SHARE
TWEET

Pfsense packet capture

a guest Nov 19th, 2018 57 in 60 days
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. 20:02:10.093222 IP (tos 0x0, ttl 62, id 63664, offset 0, flags [DF], proto TCP (6), length 60)
  2.     192.168.0.99.18690 > 192.168.0.1.80: Flags [S], cksum 0x008d (correct), seq 261638532, win 29200, options [mss 1400,sackOK,TS val 4698420 ecr 0,nop,wscale 7], length 0
  3. 20:02:10.093696 IP (tos 0x0, ttl 254, id 2714, offset 0, flags [none], proto TCP (6), length 44)
  4.     192.168.0.1.80 > 192.168.0.99.18690: Flags [S.], cksum 0xc8a5 (correct), seq 1258315776, ack 261638533, win 1024, options [mss 512], length 0
  5. 20:02:10.132566 IP (tos 0x0, ttl 62, id 63665, offset 0, flags [DF], proto TCP (6), length 40)
  6.     192.168.0.99.18690 > 192.168.0.1.80: Flags [.], cksum 0x6e9e (correct), ack 1, win 29200, length 0
  7. 20:02:10.136632 IP (tos 0x0, ttl 62, id 63666, offset 0, flags [DF], proto TCP (6), length 372)
  8.     192.168.0.99.18690 > 192.168.0.1.80: Flags [P.], cksum 0xa93c (correct), seq 1:333, ack 1, win 29200, length 332: HTTP, length: 332
  9.     GET / HTTP/1.1
  10.     Host: 192.168.0.1
  11.     User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Firefox/60.0
  12.     Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  13.     Accept-Language: it-IT,it;q=0.8,en-US;q=0.5,en;q=0.3
  14.     Accept-Encoding: gzip, deflate
  15.     Connection: keep-alive
  16.     Upgrade-Insecure-Requests: 1
  17.    
  18. 20:02:10.136968 IP (tos 0x0, ttl 254, id 2715, offset 0, flags [none], proto TCP (6), length 40)
  19.     192.168.0.1.80 > 192.168.0.99.18690: Flags [.], cksum 0xdcae (correct), ack 333, win 692, length 0
  20. 20:02:10.137197 IP (tos 0x0, ttl 254, id 2716, offset 0, flags [none], proto TCP (6), length 40)
  21.     192.168.0.1.80 > 192.168.0.99.18690: Flags [.], cksum 0xdb62 (correct), ack 333, win 1024, length 0
  22. 20:02:10.138067 IP (tos 0x0, ttl 254, id 2717, offset 0, flags [none], proto TCP (6), length 164)
  23.     192.168.0.1.80 > 192.168.0.99.18690: Flags [P.], cksum 0x8fe6 (correct), seq 1:125, ack 333, win 1024, length 124: HTTP, length: 124
  24.     HTTP/1.1 303 See Other
  25.     Location: http://192.168.0.1/login.html
  26.     Content-Length: 0
  27.     Server: RomPager/4.07 UPnP/1.0
  28.     EXT:
  29.    
  30. 20:02:10.185048 IP (tos 0x0, ttl 62, id 63667, offset 0, flags [DF], proto TCP (6), length 40)
  31.     192.168.0.99.18690 > 192.168.0.1.80: Flags [.], cksum 0x6cd6 (correct), ack 125, win 29200, length 0
  32. 20:02:10.196571 IP (tos 0x0, ttl 62, id 63668, offset 0, flags [DF], proto TCP (6), length 382)
  33.     192.168.0.99.18690 > 192.168.0.1.80: Flags [P.], cksum 0xbf52 (correct), seq 333:675, ack 125, win 29200, length 342: HTTP, length: 342
  34.     GET /login.html HTTP/1.1
  35.     Host: 192.168.0.1
  36.     User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Firefox/60.0
  37.     Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  38.     Accept-Language: it-IT,it;q=0.8,en-US;q=0.5,en;q=0.3
  39.     Accept-Encoding: gzip, deflate
  40.     Connection: keep-alive
  41.     Upgrade-Insecure-Requests: 1
  42.    
