 66 00 8A 00 C0 00 00 20 45 ...*...f...... E
4E 45 42 46 45 46 45 44 43 43 41 43 41 43 41 43 NEBFEFEDCCACACAC
41 43 41 43 41 43 41 43 41 43 41 43 41 41 41 00 ACACACACACACAAA.
20 41 42 41 43 46 50 46 50 45 4E 46 44 45 43 46 ABACFPFPENFDECF
43 45 50 46 48 46 44 45 46 46 50 46 50 41 43 41 CEPFHFDEFFPFPACA
42 00 FF 53 4D 42 25 00 00 00 00 00 00 00 00 00 B..SMB%.........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 11 00 00 26 00 00 00 00 00 00 00 00 00 E8 .....&..........
03 00 00 00 00 00 00 00 00 26 00 56 00 03 00 01 .........&.V....
00 01 00 02 00 37 00 5C 4D 41 49 4C 53 4C 4F 54 .....7.\MAILSLOT
5C 42 52 4F 57 53 45 00 0C 00 C0 27 09 00 4D 53 \BROWSE....'..MS
48 4F 4D 45 00 00 00 00 98 7B 93 02 00 90 03 0A HOME.....{......
00 10 00 80 00 90 F8 7F 4D 41 54 54 32 00 ........MATT2.
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:42.280684 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x3C
66.218.77.64:80 -> 192.168.0.102:1072 TCP TTL:49 TOS:0x0 ID:44573 IpLen:20 DgmLen:40 DF
***A***F Seq: 0x6AA955EB Ack: 0x9EB405AA Win: 0xFFFF TcpLen: 20
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:42.280802 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36
192.168.0.102:1072 -> 66.218.77.64:80 TCP TTL:128 TOS:0x0 ID:666 IpLen:20 DgmLen:40 DF
***A**** Seq: 0x9EB405AA Ack: 0x6AA954CA Win: 0xFFFF TcpLen: 20
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:42.280877 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x157
66.218.77.64:80 -> 192.168.0.102:1072 TCP TTL:49 TOS:0x0 ID:44572 IpLen:20 DgmLen:329 DF
***AP*** Seq: 0x6AA954CA Ack: 0x9EB405AA Win: 0xFFFF TcpLen: 20
48 54 54 50 2F 31 2E 30 20 32 30 30 20 4F 4B 0D HTTP/1.0 200 OK.
0A 44 61 74 65 3A 20 54 68 75 2C 20 30 32 20 46 .Date: Thu, 02 F
65 62 20 32 30 30 36 20 31 38 3A 35 35 3A 34 33 eb 2006 18:55:43
20 47 4D 54 0D 0A 50 72 61 67 6D 61 3A 20 6E 6F GMT..Pragma: no
2D 63 61 63 68 65 0D 0A 43 6F 6E 6E 65 63 74 69 -cache..Connecti
6F 6E 3A 20 63 6C 6F 73 65 0D 0A 43 61 63 68 65 on: close..Cache
2D 63 6F 6E 74 72 6F 6C 3A 20 6D 61 78 2D 61 67 -control: max-ag
65 3D 30 0D 0A 45 78 70 69 72 65 73 3A 20 54 68 e=0..Expires: Th
75 2C 20 30 32 20 46 65 62 20 32 30 30 36 20 31 u, 02 Feb 2006 1
38 3A 35 35 3A 34 33 20 47 4D 54 0D 0A 43 6F 6E 8:55:43 GMT..Con
74 65 6E 74 2D 74 79 70 65 3A 20 69 6D 61 67 65 tent-type: image
2F 67 69 66 0D 0A 43 6F 6E 74 65 6E 74 2D 6C 65 /gif..Content-le
6E 67 74 68 3A 20 38 35 0D 0A 0D 0A 47 49 46 38 ngth: 85....GIF8
39 61 01 00 01 00 E3 00 00 00 00 00 00 00 00 00 9a..............
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 21 F9 04 01 00 00 00 .........!......
00 2C 00 00 00 00 01 00 01 00 00 04 02 10 44 00 .,............D.
