Following is a webpage request captured by Snort when the URL www.mattmahoney.net was entered into Firefox 1.5 on Feb. 2, 2006 at 13:55:36 local time (EST). Client computer: 192.168.0.102 (private IP address) running WinXP Home. Router: 192.168.0.1: D-Link DI-604 with integerated firewall, DHCP server and DNS server connected to a cable modem (Ethernet). Snort (http://www.snort.org/) requires LibPCAP (http://sourceforge.net/projects/libpcap/) in Windows. Command: (Firefox: unsubscribe from RSS feeds) (Firefox: empty cache) (reboot to flush DNS cache) snort -W2 (gives lists of interfaces, run as administrator). snort -dev -i2 >log (dump, ethernet, verbose, interface 2 = ethernet). ^C to stop logging. Annotations below are shown in [square brackets] [ARP Ethernet broadcast requests IP address of router] 02/02-13:55:36.580689 ARP who-has 192.168.0.1 tell 192.168.0.102 02/02-13:55:36.580852 ARP reply 192.168.0.1 is-at 0:40:5:58:67:7D [DNS lookup of www.mattmahoney.net] 02/02-13:55:36.580860 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x4F 192.168.0.102:1026 -> 192.168.0.1:53 UDP TTL:128 TOS:0x0 ID:519 IpLen:20 DgmLen:65 Len: 37 CA 87 01 00 00 01 00 00 00 00 00 00 03 77 77 77 .............www 0B 6D 61 74 74 6D 61 68 6F 6E 65 79 03 6E 65 74 .mattmahoney.net 00 00 01 00 01 ..... =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ [DNS response = 66.218.79.171 (42 DA 4F AB) and several others] 02/02-13:55:36.642455 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x226 192.168.0.1:53 -> 192.168.0.102:1026 UDP TTL:238 TOS:0x0 ID:28691 IpLen:20 DgmLen:536 DF Len: 508 CA 87 81 80 00 01 00 09 00 0A 00 07 03 77 77 77 .............www 0B 6D 61 74 74 6D 61 68 6F 6E 65 79 03 6E 65 74 .mattmahoney.net 00 00 01 00 01 C0 0C 00 05 00 01 00 00 02 58 00 ..............X. 1B 07 70 72 65 6D 69 75 6D 03 67 65 6F 05 79 61 ..premium.geo.ya 68 6F 6F 06 61 6B 61 64 6E 73 C0 1C C0 31 00 01 hoo.akadns...1.. 00 01 00 00 01 2C 00 04 42 DA 4F AB C0 31 00 01 .....,..B.O..1.. 00 01 00 00 01 2C 00 04 42 DA 4F AE C0 31 00 01 .....,..B.O..1.. 00 01 00 00 01 2C 00 04 42 DA 4F B0 C0 31 00 01 .....,..B.O..1.. 00 01 00 00 01 2C 00 04 42 DA 4F B2 C0 31 00 01 .....,..B.O..1.. 00 01 00 00 01 2C 00 04 42 DA 4F B4 C0 31 00 01 .....,..B.O..1.. 00 01 00 00 01 2C 00 04 42 DA 4F B5 C0 31 00 01 .....,..B.O..1.. 00 01 00 00 01 2C 00 04 42 DA 4F B7 C0 31 00 01 .....,..B.O..1.. 00 01 00 00 01 2C 00 04 42 DA 4F BA C0 43 00 02 .....,..B.O..C.. 00 01 00 00 99 9F 00 08 05 61 73 69 61 39 C0 43 .........asia9.C C0 43 00 02 00 01 00 00 99 9F 00 07 04 65 75 72 .C...........eur 34 C0 43 C0 43 00 02 00 01 00 00 99 9F 00 07 04 4.C.C........... 65 75 72 37 C0 43 C0 43 00 02 00 01 00 00 99 9F eur7.C.C........ 00 07 04 65 75 72 38 C0 43 C0 43 00 02 00 01 00 ...eur8.C.C..... 00 99 9F 00 07 04 75 73 63 34 C0 43 C0 43 00 02 ......usc4.C.C.. 00 01 00 00 99 9F 00 07 04 75 73 65 31 C0 43 C0 .........use1.C. 43 00 02 00 01 00 00 99 9F 00 07 04 75 73 65 39 C...........use9 C0 43 C0 43 00 02 00 01 00 00 99 9F 00 07 04 75 .C.C...........u 73 77 35 C0 43 C0 43 00 02 00 01 00 00 99 9F 00 sw5.C.C......... 07 04 75 73 77 36 C0 43 C0 43 00 02 00 01 00 00 ..usw6.C.C...... 99 9F 00 08 05 61 73 69 61 34 C0 43 C0 EC 00 01 .....asia4.C.... 00 01 00 00 47 12 00 04 C3 DB 03 A9 C0 FF 00 01 ....G........... 00 01 00 00 F4 4C 00 04 C1 6C 5E 58 C1 12 00 01 .....L...l^X.... 00 01 00 00 FA FC 00 04 3E 04 45 60 C1 25 00 01 ........>.E`.%.. 00 01 00 00 9A 3E 00 04 45 2D 4E 03 C1 38 00 01 .....>..E-N..8.. 00 01 00 00 2F E6 00 04 43 48 11 86 C1 4B 00 01 ..../...CH...K.. 00 01 00 01 4A 77 00 04 51 34 FA 86 C1 5E 00 01 ....Jw..Q4...^.. 00 01 00 00 71 9C 00 04 3F F1 49 C8 ....q...?.I. =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ [open connection to www.mattmahoney.net port 80 on local port 1066] 02/02-13:55:36.645206 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x3E 192.168.0.102:1066 -> 66.218.79.171:80 TCP TTL:128 TOS:0x0 ID:526 IpLen:20 DgmLen:48 DF ******S* Seq: 0x72A02246 Ack: 0x0 Win: 0xFFFF TcpLen: 28 TCP Options (4) => MSS: 1460 NOP NOP SackOK =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:36.745461 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x3C 66.218.79.171:80 -> 192.168.0.102:1066 TCP TTL:49 TOS:0x0 ID:39826 IpLen:20 DgmLen:44 DF ***A**S* Seq: 0x54C87BF2 Ack: 0x72A02247 Win: 0xFFFF TcpLen: 24 TCP Options (1) => MSS: 1460 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:36.745613 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36 192.168.0.102:1066 -> 66.218.79.171:80 TCP TTL:128 TOS:0x0 ID:527 IpLen:20 DgmLen:40 DF ***A**** Seq: 0x72A02247 Ack: 0x54C87BF3 Win: 0xFFFF TcpLen: 20 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ [connection established, send GET request] 02/02-13:55:36.746294 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x1E7 192.168.0.102:1066 -> 66.218.79.171:80 TCP TTL:128 TOS:0x0 ID:530 IpLen:20 DgmLen:473 DF ***AP*** Seq: 0x72A02247 Ack: 0x54C87BF3 Win: 0xFFFF TcpLen: 20 47 45 54 20 2F 20 48 54 54 50 2F 31 2E 31 0D 0A GET / HTTP/1.1.. 48 6F 73 74 3A 20 77 77 77 2E 6D 61 74 74 6D 61 Host: www.mattma 68 6F 6E 65 79 2E 6E 65 74 0D 0A 55 73 65 72 2D honey.net..User- 41 67 65 6E 74 3A 20 4D 6F 7A 69 6C 6C 61 2F 35 Agent: Mozilla/5 2E 30 20 28 57 69 6E 64 6F 77 73 3B 20 55 3B 20 .0 (Windows; U; 57 69 6E 64 6F 77 73 20 4E 54 20 35 2E 31 3B 20 Windows NT 5.1; 65 6E 2D 55 53 3B 20 72 76 3A 31 2E 38 29 20 47 en-US; rv:1.8) G 65 63 6B 6F 2F 32 30 30 35 31 31 31 31 20 46 69 ecko/20051111 Fi 72 65 66 6F 78 2F 31 2E 35 0D 0A 41 63 63 65 70 refox/1.5..Accep 74 3A 20 74 65 78 74 2F 78 6D 6C 2C 61 70 70 6C t: text/xml,appl 69 63 61 74 69 6F 6E 2F 78 6D 6C 2C 61 70 70 6C ication/xml,appl 69 63 61 74 69 6F 6E 2F 78 68 74 6D 6C 2B 78 6D ication/xhtml+xm 6C 2C 74 65 78 74 2F 68 74 6D 6C 3B 71 3D 30 2E l,text/html;q=0. 39 2C 74 65 78 74 2F 70 6C 61 69 6E 3B 71 3D 30 9,text/plain;q=0 2E 38 2C 69 6D 61 67 65 2F 70 6E 67 2C 2A 2F 2A .8,image/png,*/* 3B 71 3D 30 2E 35 0D 0A 41 63 63 65 70 74 2D 4C ;q=0.5..Accept-L 61 6E 67 75 61 67 65 3A 20 65 6E 2D 75 73 2C 65 anguage: en-us,e 6E 3B 71 3D 30 2E 35 0D 0A 2D 2D 2D 2D 2D 2D 2D n;q=0.5..------- 2D 2D 2D 2D 2D 2D 2D 2D 3A 20 2D 2D 2D 2D 2D 2D --------: ------ 2D 2D 2D 2D 2D 2D 0D 0A 41 63 63 65 70 74 2D 43 ------..Accept-C 68 61 72 73 65 74 3A 20 49 53 4F 2D 38 38 35 39 harset: ISO-8859 2D 31 2C 75 74 66 2D 38 3B 71 3D 30 2E 37 2C 2A -1,utf-8;q=0.7,* 3B 71 3D 30 2E 37 0D 0A 4B 65 65 70 2D 41 6C 69 ;q=0.7..Keep-Ali 76 65 3A 20 33 30 30 0D 0A 43 6F 6E 6E 65 63 74 ve: 300..Connect 69 6F 6E 3A 20 6B 65 65 70 2D 61 6C 69 76 65 0D ion: keep-alive. 0A 43 6F 6F 6B 69 65 3A 20 42 58 3D 34 6C 6C 62 .Cookie: BX=4llb 6F 62 31 31 75 34 6B 6E 6F 26 62 3D 32 0D 0A 0D ob11u4kno&b=2... 0A . =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ [web server response] 02/02-13:55:36.947568 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x5EA 66.218.79.171:80 -> 192.168.0.102:1066 TCP TTL:49 TOS:0x0 ID:40684 IpLen:20 DgmLen:1500 DF ***A**** Seq: 0x54C87BF3 Ack: 0x72A023F8 Win: 0xFFFF TcpLen: 20 48 54 54 50 2F 31 2E 31 20 32 30 30 20 4F 4B 0D HTTP/1.1 200 OK. 0A 44 61 74 65 3A 20 54 68 75 2C 20 30 32 20 46 .Date: Thu, 02 F 65 62 20 32 30 30 36 20 31 38 3A 35 35 3A 33 37 eb 2006 18:55:37 20 47 4D 54 0D 0A 50 33 50 3A 20 70 6F 6C 69 63 GMT..P3P: polic 79 72 65 66 3D 22 68 74 74 70 3A 2F 2F 70 33 70 yref="http://p3p 2E 79 61 68 6F 6F 2E 63 6F 6D 2F 77 33 63 2F 70 .yahoo.com/w3c/p 33 70 2E 78 6D 6C 22 2C 20 43 50 3D 22 43 41 4F 3p.xml", CP="CAO 20 44 53 50 20 43 4F 52 20 43 55 52 20 41 44 4D DSP COR CUR ADM 20 44 45 56 20 54 41 49 20 50 53 41 20 50 53 44 DEV TAI PSA PSD 20 49 56 41 69 20 49 56 44 69 20 43 4F 4E 69 20 IVAi IVDi CONi 54 45 4C 6F 20 4F 54 50 69 20 4F 55 52 20 44 45 TELo OTPi OUR DE 4C 69 20 53 41 4D 69 20 4F 54 52 69 20 55 4E 52 Li SAMi OTRi UNR 69 20 50 55 42 69 20 49 4E 44 20 50 48 59 20 4F i PUBi IND PHY O 4E 4C 20 55 4E 49 20 50 55 52 20 46 49 4E 20 43 NL UNI PUR FIN C 4F 4D 20 4E 41 56 20 49 4E 54 20 44 45 4D 20 43 OM NAV INT DEM C 4E 54 20 53 54 41 20 50 4F 4C 20 48 45 41 20 50 NT STA POL HEA P 52 45 20 47 4F 56 22 0D 0A 58 2D 48 6F 73 74 3A RE GOV"..X-Host: 20 70 31 77 33 2E 67 65 6F 2E 73 63 64 2E 79 61 p1w3.geo.scd.ya 68 6F 6F 2E 63 6F 6D 0D 0A 58 2D 49 4E 4B 54 2D hoo.com..X-INKT- 55 52 49 3A 20 68 74 74 70 3A 2F 2F 77 77 77 2E URI: http://www. 6D 61 74 74 6D 61 68 6F 6E 65 79 2E 6E 65 74 2F mattmahoney.net/ 2F 69 6E 64 65 78 2E 68 74 6D 6C 0D 0A 58 2D 49 /index.html..X-I 4E 4B 54 2D 53 49 54 45 3A 20 68 74 74 70 3A 2F NKT-SITE: http:/ 2F 77 77 77 2E 6D 61 74 74 6D 61 68 6F 6E 65 79 /www.mattmahoney 2E 6E 65 74 0D 0A 4C 61 73 74 2D 4D 6F 64 69 66 .net..Last-Modif 69 65 64 3A 20 46 72 69 2C 20 31 33 20 4A 61 6E ied: Fri, 13 Jan 20 32 30 30 36 20 30 31 3A 30 37 3A 32 37 20 47 2006 01:07:27 G 4D 54 0D 0A 45 54 61 67 3A 20 22 38 61 39 38 65 MT..ETag: "8a98e 2D 39 65 62 2D 34 33 63 36 66 64 34 66 22 0D 0A -9eb-43c6fd4f".. 41 63 63 65 70 74 2D 52 61 6E 67 65 73 3A 20 62 Accept-Ranges: b 79 74 65 73 0D 0A 43 6F 6E 74 65 6E 74 2D 4C 65 ytes..Content-Le 6E 67 74 68 3A 20 33 30 30 32 0D 0A 43 6F 6E 6E ngth: 3002..Conn 65 63 74 69 6F 6E 3A 20 63 6C 6F 73 65 0D 0A 43 ection: close..C 6F 6E 74 65 6E 74 2D 54 79 70 65 3A 20 74 65 78 ontent-Type: tex 74 2F 68 74 6D 6C 0D 0A 0D 0A 3C 68 74 6D 6C 3E t/html.... 3C 68 65 61 64 3E 0D 0A 3C 74 69 74 6C 65 3E 4D ..M 61 74 74 20 4D 61 68 6F 6E 65 79 27 73 20 48 6F att Mahoney's Ho 6D 65 20 50 61 67 65 3C 2F 74 69 74 6C 65 3E 0D me Page. 0A 3C 2F 68 65 61 64 3E 0D 0A 3C 62 6F 64 79 20 ... 0D 0A 3C 68 31 20 61 6C 69 67 6E 3D 63 65 6E 74 ..

