Advertisement
Guest User

Untitled

a guest
Jun 7th, 2014
462
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 64.19 KB | None | 0 0
  1. No. Time Source Destination Protocol Length Info
  2. 2 0.151980 200.1.105.107 192.168.10.6 TCP 60 http > 49421 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0
  3.  
  4. Frame 2: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
  5. Ethernet II, Src: Sonicwal_6c:1a:74 (c0:ea:e4:6c:1a:74), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  6. Internet Protocol Version 4, Src: 200.1.105.107 (200.1.105.107), Dst: 192.168.10.6 (192.168.10.6)
  7. Transmission Control Protocol, Src Port: http (80), Dst Port: 49421 (49421), Seq: 1, Ack: 1, Len: 0
  8.  
  9. No. Time Source Destination Protocol Length Info
  10. 32 1.494273 200.1.105.37 192.168.10.6 TCP 60 http > 49422 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0
  11.  
  12. Frame 32: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
  13. Ethernet II, Src: Sonicwal_6c:1a:74 (c0:ea:e4:6c:1a:74), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  14. Internet Protocol Version 4, Src: 200.1.105.37 (200.1.105.37), Dst: 192.168.10.6 (192.168.10.6)
  15. Transmission Control Protocol, Src Port: http (80), Dst Port: 49422 (49422), Seq: 1, Ack: 1, Len: 0
  16.  
  17. No. Time Source Destination Protocol Length Info
  18. 37 1.507185 192.168.10.6 72.21.91.29 TCP 66 49435 > http [SYN] Seq=0 Win=8192 Len=0 MSS=1460 WS=4 SACK_PERM=1
  19.  
  20. Frame 37: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
  21. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Sonicwal_6c:1a:74 (c0:ea:e4:6c:1a:74)
  22. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 72.21.91.29 (72.21.91.29)
  23. Transmission Control Protocol, Src Port: 49435 (49435), Dst Port: http (80), Seq: 0, Len: 0
  24.  
  25. No. Time Source Destination Protocol Length Info
  26. 71 3.398421 192.168.10.6 200.1.105.26 TCP 66 49436 > http [SYN] Seq=0 Win=8192 Len=0 MSS=1460 WS=4 SACK_PERM=1
  27.  
  28. Frame 71: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
  29. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Sonicwal_6c:1a:74 (c0:ea:e4:6c:1a:74)
  30. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 200.1.105.26 (200.1.105.26)
  31. Transmission Control Protocol, Src Port: 49436 (49436), Dst Port: http (80), Seq: 0, Len: 0
  32.  
  33. No. Time Source Destination Protocol Length Info
  34. 90 3.897816 192.168.10.6 200.1.105.107 TCP 62 49430 > http [SYN] Seq=0 Win=8192 Len=0 MSS=1460 SACK_PERM=1
  35.  
  36. Frame 90: 62 bytes on wire (496 bits), 62 bytes captured (496 bits)
  37. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Sonicwal_6c:1a:74 (c0:ea:e4:6c:1a:74)
  38. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 200.1.105.107 (200.1.105.107)
  39. Transmission Control Protocol, Src Port: 49430 (49430), Dst Port: http (80), Seq: 0, Len: 0
  40.  
  41. No. Time Source Destination Protocol Length Info
  42. 93 4.538454 192.168.10.6 200.1.105.107 TCP 62 49431 > http [SYN] Seq=0 Win=8192 Len=0 MSS=1460 SACK_PERM=1
  43.  
  44. Frame 93: 62 bytes on wire (496 bits), 62 bytes captured (496 bits)
  45. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Sonicwal_6c:1a:74 (c0:ea:e4:6c:1a:74)
  46. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 200.1.105.107 (200.1.105.107)
  47. Transmission Control Protocol, Src Port: 49431 (49431), Dst Port: http (80), Seq: 0, Len: 0
  48.  
  49. No. Time Source Destination Protocol Length Info
  50. 112 4.794799 192.168.10.6 200.1.105.107 TCP 66 49437 > http [SYN] Seq=0 Win=8192 Len=0 MSS=1460 WS=4 SACK_PERM=1
  51.  
  52. Frame 112: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
  53. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Sonicwal_6c:1a:74 (c0:ea:e4:6c:1a:74)
  54. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 200.1.105.107 (200.1.105.107)
  55. Transmission Control Protocol, Src Port: 49437 (49437), Dst Port: http (80), Seq: 0, Len: 0
  56.  
  57. No. Time Source Destination Protocol Length Info
  58. 113 4.801059 192.168.10.6 200.1.105.48 TCP 66 49438 > http [SYN] Seq=0 Win=8192 Len=0 MSS=1460 WS=4 SACK_PERM=1
  59.  
  60. Frame 113: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
  61. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Sonicwal_6c:1a:74 (c0:ea:e4:6c:1a:74)
  62. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 200.1.105.48 (200.1.105.48)
  63. Transmission Control Protocol, Src Port: 49438 (49438), Dst Port: http (80), Seq: 0, Len: 0
  64.  
  65. No. Time Source Destination Protocol Length Info
  66. 117 5.520582 200.1.105.113 192.168.10.6 TCP 60 http > 49423 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0
  67.  
  68. Frame 117: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
  69. Ethernet II, Src: Sonicwal_6c:1a:74 (c0:ea:e4:6c:1a:74), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  70. Internet Protocol Version 4, Src: 200.1.105.113 (200.1.105.113), Dst: 192.168.10.6 (192.168.10.6)
  71. Transmission Control Protocol, Src Port: http (80), Dst Port: 49423 (49423), Seq: 1, Ack: 1, Len: 0
  72.  
  73. No. Time Source Destination Protocol Length Info
  74. 135 5.920725 63.245.216.132 192.168.10.6 TCP 60 https > 49432 [RST, ACK] Seq=1 Ack=1 Win=9300 Len=0
  75.  
  76. Frame 135: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
  77. Ethernet II, Src: Sonicwal_6c:1a:74 (c0:ea:e4:6c:1a:74), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  78. Internet Protocol Version 4, Src: 63.245.216.132 (63.245.216.132), Dst: 192.168.10.6 (192.168.10.6)
  79. Transmission Control Protocol, Src Port: https (443), Dst Port: 49432 (49432), Seq: 1, Ack: 1, Len: 0
  80.  
  81. No. Time Source Destination Protocol Length Info
  82. 137 6.397831 192.168.10.6 200.1.105.26 TCP 66 49436 > http [SYN] Seq=0 Win=8192 Len=0 MSS=1460 WS=4 SACK_PERM=1
  83.  
  84. Frame 137: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
  85. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Sonicwal_6c:1a:74 (c0:ea:e4:6c:1a:74)
  86. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 200.1.105.26 (200.1.105.26)
  87. Transmission Control Protocol, Src Port: 49436 (49436), Dst Port: http (80), Seq: 0, Len: 0
  88.  
  89. No. Time Source Destination Protocol Length Info
  90. 159 7.507198 192.168.10.6 72.21.91.29 TCP 62 49435 > http [SYN] Seq=0 Win=8192 Len=0 MSS=1460 SACK_PERM=1
  91.  
  92. Frame 159: 62 bytes on wire (496 bits), 62 bytes captured (496 bits)
  93. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Sonicwal_6c:1a:74 (c0:ea:e4:6c:1a:74)
  94. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 72.21.91.29 (72.21.91.29)
  95. Transmission Control Protocol, Src Port: 49435 (49435), Dst Port: http (80), Seq: 0, Len: 0
  96.  
  97. No. Time Source Destination Protocol Length Info
  98. 160 7.788453 192.168.10.6 200.1.105.48 TCP 66 49438 > http [SYN] Seq=0 Win=8192 Len=0 MSS=1460 WS=4 SACK_PERM=1
  99.  
  100. Frame 160: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
  101. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Sonicwal_6c:1a:74 (c0:ea:e4:6c:1a:74)
  102. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 200.1.105.48 (200.1.105.48)
  103. Transmission Control Protocol, Src Port: 49438 (49438), Dst Port: http (80), Seq: 0, Len: 0
  104.  
  105. No. Time Source Destination Protocol Length Info
  106. 161 7.788474 192.168.10.6 200.1.105.107 TCP 66 49437 > http [SYN] Seq=0 Win=8192 Len=0 MSS=1460 WS=4 SACK_PERM=1
  107.  
  108. Frame 161: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
  109. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Sonicwal_6c:1a:74 (c0:ea:e4:6c:1a:74)
  110. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 200.1.105.107 (200.1.105.107)
  111. Transmission Control Protocol, Src Port: 49437 (49437), Dst Port: http (80), Seq: 0, Len: 0
  112.  
  113. No. Time Source Destination Protocol Length Info
  114. 180 8.714038 192.168.10.6 72.21.91.29 TCP 66 49439 > http [SYN] Seq=0 Win=8192 Len=0 MSS=1460 WS=4 SACK_PERM=1
  115.  
