ETHER: ----- Ether Header ----- ETHER: ETHER: Packet 175 arrived at 10:16:45.03 ETHER: Packet size = 84 bytes ETHER: Destination = 0:e0:1e:de:72:d6, ETHER: Source = 8:0:20:73:5e:c6, Sun ETHER: Ethertype = 0800 (IP) ETHER: IP: ----- IP Header ----- IP: IP: Version = 4 IP: Header length = 20 bytes IP: Type of service = 0x00 IP: xxx. .... = 0 (precedence) IP: ...0 .... = normal delay IP: .... 0... = normal throughput IP: .... .0.. = normal reliability IP: Total length = 70 bytes IP: Identification = 2621 IP: Flags = 0x4 IP: .1.. .... = do not fragment IP: ..0. .... = last fragment IP: Fragment offset = 0 bytes IP: Time to live = 255 seconds/hops IP: Protocol = 6 (TCP) IP: Header checksum = 198f IP: Source address = 88.66.44.35, ftpserv.arcesio.net IP: Destination address = 88.66.44.33, cliente.arcesio.net IP: No options IP: TCP: ----- TCP Header ----- TCP: TCP: Source port = 21 TCP: Destination port = 1427 TCP: Sequence number = 693113812 TCP: Acknowledgement number = 9095908 TCP: Data offset = 20 bytes TCP: Flags = 0x18 TCP: ..0. .... = No urgent pointer TCP: ...1 .... = Acknowledgement TCP: .... 1... = Push TCP: .... .0.. = No reset TCP: .... ..0. = No Syn TCP: .... ...0 = No Fin TCP: Window = 9112 TCP: Checksum = 0x690e TCP: Urgent pointer = 0 TCP: No options TCP: FTP: ----- FTP: ----- FTP: FTP: "200 PORT command successful.\r\n" FTP: 0: 00e0 1ede 72d6 0800 2073 5ec6 0800 4500 ....r... s^...E. 16: 0046 0a3d 4000 ff06 198f a8b0 0319 a8b0 .F.=@........... 32: 036c 0015 0593 2950 13d4 008a cae4 5018 .l....)P......P. 48: 2398 690e 0000 3230 3020 504f 5254 2063 #.i...200 PORT c 64: 6f6d 6d61 6e64 2073 7563 6365 7373 6675 ommand successfu 80: 6c2e 0d0a l... ETHER: ----- Ether Header ----- ETHER: ETHER: Packet 176 arrived at 10:16:45.29 ETHER: Packet size = 60 bytes ETHER: Destination = 8:0:20:73:5e:c6, Sun ETHER: Source = 0:e0:1e:de:72:d6, ETHER: Ethertype = 0800 (IP) ETHER: IP: ----- IP Header ----- IP: IP: Version = 4 IP: Header length = 20 bytes IP: Type of service = 0x00 IP: xxx. .... = 0 (precedence) IP: ...0 .... = normal delay IP: .... 0... = normal throughput IP: .... .0.. = normal reliability IP: Total length = 40 bytes IP: Identification = 45086 IP: Flags = 0x4 IP: .1.. .... = do not fragment IP: ..0. .... = last fragment IP: Fragment offset = 0 bytes IP: Time to live = 127 seconds/hops IP: Protocol = 6 (TCP) IP: Header checksum = f3cb IP: Source address = 88.66.44.33, cliente.arcesio.net IP: Destination address = 88.66.44.35, ftpserv.arcesio.net IP: No options IP: TCP: ----- TCP Header ----- TCP: TCP: Source port = 1427 TCP: Destination port = 21 (FTP) TCP: Sequence number = 9095908 TCP: Acknowledgement number = 693113842 TCP: Data offset = 20 bytes TCP: Flags = 0x10 TCP: ..0. .... = No urgent pointer TCP: ...1 .... = Acknowledgement TCP: .... 