Matt Mahoney' 73 20 48 6F 6D 65 20 50 61 67 65 3C 2F 68 31 3E s Home Page

0D 0A 3C 69 6D 67 20 73 72 63 3D 6D 61 74 74 2E ......

Welco 6D 65 3C 2F 61 3E 2E 20 20 49 20 0D 0A 3C 61 20 me. I ..teach computer 20 73 63 69 65 6E 63 65 0D 0A 61 74 20 46 6C 6F science..at Flo 72 69 64 61 20 54 65 63 68 3C 2F 61 3E 2E 20 20 rida Tech. 4D 79 20 72 65 73 65 61 72 63 68 20 69 6E 74 65 My research inte 72 65 73 74 20 69 73 0D 0A 3C 61 20 68 72 65 66 rest is..data c 6F 6D 70 72 65 73 73 69 6F 6E 3C 2F 61 3E 2E 0D ompression.. 0A 4D 79 20 68 6F 62 62 79 20 69 73 20 3C 61 20 .My hobby is Ultr 61 72 75 6E 6E 69 6E 67 3C 2F 61 3E 2E 0D 0A 0D arunning.... 0A 3C 68 33 3E 52 61 63 65 73 20 49 20 64 69 72 .

Races I dir 65 63 74 3C 2F 68 33 3E 0D 0A 3C 6C 69 3E 3C 61 ect

..
  • Wickham 20 50 61 72 6B 0D 0A 4D 61 72 61 74 68 6F 6E 20 Park..Marathon 61 6E 64 20 35 30 2C 20 31 30 30 2C 20 61 6E 64 and 50, 100, and 20 32 30 30 20 6D 69 6C 65 20 66 75 6E 20 72 75 200 mile fun ru 6E 73 3C 2F 61 3E 2C 20 66 6C 61 74 20 61 6E 64 ns, flat and 20 66 61 73 74 2E 0D 0A 3C 6C 69 3E 3C 61 20 68 fast...
  • Million Mile.. 55 6C 74 72 61 3C 2F 61 3E 2C 20 74 68 65 20 77 Ultra, the w 6F 72 6C 64 27 73 20 6C 6F 6E 67 65 73 74 20 72 orld's longest r 61 63 65 2E 0D 0A 3C 6C 69 3E 3C 61 20 68 72 65 ace...
  • Fourteener R 61 6E 6B 69 6E 67 73 3C 2F 61 3E 0D 0A 0D 0A 3C ankings....< 68 33 3E 4F 74 68 65 72 20 68 6F 62 62 69 65 73 h3>Other hobbies 3C 2F 68 33 3E 0D 0A 3C 6C 69 3E 3C 61 20 68 72 ..
  • 1999 Vacatio 6E 3C 2F 61 3E 2C 20 48 61 72 64 72 6F 63 6B 20 n, Hardrock 31 30 30 0D 0A 3C 6C 69 3E 3C 61 20 68 72 65 66 100..
  • 2000 Vacation, =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:36.947774 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x5EA 66.218.79.171:80 -> 192.168.0.102:1066 TCP TTL:49 TOS:0x0 ID:40685 IpLen:20 DgmLen:1500 DF ***A**** Seq: 0x54C881A7 Ack: 0x72A023F8 Win: 0xFFFF TcpLen: 20 48 61 72 64 72 6F 63 6B 20 31 30 30 0D 0A 3C 6C Hardrock 100..2001 V 61 63 61 74 69 6F 6E 3C 2F 61 3E 2C 20 48 61 72 acation, Har 64 72 6F 63 6B 20 31 30 30 2C 20 4E 6F 6C 61 6E drock 100, Nolan 27 73 20 31 34 0D 0A 3C 6C 69 3E 3C 61 20 68 72 's 14..
  • 2002 Vacation 3C 2F 61 3E 2C 0D 0A 20 20 43 61 70 69 74 6F 6C ,.. Capitol 20 50 65 61 6B 2C 20 4D 61 72 6F 6F 6E 20 42 65 Peak, Maroon Be 6C 6C 73 2C 20 43 72 65 73 74 6F 6E 65 73 2C 0D lls, Crestones,. 0A 20 20 4C 65 61 64 76 69 6C 6C 65 20 31 30 30 . Leadville 100 20 62 69 6B 65 2F 72 75 6E 2C 20 3C 61 20 68 72 bike/run, Nolan's 1 34 3C 2F 61 3E 0D 0A 3C 6C 69 3E 3C 61 20 68 72 4..
  • 2003 Vacation 3C 2F 61 3E 2C 20 4C 65 61 64 76 69 6C 6C 65 20 , Leadville 31 30 30 20 72 75 6E 2C 0D 0A 20 20 74 68 65 20 100 run,.. the 72 65 73 74 20 6F 66 20 74 68 65 20 66 6F 75 72 rest of the four 74 65 65 6E 65 72 73 20 28 3C 61 20 68 72 65 66 teeners (Needl 65 73 3C 2F 61 3E 2C 0D 0A 20 20 57 69 6C 73 6F es,.. Wilso 6E 73 2C 20 4C 69 74 74 6C 65 20 42 65 61 72 2C ns, Little Bear, 20 50 79 72 61 6D 69 64 29 2E 0D 0A 3C 6C 69 3E Pyramid)...
  • 3C 61 20 68 72 65 66 3D 32 30 30 34 2F 69 6E 64 2004 Vac 61 74 69 6F 6E 3C 2F 61 3E 2C 20 4D 65 65 6B 65 ation, Meeke 72 20 72 69 64 67 65 2C 0D 0A 20 20 57 69 6E 64 r ridge,.. Wind 6F 6D 2C 20 53 6E 65 66 66 65 6C 73 2C 20 4C 61 om, Sneffels, La 20 50 6C 61 74 61 2D 45 6C 6C 69 6E 67 77 6F 6F Plata-Ellingwoo 64 2C 20 48 61 72 64 72 6F 63 6B 20 31 30 30 2E d, Hardrock 100. 0D 0A 3C 6C 69 3E 3C 61 20 68 72 65 66 3D 32 30 ..
  • 20 30 35 20 56 61 63 61 74 69 6F 6E 3C 2F 61 3E 2C 05 Vacation, 20 45 6F 6C 75 73 2C 20 49 63 65 20 4D 74 2C 0D Eolus, Ice Mt,. 0A 20 20 48 61 72 64 72 6F 63 6B 20 61 74 74 65 . Hardrock atte 6D 70 74 73 2E 0D 0A 3C 6C 69 3E 3C 61 20 68 72 mpts...
  • Longs 50 65 61 6B 3C 2F 61 3E 0D 0A 3C 6C 69 3E 3C 61 Peak..
  • Barkley 3C 2F 61 3E 2C 20 31 30 20 73 74 61 72 74 73 2C , 10 starts, 20 30 20 66 69 6E 69 73 68 65 73 2E 0D 0A 3C 6C 0 finishes...Som 65 20 75 6C 74 72 61 73 20 49 27 76 65 20 72 75 e ultras I've ru 6E 3C 2F 61 3E 20 61 6E 64 0D 0A 20 20 3C 61 20 n and.. mountains 49 27 76 65 20 63 6C 69 6D 62 65 64 3C 2F 61 3E I've climbed 2E 0D 0A 0D 0A 3C 70 3E 4D 79 20 77 69 66 65 20 .....

    My wife 4A 6F 61 6E 20 68 6F 6C 64 73 20 77 6F 72 6C 64 Joan holds world 20 72 65 63 6F 72 64 73 20 69 6E 0D 0A 3C 61 20 records in..perimeter..bic 79 63 6C 69 6E 67 3C 2F 61 3E 2C 20 69 6E 63 6C ycling, incl 75 64 69 6E 67 20 72 69 64 65 73 20 61 72 6F 75 uding rides arou 6E 64 20 32 30 20 63 6F 75 6E 74 72 69 65 73 2C nd 20 countries, 20 61 6C 6C 0D 0A 73 6F 6C 6F 2C 20 61 6E 64 20 all..solo, and 70 65 72 69 6D 65 74 65 72 73 20 69 6E 20 65 76 perimeters in ev 65 72 79 20 73 74 61 74 65 20 69 6E 20 74 68 65 ery state in the 20 63 6F 6E 74 69 6E 74 65 6E 74 61 6C 20 55 2E contintental U. 53 2E 20 20 53 68 65 20 68 61 73 0D 0A 63 6F 6D S. She has..com 70 6C 65 74 65 64 20 74 68 65 20 48 61 77 61 69 pleted the Hawai 69 20 49 72 6F 6E 6D 61 6E 20 33 20 74 69 6D 65 i Ironman 3 time 73 20 28 73 77 69 6D 20 32 2E 34 20 6D 69 6C 65 s (swim 2.4 mile 73 2C 20 62 69 6B 65 20 31 31 32 2C 20 72 75 6E s, bike 112, run 20 32 36 29 2E 0D 0A 57 65 20 68 61 76 65 20 3C 26)...We have < 61 20 68 72 65 66 3D 63 61 74 73 2F 3E 37 20 63 a href=cats/>7 c 61 74 73 3C 2F 61 3E 2E 0D 0A 0D 0A 3C 70 3E 49 ats.....

    I 20 6D 61 69 6E 74 61 69 6E 20 74 68 65 20 3C 61 maintain the ..race calenda 72 3C 2F 61 3E 20 61 6E 64 0D 0A 3C 61 20 68 72 r and..re 73 75 6C 74 73 3C 2F 61 3E 20 66 6F 72 20 74 68 sults for th 65 0D 0A 3C 61 20 68 72 65 66 3D 68 74 74 70 3A e..Spac 65 20 43 6F 61 73 74 20 52 75 6E 6E 65 72 73 3C e Coast Runners< 2F 61 3E 20 69 6E 0D 0A 65 61 73 74 2D 63 65 6E /a> in..east-cen 74 72 61 6C 20 46 6C 6F 72 69 64 61 2E 0D 0A 0D tral Florida.... 0A 3C 70 3E 3C 61 20 68 72 65 66 3D 73 75 64 6F .

    0:40:5:58:67:7D type:0x800 len:0x36 192.168.0.102:1066 -> 66.218.79.171:80 TCP TTL:128 TOS:0x0 ID:531 IpLen:20 DgmLen:40 DF ***A**** Seq: 0x72A023F8 Ack: 0x54C8875B Win: 0xFFFF TcpLen: 20 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ [Note: server appends 2 web bugs and Javascript for tracking] 02/02-13:55:36.951428 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x2B2 66.218.79.171:80 -> 192.168.0.102:1066 TCP TTL:49 TOS:0x0 ID:40686 IpLen:20 DgmLen:676 DF ***AP*** Seq: 0x54C8875B Ack: 0x72A023F8 Win: 0xFFFF TcpLen: 20 74 6D 6C 3E 53 75 64 6F 6B 75 20 53 6F 6C 76 65 tml>Sudoku Solve 72 3C 2F 61 3E 0D 0A 0D 0A 3C 70 3E 3C 61 20 68 r....