  116. Frame 180: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
  117. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Sonicwal_6c:1a:74 (c0:ea:e4:6c:1a:74)
  118. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 72.21.91.29 (72.21.91.29)
  119. Transmission Control Protocol, Src Port: 49439 (49439), Dst Port: http (80), Seq: 0, Len: 0
  120.  
  121. No. Time Source Destination Protocol Length Info
  122. 198 9.197593 63.245.217.37 192.168.10.6 TCP 60 https > 49434 [FIN, ACK] Seq=1 Ack=1 Win=16 Len=0
  123.  
  124. Frame 198: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
  125. Ethernet II, Src: Sonicwal_6c:1a:74 (c0:ea:e4:6c:1a:74), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  126. Internet Protocol Version 4, Src: 63.245.217.37 (63.245.217.37), Dst: 192.168.10.6 (192.168.10.6)
  127. Transmission Control Protocol, Src Port: https (443), Dst Port: 49434 (49434), Seq: 1, Ack: 1, Len: 0
  128.  
  129. No. Time Source Destination Protocol Length Info
  130. 199 9.197709 192.168.10.6 63.245.217.37 TCP 54 49434 > https [ACK] Seq=1 Ack=2 Win=16283 Len=0
  131.  
  132. Frame 199: 54 bytes on wire (432 bits), 54 bytes captured (432 bits)
  133. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Sonicwal_6c:1a:74 (c0:ea:e4:6c:1a:74)
  134. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 63.245.217.37 (63.245.217.37)
  135. Transmission Control Protocol, Src Port: 49434 (49434), Dst Port: https (443), Seq: 1, Ack: 2, Len: 0
  136.  
  137. No. Time Source Destination Protocol Length Info
  138. 219 10.601287 192.168.10.6 200.1.105.107 TCP 66 49440 > http [SYN] Seq=0 Win=8192 Len=0 MSS=1460 WS=4 SACK_PERM=1
  139.  
  140. Frame 219: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
  141. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Sonicwal_6c:1a:74 (c0:ea:e4:6c:1a:74)
  142. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 200.1.105.107 (200.1.105.107)
  143. Transmission Control Protocol, Src Port: 49440 (49440), Dst Port: http (80), Seq: 0, Len: 0
  144.  
  145. No. Time Source Destination Protocol Length Info
  146. 243 11.710337 192.168.10.6 72.21.91.29 TCP 66 49439 > http [SYN] Seq=0 Win=8192 Len=0 MSS=1460 WS=4 SACK_PERM=1
  147.  
  148. Frame 243: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
  149. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Sonicwal_6c:1a:74 (c0:ea:e4:6c:1a:74)
  150. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 72.21.91.29 (72.21.91.29)
  151. Transmission Control Protocol, Src Port: 49439 (49439), Dst Port: http (80), Seq: 0, Len: 0
  152.  
  153. No. Time Source Destination Protocol Length Info
  154. 262 12.397808 192.168.10.6 200.1.105.26 TCP 62 49436 > http [SYN] Seq=0 Win=8192 Len=0 MSS=1460 SACK_PERM=1
  155.  
  156. Frame 262: 62 bytes on wire (496 bits), 62 bytes captured (496 bits)
  157. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Sonicwal_6c:1a:74 (c0:ea:e4:6c:1a:74)
  158. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 200.1.105.26 (200.1.105.26)
  159. Transmission Control Protocol, Src Port: 49436 (49436), Dst Port: http (80), Seq: 0, Len: 0
  160.  
  161. No. Time Source Destination Protocol Length Info
  162. 269 13.304250 192.168.10.6 192.168.10.2 TCP 294 49282 > ldap [PSH, ACK] Seq=1 Ack=1 Win=253 Len=240
  163.  
  164. Frame 269: 294 bytes on wire (2352 bits), 294 bytes captured (2352 bits)
  165. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Vmware_cb:09:63 (00:0c:29:cb:09:63)
  166. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.2 (192.168.10.2)
  167. Transmission Control Protocol, Src Port: 49282 (49282), Dst Port: ldap (389), Seq: 1, Ack: 1, Len: 240
  168.  
  169. No. Time Source Destination Protocol Length Info
  170. 271 13.304756 192.168.10.2 192.168.10.6 TCP 287 ldap > 49282 [PSH, ACK] Seq=1 Ack=241 Win=252 Len=233
  171.  
  172. Frame 271: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits)
  173. Ethernet II, Src: Vmware_cb:09:63 (00:0c:29:cb:09:63), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  174. Internet Protocol Version 4, Src: 192.168.10.2 (192.168.10.2), Dst: 192.168.10.6 (192.168.10.6)
  175. Transmission Control Protocol, Src Port: ldap (389), Dst Port: 49282 (49282), Seq: 1, Ack: 241, Len: 233
  176.  
  177. No. Time Source Destination Protocol Length Info
  178. 273 13.306034 192.168.10.6 192.168.10.2 TCP 294 49283 > ldap [PSH, ACK] Seq=1 Ack=1 Win=255 Len=240
  179.  
  180. Frame 273: 294 bytes on wire (2352 bits), 294 bytes captured (2352 bits)
  181. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Vmware_cb:09:63 (00:0c:29:cb:09:63)
  182. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.2 (192.168.10.2)
  183. Transmission Control Protocol, Src Port: 49283 (49283), Dst Port: ldap (389), Seq: 1, Ack: 1, Len: 240
  184.  
  185. No. Time Source Destination Protocol Length Info
  186. 275 13.306367 192.168.10.2 192.168.10.6 TCP 287 ldap > 49283 [PSH, ACK] Seq=1 Ack=241 Win=252 Len=233
  187.  
  188. Frame 275: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits)
  189. Ethernet II, Src: Vmware_cb:09:63 (00:0c:29:cb:09:63), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  190. Internet Protocol Version 4, Src: 192.168.10.2 (192.168.10.2), Dst: 192.168.10.6 (192.168.10.6)
  191. Transmission Control Protocol, Src Port: ldap (389), Dst Port: 49283 (49283), Seq: 1, Ack: 241, Len: 233
  192.  
  193. No. Time Source Destination Protocol Length Info
  194. 277 13.307016 192.168.10.6 192.168.10.2 TCP 294 49283 > ldap [PSH, ACK] Seq=241 Ack=234 Win=254 Len=240
  195.  
  196. Frame 277: 294 bytes on wire (2352 bits), 294 bytes captured (2352 bits)
  197. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Vmware_cb:09:63 (00:0c:29:cb:09:63)
  198. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.2 (192.168.10.2)
  199. Transmission Control Protocol, Src Port: 49283 (49283), Dst Port: ldap (389), Seq: 241, Ack: 234, Len: 240
  200.  
  201. No. Time Source Destination Protocol Length Info
  202. 278 13.307371 192.168.10.2 192.168.10.6 TCP 287 ldap > 49283 [PSH, ACK] Seq=234 Ack=481 Win=251 Len=233
  203.  
  204. Frame 278: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits)
  205. Ethernet II, Src: Vmware_cb:09:63 (00:0c:29:cb:09:63), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  206. Internet Protocol Version 4, Src: 192.168.10.2 (192.168.10.2), Dst: 192.168.10.6 (192.168.10.6)
  207. Transmission Control Protocol, Src Port: ldap (389), Dst Port: 49283 (49283), Seq: 234, Ack: 481, Len: 233
  208.  
  209. No. Time Source Destination Protocol Length Info
  210. 279 13.309959 192.168.10.6 192.168.10.2 TCP 66 49441 > epmap [SYN] Seq=0 Win=8192 Len=0 MSS=1460 WS=256 SACK_PERM=1
  211.  
  212. Frame 279: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
  213. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Vmware_cb:09:63 (00:0c:29:cb:09:63)
  214. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.2 (192.168.10.2)
  215. Transmission Control Protocol, Src Port: 49441 (49441), Dst Port: epmap (135), Seq: 0, Len: 0
  216.  
  217. No. Time Source Destination Protocol Length Info
  218. 280 13.310121 192.168.10.2 192.168.10.6 TCP 66 epmap > 49441 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=256 SACK_PERM=1
  219.  
  220. Frame 280: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
  221. Ethernet II, Src: Vmware_cb:09:63 (00:0c:29:cb:09:63), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  222. Internet Protocol Version 4, Src: 192.168.10.2 (192.168.10.2), Dst: 192.168.10.6 (192.168.10.6)
  223. Transmission Control Protocol, Src Port: epmap (135), Dst Port: 49441 (49441), Seq: 0, Ack: 1, Len: 0
  224.  
  225. No. Time Source Destination Protocol Length Info
  226. 281 13.310182 192.168.10.6 192.168.10.2 TCP 54 49441 > epmap [ACK] Seq=1 Ack=1 Win=65536 Len=0
  227.  
  228. Frame 281: 54 bytes on wire (432 bits), 54 bytes captured (432 bits)
  229. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Vmware_cb:09:63 (00:0c:29:cb:09:63)
  230. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.2 (192.168.10.2)
  231. Transmission Control Protocol, Src Port: 49441 (49441), Dst Port: epmap (135), Seq: 1, Ack: 1, Len: 0
  232.  