  43. 20:02:10.196918 IP (tos 0x0, ttl 254, id 2718, offset 0, flags [none], proto TCP (6), length 40)
  44.     192.168.0.1.80 > 192.168.0.99.18690: Flags [.], cksum 0xdae6 (correct), ack 675, win 682, length 0
  45. 20:02:10.197192 IP (tos 0x0, ttl 254, id 2719, offset 0, flags [none], proto TCP (6), length 40)
  46.     192.168.0.1.80 > 192.168.0.99.18690: Flags [.], cksum 0xd990 (correct), ack 675, win 1024, length 0
  47. 20:02:10.198075 IP (tos 0x0, ttl 254, id 2720, offset 0, flags [none], proto TCP (6), length 245)
  48.     192.168.0.1.80 > 192.168.0.99.18690: Flags [P.], cksum 0x5b71 (correct), seq 125:330, ack 675, win 1024, length 205: HTTP, length: 205
  49.     HTTP/1.1 200 OK
  50.     Content-Type: text/html
  51.     Date: Mon, 19 Nov 2018 20:02:10 GMT
  52.     Pragma: no-cache
  53.     Expires: Thu, 26 Oct 1995 00:00:00 GMT
  54.     Transfer-Encoding: chunked
  55.     Server: RomPager/4.07 UPnP/1.0
  56.     EXT:
  57.    
  58. 20:02:10.281774 IP (tos 0x0, ttl 62, id 63669, offset 0, flags [DF], proto TCP (6), length 40)
  59.     192.168.0.99.18690 > 192.168.0.1.80: Flags [.], cksum 0x66c3 (correct), ack 330, win 30208, length 0
  60. 20:02:10.282502 IP (tos 0x0, ttl 254, id 2721, offset 0, flags [none], proto TCP (6), length 1440)
  61.     192.168.0.1.80 > 192.168.0.99.18690: Flags [.], cksum 0x9349 (correct), seq 330:1730, ack 675, win 1024, length 1400: HTTP
  62. 20:02:10.337353 IP (tos 0x0, ttl 62, id 63670, offset 0, flags [DF], proto TCP (6), length 40)
  63.     192.168.0.99.18690 > 192.168.0.1.80: Flags [.], cksum 0x5983 (correct), ack 1730, win 32200, length 0
  64. 20:02:10.337982 IP (tos 0x0, ttl 254, id 2722, offset 0, flags [none], proto TCP (6), length 1440)
  65.     192.168.0.1.80 > 192.168.0.99.18690: Flags [.], cksum 0x7568 (correct), seq 1730:3130, ack 675, win 1024, length 1400: HTTP
  66. 20:02:10.365452 IP (tos 0x0, ttl 62, id 49417, offset 0, flags [DF], proto TCP (6), length 60)
  67.     192.168.0.99.64206 > 192.168.0.1.80: Flags [S], cksum 0x2c72 (correct), seq 179662961, win 29200, options [mss 1400,sackOK,TS val 4698488 ecr 0,nop,wscale 7], length 0
  68. 20:02:10.365800 IP (tos 0x0, ttl 254, id 2723, offset 0, flags [none], proto TCP (6), length 44)
  69.     192.168.0.1.80 > 192.168.0.99.64206: Flags [S.], cksum 0x74bd (correct), seq 1259462656, ack 179662962, win 1024, options [mss 512], length 0
  70. 20:02:10.391026 IP (tos 0x0, ttl 62, id 63671, offset 0, flags [DF], proto TCP (6), length 40)
  71.     192.168.0.99.18690 > 192.168.0.1.80: Flags [.], cksum 0x491b (correct), ack 3130, win 35000, length 0
  72. 20:02:10.391522 IP (tos 0x0, ttl 254, id 2724, offset 0, flags [none], proto TCP (6), length 135)
  73.     192.168.0.1.80 > 192.168.0.99.18690: Flags [P.], cksum 0xd08c (correct), seq 3130:3225, ack 675, win 1024, length 95: HTTP
  74. 20:02:10.391840 IP (tos 0x0, ttl 254, id 2725, offset 0, flags [none], proto TCP (6), length 1440)
  75.     192.168.0.1.80 > 192.168.0.99.18690: Flags [.], cksum 0x14d6 (correct), seq 3225:4625, ack 675, win 1024, length 1400: HTTP
  76. 20:02:10.404415 IP (tos 0x0, ttl 62, id 49418, offset 0, flags [DF], proto TCP (6), length 40)
  77.     192.168.0.99.64206 > 192.168.0.1.80: Flags [.], cksum 0x1ab6 (correct), ack 1, win 29200, length 0
  78. 20:02:10.410004 IP (tos 0x0, ttl 62, id 49419, offset 0, flags [DF], proto TCP (6), length 350)
  79.     192.168.0.99.64206 > 192.168.0.1.80: Flags [P.], cksum 0x328e (correct), seq 1:311, ack 1, win 29200, length 310: HTTP, length: 310
  80.     GET /stylemain.css HTTP/1.1
  81.     Host: 192.168.0.1
  82.     User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Firefox/60.0
  83.     Accept: text/css,*/*;q=0.1
  84.     Accept-Language: it-IT,it;q=0.8,en-US;q=0.5,en;q=0.3
  85.     Accept-Encoding: gzip, deflate
  86.     Referer: http://192.168.0.1/login.html
  87.     Connection: keep-alive
  88.    