3B ;
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:42.280962 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36
192.168.0.102:1072 -> 66.218.77.64:80 TCP TTL:128 TOS:0x0 ID:667 IpLen:20 DgmLen:40 DF
***A**** Seq: 0x9EB405AA Ack: 0x6AA955EC Win: 0xFEDE TcpLen: 20
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:42.305102 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36
192.168.0.102:1072 -> 66.218.77.64:80 TCP TTL:128 TOS:0x0 ID:688 IpLen:20 DgmLen:40 DF
***A***F Seq: 0x9EB405AA Ack: 0x6AA955EC Win: 0xFEDE TcpLen: 20
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
[Client opens connection on local port 1076 to request /favicon.ico (not found)]
02/02-13:55:42.305852 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x3E
192.168.0.102:1076 -> 66.218.79.171:80 TCP TTL:128 TOS:0x0 ID:689 IpLen:20 DgmLen:48 DF
******S* Seq: 0x61F85FB4 Ack: 0x0 Win: 0xFFFF TcpLen: 28
TCP Options (4) => MSS: 1460 NOP NOP SackOK
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:42.400832 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x3C
66.218.77.64:80 -> 192.168.0.102:1072 TCP TTL:49 TOS:0x0 ID:44942 IpLen:20 DgmLen:40 DF
***A**** Seq: 0x6AA955EC Ack: 0x9EB405AB Win: 0xFFFF TcpLen: 20
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:42.403020 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x3C
66.218.79.171:80 -> 192.168.0.102:1076 TCP TTL:49 TOS:0x0 ID:11232 IpLen:20 DgmLen:44 DF
***A**S* Seq: 0x3A51CF6B Ack: 0x61F85FB5 Win: 0xFFFF TcpLen: 24
TCP Options (1) => MSS: 1460
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:42.403121 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36
192.168.0.102:1076 -> 66.218.79.171:80 TCP TTL:128 TOS:0x0 ID:690 IpLen:20 DgmLen:40 DF
***A**** Seq: 0x61F85FB5 Ack: 0x3A51CF6C Win: 0xFFFF TcpLen: 20
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:42.403902 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x1A2
192.168.0.102:1076 -> 66.218.79.171:80 TCP TTL:128 TOS:0x0 ID:693 IpLen:20 DgmLen:404 DF
***AP*** Seq: 0x61F85FB5 Ack: 0x3A51CF6C Win: 0xFFFF TcpLen: 20
47 45 54 20 2F 66 61 76 69 63 6F 6E 2E 69 63 6F GET /favicon.ico
20 48 54 54 50 2F 31 2E 31 0D 0A 48 6F 73 74 3A HTTP/1.1..Host:
20 77 77 77 2E 6D 61 74 74 6D 61 68 6F 6E 65 79 www.mattmahoney
2E 6E 65 74 0D 0A 55 73 65 72 2D 41 67 65 6E 74 .net..User-Agent
3A 20 4D 6F 7A 69 6C 6C 61 2F 35 2E 30 20 28 57 : Mozilla/5.0 (W
69 6E 64 6F 77 73 3B 20 55 3B 20 57 69 6E 64 6F indows; U; Windo
77 73 20 4E 54 20 35 2E 31 3B 20 65 6E 2D 55 53 ws NT 5.1; en-US
3B 20 72 76 3A 31 2E 38 29 20 47 65 63 6B 6F 2F ; rv:1.8) Gecko/
32 30 30 35 31 31 31 31 20 46 69 72 65 66 6F 78 20051111 Firefox
2F 31 2E 35 0D 0A 41 63 63 65 70 74 3A 20 69 6D /1.5..Accept: im
61 67 65 2F 70 6E 67 2C 2A 2F 2A 3B 71 3D 30 2E age/png,*/*;q=0.
35 0D 0A 41 63 63 65 70 74 2D 4C 61 6E 67 75 61 5..Accept-Langua
67 65 3A 20 65 6E 2D 75 73 2C 65 6E 3B 71 3D 30 ge: en-us,en;q=0
2E 35 0D 0A 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D .5..------------
2D 2D 2D 3A 20 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ---: -----------
2D 0D 0A 41 63 63 65 70 74 2D 43 68 61 72 73 65 -..Accept-Charse
74 3A 20 49 53 4F 2D 38 38 35 39 2D 31 2C 75 74 t: ISO-8859-1,ut
66 2D 38 3B 71 3D 30 2E 37 2C 2A 3B 71 3D 30 2E f-8;q=0.7,*;q=0.
