This is a preview. You must login to view/edit this pcap.

O 1. 10.0.2.102 » 192.168.26.130 smb Close Request, FID: 0x180a
O 2. 00:0c:29:6c:bc:6d » ff:ff:ff:ff:ff:ff arp Who has 192.168.26.1? Tell 192.168.26.130
O 3. 00:50:56:c0:00:01 » 00:0c:29:6c:bc:6d arp 192.168.26.1 is at 00:50:56:c0:00:01
O 4. 192.168.26.130 » 10.0.2.102 smb Close Response
O 5. 10.0.2.102 » 192.168.26.130 tcp 1026 > 139 [ACK] Seq=46 Ack=40 Win=65496 Len=0

Here are some of things that registered users can do with this pcap:

  • Reorder packets
  • Fragment packets
  • Reassemble TCP streams
  • Rewrite TCP streams (over IPv4 and IPv6)
  • Extract embedded HTTP content
  • Convert any packet into a DoS generator