This repository has been archived on 2025-04-28. You can view files and clone it, but cannot push or open issues or pull requests.
netsec-djw2/hw2/t3.md
David Westgate a6dbeceeba hw2
2024-04-27 14:50:19 -07:00

220 lines
15 KiB
Markdown

```
1714254316.558048 eth0 In IP (tos 0x0, ttl 64, id 4247, offset 0, flags [none], proto UDP (17), length 1385)
sea30s01-in-f3.1e100.net.https > 10.0.2.15.34445: UDP, length 1357
0x0000: 0800 0000 0000 0002 0001 0006 5254 0012 ............RT..
0x0010: 3502 0000 4500 0569 1097 0000 4011 9d42 5...E..i....@..B
0x0020: acd9 0ec3 0a00 020f 01bb 868d 0555 e4ac .............U..
0x0030: ce00 0000 0103 f2a6 0d08 f31e ab68 d326 .............h.&
0x0040: 84ab 0044 02f2 7175 4bab 6b76 cf99 8811 ...D..quK.kv....
0x0050: 067c 5e40 72ef b138 8470 5659 87de f08a .|^@r..8.pVY....
0x0060: 01bb bb92 198b 4b51 1d0e 2336 3750 2292 ......KQ..#67P".
0x0070: 6e01 6a1f 9b8f 7550 5b94 de81 65d7 6517 n.j...uP[...e.e.
0x0080: ff73 c171 119b 2fd7 2f43 3c2e e4c7 6480 .s.q.././C<...d.
0x0090: a2ff af8b ed42 b215 f57f f5f2 72af 9992 .....B......r...
0x00a0: 8fb2 ea97 0127 3b2b 02b2 aae6 83c4 e9a8 .....';+........
0x00b0: f095 643a f301 b9b8 e493 6489 c38e e446 ..d:......d....F
0x00c0: 0da4 25fc bce3 0f9c a25f 8749 fa5b a06d ..%......_.I.[.m
0x00d0: ce01 973e 114b acbb 8fe2 ecea 595f 6399 ...>.K......Y_c.
0x00e0: 0fec 7da2 66cc 38ed 8205 53d6 9937 9b0b ..}.f.8...S..7..
0x00f0: 53d9 5773 f7eb d433 0290 da80 fc8b 4376 S.Ws...3......Cv
0x0100: 801b 2bed e4d8 1bc1 ff4d e7f4 0048 b7d1 ..+......M...H..
0x0110: ed47 5240 69f0 81e9 3e08 4908 f544 021f .GR@i...>.I..D..
0x0120: e5ad e281 72d5 6b4e aee1 a4c4 cf53 bce2 ....r.kN.....S..
0x0130: db59 2c23 f450 e4a3 d3ac e848 fc12 203e .Y,#.P.....H...>
0x0140: f9bd ace7 e7bf d0b0 b468 842f 4162 cc57 .........h./Ab.W
0x0150: 222f 7854 40f5 fe7d c9a4 0100 1d31 b066 "/xT@..}.....1.f
0x0160: ede2 0e29 3406 385a b91a def1 c991 46e2 ...)4.8Z......F.
0x0170: f92a 61e3 0afa 3a8a 56a7 5417 64a8 104f .*a...:.V.T.d..O
0x0180: 7b30 d22c 1489 f82b 52a7 837a 4c26 a08d {0.,...+R..zL&..
0x0190: e5be 5886 69ca 38f7 cda3 498a e69d 6404 ..X.i.8...I...d.
0x01a0: 7817 0a64 0ff1 7d92 3412 6de9 04ef 7c6e x..d..}.4.m...|n
0x01b0: 0fde 5c41 de73 8b0d 3d90 5e0d d492 7cb1 ..\A.s..=.^...|.
0x01c0: 4f0c f63c 73e4 238f ed7b a833 47c5 8355 O..<s.#..{.3G..U
0x01d0: 67ca da78 c1fb d304 8cca 623b 405e 5c15 g..x......b;@^\.
0x01e0: a650 0520 762d 8191 8272 b77c 62ad 2c92 .P..v-...r.|b.,.
0x01f0: 613d b4f7 7a71 f6bf c75b e521 f517 1265 a=..zq...[.!...e
0x0200: f336 100e 1919 e4fd 5288 49c3 d8a4 c8a6 .6......R.I.....
