This is a preview. You must login to view/edit this pcap.

O 1. 192.168.2.100 » 192.168.2.25 modbus/tcp query [ 1 pkt(s)]: trans: 0; unit: 255, func: 1: Read coils.
O 2. 192.168.2.25 » 192.168.2.100 modbus/tcp response [ 1 pkt(s)]: trans: 0; unit: 255, func: 1: Read coils.
O 3. 192.168.2.100 » 192.168.2.25 tcp 1163 > 502 [ACK] Seq=13 Ack=11 Win=65315 Len=0
O 4. 192.168.2.100 » 192.168.2.25 modbus/tcp query [ 1 pkt(s)]: trans: 0; unit: 255, func: 1: Read coils.
O 5. 192.168.2.25 » 192.168.2.100 tcp 502 > 1163 [ACK] Seq=11 Ack=25 Win=4096 Len=0

Here are some of things that registered users can do with this pcap:

  • Reorder packets
  • Fragment packets
  • Reassemble TCP streams
  • Rewrite TCP streams (over IPv4 and IPv6)
  • Extract embedded HTTP content
  • Convert any packet into a DoS generator