  233. No. Time Source Destination Protocol Length Info
  234. 282 13.310337 192.168.10.6 192.168.10.2 DCERPC 214 Bind: call_id: 1 Fragment: Single, 3 context items, 1st EPMv4 V3.0
  235.  
  236. Frame 282: 214 bytes on wire (1712 bits), 214 bytes captured (1712 bits)
  237. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Vmware_cb:09:63 (00:0c:29:cb:09:63)
  238. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.2 (192.168.10.2)
  239. Transmission Control Protocol, Src Port: 49441 (49441), Dst Port: epmap (135), Seq: 1, Ack: 1, Len: 160
  240. Distributed Computing Environment / Remote Procedure Call (DCE/RPC) Bind, Fragment: Single, FragLen: 160, Call: 1
  241.  
  242. No. Time Source Destination Protocol Length Info
  243. 283 13.310573 192.168.10.2 192.168.10.6 DCERPC 162 Bind_ack: call_id: 1 Fragment: Single Unknown result (3), reason: Local limit exceeded
  244.  
  245. Frame 283: 162 bytes on wire (1296 bits), 162 bytes captured (1296 bits)
  246. Ethernet II, Src: Vmware_cb:09:63 (00:0c:29:cb:09:63), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  247. Internet Protocol Version 4, Src: 192.168.10.2 (192.168.10.2), Dst: 192.168.10.6 (192.168.10.6)
  248. Transmission Control Protocol, Src Port: epmap (135), Dst Port: 49441 (49441), Seq: 1, Ack: 161, Len: 108
  249. Distributed Computing Environment / Remote Procedure Call (DCE/RPC) Bind_ack, Fragment: Single, FragLen: 108, Call: 1
  250.  
  251. No. Time Source Destination Protocol Length Info
  252. 284 13.310671 192.168.10.6 192.168.10.2 EPM 222 Map request[Malformed Packet]
  253.  
  254. Frame 284: 222 bytes on wire (1776 bits), 222 bytes captured (1776 bits)
  255. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Vmware_cb:09:63 (00:0c:29:cb:09:63)
  256. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.2 (192.168.10.2)
  257. Transmission Control Protocol, Src Port: 49441 (49441), Dst Port: epmap (135), Seq: 161, Ack: 109, Len: 168
  258. Distributed Computing Environment / Remote Procedure Call (DCE/RPC) Request, Fragment: Single, FragLen: 168, Call: 1 Ctx: 1, [Resp: #285]
  259. DCE/RPC Endpoint Mapper, Map
  260. [Malformed Packet: EPM]
  261.  
  262. No. Time Source Destination Protocol Length Info
  263. 285 13.310881 192.168.10.2 192.168.10.6 EPM 226 Map response[Malformed Packet]
  264.  
  265. Frame 285: 226 bytes on wire (1808 bits), 226 bytes captured (1808 bits)
  266. Ethernet II, Src: Vmware_cb:09:63 (00:0c:29:cb:09:63), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  267. Internet Protocol Version 4, Src: 192.168.10.2 (192.168.10.2), Dst: 192.168.10.6 (192.168.10.6)
  268. Transmission Control Protocol, Src Port: epmap (135), Dst Port: 49441 (49441), Seq: 109, Ack: 329, Len: 172
  269. Distributed Computing Environment / Remote Procedure Call (DCE/RPC) Response, Fragment: Single, FragLen: 172, Call: 1 Ctx: 1, [Req: #284]
  270. DCE/RPC Endpoint Mapper, Map
  271. [Malformed Packet: EPM]
  272.  
  273. No. Time Source Destination Protocol Length Info
  274. 286 13.311169 192.168.10.6 192.168.10.2 DCERPC 258 Request: call_id: 48 Fragment: Single opnum: 0 ctx_id: 1
  275.  
  276. Frame 286: 258 bytes on wire (2064 bits), 258 bytes captured (2064 bits)
  277. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Vmware_cb:09:63 (00:0c:29:cb:09:63)
  278. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.2 (192.168.10.2)
  279. Transmission Control Protocol, Src Port: 49285 (49285), Dst Port: solid-mux (1029), Seq: 1, Ack: 1, Len: 204
  280. Distributed Computing Environment / Remote Procedure Call (DCE/RPC) Request, Fragment: Single, FragLen: 204, Call: 48 Ctx: 1
  281.  
  282. No. Time Source Destination Protocol Length Info
  283. 287 13.311442 192.168.10.2 192.168.10.6 DCERPC 258 Response: call_id: 48 Fragment: Single ctx_id: 1
  284.  
  285. Frame 287: 258 bytes on wire (2064 bits), 258 bytes captured (2064 bits)
  286. Ethernet II, Src: Vmware_cb:09:63 (00:0c:29:cb:09:63), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  287. Internet Protocol Version 4, Src: 192.168.10.2 (192.168.10.2), Dst: 192.168.10.6 (192.168.10.6)
  288. Transmission Control Protocol, Src Port: solid-mux (1029), Dst Port: 49285 (49285), Seq: 1, Ack: 205, Len: 204
  289. Distributed Computing Environment / Remote Procedure Call (DCE/RPC) Response, Fragment: Single, FragLen: 204, Call: 48 Ctx: 1
  290.  
  291. No. Time Source Destination Protocol Length Info
  292. 288 13.311612 192.168.10.6 192.168.10.2 DCERPC 306 Request: call_id: 49 Fragment: Single opnum: 12 ctx_id: 1
  293.  
  294. Frame 288: 306 bytes on wire (2448 bits), 306 bytes captured (2448 bits)
  295. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Vmware_cb:09:63 (00:0c:29:cb:09:63)
  296. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.2 (192.168.10.2)
  297. Transmission Control Protocol, Src Port: 49285 (49285), Dst Port: solid-mux (1029), Seq: 205, Ack: 205, Len: 252
  298. Distributed Computing Environment / Remote Procedure Call (DCE/RPC) Request, Fragment: Single, FragLen: 252, Call: 49 Ctx: 1
  299.  
  300. No. Time Source Destination Protocol Length Info
  301. 289 13.312004 192.168.10.2 192.168.10.6 DCERPC 482 Response: call_id: 49 Fragment: Single ctx_id: 1
  302.  
  303. Frame 289: 482 bytes on wire (3856 bits), 482 bytes captured (3856 bits)
  304. Ethernet II, Src: Vmware_cb:09:63 (00:0c:29:cb:09:63), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  305. Internet Protocol Version 4, Src: 192.168.10.2 (192.168.10.2), Dst: 192.168.10.6 (192.168.10.6)
  306. Transmission Control Protocol, Src Port: solid-mux (1029), Dst Port: 49285 (49285), Seq: 205, Ack: 457, Len: 428
  307. Distributed Computing Environment / Remote Procedure Call (DCE/RPC) Response, Fragment: Single, FragLen: 428, Call: 49 Ctx: 1
  308.  
  309. No. Time Source Destination Protocol Length Info
  310. 290 13.312155 192.168.10.6 192.168.10.2 DCERPC 194 Request: call_id: 50 Fragment: Single opnum: 1 ctx_id: 1
  311.  
  312. Frame 290: 194 bytes on wire (1552 bits), 194 bytes captured (1552 bits)
  313. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Vmware_cb:09:63 (00:0c:29:cb:09:63)
  314. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.2 (192.168.10.2)
  315. Transmission Control Protocol, Src Port: 49285 (49285), Dst Port: solid-mux (1029), Seq: 457, Ack: 633, Len: 140
  316. Distributed Computing Environment / Remote Procedure Call (DCE/RPC) Request, Fragment: Single, FragLen: 140, Call: 50 Ctx: 1
  317.  
  318. No. Time Source Destination Protocol Length Info
  319. 291 13.312404 192.168.10.2 192.168.10.6 DCERPC 194 Response: call_id: 50 Fragment: Single ctx_id: 1
  320.  
  321. Frame 291: 194 bytes on wire (1552 bits), 194 bytes captured (1552 bits)
  322. Ethernet II, Src: Vmware_cb:09:63 (00:0c:29:cb:09:63), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  323. Internet Protocol Version 4, Src: 192.168.10.2 (192.168.10.2), Dst: 192.168.10.6 (192.168.10.6)
  324. Transmission Control Protocol, Src Port: solid-mux (1029), Dst Port: 49285 (49285), Seq: 633, Ack: 597, Len: 140
  325. Distributed Computing Environment / Remote Procedure Call (DCE/RPC) Response, Fragment: Single, FragLen: 140, Call: 50 Ctx: 1
  326.  
  327. No. Time Source Destination Protocol Length Info
  328. 292 13.312656 192.168.10.6 192.168.10.2 TCP 419 49283 > ldap [PSH, ACK] Seq=481 Ack=467 Win=254 Len=365
  329.  