37 0D 0A 4B 65 65 70 2D 41 6C 69 76 65 3A 20 33 7..Keep-Alive: 3
30 30 0D 0A 43 6F 6E 6E 65 63 74 69 6F 6E 3A 20 00..Connection:
6B 65 65 70 2D 61 6C 69 76 65 0D 0A 43 6F 6F 6B keep-alive..Cook
69 65 3A 20 42 58 3D 34 6C 6C 62 6F 62 31 31 75 ie: BX=4llbob11u
34 6B 6E 6F 26 62 3D 32 0D 0A 0D 0A 4kno&b=2....
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:42.508105 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x3C
66.218.79.171:80 -> 192.168.0.102:1076 TCP TTL:49 TOS:0x0 ID:11887 IpLen:20 DgmLen:40 DF
***A***F Seq: 0x3A51D32B Ack: 0x61F86121 Win: 0xFFFF TcpLen: 20
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:42.508217 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36
192.168.0.102:1076 -> 66.218.79.171:80 TCP TTL:128 TOS:0x0 ID:694 IpLen:20 DgmLen:40 DF
***A**** Seq: 0x61F86121 Ack: 0x3A51CF6C Win: 0xFFFF TcpLen: 20
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:42.508856 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x3F5
66.218.79.171:80 -> 192.168.0.102:1076 TCP TTL:49 TOS:0x0 ID:11886 IpLen:20 DgmLen:999 DF
***AP*** Seq: 0x3A51CF6C Ack: 0x61F86121 Win: 0xFFFF TcpLen: 20
48 54 54 50 2F 31 2E 31 20 34 30 34 20 4E 6F 74 HTTP/1.1 404 Not
20 46 6F 75 6E 64 0D 0A 44 61 74 65 3A 20 54 68 Found..Date: Th
75 2C 20 30 32 20 46 65 62 20 32 30 30 36 20 31 u, 02 Feb 2006 1
38 3A 35 35 3A 34 33 20 47 4D 54 0D 0A 50 33 50 8:55:43 GMT..P3P
3A 20 70 6F 6C 69 63 79 72 65 66 3D 22 68 74 74 : policyref="htt
70 3A 2F 2F 70 33 70 2E 79 61 68 6F 6F 2E 63 6F p://p3p.yahoo.co
6D 2F 77 33 63 2F 70 33 70 2E 78 6D 6C 22 2C 20 m/w3c/p3p.xml",
43 50 3D 22 43 41 4F 20 44 53 50 20 43 4F 52 20 CP="CAO DSP COR
43 55 52 20 41 44 4D 20 44 45 56 20 54 41 49 20 CUR ADM DEV TAI
50 53 41 20 50 53 44 20 49 56 41 69 20 49 56 44 PSA PSD IVAi IVD
69 20 43 4F 4E 69 20 54 45 4C 6F 20 4F 54 50 69 i CONi TELo OTPi
20 4F 55 52 20 44 45 4C 69 20 53 41 4D 69 20 4F OUR DELi SAMi O
54 52 69 20 55 4E 52 69 20 50 55 42 69 20 49 4E TRi UNRi PUBi IN
44 20 50 48 59 20 4F 4E 4C 20 55 4E 49 20 50 55 D PHY ONL UNI PU
52 20 46 49 4E 20 43 4F 4D 20 4E 41 56 20 49 4E R FIN COM NAV IN
54 20 44 45 4D 20 43 4E 54 20 53 54 41 20 50 4F T DEM CNT STA PO
4C 20 48 45 41 20 50 52 45 20 47 4F 56 22 0D 0A L HEA PRE GOV"..
58 2D 48 6F 73 74 3A 20 70 31 77 33 2E 67 65 6F X-Host: p1w3.geo
2E 73 63 64 2E 79 61 68 6F 6F 2E 63 6F 6D 0D 0A .scd.yahoo.com..