  89. 20:02:10.410358 IP (tos 0x0, ttl 254, id 2726, offset 0, flags [none], proto TCP (6), length 40)
  90.     192.168.0.1.80 > 192.168.0.99.64206: Flags [.], cksum 0x88c6 (correct), ack 311, win 714, length 0
  91. 20:02:10.410625 IP (tos 0x0, ttl 254, id 2727, offset 0, flags [none], proto TCP (6), length 40)
  92.     192.168.0.1.80 > 192.168.0.99.64206: Flags [.], cksum 0x8790 (correct), ack 311, win 1024, length 0
  93. 20:02:10.411823 IP (tos 0x0, ttl 254, id 2728, offset 0, flags [none], proto TCP (6), length 244)
  94.     192.168.0.1.80 > 192.168.0.99.64206: Flags [P.], cksum 0x9a4c (correct), seq 1:205, ack 311, win 1024, length 204: HTTP, length: 204
  95.     HTTP/1.1 200 OK
  96.     Content-Type: text/css
  97.     Date: Mon, 19 Nov 2018 20:02:11 GMT
  98.     Pragma: no-cache
  99.     Expires: Thu, 26 Oct 1995 00:00:00 GMT
  100.     Transfer-Encoding: chunked
  101.     Server: RomPager/4.07 UPnP/1.0
  102.     EXT:
  103.    
  104. 20:02:10.432435 IP (tos 0x0, ttl 62, id 63672, offset 0, flags [DF], proto TCP (6), length 40)
  105.     192.168.0.99.18690 > 192.168.0.1.80: Flags [.], cksum 0x48bc (correct), ack 3225, win 35000, length 0
  106. 20:02:10.447353 IP (tos 0x0, ttl 62, id 63673, offset 0, flags [DF], proto TCP (6), length 40)
  107.     192.168.0.99.18690 > 192.168.0.1.80: Flags [.], cksum 0x3854 (correct), ack 4625, win 37800, length 0
  108. 20:02:10.448120 IP (tos 0x0, ttl 254, id 2729, offset 0, flags [none], proto TCP (6), length 1440)
  109.     192.168.0.1.80 > 192.168.0.99.18690: Flags [.], cksum 0x7dd7 (correct), seq 4625:6025, ack 675, win 1024, length 1400: HTTP
  110. 20:02:10.454460 IP (tos 0x0, ttl 62, id 49420, offset 0, flags [DF], proto TCP (6), length 40)
  111.     192.168.0.99.64206 > 192.168.0.1.80: Flags [.], cksum 0x14c4 (correct), ack 205, win 30208, length 0
  112. 20:02:10.455133 IP (tos 0x0, ttl 254, id 2730, offset 0, flags [none], proto TCP (6), length 1440)
  113.     192.168.0.1.80 > 192.168.0.99.64206: Flags [.], cksum 0xba17 (correct), seq 205:1605, ack 311, win 1024, length 1400: HTTP
  114. 20:02:10.501557 IP (tos 0x0, ttl 62, id 63674, offset 0, flags [DF], proto TCP (6), length 40)
  115.     192.168.0.99.18690 > 192.168.0.1.80: Flags [.], cksum 0x27ec (correct), ack 6025, win 40600, length 0
  116. 20:02:10.501894 IP (tos 0x0, ttl 254, id 2731, offset 0, flags [none], proto TCP (6), length 135)
  117.     192.168.0.1.80 > 192.168.0.99.18690: Flags [P.], cksum 0x8369 (correct), seq 6025:6120, ack 675, win 1024, length 95: HTTP
  118. 20:02:10.502204 IP (tos 0x0, ttl 254, id 2732, offset 0, flags [none], proto TCP (6), length 1440)
  119.     192.168.0.1.80 > 192.168.0.99.18690: Flags [.], cksum 0xda85 (correct), seq 6120:7520, ack 675, win 1024, length 1400: HTTP
  120. 20:02:10.517874 IP (tos 0x0, ttl 62, id 49421, offset 0, flags [DF], proto TCP (6), length 40)
  121.     192.168.0.99.64206 > 192.168.0.1.80: Flags [.], cksum 0x0784 (correct), ack 1605, win 32200, length 0
  122. 20:02:10.518919 IP (tos 0x0, ttl 254, id 2733, offset 0, flags [none], proto TCP (6), length 1440)
