ETHER: ----- Ether Header ----- ETHER: ETHER: Packet 183 arrived at 10:16:45.50 ETHER: Packet size = 133 bytes ETHER: Destination = 0:e0:1e:de:72:d6, ETHER: Source = 8:0:20:73:5e:c6, Sun ETHER: Ethertype = 0800 (IP) ETHER: IP: ----- IP Header ----- IP: IP: Version = 4 IP: Header length = 20 bytes IP: Type of service = 0x00 IP: xxx. .... = 0 (precedence) IP: ...0 .... = normal delay IP: .... 0... = normal throughput IP: .... .0.. = normal reliability IP: Total length = 119 bytes IP: Identification = 2626 IP: Flags = 0x4 IP: .1.. .... = do not fragment IP: ..0. .... = last fragment IP: Fragment offset = 0 bytes IP: Time to live = 255 seconds/hops IP: Protocol = 6 (TCP) IP: Header checksum = 1959 IP: Source address = 88.66.44.35, ftpserv.arcesio.net IP: Destination address = 88.66.44.33, cliente.arcesio.net IP: No options IP: TCP: ----- TCP Header ----- TCP: TCP: Source port = 21 TCP: Destination port = 1427 TCP: Sequence number = 693113842 TCP: Acknowledgement number = 9095927 TCP: Data offset = 20 bytes TCP: Flags = 0x18 TCP: ..0. .... = No urgent pointer TCP: ...1 .... = Acknowledgement TCP: .... 1... = Push TCP: .... .0.. = No reset TCP: .... ..0. = No Syn TCP: .... ...0 = No Fin TCP: Window = 9112 TCP: Checksum = 0xbd1d TCP: Urgent pointer = 0 TCP: No options TCP: FTP: ----- FTP: ----- FTP: FTP: "150 ASCII data connection for snoop777.txt (88.66.44.33,14" FTP: 0: 00e0 1ede 72d6 0800 2073 5ec6 0800 4500 ....r... s^...E. 16: 0077 0a42 4000 ff06 1959 a8b0 0319 a8b0 .w.B@....Y...... 32: 036c 0015 0593 2950 13f2 008a caf7 5018 .l....)P.....÷P. 48: 2398 bd1d 0000 3135 3020 4153 4349 4920 #.....150 ASCII 64: 6461 7461 2063 6f6e 6e65 6374 696f 6e20 data connection 80: 666f 7220 6f73 6361 7237 3737 2e74 7874 for snoop777.txt 96: 2028 3136 382e 3137 362e 332e 3130 382c (88.66.44.33,14 112: 3134 3238 2920 2839 3632 3120 6279 7465 ..28) (9621 byte 128: 7329 2e0d 0a00 s)... ETHER: ----- Ether Header ----- ETHER: ETHER: Packet 184 arrived at 10:16:45.51 ETHER: Packet size = 590 bytes ETHER: Destination = 0:e0:1e:de:72:d6, ETHER: Source = 8:0:20:73:5e:c6, Sun ETHER: Ethertype = 0800 (IP) ETHER: IP: ----- IP Header ----- IP: IP: Version = 4 IP: Header length = 20 bytes IP: Type of service = 0x00 IP: xxx. .... = 0 (precedence) IP: ...0 .... = normal delay IP: .... 0... = normal throughput IP: .... .0.. = normal reliability IP: Total length = 576 bytes IP: Identification = 2627 IP: Flags = 0x4 IP: .1.. .... = do not fragment IP: ..0. .... = last fragment IP: Fragment offset = 0 bytes IP: Time to live = 255 seconds/hops IP: Protocol = 6 (TCP) IP: Header checksum = 178f IP: Source address = 88.66.44.35, ftpserv.arcesio.net IP: Destination address = 88.66.44.33, cliente.arcesio.net IP: No options IP: TCP: ----- TCP Header ----- TCP: TCP: Source port = 20 TCP: Destination port = 1428 TCP: Sequence number = 698090671 TCP: Acknowledgement number = 9123011 TCP: Data offset = 20 bytes TCP: Flags = 0x18 TCP: ..0. .... = No urgent pointer TCP: ...1 .... = Acknowledgement TCP: .... 1... = Push TCP: .... .0.. = No reset TCP: .... ..0. = No Syn TCP: .... ...0 = No Fin TCP: Window = 25192 TCP: Checksum = 0x18e8 TCP: Urgent pointer = 0 TCP: No options TCP: FTP-DATA: ----- FTP-DATA: ----- FTP-DATA: FTP-DATA: "ETHER: ----- Ether Header -----\r\nETHER: \r\nETHER: Packet 1" FTP-DATA: 0: 00e0 1ede 72d6 0800 2073 5ec6 0800 4500 ....r... s^...E. 16: 0240 0a43 4000 ff06 178f a8b0 0319 a8b0 .@.C@........... 