0x0210: 71cf c455 33f2 9b29 5880 4530 f3bd 2a41 q..U3..)X.E0..*A
0x0220: fb86 78ad 95b5 0c8f 5b30 f278 de40 6963 ..x.....[0.x.@ic
0x0230: 9455 94e1 2dab 46bf 899e 5685 9358 bd0f .U..-.F...V..X..
0x0240: 2c10 1f90 455e e37d 3a12 5793 d834 3be1 ,...E^.}:.W..4;.
0x0250: 3916 cd51 d4b9 d968 7d39 7455 31cb 5c8a 9..Q...h}9tU1.\.
0x0260: 9794 450a 73d0 1840 51e1 2832 fe91 d1ca ..E.s..@Q.(2....
0x0270: 69b6 b2d3 4acf 68fa ccbe a4fd 5365 d3cf i...J.h.....Se..
0x0280: 7909 53f0 0e24 69be dd7d a0c4 4e3b f160 y.S..$i..}..N;.`
0x0290: 9335 5447 4f4a 59f9 a22c afe5 727b e4da .5TGOJY..,..r{..
0x02a0: 2ee1 d816 c14a f92e 6095 69c9 5c8e 2ef1 .....J..`.i.\...
0x02b0: 1ea2 a8fe a6a0 a718 cfd6 c983 ecd4 fba7 ................
0x02c0: 5a1f 15a9 3b08 e04d f212 3d60 aab4 d1ef Z...;..M..=`....
0x02d0: 6e71 4eb0 fc4a 9e66 eecf 0d8d 8629 4e2a nqN..J.f.....)N*
0x02e0: 279e 7e3d c876 f7db 9ba1 cb15 9729 224c '.~=.v.......)"L
0x02f0: d4ef 76d6 452e fe67 8d00 4bf2 6a29 2dbd ..v.E..g..K.j)-.
0x0300: 8ac3 1ec6 dbb8 be2f 33ee af43 538f 064c ......./3..CS..L
0x0310: b30f e471 54fd 8730 7905 93e2 aaa1 79ec ...qT..0y.....y.
0x0320: ca9b bd72 5760 5f98 5f2d 4f72 4709 a8e3 ...rW`_._-OrG...
0x0330: b0f6 c1eb d71d ae31 c6e1 1edb c8d3 8672 .......1.......r
0x0340: e595 e4aa b638 8318 3081 a446 e106 7f71 .....8..0..F...q
0x0350: b76d 2431 e109 033c 8b51 4e9e e57f e4b6 .m$1...<.QN.....
0x0360: 51cd 8ca0 6d57 fec8 a3e4 d429 fd63 ff6e Q...mW.....).c.n
0x0370: 20a7 4853 81e4 7770 85e0 85ec 6062 1394 ..HS..wp....`b..
0x0380: c850 c896 9568 737d 079a 6dfe c281 522b .P...hs}..m...R+
0x0390: d00e 74a9 3ebd 3926 f871 9355 b0a1 8191 ..t.>.9&.q.U....
0x03a0: 9014 ce57 8432 45cf 4ae9 a049 739b 7313 ...W.2E.J..Is.s.
0x03b0: ba12 0cb4 22c4 c966 f6f9 6cd4 06fa 3b91 ...."..f..l...;.
0x03c0: 8911 1acc 9dc1 f253 820c 222e af6e 1487 .......S.."..n..
0x03d0: 7ad3 3dd5 9c0b 2d77 c1de 1801 f7b9 5729 z.=...-w......W)
0x03e0: 6c75 5d45 cf1f ebc8 57a8 0cb9 6562 66ce lu]E....W...ebf.
0x03f0: 5caa 4047 97c6 3678 d423 b329 d873 016c \.@G..6x.#.).s.l
0x0400: 00a7 758c 2414 ea61 dd7e e96b f994 8707 ..u.$..a.~.k....
0x0410: 05a1 6979 3212 c989 206e 49d9 8942 789c ..iy2....nI..Bx.
0x0420: 4bb5 7b34 f359 c439 d511 f6c4 1afe aa31 K.{4.Y.9.......1
0x0430: bbca d56e b0b8 e065 377e 1779 1f79 dc8c ...n...e7~.y.y..