    OCR tes 74 20 69 6D 61 67 65 73 3C 2F 61 3E 0D 0A 0D 0A t images.... 3C 70 3E 4D 61 74 74 20 4D 61 68 6F 6E 65 79 2C

    Matt Mahoney, 20 3C 61 20 68 72 65 66 3D 6D 61 69 6C 74 6F 3A mmahoney@cs. 66 69 74 2E 65 64 75 3C 2F 61 3E 0D 0A 3C 2F 61 fit.edu.... 0D 0A 3C 2F 68 74 6D 6C 3E 0D 0A 0D 0A 3C 21 2D ......geovisit 28 29 3B 3C 2F 73 63 72 69 70 74 3E 3C 6E 6F 73 ();s 65 74 73 74 61 74 73 22 20 62 6F 72 64 65 72 3D etstats..1.. =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ [server closes connection (in spite of keepalive)] 02/02-13:55:36.951472 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x3C 66.218.79.171:80 -> 192.168.0.102:1066 TCP TTL:49 TOS:0x0 ID:40687 IpLen:20 DgmLen:40 DF ***A***F Seq: 0x54C889D7 Ack: 0x72A023F8 Win: 0xFFFF TcpLen: 20 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:36.951535 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36 192.168.0.102:1066 -> 66.218.79.171:80 TCP TTL:128 TOS:0x0 ID:532 IpLen:20 DgmLen:40 DF ***A**** Seq: 0x72A023F8 Ack: 0x54C889D8 Win: 0xFD83 TcpLen: 20 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:36.955930 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36 192.168.0.102:1066 -> 66.218.79.171:80 TCP TTL:128 TOS:0x0 ID:547 IpLen:20 DgmLen:40 DF ***A***F Seq: 0x72A023F8 Ack: 0x54C889D8 Win: 0xFD83 TcpLen: 20 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ [client opens connections on local ports 1068 and 1070 to get embedded images matt.jpg and a web bug] 02/02-13:55:36.988488 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x3E 192.168.0.102:1068 -> 66.218.79.171:80 TCP TTL:128 TOS:0x0 ID:559 IpLen:20 DgmLen:48 DF ******S* Seq: 0x8F7AF134 Ack: 0x0 Win: 0xFFFF TcpLen: 28 TCP Options (4) => MSS: 1460 NOP NOP SackOK =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:37.022648 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x3E 192.168.0.102:1070 -> 66.218.79.180:80 TCP TTL:128 TOS:0x0 ID:573 IpLen:20 DgmLen:48 DF ******S* Seq: 0x382DF45D Ack: 0x0 Win: 0xFFFF TcpLen: 28 TCP Options (4) => MSS: 1460 NOP NOP SackOK =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:37.053318 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x3C 66.218.79.171:80 -> 192.168.0.102:1066 TCP TTL:49 TOS:0x0 ID:41079 IpLen:20 DgmLen:40 DF ***A**** Seq: 0x54C889D8 Ack: 0x72A023F9 Win: 0xFFFF TcpLen: 20 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:37.089020 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x3C 66.218.79.171:80 -> 192.168.0.102:1068 TCP TTL:49 TOS:0x0 ID:41229 IpLen:20 DgmLen:44 DF ***A**S* Seq: 0x3AA82121 Ack: 0x8F7AF135 Win: 0xFFFF TcpLen: 24 TCP Options (1) => MSS: 1460 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:37.089112 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36 192.168.0.102:1068 -> 66.218.79.171:80 TCP TTL:128 TOS:0x0 ID:574 IpLen:20 DgmLen:40 DF ***A**** Seq: 0x8F7AF135 Ack: 0x3AA82122 Win: 0xFFFF TcpLen: 20 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:37.091603 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x1C5 192.168.0.102:1068 -> 66.218.79.171:80 TCP TTL:128 TOS:0x0 ID:577 IpLen:20 DgmLen:439 DF ***AP*** Seq: 0x8F7AF135 Ack: 0x3AA82122 Win: 0xFFFF TcpLen: 20 47 45 54 20 2F 6D 61 74 74 2E 6A 70 67 20 48 54 GET /matt.jpg HT 54 50 2F 31 2E 31 0D 0A 48 6F 73 74 3A 20 77 77 TP/1.1..Host: ww 77 2E 6D 61 74 74 6D 61 68 6F 6E 65 79 2E 6E 65 w.mattmahoney.ne 74 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 4D t..User-Agent: M 6F 7A 69 6C 6C 61 2F 35 2E 30 20 28 57 69 6E 64 ozilla/5.0 (Wind 6F 77 73 3B 20 55 3B 20 57 69 6E 64 6F 77 73 20 ows; U; Windows 4E 54 20 35 2E 31 3B 20 65 6E 2D 55 53 3B 20 72 NT 5.1; en-US; r 76 3A 31 2E 38 29 20 47 65 63 6B 6F 2F 32 30 30 v:1.8) Gecko/200 35 31 31 31 31 20 46 69 72 65 66 6F 78 2F 31 2E 51111 Firefox/1. 35 0D 0A 41 63 63 65 70 74 3A 20 69 6D 61 67 65 5..Accept: image 2F 70 6E 67 2C 2A 2F 2A 3B 71 3D 30 2E 35 0D 0A /png,*/*;q=0.5.. 41 63 63 65 70 74 2D 4C 61 6E 67 75 61 67 65 3A Accept-Language: 20 65 6E 2D 75 73 2C 65 6E 3B 71 3D 30 2E 35 0D en-us,en;q=0.5. 0A 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D .--------------- 3A 20 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 0D 0A : ------------.. 41 63 63 65 70 74 2D 43 68 61 72 73 65 74 3A 20 Accept-Charset: 49 53 4F 2D 38 38 35 39 2D 31 2C 75 74 66 2D 38 ISO-8859-1,utf-8 3B 71 3D 30 2E 37 2C 2A 3B 71 3D 30 2E 37 0D 0A ;q=0.7,*;q=0.7.. 4B 65 65 70 2D 41 6C 69 76 65 3A 20 33 30 30 0D Keep-Alive: 300. 0A 43 6F 6E 6E 65 63 74 69 6F 6E 3A 20 6B 65 65 .Connection: kee 70 2D 61 6C 69 76 65 0D 0A 52 65 66 65 72 65 72 p-alive..Referer 3A 20 68 74 74 70 3A 2F 2F 77 77 77 2E 6D 61 74 : http://www.mat 74 6D 61 68 6F 6E 65 79 2E 6E 65 74 2F 0D 0A 43 tmahoney.net/..C 6F 6F 6B 69 65 3A 20 42 58 3D 34 6C 6C 62 6F 62 ookie: BX=4llbob 31 31 75 34 6B 6E 6F 26 62 3D 32 0D 0A 0D 0A 11u4kno&b=2.... =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:37.120834 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x3C 66.218.79.180:80 -> 192.168.0.102:1070 TCP TTL:49 TOS:0x0 ID:26490 IpLen:20 DgmLen:44 DF ***A**S* Seq: 0x3E266D3B Ack: 0x382DF45E Win: 0xFFFF TcpLen: 24 TCP Options (1) => MSS: 1460 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:37.120978 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36 192.168.0.102:1070 -> 66.218.79.180:80 TCP TTL:128 TOS:0x0 ID:578 IpLen:20 DgmLen:40 DF ***A**** Seq: 0x382DF45E Ack: 0x3E266D3C Win: 0xFFFF TcpLen: 20 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:37.121835 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x19D 192.168.0.102:1070 -> 66.218.79.180:80 TCP TTL:128 TOS:0x0 ID:581 IpLen:20 DgmLen:399 DF ***AP*** Seq: 0x382DF45E Ack: 0x3E266D3C Win: 0xFFFF TcpLen: 20 47 45 54 20 2F 6A 73 5F 73 6F 75 72 63 65 2F 67 GET /js_source/g 65 6F 76 32 2E 6A 73 20 48 54 54 50 2F 31 2E 31 eov2.js HTTP/1.1 0D 0A 48 6F 73 74 3A 20 68 6F 73 74 69 6E 67 70 ..Host: hostingp 72 6F 64 2E 63 6F 6D 0D 0A 55 73 65 72 2D 41 67 rod.com..User-Ag 65 6E 74 3A 20 4D 6F 7A 69 6C 6C 61 2F 35 2E 30 ent: Mozilla/5.0 20 28 57 69 6E 64 6F 77 73 3B 20 55 3B 20 57 69 (Windows; U; Wi 6E 64 6F 77 73 20 4E 54 20 35 2E 31 3B 20 65 6E ndows NT 5.1; en 2D 55 53 3B 20 72 76 3A 31 2E 38 29 20 47 65 63 -US; rv:1.8) Gec 6B 6F 2F 32 30 30 35 31 31 31 31 20 46 69 72 65 ko/20051111 Fire 66 6F 78 2F 31 2E 35 0D 0A 41 63 63 65 70 74 3A fox/1.5..Accept: 20 2A 2F 2A 0D 0A 41 63 63 65 70 74 2D 4C 61 6E */*..Accept-Lan 67 75 61 67 65 3A 20 65 6E 2D 75 73 2C 65 6E 3B guage: en-us,en; 71 3D 30 2E 35 0D 0A 2D 2D 2D 2D 2D 2D 2D 2D 2D q=0.5..--------- 2D 2D 2D 2D 2D 2D 3A 20 2D 2D 2D 2D 2D 2D 2D 2D ------: -------- 2D 2D 2D 2D 0D 0A 41 63 63 65 70 74 2D 43 68 61 ----..Accept-Cha 72 73 65 74 3A 20 49 53 4F 2D 38 38 35 39 2D 31 rset: ISO-8859-1 2C 75 74 66 2D 38 3B 71 3D 30 2E 37 2C 2A 3B 71 ,utf-8;q=0.7,*;q 3D 30 2E 37 0D 0A 4B 65 65 70 2D 41 6C 69 76 65 =0.7..Keep-Alive 3A 20 33 30 30 0D 0A 43 6F 6E 6E 65 63 74 69 6F : 300..Connectio 6E 3A 20 6B 65 65 70 2D 61 6C 69 76 65 0D 0A 2D n: keep-alive..- 2D 2D 2D 2D 2D 2D 3A 20 2D 2D 2D 2D 3A 2D 2D 2D ------: ----:--- 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ---------------- 2D 2D 2D 0D 0A 0D 0A ---.... =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:37.209610 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x5EA 66.218.79.171:80 -> 192.168.0.102:1068 TCP TTL:49 TOS:0x0 ID:41917 IpLen:20 DgmLen:1500 DF ***A**** Seq: 0x3AA82122 Ack: 0x8F7AF2C4 Win: 0xFFFF TcpLen: 20 48 54 54 50 2F 31 2E 31 20 32 30 30 20 4F 4B 0D HTTP/1.1 200 OK. 0A 44 61 74 65 3A 20 54 68 75 2C 20 30 32 20 46 .Date: Thu, 02 F 65 62 20 32 30 30 36 20 31 38 3A 35 35 3A 33 38 eb 2006 18:55:38 20 47 4D 54 0D 0A 50 33 50 3A 20 70 6F 6C 69 63 GMT..P3P: polic 79 72 65 66 3D 22 68 74 74 70 3A 2F 2F 70 33 70 yref="http://p3p 2E 79 61 68 6F 6F 2E 63 6F 6D 2F 77 33 63 2F 70 .yahoo.com/w3c/p 33 70 2E 78 6D 6C 22 2C 20 43 50 3D 22 43 41 4F 3p.xml", CP="CAO 20 44 53 50 20 43 4F 52 20 43 55 52 20 41 44 4D DSP COR CUR ADM 20 44 45 56 20 54 41 49 20 50 53 41 20 50 53 44 DEV TAI PSA PSD 20 49 56 41 69 20 49 56 44 69 20 43 4F 4E 69 20 IVAi IVDi CONi 54 45 4C 6F 20 4F 54 50 69 20 4F 55 52 20 44 45 TELo OTPi OUR DE 4C 69 20 53 41 4D 69 20 4F 54 52 69 20 55 4E 52 Li SAMi OTRi UNR 69 20 50 55 42 69 20 49 4E 44 20 50 48 59 20 4F i PUBi IND PHY O 4E 4C 20 55 4E 49 20 50 55 52 20 46 49 4E 20 43 NL UNI PUR FIN C 4F 4D 20 4E 41 56 20 49 4E 54 20 44 45 4D 20 43 OM NAV INT DEM C 4E 54 20 53 54 41 20 50 4F 4C 20 48 45 41 20 50 NT STA POL HEA P 52 45 20 47 4F 56 22 0D 0A 4C 61 73 74 2D 4D 6F RE GOV"..Last-Mo 64 69 66 69 65 64 3A 20 53 75 6E 2C 20 30 33 20 dified: Sun, 03 46 65 62 20 32 30 30 32 20 31 34 3A 34 36 3A 32 Feb 2002 14:46:2 37 20 47 4D 54 0D 0A 45 54 61 67 3A 20 22 38 61 7 GMT..ETag: "8a 39 38 66 2D 31 38 37 30 2D 33 63 35 64 34 64 34 98f-1870-3c5d4d4 33 22 0D 0A 41 63 63 65 70 74 2D 52 61 6E 67 65 3"..Accept-Range 73 3A 20 62 79 74 65 73 0D 0A 43 6F 6E 74 65 6E s: bytes..Conten 74 2D 4C 65 6E 67 74 68 3A 20 36 32 35 36 0D 0A t-Length: 6256.. 43 6F 6E 6E 65 63 74 69 6F 6E 3A 20 63 6C 6F 73 Connection: clos 65 0D 0A 43 6F 6E 74 65 6E 74 2D 54 79 70 65 3A e..Content-Type: 20 69 6D 61 67 65 2F 6A 70 65 67 0D 0A 0D 0A FF image/jpeg..... D8 FF E0 00 10 4A 46 49 46 00 01 01 01 01 2C 01 .....JFIF.....,. 2C 00 00 FF DB 00 43 00 08 06 06 07 06 05 08 07 ,.....C......... 07 07 09 09 08 0A 0C 14 0D 0C 0B 0B 0C 19 12 13 ................ 0F 14 1D 1A 1F 1E 1D 1A 1C 1C 20 24 2E 27 20 22 .......... $.' " 2C 23 1C 1C 28 37 29 2C 30 31 34 34 34 1F 27 39 ,#..