  330. Frame 292: 419 bytes on wire (3352 bits), 419 bytes captured (3352 bits)
  331. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Vmware_cb:09:63 (00:0c:29:cb:09:63)
  332. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.2 (192.168.10.2)
  333. Transmission Control Protocol, Src Port: 49283 (49283), Dst Port: ldap (389), Seq: 481, Ack: 467, Len: 365
  334.  
  335. No. Time Source Destination Protocol Length Info
  336. 293 13.313109 192.168.10.2 192.168.10.6 TCP 802 ldap > 49283 [PSH, ACK] Seq=467 Ack=846 Win=256 Len=748
  337.  
  338. Frame 293: 802 bytes on wire (6416 bits), 802 bytes captured (6416 bits)
  339. Ethernet II, Src: Vmware_cb:09:63 (00:0c:29:cb:09:63), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  340. Internet Protocol Version 4, Src: 192.168.10.2 (192.168.10.2), Dst: 192.168.10.6 (192.168.10.6)
  341. Transmission Control Protocol, Src Port: ldap (389), Dst Port: 49283 (49283), Seq: 467, Ack: 846, Len: 748
  342.  
  343. No. Time Source Destination Protocol Length Info
  344. 294 13.313529 192.168.10.6 192.168.10.2 TCP 378 49283 > ldap [PSH, ACK] Seq=846 Ack=1215 Win=251 Len=324
  345.  
  346. Frame 294: 378 bytes on wire (3024 bits), 378 bytes captured (3024 bits)
  347. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Vmware_cb:09:63 (00:0c:29:cb:09:63)
  348. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.2 (192.168.10.2)
  349. Transmission Control Protocol, Src Port: 49283 (49283), Dst Port: ldap (389), Seq: 846, Ack: 1215, Len: 324
  350.  
  351. No. Time Source Destination Protocol Length Info
  352. 295 13.313917 192.168.10.2 192.168.10.6 TCP 507 ldap > 49283 [PSH, ACK] Seq=1215 Ack=1170 Win=255 Len=453
  353.  
  354. Frame 295: 507 bytes on wire (4056 bits), 507 bytes captured (4056 bits)
  355. Ethernet II, Src: Vmware_cb:09:63 (00:0c:29:cb:09:63), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  356. Internet Protocol Version 4, Src: 192.168.10.2 (192.168.10.2), Dst: 192.168.10.6 (192.168.10.6)
  357. Transmission Control Protocol, Src Port: ldap (389), Dst Port: 49283 (49283), Seq: 1215, Ack: 1170, Len: 453
  358.  
  359. No. Time Source Destination Protocol Length Info
  360. 296 13.314140 192.168.10.6 192.168.10.2 TCP 371 49283 > ldap [PSH, ACK] Seq=1170 Ack=1668 Win=256 Len=317
  361.  
  362. Frame 296: 371 bytes on wire (2968 bits), 371 bytes captured (2968 bits)
  363. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Vmware_cb:09:63 (00:0c:29:cb:09:63)
  364. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.2 (192.168.10.2)
  365. Transmission Control Protocol, Src Port: 49283 (49283), Dst Port: ldap (389), Seq: 1170, Ack: 1668, Len: 317
  366.  
  367. No. Time Source Destination Protocol Length Info
  368. 297 13.314525 192.168.10.2 192.168.10.6 TCP 157 ldap > 49283 [PSH, ACK] Seq=1668 Ack=1487 Win=254 Len=103
  369.  
  370. Frame 297: 157 bytes on wire (1256 bits), 157 bytes captured (1256 bits)
  371. Ethernet II, Src: Vmware_cb:09:63 (00:0c:29:cb:09:63), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  372. Internet Protocol Version 4, Src: 192.168.10.2 (192.168.10.2), Dst: 192.168.10.6 (192.168.10.6)
  373. Transmission Control Protocol, Src Port: ldap (389), Dst Port: 49283 (49283), Seq: 1668, Ack: 1487, Len: 103
  374.  
  375. No. Time Source Destination Protocol Length Info
  376. 298 13.314737 192.168.10.6 192.168.10.2 TCP 353 49283 > ldap [PSH, ACK] Seq=1487 Ack=1771 Win=256 Len=299
  377.  
  378. Frame 298: 353 bytes on wire (2824 bits), 353 bytes captured (2824 bits)
  379. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Vmware_cb:09:63 (00:0c:29:cb:09:63)
  380. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.2 (192.168.10.2)
  381. Transmission Control Protocol, Src Port: 49283 (49283), Dst Port: ldap (389), Seq: 1487, Ack: 1771, Len: 299
  382.  
  383. No. Time Source Destination Protocol Length Info
  384. 299 13.315132 192.168.10.2 192.168.10.6 TCP 157 ldap > 49283 [PSH, ACK] Seq=1771 Ack=1786 Win=252 Len=103
  385.  
  386. Frame 299: 157 bytes on wire (1256 bits), 157 bytes captured (1256 bits)
  387. Ethernet II, Src: Vmware_cb:09:63 (00:0c:29:cb:09:63), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  388. Internet Protocol Version 4, Src: 192.168.10.2 (192.168.10.2), Dst: 192.168.10.6 (192.168.10.6)
  389. Transmission Control Protocol, Src Port: ldap (389), Dst Port: 49283 (49283), Seq: 1771, Ack: 1786, Len: 103
  390.  
  391. No. Time Source Destination Protocol Length Info
  392. 300 13.317116 192.168.10.6 192.168.10.2 TCP 66 49442 > ldap [SYN] Seq=0 Win=8192 Len=0 MSS=1460 WS=256 SACK_PERM=1
  393.  
  394. Frame 300: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
  395. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Vmware_cb:09:63 (00:0c:29:cb:09:63)
  396. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.2 (192.168.10.2)
  397. Transmission Control Protocol, Src Port: 49442 (49442), Dst Port: ldap (389), Seq: 0, Len: 0
  398.  
  399. No. Time Source Destination Protocol Length Info
  400. 301 13.317262 192.168.10.2 192.168.10.6 TCP 66 ldap > 49442 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=256 SACK_PERM=1
  401.  
  402. Frame 301: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
  403. Ethernet II, Src: Vmware_cb:09:63 (00:0c:29:cb:09:63), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  404. Internet Protocol Version 4, Src: 192.168.10.2 (192.168.10.2), Dst: 192.168.10.6 (192.168.10.6)
  405. Transmission Control Protocol, Src Port: ldap (389), Dst Port: 49442 (49442), Seq: 0, Ack: 1, Len: 0
  406.  
  407. No. Time Source Destination Protocol Length Info
  408. 302 13.317313 192.168.10.6 192.168.10.2 TCP 54 49442 > ldap [ACK] Seq=1 Ack=1 Win=65536 Len=0
  409.  
  410. Frame 302: 54 bytes on wire (432 bits), 54 bytes captured (432 bits)
  411. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Vmware_cb:09:63 (00:0c:29:cb:09:63)
  412. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.2 (192.168.10.2)
  413. Transmission Control Protocol, Src Port: 49442 (49442), Dst Port: ldap (389), Seq: 1, Ack: 1, Len: 0
  414.  
  415. No. Time Source Destination Protocol Length Info
  416. 303 13.318114 192.168.10.6 192.168.10.2 TCP 1514 [TCP segment of a reassembled PDU]
  417.  
  418. Frame 303: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits)
  419. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Vmware_cb:09:63 (00:0c:29:cb:09:63)
  420. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.2 (192.168.10.2)
  421. Transmission Control Protocol, Src Port: 49442 (49442), Dst Port: ldap (389), Seq: 1, Ack: 1, Len: 1460
  422.  
  423. No. Time Source Destination Protocol Length Info
  424. 304 13.318119 192.168.10.6 192.168.10.2 LDAP 107 bindRequest(120) "<ROOT>" sasl
  425.  
  426. Frame 304: 107 bytes on wire (856 bits), 107 bytes captured (856 bits)
  427. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Vmware_cb:09:63 (00:0c:29:cb:09:63)
  428. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.2 (192.168.10.2)
  429. Transmission Control Protocol, Src Port: 49442 (49442), Dst Port: ldap (389), Seq: 1461, Ack: 1, Len: 53
  430. [2 Reassembled TCP Segments (1513 bytes): #303(1460), #304(53)]
  431. Lightweight Directory Access Protocol
  432.  
  433. No. Time Source Destination Protocol Length Info
  434. 305 13.318251 192.168.10.2 192.168.10.6 TCP 60 ldap > 49442 [ACK] Seq=1 Ack=1514 Win=65536 Len=0
  435.  
  436. Frame 305: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
  437. Ethernet II, Src: Vmware_cb:09:63 (00:0c:29:cb:09:63), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  438. Internet Protocol Version 4, Src: 192.168.10.2 (192.168.10.2), Dst: 192.168.10.6 (192.168.10.6)
  439. Transmission Control Protocol, Src Port: ldap (389), Dst Port: 49442 (49442), Seq: 1, Ack: 1514, Len: 0
  440.  