  123.     192.168.0.1.80 > 192.168.0.99.64206: Flags [.], cksum 0xf0f2 (correct), seq 1605:3005, ack 311, win 1024, length 1400: HTTP
  124. 20:02:10.541941 IP (tos 0x0, ttl 62, id 63675, offset 0, flags [DF], proto TCP (6), length 40)
  125.     192.168.0.99.18690 > 192.168.0.1.80: Flags [.], cksum 0x278d (correct), ack 6120, win 40600, length 0
  126. 20:02:10.558440 IP (tos 0x0, ttl 62, id 63676, offset 0, flags [DF], proto TCP (6), length 40)
  127.     192.168.0.99.18690 > 192.168.0.1.80: Flags [.], cksum 0x1725 (correct), ack 7520, win 43400, length 0
  128. 20:02:10.559133 IP (tos 0x0, ttl 254, id 2734, offset 0, flags [none], proto TCP (6), length 1440)
  129.     192.168.0.1.80 > 192.168.0.99.18690: Flags [.], cksum 0x2336 (correct), seq 7520:8920, ack 675, win 1024, length 1400: HTTP
  130. 20:02:10.573444 IP (tos 0x0, ttl 62, id 49422, offset 0, flags [DF], proto TCP (6), length 40)
  131.     192.168.0.99.64206 > 192.168.0.1.80: Flags [.], cksum 0xf71b (correct), ack 3005, win 35000, length 0
  132. 20:02:10.573740 IP (tos 0x0, ttl 254, id 2735, offset 0, flags [none], proto TCP (6), length 135)
  133.     192.168.0.1.80 > 192.168.0.99.64206: Flags [P.], cksum 0x3a67 (correct), seq 3005:3100, ack 311, win 1024, length 95: HTTP
  134. 20:02:10.574171 IP (tos 0x0, ttl 254, id 2736, offset 0, flags [none], proto TCP (6), length 1440)
  135.     192.168.0.1.80 > 192.168.0.99.64206: Flags [.], cksum 0x75c6 (correct), seq 3100:4500, ack 311, win 1024, length 1400: HTTP
  136. 20:02:10.612426 IP (tos 0x0, ttl 62, id 63677, offset 0, flags [DF], proto TCP (6), length 40)
  137.     192.168.0.99.18690 > 192.168.0.1.80: Flags [.], cksum 0x06bd (correct), ack 8920, win 46200, length 0
  138. 20:02:10.612735 IP (tos 0x0, ttl 254, id 2737, offset 0, flags [none], proto TCP (6), length 135)
  139.     192.168.0.1.80 > 192.168.0.99.18690: Flags [P.], cksum 0x7a9e (correct), seq 8920:9015, ack 675, win 1024, length 95: HTTP
  140. 20:02:10.613109 IP (tos 0x0, ttl 254, id 2738, offset 0, flags [none], proto TCP (6), length 1440)
  141.     192.168.0.1.80 > 192.168.0.99.18690: Flags [.], cksum 0xbe1e (correct), seq 9015:10415, ack 675, win 1024, length 1400: HTTP
  142. 20:02:10.614405 IP (tos 0x0, ttl 62, id 49423, offset 0, flags [DF], proto TCP (6), length 40)
  143.     192.168.0.99.64206 > 192.168.0.1.80: Flags [.], cksum 0xf6bc (correct), ack 3100, win 35000, length 0
  144. 20:02:10.629388 IP (tos 0x0, ttl 62, id 49424, offset 0, flags [DF], proto TCP (6), length 40)
  145.     192.168.0.99.64206 > 192.168.0.1.80: Flags [.], cksum 0xe654 (correct), ack 4500, win 37800, length 0
  146. 20:02:10.629943 IP (tos 0x0, ttl 254, id 2739, offset 0, flags [none], proto TCP (6), length 1440)
  147.     192.168.0.1.80 > 192.168.0.99.64206: Flags [.], cksum 0x56c7 (correct), seq 4500:5900, ack 311, win 1024, length 1400: HTTP
  148. 20:02:10.651825 IP (tos 0x0, ttl 62, id 63678, offset 0, flags [DF], proto TCP (6), length 40)
  149.     192.168.0.99.18690 > 192.168.0.1.80: Flags [.], cksum 0x065e (correct), ack 9015, win 46200, length 0