(7),01444.'9 3D 38 32 3C 2E 33 34 32 FF DB 00 43 01 09 09 09 =82<.342...C.... 0C 0B 0C 18 0D 0D 18 32 21 1C 21 32 32 32 32 32 .......2!.!22222 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 2222222222222222 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 2222222222222222 32 32 32 32 32 32 32 32 32 32 32 32 32 FF C0 00 2222222222222... 11 08 00 D0 00 B0 03 01 22 00 02 11 01 03 11 01 ........"....... FF C4 00 1F 00 00 01 05 01 01 01 01 01 01 00 00 ................ 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0A ................ 0B FF C4 00 B5 10 00 02 01 03 03 02 04 03 05 05 ................ 04 04 00 00 01 7D 01 02 03 00 04 11 05 12 21 31 .....}........!1 41 06 13 51 61 07 22 71 14 32 81 91 A1 08 23 42 A..Qa."q.2....#B B1 C1 15 52 D1 F0 24 33 62 72 82 09 0A 16 17 18 ...R..$3br...... 19 1A 25 26 27 28 29 2A 34 35 36 37 38 39 3A 43 ..%&'()*456789:C 44 45 46 47 48 49 4A 53 54 55 56 57 58 59 5A 63 DEFGHIJSTUVWXYZc 64 65 66 67 68 69 6A 73 74 75 76 77 78 79 7A 83 defghijstuvwxyz. 84 85 86 87 88 89 8A 92 93 94 95 96 97 98 99 9A ................ A2 A3 A4 A5 A6 A7 A8 A9 AA B2 B3 B4 B5 B6 B7 B8 ................ B9 BA C2 C3 C4 C5 C6 C7 C8 C9 CA D2 D3 D4 D5 D6 ................ D7 D8 D9 DA E1 E2 E3 E4 E5 E6 E7 E8 E9 EA F1 F2 ................ F3 F4 F5 F6 F7 F8 F9 FA FF C4 00 1F 01 00 03 01 ................ 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 ................ 03 04 05 06 07 08 09 0A 0B FF C4 00 B5 11 00 02 ................ 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 .............w.. 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 .....!1..AQ.aq." 32 81 08 14 42 91 A1 B1 C1 09 23 33 52 F0 15 62 2...B.....#3R..b 72 D1 0A 16 24 34 E1 25 F1 17 18 19 1A 26 27 28 r...$4.%.....&'( 29 2A 35 36 37 38 39 3A 43 44 45 46 47 48 49 4A )*56789:CDEFGHIJ 53 54 55 56 57 58 59 5A 63 64 65 66 67 68 69 6A STUVWXYZcdefghij 73 74 75 76 77 78 79 7A 82 83 84 85 86 87 88 89 stuvwxyz........ 8A 92 93 94 95 96 97 98 99 9A A2 A3 A4 A5 A6 A7 ................ A8 A9 AA B2 B3 B4 B5 B6 B7 B8 B9 BA C2 C3 C4 C5 ................ C6 C7 C8 C9 CA D2 D3 D4 D5 D6 D7 D8 D9 DA E2 E3 ................ E4 E5 E6 E7 E8 E9 EA F2 F3 F4 F5 F6 F7 F8 F9 FA ................ FF DA 00 0C 03 01 00 02 11 03 11 00 3F 00 D7 E8 ............?... 33 C9 A3 1C 8E A7 34 67 91 48 39 F6 F7 AF 64 CA 3.....4g.H9...d. C3 B1 49 8F E7 49 9E 33 9A 51 D7 AE 68 68 76 13 ..I..I.3.Q..hhv. BE 0F E5 46 07 5C 74 A3 19 E9 D7 9A 64 D2 88 93 ...F.\t.....d... 68 00 B1 EA 4F 6A CE AD 45 05 76 69 18 5D 81 75 h...Oj..E.vi.].u 53 C9 CF A0 35 1B B8 24 0C F3 55 5D CB 1C 9E 58 S...5..$..U]...X 71 CF 4C 53 07 9A E4 00 09 EA 06 45 79 95 2B 39 q.LS.......Ey.+9 3D CD D4 12 26 62 33 92 E0 7F 8D 22 4B 80 01 70 =...&b3...."K..p 72 08 19 A6 2D A4 8C 06 F7 D8 47 63 E9 4C 96 14 r...-.....Gc.L.. 8D 47 CD 9E 78 AC 6F 72 BA 16 1A 75 56 F9 90 67 .G..x.or...uV..g D4 55 69 0A C9 92 AD 8F AD 40 64 0B C0 6C E0 55 .Ui......@d..l.U 79 26 20 F0 39 02 A9 22 59 2A CE 62 90 02 70 4F y& .9.."Y*.b..pO 4F 7A B7 1D C0 24 13 83 83 DE B1 E6 63 20 04 83 Oz...$......c .. C1 E2 A2 17 0E 83 04 E3 06 98 92 B2 B9 D0 B5 DF ................ 9A E8 A4 FC A0 E7 1E BF 5A EA 7C 2D 61 A7 6A F0 ........Z.|-a.j. EA 16 FA 81 55 6F 97 C9 2D C6 06 CE 4F E7 9F CA ....Uo..-...O... BC EE 0B A2 58 02 73 93 D3 F2 AE BF C2 D0 47 A8 ....X.s.......G. EB 36 D6 92 B9 11 14 66 60 AD 82 70 57 8C FE 26 .6.....f`..pW..& 9D 90 29 77 2A DF E9 E3 4F 73 0F 9E 92 34 67 1B ..)w*...Os...4g. D7 80 7A 60 E3 B7 5A CC 28 58 02 08 2A 7A 1F 63 ..z`..Z.(X..*z.c D2 BD BA EB C3 DA 45 D6 9C 6C A4 B3 89 60 3D 30 ......E..l...`=0 30 41 EC 73 D7 35 E6 DA D7 84 EF B4 94 F2 AD 2D 0A.s.5.........- A5 BC 8D 08 CB 44 32 D8 C0 EA 07 4C 73 F8 50 27 .....D2....Ls.P' 25 23 98 11 92 41 C1 A9 90 0C 60 80 4F A9 AA CB %#...A....`.O... 72 3C CC 10 50 83 8F 98 11 D7 B7 35 6D 48 2B C3 r<..P......5mH+. 02 73 D3 23 8A 10 D4 5F 61 E0 80 06 3A 01 50 5C .s.#..._a...:.P\ 38 4B 77 77 8Kww =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:37.209807 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x5EA 66.218.79.171:80 -> 192.168.0.102:1068 TCP TTL:49 TOS:0x0 ID:41918 IpLen:20 DgmLen:1500 DF ***A**** Seq: 0x3AA826D6 Ack: 0x8F7AF2C4 Win: 0xFFFF TcpLen: 20 E4 0C 7F E8 42 A4 66 44 19 79 11 40 3C E4 8A BD ....B.fD.y.@<... E1 FD 06 7F 15 DF C7 0C 2B 22 69 B1 B0 37 37 0C ........+"i..77. B8 0C 06 0E C5 F5 27 8E BD 3A FD 69 5D 6A 0E E9 ......'..:.i]j.. 6A 4D 8E 41 FC 28 23 8E B9 A4 24 7B 75 A5 1E BE jM.A.(#...${u... B5 EB EA 72 8B C7 19 E9 DE 93 1F 30 A0 FF 00 9E ...r.......0.... 29 72 36 9E 7B 77 FC 69 37 65 71 AD EC 34 B0 04 )r6.{w.i7eq..4.. E0 FD 7E 95 9D 25 C2 33 12 06 78 A2 FA EB CA 8D ..~..%.3..x..... 94 1F 9D 8F 27 D8 E2 B2 16 66 89 39 39 3D 0E 4D ....'....f.99=.M 79 75 A6 E4 CE 88 D9 22 E4 B7 21 38 5E 05 44 75 yu....."..!8^.Du 26 5E 8C 41 C7 6A AA B1 C9 29 DC 41 23 9A B4 BA &^.A.j...).A#... 79 73 D3 19 EB C5 60 EC 8B 49 8C 7D 4D D8 0E 58 ys....`..I.}M..X 93 DC D5 79 27 77 00 EE 23 F1 EB 5A 29 A3 CA 59 ...y'w..#..Z)..Y 48 07 DF E9 5A 70 E8 25 88 04 64 F4 E4 52 72 48 H...Zp.%..d..RrH A5 06 CE 61 04 DB B8 24 8A B3 14 52 33 28 70 71 ...a...$...R3(pq 9F 4A EA E3 D0 51 00 CA 72 3D AA 55 D2 90 30 05 .J...Q..r=.U..0. 40 FC 2A 7D A2 1A A6 64 59 E9 A5 93 2C A7 1D B8 @.*}...dY...,... A8 6F B4 12 CD 98 86 0E 09 23 1C 7F 9E 2B AB 8E .o.......#...+.. 05 89 40 C5 04 0C F4 C6 39 F4 A9 E7 6D 97 C8 AC ..@.....9...m... 79 C3 C1 25 AC C1 5D 48 C1 03 3E B5 BB A0 EB AF y..%..]H..>..... A5 5D C7 75 1C 31 CB 20 05 42 BF 03 04 8C 9F D2 .].u.1. .B...... B5 75 6D 3A 2B B8 09 00 6E 1F C4 2B 8F 96 36 B7 .um:+...n..+..6. 97 CB 65 21 81 3D 6B 58 CA E6 12 56 3D 93 4F F1 ..e!.=kX...V=.O. CD 85 DC 31 CB 7B B6 3B CF F9 67 6E A7 20 13 DF ...1.{.;..gn. .. 3E BE FE 87 DE B5 AC 6F D2 D6 D5 4C 93 8B CB FB >......o...L.... B6 12 79 50 9E 73 85 1C 0E CA 38 C9 3D 2B C5 34 ..yP.s....8.=+.4 F8 ED A6 95 7E D4 58 47 91 C4 7F 78 F4 00 0F A9 ....~.XG...x.... 23 F4 AE F7 C2 BE 1D BD D2 64 5D 5E E6 48 34 DB #........d]^.H4. 62 BF 23 CD 2E F7 DA FB 70 0E 78 19 FA F5 35 A6 b.#.....p.x...5. 86 56 56 3B 6B 8D 0B 4F D5 60 07 54 D3 6D A4 95 .VV;k..O.`.T.m.. 86 58 63 38 3E C7 83 58 D2 FC 35 F0 CC AF BB EC .Xc8>..X..5..... B2 A7 B2 4C C0 57 4D 65 71 15 D5 A4 73 41 70 2E ...L.WMeq...sAp. 23 61 95 94 63 0D EE 31 C5 58 A4 25 26 8E 66 CF #a..c..1.X.%&.f. E1 F7 86 6C DB 70 D3 12 66 F5 9D 8C 9F A1 38 AE ...l.p..f.....8. 8A 18 22 B6 85 61 82 24 8A 24 18 54 45 0A A3 E8 .."..a.$.$.TE... 05 49 45 02 B9 E2 A4 12 46 47 34 01 82 7E B4 B9 .IE.....FG4..~.. CE 29 70 7B 73 5E C9 9E A2 01 C6 39 FC E9 B2 BA .)p{s^.....9.... C4 9B DC 9C 0E 47 B9 C9 FF 00 1A 77 20 1F CA A8 .....G.....w ... EA F2 11 6A 00 E7 1C 7E 39 AC 6B CA D0 2A 09 DC ...j...~9.k..*.. C3 BD B9 32 4A 5B 39 62 49 FA 0A 7E 9B 64 D7 92 ...2J[9bI..~.d.. E4 82 54 7A FA D5 78 61 33 4C 10 0E 49 C6 7D CE ..Tz..xa3L..I.}. 2B B9 D2 34 D4 B5 B6 51 81 B8 0F 4F AD 79 33 96 +..4...Q...O.y3. 87 55 38 A6 41 06 92 00 DA 54 70 79 AD 08 74 F4 .U8.A....Tpy..t. 1C 00 73 DF 3E B5 7C 20 E8 07 03 AD 4A 8B ED 8A ..s.>.| ....J... E6 72 6C E9 49 22 28 AC 91 79 C0 03 D3 1D FD 6B .rl.I"(..y.....k 41 2D A3 52 A3 03 81 E9 50 86 00 82 49 20 74 15 A-.R....P...I t. 21 90 E0 61 4F 22 B3 72 6C A5 E4 2B A2 02 70 33 !..aO".rl..+..p3 E9 EF 55 64 53 C8 C6 31 CD 4C 5C 91 D0 FE 75 13 ..UdS..1.L\...u. 12 4E 70 47 6A 01 DC A7 33 11 8E 30 39 E6 A0 76 .NpGj...3..09..v 21 B9 E4 1A B1 32 90 73 8E 47 6A AD 2E 76 FD DF !....2.s.Gj..v.. D6 B4 5B 12 F4 22 93 05 3A E3 DA B1 35 5B 11 34 ..[.."..:...5[.4 5E 60 18 20 FA 56 C1 3E BD 41 A8 E5 01 A1 60 D8 ^`. .V.>.A....`. C1 F6 AD 21 A1 94 8E 52 D2 27 86 E6 37 64 2E 11 ...!...R.'..7d.. C1 2A 33 C8 0C 09 FA 70 0F E5 5E D7 A0 41 A4 EA .*3....p..^..A.. 7A 64 17 71 A0 9C 48 A1 F6 4C FE 66 C3 C7 18 3C zd.q..H..L.f...< 0E 6B CA 6C A6 5B 7B D8 C4 AA 19 77 84 39 1E A5 .k.l.[{....w.9.. 46 7F 0C D7 B3 E9 16 76 56 FA 65 B0 B3 8D 04 7E F......vV.e....~ 58 DA E0 0C 9E 3D 6B 74 73 4A C5 E5 5D 80 2A A8 X....=ktsJ..].*. 0A 07 00 71 8F C2 9D 45 14 C8 0A 28 A2 80 3C 54 ...q...E...(... 02 A3 1D 86 41 FE B5 D2 CA E2 28 8B F2 4F 41 9F ....A.....(..OA. 7C 8F F0 AE 6E E6 0D B6 F0 CC F9 F3 1C 02 73 EE |...n.........s. 48 FE 95 C5 89 7D 11 A4 34 45 8D 22 4C 4C 06 71 H....}..4E."LL.q 93 8C 93 5D A5 BB 65 07 39 AF 3C B6 90 A4 D1 10 ...]..e.9.<..... 3A 1C FF 00 2A EF 2C 9B 75 AA BE 7A 8E 39 FA D7 :...*.,.u..z.9.. 04 D5 F5 3A ...: =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:37.209874 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36 192.168.0.102:1068 -> 66.218.79.171:80 TCP TTL:128 TOS:0x0 ID:582 IpLen:20 DgmLen:40 DF ***A**** Seq: 0x8F7AF2C4 Ack: 0x3AA82C8A Win: 0xFFFF TcpLen: 20 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:37.214667 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x5EA 66.218.79.171:80 -> 192.168.0.102:1068 TCP TTL:49 TOS:0x0 ID:41919 IpLen:20 DgmLen:1500 DF ***A**** Seq: 0x3AA82C8A Ack: 0x8F7AF2C4 Win: 0xFFFF TcpLen: 20 29 BB 9A 88 D8 E5 8E 07 BF F2 A8 25 D5 21 84 9F )..........%.!.. 9C 13 8C 60 1A C7 D4 B5 26 47 F2 A2 EA BC 1C 7B ...`....&G.....{ 56 31 85 EE 4A 99 24 20 0E A3 35 8A 85 D9 AB 97 V1..J.$ ..5..... 43 A0 9B C4 96 91 B6 0B 8F C0 F3 4B 0E BD 6F 31 C..........K..o1 1B 5C 0C FA 9E B5 CE 4B 61 6A 10 36 FC B0 23 82 .\.....Kaj.6..#. 73 55 52 34 56 C0 62 0F B1 AB E4 44 A9 33 BD 8E sUR4V.b....D.3.. 73 28 04 12 45 47 79 72 60 8B 39 19 E9 59 9A 14 s(..EGyr`.9..Y.. CF FB C4 62 48 1D 33 F4 A9 35 96 20 0C 1C 8E BF ...bH.3..5. .... 8E 6A 1D 93 34 6F 43 0B 52 D5 AE AE 24 31 C4 C4 .j..4oC.R...$1.. 01 C7 AD 55 B6 D3 2E 2E 24 DC F3 E3 24 9C 13 CF ...U....$...$... E1 4B 2A BA AA B2 A9 C9 19 E9 EF 8A 40 DA 8A 10 .K*.........@... 20 03 9E F8 AD D5 AC 61 AB 2D 9D 35 A2 00 A5 C9 ......a.-.5.... 24 7A FF 00 4A B5 65 3D C2 49 B2 51 90 73 82 2A $z..J.e=.I.Q.s.* 9C 51 6A 0E 14 B8 01 F2 49 AD 38 03 30 1B C6 18 .Qj.....I.8.0... 0E B8 EB 49 BB 0E D7 31 F5 C4 2B 7F 8C 60 30 27 ...I...1..