  441. No. Time Source Destination Protocol Length Info
  442. 306 13.319109 192.168.10.2 192.168.10.6 LDAP 264 bindResponse(120) success
  443.  
  444. Frame 306: 264 bytes on wire (2112 bits), 264 bytes captured (2112 bits)
  445. Ethernet II, Src: Vmware_cb:09:63 (00:0c:29:cb:09:63), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  446. Internet Protocol Version 4, Src: 192.168.10.2 (192.168.10.2), Dst: 192.168.10.6 (192.168.10.6)
  447. Transmission Control Protocol, Src Port: ldap (389), Dst Port: 49442 (49442), Seq: 1, Ack: 1514, Len: 210
  448. Lightweight Directory Access Protocol
  449.  
  450. No. Time Source Destination Protocol Length Info
  451. 307 13.319555 192.168.10.6 192.168.10.2 EPM 222 Map request[Malformed Packet]
  452.  
  453. Frame 307: 222 bytes on wire (1776 bits), 222 bytes captured (1776 bits)
  454. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Vmware_cb:09:63 (00:0c:29:cb:09:63)
  455. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.2 (192.168.10.2)
  456. Transmission Control Protocol, Src Port: 49441 (49441), Dst Port: epmap (135), Seq: 329, Ack: 281, Len: 168
  457. Distributed Computing Environment / Remote Procedure Call (DCE/RPC) Request, Fragment: Single, FragLen: 168, Call: 2 Ctx: 1, [Resp: #308]
  458. DCE/RPC Endpoint Mapper, Map
  459. [Malformed Packet: EPM]
  460.  
  461. No. Time Source Destination Protocol Length Info
  462. 308 13.319753 192.168.10.2 192.168.10.6 EPM 226 Map response[Malformed Packet]
  463.  
  464. Frame 308: 226 bytes on wire (1808 bits), 226 bytes captured (1808 bits)
  465. Ethernet II, Src: Vmware_cb:09:63 (00:0c:29:cb:09:63), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  466. Internet Protocol Version 4, Src: 192.168.10.2 (192.168.10.2), Dst: 192.168.10.6 (192.168.10.6)
  467. Transmission Control Protocol, Src Port: epmap (135), Dst Port: 49441 (49441), Seq: 281, Ack: 497, Len: 172
  468. Distributed Computing Environment / Remote Procedure Call (DCE/RPC) Response, Fragment: Single, FragLen: 172, Call: 2 Ctx: 1, [Req: #307]
  469. DCE/RPC Endpoint Mapper, Map
  470. [Malformed Packet: EPM]
  471.  
  472. No. Time Source Destination Protocol Length Info
  473. 309 13.319961 192.168.10.6 192.168.10.2 DCERPC 258 Request: call_id: 51 Fragment: Single opnum: 0 ctx_id: 1
  474.  
  475. Frame 309: 258 bytes on wire (2064 bits), 258 bytes captured (2064 bits)
  476. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Vmware_cb:09:63 (00:0c:29:cb:09:63)
  477. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.2 (192.168.10.2)
  478. Transmission Control Protocol, Src Port: 49285 (49285), Dst Port: solid-mux (1029), Seq: 597, Ack: 773, Len: 204
  479. Distributed Computing Environment / Remote Procedure Call (DCE/RPC) Request, Fragment: Single, FragLen: 204, Call: 51 Ctx: 1
  480.  
  481. No. Time Source Destination Protocol Length Info
  482. 310 13.320388 192.168.10.2 192.168.10.6 DCERPC 258 Response: call_id: 51 Fragment: Single ctx_id: 1
  483.  
  484. Frame 310: 258 bytes on wire (2064 bits), 258 bytes captured (2064 bits)
  485. Ethernet II, Src: Vmware_cb:09:63 (00:0c:29:cb:09:63), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  486. Internet Protocol Version 4, Src: 192.168.10.2 (192.168.10.2), Dst: 192.168.10.6 (192.168.10.6)
  487. Transmission Control Protocol, Src Port: solid-mux (1029), Dst Port: 49285 (49285), Seq: 773, Ack: 801, Len: 204
  488. Distributed Computing Environment / Remote Procedure Call (DCE/RPC) Response, Fragment: Single, FragLen: 204, Call: 51 Ctx: 1
  489.  
  490. No. Time Source Destination Protocol Length Info
  491. 311 13.320569 192.168.10.6 192.168.10.2 LDAP 251 SASL GSS-API Integrity: searchRequest(121) "<ROOT>" baseObject
  492.  
  493. Frame 311: 251 bytes on wire (2008 bits), 251 bytes captured (2008 bits)
  494. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Vmware_cb:09:63 (00:0c:29:cb:09:63)
  495. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.2 (192.168.10.2)
  496. Transmission Control Protocol, Src Port: 49442 (49442), Dst Port: ldap (389), Seq: 1514, Ack: 211, Len: 197
  497. Lightweight Directory Access Protocol
  498.  
  499. No. Time Source Destination Protocol Length Info
  500. 312 13.320802 192.168.10.2 192.168.10.6 LDAP 508 SASL GSS-API Integrity: searchResEntry(121) "<ROOT>" searchResDone(121) success [1 result]
  501.  
  502. Frame 312: 508 bytes on wire (4064 bits), 508 bytes captured (4064 bits)
  503. Ethernet II, Src: Vmware_cb:09:63 (00:0c:29:cb:09:63), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  504. Internet Protocol Version 4, Src: 192.168.10.2 (192.168.10.2), Dst: 192.168.10.6 (192.168.10.6)
  505. Transmission Control Protocol, Src Port: ldap (389), Dst Port: 49442 (49442), Seq: 211, Ack: 1711, Len: 454
  506. Lightweight Directory Access Protocol
  507.  
  508. No. Time Source Destination Protocol Length Info
  509. 313 13.321027 192.168.10.6 192.168.10.2 LDAP 288 SASL GSS-API Integrity: searchRequest(122) "CN=Schema,CN=Configuration,DC=chappoville,DC=local" baseObject
  510.  
  511. Frame 313: 288 bytes on wire (2304 bits), 288 bytes captured (2304 bits)
  512. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Vmware_cb:09:63 (00:0c:29:cb:09:63)
  513. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.2 (192.168.10.2)
  514. Transmission Control Protocol, Src Port: 49442 (49442), Dst Port: ldap (389), Seq: 1711, Ack: 665, Len: 234
  515. Lightweight Directory Access Protocol
  516.  
  517. No. Time Source Destination Protocol Length Info
  518. 314 13.321430 192.168.10.2 192.168.10.6 LDAP 368 SASL GSS-API Integrity: searchResEntry(122) "CN=Schema,CN=Configuration,DC=chappoville,DC=local" searchResDone(122) success [1 result]
  519.  
  520. Frame 314: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits)
  521. Ethernet II, Src: Vmware_cb:09:63 (00:0c:29:cb:09:63), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  522. Internet Protocol Version 4, Src: 192.168.10.2 (192.168.10.2), Dst: 192.168.10.6 (192.168.10.6)
  523. Transmission Control Protocol, Src Port: ldap (389), Dst Port: 49442 (49442), Seq: 665, Ack: 1945, Len: 314
  524. Lightweight Directory Access Protocol
  525.  
  526. No. Time Source Destination Protocol Length Info
  527. 315 13.321813 192.168.10.6 192.168.10.2 LDAP 97 SASL GSS-API Integrity: unbindRequest(123)
  528.  
  529. Frame 315: 97 bytes on wire (776 bits), 97 bytes captured (776 bits)
  530. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Vmware_cb:09:63 (00:0c:29:cb:09:63)
  531. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.2 (192.168.10.2)
  532. Transmission Control Protocol, Src Port: 49442 (49442), Dst Port: ldap (389), Seq: 1945, Ack: 979, Len: 43
  533. Lightweight Directory Access Protocol
  534.  
  535. No. Time Source Destination Protocol Length Info
  536. 316 13.322011 192.168.10.2 192.168.10.6 TCP 60 ldap > 49442 [RST, ACK] Seq=979 Ack=1988 Win=0 Len=0
  537.  
  538. Frame 316: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
  539. Ethernet II, Src: Vmware_cb:09:63 (00:0c:29:cb:09:63), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  540. Internet Protocol Version 4, Src: 192.168.10.2 (192.168.10.2), Dst: 192.168.10.6 (192.168.10.6)
  541. Transmission Control Protocol, Src Port: ldap (389), Dst Port: 49442 (49442), Seq: 979, Ack: 1988, Len: 0
  542.  
  543. No. Time Source Destination Protocol Length Info
  544. 317 13.322533 192.168.10.6 192.168.10.2 DCERPC 194 Request: call_id: 52 Fragment: Single opnum: 1 ctx_id: 1
  545.  