0x0440: 56df 0ee5 f483 ecea 0000 0001 03f2 a60d V...............
0x0450: 08f3 1eab 68d3 2684 ab40 dd08 6c36 6c5a ....h.&..@..l6lZ
0x0460: 7f64 e00a 53a4 3bb7 1f4a ea72 6011 f830 .d..S.;..J.r`..0
0x0470: 8601 9ed8 9afc c60b 8adc 0622 e347 c967 ...........".G.g
0x0480: cbe0 67d8 fdaa 2975 692b f930 ff5e 431a ..g...)ui+.0.^C.
0x0490: c897 f26e ffc2 48dd 773a 18f2 24da 3368 ...n..H.w:..$.3h
0x04a0: 6bc3 93bd 2367 b101 6a14 bd97 27ae 27c0 k...#g..j...'.'.
0x04b0: e5a2 ef4a 3308 aa78 af83 0666 d69d 4cf2 ...J3..x...f..L.
0x04c0: 7113 2e91 e7c9 3d4c 096f 4bc6 6b08 c71b q.....=L.oK.k...
0x04d0: 1ec3 a3c0 f41c 1369 c003 806c cb39 d250 .......i...l.9.P
0x04e0: df68 9e08 b3aa 6518 b285 e137 9d44 006a .h....e....7.D.j
0x04f0: 5d38 6582 5717 4641 6214 65e1 9f32 2889 ]8e.W.FAb.e..2(.
0x0500: d1fc 469a b875 0be6 a96f e88b fed3 3717 ..F..u...o....7.
0x0510: 8219 a65f 7880 7a9d 5b4d 5bea 380a 02d0 ..._x.z.[M[.8...
0x0520: bce2 27ba 9f1c 0feb a26f a205 9e99 0b2a ..'......o.....*
0x0530: bbb8 d7c0 b294 5782 5af2 a60d 918a 6cfc ......W.Z.....l.
0x0540: ff82 2b9a 5848 7388 f625 1c3a da6c 968d ..+.XHs..%.:.l..
0x0550: 970c b1b1 7f1c bcff 68a6 8334 7fbb 809d ........h..4....
0x0560: 15fa 581a 0176 281c 740c aa0e ab44 717e ..X..v(.t....Dq~
0x0570: 1221 9487 b404 41b2 2b29 3b8a c6 .!....A.+);..
1714254316.558108 eth0 In IP (tos 0x0, ttl 64, id 4248, offset 0, flags [none], proto UDP (17), length 643)
sea30s01-in-f3.1e100.net.https > 10.0.2.15.34445: UDP, length 615
0x0000: 0800 0000 0000 0002 0001 0006 5254 0012 ............RT..
0x0010: 3502 0000 4500 0283 1098 0000 4011 a027 5...E.......@..'
0x0020: acd9 0ec3 0a00 020f 01bb 868d 026f 1655 .............o.U
0x0030: 41f2 a60d 2871 a44f db08 f3e0 2860 fcff A...(q.O....(`..
0x0040: 03bf 6ac6 5c78 9a8f 6222 318b 6a7c f41b ..j.\x..b"1.j|..
0x0050: 0ec0 1aeb 441e 6f39 91ab 0120 cd6f 8f43 ....D.o9.....o.C
0x0060: f0a5 a8c5 77b5 0144 afa3 a4f5 82b7 d5d4 ....w..D........
0x0070: 9bb7 c357 76f0 6ce6 d2c3 1b3e 547b 6b6f ...Wv.l....>T{ko
0x0080: aae0 0bb4 1cc3 2f9e 2749 c69a 6d73 1b5f ....../.'I..ms._
0x0090: ed26 87e9 f7e8 bbca e007 a3d0 a862 9fbd .&...........b..
0x00a0: 5409 fa68 07c2 57e2 60e5 e5c5 de2c d33f T..h..W.`....,.?
0x00b0: 64d0 7b3f 99af 0e07 13ad 43db d048 fcce d.{?......C..H..