+..`0' 3F 88 AA 11 DB 66 23 26 48 00 F4 CF 5F F3 8A DA ?....f#&H..._... D7 A1 66 92 09 31 C1 C8 27 D3 26 B3 6E 07 D9 90 ..f..1..'.&.n... C5 8C 82 79 FC 29 C7 52 24 88 25 95 DD 55 79 20 ...y.).R$.%..Uy 02 00 FC 68 86 26 EE 3B E6 A1 49 59 46 04 64 F0 ...h.&.;..IYF.d. 79 A9 12 EA 65 3C 42 0F D4 FE B5 A7 23 EC 65 72 y...e.. 01 18 F5 1E BD 29 0F 1C 74 A4 C7 A0 F7 A5 60 4B .....)..t.....`K 52 2D 59 59 8D B0 53 80 72 33 E8 72 31 56 B4 76 R-YY..S.r3.r1V.v 16 C1 ED 89 E1 0E 07 B8 03 AF EB 56 2D 21 8E EF ...........V-!.. 6C 32 E3 20 92 3D BB E6 B3 EE 4F D8 F5 F3 1E 4E l2. .=....O....N D2 4F F4 AF 2B 11 0B 4C ED 83 4D 26 74 F1 02 C0 .O..+..L..M&t... 64 F0 6A 70 A3 39 E9 8E F5 46 DE 42 D1 92 4E 00 d.jp.9...F.B..N. 1F A9 A5 6B A2 01 E7 39 F7 AE 39 2D 4E 85 62 D3 ...k...9..9-N.b. CC A1 08 1F 7A A9 F9 7B 99 99 BA FA FF 00 4A 80 ....z..{......J. DC 95 F9 8F 40 3A 7B D3 60 96 49 50 3B 9C 03 C8 ....@:{.`.IP;... A4 32 C2 F0 09 27 A0 E0 66 91 C0 6B 42 49 00 E7 .2...'..f..kBI.. A0 AC DB 8D 41 E1 72 8C 00 5C F5 3D EA 07 D4 C0 ....A.r..\.=.... 50 03 71 F5 A6 A2 D9 2E 56 43 F0 80 B6 E3 D0 E4 P.q.....VC...... 7A D6 8C 33 AA A2 BF 3C 8C F3 5C CB 5F 09 25 C2 z..3...<..\._.%. B1 3C 8C D6 9C 33 6E 45 04 F0 05 68 E3 64 42 91 .<...3nE...h.dB. B6 26 04 64 37 1D FF 00 1A AF 71 2A E3 03 AE 3A .&.d7.....q*...: F7 AA 0B 31 89 C2 92 4A 9E 94 92 39 C8 E3 27 1C ...1...J...9..'. 54 A4 96 C0 E4 57 BE 73 E5 36 40 C1 A8 F4 49 53 T....W.s.6@...IS FB 33 0D CE 31 8F C4 1A 6D EB 11 03 0E 39 15 5B .3..1...m....9.[ 49 E2 CD 46 46 30 38 FA 8A E9 A5 16 DA 31 9B B1 I..FF08......1.. A8 49 67 C9 E0 92 68 3D 71 92 0F F4 A6 82 41 CF .Ig...h=q.....A. 3C E7 1E F4 00 73 EB CD 7A D1 56 56 39 85 E9 D4 <....s..z.VV9... 9E B4 83 AE 41 A4 3F D6 93 FC 69 E8 1A 12 0E 30 ....A.?...i....0 4E 33 FD 28 00 1E 49 C7 F2 A6 92 72 28 DC 78 E7 N3.(..I....r(.x. A5 31 58 70 FD 69 A7 F4 A4 0C 7A 67 AD 04 9E 3B .1Xp.i....zg...; D1 A0 24 3D 67 6B 76 DE 9D 47 5F A7 AD 55 D7 2E ..$=gkv..G_..U.. E0 B9 9E D2 78 48 DE 78 70 0F 39 24 75 F6 A7 CC ....xH.xp.9$u... C4 46 48 C1 E0 8C 7D 41 1F D6 B9 C6 86 48 DC 33 .FH...}A.....H.3 82 18 91 9E 78 07 23 FC 2B 8B 15 1B AD 0D A0 ED ....x.#.+....... A1 DA DB 4A 7C 90 72 79 F5 A9 63 53 24 A5 4E 70 ...J|.ry..cS$.Np A4 F7 E0 E0 56 5D 95 C8 68 14 11 D3 9C D5 AB 5B ....V]..h......[ AC CD 20 EC 01 03 EA 45 79 92 57 67 4A 95 D0 EB .. ....Ey.WgJ... 99 03 DD 2C 08 3E 45 E5 B1 EA 31 C5 5A 64 65 85 ...,.>E...1.Zde. 72 30 31 C0 AC D9 2E 16 D6 21 23 91 B9 89 25 BF r01......!#...%. A5 57 1E 20 59 26 11 A0 2E E0 E0 0E C4 0A 95 16 .W. Y&.......... C6 E7 64 25 C2 96 9D 8B 8C E0 13 8E DC D6 5B DB ..d%..........[. 3B 48 48 24 02 49 E0 FF 00 2A D9 8B 4E D4 EF E4 ;HH$.I...*..N... 77 8A DC EE 93 2E 32 78 00 0A 74 7A 16 AC 60 0E w.....2x..tz..`. 53 83 8E 4D 68 B4 21 B4 FA 98 F1 5B AC 72 29 6C S..Mh.!....[.r)l F2 39 1E BE F5 AC B2 C0 02 67 83 8C 75 AD 05 F0 .9.......g..u... 9D EB 3C 66 E6 5C 06 52 78 03 8F 41 9A C8 D5 74 .. 0:40:5:58:67:7D type:0x800 len:0x36 192.168.0.102:1068 -> 66.218.79.171:80 TCP TTL:128 TOS:0x0 ID:583 IpLen:20 DgmLen:40 DF ***A**** Seq: 0x8F7AF2C4 Ack: 0x3AA8323E Win: 0xFFFF TcpLen: 20 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:37.231180 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x3C 66.218.79.180:80 -> 192.168.0.102:1070 TCP TTL:49 TOS:0x0 ID:27158 IpLen:20 DgmLen:40 DF ***A***F Seq: 0x3E2671BC Ack: 0x382DF5C5 Win: 0xFFFF TcpLen: 20 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:37.231300 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36 192.168.0.102:1070 -> 66.218.79.180:80 TCP TTL:128 TOS:0x0 ID:592 IpLen:20 DgmLen:40 DF ***A**** Seq: 0x382DF5C5 Ack: 0x3E266D3C Win: 0xFFFF TcpLen: 20 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:37.232376 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x4B6 66.218.79.180:80 -> 192.168.0.102:1070 TCP TTL:49 TOS:0x0 ID:27157 IpLen:20 DgmLen:1192 DF ***AP*** Seq: 0x3E266D3C Ack: 0x382DF5C5 Win: 0xFFFF TcpLen: 20 48 54 54 50 2F 31 2E 31 20 32 30 30 20 4F 4B 0D HTTP/1.1 200 OK. 0A 44 61 74 65 3A 20 54 68 75 2C 20 30 32 20 46 .Date: Thu, 02 F 65 62 20 32 30 30 36 20 31 38 3A 35 35 3A 33 38 eb 2006 18:55:38 20 47 4D 54 0D 0A 50 33 50 3A 20 70 6F 6C 69 63 GMT..P3P: polic 79 72 65 66 3D 22 68 74 74 70 3A 2F 2F 70 33 70 yref="http://p3p 2E 79 61 68 6F 6F 2E 63 6F 6D 2F 77 33 63 2F 70 .yahoo.com/w3c/p 33 70 2E 78 6D 6C 22 2C 20 43 50 3D 22 43 41 4F 3p.xml", CP="CAO 20 44 53 50 20 43 4F 52 20 43 55 52 20 41 44 4D DSP COR CUR ADM 20 44 45 56 20 54 41 49 20 50 53 41 20 50 53 44 DEV TAI PSA PSD 20 49 56 41 69 20 49 56 44 69 20 43 4F 4E 69 20 IVAi IVDi CONi 54 45 4C 6F 20 4F 54 50 69 20 4F 55 52 20 44 45 TELo OTPi OUR DE 4C 69 20 53 41 4D 69 20 4F 54 52 69 20 55 4E 52 Li SAMi OTRi UNR 69 20 50 55 42 69 20 49 4E 44 20 50 48 59 20 4F i PUBi IND PHY O 4E 4C 20 55 4E 49 20 50 55 52 20 46 49 4E 20 43 NL UNI PUR FIN C 4F 4D 20 4E 41 56 20 49 4E 54 20 44 45 4D 20 43 OM NAV INT DEM C 4E 54 20 53 54 41 20 50 4F 4C 20 48 45 41 20 50 NT STA POL HEA P 52 45 20 47 4F 56 22 0D 0A 43 61 63 68 65 2D 43 RE GOV"..Cache-C 6F 6E 74 72 6F 6C 3A 20 6D 61 78 2D 61 67 65 3D ontrol: max-age= 33 31 35 33 36 30 30 30 30 0D 0A 45 78 70 69 72 315360000..Expir 65 73 3A 20 53 75 6E 2C 20 33 31 20 4A 61 6E 20 es: Sun, 31 Jan 32 30 31 36 20 31 38 3A 35 35 3A 33 38 20 47 4D 2016 18:55:38 GM 54 0D 0A 4C 61 73 74 2D 4D 6F 64 69 66 69 65 64 T..Last-Modified 3A 20 54 75 65 2C 20 32 30 20 53 65 70 20 32 30 : Tue, 20 Sep 20 30 35 20 31 38 3A 33 30 3A 31 32 20 47 4D 54 0D 05 18:30:12 GMT. 0A 45 54 61 67 3A 20 22 31 37 35 39 61 2D 32 37 .ETag: "1759a-27 62 2D 34 33 33 30 35 35 33 34 22 0D 0A 41 63 63 b-43305534"..Acc 65 70 74 2D 52 61 6E 67 65 73 3A 20 62 79 74 65 ept-Ranges: byte 73 0D 0A 43 6F 6E 74 65 6E 74 2D 4C 65 6E 67 74 s..Content-Lengt 68 3A 20 36 33 35 0D 0A 43 6F 6E 6E 65 63 74 69 h: 635..Connecti 6F 6E 3A 20 63 6C 6F 73 65 0D 0A 43 6F 6E 74 65 on: close..Conte 6E 74 2D 54 79 70 65 3A 20 61 70 70 6C 69 63 61 nt-Type: applica 74 69 6F 6E 2F 78 2D 6A 61 76 61 73 63 72 69 70 tion/x-javascrip 74 0D 0A 0D 0A 76 61 72 20 79 63 73 64 6F 6E 65 t....var ycsdone 3B 0A 66 75 6E 63 74 69 6F 6E 20 67 65 6F 76 69 ;.function geovi 73 69 74 28 29 0A 7B 0A 20 20 76 61 72 20 7A 3B sit().{. var z; 0A 20 20 69 66 20 28 79 63 73 64 6F 6E 65 29 0A . if (ycsdone). 20 20 20 20 72 65 74 75 72 6E 3B 0A 20 20 7A 3D return;. z= 22 26 72 3D 22 2B 65 73 63 61 70 65 28 64 6F 63 "&r="+escape(doc 75 6D 65 6E 74 2E 72 65 66 65 72 72 65 72 29 3B ument.referrer); 0A 20 20 7A 3D 7A 2B 22 26 62 3D 22 2B 65 73 63 . z=z+"&b="+esc 61 70 65 28 6E 61 76 69 67 61 74 6F 72 2E 61 70 ape(navigator.ap 70 4E 61 6D 65 2B 22 20 22 2B 6E 61 76 69 67 61 pName+" "+naviga 74 6F 72 2E 61 70 70 56 65 72 73 69 6F 6E 29 3B tor.appVersion); 0A 20 20 77 3D 70 61 72 73 65 46 6C 6F 61 74 28 . w=parseFloat( 6E 61 76 69 67 61 74 6F 72 2E 61 70 70 56 65 72 navigator.appVer 73 69 6F 6E 29 3B 0A 20 20 69 66 20 28 77 20 3E sion);. if (w > 20 32 2E 30 29 20 7B 0A 20 20 20 20 7A 3D 7A 2B 2.0) {. z=z+ 22 26 73 3D 22 2B 73 63 72 65 65 6E 2E 77 69 64 "&s="+screen.wid 74 68 2B 22 78 22 2B 73 63 72 65 65 6E 2E 68 65 th+"x"+screen.he 69 67 68 74 3B 0A 20 20 20 20 7A 3D 7A 2B 22 26 ight;. z=z+"& 6F 3D 22 2B 6E 61 76 69 67 61 74 6F 72 2E 70 6C o="+navigator.pl 61 74 66 6F 72 6D 3B 0A 20 20 20 20 76 3D 22 31 atform;. v="1 2E 32 22 3B 0A 20 20 20 20 69 66 20 28 6E 61 76 .2";. if (nav 69 67 61 74 6F 72 2E 61 70 70 4E 61 6D 65 20 21 igator.appName ! 3D 20 22 4E 65 74 73 63 61 70 65 22 29 20 7B 0A = "Netscape") {. 20 20 20 20 20 20 7A 3D 7A 2B 22 26 63 3D 22 2B z=z+"&c="+ 73 63 72 65 65 6E 2E 63 6F 6C 6F 72 44 65 70 74 screen.colorDept 68 3B 0A 20 20 20 20 7D 20 65 6C 73 65 20 7B 0A h;. } else {. 20 20 20 20 20 20 7A 3D 7A 2B 22 26 63 3D 22 2B z=z+"&c="+ 73 63 72 65 65 6E 2E 70 69 78 65 6C 44 65 70 74 screen.pixelDept 68 0A 20 20 20 20 7D 0A 20 20 20 20 7A 3D 7A 2B h. }. z=z+ 22 26 6A 3D 22 2B 6E 61 76 69 67 61 74 6F 72 2E "&j="+navigator. 6A 61 76 61 45 6E 61 62 6C 65 64 28 29 3B 0A 20 javaEnabled();. 20 7D 20 65 6C 73 65 20 7B 0A 20 20 20 20 76 3D } else {. v= 31 2E 30 3B 0A 20 20 7D 0A 20 20 7A 3D 7A 2B 22 1.0;. }. z=z+" 26 76 3D 22 2B 76 3B 0A 20 20 64 6F 63 75 6D 65 &v="+v;. docume 6E 74 2E 77 72 69 74 65 6C 6E 28 22 3C 49 4D 47 nt.writeln(""); 0A 20 20 79 63 73 64 6F 6E 65 3D 31 3B 0A 7D 0A . ycsdone=1;.}. =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:37.232466 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36 192.168.0.102:1070 -> 66.218.79.180:80 TCP TTL:128 TOS:0x0 ID:593 IpLen:20 DgmLen:40 DF ***A**** Seq: 0x382DF5C5 Ack: 0x3E2671BD Win: 0xFB7F TcpLen: 20 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:37.247978 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36 192.168.0.102:1070 -> 66.218.79.180:80 TCP TTL:128 TOS:0x0 ID:618 IpLen:20 DgmLen:40 DF ***A***F Seq: 0x382DF5C5 Ack: 0x3E2671BD Win: 0xFB7F TcpLen: 20 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ [Client opens connection on local port 1072] 02/02-13:55:37.251832 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x3E 192.168.0.102:1072 -> 66.218.77.64:80 TCP TTL:128 TOS:0x0 ID:625 IpLen:20 DgmLen:48 DF ******S* Seq: 0x9EB403E2 Ack: 0x0 Win: 0xFFFF TcpLen: 28 TCP Options (4) => MSS: 1460 NOP NOP SackOK =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:37.257940 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x3E 192.168.0.102:1074 -> 66.218.77.72:80 TCP TTL:128 TOS:0x0 ID:632 IpLen:20 DgmLen:48 DF ******S* Seq: 0x52A71B10 Ack: 0x0 Win: 0xFFFF TcpLen: 28 TCP Options (4) => MSS: 1460 NOP NOP SackOK =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:37.308786 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x5EA 66.218.79.171:80 -> 192.168.0.102:1068 TCP TTL:49 TOS:0x0 ID:42368 IpLen:20 DgmLen:1500 DF ***A**** Seq: 0x3AA8323E Ack: 0x8F7AF2C4 Win: 0xFFFF TcpLen: 20 8B 76 4C A0 80 B1 AE 09 24 9F E9 4F 74 2B A4 58 .vL.....