32: 036c 0014 0594 299c 04af 008b 34c3 5018 .l....).....4.P. 48: 6268 18e8 0000 4554 4845 523a 2020 2d2d bh....ETHER: -- 64: 2d2d 2d20 4574 6865 7220 4865 6164 6572 --- Ether Header 80: 202d 2d2d 2d2d 0d0a 4554 4845 523a 2020 -----..ETHER: 96: 0d0a 4554 4845 523a 2020 5061 636b 6574 ..ETHER: Packet 112: 2031 2061 7272 6976 6564 2061 7420 3130 1 arrived at 10 128: 3a31 333a 3237 2e31 340d 0a45 5448 4552 :13:27.14..ETHER 144: 3a20 2050 6163 6b65 7420 7369 7a65 203d : Packet size = 160: 2036 3020 6279 7465 730d 0a45 5448 4552 60 bytes..ETHER 176: 3a20 2044 6573 7469 6e61 7469 6f6e 203d : Destination = 192: 2066 663a 6666 3a66 663a 6666 3a66 663a ff:ff:ff:ff:ff: 208: 6666 2c20 2862 726f 6164 6361 7374 290d ff, (broadcast). 224: 0a45 5448 4552 3a20 2053 6f75 7263 6520 .ETHER: Source 240: 2020 2020 203d 2032 3a36 303a 3863 3a65 = 2:60:8c:e 256: 383a 3535 3a33 332c 200d 0a45 5448 4552 8:55:33, ..ETHER 272: 3a20 2045 7468 6572 7479 7065 203d 2030 : Ethertype = 0 288: 3830 3620 2841 5250 290d 0a45 5448 4552 806 (ARP)..ETHER 304: 3a20 200d 0a41 5250 3a20 202d 2d2d 2d2d : ..ARP: ----- 320: 2041 5250 2f52 4152 5020 4672 616d 6520 ARP/RARP Frame 336: 2d2d 2d2d 2d0d 0a41 5250 3a20 200d 0a41 -----..ARP: ..A 352: 5250 3a20 2048 6172 6477 6172 6520 7479 RP: Hardware ty 368: 7065 203d 2031 0d0a 4152 503a 2020 5072 pe = 1..ARP: Pr 384: 6f74 6f63 6f6c 2074 7970 6520 3d20 3038 otocol type = 08 400: 3030 2028 4950 290d 0a41 5250 3a20 204c 00 (IP)..ARP: L 416: 656e 6774 6820 6f66 2068 6172 6477 6172 ength of hardwar 432: 6520 6164 6472 6573 7320 3d20 3620 6279 e address = 6 by 448: 7465 730d 0a41 5250 3a20 204c 656e 6774 tes..ARP: Lengt 464: 6820 6f66 2070 726f 746f 636f 6c20 6164 h of protocol ad 480: 6472 6573 7320 3d20 3420 6279 7465 730d dress = 4 bytes. 496: 0a41 5250 3a20 204f 7063 6f64 6520 3120 .ARP: Opcode 1 512: 2841 5250 2052 6571 7565 7374 290d 0a41 (ARP Request)..A 528: 5250 3a20 2053 656e 6465 7227 7320 6861 RP: Sender's ha 544: 7264 7761 7265 2061 6464 7265 7373 203d rdware address = 560: 2032 3a36 303a 3863 3a65 383a 3535 3a33 2:60:8c:e8:55:3 576: 330d 0a41 5250 3a20 2053 656e 6465 3..ARP: Sende ETHER: ----- Ether Header ----- ETHER: ETHER: Packet 187 arrived at 10:16:45.78 ETHER: Packet size = 60 bytes ETHER: Destination = 8:0:20:73:5e:c6, Sun ETHER: Source = 0:e0:1e:de:72:d6, ETHER: Ethertype = 0800 (IP) ETHER: IP: ----- IP Header ----- IP: IP: Version = 4 IP: Header length = 20 bytes IP: Type of service = 0x00 IP: xxx. .... = 0 (precedence) IP: ...0 .... = normal delay IP: .... 0... = normal throughput IP: .... .0.. = normal reliability IP: Total length = 40 bytes IP: Identification = 46110 IP: Flags = 0x4 IP: .1.. .... = do not fragment IP: ..0. .... = last fragment IP: Fragment offset = 0 bytes IP: Time to live = 127 seconds/hops IP: Protocol = 6 (TCP) IP: Header checksum = efcb IP: Source address = 88.66.44.33, cliente.arcesio.net IP: Destination address = 88.66.44.35, ftpserv.arcesio.net IP: No options IP: TCP: ----- TCP Header ----- TCP: TCP: Source port = 1427 TCP: Destination port = 21 (FTP) TCP: Sequence number = 9095927 TCP: Acknowledgement number = 693113921 TCP: Data offset = 20 bytes TCP: Flags = 0x10 TCP: ..0. .... = No urgent pointer TCP: ...1 .... = Acknowledgement TCP: .... 0... = No push TCP: .... .0.. = No reset TCP: .... ..0. = No Syn TCP: .... ...0 = No Fin TCP: Window = 8297 TCP: Checksum = 0x28cb TCP: Urgent pointer = 0 TCP: No options TCP: FTP: ----- FTP: ----- FTP: FTP: "" FTP: 0: 0800 2073 5ec6 00e0 1ede 72d6 0800 4500 .. s^.....r...E. 16: 0028 b41e 4000 7f06 efcb a8b0 036c a8b0 .(..@........l.. 32: 0319 0593 0015 008a caf7 2950 1441 5010 .........÷)P.AP. 48: 2069 28cb 0000 f4ef f320 6874 i(...... ht