0x00c0: a4d0 c2c2 4284 e280 cc44 c29d 3314 3945 ....B....D..3.9E
0x00d0: 1a70 040b 96fc 9122 9497 f054 5300 552c .p....."...TS.U,
0x00e0: 15c4 e5a1 3b5c 61cd 7157 9d09 1d2e 19ae ....;\a.qW......
0x00f0: c009 1d61 be19 1ac9 5736 2239 cbbb ca5f ...a....W6"9..._
0x0100: b61b 581d d399 a637 52bc 31cc 76ab 6f10 ..X....7R.1.v.o.
0x0110: 4df6 1af2 5ecf cb79 4d71 4a07 f733 2a87 M...^..yMqJ..3*.
0x0120: 2243 b8a8 d803 b2bc d249 0bd1 9ca3 4305 "C.......I....C.
0x0130: f463 580a 4d0c 61d8 2078 4d6d ae09 ad24 .cX.M.a..xMm...$
0x0140: 7342 985b a634 1d01 106f 230a cbf3 ee3c sB.[.4...o#....<
0x0150: 93e2 410a b3fc 68c4 60ce 467a 7ad2 92eb ..A...h.`.Fzz...
0x0160: 9448 cbcf b722 feb6 5692 177f e622 4f4b .H..."..V...."OK
0x0170: 69c3 fb73 c918 8a03 8824 eb0b c603 884c i..s.....$.....L
0x0180: 650f c9c1 0715 e3a0 4465 f379 7e0b bd2d e.......De.y~..-
0x0190: de30 3fb3 c21b 2ef3 261d 2d5e 4bcc 58c4 .0?.....&.-^K.X.
0x01a0: fa32 892b 84a2 f248 07a7 7a62 39e8 cc65 .2.+...H..zb9..e
0x01b0: aeab 84a4 cbf5 8aa0 b9e5 19b3 ac8c 57a2 ..............W.
0x01c0: bed5 bb77 dd2a 03a8 b903 6ea1 9545 506e ...w.*....n..EPn
0x01d0: 9601 07a7 a9ef f8ff ffe0 6753 6cf6 9078 ..........gSl..x
0x01e0: 4e4f 9338 53a1 e061 9ac3 b60c 3789 7f45 NO.8S..a....7..E
0x01f0: 3459 0f7a dcdd bf28 7e6d 6234 6a8f 9329 4Y.z...(~mb4j..)
0x0200: e734 75f6 93df 5c21 a3c2 02b4 18d0 ce5b .4u...\!.......[
0x0210: 318d 9829 c576 8c16 7d08 857e 217a 0571 1..).v..}..~!z.q
0x0220: 722f 567a 15f9 4961 4e60 36b1 be19 ff20 r/Vz..IaN`6.....
0x0230: ebe7 24de 79a8 3d73 cb09 162b eaa7 cb0b ..$.y.=s...+....
0x0240: 364e 4667 cc8e 0984 2932 97f7 7ae1 cd6e 6NFg....)2..z..n
0x0250: 4bd3 c286 13a6 dd0d 0093 5556 05cc 976e K.........UV...n
0x0260: cca2 dff2 8bd8 c881 85b2 b2a3 4f06 e8bd ............O...
0x0270: ef3d 81d7 dab4 5114 0ca4 b481 490c 5676 .=....Q.....I.Vv
0x0280: 6e7f b88b fdf6 f0d9 77f8 02e0 1d5d c7cd n.......w....]..
0x0290: 1e30 4a8d 8f94 85 .0J....
1714254316.564957 eth0 In IP (tos 0x0, ttl 64, id 4249, offset 0, flags [none], proto UDP (17), length 157)
sea30s01-in-f3.1e100.net.https > 10.0.2.15.34445: UDP, length 129
0x0000: 0800 0000 0000 0002 0001 0006 5254 0012 ............RT..
0x0010: 3502 0000 4500 009d 1099 0000 4011 a20c 5...E.......@...
0x0020: acd9 0ec3 0a00 020f 01bb 868d 0089 bd88 ................
0x0030: 5ff2 a60d e917 0419 2aeb ae64 e88f 2ebd _.......*..d....
0x0040: 27e1 0011 ab82 e5b2 8f78 fb95 0ca0 8b09 '........x......
0x0050: 1834 0872 ea3b 7a80 e14f 54f5 8daf 5aa4 .4.r.;z..OT...Z.