  546. Frame 317: 194 bytes on wire (1552 bits), 194 bytes captured (1552 bits)
  547. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Vmware_cb:09:63 (00:0c:29:cb:09:63)
  548. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.2 (192.168.10.2)
  549. Transmission Control Protocol, Src Port: 49285 (49285), Dst Port: solid-mux (1029), Seq: 801, Ack: 977, Len: 140
  550. Distributed Computing Environment / Remote Procedure Call (DCE/RPC) Request, Fragment: Single, FragLen: 140, Call: 52 Ctx: 1
  551.  
  552. No. Time Source Destination Protocol Length Info
  553. 318 13.322762 192.168.10.2 192.168.10.6 DCERPC 194 Response: call_id: 52 Fragment: Single ctx_id: 1
  554.  
  555. Frame 318: 194 bytes on wire (1552 bits), 194 bytes captured (1552 bits)
  556. Ethernet II, Src: Vmware_cb:09:63 (00:0c:29:cb:09:63), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  557. Internet Protocol Version 4, Src: 192.168.10.2 (192.168.10.2), Dst: 192.168.10.6 (192.168.10.6)
  558. Transmission Control Protocol, Src Port: solid-mux (1029), Dst Port: 49285 (49285), Seq: 977, Ack: 941, Len: 140
  559. Distributed Computing Environment / Remote Procedure Call (DCE/RPC) Response, Fragment: Single, FragLen: 140, Call: 52 Ctx: 1
  560.  
  561. No. Time Source Destination Protocol Length Info
  562. 319 13.324277 192.168.10.6 192.168.10.2 TCP 66 49443 > ldap [SYN] Seq=0 Win=8192 Len=0 MSS=1460 WS=256 SACK_PERM=1
  563.  
  564. Frame 319: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
  565. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Vmware_cb:09:63 (00:0c:29:cb:09:63)
  566. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.2 (192.168.10.2)
  567. Transmission Control Protocol, Src Port: 49443 (49443), Dst Port: ldap (389), Seq: 0, Len: 0
  568.  
  569. No. Time Source Destination Protocol Length Info
  570. 320 13.324437 192.168.10.2 192.168.10.6 TCP 66 ldap > 49443 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=256 SACK_PERM=1
  571.  
  572. Frame 320: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
  573. Ethernet II, Src: Vmware_cb:09:63 (00:0c:29:cb:09:63), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  574. Internet Protocol Version 4, Src: 192.168.10.2 (192.168.10.2), Dst: 192.168.10.6 (192.168.10.6)
  575. Transmission Control Protocol, Src Port: ldap (389), Dst Port: 49443 (49443), Seq: 0, Ack: 1, Len: 0
  576.  
  577. No. Time Source Destination Protocol Length Info
  578. 321 13.324499 192.168.10.6 192.168.10.2 TCP 54 49443 > ldap [ACK] Seq=1 Ack=1 Win=65536 Len=0
  579.  
  580. Frame 321: 54 bytes on wire (432 bits), 54 bytes captured (432 bits)
  581. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Vmware_cb:09:63 (00:0c:29:cb:09:63)
  582. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.2 (192.168.10.2)
  583. Transmission Control Protocol, Src Port: 49443 (49443), Dst Port: ldap (389), Seq: 1, Ack: 1, Len: 0
  584.  
  585. No. Time Source Destination Protocol Length Info
  586. 322 13.325047 192.168.10.6 192.168.10.2 TCP 1514 [TCP segment of a reassembled PDU]
  587.  
  588. Frame 322: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits)
  589. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Vmware_cb:09:63 (00:0c:29:cb:09:63)
  590. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.2 (192.168.10.2)
  591. Transmission Control Protocol, Src Port: 49443 (49443), Dst Port: ldap (389), Seq: 1, Ack: 1, Len: 1460
  592.  
  593. No. Time Source Destination Protocol Length Info
  594. 323 13.325067 192.168.10.6 192.168.10.2 LDAP 107 bindRequest(126) "<ROOT>" sasl
  595.  
  596. Frame 323: 107 bytes on wire (856 bits), 107 bytes captured (856 bits)
  597. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Vmware_cb:09:63 (00:0c:29:cb:09:63)
  598. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.2 (192.168.10.2)
  599. Transmission Control Protocol, Src Port: 49443 (49443), Dst Port: ldap (389), Seq: 1461, Ack: 1, Len: 53
  600. [2 Reassembled TCP Segments (1513 bytes): #322(1460), #323(53)]
  601. Lightweight Directory Access Protocol
  602.  
  603. No. Time Source Destination Protocol Length Info
  604. 324 13.325209 192.168.10.2 192.168.10.6 TCP 60 ldap > 49443 [ACK] Seq=1 Ack=1514 Win=65536 Len=0
  605.  
  606. Frame 324: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
  607. Ethernet II, Src: Vmware_cb:09:63 (00:0c:29:cb:09:63), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  608. Internet Protocol Version 4, Src: 192.168.10.2 (192.168.10.2), Dst: 192.168.10.6 (192.168.10.6)
  609. Transmission Control Protocol, Src Port: ldap (389), Dst Port: 49443 (49443), Seq: 1, Ack: 1514, Len: 0
  610.  
  611. No. Time Source Destination Protocol Length Info
  612. 325 13.325913 192.168.10.2 192.168.10.6 LDAP 264 bindResponse(126) success
  613.  
  614. Frame 325: 264 bytes on wire (2112 bits), 264 bytes captured (2112 bits)
  615. Ethernet II, Src: Vmware_cb:09:63 (00:0c:29:cb:09:63), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  616. Internet Protocol Version 4, Src: 192.168.10.2 (192.168.10.2), Dst: 192.168.10.6 (192.168.10.6)
  617. Transmission Control Protocol, Src Port: ldap (389), Dst Port: 49443 (49443), Seq: 1, Ack: 1514, Len: 210
  618. Lightweight Directory Access Protocol
  619.  
  620. No. Time Source Destination Protocol Length Info
  621. 326 13.326260 192.168.10.6 192.168.10.2 EPM 222 Map request[Malformed Packet]
  622.  
  623. Frame 326: 222 bytes on wire (1776 bits), 222 bytes captured (1776 bits)
  624. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Vmware_cb:09:63 (00:0c:29:cb:09:63)
  625. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.2 (192.168.10.2)
  626. Transmission Control Protocol, Src Port: 49441 (49441), Dst Port: epmap (135), Seq: 497, Ack: 453, Len: 168
  627. Distributed Computing Environment / Remote Procedure Call (DCE/RPC) Request, Fragment: Single, FragLen: 168, Call: 3 Ctx: 1, [Resp: #327]
  628. DCE/RPC Endpoint Mapper, Map
  629. [Malformed Packet: EPM]
  630.  
  631. No. Time Source Destination Protocol Length Info
  632. 327 13.326450 192.168.10.2 192.168.10.6 EPM 226 Map response[Malformed Packet]
  633.  
  634. Frame 327: 226 bytes on wire (1808 bits), 226 bytes captured (1808 bits)
  635. Ethernet II, Src: Vmware_cb:09:63 (00:0c:29:cb:09:63), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  636. Internet Protocol Version 4, Src: 192.168.10.2 (192.168.10.2), Dst: 192.168.10.6 (192.168.10.6)
  637. Transmission Control Protocol, Src Port: epmap (135), Dst Port: 49441 (49441), Seq: 453, Ack: 665, Len: 172
  638. Distributed Computing Environment / Remote Procedure Call (DCE/RPC) Response, Fragment: Single, FragLen: 172, Call: 3 Ctx: 1, [Req: #326]
  639. DCE/RPC Endpoint Mapper, Map
  640. [Malformed Packet: EPM]
  641.  
  642. No. Time Source Destination Protocol Length Info
  643. 328 13.326670 192.168.10.6 192.168.10.2 DCERPC 258 Request: call_id: 53 Fragment: Single opnum: 0 ctx_id: 1
  644.  
  645. Frame 328: 258 bytes on wire (2064 bits), 258 bytes captured (2064 bits)
  646. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Vmware_cb:09:63 (00:0c:29:cb:09:63)
  647. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.2 (192.168.10.2)
  648. Transmission Control Protocol, Src Port: 49285 (49285), Dst Port: solid-mux (1029), Seq: 941, Ack: 1117, Len: 204
  649. Distributed Computing Environment / Remote Procedure Call (DCE/RPC) Request, Fragment: Single, FragLen: 204, Call: 53 Ctx: 1
  650.  
  651. No. Time Source Destination Protocol Length Info
  652. 329 13.326897 192.168.10.2 192.168.10.6 DCERPC 258 Response: call_id: 53 Fragment: Single ctx_id: 1
  653.  
  654. Frame 329: 258 bytes on wire (2064 bits), 258 bytes captured (2064 bits)
  655. Ethernet II, Src: Vmware_cb:09:63 (00:0c:29:cb:09:63), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  656. Internet Protocol Version 4, Src: 192.168.10.2 (192.168.10.2), Dst: 192.168.10.6 (192.168.10.6)
  657. Transmission Control Protocol, Src Port: solid-mux (1029), Dst Port: 49285 (49285), Seq: 1117, Ack: 1145, Len: 204
  658. Distributed Computing Environment / Remote Procedure Call (DCE/RPC) Response, Fragment: Single, FragLen: 204, Call: 53 Ctx: 1
  659.  