  150. 20:02:10.668640 IP (tos 0x0, ttl 62, id 63679, offset 0, flags [DF], proto TCP (6), length 40)
  151.     192.168.0.99.18690 > 192.168.0.1.80: Flags [.], cksum 0xf5f5 (correct), ack 10415, win 49000, length 0
  152. 20:02:10.669038 IP (tos 0x0, ttl 254, id 2740, offset 0, flags [none], proto TCP (6), length 648)
  153.     192.168.0.1.80 > 192.168.0.99.18690: Flags [P.], cksum 0xf08c (correct), seq 10415:11023, ack 675, win 1024, length 608: HTTP
  154. 20:02:10.685377 IP (tos 0x0, ttl 62, id 49425, offset 0, flags [DF], proto TCP (6), length 40)
  155.     192.168.0.99.64206 > 192.168.0.1.80: Flags [.], cksum 0xd5ec (correct), ack 5900, win 40600, length 0
  156. 20:02:10.685721 IP (tos 0x0, ttl 254, id 2741, offset 0, flags [none], proto TCP (6), length 135)
  157.     192.168.0.1.80 > 192.168.0.99.64206: Flags [P.], cksum 0xf9c1 (correct), seq 5900:5995, ack 311, win 1024, length 95: HTTP
  158. 20:02:10.686242 IP (tos 0x0, ttl 254, id 2742, offset 0, flags [none], proto TCP (6), length 1440)
  159.     192.168.0.1.80 > 192.168.0.99.64206: Flags [.], cksum 0xfff5 (correct), seq 5995:7395, ack 311, win 1024, length 1400: HTTP
  160. 20:02:10.712691 IP (tos 0x0, ttl 62, id 63680, offset 0, flags [DF], proto TCP (6), length 40)
  161.     192.168.0.99.18690 > 192.168.0.1.80: Flags [.], cksum 0xe8a5 (correct), ack 11023, win 51800, length 0
  162. 20:02:10.724017 IP (tos 0x0, ttl 62, id 49426, offset 0, flags [DF], proto TCP (6), length 40)
  163.     192.168.0.99.64206 > 192.168.0.1.80: Flags [.], cksum 0xd58d (correct), ack 5995, win 40600, length 0
  164. 20:02:10.742440 IP (tos 0x0, ttl 62, id 49427, offset 0, flags [DF], proto TCP (6), length 40)
  165.     192.168.0.99.64206 > 192.168.0.1.80: Flags [.], cksum 0xc525 (correct), ack 7395, win 43400, length 0
  166. 20:02:10.743189 IP (tos 0x0, ttl 254, id 2743, offset 0, flags [none], proto TCP (6), length 1440)
  167.     192.168.0.1.80 > 192.168.0.99.64206: Flags [.], cksum 0x99c9 (correct), seq 7395:8795, ack 311, win 1024, length 1400: HTTP
  168. 20:02:10.796322 IP (tos 0x0, ttl 62, id 49428, offset 0, flags [DF], proto TCP (6), length 40)
  169.     192.168.0.99.64206 > 192.168.0.1.80: Flags [.], cksum 0xb4bd (correct), ack 8795, win 46200, length 0
  170. 20:02:10.796655 IP (tos 0x0, ttl 254, id 2744, offset 0, flags [none], proto TCP (6), length 135)
  171.     192.168.0.1.80 > 192.168.0.99.64206: Flags [P.], cksum 0xfd23 (correct), seq 8795:8890, ack 311, win 1024, length 95: HTTP
  172. 20:02:10.797029 IP (tos 0x0, ttl 254, id 2745, offset 0, flags [none], proto TCP (6), length 1440)
  173.     192.168.0.1.80 > 192.168.0.99.64206: Flags [.], cksum 0x222c (correct), seq 8890:10290, ack 311, win 1024, length 1400: HTTP
  174. 20:02:10.835616 IP (tos 0x0, ttl 62, id 49429, offset 0, flags [DF], proto TCP (6), length 40)
  175.     192.168.0.99.64206 > 192.168.0.1.80: Flags [.], cksum 0xb45e (correct), ack 8890, win 46200, length 0
  176. 20:02:10.852593 IP (tos 0x0, ttl 62, id 49430, offset 0, flags [DF], proto TCP (6), length 40)
  177.     192.168.0.99.64206 > 192.168.0.1.80: Flags [.], cksum 0xa3f6 (correct), ack 10290, win 49000, length 0