0x0060: 9294 92ac 6a59 2cbe f702 597c 7f76 de51 ....jY,...Y|.v.Q
0x0070: a401 d9bf fd8f 7b36 9a8a 6c32 e526 4810 ......{6..l2.&H.
0x0080: d54b a65f e328 3fe1 37c0 7d6c ecee a7ae .K._.(?.7.}l....
0x0090: 38a7 0013 5dde 320c b220 7851 21eb b051 8...].2...xQ!..Q
0x00a0: ad12 35c1 2047 cbe2 b6f8 2826 27cd 04dc ..5..G....(&'...
0x00b0: 70 p
1714254317.554248 eth0 In IP (tos 0x0, ttl 64, id 4294, offset 0, flags [none], proto UDP (17), length 86)
10.0.2.3.domain > 10.0.2.15.33426: 13745 1/0/0 www.googletagmanager.com. A 142.251.33.72 (58)
0x0000: 0800 0000 0000 0002 0001 0006 5254 0012 ............RT..
0x0010: 3502 0000 4500 0056 10c6 0000 4011 51c0 5...E..V....@.Q.
0x0020: 0a00 0203 0a00 020f 0035 8292 0042 8dcb .........5...B..
0x0030: 35b1 8180 0001 0001 0000 0000 0377 7777 5............www
0x0040: 1067 6f6f 676c 6574 6167 6d61 6e61 6765 .googletagmanage
0x0050: 7203 636f 6d00 0001 0001 c00c 0001 0001 r.com...........
0x0060: 0000 0091 0004 8efb 2148 ........!H
1714254317.554276 eth0 In IP (tos 0x0, ttl 64, id 4295, offset 0, flags [none], proto UDP (17), length 98)
10.0.2.3.domain > 10.0.2.15.33426: 51377 1/0/0 www.googletagmanager.com. AAAA 2607:f8b0:400a:806::2008 (70)
0x0000: 0800 0000 0000 0002 0001 0006 5254 0012 ............RT..
0x0010: 3502 0000 4500 0062 10c7 0000 4011 51b3 5...E..b....@.Q.
0x0020: 0a00 0203 0a00 020f 0035 8292 004e 23d6 .........5...N#.
0x0030: c8b1 8180 0001 0001 0000 0000 0377 7777 .............www
0x0040: 1067 6f6f 676c 6574 6167 6d61 6e61 6765 .googletagmanage
0x0050: 7203 636f 6d00 001c 0001 c00c 001c 0001 r.com...........
0x0060: 0000 009f 0010 2607 f8b0 400a 0806 0000 ......&...@.....
0x0070: 0000 0000 2008 ......
1714254318.343893 eth0 In IP (tos 0x0, ttl 64, id 4658, offset 0, flags [none], proto TCP (6), length 44)
a104-70-127-13.deploy.static.akamaitechnologies.com.https > 10.0.2.15.34136: Flags [S.], cksum 0x37e4 (correct), seq 190976001, ack 4000635876, win 65535, options [mss 1460], length 0
0x0000: 0800 0000 0000 0002 0001 0006 5254 0012 ............RT..
0x0010: 3502 0000 4500 002c 1232 0000 4006 7538 5...E..,.2..@.u8
0x0020: 6846 7f0d 0a00 020f 01bb 8558 0b62 1001 hF.........X.b..
0x0030: ee74 dbe4 6012 ffff 37e4 0000 0204 05b4 .t..`...7.......
0x0040: 0000 ..
1714254318.344841 eth0 In IP (tos 0x0, ttl 64, id 4659, offset 0, flags [none], proto TCP (6), length 40)
a104-70-127-13.deploy.static.akamaitechnologies.com.https > 10.0.2.15.34136: Flags [.], cksum 0x4cf6 (correct), ack 684, win 65535, length 0
0x0000: 0800 0000 0000 0002 0001 0006 5254 0012 ............RT..
0x0010: 3502 0000 4500 0028 1233 0000 4006 753b 5...E..(.3..@.u;
0x0020: 6846 7f0d 0a00 020f 01bb 8558 0b62 1002 hF.........X.b..
0x0030: ee74 de8f 5010 ffff 4cf6 0000 0000 0000 .t..P...L.......