$..Ot+.X 77 88 AA 8C F2 0F AF 6A 56 CF 90 84 90 72 39 3F w......jV....r9? D2 B9 D8 BE D3 0E C0 E4 E4 F2 01 ED CD 6C 09 49 .............l.I B3 53 9E 72 06 49 FC C7 D6 95 AC 17 4C 8A E6 51 .S.r.I......L..Q E5 90 D9 3D 78 F4 AA DA 4B 15 8F 69 04 E3 03 19 ...=x...K..i.... F4 15 0D DC A3 70 C6 79 39 EB 52 E8 E0 91 21 EB .....p.y9.R...!. 82 47 E8 2B 7A 3B A3 19 EA 6C 83 83 F4 E2 97 A1 .G.+z;...l...... A6 F4 C7 BF 34 16 20 E6 BD 55 AA 30 69 0B D7 90 ....4. ..U.0i... 33 CF 4F 4A 43 C1 03 9A 4E DE F4 64 82 06 0F 34 3.OJC...N..d...4 ED 62 92 14 F0 47 BD 18 E3 AF 7A 33 C7 4C 62 81 .b...G....z3.Lb. F9 E2 9D C0 5C 63 F3 A4 38 C0 CE 41 CD 2E 78 EF ....\c..8..A..x. 48 7D 85 21 36 26 DC E0 9E 84 E4 E6 A8 EA 11 6E H}.!6&.........n 85 48 1C 82 00 FA 67 35 78 9C 7B 66 98 EA 1B 00 .H....g5x.{f.... E7 07 9E 45 67 38 B6 87 16 EE 51 B7 7D B1 05 24 ...Eg8....Q.}..$ 8C 1E 7F 2A B3 67 21 5B 90 4F 42 7A FB 62 A1 B9 ...*.g![.OBz.b.. 4D CF 95 07 04 F6 1F 4A 84 C8 63 60 BC 82 07 F5 M......J..c`.... AF 2E A4 5A 6D 1D 31 7A 13 DE AB CA 76 8E 84 8C ...Zm.1z....v... 7E 7F FD 7A 2D B4 90 16 29 D7 EF 63 9E 38 FF 00 ~..z-...)..c.8.. 3C 54 6B 71 E6 85 50 39 27 07 E9 9A DD B5 60 A8 .....H.ry..X. FC F3 28 18 18 E9 C7 BD 6F 59 93 E5 F2 BC 63 FA ..(.....oY....c. 56 F4 95 E4 65 27 A1 70 75 04 76 FE B4 87 39 C6 V...e'.pu.v...9. 3D BA 51 BB 18 C8 C8 CD 38 9C 63 3C FB 57 AA B6 =.Q.....8.c<.W.. 32 43 47 03 27 34 BC F4 E7 FA 52 13 4B B8 60 0F 2CG.'4....R.K.`. 6A 4C AB 0B 92 47 43 D7 1D 28 03 1D BB 1A 39 00 jL...GC..(....9. 13 9A 38 E2 82 75 0C 73 9C 62 94 E3 23 23 3E A2 ..8..u.s.b..##>. 8E E0 02 3F FA D4 64 70 46 28 E8 31 0E 31 9F 4A ...?..dpF(.1.1.J 6B 74 E8 39 FF 00 0A 70 C1 18 39 EB 9F 7A 46 E4 kt.9...p..9..zF. 75 A5 A5 81 3D 48 A7 61 E5 F0 70 72 7F 9D 63 CE u...=H.a..pr..c. 70 C3 2D C1 F7 FA 56 B4 D1 82 AA 06 73 8E 6B 26 p.-...V.....s.k& 68 4A B7 39 3C FA F4 AF 3A BA F7 8D 93 D0 97 4F hJ.9<...:......O 60 24 04 F1 CF 06 B5 83 39 75 20 10 00 C1 3E A6 `$......9u ...>. B1 61 70 BE 59 27 EE F3 81 5B F6 CA F7 5E 4A 20 .ap.Y'...[...^J 00 10 58 93 D7 8A E6 6B 43 58 BB 8A CF E6 82 D9 ..X....kCX...... 24 B3 7A D5 55 D8 B3 C9 2C 84 60 71 F8 1E D5 A2 $.z.U...,.`q.... B0 92 CE A1 4E C5 25 57 8E 71 D6 AB DF 59 F9 30 ....N.%W.q...Y.0 EF 20 E5 8E 71 ED 9F FE B5 46 C5 BD 81 82 85 57 . ..q....F.....W 52 30 4F 3E D9 A6 BE E2 C0 10 70 38 FC 2A 1B 42 R0O>......p8.*.B D3 22 E0 12 08 04 03 5A B1 5B 01 6D 23 91 F3 0E .".....Z.[.m#... 7A 7D 69 D9 B2 5B EE 73 D7 40 E0 F3 C0 3D 71 58 z}i..[.s.@...=qX F3 00 AD D7 1C D6 E6 AA 44 2C 40 C1 CF 5C 56 34 ........D,@..\V4 70 B4 8C 32 30 BC 62 B4 4A C8 CA 4E E4 B6 70 97 p..20.b.J..N..p. 2A D8 23 3C 0F CE B6 E1 4D AA 01 1C 63 A7 E0 6A *.#<....M...c..j 8D A4 65 58 29 53 82 72 6B 4C 60 01 ED 5D 74 23 ..eX)S.rkL`..]t# AD CC A4 C4 C9 2D C7 61 C5 28 1D 3D 7A D1 D0 8F .....-.a.(.=z... 71 FE 45 00 9E A4 72 6B BF 62 10 99 39 23 27 FC q.E...rk.b..9#'. F7 A3 27 20 60 FD 69 4F 07 AF E9 FA D1 EE 4D 26 ..' `.iO......M& 50 A4 7D 45 18 3F 86 29 47 04 74 C0 34 71 91 41 P.}E.?.)G.t.4q.A 3A 88 41 00 67 22 8E 3B E7 EB 4A 7B 0E D9 A8 A5 :.A.g".;..J{.... 96 38 54 19 1F 19 E0 00 32 49 C8 C0 03 BD 26 EC .8T.....2I....&. 34 9B 24 19 C8 CE 73 44 51 4F 77 7B 15 95 A4 46 4.$...sDQOw{...F 6B A9 8E 11 01 C6 07 72 4F 60 3A 92 6B AA D0 FC k......rO`:.k... 10 D7 F6 F0 5C EA EF 24 3E 6A EF 5B 58 F2 30 3F ....\..$>j.[X.0? DB 3C 1C FB 57 5D A3 78 57 49 D0 65 92 6B 2B 7C .<..W].xWI.e.k+| 4D 20 C1 91 CE E6 03 D0 1F 4A E7 A9 88 4B 44 52 M .......J...KDR 8A EA 79 CC 9A 64 10 4F 3C 02 47 9A 68 1C C4 EF ..y..d.O<.G.h... 8C 26 40 04 E0 77 1C 8A E7 F5 0B 43 1B 31 04 F5 .&@..w.....C.1.. ED EB 9A ED 2E 2D DA DB 51 BE B7 64 24 AC A5 81 .....-..Q..d$... 3C E4 10 3A 9A CB BA B6 57 0C 08 CF A5 79 95 2B <..:....W....y.+ 39 4B 53 B1 41 59 34 71 61 0E F1 C9 23 3C D6 BE 9KS.AY4qa...#<.. 99 A8 98 75 18 8E 72 81 4A 80 7D 0E 29 B3 D9 15 ...u..r.J.}.)... 62 C0 1E BD 0D 40 96 C1 9C 10 08 60 73 92 7F CF b....@.....`s... A5 52 77 46 6E 2D 3B A3 B4 B1 68 E6 86 E5 B2 00 .RwFn-;...h..... 24 1E 3E 9F E3 55 2F A2 77 D3 C3 15 27 03 04 E7 $.>..U/.w...'... DE B3 2C 6F E4 B3 42 AD 92 A4 60 9E BD 78 FF 00 ..,o..B...`..x.. F5 55 E9 6F CA 58 2D B9 C9 C0 18 0D D7 8F 5F 7A .U.o.X-......._z 96 87 A9 97 68 EF 13 01 1E 39 20 72 33 DA B4 EE ....h....9 r3... 25 58 6D 55 59 F0 1D 79 E7 BE 7F FA D5 92 65 00 %XmUY..y......e. 80 8A 70 30 08 FA D5 6B 89 65 B9 2A 8A 00 51 D0 ..p0...k.e.*..Q. 93 CE 2A D2 D0 4D BD 86 5F B8 9D D4 70 70 38 1E ..*..M.._...pp8. BC F5 A4 B5 B6 3B 01 23 38 14 E8 ED 70 72 79 27 .....;.#8...pry' 9E 7B 8A BD 14 41 40 03 91 DF F9 D0 DD 86 92 4B .{...A@........K 53 4F C3 FA 52 6B 73 C9 68 25 F2 66 89 72 84 0C SO..Rks.h%.f.r.. E7 80 7A 53 AE B4 0D 56 CA 59 16 5B 56 75 53 80 ..zS...V.Y.[VuS. EB D0 8F 5C 7A D6 B7 C3 EB 37 7B FD 47 50 C7 EE ...\z....7{.GP.. D4 08 90 9E B9 D8 0F 1E D5 DD C8 C5 ED CA 93 92 ................ 79 E7 A7 7A D6 9D 49 45 5D 18 C9 2B 9E 3C 51 80 y..z..IE]..+. 0:15:F2:8:8D:AB type:0x800 len:0x385 66.218.79.171:80 -> 192.168.0.102:1068 TCP TTL:49 TOS:0x0 ID:42369 IpLen:20 DgmLen:887 DF ***AP**F Seq: 0x3AA837F2 Ack: 0x8F7AF2C4 Win: 0xFFFF TcpLen: 20 28 3F 78 0C 8F F1 AA C3 04 E1 48 3D B0 2B 65 35 (?x.......H=.+e5 2D 99 2D 31 57 A0 CD 32 47 48 C6 E7 60 A3 3D 49 -.-1W..2GH..`.=I C6 7D 07 BE 4D 5A D2 F4 EB ED 72 7F 2B 4A 84 48 .}..MZ....r.+J.H 8B 8D F3 C9 91 12 67 07 19 C7 27 07 FC 6B D0 B4 ......g...'..k.. 2F 04 69 FA 53 47 73 73 FE 9B 7C A3 FD 6C A3 21 /.i.SGss..|..l.! 49 EB B5 7B 74 A8 A9 5E 31 2C E2 34 5F 0D 6A FA I..{t..^1,.4_.j. F1 49 62 8F EC 76 2C 72 6E 26 04 33 2E 3F 85 7F .Ib..v,rn&.3.?.. 91 FC 6B D0 34 6F 07 69 1A 28 57 8E 01 3D C8 EB ..k.4o.i.(W..=.. 3C DF 33 67 DB B0 FC 2B 7C 74 E3 A5 23 02 7A 1C <.3g...+|t..#.z. 7A D7 14 EA CA 60 44 CA 05 D2 36 0E 4A 30 CF A7 z....`D...6.J0.. 22 A6 A4 38 1C 9A 5A C8 0E 57 C4 FA 7B 24 D1 EA "..8..Z..W..{$.. 31 82 50 0D 92 28 E3 A9 1F 31 FA 62 B9 49 B0 C3 1.P..(...1.b.I.. 72 90 41 19 07 B1 CF 4A F5 37 45 92 36 47 50 CA r.A....J.7E.6GP. C3 04 1E F5 E7 BA EE 87 73 A3 CD E6 DB C6 D3 D9 ........s....... 1E 70 A0 96 4E 98 18 FC CD 65 38 5D DD 1D 14 EA .p..N....e8].... 69 CA CE 7A 48 F2 70 40 DD 8E C2 AA B5 B0 DD D3 i..zH.p@........ 8F A5 5E 57 8A 64 05 1C 90 06 7A F3 F8 D2 94 04 ..^W.d....z..... E4 82 0F 6A 85 75 B9 BB D8 A8 B0 2E D1 9C 71 E9 ...j.u........q. 4C 30 AE 4E 41 E7 B9 AB 5B 40 20 1E D5 19 C6 3D L0.NA...[@ ....= A8 4D 93 64 53 30 A2 8C 63 AF 26 9B E5 01 C8 E9 .M.dS0..c.&..... 56 59 41 39 00 77 E6 A2 66 50 4E E2 00 E7 92 70 VYA9.w..fPN....p 2B 44 DD 89 62 2A 61 72 7F 3A 6A AC F7 37 B0 59 +D..b*ar.:j..7.Y 5A 46 64 B9 95 80 00 02 70 01 19 27 1D 00 07 39 ZFd.....p..'...9 AB 56 96 97 FA 9C 82 3D 3A D2 49 72 46 64 60 55 .V.....=:.IrFd`U 14 7A E7 BF E1 FD 6B BE F0 E7 85 A0 D0 A2 12 BB .z....k......... F9 B7 D2 A9 F3 AE 58 72 49 18 C0 F4 1C 55 46 2D ......XrI....UF- BD 48 9C 92 5A 1A 3A 16 95 1E 8B A3 DB E9 D0 9D .H..Z.:......... E6 21 87 7F EF 37 20 9F D6 AF 49 19 D8 47 00 91 .!...7 ...I..G.. 80 07 EA 6A 54 5D A7 E5 E8 38 E2 94 AE E0 58 8C ...jT]...8....X. 11 C0 F7 F7 AD 9E 86 3B B2 AD A8 02 25 53 9E 00 .......;....%S.. 1F 85 3C A9 12 63 A6 78 04 F1 4E 86 31 8C F3 91 ..<..c.x..N.1... ED 52 32 E4 03 CE 40 C7 4A 8B 15 64 88 5A 11 82 .R2...@.J..d.Z.. AE 15 D7 A9 0E 32 2B 2B 50 F0 96 9F A8 E4 88 D6 .....2++P....... 09 0F 46 41 D0 FA FE 95 B8 14 10 3E 98 15 32 AE ..FA.......>..2. D5 C5 09 B5 B0 A5 61 96 D6 D0 59 DB A4 16 D0 A4 ......a...Y..... 50 A0 C2 A2 2E 00 A9 68 A2 91 01 45 23 12 14 95 P......h...E#... 5D C7 D3 38 A5 A0 02 8A 28 A0 02 82 32 30 68 A2 ]..8....(...20h. 80 30 35 3F 09 E9 5A 93 99 1A 23 6F 38 39 F3 62 .05?..Z...#o89.b 3B 4F F9 E2 B0 9F C0 F7 D1 71 6D A8 47 2A 76 32 ;O.......qm.G*v2 AF 35 DE 53 4A 00 72 38 C5 26 93 2D 54 92 EA 79 .5.SJ.r8.&.-T..y AC FE 11 F1 08 C8 48 6D 24 1D 8F 9A 45 56 3E 11 ......Hm$...EV>. F1 1C A4 1F 22 D9 3D 49 90 D7 A8 34 41 C6 D2 48 ....".=I...4A..H 15 0C 96 EE 7E 55 76 03 1D 73 42 82 2B DA CB B9 ....~Uv..sB.+... E7 B0 78 0A FE 42 A6 FF 00 53 8A 1E E5 21 1C 9F ..x..B...S...!.. C4 D6 DD 9F 85 B4 4D 3D 94 3C 4D 79 38 3D 65 39 ......M=. 0:40:5:58:67:7D type:0x800 len:0x36 192.168.0.102:1068 -> 66.218.79.171:80 TCP TTL:128 TOS:0x0 ID:633 IpLen:20 DgmLen:40 DF ***A**** Seq: 0x8F7AF2C4 Ack: 0x3AA83B42 Win: 0xFFFF TcpLen: 20 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:37.311344 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36 192.168.0.102:1068 -> 66.218.79.171:80 TCP TTL:128 TOS:0x0 ID:642 IpLen:20 DgmLen:40 DF ***A***F Seq: 0x8F7AF2C4 Ack: 0x3AA83B42 Win: 0xFFFF TcpLen: 20 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:37.348372 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x3C 66.218.77.64:80 -> 192.168.0.102:1072 TCP TTL:49 TOS:0x0 ID:33913 IpLen:20 DgmLen:44 DF ***A**S* Seq: 0x6AA954C9 Ack: 0x9EB403E3 Win: 0xFFFF TcpLen: 24 TCP Options (1) => MSS: 1460 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:37.348526 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36 192.168.0.102:1072 -> 66.218.77.64:80 TCP TTL:128 TOS:0x0 ID:645 IpLen:20 DgmLen:40 DF ***A**** Seq: 0x9EB403E3 Ack: 0x6AA954CA Win: 0xFFFF TcpLen: 20 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:37.349126 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x3C 66.218.79.180:80 -> 192.168.0.102:1070 TCP TTL:49 TOS:0x0 ID:27920 IpLen:20 DgmLen:40 DF ***A**** Seq: 0x3E2671BD Ack: 0x382DF5C6 Win: 0xFFFF TcpLen: 20 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ [Request web bug] 02/02-13:55:37.349725 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x1FD 192.168.0.102:1072 -> 66.218.77.64:80 TCP TTL:128 TOS:0x0 ID:648 IpLen:20 DgmLen:495 DF ***AP*** Seq: 0x9EB403E3 Ack: 0x6AA954CA Win: 0xFFFF TcpLen: 20 47 45 54 20 2F 76 69 73 69 74 2E 67 69 66 3F 26 GET /visit.gif?