  178. 20:02:10.853154 IP (tos 0x0, ttl 254, id 2746, offset 0, flags [none], proto TCP (6), length 1440)
  179.     192.168.0.1.80 > 192.168.0.99.64206: Flags [.], cksum 0x14e0 (correct), seq 10290:11690, ack 311, win 1024, length 1400: HTTP
  180. 20:02:10.908721 IP (tos 0x0, ttl 62, id 49431, offset 0, flags [DF], proto TCP (6), length 40)
  181.     192.168.0.99.64206 > 192.168.0.1.80: Flags [.], cksum 0x938e (correct), ack 11690, win 51800, length 0
  182. 20:02:10.909074 IP (tos 0x0, ttl 254, id 2747, offset 0, flags [none], proto TCP (6), length 135)
  183.     192.168.0.1.80 > 192.168.0.99.64206: Flags [P.], cksum 0xf634 (correct), seq 11690:11785, ack 311, win 1024, length 95: HTTP
  184. 20:02:10.909436 IP (tos 0x0, ttl 254, id 2748, offset 0, flags [none], proto TCP (6), length 1440)
  185.     192.168.0.1.80 > 192.168.0.99.64206: Flags [.], cksum 0x5440 (correct), seq 11785:13185, ack 311, win 1024, length 1400: HTTP
  186. 20:02:10.948893 IP (tos 0x0, ttl 62, id 49432, offset 0, flags [DF], proto TCP (6), length 40)
  187.     192.168.0.99.64206 > 192.168.0.1.80: Flags [.], cksum 0x932f (correct), ack 11785, win 51800, length 0
  188. 20:02:10.965677 IP (tos 0x0, ttl 62, id 49433, offset 0, flags [DF], proto TCP (6), length 40)
  189.     192.168.0.99.64206 > 192.168.0.1.80: Flags [.], cksum 0x82c7 (correct), ack 13185, win 54600, length 0
  190. 20:02:10.966190 IP (tos 0x0, ttl 254, id 2749, offset 0, flags [none], proto TCP (6), length 1440)
  191.     192.168.0.1.80 > 192.168.0.99.64206: Flags [.], cksum 0x96b2 (correct), seq 13185:14585, ack 311, win 1024, length 1400: HTTP
  192. 20:02:11.020134 IP (tos 0x0, ttl 62, id 49434, offset 0, flags [DF], proto TCP (6), length 40)
  193.     192.168.0.99.64206 > 192.168.0.1.80: Flags [.], cksum 0x725f (correct), ack 14585, win 57400, length 0
  194. 20:02:11.020497 IP (tos 0x0, ttl 254, id 2750, offset 0, flags [none], proto TCP (6), length 135)
  195.     192.168.0.1.80 > 192.168.0.99.64206: Flags [P.], cksum 0x0401 (correct), seq 14585:14680, ack 311, win 1024, length 95: HTTP
  196. 20:02:11.021017 IP (tos 0x0, ttl 254, id 2751, offset 0, flags [none], proto TCP (6), length 1440)
  197.     192.168.0.1.80 > 192.168.0.99.64206: Flags [.], cksum 0x1a60 (correct), seq 14680:16080, ack 311, win 1024, length 1400: HTTP
  198. 20:02:11.061121 IP (tos 0x0, ttl 62, id 49435, offset 0, flags [DF], proto TCP (6), length 40)
  199.     192.168.0.99.64206 > 192.168.0.1.80: Flags [.], cksum 0x7200 (correct), ack 14680, win 57400, length 0
  200. 20:02:11.076130 IP (tos 0x0, ttl 62, id 49436, offset 0, flags [DF], proto TCP (6), length 40)
  201.     192.168.0.99.64206 > 192.168.0.1.80: Flags [.], cksum 0x6198 (correct), ack 16080, win 60200, length 0
  202. 20:02:11.076786 IP (tos 0x0, ttl 254, id 2752, offset 0, flags [none], proto TCP (6), length 1440)
  203.     192.168.0.1.80 > 192.168.0.99.64206: Flags [.], cksum 0x3985 (correct), seq 16080:17480, ack 311, win 1024, length 1400: HTTP
  204. 20:02:11.131417 IP (tos 0x0, ttl 62, id 49437, offset 0, flags [DF], proto TCP (6), length 40)