0x0040: 0000 ..
1714254318.351551 eth0 In IP (tos 0x0, ttl 64, id 4660, offset 0, flags [none], proto TCP (6), length 304)
a104-70-127-13.deploy.static.akamaitechnologies.com.https > 10.0.2.15.34136: Flags [P.], cksum 0xa8b1 (correct), seq 1:265, ack 684, win 65535, length 264
0x0000: 0800 0000 0000 0002 0001 0006 5254 0012 ............RT..
0x0010: 3502 0000 4500 0130 1234 0000 4006 7432 5...E..0.4..@.t2
0x0020: 6846 7f0d 0a00 020f 01bb 8558 0b62 1002 hF.........X.b..
0x0030: ee74 de8f 5018 ffff a8b1 0000 1603 0300 .t..P...........
0x0040: 8002 0000 7c03 0312 bfa2 bf23 d972 256f ....|......#.r%o
0x0050: fe18 a1be 4b0e f895 89be ac10 e7a8 5dfa ....K.........].
0x0060: 95a0 f782 9742 8020 dc8f 4f02 c646 249e .....B....O..F$.
0x0070: 4d68 d3a4 663d dff0 f2fb bab2 a79c 296d Mh..f=........)m
0x0080: f954 f5bf f503 414c 1302 0000 3400 2b00 .T....AL....4.+.
0x0090: 0203 0400 3300 2400 1d00 20d1 e36c 57c7 ....3.$......lW.
0x00a0: 8781 356c d2e6 55e8 ba83 fd4d 1196 e88b ..5l..U....M....
0x00b0: 0e97 49da 5223 bb84 3846 6d00 2900 0200 ..I.R#..8Fm.)...
0x00c0: 0014 0303 0001 0117 0303 002e 9b5a 5a26 .............ZZ&
0x00d0: 87ae 2093 6f99 beea bc25 7091 78bf e262 ....o....%p.x..b
0x00e0: 56cb c257 9ec2 0207 8bfc 3063 5fe9 ff9e V..W......0c_...
0x00f0: fa4d 3723 d2ba 85cf 6f7b 1703 0300 455f .M7#....o{....E_
0x0100: 6101 2a9b 0062 831c afbf 097b b431 ad7b a.*..b.....{.1.{
0x0110: 3968 ab9c 007d 7b1f a690 bfc8 af31 752f 9h...}{......1u/
0x0120: 3d54 0d58 76ae 736c f81b 45f5 4702 668c =T.Xv.sl..E.G.f.
0x0130: 9209 b73c c159 c9ea 457a 14dc 1fdb 56d9 ...<.Y..Ez....V.
0x0140: 7da0 eee4 }...
1714254318.352141 eth0 In IP (tos 0x0, ttl 64, id 4661, offset 0, flags [none], proto TCP (6), length 40)
a104-70-127-13.deploy.static.akamaitechnologies.com.https > 10.0.2.15.34136: Flags [.], cksum 0x4b9e (correct), ack 764, win 65535, length 0
0x0000: 0800 0000 0000 0002 0001 0006 5254 0012 ............RT..
0x0010: 3502 0000 4500 0028 1235 0000 4006 7539 5...E..(.5..@.u9
0x0020: 6846 7f0d 0a00 020f 01bb 8558 0b62 110a hF.........X.b..
0x0030: ee74 dedf 5010 ffff 4b9e 0000 0000 0000 .t..P...K.......
0x0040: 0000 ..
1714254318.352216 eth0 In IP (tos 0x0, ttl 64, id 4662, offset 0, flags [none], proto TCP (6), length 40)
a104-70-127-13.deploy.static.akamaitechnologies.com.https > 10.0.2.15.34136: Flags [.], cksum 0x4af4 (correct), ack 934, win 65535, length 0
0x0000: 0800 0000 0000 0002 0001 0006 5254 0012 ............RT..
0x0010: 3502 0000 4500 0028 1236 0000 4006 7538 5...E..(.6..@.u8
0x0020: 6846 7f0d 0a00 020f 01bb 8558 0b62 110a hF.........X.b..
0x0030: ee74 df89 5010 ffff 4af4 0000 0000 0000 .t..P...J.......
0x0040: 0000 ..
```