& 72 3D 26 62 3D 4E 65 74 73 63 61 70 65 25 32 30 r=&b=Netscape%20 35 2E 30 25 32 30 25 32 38 57 69 6E 64 6F 77 73 5.0%20%28Windows 25 33 42 25 32 30 65 6E 2D 55 53 25 32 39 26 73 %3B%20en-US%29&s 3D 31 30 32 34 78 37 36 38 26 6F 3D 57 69 6E 33 =1024x768&o=Win3 32 26 63 3D 33 32 26 6A 3D 74 72 75 65 26 76 3D 2&c=32&j=true&v= 31 2E 32 20 48 54 54 50 2F 31 2E 31 0D 0A 48 6F 1.2 HTTP/1.1..Ho 73 74 3A 20 76 69 73 69 74 2E 67 65 6F 63 69 74 st: visit.geocit 69 65 73 2E 63 6F 6D 0D 0A 55 73 65 72 2D 41 67 ies.com..User-Ag 65 6E 74 3A 20 4D 6F 7A 69 6C 6C 61 2F 35 2E 30 ent: Mozilla/5.0 20 28 57 69 6E 64 6F 77 73 3B 20 55 3B 20 57 69 (Windows; U; Wi 6E 64 6F 77 73 20 4E 54 20 35 2E 31 3B 20 65 6E ndows NT 5.1; en 2D 55 53 3B 20 72 76 3A 31 2E 38 29 20 47 65 63 -US; rv:1.8) Gec 6B 6F 2F 32 30 30 35 31 31 31 31 20 46 69 72 65 ko/20051111 Fire 66 6F 78 2F 31 2E 35 0D 0A 41 63 63 65 70 74 3A fox/1.5..Accept: 20 69 6D 61 67 65 2F 70 6E 67 2C 2A 2F 2A 3B 71 image/png,*/*;q 3D 30 2E 35 0D 0A 41 63 63 65 70 74 2D 4C 61 6E =0.5..Accept-Lan 67 75 61 67 65 3A 20 65 6E 2D 75 73 2C 65 6E 3B guage: en-us,en; 71 3D 30 2E 35 0D 0A 2D 2D 2D 2D 2D 2D 2D 2D 2D q=0.5..--------- 2D 2D 2D 2D 2D 2D 3A 20 2D 2D 2D 2D 2D 2D 2D 2D ------: -------- 2D 2D 2D 2D 0D 0A 41 63 63 65 70 74 2D 43 68 61 ----..Accept-Cha 72 73 65 74 3A 20 49 53 4F 2D 38 38 35 39 2D 31 rset: ISO-8859-1 2C 75 74 66 2D 38 3B 71 3D 30 2E 37 2C 2A 3B 71 ,utf-8;q=0.7,*;q 3D 30 2E 37 0D 0A 4B 65 65 70 2D 41 6C 69 76 65 =0.7..Keep-Alive 3A 20 33 30 30 0D 0A 43 6F 6E 6E 65 63 74 69 6F : 300..Connectio 6E 3A 20 6B 65 65 70 2D 61 6C 69 76 65 0D 0A 2D n: keep-alive..- 2D 2D 2D 2D 2D 2D 3A 20 2D 2D 2D 2D 3A 2D 2D 2D ------: ----:--- 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ---------------- 2D 2D 2D 0D 0A 0D 0A ---.... =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ [Client opens connection on local port 1074] 02/02-13:55:37.355017 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x3C 66.218.77.72:80 -> 192.168.0.102:1074 TCP TTL:49 TOS:0x0 ID:63736 IpLen:20 DgmLen:44 ***A**S* Seq: 0x7C8875D Ack: 0x52A71B11 Win: 0xFFFF TcpLen: 24 TCP Options (1) => MSS: 1460 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:37.355167 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36 192.168.0.102:1074 -> 66.218.77.72:80 TCP TTL:128 TOS:0x0 ID:649 IpLen:20 DgmLen:40 DF ***A**** Seq: 0x52A71B11 Ack: 0x7C8875E Win: 0xFFFF TcpLen: 20 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:37.356915 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x1B5 192.168.0.102:1074 -> 66.218.77.72:80 TCP TTL:128 TOS:0x0 ID:652 IpLen:20 DgmLen:423 DF ***AP*** Seq: 0x52A71B11 Ack: 0x7C8875E Win: 0xFFFF TcpLen: 20 47 45 54 20 2F 73 65 72 76 3F 73 3D 37 36 30 30 GET /serv?s=7600 31 34 30 34 26 74 3D 31 31 33 38 39 30 36 35 33 1404&t=113890653 37 20 48 54 54 50 2F 31 2E 31 0D 0A 48 6F 73 74 7 HTTP/1.1..Host 3A 20 67 65 6F 2E 79 61 68 6F 6F 2E 63 6F 6D 0D : geo.yahoo.com. 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 4D 6F 7A .User-Agent: Moz 69 6C 6C 61 2F 35 2E 30 20 28 57 69 6E 64 6F 77 illa/5.0 (Window 73 3B 20 55 3B 20 57 69 6E 64 6F 77 73 20 4E 54 s; U; Windows NT 20 35 2E 31 3B 20 65 6E 2D 55 53 3B 20 72 76 3A 5.1; en-US; rv: 31 2E 38 29 20 47 65 63 6B 6F 2F 32 30 30 35 31 1.8) Gecko/20051 31 31 31 20 46 69 72 65 66 6F 78 2F 31 2E 35 0D 111 Firefox/1.5. 0A 41 63 63 65 70 74 3A 20 69 6D 61 67 65 2F 70 .Accept: image/p 6E 67 2C 2A 2F 2A 3B 71 3D 30 2E 35 0D 0A 41 63 ng,*/*;q=0.5..Ac 63 65 70 74 2D 4C 61 6E 67 75 61 67 65 3A 20 65 cept-Language: e 6E 2D 75 73 2C 65 6E 3B 71 3D 30 2E 35 0D 0A 2D n-us,en;q=0.5..- 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 3A 20 --------------: 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 0D 0A 41 63 ------------..Ac 63 65 70 74 2D 43 68 61 72 73 65 74 3A 20 49 53 cept-Charset: IS 4F 2D 38 38 35 39 2D 31 2C 75 74 66 2D 38 3B 71 O-8859-1,utf-8;q 3D 30 2E 37 2C 2A 3B 71 3D 30 2E 37 0D 0A 4B 65 =0.7,*;q=0.7..Ke 65 70 2D 41 6C 69 76 65 3A 20 33 30 30 0D 0A 43 ep-Alive: 300..C 6F 6E 6E 65 63 74 69 6F 6E 3A 20 6B 65 65 70 2D onnection: keep- 61 6C 69 76 65 0D 0A 2D 2D 2D 2D 2D 2D 2D 3A 20 alive..-------: 2D 2D 2D 2D 3A 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ----:----------- 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 0D 0A 0D 0A -----------.... =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:37.411249 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x3C 66.218.79.171:80 -> 192.168.0.102:1068 TCP TTL:49 TOS:0x0 ID:43026 IpLen:20 DgmLen:40 DF ***A**** Seq: 0x3AA83B42 Ack: 0x8F7AF2C5 Win: 0xFFFF TcpLen: 20 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:37.457933 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x1B9 66.218.77.72:80 -> 192.168.0.102:1074 TCP TTL:49 TOS:0x0 ID:63822 IpLen:20 DgmLen:427 DF ***AP*** Seq: 0x7C8875E Ack: 0x52A71C90 Win: 0xFFFF TcpLen: 20 48 54 54 50 2F 31 2E 31 20 32 30 30 20 4F 4B 0D HTTP/1.1 200 OK. 0A 44 61 74 65 3A 20 54 68 75 2C 20 30 32 20 46 .Date: Thu, 02 F 65 62 20 32 30 30 36 20 31 38 3A 35 35 3A 33 38 eb 2006 18:55:38 20 47 4D 54 0D 0A 50 33 50 3A 20 70 6F 6C 69 63 GMT..P3P: polic 79 72 65 66 3D 22 68 74 74 70 3A 2F 2F 70 33 70 yref="http://p3p 2E 79 61 68 6F 6F 2E 63 6F 6D 2F 77 33 63 2F 70 .yahoo.com/w3c/p 33 70 2E 78 6D 6C 22 2C 20 43 50 3D 22 43 41 4F 3p.xml", CP="CAO 20 44 53 50 20 43 4F 52 20 43 55 52 20 41 44 4D DSP COR CUR ADM 20 44 45 56 20 54 41 49 20 50 53 41 20 50 53 44 DEV TAI PSA PSD 20 49 56 41 69 20 49 56 44 69 20 43 4F 4E 69 20 IVAi IVDi CONi 54 45 4C 6F 20 4F 54 50 69 20 4F 55 52 20 44 45 TELo OTPi OUR DE 4C 69 20 53 41 4D 69 20 4F 54 52 69 20 55 4E 52 Li SAMi OTRi UNR 69 20 50 55 42 69 20 49 4E 44 20 50 48 59 20 4F i PUBi IND PHY O 4E 4C 20 55 4E 49 20 50 55 52 20 46 49 4E 20 43 NL UNI PUR FIN C 4F 4D 20 4E 41 56 20 49 4E 54 20 44 45 4D 20 43 OM NAV INT DEM C 4E 54 20 53 54 41 20 50 4F 4C 20 48 45 41 20 50 NT STA POL HEA P 52 45 20 47 4F 56 22 0D 0A 43 61 63 68 65 2D 43 RE GOV"..Cache-C 6F 6E 74 72 6F 6C 3A 20 6E 6F 2D 63 61 63 68 65 ontrol: no-cache 0D 0A 43 6F 6E 6E 65 63 74 69 6F 6E 3A 20 63 6C ..Connection: cl 6F 73 65 0D 0A 54 72 61 6E 73 66 65 72 2D 45 6E ose..Transfer-En 63 6F 64 69 6E 67 3A 20 63 68 75 6E 6B 65 64 0D coding: chunked. 0A 43 6F 6E 74 65 6E 74 2D 54 79 70 65 3A 20 69 .Content-Type: i 6D 61 67 65 2F 67 69 66 0D 0A 0D 0A 37 20 20 20 mage/gif....7 20 20 20 0D 0A 47 49 46 38 39 61 01 0D 0A 30 0D ..GIF89a...0. 0A 0D 0A ... =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:37.458008 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x3C 66.218.77.72:80 -> 192.168.0.102:1074 TCP TTL:49 TOS:0x0 ID:63823 IpLen:20 DgmLen:40 DF ***A***F Seq: 0x7C888E1 Ack: 0x52A71C90 Win: 0xFFFF TcpLen: 20 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:37.458086 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36 192.168.0.102:1074 -> 66.218.77.72:80 TCP TTL:128 TOS:0x0 ID:653 IpLen:20 DgmLen:40 DF ***A**** Seq: 0x52A71C90 Ack: 0x7C888E2 Win: 0xFE7C TcpLen: 20 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:37.461681 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36 192.168.0.102:1074 -> 66.218.77.72:80 TCP TTL:128 TOS:0x0 ID:664 IpLen:20 DgmLen:40 DF ***A***F Seq: 0x52A71C90 Ack: 0x7C888E2 Win: 0xFE7C TcpLen: 20 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:37.546483 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x3C 66.218.77.64:80 -> 192.168.0.102:1072 TCP TTL:49 TOS:0x0 ID:34267 IpLen:20 DgmLen:40 DF ***A**** Seq: 0x6AA954CA Ack: 0x9EB405AA Win: 0xFEDD TcpLen: 20 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:37.558871 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x3C 66.218.77.72:80 -> 192.168.0.102:1074 TCP TTL:49 TOS:0x0 ID:63914 IpLen:20 DgmLen:40 DF ***A**** Seq: 0x7C888E2 Ack: 0x52A71C91 Win: 0xFFFF TcpLen: 20 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ [NetBIOS packet (unrelated to HTTP session)] 02/02-13:55:41.045922 0:15:F2:8:8D:AB -> FF:FF:FF:FF:FF:FF type:0x800 len:0xF8 192.168.0.102:138 -> 192.168.0.255:138 UDP TTL:128 TOS:0x0 ID:665 IpLen:20 DgmLen:234 Len: 206 11 0E 80 2A C0 A8 00 66 00 8A 00 C0 00 00 20 45 ...*...f...... E 4E 45 42 46 45 46 45 44 43 43 41 43 41 43 41 43 NEBFEFEDCCACACAC 41 43 41 43 41 43 41 43 41 43 41 43 41 41 41 00 ACACACACACACAAA. 20 41 42 41 43 46 50 46 50 45 4E 46 44 45 43 46 ABACFPFPENFDECF 43 45 50 46 48 46 44 45 46 46 50 46 50 41 43 41 CEPFHFDEFFPFPACA 42 00 FF 53 4D 42 25 00 00 00 00 00 00 00 00 00 B..SMB%......... 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 11 00 00 26 00 00 00 00 00 00 00 00 00 E8 .....&.......... 03 00 00 00 00 00 00 00 00 26 00 56 00 03 00 01 .........&.V.... 00 01 00 02 00 37 00 5C 4D 41 49 4C 53 4C 4F 54 .....7.\MAILSLOT 5C 42 52 4F 57 53 45 00 0C 00 C0 27 09 00 4D 53 \BROWSE....'..MS 48 4F 4D 45 00 00 00 00 98 7B 93 02 00 90 03 0A HOME.....{...... 