  205.     192.168.0.99.64206 > 192.168.0.1.80: Flags [.], cksum 0x5130 (correct), ack 17480, win 63000, length 0
  206. 20:02:11.131950 IP (tos 0x0, ttl 254, id 2753, offset 0, flags [none], proto TCP (6), length 135)
  207.     192.168.0.1.80 > 192.168.0.99.64206: Flags [P.], cksum 0xaf34 (correct), seq 17480:17575, ack 311, win 1024, length 95: HTTP
  208. 20:02:11.172143 IP (tos 0x0, ttl 62, id 49438, offset 0, flags [DF], proto TCP (6), length 40)
  209.     192.168.0.99.64206 > 192.168.0.1.80: Flags [.], cksum 0x50d1 (correct), ack 17575, win 63000, length 0
  210. 20:02:11.172556 IP (tos 0x0, ttl 254, id 2754, offset 0, flags [none], proto TCP (6), length 692)
  211.     192.168.0.1.80 > 192.168.0.99.64206: Flags [P.], cksum 0x1f64 (correct), seq 17575:18227, ack 311, win 1024, length 652: HTTP
  212. 20:02:11.218500 IP (tos 0x0, ttl 62, id 49439, offset 0, flags [DF], proto TCP (6), length 40)
  213.     192.168.0.99.64206 > 192.168.0.1.80: Flags [.], cksum 0x48cd (correct), ack 18227, win 64400, length 0
  214. 20:02:20.729563 IP (tos 0x0, ttl 62, id 63681, offset 0, flags [DF], proto TCP (6), length 40)
  215.     192.168.0.99.18690 > 192.168.0.1.80: Flags [.], cksum 0xe8a6 (correct), ack 11023, win 51800, length 0
  216. 20:02:20.729884 IP (tos 0x0, ttl 254, id 2755, offset 0, flags [none], proto TCP (6), length 40)
  217.     192.168.0.1.80 > 192.168.0.99.18690: Flags [.], cksum 0xaefe (correct), ack 675, win 1024, length 0
  218. 20:02:21.244796 IP (tos 0x0, ttl 62, id 49440, offset 0, flags [DF], proto TCP (6), length 40)
  219.     192.168.0.99.64206 > 192.168.0.1.80: Flags [.], cksum 0x48ce (correct), ack 18227, win 64400, length 0
  220. 20:02:21.245144 IP (tos 0x0, ttl 254, id 2756, offset 0, flags [none], proto TCP (6), length 40)
  221.     192.168.0.1.80 > 192.168.0.99.64206: Flags [.], cksum 0x405e (correct), ack 311, win 1024, length 0
  222. 20:02:30.872399 IP (tos 0x0, ttl 62, id 63682, offset 0, flags [DF], proto TCP (6), length 40)
  223.     192.168.0.99.18690 > 192.168.0.1.80: Flags [.], cksum 0xe8a6 (correct), ack 11023, win 51800, length 0
  224. 20:02:30.872785 IP (tos 0x0, ttl 254, id 2757, offset 0, flags [none], proto TCP (6), length 40)
  225.     192.168.0.1.80 > 192.168.0.99.18690: Flags [.], cksum 0xaefe (correct), ack 675, win 1024, length 0
  226. 20:02:31.385309 IP (tos 0x0, ttl 62, id 49441, offset 0, flags [DF], proto TCP (6), length 40)
  227.     192.168.0.99.64206 > 192.168.0.1.80: Flags [.], cksum 0x48ce (correct), ack 18227, win 64400, length 0
  228. 20:02:31.385645 IP (tos 0x0, ttl 254, id 2758, offset 0, flags [none], proto TCP (6), length 40)
  229.     192.168.0.1.80 > 192.168.0.99.64206: Flags [.], cksum 0x405e (correct), ack 311, win 1024, length 0
  230. 20:02:41.114169 IP (tos 0x0, ttl 62, id 63683, offset 0, flags [DF], proto TCP (6), length 40)
  231.     192.168.0.99.18690 > 192.168.0.1.80: Flags [.], cksum 0xe8a6 (correct), ack 11023, win 51800, length 0
  232. 20:02:41.114514 IP (tos 0x0, ttl 254, id 2759, offset 0, flags [none], proto TCP (6), length 40)