  660. No. Time Source Destination Protocol Length Info
  661. 330 13.327084 192.168.10.6 192.168.10.2 LDAP 251 SASL GSS-API Integrity: searchRequest(127) "<ROOT>" baseObject
  662.  
  663. Frame 330: 251 bytes on wire (2008 bits), 251 bytes captured (2008 bits)
  664. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Vmware_cb:09:63 (00:0c:29:cb:09:63)
  665. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.2 (192.168.10.2)
  666. Transmission Control Protocol, Src Port: 49443 (49443), Dst Port: ldap (389), Seq: 1514, Ack: 211, Len: 197
  667. Lightweight Directory Access Protocol
  668.  
  669. No. Time Source Destination Protocol Length Info
  670. 331 13.327317 192.168.10.2 192.168.10.6 LDAP 508 SASL GSS-API Integrity: searchResEntry(127) "<ROOT>" searchResDone(127) success [1 result]
  671.  
  672. Frame 331: 508 bytes on wire (4064 bits), 508 bytes captured (4064 bits)
  673. Ethernet II, Src: Vmware_cb:09:63 (00:0c:29:cb:09:63), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  674. Internet Protocol Version 4, Src: 192.168.10.2 (192.168.10.2), Dst: 192.168.10.6 (192.168.10.6)
  675. Transmission Control Protocol, Src Port: ldap (389), Dst Port: 49443 (49443), Seq: 211, Ack: 1711, Len: 454
  676. Lightweight Directory Access Protocol
  677.  
  678. No. Time Source Destination Protocol Length Info
  679. 332 13.327523 192.168.10.6 192.168.10.2 LDAP 289 SASL GSS-API Integrity: searchRequest(128) "CN=Schema,CN=Configuration,DC=chappoville,DC=local" baseObject
  680.  
  681. Frame 332: 289 bytes on wire (2312 bits), 289 bytes captured (2312 bits)
  682. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Vmware_cb:09:63 (00:0c:29:cb:09:63)
  683. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.2 (192.168.10.2)
  684. Transmission Control Protocol, Src Port: 49443 (49443), Dst Port: ldap (389), Seq: 1711, Ack: 665, Len: 235
  685. Lightweight Directory Access Protocol
  686.  
  687. No. Time Source Destination Protocol Length Info
  688. 333 13.327811 192.168.10.2 192.168.10.6 LDAP 370 SASL GSS-API Integrity: searchResEntry(128) "CN=Schema,CN=Configuration,DC=chappoville,DC=local" searchResDone(128) success [1 result]
  689.  
  690. Frame 333: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits)
  691. Ethernet II, Src: Vmware_cb:09:63 (00:0c:29:cb:09:63), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  692. Internet Protocol Version 4, Src: 192.168.10.2 (192.168.10.2), Dst: 192.168.10.6 (192.168.10.6)
  693. Transmission Control Protocol, Src Port: ldap (389), Dst Port: 49443 (49443), Seq: 665, Ack: 1946, Len: 316
  694. Lightweight Directory Access Protocol
  695.  
  696. No. Time Source Destination Protocol Length Info
  697. 334 13.328182 192.168.10.6 192.168.10.2 LDAP 98 SASL GSS-API Integrity: unbindRequest(129)
  698.  
  699. Frame 334: 98 bytes on wire (784 bits), 98 bytes captured (784 bits)
  700. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Vmware_cb:09:63 (00:0c:29:cb:09:63)
  701. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.2 (192.168.10.2)
  702. Transmission Control Protocol, Src Port: 49443 (49443), Dst Port: ldap (389), Seq: 1946, Ack: 981, Len: 44
  703. Lightweight Directory Access Protocol
  704.  
  705. No. Time Source Destination Protocol Length Info
  706. 335 13.328300 192.168.10.6 192.168.10.2 TCP 54 49443 > ldap [FIN, ACK] Seq=1990 Ack=981 Win=64512 Len=0
  707.  
  708. Frame 335: 54 bytes on wire (432 bits), 54 bytes captured (432 bits)
  709. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Vmware_cb:09:63 (00:0c:29:cb:09:63)
  710. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.2 (192.168.10.2)
  711. Transmission Control Protocol, Src Port: 49443 (49443), Dst Port: ldap (389), Seq: 1990, Ack: 981, Len: 0
  712.  
  713. No. Time Source Destination Protocol Length Info
  714. 336 13.328391 192.168.10.6 192.168.10.2 DCERPC 194 Request: call_id: 54 Fragment: Single opnum: 1 ctx_id: 1
  715.  
  716. Frame 336: 194 bytes on wire (1552 bits), 194 bytes captured (1552 bits)
  717. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Vmware_cb:09:63 (00:0c:29:cb:09:63)
  718. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.2 (192.168.10.2)
  719. Transmission Control Protocol, Src Port: 49285 (49285), Dst Port: solid-mux (1029), Seq: 1145, Ack: 1321, Len: 140
  720. Distributed Computing Environment / Remote Procedure Call (DCE/RPC) Request, Fragment: Single, FragLen: 140, Call: 54 Ctx: 1
  721.  
  722. No. Time Source Destination Protocol Length Info
  723. 337 13.328530 192.168.10.2 192.168.10.6 TCP 60 ldap > 49443 [ACK] Seq=981 Ack=1991 Win=65024 Len=0
  724.  
  725. Frame 337: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
  726. Ethernet II, Src: Vmware_cb:09:63 (00:0c:29:cb:09:63), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  727. Internet Protocol Version 4, Src: 192.168.10.2 (192.168.10.2), Dst: 192.168.10.6 (192.168.10.6)
  728. Transmission Control Protocol, Src Port: ldap (389), Dst Port: 49443 (49443), Seq: 981, Ack: 1991, Len: 0
  729.  
  730. No. Time Source Destination Protocol Length Info
  731. 338 13.328615 192.168.10.2 192.168.10.6 TCP 60 ldap > 49443 [RST, ACK] Seq=981 Ack=1991 Win=0 Len=0
  732.  
  733. Frame 338: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
  734. Ethernet II, Src: Vmware_cb:09:63 (00:0c:29:cb:09:63), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  735. Internet Protocol Version 4, Src: 192.168.10.2 (192.168.10.2), Dst: 192.168.10.6 (192.168.10.6)
  736. Transmission Control Protocol, Src Port: ldap (389), Dst Port: 49443 (49443), Seq: 981, Ack: 1991, Len: 0
  737.  
  738. No. Time Source Destination Protocol Length Info
  739. 339 13.328754 192.168.10.2 192.168.10.6 DCERPC 194 Response: call_id: 54 Fragment: Single ctx_id: 1
  740.  
  741. Frame 339: 194 bytes on wire (1552 bits), 194 bytes captured (1552 bits)
  742. Ethernet II, Src: Vmware_cb:09:63 (00:0c:29:cb:09:63), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  743. Internet Protocol Version 4, Src: 192.168.10.2 (192.168.10.2), Dst: 192.168.10.6 (192.168.10.6)
  744. Transmission Control Protocol, Src Port: solid-mux (1029), Dst Port: 49285 (49285), Seq: 1321, Ack: 1285, Len: 140
  745. Distributed Computing Environment / Remote Procedure Call (DCE/RPC) Response, Fragment: Single, FragLen: 140, Call: 54 Ctx: 1
  746.  
  747. No. Time Source Destination Protocol Length Info
  748. 357 13.507181 192.168.10.6 192.168.10.2 TCP 54 49282 > ldap [ACK] Seq=241 Ack=234 Win=252 Len=0
  749.  
  750. Frame 357: 54 bytes on wire (432 bits), 54 bytes captured (432 bits)
  751. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Vmware_cb:09:63 (00:0c:29:cb:09:63)
  752. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.2 (192.168.10.2)
  753. Transmission Control Protocol, Src Port: 49282 (49282), Dst Port: ldap (389), Seq: 241, Ack: 234, Len: 0
  754.  
  755. No. Time Source Destination Protocol Length Info
  756. 358 13.507195 192.168.10.6 192.168.10.2 TCP 54 49283 > ldap [ACK] Seq=1786 Ack=1874 Win=255 Len=0
  757.  
  758. Frame 358: 54 bytes on wire (432 bits), 54 bytes captured (432 bits)
  759. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Vmware_cb:09:63 (00:0c:29:cb:09:63)
  760. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.2 (192.168.10.2)
  761. Transmission Control Protocol, Src Port: 49283 (49283), Dst Port: ldap (389), Seq: 1786, Ack: 1874, Len: 0
  762.  
  763. No. Time Source Destination Protocol Length Info
  764. 359 13.522487 192.168.10.6 192.168.10.2 TCP 54 49441 > epmap [ACK] Seq=665 Ack=625 Win=65024 Len=0
  765.  