00 10 00 80 00 90 F8 7F 4D 41 54 54 32 00 ........MATT2. =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:42.280684 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x3C 66.218.77.64:80 -> 192.168.0.102:1072 TCP TTL:49 TOS:0x0 ID:44573 IpLen:20 DgmLen:40 DF ***A***F Seq: 0x6AA955EB Ack: 0x9EB405AA Win: 0xFFFF TcpLen: 20 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:42.280802 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36 192.168.0.102:1072 -> 66.218.77.64:80 TCP TTL:128 TOS:0x0 ID:666 IpLen:20 DgmLen:40 DF ***A**** Seq: 0x9EB405AA Ack: 0x6AA954CA Win: 0xFFFF TcpLen: 20 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:42.280877 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x157 66.218.77.64:80 -> 192.168.0.102:1072 TCP TTL:49 TOS:0x0 ID:44572 IpLen:20 DgmLen:329 DF ***AP*** Seq: 0x6AA954CA Ack: 0x9EB405AA Win: 0xFFFF TcpLen: 20 48 54 54 50 2F 31 2E 30 20 32 30 30 20 4F 4B 0D HTTP/1.0 200 OK. 0A 44 61 74 65 3A 20 54 68 75 2C 20 30 32 20 46 .Date: Thu, 02 F 65 62 20 32 30 30 36 20 31 38 3A 35 35 3A 34 33 eb 2006 18:55:43 20 47 4D 54 0D 0A 50 72 61 67 6D 61 3A 20 6E 6F GMT..Pragma: no 2D 63 61 63 68 65 0D 0A 43 6F 6E 6E 65 63 74 69 -cache..Connecti 6F 6E 3A 20 63 6C 6F 73 65 0D 0A 43 61 63 68 65 on: close..Cache 2D 63 6F 6E 74 72 6F 6C 3A 20 6D 61 78 2D 61 67 -control: max-ag 65 3D 30 0D 0A 45 78 70 69 72 65 73 3A 20 54 68 e=0..Expires: Th 75 2C 20 30 32 20 46 65 62 20 32 30 30 36 20 31 u, 02 Feb 2006 1 38 3A 35 35 3A 34 33 20 47 4D 54 0D 0A 43 6F 6E 8:55:43 GMT..Con 74 65 6E 74 2D 74 79 70 65 3A 20 69 6D 61 67 65 tent-type: image 2F 67 69 66 0D 0A 43 6F 6E 74 65 6E 74 2D 6C 65 /gif..Content-le 6E 67 74 68 3A 20 38 35 0D 0A 0D 0A 47 49 46 38 ngth: 85....GIF8 39 61 01 00 01 00 E3 00 00 00 00 00 00 00 00 00 9a.............. 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 21 F9 04 01 00 00 00 .........!...... 00 2C 00 00 00 00 01 00 01 00 00 04 02 10 44 00 .,............D. 3B ; =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:42.280962 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36 192.168.0.102:1072 -> 66.218.77.64:80 TCP TTL:128 TOS:0x0 ID:667 IpLen:20 DgmLen:40 DF ***A**** Seq: 0x9EB405AA Ack: 0x6AA955EC Win: 0xFEDE TcpLen: 20 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:42.305102 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36 192.168.0.102:1072 -> 66.218.77.64:80 TCP TTL:128 TOS:0x0 ID:688 IpLen:20 DgmLen:40 DF ***A***F Seq: 0x9EB405AA Ack: 0x6AA955EC Win: 0xFEDE TcpLen: 20 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ [Client opens connection on local port 1076 to request /favicon.ico (not found)] 02/02-13:55:42.305852 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x3E 192.168.0.102:1076 -> 66.218.79.171:80 TCP TTL:128 TOS:0x0 ID:689 IpLen:20 DgmLen:48 DF ******S* Seq: 0x61F85FB4 Ack: 0x0 Win: 0xFFFF TcpLen: 28 TCP Options (4) => MSS: 1460 NOP NOP SackOK =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:42.400832 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x3C 66.218.77.64:80 -> 192.168.0.102:1072 TCP TTL:49 TOS:0x0 ID:44942 IpLen:20 DgmLen:40 DF ***A**** Seq: 0x6AA955EC Ack: 0x9EB405AB Win: 0xFFFF TcpLen: 20 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:42.403020 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x3C 66.218.79.171:80 -> 192.168.0.102:1076 TCP TTL:49 TOS:0x0 ID:11232 IpLen:20 DgmLen:44 DF ***A**S* Seq: 0x3A51CF6B Ack: 0x61F85FB5 Win: 0xFFFF TcpLen: 24 TCP Options (1) => MSS: 1460 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:42.403121 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36 192.168.0.102:1076 -> 66.218.79.171:80 TCP TTL:128 TOS:0x0 ID:690 IpLen:20 DgmLen:40 DF ***A**** Seq: 0x61F85FB5 Ack: 0x3A51CF6C Win: 0xFFFF TcpLen: 20 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:42.403902 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x1A2 192.168.0.102:1076 -> 66.218.79.171:80 TCP TTL:128 TOS:0x0 ID:693 IpLen:20 DgmLen:404 DF ***AP*** Seq: 0x61F85FB5 Ack: 0x3A51CF6C Win: 0xFFFF TcpLen: 20 47 45 54 20 2F 66 61 76 69 63 6F 6E 2E 69 63 6F GET /favicon.ico 20 48 54 54 50 2F 31 2E 31 0D 0A 48 6F 73 74 3A HTTP/1.1..Host: 20 77 77 77 2E 6D 61 74 74 6D 61 68 6F 6E 65 79 www.mattmahoney 2E 6E 65 74 0D 0A 55 73 65 72 2D 41 67 65 6E 74 .net..User-Agent 3A 20 4D 6F 7A 69 6C 6C 61 2F 35 2E 30 20 28 57 : Mozilla/5.0 (W 69 6E 64 6F 77 73 3B 20 55 3B 20 57 69 6E 64 6F indows; U; Windo 77 73 20 4E 54 20 35 2E 31 3B 20 65 6E 2D 55 53 ws NT 5.1; en-US 3B 20 72 76 3A 31 2E 38 29 20 47 65 63 6B 6F 2F ; rv:1.8) Gecko/ 32 30 30 35 31 31 31 31 20 46 69 72 65 66 6F 78 20051111 Firefox 2F 31 2E 35 0D 0A 41 63 63 65 70 74 3A 20 69 6D /1.5..Accept: im 61 67 65 2F 70 6E 67 2C 2A 2F 2A 3B 71 3D 30 2E age/png,*/*;q=0. 35 0D 0A 41 63 63 65 70 74 2D 4C 61 6E 67 75 61 5..Accept-Langua 67 65 3A 20 65 6E 2D 75 73 2C 65 6E 3B 71 3D 30 ge: en-us,en;q=0 2E 35 0D 0A 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D .5..------------ 2D 2D 2D 3A 20 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ---: ----------- 2D 0D 0A 41 63 63 65 70 74 2D 43 68 61 72 73 65 -..Accept-Charse 74 3A 20 49 53 4F 2D 38 38 35 39 2D 31 2C 75 74 t: ISO-8859-1,ut 66 2D 38 3B 71 3D 30 2E 37 2C 2A 3B 71 3D 30 2E f-8;q=0.7,*;q=0. 37 0D 0A 4B 65 65 70 2D 41 6C 69 76 65 3A 20 33 7..Keep-Alive: 3 30 30 0D 0A 43 6F 6E 6E 65 63 74 69 6F 6E 3A 20 00..Connection: 6B 65 65 70 2D 61 6C 69 76 65 0D 0A 43 6F 6F 6B keep-alive..Cook 69 65 3A 20 42 58 3D 34 6C 6C 62 6F 62 31 31 75 ie: BX=4llbob11u 34 6B 6E 6F 26 62 3D 32 0D 0A 0D 0A 4kno&b=2.... =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:42.508105 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x3C 66.218.79.171:80 -> 192.168.0.102:1076 TCP TTL:49 TOS:0x0 ID:11887 IpLen:20 DgmLen:40 DF ***A***F Seq: 0x3A51D32B Ack: 0x61F86121 Win: 0xFFFF TcpLen: 20 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:42.508217 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36 192.168.0.102:1076 -> 66.218.79.171:80 TCP TTL:128 TOS:0x0 ID:694 IpLen:20 DgmLen:40 DF ***A**** Seq: 0x61F86121 Ack: 0x3A51CF6C Win: 0xFFFF TcpLen: 20 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:42.508856 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x3F5 66.218.79.171:80 -> 192.168.0.102:1076 TCP TTL:49 TOS:0x0 ID:11886 IpLen:20 DgmLen:999 DF ***AP*** Seq: 0x3A51CF6C Ack: 0x61F86121 Win: 0xFFFF TcpLen: 20 48 54 54 50 2F 31 2E 31 20 34 30 34 20 4E 6F 74 HTTP/1.1 404 Not 20 46 6F 75 6E 64 0D 0A 44 61 74 65 3A 20 54 68 Found..Date: Th 75 2C 20 30 32 20 46 65 62 20 32 30 30 36 20 31 u, 02 Feb 2006 1 38 3A 35 35 3A 34 33 20 47 4D 54 0D 0A 50 33 50 8:55:43 GMT..P3P 3A 20 70 6F 6C 69 63 79 72 65 66 3D 22 68 74 74 : policyref="htt 70 3A 2F 2F 70 33 70 2E 79 61 68 6F 6F 2E 63 6F p://p3p.yahoo.co 6D 2F 77 33 63 2F 70 33 70 2E 78 6D 6C 22 2C 20 m/w3c/p3p.xml", 43 50 3D 22 43 41 4F 20 44 53 50 20 43 4F 52 20 CP="CAO DSP COR 43 55 52 20 41 44 4D 20 44 45 56 20 54 41 49 20 CUR ADM DEV TAI 50 53 41 20 50 53 44 20 49 56 41 69 20 49 56 44 PSA PSD IVAi IVD 69 20 43 4F 4E 69 20 54 45 4C 6F 20 4F 54 50 69 i CONi TELo OTPi 20 4F 55 52 20 44 45 4C 69 20 53 41 4D 69 20 4F OUR DELi SAMi O 54 52 69 20 55 4E 52 69 20 50 55 42 69 20 49 4E TRi UNRi PUBi IN 44 20 50 48 59 20 4F 4E 4C 20 55 4E 49 20 50 55 D PHY ONL UNI PU 52 20 46 49 4E 20 43 4F 4D 20 4E 41 56 20 49 4E R FIN COM NAV IN 54 20 44 45 4D 20 43 4E 54 20 53 54 41 20 50 4F T DEM CNT STA PO 4C 20 48 45 41 20 50 52 45 20 47 4F 56 22 0D 0A L HEA PRE GOV".. 58 2D 48 6F 73 74 3A 20 70 31 77 33 2E 67 65 6F X-Host: p1w3.geo 2E 73 63 64 2E 79 61 68 6F 6F 2E 63 6F 6D 0D 0A .scd.yahoo.com.. 58 2D 49 4E 4B 54 2D 55 52 49 3A 20 68 74 74 70 X-INKT-URI: http 3A 2F 2F 75 73 2E 67 65 6F 63 69 74 69 65 73 2E ://us.geocities. 63 6F 6D 2F 73 65 72 76 65 72 2D 65 72 72 6F 72 com/server-error 73 2F 70 64 5F 6E 6F 74 5F 66 6F 75 6E 64 2E 68 s/pd_not_found.h 74 6D 6C 0D 0A 58 2D 49 4E 4B 54 2D 53 49 54 45 tml..X-INKT-SITE 3A 20 68 74 74 70 3A 2F 2F 75 73 2E 67 65 6F 63 : http://us.geoc 69 74 69 65 73 2E 63 6F 6D 2F 73 65 72 76 65 72 ities.com/server 2D 65 72 72 6F 72 73 0D 0A 4C 61 73 74 2D 4D 6F -errors..Last-Mo 64 69 66 69 65 64 3A 20 54 75 65 2C 20 32 30 20 dified: Tue, 20 53 65 70 20 32 30 30 35 20 31 38 3A 32 32 3A 30 Sep 2005 18:22:0 39 20 47 4D 54 0D 0A 45 54 61 67 3A 20 22 31 32 9 GMT..ETag: "12 32 39 33 2D 64 64 2D 34 33 33 30 35 33 35 31 3B 293-dd-43305351; 34 33 65 31 62 31 64 36 22 0D 0A 41 63 63 65 70 43e1b1d6"..Accep 74 2D 52 61 6E 67 65 73 3A 20 62 79 74 65 73 0D t-Ranges: bytes. 0A 43 6F 6E 74 65 6E 74 2D 4C 65 6E 67 74 68 3A .Content-Length: 20 33 36 33 0D 0A 43 6F 6E 6E 65 63 74 69 6F 6E 363..Connection 3A 20 63 6C 6F 73 65 0D 0A 43 6F 6E 74 65 6E 74 : close..Content 2D 54 79 70 65 3A 20 74 65 78 74 2F 68 74 6D 6C -Type: text/html 0D 0A 0D 0A 3C 68 74 6D 6C 3E 3C 68 65 61 64 3E .... 0A 3C 74 69 74 6C 65 3E 34 30 34 20 4E 6F 74 20 .404 Not 46 6F 75 6E 64 3C 2F 74 69 74 6C 65 3E 0A 3C 2F Found..

    4E 6F 74 20 46 6F 75 6E 64 3C 2F 68 31 3E 0A 3C Not Found

    .< 70 3E 54 68 65 20 72 65 71 75 65 73 74 65 64 20 p>The requested 55 52 4C 20 68 74 74 70 3A 2F 2F 3C 21 2D 2D 23 URL http:// was n 6F 74 20 66 6F 75 6E 64 20 6F 6E 20 74 68 69 73 ot found on this 20 73 65 72 76 65 72 2E 3C 2F 70 3E 0A 3C 68 72 server.

    .
    . 0A 3C 21 2D 2D 20 74 65 78 74 20 62 65 6C 6F 77 ...1.. =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:42.508943 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36 192.168.0.102:1076 -> 66.218.79.171:80 TCP TTL:128 TOS:0x0 ID:695 IpLen:20 DgmLen:40 DF ***A**** Seq: 0x61F86121 Ack: 0x3A51D32C Win: 0xFC40 TcpLen: 20 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:42.514497 0:15:F2:8:8D:AB -> 0:40:5:58:67:7D type:0x800 len:0x36 192.168.0.102:1076 -> 66.218.79.171:80 TCP TTL:128 TOS:0x0 ID:707 IpLen:20 DgmLen:40 DF ***A***F Seq: 0x61F86121 Ack: 0x3A51D32C Win: 0xFC40 TcpLen: 20 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 02/02-13:55:42.608962 0:40:5:58:67:7D -> 0:15:F2:8:8D:AB type:0x800 len:0x3C 66.218.79.171:80 -> 192.168.0.102:1076 TCP TTL:49 TOS:0x0 ID:12445 IpLen:20 DgmLen:40 DF ***A**** Seq: 0x3A51D32C Ack: 0x61F86122 Win: 0xFFFF TcpLen: 20 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ ===============================================================================