58 2D 49 4E 4B 54 2D 55 52 49 3A 20 68 74 74 70 X-INKT-URI: http
3A 2F 2F 75 73 2E 67 65 6F 63 69 74 69 65 73 2E ://us.geocities.
63 6F 6D 2F 73 65 72 76 65 72 2D 65 72 72 6F 72 com/server-error
73 2F 70 64 5F 6E 6F 74 5F 66 6F 75 6E 64 2E 68 s/pd_not_found.h
74 6D 6C 0D 0A 58 2D 49 4E 4B 54 2D 53 49 54 45 tml..X-INKT-SITE
3A 20 68 74 74 70 3A 2F 2F 75 73 2E 67 65 6F 63 : http://us.geoc
69 74 69 65 73 2E 63 6F 6D 2F 73 65 72 76 65 72 ities.com/server
2D 65 72 72 6F 72 73 0D 0A 4C 61 73 74 2D 4D 6F -errors..Last-Mo
64 69 66 69 65 64 3A 20 54 75 65 2C 20 32 30 20 dified: Tue, 20
53 65 70 20 32 30 30 35 20 31 38 3A 32 32 3A 30 Sep 2005 18:22:0
39 20 47 4D 54 0D 0A 45 54 61 67 3A 20 22 31 32 9 GMT..ETag: "12
32 39 33 2D 64 64 2D 34 33 33 30 35 33 35 31 3B 293-dd-43305351;
34 33 65 31 62 31 64 36 22 0D 0A 41 63 63 65 70 43e1b1d6"..Accep
74 2D 52 61 6E 67 65 73 3A 20 62 79 74 65 73 0D t-Ranges: bytes.
0A 43 6F 6E 74 65 6E 74 2D 4C 65 6E 67 74 68 3A .Content-Length:
20 33 36 33 0D 0A 43 6F 6E 6E 65 63 74 69 6F 6E 363..Connection
3A 20 63 6C 6F 73 65 0D 0A 43 6F 6E 74 65 6E 74 : close..Content
2D 54 79 70 65 3A 20 74 65 78 74 2F 68 74 6D 6C -Type: text/html
0D 0A 0D 0A 3C 68 74 6D 6C 3E 3C 68 65 61 64 3E ....
0A 3C 74 69 74 6C 65 3E 34 30 34 20 4E 6F 74 20 .404 Not
46 6F 75 6E 64 3C 2F 74 69 74 6C 65 3E 0A 3C 2F Found.
68 65 61 64 3E 3C 62 6F 64 79 3E 0A 3C 68 31 3E head>.
4E 6F 74 20 46 6F 75 6E 64 3C 2F 68 31 3E 0A 3C Not Found
.<
70 3E 54 68 65 20 72 65 71 75 65 73 74 65 64 20 p>The requested
55 52 4C 20 68 74 74 70 3A 2F 2F 3C 21 2D 2D 23 URL http:// was n
6F 74 20 66 6F 75 6E 64 20 6F 6E 20 74 68 69 73 ot found on this
20 73 65 72 76 65 72 2E 3C 2F 70 3E 0A 3C 68 72 server.
.
.
0A 3C 21 2D 2D 20 74 65 78 74 20 62 65 6C 6F 77 .....
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:42.508943 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36
192.168.0.102:1076 -> 66.218.79.171:80 TCP TTL:128 TOS:0x0 ID:695 IpLen:20 DgmLen:40 DF
***A**** Seq: 0x61F86121 Ack: 0x3A51D32C Win: 0xFC40 TcpLen: 20
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:42.514497 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36
192.168.0.102:1076 -> 66.218.79.171:80 TCP TTL:128 TOS:0x0 ID:707 IpLen:20 DgmLen:40 DF
***A***F Seq: 0x61F86121 Ack: 0x3A51D32C Win: 0xFC40 TcpLen: 20
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
02/02-13:55:42.608962 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x3C
66.218.79.171:80 -> 192.168.0.102:1076 TCP TTL:49 TOS:0x0 ID:12445 IpLen:20 DgmLen:40 DF
***A**** Seq: 0x3A51D32C Ack: 0x61F86122 Win: 0xFFFF TcpLen: 20
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
===============================================================================