  233.     192.168.0.1.80 > 192.168.0.99.18690: Flags [.], cksum 0xaefe (correct), ack 675, win 1024, length 0
  234. 20:02:41.629343 IP (tos 0x0, ttl 62, id 49442, offset 0, flags [DF], proto TCP (6), length 40)
  235.     192.168.0.99.64206 > 192.168.0.1.80: Flags [.], cksum 0x48ce (correct), ack 18227, win 64400, length 0
  236. 20:02:41.629672 IP (tos 0x0, ttl 254, id 2760, offset 0, flags [none], proto TCP (6), length 40)
  237.     192.168.0.1.80 > 192.168.0.99.64206: Flags [.], cksum 0x405e (correct), ack 311, win 1024, length 0
  238. 20:02:43.104378 IP (tos 0x0, ttl 62, id 49443, offset 0, flags [DF], proto TCP (6), length 552)
  239.     192.168.0.99.64206 > 192.168.0.1.80: Flags [.], cksum 0x88ab (correct), seq 311:823, ack 18227, win 64400, length 512: HTTP, length: 512
  240.     POST /Forms/login_1 HTTP/1.1
  241.     Host: 192.168.0.1
  242.     User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Firefox/60.0
  243.     Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  244.     Accept-Language: it-IT,it;q=0.8,en-US;q=0.5,en;q=0.3
  245.     Accept-Encoding: gzip, deflate
  246.     Referer: http://192.168.0.1/login.html
  247.     Content-Type: application/x-www-form-urlencoded
  248.     Content-Length: 173
  249.     Connection: keep-alive
  250.     Upgrade-Insecure-Requests: 1
  251.    
  252.     Login_Name=admin&Login_Pwd=Ha2S%2BeOKqmzA6nrlmTeh7w%3D%3[!http]
  253. 20:02:43.104804 IP (tos 0x0, ttl 254, id 2761, offset 0, flags [none], proto TCP (6), length 40)
  254.     192.168.0.1.80 > 192.168.0.99.64206: Flags [.], cksum 0x405e (correct), ack 823, win 512, length 0
  255. 20:02:43.104939 IP (tos 0x0, ttl 254, id 2762, offset 0, flags [none], proto TCP (6), length 40)
  256.     192.168.0.1.80 > 192.168.0.99.64206: Flags [.], cksum 0x3e5e (correct), ack 823, win 1024, length 0
  257. 20:02:43.105557 IP (tos 0x0, ttl 62, id 49444, offset 0, flags [DF], proto TCP (6), length 157)
  258.     192.168.0.99.64206 > 192.168.0.1.80: Flags [P.], cksum 0x01bf (correct), seq 823:940, ack 18227, win 64400, length 117: HTTP
  259. 20:02:43.105851 IP (tos 0x0, ttl 254, id 2763, offset 0, flags [none], proto TCP (6), length 40)
  260.     192.168.0.1.80 > 192.168.0.99.64206: Flags [.], cksum 0x3e5e (correct), ack 940, win 907, length 0
  261. 20:02:43.106451 IP (tos 0x0, ttl 254, id 2764, offset 0, flags [none], proto TCP (6), length 40)
  262.     192.168.0.1.80 > 192.168.0.99.64206: Flags [.], cksum 0x3de9 (correct), ack 940, win 1024, length 0
  263. 20:02:43.106807 IP (tos 0x0, ttl 254, id 2765, offset 0, flags [none], proto TCP (6), length 276)
  264.     192.168.0.1.80 > 192.168.0.99.64206: Flags [P.], cksum 0xe7d8 (correct), seq 18227:18463, ack 940, win 1024, length 236: HTTP, length: 236
  265.     HTTP/1.1 303 See Other
  266.     Location: http://192.168.0.1/wan.html
  267.     Content-Length: 0
  268.     Server: RomPager/4.07 UPnP/1.0
  269.     Set-Cookie: C0=21232f297a57a5a743894a0e4a801fc3; path=/
  270.     Set-Cookie: C1=21232f297a57a5a743894a0e4a801fc3; path=/
  271.     EXT:
RAW Paste Data
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy. OK, I Understand
 
Top