0... = No push TCP: .... .0.. = No reset TCP: .... ..0. = No Syn TCP: .... ...0 = No Fin TCP: Window = 8376 TCP: Checksum = 0x28de TCP: Urgent pointer = 0 TCP: No options TCP: FTP: ----- FTP: ----- FTP: FTP: "" FTP: 0: 0800 2073 5ec6 00e0 1ede 72d6 0800 4500 .. s^.....r...E. 16: 0028 b01e 4000 7f06 f3cb a8b0 036c a8b0 .(..@........l.. 32: 0319 0593 0015 008a cae4 2950 13f2 5010 ..........)P..P. 48: 20b8 28de 0000 491f 5820 6874 .(...I.X ht ETHER: ----- Ether Header ----- ETHER: ETHER: Packet 178 arrived at 10:16:45.37 ETHER: Packet size = 73 bytes ETHER: Destination = 8:0:20:73:5e:c6, Sun ETHER: Source = 0:e0:1e:de:72:d6, ETHER: Ethertype = 0800 (IP) ETHER: IP: ----- IP Header ----- IP: IP: Version = 4 IP: Header length = 20 bytes IP: Type of service = 0x00 IP: xxx. .... = 0 (precedence) IP: ...0 .... = normal delay IP: .... 0... = normal throughput IP: .... .0.. = normal reliability IP: Total length = 59 bytes IP: Identification = 45342 IP: Flags = 0x4 IP: .1.. .... = do not fragment IP: ..0. .... = last fragment IP: Fragment offset = 0 bytes IP: Time to live = 127 seconds/hops IP: Protocol = 6 (TCP) IP: Header checksum = f2b8 IP: Source address = 88.66.44.33, cliente.arcesio.net IP: Destination address = 88.66.44.35, ftpserv.arcesio.net IP: No options IP: TCP: ----- TCP Header ----- TCP: TCP: Source port = 1427 TCP: Destination port = 21 (FTP) TCP: Sequence number = 9095908 TCP: Acknowledgement number = 693113842 TCP: Data offset = 20 bytes TCP: Flags = 0x18 TCP: ..0. .... = No urgent pointer TCP: ...1 .... = Acknowledgement TCP: .... 1... = Push TCP: .... .0.. = No reset TCP: .... ..0. = No Syn TCP: .... ...0 = No Fin TCP: Window = 8376 TCP: Checksum = 0x2bfb TCP: Urgent pointer = 0 TCP: No options TCP: FTP: ----- FTP: ----- FTP: FTP: "RETR snoop777.txt\r\n" FTP: 0: 0800 2073 5ec6 00e0 1ede 72d6 0800 4500 .. s^.....r...E. 16: 003b b11e 4000 7f06 f2b8 a8b0 036c a8b0 .;..@........l.. 32: 0319 0593 0015 008a cae4 2950 13f2 5018 ..........)P..P. 48: 20b8 2bfb 0000 5245 5452 206f 7363 6172 .+û..RETR oscar 64: 3737 372e 7478 740d 0a0d 777.txt.. ETHER: ----- Ether Header ----- ETHER: ETHER: Packet 179 arrived at 10:16:45.37 ETHER: Packet size = 58 bytes ETHER: Destination = 0:e0:1e:de:72:d6, ETHER: Source = 8:0:20:73:5e:c6, Sun ETHER: Ethertype = 0800 (IP) ETHER: IP: ----- IP Header ----- IP: IP: Version = 4 IP: Header length = 20 bytes IP: Type of service = 0x00 IP: xxx. .... = 0 (precedence) IP: ...0 .... = normal delay IP: .... 