  766. Frame 359: 54 bytes on wire (432 bits), 54 bytes captured (432 bits)
  767. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Vmware_cb:09:63 (00:0c:29:cb:09:63)
  768. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.2 (192.168.10.2)
  769. Transmission Control Protocol, Src Port: 49441 (49441), Dst Port: epmap (135), Seq: 665, Ack: 625, Len: 0
  770.  
  771. No. Time Source Destination Protocol Length Info
  772. 360 13.522501 192.168.10.6 192.168.10.2 TCP 54 49285 > solid-mux [ACK] Seq=1285 Ack=1461 Win=253 Len=0
  773.  
  774. Frame 360: 54 bytes on wire (432 bits), 54 bytes captured (432 bits)
  775. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Vmware_cb:09:63 (00:0c:29:cb:09:63)
  776. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.2 (192.168.10.2)
  777. Transmission Control Protocol, Src Port: 49285 (49285), Dst Port: solid-mux (1029), Seq: 1285, Ack: 1461, Len: 0
  778.  
  779. No. Time Source Destination Protocol Length Info
  780. 361 13.600955 192.168.10.6 200.1.105.107 TCP 66 49440 > http [SYN] Seq=0 Win=8192 Len=0 MSS=1460 WS=4 SACK_PERM=1
  781.  
  782. Frame 361: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
  783. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Sonicwal_6c:1a:74 (c0:ea:e4:6c:1a:74)
  784. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 200.1.105.107 (200.1.105.107)
  785. Transmission Control Protocol, Src Port: 49440 (49440), Dst Port: http (80), Seq: 0, Len: 0
  786.  
  787. No. Time Source Destination Protocol Length Info
  788. 364 13.788441 192.168.10.6 200.1.105.48 TCP 62 49438 > http [SYN] Seq=0 Win=8192 Len=0 MSS=1460 SACK_PERM=1
  789.  
  790. Frame 364: 62 bytes on wire (496 bits), 62 bytes captured (496 bits)
  791. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Sonicwal_6c:1a:74 (c0:ea:e4:6c:1a:74)
  792. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 200.1.105.48 (200.1.105.48)
  793. Transmission Control Protocol, Src Port: 49438 (49438), Dst Port: http (80), Seq: 0, Len: 0
  794.  
  795. No. Time Source Destination Protocol Length Info
  796. 365 13.788460 192.168.10.6 200.1.105.107 TCP 62 49437 > http [SYN] Seq=0 Win=8192 Len=0 MSS=1460 SACK_PERM=1
  797.  
  798. Frame 365: 62 bytes on wire (496 bits), 62 bytes captured (496 bits)
  799. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Sonicwal_6c:1a:74 (c0:ea:e4:6c:1a:74)
  800. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 200.1.105.107 (200.1.105.107)
  801. Transmission Control Protocol, Src Port: 49437 (49437), Dst Port: http (80), Seq: 0, Len: 0
  802.  
  803. No. Time Source Destination Protocol Length Info
  804. 367 14.100949 192.168.10.6 192.168.10.7 TCP 55 [TCP segment of a reassembled PDU]
  805.  
  806. Frame 367: 55 bytes on wire (440 bits), 55 bytes captured (440 bits)
  807. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Dell_58:67:96 (00:24:e8:58:67:96)
  808. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.7 (192.168.10.7)
  809. Transmission Control Protocol, Src Port: 49340 (49340), Dst Port: ms-sql-s (1433), Seq: 1, Ack: 1, Len: 1
  810.  
  811. No. Time Source Destination Protocol Length Info
  812. 368 14.101252 192.168.10.7 192.168.10.6 TCP 66 ms-sql-s > 49340 [ACK] Seq=1 Ack=2 Win=251 Len=0 SLE=1 SRE=2
  813.  
  814. Frame 368: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
  815. Ethernet II, Src: Dell_58:67:96 (00:24:e8:58:67:96), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  816. Internet Protocol Version 4, Src: 192.168.10.7 (192.168.10.7), Dst: 192.168.10.6 (192.168.10.6)
  817. Transmission Control Protocol, Src Port: ms-sql-s (1433), Dst Port: 49340 (49340), Seq: 1, Ack: 2, Len: 0
  818.  
  819. No. Time Source Destination Protocol Length Info
  820. 369 14.184304 192.168.10.7 192.168.10.6 TCP 60 [TCP Keep-Alive] ms-sql-s > 49340 [ACK] Seq=0 Ack=2 Win=251 Len=1
  821.  
  822. Frame 369: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
  823. Ethernet II, Src: Dell_58:67:96 (00:24:e8:58:67:96), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  824. Internet Protocol Version 4, Src: 192.168.10.7 (192.168.10.7), Dst: 192.168.10.6 (192.168.10.6)
  825. Transmission Control Protocol, Src Port: ms-sql-s (1433), Dst Port: 49340 (49340), Seq: 0, Ack: 2, Len: 1
  826. Data (1 byte)
  827.  
  828. 0000 00 .
  829.  
  830. No. Time Source Destination Protocol Length Info
  831. 370 14.184328 192.168.10.6 192.168.10.7 TCP 66 [TCP Keep-Alive ACK] 49340 > ms-sql-s [ACK] Seq=2 Ack=1 Win=255 Len=0 SLE=0 SRE=1
  832.  
  833. Frame 370: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
  834. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Dell_58:67:96 (00:24:e8:58:67:96)
  835. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 192.168.10.7 (192.168.10.7)
  836. Transmission Control Protocol, Src Port: 49340 (49340), Dst Port: ms-sql-s (1433), Seq: 2, Ack: 1, Len: 0
  837.  
  838. No. Time Source Destination Protocol Length Info
  839. 371 14.244663 200.1.105.113 192.168.10.6 TCP 60 http > 49424 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0
  840.  
  841. Frame 371: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
  842. Ethernet II, Src: Sonicwal_6c:1a:74 (c0:ea:e4:6c:1a:74), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  843. Internet Protocol Version 4, Src: 200.1.105.113 (200.1.105.113), Dst: 192.168.10.6 (192.168.10.6)
  844. Transmission Control Protocol, Src Port: http (80), Dst Port: 49424 (49424), Seq: 1, Ack: 1, Len: 0
  845.  
  846. No. Time Source Destination Protocol Length Info
  847. 391 14.915718 200.1.105.113 192.168.10.6 TCP 60 http > 49425 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0
  848.  
  849. Frame 391: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
  850. Ethernet II, Src: Sonicwal_6c:1a:74 (c0:ea:e4:6c:1a:74), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  851. Internet Protocol Version 4, Src: 200.1.105.113 (200.1.105.113), Dst: 192.168.10.6 (192.168.10.6)
  852. Transmission Control Protocol, Src Port: http (80), Dst Port: 49425 (49425), Seq: 1, Ack: 1, Len: 0
  853.  
  854. No. Time Source Destination Protocol Length Info
  855. 449 17.710317 192.168.10.6 72.21.91.29 TCP 62 49439 > http [SYN] Seq=0 Win=8192 Len=0 MSS=1460 SACK_PERM=1
  856.  
  857. Frame 449: 62 bytes on wire (496 bits), 62 bytes captured (496 bits)
  858. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Sonicwal_6c:1a:74 (c0:ea:e4:6c:1a:74)
  859. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 72.21.91.29 (72.21.91.29)
  860. Transmission Control Protocol, Src Port: 49439 (49439), Dst Port: http (80), Seq: 0, Len: 0
  861.  
  862. No. Time Source Destination Protocol Length Info
  863. 490 19.015397 192.168.10.6 205.234.175.175 TCP 66 49444 > http [SYN] Seq=0 Win=8192 Len=0 MSS=1460 WS=4 SACK_PERM=1
  864.  
  865. Frame 490: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
  866. Ethernet II, Src: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e), Dst: Sonicwal_6c:1a:74 (c0:ea:e4:6c:1a:74)
  867. Internet Protocol Version 4, Src: 192.168.10.6 (192.168.10.6), Dst: 205.234.175.175 (205.234.175.175)
  868. Transmission Control Protocol, Src Port: 49444 (49444), Dst Port: http (80), Seq: 0, Len: 0
  869.  
  870. No. Time Source Destination Protocol Length Info
  871. 491 19.072190 205.234.175.175 192.168.10.6 TCP 60 http > 49444 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0
  872.  
  873. Frame 491: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
  874. Ethernet II, Src: Sonicwal_6c:1a:74 (c0:ea:e4:6c:1a:74), Dst: Vmware_ea:b4:5e (00:0c:29:ea:b4:5e)
  875. Internet Protocol Version 4, Src: 205.234.175.175 (205.234.175.175), Dst: 192.168.10.6 (192.168.10.6)
  876. Transmission Control Protocol, Src Port: http (80), Dst Port: 49444 (49444), Seq: 1, Ack: 1, Len: 0
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement