This is a preview. You must login to view/edit this pcap.

O 1. 00:04:23:d0:8f:5e » ff:ff:ff:ff:ff:ff arp Who has 172.16.50.1? Tell 172.16.2.1
O 2. 00:04:23:d0:9c:b6 » 00:04:23:d0:8f:5e arp 172.16.50.1 is at 00:04:23:d0:9c:b6
O 3. 172.16.2.1 » 172.16.50.1 tcp 33064 > 80 [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=10180410 TSER=0 WS=10
O 4. 172.16.50.1 » 172.16.2.1 tcp 80 > 33064 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=10180412 TSER=10180410 WS=10
O 5. 172.16.2.1 » 172.16.50.1 tcp 33064 > 80 [ACK] Seq=1 Ack=1 Win=6144 Len=0 TSV=10180412 TSER=10180412

Here are some of things that registered users can do with this pcap:

  • Reorder packets
  • Fragment packets
  • Reassemble TCP streams
  • Rewrite TCP streams (over IPv4 and IPv6)
  • Extract embedded HTTP content
  • Convert any packet into a DoS generator