0... = normal throughput IP: .... .0.. = normal reliability IP: Total length = 44 bytes IP: Identification = 2623 IP: Flags = 0x4 IP: .1.. .... = do not fragment IP: ..0. .... = last fragment IP: Fragment offset = 0 bytes IP: Time to live = 255 seconds/hops IP: Protocol = 6 (TCP) IP: Header checksum = 19a7 IP: Source address = 88.66.44.35, ftpserv.arcesio.net IP: Destination address = 88.66.44.33, cliente.arcesio.net IP: No options IP: TCP: ----- TCP Header ----- TCP: TCP: Source port = 20 TCP: Destination port = 1428 TCP: Sequence number = 698090670 TCP: Acknowledgement number = 0 TCP: Data offset = 24 bytes TCP: Flags = 0x02 TCP: ..0. .... = No urgent pointer TCP: ...0 .... = No acknowledgement TCP: .... 0... = No push TCP: .... .0.. = No reset TCP: .... ..1. = Syn TCP: .... ...0 = No Fin TCP: Window = 24820 TCP: Checksum = 0xab5a TCP: Urgent pointer = 0 TCP: Options: (4 bytes) TCP: - Maximum segment size = 1460 bytes TCP: FTP-DATA: ----- FTP-DATA: ----- FTP-DATA: FTP-DATA: "" FTP-DATA: 0: 00e0 1ede 72d6 0800 2073 5ec6 0800 4500 ....r... s^...E. 16: 002c 0a3f 4000 ff06 19a7 a8b0 0319 a8b0 .,.?@........... 32: 036c 0014 0594 299c 04ae 0000 0000 6002 .l....).......`. 48: 60f4 ab5a 0000 0204 05b4 `..Z...... ETHER: ----- Ether Header ----- ETHER: ETHER: Packet 180 arrived at 10:16:45.42 ETHER: Packet size = 54 bytes ETHER: Destination = 0:e0:1e:de:72:d6, ETHER: Source = 8:0:20:73:5e:c6, Sun ETHER: Ethertype = 0800 (IP) ETHER: IP: ----- IP Header ----- IP: IP: Version = 4 IP: Header length = 20 bytes IP: Type of service = 0x00 IP: xxx. .... = 0 (precedence) IP: ...0 .... = normal delay IP: .... 0... = normal throughput IP: .... .0.. = normal reliability IP: Total length = 40 bytes IP: Identification = 2624 IP: Flags = 0x4 IP: .1.. .... = do not fragment IP: ..0. .... = last fragment IP: Fragment offset = 0 bytes IP: Time to live = 255 seconds/hops IP: Protocol = 6 (TCP) IP: Header checksum = 19aa IP: Source address = 88.66.44.35, ftpserv.arcesio.net IP: Destination address = 88.66.44.33, cliente.arcesio.net IP: No options IP: TCP: ----- TCP Header ----- TCP: TCP: Source port = 21 TCP: Destination port = 1427 TCP: Sequence number = 693113842 TCP: Acknowledgement number = 9095927 TCP: Data offset = 20 bytes TCP: Flags = 0x10 TCP: ..0. .... = No urgent pointer TCP: ...1 .... = Acknowledgement TCP: .... 0... = No push TCP: .... .0.. = No reset TCP: .... ..0. = No Syn TCP: .... ...0 = No Fin TCP: Window = 9112 TCP: Checksum = 0x25eb TCP: Urgent pointer = 0 TCP: No options TCP: FTP: ----- FTP: ----- FTP: FTP: "" FTP: 0: 00e0 1ede 72d6 0800 2073 5ec6 0800 4500 ....r... s^...E. 16: 0028 0a40 4000 ff06 19aa a8b0 0319 a8b0 .(.@@........... 32: 036c 0015 0593 2950 13f2 008a caf7 5010 .l....)P.....÷P. 48: 2398 25eb 0000 #.%... ETHER: ----- Ether Header ----- ETHER: ETHER: Packet 181 arrived at 10:16:45.50 ETHER: Packet size = 60 bytes ETHER: Destination = 8:0:20:73:5e:c6, Sun ETHER: Source = 0:e0:1e:de:72:d6, ETHER: Ethertype = 0800 (IP) ETHER: IP: ----- IP Header ----- IP: IP: Version = 4 IP: Header length = 20 bytes IP: Type of service = 0x00 IP: xxx. .... = 0 (precedence) IP: ...0 .... = normal delay IP: .... 0... = normal throughput IP: .... .0.. = normal reliability IP: Total length = 44 bytes IP: Identification = 45598 IP: Flags = 0x4 IP: .1.. .... = do not fragment IP: ..0. .... = last fragment IP: Fragment offset = 0 bytes IP: Time to live = 127 seconds/hops IP: Protocol = 6 (TCP) IP: Header checksum = f1c7 IP: Source address = 88.66.44.33, cliente.arcesio.net IP: Destination address = 88.66.44.35, ftpserv.arcesio.net IP: No options IP: TCP: ----- TCP Header ----- TCP: TCP: Source port = 1428 TCP: Destination port = 20 (FTP-DATA) TCP: Sequence number = 9123010 TCP: Acknowledgement number = 698090671 TCP: Data offset = 24 bytes TCP: Flags = 0x12 TCP: ..0. .... = No urgent pointer TCP: ...1 .... = Acknowledgement TCP: .... 0... = No push TCP: .... .0.. = No reset TCP: .... ..1. = Syn TCP: .... ...0 = No Fin TCP: Window = 8576 TCP: Checksum = 0xb90c TCP: Urgent pointer = 0 TCP: Options: (4 bytes) TCP: - Maximum segment size = 536 bytes TCP: FTP-DATA: ----- FTP-DATA: ----- FTP-DATA: FTP-DATA: "" FTP-DATA: 0: 0800 2073 5ec6 00e0 1ede 72d6 0800 4500 .. s^.....r...E. 16: 002c b21e 4000 7f06 f1c7 a8b0 036c a8b0 .,..@........l.. 32: 0319 0594 0014 008b 34c2 299c 04af 6012 ........4.)...`. 48: 2180 b90c 0000 0204 0218 fd57 !..........W ETHER: ----- Ether Header ----- ETHER: ETHER: Packet 182 arrived at 10:16:45.50 ETHER: Packet size = 54 bytes ETHER: Destination = 0:e0:1e:de:72:d6, ETHER: Source = 8:0:20:73:5e:c6, Sun ETHER: Ethertype = 0800 (IP) ETHER: IP: ----- IP Header ----- IP: IP: Version = 4 IP: Header length = 20 bytes IP: Type of service = 0x00 IP: xxx. .... = 0 (precedence) IP: ...0 .... = normal delay IP: .... 0... = normal throughput IP: .... .0.. = normal reliability IP: Total length = 40 bytes IP: Identification = 2625 IP: Flags = 0x4 IP: .1.. .... = do not fragment IP: ..0. .... = last fragment IP: Fragment offset = 0 bytes IP: Time to live = 255 seconds/hops IP: Protocol = 6 (TCP) IP: Header checksum = 19a9 IP: Source address = 88.66.44.35, ftpserv.arcesio.net IP: Destination address = 88.66.44.33, cliente.arcesio.net IP: No options IP: TCP: ----- TCP Header ----- TCP: TCP: Source port = 20 TCP: Destination port = 1428 TCP: Sequence number = 698090671 TCP: Acknowledgement number = 9123011 TCP: Data offset = 20 bytes TCP: Flags = 0x10 TCP: ..0. .... = No urgent pointer TCP: ...1 .... = Acknowledgement TCP: .... 0... = No push TCP: .... .0.. = No reset TCP: .... ..0. = No Syn TCP: .... ...0 = No Fin TCP: Window = 25192 TCP: Checksum = 0x8c45 TCP: Urgent pointer = 0 TCP: No options TCP: FTP-DATA: ----- FTP-DATA: ----- FTP-DATA: FTP-DATA: "" FTP-DATA: 0: 00e0 1ede 72d6 0800 2073 5ec6 0800 4500 ....r... s^...E. 16: 0028 0a41 4000 ff06 19a9 a8b0 0319 a8b0 .(.A@........... 32: 036c 0014 0594 299c 04af 008b 34c3 5010 .l....).....4.P. 48: 6268 8c45 0000 bh.E..